{
  "SPDXID": "SPDXRef-DOCUMENT",
  "name": "spice-gtk-0.0.42-1.oe2403sp4.aarch64.rpm",
  "spdxVersion": "SPDX-2.2",
  "creationInfo": {
    "created": "2026-07-04T02:24:06.585354077Z",
    "creators": [
      "openeuler_creator"
    ]
  },
  "dataLicense": "CC0-1.0",
  "documentNamespace": "https://sbom.openEuler.org/spice-gtk-0.0.42-1.oe2403sp4.aarch64.rpm",
  "packages": [
    {
      "SPDXID": "SPDXRef-rpm-spice-gtk-0.42",
      "name": "spice-gtk",
      "licenseConcluded": "LGPLv2+",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "7ee4f12d1ef2ef1d1ccfc6e5b10a746d1c4471d215f0d8aa29cde565e989f001"
        }
      ],
      "description": "The spice-gtk packages provide a GIMP Toolkit (GTK+) widget for SPICE (Simple\nProtocol for Independent Computing Environments) clients. Both Virtual Machine\nManager and Virtual Machine Viewer can make use of this widget to access virtual\nmachines using the SPICE protocol.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/spice-gtk@0.42-1.oe2403sp4?arch=x86_64&epoch=0&upstream=spice-gtk-0.42-1.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://www.spice-space.org/spice-gtk.html",
      "licenseDeclared": "LGPLv2+",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "A GIMP Toolkit (GTK+) widget for SPICE clients",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:0.42-1.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-atk-2.51.0",
      "name": "atk",
      "licenseConcluded": "LGPLv2+",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "19d42d4b8e5ef0b1802dc6e03c6cf715f7cb6199df1308f3bea2e94d69ffc6b1"
        }
      ],
      "description": "The ATK library provides a set of interfaces for adding accessibility\nsupport to applications and graphical user interface toolkits. By\nsupporting the ATK interfaces, an application or toolkit can be used\nwith tools such as screen readers, magnifiers, and alternative input\ndevices.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/atk@2.51.0-5.oe2403sp4?arch=x86_64&epoch=0&upstream=at-spi2-core-2.51.0-5.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.linuxfoundation.org/en/AT-SPI_on_D-Bus",
      "licenseDeclared": "LGPLv2+",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "Interfaces for accessibility support",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.51.0-5.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-bash-5.2.15",
      "name": "bash",
      "licenseConcluded": "GPLv3",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "a980f85dfb01951730f94f5537d836d925d5e23cafc786f2e63f0087f69e1d93"
        }
      ],
      "description": "Bash is the GNU Project's shell. Bash is the Bourne Again SHell. Bash is an sh-compatible\nshell that incorporates useful features from the Korn shell (ksh) and C shell (csh). It is\nintended to conform to the IEEE POSIX P1003.2/ISO 9945.2 Shell and Tools standard. It offers\nfunctional improvements over sh for both programming and interactive use. In addition, most\nsh scripts can be run by Bash without modification.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/bash@5.2.15-19.oe2403sp4?arch=x86_64&epoch=0&upstream=bash-5.2.15-19.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://www.gnu.org/software/bash",
      "licenseDeclared": "GPLv3",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "It is the Bourne Again Shell",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:5.2.15-19.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-cairo-1.18.0",
      "name": "cairo",
      "licenseConcluded": "LGPLv2 or MPLv1.1",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "af0e7ef7eb788bbd35e031ba8f9977a43a96b283ca2a204cbe3d732e25a93474"
        }
      ],
      "description": "Cairo is a 2D graphics libarary with support for multiple output devices.\nIt provides high-quality display and print output and this package also\ncontains functionality to make cairo graphics library integrate well with\nGObject used by GNOME.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/cairo@1.18.0-2.oe2403sp4?arch=x86_64&epoch=0&upstream=cairo-1.18.0-2.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://cairographics.org",
      "licenseDeclared": "LGPLv2 or MPLv1.1",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "A 2D graphics library",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.18.0-2.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-coreutils-9.4",
      "name": "coreutils",
      "licenseConcluded": "GPLv3+",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "433e473f0f3e48029a50a63e45680e5ae03a29789cc26d8952d691ea388b3b62"
        }
      ],
      "description": "These are the GNU core utilities.  This package is the combination of\nthe old GNU fileutils, sh-utils, and textutils packages.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/coreutils@9.4-22.oe2403sp4?arch=x86_64&epoch=0&upstream=coreutils-9.4-22.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://www.gnu.org/software/coreutils/",
