{
  "SPDXID": "SPDXRef-DOCUMENT",
  "name": "gimp-libs-2.3.0.2-1.oe2403.aarch64.rpm",
  "spdxVersion": "SPDX-2.2",
  "creationInfo": {
    "created": "2026-07-04T18:03:45.056502216Z",
    "creators": [
      "openeuler_creator"
    ]
  },
  "dataLicense": "CC0-1.0",
  "documentNamespace": "https://sbom.openEuler.org/gimp-libs-2.3.0.2-1.oe2403.aarch64.rpm",
  "packages": [
    {
      "SPDXID": "SPDXRef-rpm-gimp-libs-3.0.2",
      "name": "gimp-libs",
      "licenseConcluded": "GPL-3.0-or-later",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "118f20fdcff3e9fa24005defdfbe982609c0e3af3c1e9d8e6018baf8c858ed6f"
        }
      ],
      "description": "The GIMP is an image composition and editing program. GIMP offers\nmany tools and filters, and provides a large image manipulation\ntoolbox and scripting.\n\nThis package provides GIMP libraries.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/gimp-libs@3.0.2-1.oe2403?arch=x86_64&epoch=2&upstream=gimp-3.0.2-1.oe2403.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://www.gimp.org/",
      "licenseDeclared": "GPL-3.0-or-later",
      "sourceInfo": "acquired package info from repodata DB: repodata/18c2be42fe2b5b288fc0e4628777cec64a6dd8c9b9c960757aa68407d41ebc3f-primary.sqlite.bz2",
      "summary": "The GNU Image Manipulation Program - Libraries",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "2:3.0.2-1.oe2403"
    },
    {
      "SPDXID": "SPDXRef-rpm-babl-0.1.112",
      "name": "babl",
      "licenseConcluded": "LGPL-3.0-or-later AND GPL-3.0-or-later",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "ccc41bb5078d6671b937569410a5197aaa85b3589a52a3b4034b251a1952db6f"
        }
      ],
      "description": "babl is a dynamic, any to any, pixel format translation library.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/babl@0.1.112-1.oe2403?arch=x86_64&epoch=0&upstream=babl-0.1.112-1.oe2403.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://gegl.org/babl/",
      "licenseDeclared": "LGPL-3.0-or-later AND GPL-3.0-or-later",
      "sourceInfo": "acquired package info from repodata DB: repodata/18c2be42fe2b5b288fc0e4628777cec64a6dd8c9b9c960757aa68407d41ebc3f-primary.sqlite.bz2",
      "summary": "Dynamic Pixel Format Translation Library",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:0.1.112-1.oe2403"
    },
    {
      "SPDXID": "SPDXRef-rpm-cairo-1.18.0",
      "name": "cairo",
      "licenseConcluded": "LGPLv2 or MPLv1.1",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "4ad10720bc5a8c057ebcc57294466563120dab0863805f21532874ff49b131cf"
        }
      ],
      "description": "Cairo is a 2D graphics libarary with support for multiple output devices.\nIt provides high-quality display and print output and this package also\ncontains functionality to make cairo graphics library integrate well with\nGObject used by GNOME.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/cairo@1.18.0-2.oe2403?arch=x86_64&epoch=0&upstream=cairo-1.18.0-2.oe2403.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://cairographics.org",
      "licenseDeclared": "LGPLv2 or MPLv1.1",
      "sourceInfo": "acquired package info from repodata DB: repodata/18c2be42fe2b5b288fc0e4628777cec64a6dd8c9b9c960757aa68407d41ebc3f-primary.sqlite.bz2",
      "summary": "A 2D graphics library",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.18.0-2.oe2403"
    },
    {
      "SPDXID": "SPDXRef-rpm-gdk-pixbuf2-2.42.10",
      "name": "gdk-pixbuf2",
      "licenseConcluded": "LGPLv2+",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "64bf2521075550711ab5ea5ad616a90cc6db60c255ba167161d1a44d886b2d3c"
        }
      ],
      "description": "gdk is written in C but has been designed from the ground up to support a wide range of languages.\nIt provide a complete set of widgets,and suitable for projects ranging from small one-off\ntools to complete application suites.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/gdk-pixbuf2@2.42.10-3.oe2403?arch=x86_64&epoch=0&upstream=gdk-pixbuf2-2.42.10-3.oe2403.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://gitlab.gnome.org/GNOME/gdk-pixbuf",
      "licenseDeclared": "LGPLv2+",
      "sourceInfo": "acquired package info from repodata DB: repodata/18c2be42fe2b5b288fc0e4628777cec64a6dd8c9b9c960757aa68407d41ebc3f-primary.sqlite.bz2",
      "summary": "gdk is a multi-platform toolkit for creating graphical user interfaces.",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.42.10-3.oe2403"
    },
    {
      "SPDXID": "SPDXRef-rpm-glib2-2.78.3",
      "name": "glib2",
      "licenseConcluded": "LGPLv2+",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "baecc29f1fba42f8e70e0622acb6bdd7d9cc2534fd5b93af7a3449f11c52c7ce"
