{
  "SPDXID": "SPDXRef-DOCUMENT",
  "name": "zbar-gtk-0.0.23.93-1.oe2403sp4.aarch64.rpm",
  "spdxVersion": "SPDX-2.2",
  "creationInfo": {
    "created": "2026-07-04T04:28:12.092529219Z",
    "creators": [
      "openeuler_creator"
    ]
  },
  "dataLicense": "CC0-1.0",
  "documentNamespace": "https://sbom.openEuler.org/zbar-gtk-0.0.23.93-1.oe2403sp4.aarch64.rpm",
  "packages": [
    {
      "SPDXID": "SPDXRef-rpm-zbar-gtk-0.23.93",
      "name": "zbar-gtk",
      "licenseConcluded": "LGPL-2.1-or-later",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "531c72d4be9015f497134a0b2c2df24d68a4ad5f10fae2017ce936711ce230c9"
        }
      ],
      "description": "This package contains a bar code scanning widget for use with GUI\napplications based on GTK 3.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/zbar-gtk@0.23.93-1.oe2403sp4?arch=aarch64&epoch=0&upstream=zbar-0.23.93-1.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://zbar.sourceforge.net/",
      "licenseDeclared": "LGPL-2.1-or-later",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "Bar code reader GTK widget",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:0.23.93-1.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-atk-2.51.0",
      "name": "atk",
      "licenseConcluded": "LGPLv2+",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "fef7345920d9e66ab80d11435cd41bf49f1dc067595a0d847186b0546dee7bfb"
        }
      ],
      "description": "The ATK library provides a set of interfaces for adding accessibility\nsupport to applications and graphical user interface toolkits. By\nsupporting the ATK interfaces, an application or toolkit can be used\nwith tools such as screen readers, magnifiers, and alternative input\ndevices.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/atk@2.51.0-5.oe2403sp4?arch=aarch64&epoch=0&upstream=at-spi2-core-2.51.0-5.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.linuxfoundation.org/en/AT-SPI_on_D-Bus",
      "licenseDeclared": "LGPLv2+",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "Interfaces for accessibility support",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.51.0-5.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-cairo-1.18.0",
      "name": "cairo",
      "licenseConcluded": "LGPLv2 or MPLv1.1",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "3a3d2eb4e21a669e50c34b5c08c8a11b052e6deac667757b95441e8e7529d2f6"
        }
      ],
      "description": "Cairo is a 2D graphics libarary with support for multiple output devices.\nIt provides high-quality display and print output and this package also\ncontains functionality to make cairo graphics library integrate well with\nGObject used by GNOME.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/cairo@1.18.0-2.oe2403sp4?arch=aarch64&epoch=0&upstream=cairo-1.18.0-2.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://cairographics.org",
      "licenseDeclared": "LGPLv2 or MPLv1.1",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "A 2D graphics library",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.18.0-2.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-cairo-gobject-1.18.0",
      "name": "cairo-gobject",
      "licenseConcluded": "LGPLv2 or MPLv1.1",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "3ba58401bafd874f35758fd02685fc426aa438ca6de990de5e6c233371459a22"
        }
      ],
      "description": "Cairo is a 2D graphics library designed to provide high-quality display\nand print output.\n\nThis package contains functionality to make cairo graphics library\nintegrate well with the GObject object system used by GNOME.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/cairo-gobject@1.18.0-2.oe2403sp4?arch=aarch64&epoch=0&upstream=cairo-1.18.0-2.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://cairographics.org",
      "licenseDeclared": "LGPLv2 or MPLv1.1",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "GObject bindings for cairo",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.18.0-2.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-dbus-libs-1.14.8",
      "name": "dbus-libs",
      "licenseConcluded": "AFLv3.0 or GPLv2+",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "b12dc3760f976c49bdabe62b4d8c9fd23a69280c0b63948c7d4dcd289298ced9"
        }
      ],
      "description": "This package contains libraries for D-BUS.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/dbus-libs@1.14.8-3.oe2403sp4?arch=aarch64&epoch=1&upstream=dbus-1.14.8-3.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.freedesktop.org/Software/dbus/",
      "licenseDeclared": "AFLv3.0 or GPLv2+",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "Libraries for D-BUS",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "1:1.14.8-3.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-gdk-pixbuf2-2.42.10",
      "name": "gdk-pixbuf2",
      "licenseConcluded": "LGPLv2+",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "ffd39c1e6bb481d1c5ee24ca2ebaa0b2d141e3efac61d99ffc67533386560b22"
        }
      ],
