{
  "SPDXID": "SPDXRef-DOCUMENT",
  "name": "tigervnc-0.1.13.1-3.oe2403sp4.aarch64.rpm",
  "spdxVersion": "SPDX-2.2",
  "creationInfo": {
    "created": "2026-07-04T04:28:12.092529219Z",
    "creators": [
      "openeuler_creator"
    ]
  },
  "dataLicense": "CC0-1.0",
  "documentNamespace": "https://sbom.openEuler.org/tigervnc-0.1.13.1-3.oe2403sp4.aarch64.rpm",
  "packages": [
    {
      "SPDXID": "SPDXRef-rpm-tigervnc-1.13.1",
      "name": "tigervnc",
      "licenseConcluded": "GPLv2+",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "f2411a9c9755fc1d015cf72d3ee57a50c89f9dd9251a545d624529c643b58aa3"
        }
      ],
      "description": "This package provides client for Virtual Network Computing (VNC), with which\nyou can access any other desktops running a VNC server.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/tigervnc@1.13.1-3.oe2403sp4?arch=aarch64&epoch=0&upstream=tigervnc-1.13.1-3.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://tigervnc.org",
      "licenseDeclared": "GPLv2+",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "A TigerVNC remote display system",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.13.1-3.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-coreutils-9.4",
      "name": "coreutils",
      "licenseConcluded": "GPLv3+",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "9a45326d88eefd6f8a0018a1626f7decc11e3649f47296d7ce55e5ce473c3296"
        }
      ],
      "description": "These are the GNU core utilities.  This package is the combination of\nthe old GNU fileutils, sh-utils, and textutils packages.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/coreutils@9.4-22.oe2403sp4?arch=aarch64&epoch=0&upstream=coreutils-9.4-22.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://www.gnu.org/software/coreutils/",
      "licenseDeclared": "GPLv3+",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "A set of basic GNU tools commonly used in shell scripts",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:9.4-22.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-fltk-1.3.9",
      "name": "fltk",
      "licenseConcluded": "LGPLv2+ with exceptions",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "30c9fb72506e5ef6a8b925a210400eae9e3bd93505cce5b92e1d8701333e673c"
        }
      ],
      "description": "FLTK (pronounced \"fulltick\") is a cross-platform C++ GUI toolkit.It provides modern GUI functionality without\nthe bloat, and supports 3D graphics via OpenGL and its built-in GLUT emulation.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/fltk@1.3.9-1.oe2403sp4?arch=aarch64&epoch=0&upstream=fltk-1.3.9-1.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.fltk.org/",
      "licenseDeclared": "LGPLv2+ with exceptions",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "C++ user interface toolkit",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.3.9-1.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-fontconfig-2.15.0",
      "name": "fontconfig",
      "licenseConcluded": "MIT and Public Domain and UCD",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "23ed43104b8bcaccc0cd4c558b172d32e3383bb5c55f382cd1be0071daf18650"
        }
      ],
      "description": "Fontconfig  provide different font according to requirements specified by applications,discover new fonts when installed automatically\nbe used in concert with the X Render Extension and FreeType to implement high quality, anti-aliased and subpixel rendered text on a display",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/fontconfig@2.15.0-2.oe2403sp4?arch=aarch64&epoch=0&upstream=fontconfig-2.15.0-2.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://fontconfig.org",
      "licenseDeclared": "MIT and Public Domain and UCD",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "Fontconfig is a library for configuring and customizing font access",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.15.0-2.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-glibc-2.38",
      "name": "glibc",
      "licenseConcluded": "LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net-2.0 and ISC and Public Domain and GFDL-1.3-only",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "972f6f0ead2fbc0f525623aa566baec969734e89308b0c92aa05a9f8d3c7299f"
        }
      ],
      "description": "The GNU C Library project provides the core libraries for the GNU system and\nGNU/Linux systems, as well as many other systems that use Linux as the kernel.\nThese libraries provide critical APIs including ISO C11, POSIX.1-2008, BSD,\nOS-specific APIs and more. These APIs include such foundational facilities as\nopen, read, write, malloc, printf, getaddrinfo, dlopen, pthread_create, crypt,\n login, exit and more.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/glibc@2.38-107.oe2403sp4?arch=aarch64&epoch=0&upstream=glibc-2.38-107.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.gnu.org/software/glibc/",
