{
  "SPDXID": "SPDXRef-DOCUMENT",
  "name": "tigervnc-server-0.1.13.1-3.oe2403sp4.aarch64.rpm",
  "spdxVersion": "SPDX-2.2",
  "creationInfo": {
    "created": "2026-07-04T04:28:12.092529219Z",
    "creators": [
      "openeuler_creator"
    ]
  },
  "dataLicense": "CC0-1.0",
  "documentNamespace": "https://sbom.openEuler.org/tigervnc-server-0.1.13.1-3.oe2403sp4.aarch64.rpm",
  "packages": [
    {
      "SPDXID": "SPDXRef-rpm-tigervnc-server-1.13.1",
      "name": "tigervnc-server",
      "licenseConcluded": "GPLv2+",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "d985a3b88c7c7839a52b8bc21577161a1af7ec7762b686077560c13c1eaa7fdf"
        }
      ],
      "description": "This package provides full installaion of TigerCNC and utilities that\nmake access more convenient. For example, you can export your active\nX session.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/tigervnc-server@1.13.1-3.oe2403sp4?arch=aarch64&epoch=0&upstream=tigervnc-1.13.1-3.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://tigervnc.org",
      "licenseDeclared": "GPLv2+",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "A TigerVNC server",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.13.1-3.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-bash-5.2.15",
      "name": "bash",
      "licenseConcluded": "GPLv3",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "9e44c67402e88f8c3409ae71f375e1239d0fe67abb011f90acd3cff8eed95a11"
        }
      ],
      "description": "Bash is the GNU Project's shell. Bash is the Bourne Again SHell. Bash is an sh-compatible\nshell that incorporates useful features from the Korn shell (ksh) and C shell (csh). It is\nintended to conform to the IEEE POSIX P1003.2/ISO 9945.2 Shell and Tools standard. It offers\nfunctional improvements over sh for both programming and interactive use. In addition, most\nsh scripts can be run by Bash without modification.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/bash@5.2.15-19.oe2403sp4?arch=aarch64&epoch=0&upstream=bash-5.2.15-19.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://www.gnu.org/software/bash",
      "licenseDeclared": "GPLv3",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "It is the Bourne Again Shell",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:5.2.15-19.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-glibc-2.38",
      "name": "glibc",
      "licenseConcluded": "LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net-2.0 and ISC and Public Domain and GFDL-1.3-only",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "972f6f0ead2fbc0f525623aa566baec969734e89308b0c92aa05a9f8d3c7299f"
        }
      ],
      "description": "The GNU C Library project provides the core libraries for the GNU system and\nGNU/Linux systems, as well as many other systems that use Linux as the kernel.\nThese libraries provide critical APIs including ISO C11, POSIX.1-2008, BSD,\nOS-specific APIs and more. These APIs include such foundational facilities as\nopen, read, write, malloc, printf, getaddrinfo, dlopen, pthread_create, crypt,\n login, exit and more.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/glibc@2.38-107.oe2403sp4?arch=aarch64&epoch=0&upstream=glibc-2.38-107.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.gnu.org/software/glibc/",
      "licenseDeclared": "LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net-2.0 and ISC and Public Domain and GFDL-1.3-only",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "The GNU libc libraries",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.38-107.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-gmp-6.3.0",
      "name": "gmp",
      "licenseConcluded": "(LGPL-3.0-or-later OR GPL-2.0-or-later OR (LGPL-3.0-or-later AND GPL-2.0-or-later)) AND GFDL-1.3-invariants-or-later",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "32e18231ed02f471969b56c3a755ab26f7c92547c614856e8ac9cccc90feed5f"
        }
      ],
      "description": "GMP is a portable library written in C for arbitrary precision arithmetic\non integers, rational numbers, and floating-point numbers. It aims to provide\nthe fastest possible arithmetic for all applications that need higher\nprecision than is directly supported by the basic C types.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/gmp@6.3.0-5.oe2403sp4?arch=aarch64&epoch=1&upstream=gmp-6.3.0-5.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://gmplib.org",
      "licenseDeclared": "(LGPL-3.0-or-later OR GPL-2.0-or-later OR (LGPL-3.0-or-later AND GPL-2.0-or-later)) AND GFDL-1.3-invariants-or-later",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "A GNU multiple precision arithmetic library",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "1:6.3.0-5.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-gnutls-3.8.2",
      "name": "gnutls",
      "licenseConcluded": "LGPLv2.1+ and GPLv3+",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "8799abb0554c9e4f84f5bacf0e2915ce4b8b051b159e20ec33522796351a218f"
        }
      ],
