{
  "SPDXID": "SPDXRef-DOCUMENT",
  "name": "libxmlb-0.0.3.14-1.oe2403sp4.aarch64.rpm",
  "spdxVersion": "SPDX-2.2",
  "creationInfo": {
    "created": "2026-07-04T04:28:12.092529219Z",
    "creators": [
      "openeuler_creator"
    ]
  },
  "dataLicense": "CC0-1.0",
  "documentNamespace": "https://sbom.openEuler.org/libxmlb-0.0.3.14-1.oe2403sp4.aarch64.rpm",
  "packages": [
    {
      "SPDXID": "SPDXRef-rpm-libxmlb-0.3.14",
      "name": "libxmlb",
      "licenseConcluded": "LGPLv2+",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "c3f303dea86066cb93ab28a849eb909e2e4aa213a6cbb8f4d63189b76524846c"
        }
      ],
      "description": "XML is slow to parse and strings inside the document cannot be memory mapped as they do not have\na trailing NUL char. The libxmlb library takes XML source, and converts it to a structured binary\nrepresentation with a deduplicated string table -- where the strings have the NULs included.\n\nThis allows an application to mmap the binary XML file, do an XPath query and return some strings\nwithout actually parsing the entire document. This is all done using (almost) zero allocations and\nno actual copying of the binary data.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/libxmlb@0.3.14-1.oe2403sp4?arch=aarch64&epoch=0&upstream=libxmlb-0.3.14-1.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://github.com/hughsie/libxmlb",
      "licenseDeclared": "LGPLv2+",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "A library to help create and query binary XML blobs",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:0.3.14-1.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-glib2-2.78.3",
      "name": "glib2",
      "licenseConcluded": "LGPLv2+",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "b63377dbcdc318afd72ce4efc4a5963337cfbc722f50f51f300eac3ebb2a793a"
        }
      ],
      "description": "GLib is a bundle of three (formerly five) low-level system libraries\nwritten in C and developed mainly by GNOME. GLib's code was separated\nfrom GTK, so it can be used by software other than GNOME and has been\ndeveloped in parallel ever since.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/glib2@2.78.3-16.oe2403sp4?arch=aarch64&epoch=0&upstream=glib2-2.78.3-16.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://www.gtk.org",
      "licenseDeclared": "LGPLv2+",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "The core library that forms the basis for projects such as GTK+ and GNOME",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.78.3-16.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-glibc-2.38",
      "name": "glibc",
      "licenseConcluded": "LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net-2.0 and ISC and Public Domain and GFDL-1.3-only",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "972f6f0ead2fbc0f525623aa566baec969734e89308b0c92aa05a9f8d3c7299f"
        }
      ],
      "description": "The GNU C Library project provides the core libraries for the GNU system and\nGNU/Linux systems, as well as many other systems that use Linux as the kernel.\nThese libraries provide critical APIs including ISO C11, POSIX.1-2008, BSD,\nOS-specific APIs and more. These APIs include such foundational facilities as\nopen, read, write, malloc, printf, getaddrinfo, dlopen, pthread_create, crypt,\n login, exit and more.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/glibc@2.38-107.oe2403sp4?arch=aarch64&epoch=0&upstream=glibc-2.38-107.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.gnu.org/software/glibc/",
      "licenseDeclared": "LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net-2.0 and ISC and Public Domain and GFDL-1.3-only",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "The GNU libc libraries",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.38-107.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-gobject-introspection-1.76.1",
      "name": "gobject-introspection",
      "licenseConcluded": "GPLv2+ and LGPLv2+ and MIT",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "800b84df3ebdb3e6bcd28c0cf7bb8319b3bb4e2d25a090579a26f07fff68ba4e"
        }
      ],
      "description": "GObject Introspection can scan C header and source files in order to\ngenerate introspection \"typelib\" files.  It also provides an API to examine\ntypelib files, useful for creating language bindings among other\nthings.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/gobject-introspection@1.76.1-4.oe2403sp4?arch=aarch64&epoch=0&upstream=gobject-introspection-1.76.1-4.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://wiki.gnome.org/Projects/GObjectIntrospection",
      "licenseDeclared": "GPLv2+ and LGPLv2+ and MIT",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "Introspection system for GObject-based libraries",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.76.1-4.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-shared-mime-info-2.4",
      "name": "shared-mime-info",
      "licenseConcluded": "GPL-2.0-or-later",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "0533a4519dabb6116aa0d23396cb2f3e2d57757bbbd63e69afe5bd9d5a6c91cb"
        }
      ],
      "description": "The shared-mime-info package contains the core database of common types\nand the update-mime-database command used to extend it. It requires\nglib2 to be installed for building the update command. Additionally, it\nuses intltool for translations, though this is only a dependency for\nthe maintainers.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/shared-mime-info@2.4-2.oe2403sp4?arch=aarch64&epoch=0&upstream=shared-mime-info-2.4-2.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://freedesktop.org/wiki/Software/shared-mime-info/",
      "licenseDeclared": "GPL-2.0-or-later",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "Shared MIME information database",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.4-2.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-xz-libs-5.4.7",
      "name": "xz-libs",
      "licenseConcluded": "GPL-3.0-only",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "313451ad4dd6bf292293a7671dbd9f1ed286b83d19e6a44495b36550d9ac9481"
        }
      ],
      "description": "Libraries for decoding files compressed with LZMA or XZ utils.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/xz-libs@5.4.7-8.oe2403sp4?arch=aarch64&epoch=0&upstream=xz-5.4.7-8.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://tukaani.org/xz",
      "licenseDeclared": "GPL-3.0-only",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "Libraries for xz",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:5.4.7-8.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-zstd-1.5.5",
      "name": "zstd",
      "licenseConcluded": "BSD and GPLv2",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "d5fab9f7f7896f15b7af22851ef60dd515d16c831ff3a517600732f09adf8593"
        }
      ],
      "description": "Zstd is a fast lossless compression algorithm. It's backed by a very fast entropy stage,\nprovided by Huff0 and FSE library. It's a real-time compression scenario for zlib levels\nand has a better compression ratio.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/zstd@1.5.5-4.oe2403sp4?arch=aarch64&epoch=0&upstream=zstd-1.5.5-4.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://github.com/facebook/zstd",
      "licenseDeclared": "BSD and GPLv2",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "A fast lossless compression algorithm",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.5.5-4.oe2403sp4"
    }
  ],
  "relationships": [
    {
      "spdxElementId": "SPDXRef-rpm-libxmlb-0.3.14",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-glib2-2.78.3"
    },
    {
      "spdxElementId": "SPDXRef-rpm-libxmlb-0.3.14",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-glibc-2.38"
    },
    {
      "spdxElementId": "SPDXRef-rpm-libxmlb-0.3.14",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-gobject-introspection-1.76.1"
    },
    {
      "spdxElementId": "SPDXRef-rpm-libxmlb-0.3.14",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-shared-mime-info-2.4"
    },
    {
      "spdxElementId": "SPDXRef-rpm-libxmlb-0.3.14",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-xz-libs-5.4.7"
    },
    {
      "spdxElementId": "SPDXRef-rpm-libxmlb-0.3.14",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-zstd-1.5.5"
    }
  ]
}