      "description": "gdk is written in C but has been designed from the ground up to support a wide range of languages.\nIt provide a complete set of widgets,and suitable for projects ranging from small one-off\ntools to complete application suites.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/gdk-pixbuf2@2.42.10-7.oe2403sp4?arch=aarch64&epoch=0&upstream=gdk-pixbuf2-2.42.10-7.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://gitlab.gnome.org/GNOME/gdk-pixbuf",
      "licenseDeclared": "LGPLv2+",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "gdk is a multi-platform toolkit for creating graphical user interfaces.",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.42.10-7.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-glib2-2.78.3",
      "name": "glib2",
      "licenseConcluded": "LGPLv2+",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "b63377dbcdc318afd72ce4efc4a5963337cfbc722f50f51f300eac3ebb2a793a"
        }
      ],
      "description": "GLib is a bundle of three (formerly five) low-level system libraries\nwritten in C and developed mainly by GNOME. GLib's code was separated\nfrom GTK, so it can be used by software other than GNOME and has been\ndeveloped in parallel ever since.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/glib2@2.78.3-16.oe2403sp4?arch=aarch64&epoch=0&upstream=glib2-2.78.3-16.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://www.gtk.org",
      "licenseDeclared": "LGPLv2+",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "The core library that forms the basis for projects such as GTK+ and GNOME",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.78.3-16.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-glibc-2.38",
      "name": "glibc",
      "licenseConcluded": "LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net-2.0 and ISC and Public Domain and GFDL-1.3-only",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "972f6f0ead2fbc0f525623aa566baec969734e89308b0c92aa05a9f8d3c7299f"
        }
      ],
      "description": "The GNU C Library project provides the core libraries for the GNU system and\nGNU/Linux systems, as well as many other systems that use Linux as the kernel.\nThese libraries provide critical APIs including ISO C11, POSIX.1-2008, BSD,\nOS-specific APIs and more. These APIs include such foundational facilities as\nopen, read, write, malloc, printf, getaddrinfo, dlopen, pthread_create, crypt,\n login, exit and more.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/glibc@2.38-107.oe2403sp4?arch=aarch64&epoch=0&upstream=glibc-2.38-107.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.gnu.org/software/glibc/",
      "licenseDeclared": "LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net-2.0 and ISC and Public Domain and GFDL-1.3-only",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "The GNU libc libraries",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.38-107.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-gobject-introspection-1.76.1",
      "name": "gobject-introspection",
      "licenseConcluded": "GPLv2+ and LGPLv2+ and MIT",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "800b84df3ebdb3e6bcd28c0cf7bb8319b3bb4e2d25a090579a26f07fff68ba4e"
        }
      ],
      "description": "GObject Introspection can scan C header and source files in order to\ngenerate introspection \"typelib\" files.  It also provides an API to examine\ntypelib files, useful for creating language bindings among other\nthings.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/gobject-introspection@1.76.1-4.oe2403sp4?arch=aarch64&epoch=0&upstream=gobject-introspection-1.76.1-4.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://wiki.gnome.org/Projects/GObjectIntrospection",
      "licenseDeclared": "GPLv2+ and LGPLv2+ and MIT",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "Introspection system for GObject-based libraries",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.76.1-4.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-gtk2-2.24.33",
      "name": "gtk2",
      "licenseConcluded": "LGPL-2.0-or-later",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "02048f8bd7f5532eabb485b3357b979713878c3d697e162d672967a08194c190"
        }
      ],
      "description": "GTK+ is a library for creating graphical user interfaces. The library\nis created in C programming language. The GTK+ is also called the GIMP\nToolkit. Originally, the library was created while developing the GIMP\nimage manipulation program.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/gtk2@2.24.33-10.oe2403sp4?arch=aarch64&epoch=0&upstream=gtk2-2.24.33-10.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.gtk.org",
      "licenseDeclared": "LGPL-2.0-or-later",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "GTK+ graphical user interface library",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.24.33-10.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-gtk3-3.24.52",
      "name": "gtk3",
      "licenseConcluded": "LGPL-2.0-or-later",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "66040c092f85843ebd627c56f2d4077b3510a0e156502122033baff1245c6cbe"
        }
      ],
      "description": "GTK+ is an object-oriented widget toolkit written in the programming language C;\nit has a C-based object-oriented architecture that allows for maximum\nflexibility. The GTK+ library contains a set of graphical control elements\n(widgets)for creating graphical user interfaces. This package contains version 3\nof GTK+.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/gtk3@3.24.52-1.oe2403sp4?arch=aarch64&epoch=0&upstream=gtk3-3.24.52-1.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://www.gtk.org",
