{
  "SPDXID": "SPDXRef-DOCUMENT",
  "name": "rbd-fuse-2.18.2.2-12.oe2403sp4.aarch64.rpm",
  "spdxVersion": "SPDX-2.2",
  "creationInfo": {
    "created": "2026-07-04T04:28:12.092529219Z",
    "creators": [
      "openeuler_creator"
    ]
  },
  "dataLicense": "CC0-1.0",
  "documentNamespace": "https://sbom.openEuler.org/rbd-fuse-2.18.2.2-12.oe2403sp4.aarch64.rpm",
  "packages": [
    {
      "SPDXID": "SPDXRef-rpm-rbd-fuse-18.2.2",
      "name": "rbd-fuse",
      "licenseConcluded": "LGPL-2.1 and LGPL-3.0 and CC-BY-SA-3.0 and GPL-2.0 and BSL-1.0 and BSD-3-Clause and MIT",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "415e7f9db2972a1f14477914c7dd0f1773ebbfb3606fae8e4a8c01b94a2d59cc"
        }
      ],
      "description": "FUSE based client to map Ceph rbd images to files",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/rbd-fuse@18.2.2-12.oe2403sp4?arch=aarch64&epoch=2&upstream=ceph-18.2.2-12.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://ceph.com/",
      "licenseDeclared": "LGPL-2.1 and LGPL-3.0 and CC-BY-SA-3.0 and GPL-2.0 and BSL-1.0 and BSD-3-Clause and MIT",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "Ceph fuse-based client",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "2:18.2.2-12.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-fmt-8.1.1",
      "name": "fmt",
      "licenseConcluded": "MIT",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "c18857b14b8ec26a71fbed68a7e1495fe31e7ea2d72f8167894ee0bd303c54ea"
        }
      ],
      "description": "C++ Format is an open-source formatting library for C++. It can be used as a\nsafe alternative to printf or as a fast alternative to IOStreams.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/fmt@8.1.1-1.oe2403sp4?arch=aarch64&epoch=0&upstream=fmt-8.1.1-1.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://github.com/fmtlib/fmt",
      "licenseDeclared": "MIT",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "Small, safe and fast formatting library for C++",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:8.1.1-1.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-fuse-2.9.9",
      "name": "fuse",
      "licenseConcluded": "GPL-1.0-or-later and LGPL-2.1-or-later",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "db68077c6770523af839abb59cb0208abd563c9e05717cc04f4addf05fd82ee5"
        }
      ],
      "description": "FUSE (Filesystem in Userspace) is an interface for userspace programs to export\na filesystem to the Linux kernel. The FUSE project consists of two components:\nthe fuse kernel module (maintained in the regular kernel repositories) and the\nlibfuse userspace library (maintained in this repository). libfuse provides the\nreference implementation for communicating with the FUSE kernel module.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/fuse@2.9.9-12.oe2403sp4?arch=aarch64&epoch=0&upstream=fuse-2.9.9-12.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://fuse.sf.net",
      "licenseDeclared": "GPL-1.0-or-later and LGPL-2.1-or-later",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "User space File System of fuse2",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.9.9-12.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-glibc-2.38",
      "name": "glibc",
      "licenseConcluded": "LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net-2.0 and ISC and Public Domain and GFDL-1.3-only",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "972f6f0ead2fbc0f525623aa566baec969734e89308b0c92aa05a9f8d3c7299f"
        }
      ],
      "description": "The GNU C Library project provides the core libraries for the GNU system and\nGNU/Linux systems, as well as many other systems that use Linux as the kernel.\nThese libraries provide critical APIs including ISO C11, POSIX.1-2008, BSD,\nOS-specific APIs and more. These APIs include such foundational facilities as\nopen, read, write, malloc, printf, getaddrinfo, dlopen, pthread_create, crypt,\n login, exit and more.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/glibc@2.38-107.oe2403sp4?arch=aarch64&epoch=0&upstream=glibc-2.38-107.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.gnu.org/software/glibc/",
      "licenseDeclared": "LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net-2.0 and ISC and Public Domain and GFDL-1.3-only",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "The GNU libc libraries",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.38-107.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-libblkid-2.39.1",
      "name": "libblkid",
      "licenseConcluded": "LGPLv2+",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "3683b5951be734d06e331d9299ec44a07c911f488505850cf6b4c334ce01259e"
        }
      ],
