{
  "SPDXID": "SPDXRef-DOCUMENT",
  "name": "qt5-qtwebkit-0.5.212.0-12.oe2403sp4.aarch64.rpm",
  "spdxVersion": "SPDX-2.2",
  "creationInfo": {
    "created": "2026-07-04T02:24:06.585354077Z",
    "creators": [
      "openeuler_creator"
    ]
  },
  "dataLicense": "CC0-1.0",
  "documentNamespace": "https://sbom.openEuler.org/qt5-qtwebkit-0.5.212.0-12.oe2403sp4.aarch64.rpm",
  "packages": [
    {
      "SPDXID": "SPDXRef-rpm-qt5-qtwebkit-5.212.0",
      "name": "qt5-qtwebkit",
      "licenseConcluded": "LGPL-2.0-or-later and BSD-2-Clause",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "7f79956b8d6352325696f2b810062cb7eee4155ed20c685666f2945fbf915ab5"
        }
      ],
      "description": "Qt5 - QtWebKit components",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/qt5-qtwebkit@5.212.0-12.oe2403sp4?arch=x86_64&epoch=0&upstream=qt5-qtwebkit-5.212.0-12.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://github.com/qtwebkit/qtwebkit",
      "licenseDeclared": "LGPL-2.0-or-later and BSD-2-Clause",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "Qt5 - QtWebKit components",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:5.212.0-12.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-glib2-2.78.3",
      "name": "glib2",
      "licenseConcluded": "LGPLv2+",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "d83786c70f4a2a2e5bb1e714070e09af82abddf60ecaa338d2fb22ae5ad08827"
        }
      ],
      "description": "GLib is a bundle of three (formerly five) low-level system libraries\nwritten in C and developed mainly by GNOME. GLib's code was separated\nfrom GTK, so it can be used by software other than GNOME and has been\ndeveloped in parallel ever since.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/glib2@2.78.3-16.oe2403sp4?arch=x86_64&epoch=0&upstream=glib2-2.78.3-16.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://www.gtk.org",
      "licenseDeclared": "LGPLv2+",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "The core library that forms the basis for projects such as GTK+ and GNOME",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.78.3-16.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-glibc-2.38",
      "name": "glibc",
      "licenseConcluded": "LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net-2.0 and ISC and Public Domain and GFDL-1.3-only",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "b136cc1d6c94e7df3b522b541c89c22084f0ce440f1b9714ed930f664b10ea04"
        }
      ],
      "description": "The GNU C Library project provides the core libraries for the GNU system and\nGNU/Linux systems, as well as many other systems that use Linux as the kernel.\nThese libraries provide critical APIs including ISO C11, POSIX.1-2008, BSD,\nOS-specific APIs and more. These APIs include such foundational facilities as\nopen, read, write, malloc, printf, getaddrinfo, dlopen, pthread_create, crypt,\n login, exit and more.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/glibc@2.38-107.oe2403sp4?arch=x86_64&epoch=0&upstream=glibc-2.38-107.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.gnu.org/software/glibc/",
      "licenseDeclared": "LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net-2.0 and ISC and Public Domain and GFDL-1.3-only",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "The GNU libc libraries",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.38-107.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-gstreamer1-1.22.5",
      "name": "gstreamer1",
      "licenseConcluded": "LGPLv2+",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "fe1aaa178254a410950a80c727446f8368da0a236334be7407646dbdbc3a6ad6"
        }
      ],
      "description": "GStreamer1 implements a framework that allows for processing and encoding of\nmultimedia sources in a manner similar to a shell pipeline.\n\nBecause it's introspection-based, most of the classes follow directly from the\nC API. Therefore, most of the documentation is by example rather than a full\nbreakdown of the class structure.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/gstreamer1@1.22.5-4.oe2403sp4?arch=x86_64&epoch=0&upstream=gstreamer1-1.22.5-4.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://gstreamer.freedesktop.org/",
      "licenseDeclared": "LGPLv2+",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "Bindings for GStreamer 1.0, the open source multimedia framework",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.22.5-4.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-gstreamer1-plugins-base-1.22.5",
      "name": "gstreamer1-plugins-base",