      "licenseDeclared": "LGPL-2.0-or-later",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "GTK+ graphical user interface library",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:3.24.52-1.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-gtk4-4.10.5",
      "name": "gtk4",
      "licenseConcluded": "LGPLv2+",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "b6c292b2234c232d3e66e05d919b47ea57c4b8a35b1d48a9670f5eed44383caa"
        }
      ],
      "description": "GTK is a multi-platform toolkit for creating graphical user\ninterfaces. Offering a complete set of widgets, GTK is suitable for\nprojects ranging from small one-off tools to complete application\nsuites.\n\nThis package contains version 4 of GTK.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/gtk4@4.10.5-1.oe2403sp4?arch=aarch64&epoch=0&upstream=gtk4-4.10.5-1.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://www.gtk.org",
      "licenseDeclared": "LGPLv2+",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "GTK graphical user interface library",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:4.10.5-1.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-harfbuzz-8.3.0",
      "name": "harfbuzz",
      "licenseConcluded": "MIT",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "afcbccf7cf4dbdf7984385f6bd0aa408885a776096470be3c384d459c8f018fb"
        }
      ],
      "description": "HarfBuzz is a text-shaping engine. If you give HarfBuzz a font and a string\ncontaining a sequence of Unicode codepoints, HarfBuzz selects and positions\nthe corresponding glyphs from the font, applying all of the necessary layout\nrules and font features. HarfBuzz then returns the string to you in the form\nthat is correctly arranged for the language and writing system.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/harfbuzz@8.3.0-4.oe2403sp4?arch=aarch64&epoch=0&upstream=harfbuzz-8.3.0-4.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://harfbuzz.github.io/",
      "licenseDeclared": "MIT",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "A text shaping engine",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:8.3.0-4.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-libICE-1.1.1",
      "name": "libICE",
      "licenseConcluded": "MIT",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "763cf8830c81c1d322fe78b6cbfc637244dbe368c6ea569f0c8b078cd4562016"
        }
      ],
      "description": "The X.Org X11 ICE runtime library.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/libICE@1.1.1-1.oe2403sp4?arch=aarch64&epoch=0&upstream=libICE-1.1.1-1.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.x.org",
      "licenseDeclared": "MIT",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "Inter-Client Exchange Library",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.1.1-1.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-libSM-1.2.4",
      "name": "libSM",
      "licenseConcluded": "MIT",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "f336f8ae459907a3c2b385dba8d375eef41da4eb821e53b6f2e1bc7597c719a1"
        }
      ],
      "description": "The libSM package contains runtime libraries for the X.Org X11 SM.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/libSM@1.2.4-1.oe2403sp4?arch=aarch64&epoch=0&upstream=libSM-1.2.4-1.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.x.org",
      "licenseDeclared": "MIT",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "Runtime library for X11 SM",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.2.4-1.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-libX11-1.8.7",
      "name": "libX11",
      "licenseConcluded": "MIT",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "6bf2938750575b4761515da63b39b2567bace743759240648858fddd8c8d762b"
        }
      ],
      "description": "Core X11 protocol client library.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/libX11@1.8.7-3.oe2403sp4?arch=aarch64&epoch=0&upstream=libX11-1.8.7-3.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.x.org",
      "licenseDeclared": "MIT",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "Core X11 protocol client library",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.8.7-3.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-libjpeg-turbo-3.0.1",
      "name": "libjpeg-turbo",
      "licenseConcluded": "IJG",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "1eefbc7760e9fee9c4474cf2976e7791db1f4db43a723a12c33378a273c12878"
        }
      ],
      "description": "libjpeg-turbo is a JPEG image codec that uses SIMD instructions (MMX, SSE2, NEON, AltiVec)\nto accelerate baseline JPEG compression and decompression on x86, x86-64, and ARM systems.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/libjpeg-turbo@3.0.1-2.oe2403sp4?arch=aarch64&epoch=0&upstream=libjpeg-turbo-3.0.1-2.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://sourceforge.net/projects/libjpeg-turbo",