      "licenseDeclared": "GPLv3+",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "A set of basic GNU tools commonly used in shell scripts",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:9.4-22.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-cyrus-sasl-lib-2.1.28",
      "name": "cyrus-sasl-lib",
      "licenseConcluded": "BSD with advertising",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "7ad7889f64dd59c178da6fdc2e5d8816cf3f4359a4144d34cc53ecc68597f57f"
        }
      ],
      "description": "The cyrus-sasl-lib package contains shared libraries which are needed by\napplications which use the Cyrus SASL library.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/cyrus-sasl-lib@2.1.28-11.oe2403sp4?arch=x86_64&epoch=0&upstream=cyrus-sasl-2.1.28-11.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://www.cyrusimap.org/sasl/",
      "licenseDeclared": "BSD with advertising",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "Shared libraries needed by applications which use Cyrus SASL",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.1.28-11.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-gdk-pixbuf2-2.42.10",
      "name": "gdk-pixbuf2",
      "licenseConcluded": "LGPLv2+",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "92e4b9972b3d55d3adc97693aaae1331773bdaecdb3fee9ae1473e61cb8a311f"
        }
      ],
      "description": "gdk is written in C but has been designed from the ground up to support a wide range of languages.\nIt provide a complete set of widgets,and suitable for projects ranging from small one-off\ntools to complete application suites.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/gdk-pixbuf2@2.42.10-7.oe2403sp4?arch=x86_64&epoch=0&upstream=gdk-pixbuf2-2.42.10-7.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://gitlab.gnome.org/GNOME/gdk-pixbuf",
      "licenseDeclared": "LGPLv2+",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "gdk is a multi-platform toolkit for creating graphical user interfaces.",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.42.10-7.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-glib2-2.78.3",
      "name": "glib2",
      "licenseConcluded": "LGPLv2+",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "d83786c70f4a2a2e5bb1e714070e09af82abddf60ecaa338d2fb22ae5ad08827"
        }
      ],
      "description": "GLib is a bundle of three (formerly five) low-level system libraries\nwritten in C and developed mainly by GNOME. GLib's code was separated\nfrom GTK, so it can be used by software other than GNOME and has been\ndeveloped in parallel ever since.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/glib2@2.78.3-16.oe2403sp4?arch=x86_64&epoch=0&upstream=glib2-2.78.3-16.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://www.gtk.org",
      "licenseDeclared": "LGPLv2+",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "The core library that forms the basis for projects such as GTK+ and GNOME",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.78.3-16.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-glibc-2.38",
      "name": "glibc",
      "licenseConcluded": "LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net-2.0 and ISC and Public Domain and GFDL-1.3-only",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "b136cc1d6c94e7df3b522b541c89c22084f0ce440f1b9714ed930f664b10ea04"
        }
      ],
      "description": "The GNU C Library project provides the core libraries for the GNU system and\nGNU/Linux systems, as well as many other systems that use Linux as the kernel.\nThese libraries provide critical APIs including ISO C11, POSIX.1-2008, BSD,\nOS-specific APIs and more. These APIs include such foundational facilities as\nopen, read, write, malloc, printf, getaddrinfo, dlopen, pthread_create, crypt,\n login, exit and more.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/glibc@2.38-107.oe2403sp4?arch=x86_64&epoch=0&upstream=glibc-2.38-107.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.gnu.org/software/glibc/",
      "licenseDeclared": "LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net-2.0 and ISC and Public Domain and GFDL-1.3-only",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "The GNU libc libraries",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.38-107.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-gobject-introspection-1.76.1",
      "name": "gobject-introspection",
      "licenseConcluded": "GPLv2+ and LGPLv2+ and MIT",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "d35db215253256181c1957773ef1ed6871134723c4374174196ad7506039bbd1"
        }
      ],
      "description": "GObject Introspection can scan C header and source files in order to\ngenerate introspection \"typelib\" files.  It also provides an API to examine\ntypelib files, useful for creating language bindings among other\nthings.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/gobject-introspection@1.76.1-4.oe2403sp4?arch=x86_64&epoch=0&upstream=gobject-introspection-1.76.1-4.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://wiki.gnome.org/Projects/GObjectIntrospection",