      "licenseDeclared": "LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net-2.0 and ISC and Public Domain and GFDL-1.3-only",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "The GNU libc libraries",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.38-107.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-gmp-6.3.0",
      "name": "gmp",
      "licenseConcluded": "(LGPL-3.0-or-later OR GPL-2.0-or-later OR (LGPL-3.0-or-later AND GPL-2.0-or-later)) AND GFDL-1.3-invariants-or-later",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "32e18231ed02f471969b56c3a755ab26f7c92547c614856e8ac9cccc90feed5f"
        }
      ],
      "description": "GMP is a portable library written in C for arbitrary precision arithmetic\non integers, rational numbers, and floating-point numbers. It aims to provide\nthe fastest possible arithmetic for all applications that need higher\nprecision than is directly supported by the basic C types.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/gmp@6.3.0-5.oe2403sp4?arch=aarch64&epoch=1&upstream=gmp-6.3.0-5.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://gmplib.org",
      "licenseDeclared": "(LGPL-3.0-or-later OR GPL-2.0-or-later OR (LGPL-3.0-or-later AND GPL-2.0-or-later)) AND GFDL-1.3-invariants-or-later",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "A GNU multiple precision arithmetic library",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "1:6.3.0-5.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-gnutls-3.8.2",
      "name": "gnutls",
      "licenseConcluded": "LGPLv2.1+ and GPLv3+",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "8799abb0554c9e4f84f5bacf0e2915ce4b8b051b159e20ec33522796351a218f"
        }
      ],
      "description": "GnuTLS is a secure communications library implementing the SSL, TLS and DTLS\nprotocols and technologies around them. It provides a simple C language\napplication programming interface (API) to access the secure communications\nprotocols as well as APIs to parse and write X.509, PKCS #12, and other\nrequired structures.\nThe project strives to provide a secure communications back-end, simple to use\nand integrated with the rest of the base Linux libraries. A back-end designed\nto work and be secure out of the box, keeping the complexity of TLS and PKI out\nof application code.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/gnutls@3.8.2-16.oe2403sp4?arch=aarch64&epoch=0&upstream=gnutls-3.8.2-16.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://www.gnutls.org/",
      "licenseDeclared": "LGPLv2.1+ and GPLv3+",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "The GNU Secure Communication Protocol Library",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:3.8.2-16.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-hicolor-icon-theme-0.17",
      "name": "hicolor-icon-theme",
      "licenseConcluded": "GPLv2+",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "9b0acc25f38e359f4ab7d55fa02db6d958a62fee24cef90e05c37893d9a82c62"
        }
      ],
      "description": "Icon-theme contains the standard also references the default\nicon theme called hicolor.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/hicolor-icon-theme@0.17-7.oe2403sp4?arch=noarch&epoch=0&upstream=hicolor-icon-theme-0.17-7.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://www.freedesktop.org/wiki/Software/icon-theme/",
      "licenseDeclared": "GPLv2+",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "The default icon theme",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:0.17-7.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-libICE-1.1.1",
      "name": "libICE",
      "licenseConcluded": "MIT",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "763cf8830c81c1d322fe78b6cbfc637244dbe368c6ea569f0c8b078cd4562016"
        }
      ],
      "description": "The X.Org X11 ICE runtime library.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/libICE@1.1.1-1.oe2403sp4?arch=aarch64&epoch=0&upstream=libICE-1.1.1-1.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.x.org",
      "licenseDeclared": "MIT",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "Inter-Client Exchange Library",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.1.1-1.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-libSM-1.2.4",
      "name": "libSM",
      "licenseConcluded": "MIT",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "f336f8ae459907a3c2b385dba8d375eef41da4eb821e53b6f2e1bc7597c719a1"
        }
      ],
      "description": "The libSM package contains runtime libraries for the X.Org X11 SM.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/libSM@1.2.4-1.oe2403sp4?arch=aarch64&epoch=0&upstream=libSM-1.2.4-1.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.x.org",
      "licenseDeclared": "MIT",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "Runtime library for X11 SM",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.2.4-1.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-libX11-1.8.7",
      "name": "libX11",