      "description": "This package is le library for block device id.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/libblkid@2.39.1-38.oe2403sp4?arch=aarch64&epoch=0&upstream=util-linux-2.39.1-38.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git",
      "licenseDeclared": "LGPLv2+",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "Library for block device id.",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.39.1-38.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-libcap-2.69",
      "name": "libcap",
      "licenseConcluded": "GPLv2",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "b14637ace5072a3252363b3ff4a1890fd3221ec391f0fcb05b312726a1541759"
        }
      ],
      "description": "This is a library for getting and setting POSIX.1e (formerly POSIX 6)\ndraft 15 capabilities.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/libcap@2.69-7.oe2403sp4?arch=aarch64&epoch=0&upstream=libcap-2.69-7.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://sites.google.com/site/fullycapable",
      "licenseDeclared": "GPLv2",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "A library for getting and setting POSIX.1e draft 15 capabilities",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.69-7.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-libcurl-8.4.0",
      "name": "libcurl",
      "licenseConcluded": "curl",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "99ca948df18f86d10b07b5637c76def7530aa95b2e588b9119a7ce4db151ec50"
        }
      ],
      "description": "A library for getting files from web servers.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/libcurl@8.4.0-30.oe2403sp4?arch=aarch64&epoch=0&upstream=curl-8.4.0-30.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://curl.se/",
      "licenseDeclared": "curl",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "A library for getting files from web servers",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:8.4.0-30.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-libgcc-12.3.1",
      "name": "libgcc",
      "licenseConcluded": "GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "f9d8ad4f0c682f9ca2fbd47bcb3e37d487523ca2a796a4becda74e2ab5cc58f1"
        }
      ],
      "description": "This package contains GCC shared support library which is needed\ne.g. for exception handling support.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/libgcc@12.3.1-110.oe2403sp4?arch=aarch64&epoch=0&upstream=gcc-12.3.1-110.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://gcc.gnu.org",
      "licenseDeclared": "GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "GCC version 12 shared support library",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:12.3.1-110.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-libibverbs-50.0",
      "name": "libibverbs",
      "licenseConcluded": "GPL-2.0-only OR BSD-2-Clause AND BSD-3-Clause",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "5c0b14cb2243de48c5f12eecccfb064a888cb51b73f864169b5d52c43beb55c8"
        }
      ],
      "description": "libibverbs is a library that allows userspace processes to use RDMA\n\"verbs\" as described in the InfiniBand Architecture Specification and\nthe RDMA Protocol Verbs Specification.  This includes direct hardware\naccess from userspace to InfiniBand/iWARP adapters (kernel bypass) for\nfast path operations.\n\nDevice-specific plug-in ibverbs userspace drivers are included:\n\n- libcxgb4: Chelsio T4 iWARP HCA\n- libefa: Amazon Elastic Fabric Adapter\n- libhfi1: Intel Omni-Path HFI\n- libhns: HiSilicon Hip08/09/10 SoC\n- libipathverbs: QLogic InfiniPath HCA\n- libirdma: Intel Ethernet Connection RDMA\n- libmana: Microsoft Azure Network Adapter\n- libmlx4: Mellanox ConnectX-3 InfiniBand HCA\n- libmlx5: Mellanox Connect-IB/X-4+ InfiniBand HCA\n- libmthca: Mellanox InfiniBand HCA\n- libocrdma: Emulex OneConnect RDMA/RoCE Device\n- libqedr: QLogic QL4xxx RoCE HCA\n- librxe: A software implementation of the RoCE protocol\n- libsiw: A software implementation of the iWarp protocol\n- libvmw_pvrdma: VMware paravirtual RDMA device\n- libxscale: Yunsilicon RDMA device\n- libzrdma: ZTE Connection RDMA\n- libsxe2: SXE2 Connection RDMA",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/libibverbs@50.0-47.oe2403sp4?arch=aarch64&epoch=0&upstream=rdma-core-50.0-47.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://github.com/linux-rdma/rdma-core",
      "licenseDeclared": "GPL-2.0-only OR BSD-2-Clause AND BSD-3-Clause",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "A library and drivers for direct userspace use of RDMA (InfiniBand/iWARP/RoCE) hardware",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:50.0-47.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-librados2-18.2.2",