      "licenseDeclared": "GPLv2+ and LGPLv2+ and MIT",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "Introspection system for GObject-based libraries",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.76.1-4.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-gstreamer1-1.22.5",
      "name": "gstreamer1",
      "licenseConcluded": "LGPLv2+",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "fe1aaa178254a410950a80c727446f8368da0a236334be7407646dbdbc3a6ad6"
        }
      ],
      "description": "GStreamer1 implements a framework that allows for processing and encoding of\nmultimedia sources in a manner similar to a shell pipeline.\n\nBecause it's introspection-based, most of the classes follow directly from the\nC API. Therefore, most of the documentation is by example rather than a full\nbreakdown of the class structure.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/gstreamer1@1.22.5-4.oe2403sp4?arch=x86_64&epoch=0&upstream=gstreamer1-1.22.5-4.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://gstreamer.freedesktop.org/",
      "licenseDeclared": "LGPLv2+",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "Bindings for GStreamer 1.0, the open source multimedia framework",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.22.5-4.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-gstreamer1-plugins-base-1.22.5",
      "name": "gstreamer1-plugins-base",
      "licenseConcluded": "LGPLv2+",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "173f7a39cc6ec505bcfe5ff92935534a57d8e14062c1050647a98111c3bd8c31"
        }
      ],
      "description": "GStreamer is a graphics library for built-in media processing components. BasePlug-ins is a the collections used to maintain the GStreamer plugin.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/gstreamer1-plugins-base@1.22.5-4.oe2403sp4?arch=x86_64&epoch=0&upstream=gstreamer1-plugins-base-1.22.5-4.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://gstreamer.freedesktop.org/",
      "licenseDeclared": "LGPLv2+",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "GStreamer streaming media framework base plugins",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.22.5-4.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-gtk2-2.24.33",
      "name": "gtk2",
      "licenseConcluded": "LGPL-2.0-or-later",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "cfa710e116158bcceeca65da16be505efc9bcf503ca41932879fdc35c9d85ffe"
        }
      ],
      "description": "GTK+ is a library for creating graphical user interfaces. The library\nis created in C programming language. The GTK+ is also called the GIMP\nToolkit. Originally, the library was created while developing the GIMP\nimage manipulation program.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/gtk2@2.24.33-10.oe2403sp4?arch=x86_64&epoch=0&upstream=gtk2-2.24.33-10.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.gtk.org",
      "licenseDeclared": "LGPL-2.0-or-later",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "GTK+ graphical user interface library",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.24.33-10.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-gtk3-3.24.52",
      "name": "gtk3",
      "licenseConcluded": "LGPL-2.0-or-later",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "5d43596906e9716b66e02877a1abd8a01081758f7fbc373a467c3e77e4bcd5cd"
        }
      ],
      "description": "GTK+ is an object-oriented widget toolkit written in the programming language C;\nit has a C-based object-oriented architecture that allows for maximum\nflexibility. The GTK+ library contains a set of graphical control elements\n(widgets)for creating graphical user interfaces. This package contains version 3\nof GTK+.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/gtk3@3.24.52-1.oe2403sp4?arch=x86_64&epoch=0&upstream=gtk3-3.24.52-1.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://www.gtk.org",
      "licenseDeclared": "LGPL-2.0-or-later",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "GTK+ graphical user interface library",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:3.24.52-1.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-gtk4-4.10.5",
      "name": "gtk4",
      "licenseConcluded": "LGPLv2+",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "18d26ef51eeca47ccbc681df2052dec4a60da7f6ab75f9023fa1faa3da370743"
        }
      ],
      "description": "GTK is a multi-platform toolkit for creating graphical user\ninterfaces. Offering a complete set of widgets, GTK is suitable for\nprojects ranging from small one-off tools to complete application\nsuites.\n\nThis package contains version 4 of GTK.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/gtk4@4.10.5-1.oe2403sp4?arch=x86_64&epoch=0&upstream=gtk4-4.10.5-1.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://www.gtk.org",