      "licenseConcluded": "LGPLv2+",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "173f7a39cc6ec505bcfe5ff92935534a57d8e14062c1050647a98111c3bd8c31"
        }
      ],
      "description": "GStreamer is a graphics library for built-in media processing components. BasePlug-ins is a the collections used to maintain the GStreamer plugin.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/gstreamer1-plugins-base@1.22.5-4.oe2403sp4?arch=x86_64&epoch=0&upstream=gstreamer1-plugins-base-1.22.5-4.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://gstreamer.freedesktop.org/",
      "licenseDeclared": "LGPLv2+",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "GStreamer streaming media framework base plugins",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.22.5-4.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-hyphen-2.8.8",
      "name": "hyphen",
      "licenseConcluded": "GPLv2 or LGPLv2+ or MPLv1.1",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "6ee882038f98a33e8fc8eebac6efa453e353db4e5f3bdaf78fe5abdfb64d1ac7"
        }
      ],
      "description": "Hyphen is a library for high quality text hyphenation and justification.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/hyphen@2.8.8-16.oe2403sp4?arch=x86_64&epoch=0&upstream=hyphen-2.8.8-16.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://hunspell.github.io",
      "licenseDeclared": "GPLv2 or LGPLv2+ or MPLv1.1",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "A library of text hyphenation",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.8.8-16.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-libX11-1.8.7",
      "name": "libX11",
      "licenseConcluded": "MIT",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "c48a7ca6679cf6ee6918ff26bcc499b8d2d3278b5685870468fa31a32fa4e2c2"
        }
      ],
      "description": "Core X11 protocol client library.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/libX11@1.8.7-3.oe2403sp4?arch=x86_64&epoch=0&upstream=libX11-1.8.7-3.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.x.org",
      "licenseDeclared": "MIT",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "Core X11 protocol client library",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.8.7-3.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-libXcomposite-0.4.6",
      "name": "libXcomposite",
      "licenseConcluded": "MIT",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "f3e69c40e227806399147ee3e456d4f893076d3bf4324893e7c25e068b270b2b"
        }
      ],
      "description": "X Composite Extension library",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/libXcomposite@0.4.6-1.oe2403sp4?arch=x86_64&epoch=0&upstream=libXcomposite-0.4.6-1.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.x.org",
      "licenseDeclared": "MIT",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "X Composite Extension library",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:0.4.6-1.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-libXrender-0.9.11",
      "name": "libXrender",
      "licenseConcluded": "MIT",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "06a06d9ad05fdd878a9e6098e7aaac6d0aa84d0c99c99178775dd5dc5a67e20b"
        }
      ],
      "description": "X.Org X11 libXrender runtime library",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/libXrender@0.9.11-1.oe2403sp4?arch=x86_64&epoch=0&upstream=libXrender-0.9.11-1.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://www.x.org",
      "licenseDeclared": "MIT",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "X.Org X11 libXrender runtime library",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:0.9.11-1.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-libgcc-12.3.1",
      "name": "libgcc",
      "licenseConcluded": "GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "092db224576930eedd234726562459f564bb59dda6c5eca2b004d8abdecc8a2c"
        }
      ],
      "description": "This package contains GCC shared support library which is needed\ne.g. for exception handling support.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/libgcc@12.3.1-110.oe2403sp4?arch=x86_64&epoch=0&upstream=gcc-12.3.1-110.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://gcc.gnu.org",
      "licenseDeclared": "GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "GCC version 12 shared support library",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:12.3.1-110.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-libicu-74.1",
      "name": "libicu",