      "licenseDeclared": "IJG",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "MMX/SSE2/SIMD accelerated libjpeg-compatible JPEG codec library",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:3.0.1-2.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-libv4l-1.24.1",
      "name": "libv4l",
      "licenseConcluded": "LGPLv2+ and GPLv2",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "d6d9105c9555a70a3eb9061a3f92d64a890dcaf915373ed4cf1cf8c142678c1e"
        }
      ],
      "description": "libv4l is a collection of libraries which adds a thin abstraction layer on\ntop of video4linux2 devices. The purpose of this (thin) layer is to make it\neasy for application writers to support a wide variety of devices without\nhaving to write separate code for different devices in the same class. libv4l\nconsists of 3 different libraries: libv4lconvert, libv4l1 and libv4l2.\n\nlibv4lconvert offers functions to convert from any (known) pixel-format\nto V4l2_PIX_FMT_BGR24 or V4l2_PIX_FMT_YUV420.\n\nlibv4l1 offers the (deprecated) v4l1 API on top of v4l2 devices, independent\nof the drivers for those devices supporting v4l1 compatibility (which many\nv4l2 drivers do not).\n\nlibv4l2 offers the v4l2 API on top of v4l2 devices, while adding for the\napplication transparent libv4lconvert conversion where necessary.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/libv4l@1.24.1-1.oe2403sp4?arch=aarch64&epoch=0&upstream=v4l-utils-1.24.1-1.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://hansdegoede.livejournal.com/3636.html",
      "licenseDeclared": "LGPLv2+ and GPLv2",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "Collection of video4linux support libraries",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.24.1-1.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-pango-1.51.0",
      "name": "pango",
      "licenseConcluded": "LGPLv2+",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "31faeefef892de0a0d3acbd06f5575239dc34843540d87ec8d22f79c7c4f014d"
        }
      ],
      "description": "Pango is a library for laying out and rendering of text, with an emphasis\non internationalization. Pango can be used anywhere that text layout is needed,\nthough most of the work on Pango so far has been done in the context of the\nGTK+ widget toolkit. Pango forms the core of text and font handling for GTK+.\n\nPango is designed to be modular; the core Pango layout engine can be used\nwith different font backends.\n\nThe integration of Pango with Cairo provides a complete solution with high\nquality text handling and graphics rendering.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/pango@1.51.0-1.oe2403sp4?arch=aarch64&epoch=0&upstream=pango-1.51.0-1.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://pango.gnome.org/",
      "licenseDeclared": "LGPLv2+",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "System for layout and rendering of internationalized text",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.51.0-1.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-qt5-qtbase-5.15.10",
      "name": "qt5-qtbase",
      "licenseConcluded": "LGPL-3.0-only OR GPL-3.0-only WITH Qt-GPL-exception-1.0",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "516a9edcfded7d82b9b0bd0d9566e9afebf4ccd839c822a6d8d86a6ff2aa4494"
        }
      ],
      "description": "Qt is a software toolkit for developing applications.\n\nThis package contains base tools, like string, xml, and network\nhandling.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/qt5-qtbase@5.15.10-16.oe2403sp4?arch=aarch64&epoch=0&upstream=qt5-qtbase-5.15.10-16.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://qt-project.org/",
      "licenseDeclared": "LGPL-3.0-only OR GPL-3.0-only WITH Qt-GPL-exception-1.0",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "Qt5 - QtBase components",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:5.15.10-16.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-qt5-qtbase-gui-5.15.10",
      "name": "qt5-qtbase-gui",
      "licenseConcluded": "LGPL-3.0-only OR GPL-3.0-only WITH Qt-GPL-exception-1.0",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "7570f84d83db03d09d146a4005fb0b304ecc5eafebaa2f8ff0ace24eb87d9656"
        }
      ],
      "description": "Qt5 libraries used for drawing widgets and OpenGL items.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/qt5-qtbase-gui@5.15.10-16.oe2403sp4?arch=aarch64&epoch=0&upstream=qt5-qtbase-5.15.10-16.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://qt-project.org/",
      "licenseDeclared": "LGPL-3.0-only OR GPL-3.0-only WITH Qt-GPL-exception-1.0",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "Qt5 GUI-related libraries",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:5.15.10-16.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-qt5-qtx11extras-5.15.10",
      "name": "qt5-qtx11extras",
      "licenseConcluded": "LGPL-3.0-only OR GPL-3.0-only WITH Qt-GPL-exception-1.0",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "cf604d0cc08407cd2bad0f4060b67a98182d6717ce0f316c3cbee44103bbde71"
        }
      ],
      "description": "The X11 Extras module provides features specific to platforms using X11, e.g.\nLinux and UNIX-like systems including embedded Linux systems that use the X\nWindow System.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/qt5-qtx11extras@5.15.10-1.oe2403sp4?arch=aarch64&epoch=0&upstream=qt5-qtx11extras-5.15.10-1.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.qt.io",