      "licenseDeclared": "LGPLv2+",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "GTK graphical user interface library",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:4.10.5-1.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-harfbuzz-8.3.0",
      "name": "harfbuzz",
      "licenseConcluded": "MIT",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "6cdccb82a41293474ad4ae678bdf1ec25fbcf0aff89a4032869f54e7cdf52e16"
        }
      ],
      "description": "HarfBuzz is a text-shaping engine. If you give HarfBuzz a font and a string\ncontaining a sequence of Unicode codepoints, HarfBuzz selects and positions\nthe corresponding glyphs from the font, applying all of the necessary layout\nrules and font features. HarfBuzz then returns the string to you in the form\nthat is correctly arranged for the language and writing system.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/harfbuzz@8.3.0-4.oe2403sp4?arch=x86_64&epoch=0&upstream=harfbuzz-8.3.0-4.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://harfbuzz.github.io/",
      "licenseDeclared": "MIT",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "A text shaping engine",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:8.3.0-4.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-json-glib-1.8.0",
      "name": "json-glib",
      "licenseConcluded": "LGPLv2+",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "6f7e80eb2fb6d870f6eafe3d28b38cb7ea9cc76f1a460069f0680d7fb2cf2a11"
        }
      ],
      "description": "JSON-GLib is a library providing serialization and deserialization support\nfor the JavaScript Object Notation (JSON) format described by RFC 4627.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/json-glib@1.8.0-1.oe2403sp4?arch=x86_64&epoch=0&upstream=json-glib-1.8.0-1.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://wiki.gnome.org/Projects/JsonGlib",
      "licenseDeclared": "LGPLv2+",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "Library for lightweight data-interchange format",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.8.0-1.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-libX11-1.8.7",
      "name": "libX11",
      "licenseConcluded": "MIT",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "c48a7ca6679cf6ee6918ff26bcc499b8d2d3278b5685870468fa31a32fa4e2c2"
        }
      ],
      "description": "Core X11 protocol client library.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/libX11@1.8.7-3.oe2403sp4?arch=x86_64&epoch=0&upstream=libX11-1.8.7-3.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.x.org",
      "licenseDeclared": "MIT",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "Core X11 protocol client library",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.8.7-3.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-libacl-2.3.1",
      "name": "libacl",
      "licenseConcluded": "LGPLv2+",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "3e3315fc9d349dddf9a3bc6fbfac1781d632c22a1af470eaa801425daaf01383"
        }
      ],
      "description": "This package contains the library for manipulating access control list.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/libacl@2.3.1-6.oe2403sp4?arch=x86_64&epoch=0&upstream=acl-2.3.1-6.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://savannah.nongnu.org/projects/acl",
      "licenseDeclared": "LGPLv2+",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "Library for supporting access control list",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.3.1-6.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-libcacard-2.8.1",
      "name": "libcacard",
      "licenseConcluded": "LGPLv2+",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "8f986fe80ebfda2df9211655ab09b2d802c636cc779a328e2e7cee66df1098c7"
        }
      ],
      "description": "This package uses certificates read from NSS and separate pki containers to implement\nDoD CAC standard so that it can provide emulation of smart cards to a virtual card\nreader running in a guest virtual machine.\n\nIt implements DoD CAC standard with separate pki containers\n(compatible coolkey), using certificates read from NSS.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/libcacard@2.8.1-2.oe2403sp4?arch=x86_64&epoch=41&upstream=libcacard-2.8.1-2.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://gitlab.freedesktop.org/spice/libcacard",
      "licenseDeclared": "LGPLv2+",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "CAC (Common Access Card) library",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "41:2.8.1-2.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-libcap-ng-0.8.3",
      "name": "libcap-ng",
      "licenseConcluded": "LGPLv2+ and GPLv2+",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "f6c0c763e23058f548b2f332df056bae14289bf37d296b0efb9af1a3d28d3b85"
        }
      ],