      "description": "GnuTLS is a secure communications library implementing the SSL, TLS and DTLS\nprotocols and technologies around them. It provides a simple C language\napplication programming interface (API) to access the secure communications\nprotocols as well as APIs to parse and write X.509, PKCS #12, and other\nrequired structures.\nThe project strives to provide a secure communications back-end, simple to use\nand integrated with the rest of the base Linux libraries. A back-end designed\nto work and be secure out of the box, keeping the complexity of TLS and PKI out\nof application code.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/gnutls@3.8.2-16.oe2403sp4?arch=aarch64&epoch=0&upstream=gnutls-3.8.2-16.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://www.gnutls.org/",
      "licenseDeclared": "LGPLv2.1+ and GPLv3+",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "The GNU Secure Communication Protocol Library",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:3.8.2-16.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-libICE-1.1.1",
      "name": "libICE",
      "licenseConcluded": "MIT",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "763cf8830c81c1d322fe78b6cbfc637244dbe368c6ea569f0c8b078cd4562016"
        }
      ],
      "description": "The X.Org X11 ICE runtime library.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/libICE@1.1.1-1.oe2403sp4?arch=aarch64&epoch=0&upstream=libICE-1.1.1-1.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.x.org",
      "licenseDeclared": "MIT",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "Inter-Client Exchange Library",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.1.1-1.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-libSM-1.2.4",
      "name": "libSM",
      "licenseConcluded": "MIT",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "f336f8ae459907a3c2b385dba8d375eef41da4eb821e53b6f2e1bc7597c719a1"
        }
      ],
      "description": "The libSM package contains runtime libraries for the X.Org X11 SM.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/libSM@1.2.4-1.oe2403sp4?arch=aarch64&epoch=0&upstream=libSM-1.2.4-1.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.x.org",
      "licenseDeclared": "MIT",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "Runtime library for X11 SM",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.2.4-1.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-libX11-1.8.7",
      "name": "libX11",
      "licenseConcluded": "MIT",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "6bf2938750575b4761515da63b39b2567bace743759240648858fddd8c8d762b"
        }
      ],
      "description": "Core X11 protocol client library.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/libX11@1.8.7-3.oe2403sp4?arch=aarch64&epoch=0&upstream=libX11-1.8.7-3.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.x.org",
      "licenseDeclared": "MIT",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "Core X11 protocol client library",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.8.7-3.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-libXdamage-1.1.6",
      "name": "libXdamage",
      "licenseConcluded": "MIT",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "9fa117b6d242b3570dca083547f9ee1c3df243df12498ea16bac24f38a474ad7"
        }
      ],
      "description": "The X Damage Extension allows applications to track modified regions\nof drawables.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/libXdamage@1.1.6-1.oe2403sp4?arch=aarch64&epoch=0&upstream=libXdamage-1.1.6-1.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://www.x.org",
      "licenseDeclared": "MIT",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "X Damage extension library",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.1.6-1.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-libXext-1.3.5",
      "name": "libXext",
      "licenseConcluded": "MIT",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "b608db8d5ae3a691eeb2b14400efa7183b1314eb63c83b84a6f6f6f1625ed629"
        }
      ],
      "description": "The X.Org project provides an open source implementation of the X Window System.\nX.Org X11 libXext contains runtime library.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/libXext@1.3.5-1.oe2403sp4?arch=aarch64&epoch=0&upstream=libXext-1.3.5-1.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://xorg.freedesktop.org/",
      "licenseDeclared": "MIT",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "Common extensions to the X11 protocol",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.3.5-1.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-libXfixes-6.0.1",
      "name": "libXfixes",
      "licenseConcluded": "MIT",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "b0392b31ad6063b373bc861bac471c9de365a68966e3fa04bec4759ff2b36d24"
        }
      ],
      "description": "The X Fixes extension provides applications with work-arounds for\nvarious limitations in the core protocol.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/libXfixes@6.0.1-1.oe2403sp4?arch=aarch64&epoch=0&upstream=libXfixes-6.0.1-1.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://xorg.freedesktop.org/",