        }
      ],
      "description": "GLib is a bundle of three (formerly five) low-level system libraries\nwritten in C and developed mainly by GNOME. GLib's code was separated\nfrom GTK, so it can be used by software other than GNOME and has been\ndeveloped in parallel ever since.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/glib2@2.78.3-10.oe2403?arch=x86_64&epoch=0&upstream=glib2-2.78.3-10.oe2403.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://www.gtk.org",
      "licenseDeclared": "LGPLv2+",
      "sourceInfo": "acquired package info from repodata DB: repodata/18c2be42fe2b5b288fc0e4628777cec64a6dd8c9b9c960757aa68407d41ebc3f-primary.sqlite.bz2",
      "summary": "The core library that forms the basis for projects such as GTK+ and GNOME",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.78.3-10.oe2403"
    },
    {
      "SPDXID": "SPDXRef-rpm-glibc-2.38",
      "name": "glibc",
      "licenseConcluded": "LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net-2.0 and ISC and Public Domain and GFDL-1.3-only",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "9c9d46dff23e85b1a909276e9dfa93ea5c35b9fa788ba716e1634854f582059e"
        }
      ],
      "description": "The GNU C Library project provides the core libraries for the GNU system and\nGNU/Linux systems, as well as many other systems that use Linux as the kernel.\nThese libraries provide critical APIs including ISO C11, POSIX.1-2008, BSD,\nOS-specific APIs and more. These APIs include such foundational facilities as\nopen, read, write, malloc, printf, getaddrinfo, dlopen, pthread_create, crypt,\n login, exit and more.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/glibc@2.38-101.oe2403?arch=x86_64&epoch=0&upstream=glibc-2.38-101.oe2403.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.gnu.org/software/glibc/",
      "licenseDeclared": "LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net-2.0 and ISC and Public Domain and GFDL-1.3-only",
      "sourceInfo": "acquired package info from repodata DB: repodata/18c2be42fe2b5b288fc0e4628777cec64a6dd8c9b9c960757aa68407d41ebc3f-primary.sqlite.bz2",
      "summary": "The GNU libc libraries",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.38-101.oe2403"
    },
    {
      "SPDXID": "SPDXRef-rpm-gobject-introspection-1.76.1",
      "name": "gobject-introspection",
      "licenseConcluded": "GPLv2+ and LGPLv2+ and MIT",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "a3df70eac6ba076c892d3d42ff1f78b71c1c365dbaa0479bbaed13a935deb059"
        }
      ],
      "description": "GObject Introspection can scan C header and source files in order to\ngenerate introspection \"typelib\" files.  It also provides an API to examine\ntypelib files, useful for creating language bindings among other\nthings.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/gobject-introspection@1.76.1-2.oe2403?arch=x86_64&epoch=0&upstream=gobject-introspection-1.76.1-2.oe2403.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://wiki.gnome.org/Projects/GObjectIntrospection",
      "licenseDeclared": "GPLv2+ and LGPLv2+ and MIT",
      "sourceInfo": "acquired package info from repodata DB: repodata/18c2be42fe2b5b288fc0e4628777cec64a6dd8c9b9c960757aa68407d41ebc3f-primary.sqlite.bz2",
      "summary": "Introspection system for GObject-based libraries",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.76.1-2.oe2403"
    },
    {
      "SPDXID": "SPDXRef-rpm-gtk3-3.24.41",
      "name": "gtk3",
      "licenseConcluded": "LGPLv2+",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "eb4b28b77de4cf44c08d1d3919c5184132945dcdbda6eb48c7077186dbd7d191"
        }
      ],
      "description": "GTK+ is an object-oriented widget toolkit written in the programming language C;\nit has a C-based object-oriented architecture that allows for maximum\nflexibility. The GTK+ library contains a set of graphical control elements\n(widgets)for creating graphical user interfaces. This package contains version 3\nof GTK+.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/gtk3@3.24.41-2.oe2403?arch=x86_64&epoch=0&upstream=gtk3-3.24.41-2.oe2403.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://www.gtk.org",
      "licenseDeclared": "LGPLv2+",
      "sourceInfo": "acquired package info from repodata DB: repodata/18c2be42fe2b5b288fc0e4628777cec64a6dd8c9b9c960757aa68407d41ebc3f-primary.sqlite.bz2",
      "summary": "GTK+ graphical user interface library",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:3.24.41-2.oe2403"
    },
    {
      "SPDXID": "SPDXRef-rpm-lcms2-2.16",