      "description": "The libcap-ng library is intended to make programming with posix\ncapabilities much easier than the traditional libcap library.It\nincludes utilities that can analyse all currently running applications\nand print out any capabilities and whether or not it has an open\nended bounding set.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/libcap-ng@0.8.3-3.oe2403sp4?arch=x86_64&epoch=0&upstream=libcap-ng-0.8.3-3.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://people.redhat.com/sgrubb/libcap-ng",
      "licenseDeclared": "LGPLv2+ and GPLv2+",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "Libcap-ng is a library used for posix capabilities programming",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:0.8.3-3.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-libepoxy-1.5.10",
      "name": "libepoxy",
      "licenseConcluded": "MIT",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "dc059edb5037530eb920db91c65fa271f48efdec07330b3d120f9f833a922413"
        }
      ],
      "description": "A library for handling OpenGL function pointer management.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/libepoxy@1.5.10-3.oe2403sp4?arch=x86_64&epoch=0&upstream=libepoxy-1.5.10-3.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://github.com/anholt/libepoxy",
      "licenseDeclared": "MIT",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "library work with epoxy runtime",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.5.10-3.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-libjpeg-turbo-3.0.1",
      "name": "libjpeg-turbo",
      "licenseConcluded": "IJG",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "2426c7b4c35abcd55e38c896c9f5821829e1b461e80d3c2ce538bf693dadfb13"
        }
      ],
      "description": "libjpeg-turbo is a JPEG image codec that uses SIMD instructions (MMX, SSE2, NEON, AltiVec)\nto accelerate baseline JPEG compression and decompression on x86, x86-64, and ARM systems.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/libjpeg-turbo@3.0.1-2.oe2403sp4?arch=x86_64&epoch=0&upstream=libjpeg-turbo-3.0.1-2.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://sourceforge.net/projects/libjpeg-turbo",
      "licenseDeclared": "IJG",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "MMX/SSE2/SIMD accelerated libjpeg-compatible JPEG codec library",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:3.0.1-2.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-libphodav-3.0",
      "name": "libphodav",
      "licenseConcluded": "LGPLv2+",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "b14360682dd70e80943917ff34fc716535559862cfe0abf5fb8804cf21d8408b"
        }
      ],
      "description": "This package provides the library of WebDAV server.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/libphodav@3.0-3.oe2403sp4?arch=x86_64&epoch=0&upstream=phodav-3.0-3.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://wiki.gnome.org/phodav",
      "licenseDeclared": "LGPLv2+",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "A library to serve files with WebDAV",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:3.0-3.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-libsoup3-3.4.5",
      "name": "libsoup3",
      "licenseConcluded": "LGPL-2.0-or-later",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "a721295232433d7c830b3549bf481615cc3bed217004601450b2c3ee5f3f7725"
        }
      ],
      "description": "Libsoup is an HTTP library implementation in C. It was originally part\nof a SOAP (Simple Object Access Protocol) implementation called Soup, but\nthe SOAP and non-SOAP parts have now been split into separate packages.\n\nlibsoup uses the Glib main loop and is designed to work well with GTK\napplications. This enables GNOME applications to access HTTP servers\non the network in a completely asynchronous fashion, very similar to\nthe Gtk+ programming model (a synchronous operation mode is also\nsupported for those who want it), but the SOAP parts were removed\nlong ago.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/libsoup3@3.4.5-20.oe2403sp4?arch=x86_64&epoch=0&upstream=libsoup3-3.4.5-20.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://wiki.gnome.org/Projects/libsoup",
      "licenseDeclared": "LGPL-2.0-or-later",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "Soup, an HTTP library implementation",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:3.4.5-20.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-libusbx-1.0.26",
      "name": "libusbx",
      "licenseConcluded": "LGPLv2+",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "34d4035fd582dc80ddab27efabbc78a9d8c5f43daacb3dcdd711ce892f071002"
        }
      ],
      "description": "libusb is a library for USB device access from Linux, macOS, Windows, OpenBSD/NetBSD and Haiku userspace. It is written in C (Haiku backend in C++) and licensed under the GNU Lesser General Public License version 2.1 or, at your option, any later version (see COPYING).\n\nlibusb is abstracted internally in such a way that it can hopefully be ported to other operating systems. Please see the PORTING file for more information.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/libusbx@1.0.26-3.oe2403sp4?arch=x86_64&epoch=0&upstream=libusbx-1.0.26-3.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://libusb.info",