      "licenseConcluded": "MIT",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "6bf2938750575b4761515da63b39b2567bace743759240648858fddd8c8d762b"
        }
      ],
      "description": "Core X11 protocol client library.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/libX11@1.8.7-3.oe2403sp4?arch=aarch64&epoch=0&upstream=libX11-1.8.7-3.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.x.org",
      "licenseDeclared": "MIT",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "Core X11 protocol client library",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.8.7-3.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-libXext-1.3.5",
      "name": "libXext",
      "licenseConcluded": "MIT",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "b608db8d5ae3a691eeb2b14400efa7183b1314eb63c83b84a6f6f6f1625ed629"
        }
      ],
      "description": "The X.Org project provides an open source implementation of the X Window System.\nX.Org X11 libXext contains runtime library.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/libXext@1.3.5-1.oe2403sp4?arch=aarch64&epoch=0&upstream=libXext-1.3.5-1.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://xorg.freedesktop.org/",
      "licenseDeclared": "MIT",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "Common extensions to the X11 protocol",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.3.5-1.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-libXfixes-6.0.1",
      "name": "libXfixes",
      "licenseConcluded": "MIT",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "b0392b31ad6063b373bc861bac471c9de365a68966e3fa04bec4759ff2b36d24"
        }
      ],
      "description": "The X Fixes extension provides applications with work-arounds for\nvarious limitations in the core protocol.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/libXfixes@6.0.1-1.oe2403sp4?arch=aarch64&epoch=0&upstream=libXfixes-6.0.1-1.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://xorg.freedesktop.org/",
      "licenseDeclared": "MIT",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "X11 miscellaneous \"fixes\" extension library",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:6.0.1-1.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-libXft-2.3.8",
      "name": "libXft",
      "licenseConcluded": "MIT",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "f0d1395c478c88e453ecf16f5423ff463c19de71ccd9615691ff6ed1d6da4e23"
        }
      ],
      "description": "Xft is a library that connects X applications with the FreeType font\nrasterization library.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/libXft@2.3.8-1.oe2403sp4?arch=aarch64&epoch=0&upstream=libXft-2.3.8-1.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://xorg.freedesktop.org/",
      "licenseDeclared": "MIT",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "X FreeType library",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.3.8-1.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-libXi-1.8.1",
      "name": "libXi",
      "licenseConcluded": "MIT",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "6e4c41db3817bbe1fbb6db323e81c98ce95bda47b22bc5f37e9a5d50bb9c131d"
        }
      ],
      "description": "libXi is the client-side library for the X Input Extension.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/libXi@1.8.1-2.oe2403sp4?arch=aarch64&epoch=0&upstream=libXi-1.8.1-2.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://gitlab.freedesktop.org/xorg/lib/libxi",
      "licenseDeclared": "MIT",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "X.Org X11 libXi runtime library",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.8.1-2.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-libXinerama-1.1.5",
      "name": "libXinerama",
      "licenseConcluded": "MIT",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "2df6922d706feb17952841d4ddfb5b1ab2367a7e466127f0867982afbc671486"
        }
      ],
      "description": "Xinerama is an extension to the X Window System which enables\nmulti-headed X applications and window managers to use two or more\nphysical displays as one large virtual display.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/libXinerama@1.1.5-1.oe2403sp4?arch=aarch64&epoch=0&upstream=libXinerama-1.1.5-1.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://xorg.freedesktop.org/",
      "licenseDeclared": "MIT",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "Xinerama extension to the X11 Protocol",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.1.5-1.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-libXrandr-1.5.5",
      "name": "libXrandr",
      "licenseConcluded": "MIT",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "c4a67035ce8b65052ac7c4b6f1e636a578dab79059dc10ddb6b46ca9eabc4c24"
        }
      ],
      "description": "X.Org X11 libXrandr runtime library",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/libXrandr@1.5.5-1.oe2403sp4?arch=aarch64&epoch=0&upstream=libXrandr-1.5.5-1.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://www.x.org",