      "licenseConcluded": "MIT and UCD and Public Domain",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "197d4c6bd40dd1f6ad0cf1f110ce236a27924ad17f723cc9aca00d96dfbb2373"
        }
      ],
      "description": "libs package for icu",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/libicu@74.1-5.oe2403sp4?arch=x86_64&epoch=0&upstream=icu-74.1-5.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://site.icu-project.org/",
      "licenseDeclared": "MIT and UCD and Public Domain",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "libs package for icu",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:74.1-5.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-libjpeg-turbo-3.0.1",
      "name": "libjpeg-turbo",
      "licenseConcluded": "IJG",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "2426c7b4c35abcd55e38c896c9f5821829e1b461e80d3c2ce538bf693dadfb13"
        }
      ],
      "description": "libjpeg-turbo is a JPEG image codec that uses SIMD instructions (MMX, SSE2, NEON, AltiVec)\nto accelerate baseline JPEG compression and decompression on x86, x86-64, and ARM systems.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/libjpeg-turbo@3.0.1-2.oe2403sp4?arch=x86_64&epoch=0&upstream=libjpeg-turbo-3.0.1-2.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://sourceforge.net/projects/libjpeg-turbo",
      "licenseDeclared": "IJG",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "MMX/SSE2/SIMD accelerated libjpeg-compatible JPEG codec library",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:3.0.1-2.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-libpng-1.6.40",
      "name": "libpng",
      "licenseConcluded": "Zlib",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "7c437ba10043b46e06b8f5f4328a896448fa066b7fd560cab68f9b92d70a5413"
        }
      ],
      "description": "The libpng package contains libraries used by other programs for reading and writing PNG format files.\nThe PNG format was designed as a replacement for GIF and, to a lesser extent, TIFF,\nwith many improvements and extensions and lack of patent problems.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/libpng@1.6.40-11.oe2403sp4?arch=x86_64&epoch=2&upstream=libpng-1.6.40-11.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.libpng.org/pub/png/libpng.html",
      "licenseDeclared": "Zlib",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "A library of functions for manipulating PNG image format files",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "2:1.6.40-11.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-libstdc---12.3.1",
      "name": "libstdc++",
      "licenseConcluded": "GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "082bf133e19c4d9e84db23bfc3eee5375a3069ac3ff0a2053138c91066ddab5b"
        }
      ],
      "description": "The libstdc++ package contains a rewritten standard compliant GCC Standard\nC++ Library.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/libstdc++@12.3.1-110.oe2403sp4?arch=x86_64&epoch=0&upstream=gcc-12.3.1-110.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://gcc.gnu.org",
      "licenseDeclared": "GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "GNU Standard C++ Library",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:12.3.1-110.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-libwebp-1.3.2",
      "name": "libwebp",
      "licenseConcluded": "BSD",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "79cab8e0f53773b2630ed15ea93d5d4e1ee3f7570086751dfc39b915e12d364e"
        }
      ],
      "description": "This is an image format that does lossy compression of digital\nphotographic images. WebP consists of a codec based on VP8, and a\ncontainer based on RIFF. Webmasters, web developers and browser\ndevelopers can use WebP to compress, archive and distribute digital\nimages more efficiently.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/libwebp@1.3.2-3.oe2403sp4?arch=x86_64&epoch=0&upstream=libwebp-1.3.2-3.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://www.webmproject.org",
      "licenseDeclared": "BSD",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "Library and tools for the WebP graphics format",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.3.2-3.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-libxml2-2.11.9",
      "name": "libxml2",
      "licenseConcluded": "MIT",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "59c55a85c48b15b1301edbdb19d42ddcd9e1e4c5d6a66b66baace6aed70d650d"
        }
      ],