      "licenseDeclared": "LGPLv2+",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "Library for accessing USB devices",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.0.26-3.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-lz4-1.9.4",
      "name": "lz4",
      "licenseConcluded": "GPLv2+ and BSD",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "4199914de224546d2618943863f7a04bd0ccb960bdd59159bf99aa8ccfc1e411"
        }
      ],
      "description": "LZ4 is lossless compression algorithm, providing compression speed > 500 MB/s per\ncore (>0.15 Bytes/cycle). It features an extremely fast decoder, with speed in\nmultiple GB/s per core (~1 Byte/cycle). A high compression derivative, called\nLZ4_HC, is available, trading customizable CPU time for compression ratio.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/lz4@1.9.4-5.oe2403sp4?arch=x86_64&epoch=0&upstream=lz4-1.9.4-5.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://lz4.github.io/lz4/",
      "licenseDeclared": "GPLv2+ and BSD",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "Extremely fast compression algorithm",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.9.4-5.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-openssl-libs-3.5.6",
      "name": "openssl-libs",
      "licenseConcluded": "Apache-2.0",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "c8c19a74b9e9791bab592e1e581bbcdf43a5e8d05a705ecd6acd3cc2c130ce17"
        }
      ],
      "description": "The openssl-libs package contains the libraries that are used\nby various applications which support cryptographic algorithms\nand protocols.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/openssl-libs@3.5.6-4.oe2403sp4?arch=x86_64&epoch=1&upstream=openssl-3.5.6-4.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://www.openssl.org/",
      "licenseDeclared": "Apache-2.0",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "A general purpose cryptography library with TLS implementation",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "1:3.5.6-4.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-opus-1.4",
      "name": "opus",
      "licenseConcluded": "BSD",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "ff5703c734e33dc4d6146acc71b47b0dbad990d33bc4b7112a8e27cdfa420873"
        }
      ],
      "description": "Opus is unmatched for interactive speech and music transmission over the\nInternet, but is also intended for storage and streaming applications. It is\nstandardized by the Internet Engineering Task Force (IETF) as RFC 6716 which\nincorporated technology from Skype’s SILK codec and Xiph.Org’s CELT codec.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/opus@1.4-1.oe2403sp4?arch=x86_64&epoch=0&upstream=opus-1.4-1.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://www.opus-codec.org/",
      "licenseDeclared": "BSD",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "An audio codec for use in low-delay speech and audio communication",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.4-1.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-pango-1.51.0",
      "name": "pango",
      "licenseConcluded": "LGPLv2+",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "98231136727ab42c60994f54426ec4927639a809deac023ec2ad493773ef8da9"
        }
      ],
      "description": "Pango is a library for laying out and rendering of text, with an emphasis\non internationalization. Pango can be used anywhere that text layout is needed,\nthough most of the work on Pango so far has been done in the context of the\nGTK+ widget toolkit. Pango forms the core of text and font handling for GTK+.\n\nPango is designed to be modular; the core Pango layout engine can be used\nwith different font backends.\n\nThe integration of Pango with Cairo provides a complete solution with high\nquality text handling and graphics rendering.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/pango@1.51.0-1.oe2403sp4?arch=x86_64&epoch=0&upstream=pango-1.51.0-1.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://pango.gnome.org/",
      "licenseDeclared": "LGPLv2+",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "System for layout and rendering of internationalized text",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.51.0-1.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-pixman-0.42.2",
      "name": "pixman",
      "licenseConcluded": "MIT",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "a3a5c52c715527f34d0746be0cb0a5fd193bd79afd059b8cb1b5ad750143bbe9"
        }
      ],
      "description": "Pixman is a low-level software library for pixel manipulation, providing features such\\\n\\as image compositing and trapezoid rasterization.\\",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/pixman@0.42.2-1.oe2403sp4?arch=x86_64&epoch=0&upstream=pixman-0.42.2-1.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://gitlab.freedesktop.org/pixman/pixman",