      "licenseDeclared": "MIT",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "X.Org X11 libXrandr runtime library",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.5.5-1.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-libXrender-0.9.11",
      "name": "libXrender",
      "licenseConcluded": "MIT",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "817e9697443028f7da8eb31e21936050d9e448dd8c922d35d35eb317ae388a8f"
        }
      ],
      "description": "X.Org X11 libXrender runtime library",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/libXrender@0.9.11-1.oe2403sp4?arch=aarch64&epoch=0&upstream=libXrender-0.9.11-1.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://www.x.org",
      "licenseDeclared": "MIT",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "X.Org X11 libXrender runtime library",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:0.9.11-1.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-libgcc-12.3.1",
      "name": "libgcc",
      "licenseConcluded": "GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "f9d8ad4f0c682f9ca2fbd47bcb3e37d487523ca2a796a4becda74e2ab5cc58f1"
        }
      ],
      "description": "This package contains GCC shared support library which is needed\ne.g. for exception handling support.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/libgcc@12.3.1-110.oe2403sp4?arch=aarch64&epoch=0&upstream=gcc-12.3.1-110.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://gcc.gnu.org",
      "licenseDeclared": "GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "GCC version 12 shared support library",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:12.3.1-110.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-libjpeg-turbo-3.0.1",
      "name": "libjpeg-turbo",
      "licenseConcluded": "IJG",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "1eefbc7760e9fee9c4474cf2976e7791db1f4db43a723a12c33378a273c12878"
        }
      ],
      "description": "libjpeg-turbo is a JPEG image codec that uses SIMD instructions (MMX, SSE2, NEON, AltiVec)\nto accelerate baseline JPEG compression and decompression on x86, x86-64, and ARM systems.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/libjpeg-turbo@3.0.1-2.oe2403sp4?arch=aarch64&epoch=0&upstream=libjpeg-turbo-3.0.1-2.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://sourceforge.net/projects/libjpeg-turbo",
      "licenseDeclared": "IJG",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "MMX/SSE2/SIMD accelerated libjpeg-compatible JPEG codec library",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:3.0.1-2.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-libstdc---12.3.1",
      "name": "libstdc++",
      "licenseConcluded": "GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "db9c76bf723996146b1b01b34664251a90496d7321a3b4a2d441ed4679b05f9d"
        }
      ],
      "description": "The libstdc++ package contains a rewritten standard compliant GCC Standard\nC++ Library.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/libstdc++@12.3.1-110.oe2403sp4?arch=aarch64&epoch=0&upstream=gcc-12.3.1-110.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://gcc.gnu.org",
      "licenseDeclared": "GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "GNU Standard C++ Library",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:12.3.1-110.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-nettle-3.8.1",
      "name": "nettle",
      "licenseConcluded": "LGPLv3+ or GPLv2+",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "2b6fcf039e92eb1cc56de14aaaa1a4ece8a0ef8bbabc8fa5a296a34cc4bde9d8"
        }
      ],
      "description": "Nettle is a cryptographic library designed to fit any context:\nin crypto toolkits for object-oriented languages, in applications\nlike LSH or GnuPG, or even in kernel space.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/nettle@3.8.1-1.oe2403sp4?arch=aarch64&epoch=0&upstream=nettle-3.8.1-1.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://www.lysator.liu.se/~nisse/nettle/",
      "licenseDeclared": "LGPLv3+ or GPLv2+",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "A low-level cryptographic library",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:3.8.1-1.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-pam-1.5.3",
      "name": "pam",
      "licenseConcluded": "BSD and GPLv2+",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "47cb0ae8e2475eb9d8d624a52267db584838fe61abb906621d656a870e565fae"
        }
      ],
      "description": "PAM (Pluggable Authentication Modules) is a system of libraries that\nhandle the authentication tasks of applications (services) on the system.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/pam@1.5.3-11.oe2403sp4?arch=aarch64&epoch=0&upstream=pam-1.5.3-11.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.linux-pam.org/",
      "licenseDeclared": "BSD and GPLv2+",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "Pluggable Authentication Modules for Linux",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.5.3-11.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-pixman-0.42.2",