      "description": "This library allows to manipulate XML files. It includes support\nto read, modify and write XML and HTML files. There is DTDs support\nthis includes parsing and validation even with complex DtDs, either\nat parse time or later once the document has been modified. The output\ncan be a simple SAX stream or and in-memory DOM like representations.\nIn this case one can use the built-in XPath and XPointer implementation\nto select sub nodes or ranges. A flexible Input/Output mechanism is\navailable, with existing HTTP and FTP modules and combined to an\nURI library.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/libxml2@2.11.9-13.oe2403sp4?arch=x86_64&epoch=0&upstream=libxml2-2.11.9-13.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://xmlsoft.org/",
      "licenseDeclared": "MIT",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "Library providing XML and HTML support",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.11.9-13.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-libxslt-1.1.39",
      "name": "libxslt",
      "licenseConcluded": "MIT",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "1d5fabd14af1f070c0481b725a0f5dac770b7c8cb6559bdd61698864568610ac"
        }
      ],
      "description": "Libxslt is the XSLT C library developed for the GNOME project",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/libxslt@1.1.39-7.oe2403sp4?arch=x86_64&epoch=0&upstream=libxslt-1.1.39-7.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://gitlab.gnome.org/GNOME/libxslt",
      "licenseDeclared": "MIT",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "XSLT Transformation Library",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.1.39-7.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-qt5-qtbase-5.15.10",
      "name": "qt5-qtbase",
      "licenseConcluded": "LGPL-3.0-only OR GPL-3.0-only WITH Qt-GPL-exception-1.0",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "8763aa9968250a546d1c51212267c04d15351ba305883d87e5e5200b88abd9cf"
        }
      ],
      "description": "Qt is a software toolkit for developing applications.\n\nThis package contains base tools, like string, xml, and network\nhandling.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/qt5-qtbase@5.15.10-16.oe2403sp4?arch=x86_64&epoch=0&upstream=qt5-qtbase-5.15.10-16.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://qt-project.org/",
      "licenseDeclared": "LGPL-3.0-only OR GPL-3.0-only WITH Qt-GPL-exception-1.0",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "Qt5 - QtBase components",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:5.15.10-16.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-qt5-qtbase-gui-5.15.10",
      "name": "qt5-qtbase-gui",
      "licenseConcluded": "LGPL-3.0-only OR GPL-3.0-only WITH Qt-GPL-exception-1.0",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "52c6b8838917f7607937fd13589766fe0813602bf7e03314e1f59708430f3486"
        }
      ],
      "description": "Qt5 libraries used for drawing widgets and OpenGL items.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/qt5-qtbase-gui@5.15.10-16.oe2403sp4?arch=x86_64&epoch=0&upstream=qt5-qtbase-5.15.10-16.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://qt-project.org/",
      "licenseDeclared": "LGPL-3.0-only OR GPL-3.0-only WITH Qt-GPL-exception-1.0",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "Qt5 GUI-related libraries",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:5.15.10-16.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-qt5-qtdeclarative-5.15.10",
      "name": "qt5-qtdeclarative",
      "licenseConcluded": "LGPL-3.0-only OR GPL-3.0-only WITH Qt-GPL-exception-1.0",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "61d3fbe8d6bb627453aecc36cde02238c00fee3022061acb58bde0c74929ffea"
        }
      ],
      "description": "Qt5 - QtDeclarative component.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/qt5-qtdeclarative@5.15.10-2.oe2403sp4?arch=x86_64&epoch=0&upstream=qt5-qtdeclarative-5.15.10-2.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.qt.io",
      "licenseDeclared": "LGPL-3.0-only OR GPL-3.0-only WITH Qt-GPL-exception-1.0",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "Qt5 - QtDeclarative component",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:5.15.10-2.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-qt5-qtlocation-5.15.10",
      "name": "qt5-qtlocation",
      "licenseConcluded": "LGPL-3.0-only OR GPL-3.0-only WITH Qt-GPL-exception-1.0",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "618624f94ca17325d3c6442a5911c1c58f52f542032937d33fbc2994dc242290"
        }
      ],