      "licenseDeclared": "MIT",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "Pixman is a pixel manipulation library for X and Cairo",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:0.42.2-1.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-polkit-libs-123",
      "name": "polkit-libs",
      "licenseConcluded": "LGPLv2+",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "51771f62ae122b118f137248fafa377d73d1c910eea77cf1b997277f548acd2c"
        }
      ],
      "description": "Libraries files for polkit.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/polkit-libs@123-4.oe2403sp4?arch=x86_64&epoch=0&upstream=polkit-123-4.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.freedesktop.org/wiki/Software/polkit",
      "licenseDeclared": "LGPLv2+",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "Libraries for polkit",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:123-4.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-spice-gtk-devel-0.42",
      "name": "spice-gtk-devel",
      "licenseConcluded": "LGPLv2+",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "a9f02e6f6909cd1c245a9e97dd9724571da17f013de78c50a0c0e58f60c1b30f"
        }
      ],
      "description": "The spice-gtk-devel package includes header files and libraries necessary\nfor the spice-gtk library.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/spice-gtk-devel@0.42-1.oe2403sp4?arch=x86_64&epoch=0&upstream=spice-gtk-0.42-1.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://www.spice-space.org/spice-gtk.html",
      "licenseDeclared": "LGPLv2+",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "Development files for spice-gtk",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:0.42-1.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-usbredir-0.13.0",
      "name": "usbredir",
      "licenseConcluded": "LGPLv2+ and GPLv2+",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "8b4e4d426474c06e550fffebe85f3d766935d0046300203ea044eaea7f975efb"
        }
      ],
      "description": "usbredir is the name of a network protocol for sending USB device traffic over\na network connection. It is also the name of the software package offering a parsing\nlibrary, a usbredirhost library and several utilities implementing this protocol.\nIt also including a USB host TCP server, using libusbredirhost.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/usbredir@0.13.0-1.oe2403sp4?arch=x86_64&epoch=0&upstream=usbredir-0.13.0-1.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://www.spice-space.org/usbredir.html",
      "licenseDeclared": "LGPLv2+ and GPLv2+",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "network protocol libraries for sending USB device traffic",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:0.13.0-1.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-wayland-1.22.0",
      "name": "wayland",
      "licenseConcluded": "MIT",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "f6acfe1175947b50de9b82a1b0cb524b29a192144d1dd48c5dcd173fc9d92656"
        }
      ],
      "description": "Wayland is a protocol for a compositor to talk to its clients as\nwell as a C library implementation of that protocol. The\ncompositor can be a standalone display server running on Linux\nkernel modesetting and evdev input devices, an X application, or\na wayland client itself. The clients can be traditional\napplications, X servers (rootless or fullscreen) or other display\nservers.\n\nPart of the Wayland project is also the Weston reference\nimplementation of a Wayland compositor. Weston can run as an X\nclient or under Linux KMS and ships with a few demo clients. The\nWeston compositor is a minimal and fast compositor and is\nsuitable for many embedded and mobile use cases.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/wayland@1.22.0-1.oe2403sp4?arch=x86_64&epoch=0&upstream=wayland-1.22.0-1.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://wayland.freedesktop.org/",
      "licenseDeclared": "MIT",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "Wayland Compositor Infrastructure",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.22.0-1.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-zlib-1.2.13",
      "name": "zlib",
      "licenseConcluded": "zlib and Boost",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "dbb93ba5bcc987d252b148c30b5ffc4dc054b3c59ef0adcfcdecdc3ca2014514"
        }
      ],
      "description": "Zlib is a free, general-purpose, not covered by any patents, lossless data-compression\nlibrary for use on virtually any computer hardware and operating system. The zlib data\nformat is itself portable across platforms.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/zlib@1.2.13-5.oe2403sp4?arch=x86_64&epoch=0&upstream=zlib-1.2.13-5.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.zlib.net",