      "name": "pixman",
      "licenseConcluded": "MIT",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "0fd5985a1c09ab3da04ab89ce6307bd4d4f2efa2c9eb15f88aba481672b08540"
        }
      ],
      "description": "Pixman is a low-level software library for pixel manipulation, providing features such\\\n\\as image compositing and trapezoid rasterization.\\",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/pixman@0.42.2-1.oe2403sp4?arch=aarch64&epoch=0&upstream=pixman-0.42.2-1.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://gitlab.freedesktop.org/pixman/pixman",
      "licenseDeclared": "MIT",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "Pixman is a pixel manipulation library for X and Cairo",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:0.42.2-1.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-zlib-1.2.13",
      "name": "zlib",
      "licenseConcluded": "zlib and Boost",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "9902bd499d9fee53d5d0a933f781550c425e03bedd97c7dd45e967b030cf2c9a"
        }
      ],
      "description": "Zlib is a free, general-purpose, not covered by any patents, lossless data-compression\nlibrary for use on virtually any computer hardware and operating system. The zlib data\nformat is itself portable across platforms.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/zlib@1.2.13-5.oe2403sp4?arch=aarch64&epoch=0&upstream=zlib-1.2.13-5.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.zlib.net",
      "licenseDeclared": "zlib and Boost",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "A lossless data-compression library",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.2.13-5.oe2403sp4"
    }
  ],
  "relationships": [
    {
      "spdxElementId": "SPDXRef-rpm-tigervnc-1.13.1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-coreutils-9.4"
    },
    {
      "spdxElementId": "SPDXRef-rpm-tigervnc-1.13.1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-fltk-1.3.9"
    },
    {
      "spdxElementId": "SPDXRef-rpm-tigervnc-1.13.1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-fontconfig-2.15.0"
    },
    {
      "spdxElementId": "SPDXRef-rpm-tigervnc-1.13.1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-glibc-2.38"
    },
    {
      "spdxElementId": "SPDXRef-rpm-tigervnc-1.13.1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-gmp-6.3.0"
    },
    {
      "spdxElementId": "SPDXRef-rpm-tigervnc-1.13.1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-gnutls-3.8.2"
    },
    {
      "spdxElementId": "SPDXRef-rpm-tigervnc-1.13.1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-hicolor-icon-theme-0.17"
    },
    {
      "spdxElementId": "SPDXRef-rpm-tigervnc-1.13.1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-libICE-1.1.1"
    },
    {
      "spdxElementId": "SPDXRef-rpm-tigervnc-1.13.1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-libSM-1.2.4"
    },
    {
      "spdxElementId": "SPDXRef-rpm-tigervnc-1.13.1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-libX11-1.8.7"
    },
    {
      "spdxElementId": "SPDXRef-rpm-tigervnc-1.13.1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-libXext-1.3.5"
    },
    {
      "spdxElementId": "SPDXRef-rpm-tigervnc-1.13.1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-libXfixes-6.0.1"
    },
    {
      "spdxElementId": "SPDXRef-rpm-tigervnc-1.13.1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-libXft-2.3.8"
    },
    {
      "spdxElementId": "SPDXRef-rpm-tigervnc-1.13.1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-libXi-1.8.1"
    },
    {
      "spdxElementId": "SPDXRef-rpm-tigervnc-1.13.1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-libXinerama-1.1.5"
    },
    {
      "spdxElementId": "SPDXRef-rpm-tigervnc-1.13.1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-libXrandr-1.5.5"
    },
    {
      "spdxElementId": "SPDXRef-rpm-tigervnc-1.13.1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-libXrender-0.9.11"
    },
    {
      "spdxElementId": "SPDXRef-rpm-tigervnc-1.13.1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-libgcc-12.3.1"
    },
    {
      "spdxElementId": "SPDXRef-rpm-tigervnc-1.13.1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-libjpeg-turbo-3.0.1"
    },
    {
      "spdxElementId": "SPDXRef-rpm-tigervnc-1.13.1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-libstdc---12.3.1"
    },
    {
      "spdxElementId": "SPDXRef-rpm-tigervnc-1.13.1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-nettle-3.8.1"
    },
    {
      "spdxElementId": "SPDXRef-rpm-tigervnc-1.13.1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-pam-1.5.3"
    },
    {
      "spdxElementId": "SPDXRef-rpm-tigervnc-1.13.1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-pixman-0.42.2"
    },
    {
      "spdxElementId": "SPDXRef-rpm-tigervnc-1.13.1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-zlib-1.2.13"
    }
  ]
}