      "name": "librados2",
      "licenseConcluded": "LGPL-2.1 and LGPL-3.0 and CC-BY-SA-3.0 and GPL-2.0 and BSL-1.0 and BSD-3-Clause and MIT",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "717bc0da949697245abdfd1ddc819c723b815594be74baed725fa7f0874ab930"
        }
      ],
      "description": "RADOS is a reliable, autonomic distributed object storage cluster\ndeveloped as part of the Ceph distributed storage system. This is a\nshared library allowing applications to access the distributed object\nstore using a simple file-like interface.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/librados2@18.2.2-12.oe2403sp4?arch=aarch64&epoch=2&upstream=ceph-18.2.2-12.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://ceph.com/",
      "licenseDeclared": "LGPL-2.1 and LGPL-3.0 and CC-BY-SA-3.0 and GPL-2.0 and BSL-1.0 and BSD-3-Clause and MIT",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "RADOS distributed object store client library",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "2:18.2.2-12.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-librbd1-18.2.2",
      "name": "librbd1",
      "licenseConcluded": "LGPL-2.1 and LGPL-3.0 and CC-BY-SA-3.0 and GPL-2.0 and BSL-1.0 and BSD-3-Clause and MIT",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "e7443bc7a5e17616aa695ea160522de8eb914f4f69d282454d919fb3db56b9cb"
        }
      ],
      "description": "RBD is a block device striped across multiple distributed objects in\nRADOS, a reliable, autonomic distributed object storage cluster\ndeveloped as part of the Ceph distributed storage system. This is a\nshared library allowing applications to manage these block devices.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/librbd1@18.2.2-12.oe2403sp4?arch=aarch64&epoch=2&upstream=ceph-18.2.2-12.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://ceph.com/",
      "licenseDeclared": "LGPL-2.1 and LGPL-3.0 and CC-BY-SA-3.0 and GPL-2.0 and BSL-1.0 and BSD-3-Clause and MIT",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "RADOS block device client library",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "2:18.2.2-12.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-librdmacm-50.0",
      "name": "librdmacm",
      "licenseConcluded": "GPL-2.0-only OR BSD-2-Clause AND BSD-3-Clause",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "9899258b4b1acb767222d4e255d9c1d93274a97d5309cc9d82cb5577ec6e37da"
        }
      ],
      "description": "librdmacm provides a userspace RDMA Communication Management API.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/librdmacm@50.0-47.oe2403sp4?arch=aarch64&epoch=0&upstream=rdma-core-50.0-47.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://github.com/linux-rdma/rdma-core",
      "licenseDeclared": "GPL-2.0-only OR BSD-2-Clause AND BSD-3-Clause",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "Userspace RDMA Connection Manager",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:50.0-47.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-libstdc---12.3.1",
      "name": "libstdc++",
      "licenseConcluded": "GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "db9c76bf723996146b1b01b34664251a90496d7321a3b4a2d441ed4679b05f9d"
        }
      ],
      "description": "The libstdc++ package contains a rewritten standard compliant GCC Standard\nC++ Library.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/libstdc++@12.3.1-110.oe2403sp4?arch=aarch64&epoch=0&upstream=gcc-12.3.1-110.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://gcc.gnu.org",
      "licenseDeclared": "GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "GNU Standard C++ Library",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:12.3.1-110.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-openssl-libs-3.5.6",
      "name": "openssl-libs",
      "licenseConcluded": "Apache-2.0",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "f8a3454edaa65c11b49cf6c459f501bdb466c3eb128762ae07206c23bbc55043"
        }
      ],
      "description": "The openssl-libs package contains the libraries that are used\nby various applications which support cryptographic algorithms\nand protocols.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/openssl-libs@3.5.6-4.oe2403sp4?arch=aarch64&epoch=1&upstream=openssl-3.5.6-4.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://www.openssl.org/",
      "licenseDeclared": "Apache-2.0",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "A general purpose cryptography library with TLS implementation",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "1:3.5.6-4.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-systemd-libs-255",