      "licenseDeclared": "zlib and Boost",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "A lossless data-compression library",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.2.13-5.oe2403sp4"
    }
  ],
  "relationships": [
    {
      "spdxElementId": "SPDXRef-rpm-spice-gtk-0.42",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-atk-2.51.0"
    },
    {
      "spdxElementId": "SPDXRef-rpm-spice-gtk-0.42",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-bash-5.2.15"
    },
    {
      "spdxElementId": "SPDXRef-rpm-spice-gtk-0.42",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-cairo-1.18.0"
    },
    {
      "spdxElementId": "SPDXRef-rpm-spice-gtk-0.42",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-coreutils-9.4"
    },
    {
      "spdxElementId": "SPDXRef-rpm-spice-gtk-0.42",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-cyrus-sasl-lib-2.1.28"
    },
    {
      "spdxElementId": "SPDXRef-rpm-spice-gtk-0.42",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-gdk-pixbuf2-2.42.10"
    },
    {
      "spdxElementId": "SPDXRef-rpm-spice-gtk-0.42",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-glib2-2.78.3"
    },
    {
      "spdxElementId": "SPDXRef-rpm-spice-gtk-0.42",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-glibc-2.38"
    },
    {
      "spdxElementId": "SPDXRef-rpm-spice-gtk-0.42",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-gobject-introspection-1.76.1"
    },
    {
      "spdxElementId": "SPDXRef-rpm-spice-gtk-0.42",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-gstreamer1-1.22.5"
    },
    {
      "spdxElementId": "SPDXRef-rpm-spice-gtk-0.42",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-gstreamer1-plugins-base-1.22.5"
    },
    {
      "spdxElementId": "SPDXRef-rpm-spice-gtk-0.42",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-gtk2-2.24.33"
    },
    {
      "spdxElementId": "SPDXRef-rpm-spice-gtk-0.42",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-gtk3-3.24.52"
    },
    {
      "spdxElementId": "SPDXRef-rpm-spice-gtk-0.42",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-gtk4-4.10.5"
    },
    {
      "spdxElementId": "SPDXRef-rpm-spice-gtk-0.42",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-harfbuzz-8.3.0"
    },
    {
      "spdxElementId": "SPDXRef-rpm-spice-gtk-0.42",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-json-glib-1.8.0"
    },
    {
      "spdxElementId": "SPDXRef-rpm-spice-gtk-0.42",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-libX11-1.8.7"
    },
    {
      "spdxElementId": "SPDXRef-rpm-spice-gtk-0.42",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-libacl-2.3.1"
    },
    {
      "spdxElementId": "SPDXRef-rpm-spice-gtk-0.42",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-libcacard-2.8.1"
    },
    {
      "spdxElementId": "SPDXRef-rpm-spice-gtk-0.42",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-libcap-ng-0.8.3"
    },
    {
      "spdxElementId": "SPDXRef-rpm-spice-gtk-0.42",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-libepoxy-1.5.10"
    },
    {
      "spdxElementId": "SPDXRef-rpm-spice-gtk-0.42",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-libjpeg-turbo-3.0.1"
    },
    {
      "spdxElementId": "SPDXRef-rpm-spice-gtk-0.42",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-libphodav-3.0"
    },
    {
      "spdxElementId": "SPDXRef-rpm-spice-gtk-0.42",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-libsoup3-3.4.5"
    },
    {
      "spdxElementId": "SPDXRef-rpm-spice-gtk-0.42",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-libusbx-1.0.26"
    },
    {
      "spdxElementId": "SPDXRef-rpm-spice-gtk-0.42",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-lz4-1.9.4"
    },
    {
      "spdxElementId": "SPDXRef-rpm-spice-gtk-0.42",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-openssl-libs-3.5.6"
    },
    {
      "spdxElementId": "SPDXRef-rpm-spice-gtk-0.42",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-opus-1.4"
    },
    {
      "spdxElementId": "SPDXRef-rpm-spice-gtk-0.42",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-pango-1.51.0"
    },
    {
      "spdxElementId": "SPDXRef-rpm-spice-gtk-0.42",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-pixman-0.42.2"
    },
    {
      "spdxElementId": "SPDXRef-rpm-spice-gtk-0.42",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-polkit-libs-123"
    },
    {
      "spdxElementId": "SPDXRef-rpm-spice-gtk-0.42",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-spice-gtk-devel-0.42"
    },
    {
      "spdxElementId": "SPDXRef-rpm-spice-gtk-0.42",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-usbredir-0.13.0"
    },
    {
      "spdxElementId": "SPDXRef-rpm-spice-gtk-0.42",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-wayland-1.22.0"
    },
    {
      "spdxElementId": "SPDXRef-rpm-spice-gtk-0.42",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-zlib-1.2.13"
    }
  ]
}