      "licenseDeclared": "MIT",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "X11 miscellaneous \"fixes\" extension library",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:6.0.1-1.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-libXrandr-1.5.5",
      "name": "libXrandr",
      "licenseConcluded": "MIT",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "c4a67035ce8b65052ac7c4b6f1e636a578dab79059dc10ddb6b46ca9eabc4c24"
        }
      ],
      "description": "X.Org X11 libXrandr runtime library",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/libXrandr@1.5.5-1.oe2403sp4?arch=aarch64&epoch=0&upstream=libXrandr-1.5.5-1.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://www.x.org",
      "licenseDeclared": "MIT",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "X.Org X11 libXrandr runtime library",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.5.5-1.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-libXtst-1.2.4",
      "name": "libXtst",
      "licenseConcluded": "MIT",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "ebdee1635836a8c91fc1d59e850fe37904434214b0cbecb357b55a9b8263e906"
        }
      ],
      "description": "X.Org X11 libXtst runtime library",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/libXtst@1.2.4-2.oe2403sp4?arch=aarch64&epoch=0&upstream=libXtst-1.2.4-2.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://www.x.org",
      "licenseDeclared": "MIT",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "X.Org X11 libXtst runtime library",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.2.4-2.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-libgcc-12.3.1",
      "name": "libgcc",
      "licenseConcluded": "GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "f9d8ad4f0c682f9ca2fbd47bcb3e37d487523ca2a796a4becda74e2ab5cc58f1"
        }
      ],
      "description": "This package contains GCC shared support library which is needed\ne.g. for exception handling support.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/libgcc@12.3.1-110.oe2403sp4?arch=aarch64&epoch=0&upstream=gcc-12.3.1-110.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://gcc.gnu.org",
      "licenseDeclared": "GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "GCC version 12 shared support library",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:12.3.1-110.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-libjpeg-turbo-3.0.1",
      "name": "libjpeg-turbo",
      "licenseConcluded": "IJG",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "1eefbc7760e9fee9c4474cf2976e7791db1f4db43a723a12c33378a273c12878"
        }
      ],
      "description": "libjpeg-turbo is a JPEG image codec that uses SIMD instructions (MMX, SSE2, NEON, AltiVec)\nto accelerate baseline JPEG compression and decompression on x86, x86-64, and ARM systems.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/libjpeg-turbo@3.0.1-2.oe2403sp4?arch=aarch64&epoch=0&upstream=libjpeg-turbo-3.0.1-2.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://sourceforge.net/projects/libjpeg-turbo",
      "licenseDeclared": "IJG",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "MMX/SSE2/SIMD accelerated libjpeg-compatible JPEG codec library",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:3.0.1-2.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-libselinux-3.5",
      "name": "libselinux",
      "licenseConcluded": "Public Domain",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "c4c00b93eb3e3cd6f1cfbc0bcf912050feac49f118b428a5d9c26a797363c1c0"
        }
      ],
      "description": "libselinux provides an interface to get and set process and file\nsecurity contexts and to obtain security policy decisions.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/libselinux@3.5-9.oe2403sp4?arch=aarch64&epoch=0&upstream=libselinux-3.5-9.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://github.com/SELinuxProject/selinux/wiki",
      "licenseDeclared": "Public Domain",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "SELinux library and simple utilities",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:3.5-9.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-libstdc---12.3.1",
      "name": "libstdc++",
      "licenseConcluded": "GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "db9c76bf723996146b1b01b34664251a90496d7321a3b4a2d441ed4679b05f9d"
        }
      ],
      "description": "The libstdc++ package contains a rewritten standard compliant GCC Standard\nC++ Library.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/libstdc++@12.3.1-110.oe2403sp4?arch=aarch64&epoch=0&upstream=gcc-12.3.1-110.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://gcc.gnu.org",
      "licenseDeclared": "GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "GNU Standard C++ Library",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:12.3.1-110.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-nettle-3.8.1",
      "name": "nettle",
      "licenseConcluded": "LGPLv3+ or GPLv2+",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "2b6fcf039e92eb1cc56de14aaaa1a4ece8a0ef8bbabc8fa5a296a34cc4bde9d8"