      "licenseDeclared": "LGPL-3.0-only OR GPL-3.0-only WITH Qt-GPL-exception-1.0",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "Qt5 - X11 support library",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:5.15.10-1.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-zbar-libs-0.23.93",
      "name": "zbar-libs",
      "licenseConcluded": "LGPL-2.1-or-later",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "c615f3af4773316892b3474a95332090810511c8f997751e2343f0367b49f6bc"
        }
      ],
      "description": "This package contains the ZBar Bar Code Reader library.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/zbar-libs@0.23.93-1.oe2403sp4?arch=aarch64&epoch=0&upstream=zbar-0.23.93-1.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://zbar.sourceforge.net/",
      "licenseDeclared": "LGPL-2.1-or-later",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "Bar code reader library",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:0.23.93-1.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-zlib-1.2.13",
      "name": "zlib",
      "licenseConcluded": "zlib and Boost",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "9902bd499d9fee53d5d0a933f781550c425e03bedd97c7dd45e967b030cf2c9a"
        }
      ],
      "description": "Zlib is a free, general-purpose, not covered by any patents, lossless data-compression\nlibrary for use on virtually any computer hardware and operating system. The zlib data\nformat is itself portable across platforms.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/zlib@1.2.13-5.oe2403sp4?arch=aarch64&epoch=0&upstream=zlib-1.2.13-5.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.zlib.net",
      "licenseDeclared": "zlib and Boost",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "A lossless data-compression library",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.2.13-5.oe2403sp4"
    }
  ],
  "relationships": [
    {
      "spdxElementId": "SPDXRef-rpm-zbar-gtk-0.23.93",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-atk-2.51.0"
    },
    {
      "spdxElementId": "SPDXRef-rpm-zbar-gtk-0.23.93",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-cairo-1.18.0"
    },
    {
      "spdxElementId": "SPDXRef-rpm-zbar-gtk-0.23.93",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-cairo-gobject-1.18.0"
    },
    {
      "spdxElementId": "SPDXRef-rpm-zbar-gtk-0.23.93",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-dbus-libs-1.14.8"
    },
    {
      "spdxElementId": "SPDXRef-rpm-zbar-gtk-0.23.93",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-gdk-pixbuf2-2.42.10"
    },
    {
      "spdxElementId": "SPDXRef-rpm-zbar-gtk-0.23.93",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-glib2-2.78.3"
    },
    {
      "spdxElementId": "SPDXRef-rpm-zbar-gtk-0.23.93",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-glibc-2.38"
    },
    {
      "spdxElementId": "SPDXRef-rpm-zbar-gtk-0.23.93",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-gobject-introspection-1.76.1"
    },
    {
      "spdxElementId": "SPDXRef-rpm-zbar-gtk-0.23.93",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-gtk2-2.24.33"
    },
    {
      "spdxElementId": "SPDXRef-rpm-zbar-gtk-0.23.93",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-gtk3-3.24.52"
    },
    {
      "spdxElementId": "SPDXRef-rpm-zbar-gtk-0.23.93",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-gtk4-4.10.5"
    },
    {
      "spdxElementId": "SPDXRef-rpm-zbar-gtk-0.23.93",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-harfbuzz-8.3.0"
    },
    {
      "spdxElementId": "SPDXRef-rpm-zbar-gtk-0.23.93",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-libICE-1.1.1"
    },
    {
      "spdxElementId": "SPDXRef-rpm-zbar-gtk-0.23.93",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-libSM-1.2.4"
    },
    {
      "spdxElementId": "SPDXRef-rpm-zbar-gtk-0.23.93",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-libX11-1.8.7"
    },
    {
      "spdxElementId": "SPDXRef-rpm-zbar-gtk-0.23.93",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-libjpeg-turbo-3.0.1"
    },
    {
      "spdxElementId": "SPDXRef-rpm-zbar-gtk-0.23.93",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-libv4l-1.24.1"
    },
    {
      "spdxElementId": "SPDXRef-rpm-zbar-gtk-0.23.93",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-pango-1.51.0"
    },
    {
      "spdxElementId": "SPDXRef-rpm-zbar-gtk-0.23.93",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-qt5-qtbase-5.15.10"
    },
    {
      "spdxElementId": "SPDXRef-rpm-zbar-gtk-0.23.93",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-qt5-qtbase-gui-5.15.10"
    },
    {
      "spdxElementId": "SPDXRef-rpm-zbar-gtk-0.23.93",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-qt5-qtx11extras-5.15.10"
    },
    {
      "spdxElementId": "SPDXRef-rpm-zbar-gtk-0.23.93",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-zbar-libs-0.23.93"
    },
    {
      "spdxElementId": "SPDXRef-rpm-zbar-gtk-0.23.93",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-zlib-1.2.13"
    }
  ]
}
