{
  "SPDXID": "SPDXRef-DOCUMENT",
  "name": "yum-0.4.16.2-4.oe2403.aarch64.rpm",
  "spdxVersion": "SPDX-2.2",
  "creationInfo": {
    "created": "2026-07-18T18:19:57.657105919Z",
    "creators": [
      "openeuler_creator"
    ]
  },
  "dataLicense": "CC0-1.0",
  "documentNamespace": "https://sbom.openEuler.org/yum-0.4.16.2-4.oe2403.aarch64.rpm",
  "packages": [
    {
      "SPDXID": "SPDXRef-rpm-yum-4.16.2",
      "name": "yum",
      "licenseConcluded": "GPL-2.0-or-later AND GPL-1.0-only",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "f07d4cf3f3b77a9bb262e986fdb5180f1fb2eceb92d5ab7859ef5599b93489d8"
        }
      ],
      "description": "Utility that allows users to manage packages on their systems.\\\nIt supports RPMs, modules and comps groups & environments.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/yum@4.16.2-4.oe2403?arch=noarch&epoch=0&upstream=dnf-4.16.2-4.oe2403.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://github.com/rpm-software-management/dnf",
      "licenseDeclared": "GPL-2.0-or-later AND GPL-1.0-only",
      "sourceInfo": "acquired package info from repodata DB: repodata/9b2ee55844e864ec17da870960e33c0b4d69092a893cd7daa8a2acffe004cc46-primary.sqlite.bz2",
      "summary": "Package manager",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:4.16.2-4.oe2403"
    },
    {
      "SPDXID": "SPDXRef-rpm-dnf-4.16.2",
      "name": "dnf",
      "licenseConcluded": "GPL-2.0-or-later AND GPL-1.0-only",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "bc881e67e88f8a71ea4e2aed3ae6c322b5c639a08920016102a6349076c65643"
        }
      ],
      "description": "DNF is a software package manager that installs, updates, and removespackages\non RPM-based Linux distributions. It automatically computes dependencies and\ndetermines the actions required to install packages.DNF also makes it easier\nto maintain groups of machines, eliminating the need to manually update each\none using rpm.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/dnf@4.16.2-4.oe2403?arch=noarch&epoch=0&upstream=dnf-4.16.2-4.oe2403.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://github.com/rpm-software-management/dnf",
      "licenseDeclared": "GPL-2.0-or-later AND GPL-1.0-only",
      "sourceInfo": "acquired package info from repodata DB: repodata/9b2ee55844e864ec17da870960e33c0b4d69092a893cd7daa8a2acffe004cc46-primary.sqlite.bz2",
      "summary": "A software package manager that manages packages on Linux distributions.",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:4.16.2-4.oe2403"
    }
  ],
  "relationships": [
    {
      "spdxElementId": "SPDXRef-rpm-yum-4.16.2",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-dnf-4.16.2"
    }
  ]
}