      "description": "The Qt Location and Qt Positioning APIs gives developers the ability to\ndetermine a position by using a variety of possible sources, including\nsatellite, or wifi, or text file, and so on.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/qt5-qtlocation@5.15.10-2.oe2403sp4?arch=x86_64&epoch=0&upstream=qt5-qtlocation-5.15.10-2.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.qt.io",
      "licenseDeclared": "LGPL-3.0-only OR GPL-3.0-only WITH Qt-GPL-exception-1.0",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "Qt5 - Location component",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:5.15.10-2.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-qt5-qtsensors-5.15.10",
      "name": "qt5-qtsensors",
      "licenseConcluded": "LGPLv2 with exceptions or GPLv3 with exceptions",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "eace3de802ef71b70d98e98cb3ed63ce2dd527fb0d810ea83378d38075e4bcbb"
        }
      ],
      "description": "Qt is a cross-platform application and UI framework. Using Qt, you can\nwrite web-enabled applications once and deploy them across desktop,\nmobile and embedded systems without rewriting the source code.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/qt5-qtsensors@5.15.10-1.oe2403sp4?arch=x86_64&epoch=0&upstream=qt5-qtsensors-5.15.10-1.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.qt.io/",
      "licenseDeclared": "LGPLv2 with exceptions or GPLv3 with exceptions",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "The Qt5 Sensors library",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:5.15.10-1.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-qt5-qtwebchannel-5.15.10",
      "name": "qt5-qtwebchannel",
      "licenseConcluded": "LGPL-3.0-only OR GPL-3.0-only WITH Qt-GPL-exception-1.0",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "f2e8ffe73151dda0c4aa03b7f62a056f3ff3297c34ec66a2d5489349e3b1104f"
        }
      ],
      "description": "The Qt WebChannel module provides a library for seamless integration of C++\nand QML applications with HTML/JavaScript clients. Any QObject can be\npublished to remote clients, where its public API becomes available.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/qt5-qtwebchannel@5.15.10-1.oe2403sp4?arch=x86_64&epoch=0&upstream=qt5-qtwebchannel-5.15.10-1.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://qt.io",
      "licenseDeclared": "LGPL-3.0-only OR GPL-3.0-only WITH Qt-GPL-exception-1.0",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "Qt5 - WebChannel component",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:5.15.10-1.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-sqlite-3.42.0",
      "name": "sqlite",
      "licenseConcluded": "Public Domain",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "b74f9c04e802f1d9b8f29a4f7d4df65e05aeeeb3f0c41daea644b8196bf15d6d"
        }
      ],
      "description": "SQLite is a C-language library that implements a small, fast, self-contained,\nhigh-reliability, full-featured, SQL database engine. SQLite is the most used\ndatabase engine in the world. SQLite is built into all mobile phones and most\ncomputers and comes bundled inside countless other applications that people\nuse every day.It also include lemon and sqlite3_analyzer and tcl tools.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/sqlite@3.42.0-6.oe2403sp4?arch=x86_64&epoch=0&upstream=sqlite-3.42.0-6.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.sqlite.org/",
      "licenseDeclared": "Public Domain",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "Embeded SQL database",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:3.42.0-6.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-woff2-1.0.2",
      "name": "woff2",
      "licenseConcluded": "MIT",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "cf278a348fc90ec27e8cecd6f282e7ef3d6ee51dee6c909aaf77604b4ccd0521"
        }
      ],
      "description": "Web Open Font Format (WOFF) 2.0 is an update to the existing WOFF\n1.0 with improved compression that is achieved by using the Brotli\nalgorithm. The primary purpose of the WOFF2 format is to\nefficiently package fonts linked to Web documents by means of CSS\n@font-face rules.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/woff2@1.0.2-6.oe2403sp4?arch=x86_64&epoch=0&upstream=woff2-1.0.2-6.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://github.com/google/woff2",
      "licenseDeclared": "MIT",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "Web Open Font Format 2.0 library",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.0.2-6.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-zlib-1.2.13",