      "name": "systemd-libs",
      "licenseConcluded": "LGPLv2+ and MIT",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "559e09eb493b0252adb73bb5aa4f41f2031b3b6de6c9ba01a9e4f524e64cf769"
        }
      ],
      "description": "Libraries for systemd and udev.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/systemd-libs@255-59.oe2403sp4?arch=aarch64&epoch=0&upstream=systemd-255-59.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://systemd.io/",
      "licenseDeclared": "LGPLv2+ and MIT",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "systemd libraries",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:255-59.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-thrift-0.14.0",
      "name": "thrift",
      "licenseConcluded": "ASL 2.0 and BSD and zlib",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "06b0b72176fab96305cf41149592fec353f2154795a58facc79b5cfb1ec24aae"
        }
      ],
      "description": "The Apache Thrift software framework for cross-language services\ndevelopment combines a software stack with a code generation engine to\nbuild services that work efficiently and seamlessly between C++, Java,\nPython, and other languages.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/thrift@0.14.0-7.oe2403sp4?arch=aarch64&epoch=0&upstream=thrift-0.14.0-7.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://thrift.apache.org/",
      "licenseDeclared": "ASL 2.0 and BSD and zlib",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "Software framework for cross-language services development",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:0.14.0-7.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-zlib-1.2.13",
      "name": "zlib",
      "licenseConcluded": "zlib and Boost",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "9902bd499d9fee53d5d0a933f781550c425e03bedd97c7dd45e967b030cf2c9a"
        }
      ],
      "description": "Zlib is a free, general-purpose, not covered by any patents, lossless data-compression\nlibrary for use on virtually any computer hardware and operating system. The zlib data\nformat is itself portable across platforms.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/zlib@1.2.13-5.oe2403sp4?arch=aarch64&epoch=0&upstream=zlib-1.2.13-5.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.zlib.net",
      "licenseDeclared": "zlib and Boost",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "A lossless data-compression library",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.2.13-5.oe2403sp4"
    }
  ],
  "relationships": [
    {
      "spdxElementId": "SPDXRef-rpm-rbd-fuse-18.2.2",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-fmt-8.1.1"
    },
    {
      "spdxElementId": "SPDXRef-rpm-rbd-fuse-18.2.2",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-fuse-2.9.9"
    },
    {
      "spdxElementId": "SPDXRef-rpm-rbd-fuse-18.2.2",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-glibc-2.38"
    },
    {
      "spdxElementId": "SPDXRef-rpm-rbd-fuse-18.2.2",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-libblkid-2.39.1"
    },
    {
      "spdxElementId": "SPDXRef-rpm-rbd-fuse-18.2.2",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-libcap-2.69"
    },
    {
      "spdxElementId": "SPDXRef-rpm-rbd-fuse-18.2.2",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-libcurl-8.4.0"
    },
    {
      "spdxElementId": "SPDXRef-rpm-rbd-fuse-18.2.2",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-libgcc-12.3.1"
    },
    {
      "spdxElementId": "SPDXRef-rpm-rbd-fuse-18.2.2",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-libibverbs-50.0"
    },
    {
      "spdxElementId": "SPDXRef-rpm-rbd-fuse-18.2.2",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-librados2-18.2.2"
    },
    {
      "spdxElementId": "SPDXRef-rpm-rbd-fuse-18.2.2",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-librbd1-18.2.2"
    },
    {
      "spdxElementId": "SPDXRef-rpm-rbd-fuse-18.2.2",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-librdmacm-50.0"
    },
    {
      "spdxElementId": "SPDXRef-rpm-rbd-fuse-18.2.2",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-libstdc---12.3.1"
    },
    {
      "spdxElementId": "SPDXRef-rpm-rbd-fuse-18.2.2",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-openssl-libs-3.5.6"
    },
    {
      "spdxElementId": "SPDXRef-rpm-rbd-fuse-18.2.2",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-systemd-libs-255"
    },
    {
      "spdxElementId": "SPDXRef-rpm-rbd-fuse-18.2.2",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-thrift-0.14.0"
    },
    {
      "spdxElementId": "SPDXRef-rpm-rbd-fuse-18.2.2",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-zlib-1.2.13"
    }
  ]
}