        }
      ],
      "description": "Nettle is a cryptographic library designed to fit any context:\nin crypto toolkits for object-oriented languages, in applications\nlike LSH or GnuPG, or even in kernel space.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/nettle@3.8.1-1.oe2403sp4?arch=aarch64&epoch=0&upstream=nettle-3.8.1-1.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://www.lysator.liu.se/~nisse/nettle/",
      "licenseDeclared": "LGPLv3+ or GPLv2+",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "A low-level cryptographic library",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:3.8.1-1.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-pam-1.5.3",
      "name": "pam",
      "licenseConcluded": "BSD and GPLv2+",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "47cb0ae8e2475eb9d8d624a52267db584838fe61abb906621d656a870e565fae"
        }
      ],
      "description": "PAM (Pluggable Authentication Modules) is a system of libraries that\nhandle the authentication tasks of applications (services) on the system.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/pam@1.5.3-11.oe2403sp4?arch=aarch64&epoch=0&upstream=pam-1.5.3-11.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.linux-pam.org/",
      "licenseDeclared": "BSD and GPLv2+",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "Pluggable Authentication Modules for Linux",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.5.3-11.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-perl-5.38.0",
      "name": "perl",
      "licenseConcluded": "(GPL-1.0-or-later or Artistic-1.0-perl) and (GPL-2.0-or-later or Artistic-1.0-perl) and MIT and UCD and Public Domain and BSD",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "f6a219e87ba15fd71cefd81a8c9221532a409d314a7003a4dc39ae45c04a519c"
        }
      ],
      "description": "Perl 5 is a highly capable, feature-rich programming language with over 30 years of development.\nPerl 5 runs on over 100 platforms from portables to mainframes and is suitable for both rapid\nprototyping and large scale development projects.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/perl@5.38.0-12.oe2403sp4?arch=aarch64&epoch=4&upstream=perl-5.38.0-12.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://www.perl.org/",
      "licenseDeclared": "(GPL-1.0-or-later or Artistic-1.0-perl) and (GPL-2.0-or-later or Artistic-1.0-perl) and MIT and UCD and Public Domain and BSD",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "A highly capable, feature-rich programming language",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "4:5.38.0-12.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-pixman-0.42.2",
      "name": "pixman",
      "licenseConcluded": "MIT",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "0fd5985a1c09ab3da04ab89ce6307bd4d4f2efa2c9eb15f88aba481672b08540"
        }
      ],
      "description": "Pixman is a low-level software library for pixel manipulation, providing features such\\\n\\as image compositing and trapezoid rasterization.\\",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/pixman@0.42.2-1.oe2403sp4?arch=aarch64&epoch=0&upstream=pixman-0.42.2-1.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://gitlab.freedesktop.org/pixman/pixman",
      "licenseDeclared": "MIT",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "Pixman is a pixel manipulation library for X and Cairo",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:0.42.2-1.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-tigervnc-server-minimal-1.13.1",
      "name": "tigervnc-server-minimal",
      "licenseConcluded": "GPLv2+",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "4762e67c252e1d9b30ef56d1ffa58d8e46d75d7dba7b8cec4303e8883c1a4974"
        }
      ],
      "description": "This package provides minimal installation of TigerVNC, with which\nother people can access your desktop on your machine.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/tigervnc-server-minimal@1.13.1-3.oe2403sp4?arch=aarch64&epoch=0&upstream=tigervnc-1.13.1-3.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://tigervnc.org",
      "licenseDeclared": "GPLv2+",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "A minimal installation of TigerVNC server",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.13.1-3.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-xorg-x11-xauth-1.1.2",
      "name": "xorg-x11-xauth",
      "licenseConcluded": "MIT",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "6a288087a9625e07711b8612ebb81777a8470c6502b2f3c5604d9229eda1ef27"
        }
      ],
      "description": "xauth is used to edit and display the authorization information\nused in connecting to an X server.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/xorg-x11-xauth@1.1.2-2.oe2403sp4?arch=aarch64&epoch=1&upstream=xorg-x11-xauth-1.1.2-2.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://www.x.org",
      "licenseDeclared": "MIT",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "X.Org X11 X authority utilities",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "1:1.1.2-2.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-xorg-x11-xinit-1.4.2",