      "name": "zlib",
      "licenseConcluded": "zlib and Boost",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "dbb93ba5bcc987d252b148c30b5ffc4dc054b3c59ef0adcfcdecdc3ca2014514"
        }
      ],
      "description": "Zlib is a free, general-purpose, not covered by any patents, lossless data-compression\nlibrary for use on virtually any computer hardware and operating system. The zlib data\nformat is itself portable across platforms.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/zlib@1.2.13-5.oe2403sp4?arch=x86_64&epoch=0&upstream=zlib-1.2.13-5.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.zlib.net",
      "licenseDeclared": "zlib and Boost",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "A lossless data-compression library",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.2.13-5.oe2403sp4"
    }
  ],
  "relationships": [
    {
      "spdxElementId": "SPDXRef-rpm-qt5-qtwebkit-5.212.0",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-glib2-2.78.3"
    },
    {
      "spdxElementId": "SPDXRef-rpm-qt5-qtwebkit-5.212.0",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-glibc-2.38"
    },
    {
      "spdxElementId": "SPDXRef-rpm-qt5-qtwebkit-5.212.0",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-gstreamer1-1.22.5"
    },
    {
      "spdxElementId": "SPDXRef-rpm-qt5-qtwebkit-5.212.0",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-gstreamer1-plugins-base-1.22.5"
    },
    {
      "spdxElementId": "SPDXRef-rpm-qt5-qtwebkit-5.212.0",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-hyphen-2.8.8"
    },
    {
      "spdxElementId": "SPDXRef-rpm-qt5-qtwebkit-5.212.0",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-libX11-1.8.7"
    },
    {
      "spdxElementId": "SPDXRef-rpm-qt5-qtwebkit-5.212.0",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-libXcomposite-0.4.6"
    },
    {
      "spdxElementId": "SPDXRef-rpm-qt5-qtwebkit-5.212.0",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-libXrender-0.9.11"
    },
    {
      "spdxElementId": "SPDXRef-rpm-qt5-qtwebkit-5.212.0",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-libgcc-12.3.1"
    },
    {
      "spdxElementId": "SPDXRef-rpm-qt5-qtwebkit-5.212.0",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-libicu-74.1"
    },
    {
      "spdxElementId": "SPDXRef-rpm-qt5-qtwebkit-5.212.0",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-libjpeg-turbo-3.0.1"
    },
    {
      "spdxElementId": "SPDXRef-rpm-qt5-qtwebkit-5.212.0",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-libpng-1.6.40"
    },
    {
      "spdxElementId": "SPDXRef-rpm-qt5-qtwebkit-5.212.0",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-libstdc---12.3.1"
    },
    {
      "spdxElementId": "SPDXRef-rpm-qt5-qtwebkit-5.212.0",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-libwebp-1.3.2"
    },
    {
      "spdxElementId": "SPDXRef-rpm-qt5-qtwebkit-5.212.0",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-libxml2-2.11.9"
    },
    {
      "spdxElementId": "SPDXRef-rpm-qt5-qtwebkit-5.212.0",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-libxslt-1.1.39"
    },
    {
      "spdxElementId": "SPDXRef-rpm-qt5-qtwebkit-5.212.0",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-qt5-qtbase-5.15.10"
    },
    {
      "spdxElementId": "SPDXRef-rpm-qt5-qtwebkit-5.212.0",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-qt5-qtbase-gui-5.15.10"
    },
    {
      "spdxElementId": "SPDXRef-rpm-qt5-qtwebkit-5.212.0",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-qt5-qtdeclarative-5.15.10"
    },
    {
      "spdxElementId": "SPDXRef-rpm-qt5-qtwebkit-5.212.0",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-qt5-qtlocation-5.15.10"
    },
    {
      "spdxElementId": "SPDXRef-rpm-qt5-qtwebkit-5.212.0",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-qt5-qtsensors-5.15.10"
    },
    {
      "spdxElementId": "SPDXRef-rpm-qt5-qtwebkit-5.212.0",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-qt5-qtwebchannel-5.15.10"
    },
    {
      "spdxElementId": "SPDXRef-rpm-qt5-qtwebkit-5.212.0",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-sqlite-3.42.0"
    },
    {
      "spdxElementId": "SPDXRef-rpm-qt5-qtwebkit-5.212.0",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-woff2-1.0.2"
    },
    {
      "spdxElementId": "SPDXRef-rpm-qt5-qtwebkit-5.212.0",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-zlib-1.2.13"
    }
  ]
}