      "name": "lcms2",
      "licenseConcluded": "MIT",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "66112f413050144f8c4e2fe883aaee30e6032bc5f27dce349da4f6131b3414c9"
        }
      ],
      "description": "LittleCMS intends to be an OPEN SOURSE small-footprint color management\nengine,with special focus on accuracy and performence.It uses the\nInternational Color Consortium standard (ICC), which is the modern\nstandard when regarding to color management. The ICC specification\nis widely used and is referred to in many International and other\nde-facto standards.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/lcms2@2.16-2.oe2403?arch=x86_64&epoch=0&upstream=lcms2-2.16-2.oe2403.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://www.littlecms.com",
      "licenseDeclared": "MIT",
      "sourceInfo": "acquired package info from repodata DB: repodata/18c2be42fe2b5b288fc0e4628777cec64a6dd8c9b9c960757aa68407d41ebc3f-primary.sqlite.bz2",
      "summary": "Color Management Engine",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.16-2.oe2403"
    },
    {
      "SPDXID": "SPDXRef-rpm-libgegl-0-4-0-0.4.58",
      "name": "libgegl-0_4-0",
      "licenseConcluded": "GPL-3.0-or-later AND LGPL-3.0-or-later",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "f107dd31ac4c0f9a2511e5e7d72cc2d141166f66c5d59587486f7113eccf0ea9"
        }
      ],
      "description": "GEGL provides infrastructure to do demand based cached non destructive\nimage editing on larger than RAM buffers. Through babl, it provides\nsupport for a wide range of color models and pixel storage formats for\ninput and output.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/libgegl-0_4-0@0.4.58-1.oe2403?arch=x86_64&epoch=0&upstream=gegl04-0.4.58-1.oe2403.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://gegl.org/",
      "licenseDeclared": "GPL-3.0-or-later AND LGPL-3.0-or-later",
      "sourceInfo": "acquired package info from repodata DB: repodata/18c2be42fe2b5b288fc0e4628777cec64a6dd8c9b9c960757aa68407d41ebc3f-primary.sqlite.bz2",
      "summary": "Generic Graphics Library",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:0.4.58-1.oe2403"
    },
    {
      "SPDXID": "SPDXRef-rpm-libgexiv2-0.14.2",
      "name": "libgexiv2",
      "licenseConcluded": "GPLv2+",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "b3cf958fd384329dce3de97d871489d1fd8be62d063195cd3fbe9e112f3482a6"
        }
      ],
      "description": "gexiv2 is a GObject wrapper around the Exiv2 photo metadata library. It allows for GNOME\napplications to easily inspect and update EXIF, IPTC, and XMP metadata in photo and video\nfiles of various formats.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/libgexiv2@0.14.2-2.oe2403?arch=x86_64&epoch=0&upstream=libgexiv2-0.14.2-2.oe2403.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://wiki.gnome.org/Projects/gexiv2",
      "licenseDeclared": "GPLv2+",
      "sourceInfo": "acquired package info from repodata DB: repodata/18c2be42fe2b5b288fc0e4628777cec64a6dd8c9b9c960757aa68407d41ebc3f-primary.sqlite.bz2",
      "summary": "Gexiv2 is a GObject wrapper around the Exiv2 photo metadata library.",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:0.14.2-2.oe2403"
    }
  ],
  "relationships": [
    {
      "spdxElementId": "SPDXRef-rpm-gimp-libs-3.0.2",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-babl-0.1.112"
    },
    {
      "spdxElementId": "SPDXRef-rpm-gimp-libs-3.0.2",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-cairo-1.18.0"
    },
    {
      "spdxElementId": "SPDXRef-rpm-gimp-libs-3.0.2",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-gdk-pixbuf2-2.42.10"
    },
    {
      "spdxElementId": "SPDXRef-rpm-gimp-libs-3.0.2",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-glib2-2.78.3"
    },
    {
      "spdxElementId": "SPDXRef-rpm-gimp-libs-3.0.2",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-glibc-2.38"
    },
    {
      "spdxElementId": "SPDXRef-rpm-gimp-libs-3.0.2",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-gobject-introspection-1.76.1"
    },
    {
      "spdxElementId": "SPDXRef-rpm-gimp-libs-3.0.2",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-gtk3-3.24.41"
    },
    {
      "spdxElementId": "SPDXRef-rpm-gimp-libs-3.0.2",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-lcms2-2.16"
    },
    {
      "spdxElementId": "SPDXRef-rpm-gimp-libs-3.0.2",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-libgegl-0-4-0-0.4.58"
    },
    {
      "spdxElementId": "SPDXRef-rpm-gimp-libs-3.0.2",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-libgexiv2-0.14.2"
    }
  ]
}