      "name": "xorg-x11-xinit",
      "licenseConcluded": "MIT",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "1e6a33476b483a19d26ee472ca2addaa236b0bf633e1c3534dffcf8391f8003b"
        }
      ],
      "description": "X.Org X11 X Window System xinit startup scripts.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/xorg-x11-xinit@1.4.2-2.oe2403sp4?arch=aarch64&epoch=0&upstream=xorg-x11-xinit-1.4.2-2.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://www.x.org",
      "licenseDeclared": "MIT",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "X.Org X11 X Window System xinit startup scripts",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.4.2-2.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-zlib-1.2.13",
      "name": "zlib",
      "licenseConcluded": "zlib and Boost",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "9902bd499d9fee53d5d0a933f781550c425e03bedd97c7dd45e967b030cf2c9a"
        }
      ],
      "description": "Zlib is a free, general-purpose, not covered by any patents, lossless data-compression\nlibrary for use on virtually any computer hardware and operating system. The zlib data\nformat is itself portable across platforms.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/zlib@1.2.13-5.oe2403sp4?arch=aarch64&epoch=0&upstream=zlib-1.2.13-5.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.zlib.net",
      "licenseDeclared": "zlib and Boost",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "A lossless data-compression library",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.2.13-5.oe2403sp4"
    }
  ],
  "relationships": [
    {
      "spdxElementId": "SPDXRef-rpm-tigervnc-server-1.13.1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-bash-5.2.15"
    },
    {
      "spdxElementId": "SPDXRef-rpm-tigervnc-server-1.13.1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-glibc-2.38"
    },
    {
      "spdxElementId": "SPDXRef-rpm-tigervnc-server-1.13.1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-gmp-6.3.0"
    },
    {
      "spdxElementId": "SPDXRef-rpm-tigervnc-server-1.13.1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-gnutls-3.8.2"
    },
    {
      "spdxElementId": "SPDXRef-rpm-tigervnc-server-1.13.1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-libICE-1.1.1"
    },
    {
      "spdxElementId": "SPDXRef-rpm-tigervnc-server-1.13.1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-libSM-1.2.4"
    },
    {
      "spdxElementId": "SPDXRef-rpm-tigervnc-server-1.13.1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-libX11-1.8.7"
    },
    {
      "spdxElementId": "SPDXRef-rpm-tigervnc-server-1.13.1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-libXdamage-1.1.6"
    },
    {
      "spdxElementId": "SPDXRef-rpm-tigervnc-server-1.13.1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-libXext-1.3.5"
    },
    {
      "spdxElementId": "SPDXRef-rpm-tigervnc-server-1.13.1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-libXfixes-6.0.1"
    },
    {
      "spdxElementId": "SPDXRef-rpm-tigervnc-server-1.13.1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-libXrandr-1.5.5"
    },
    {
      "spdxElementId": "SPDXRef-rpm-tigervnc-server-1.13.1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-libXtst-1.2.4"
    },
    {
      "spdxElementId": "SPDXRef-rpm-tigervnc-server-1.13.1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-libgcc-12.3.1"
    },
    {
      "spdxElementId": "SPDXRef-rpm-tigervnc-server-1.13.1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-libjpeg-turbo-3.0.1"
    },
    {
      "spdxElementId": "SPDXRef-rpm-tigervnc-server-1.13.1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-libselinux-3.5"
    },
    {
      "spdxElementId": "SPDXRef-rpm-tigervnc-server-1.13.1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-libstdc---12.3.1"
    },
    {
      "spdxElementId": "SPDXRef-rpm-tigervnc-server-1.13.1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-nettle-3.8.1"
    },
    {
      "spdxElementId": "SPDXRef-rpm-tigervnc-server-1.13.1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-pam-1.5.3"
    },
    {
      "spdxElementId": "SPDXRef-rpm-tigervnc-server-1.13.1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-perl-5.38.0"
    },
    {
      "spdxElementId": "SPDXRef-rpm-tigervnc-server-1.13.1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-pixman-0.42.2"
    },
    {
      "spdxElementId": "SPDXRef-rpm-tigervnc-server-1.13.1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-tigervnc-server-minimal-1.13.1"
    },
    {
      "spdxElementId": "SPDXRef-rpm-tigervnc-server-1.13.1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-xorg-x11-xauth-1.1.2"
    },
    {
      "spdxElementId": "SPDXRef-rpm-tigervnc-server-1.13.1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-xorg-x11-xinit-1.4.2"
    },
    {
      "spdxElementId": "SPDXRef-rpm-tigervnc-server-1.13.1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-zlib-1.2.13"
    }
  ]
}
