{
  "SPDXID": "SPDXRef-DOCUMENT",
  "name": "python3-custodia-0.0.6.0-9.oe2403.aarch64.rpm",
  "spdxVersion": "SPDX-2.2",
  "creationInfo": {
    "created": "2026-07-25T18:05:22.657440598Z",
    "creators": [
      "openeuler_creator"
    ]
  },
  "dataLicense": "CC0-1.0",
  "documentNamespace": "https://sbom.openEuler.org/python3-custodia-0.0.6.0-9.oe2403.aarch64.rpm",
  "packages": [
    {
      "SPDXID": "SPDXRef-rpm-python3-custodia-0.6.0",
      "name": "python3-custodia",
      "licenseConcluded": "GPLv3+",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "77817f0792ee4e3c03f8775b7b66c3ff22be8f422f59fda338f610b029a1d961"
        }
      ],
      "description": "Sub-package with python custodia modules\n\nCustodia is a project that aims to define an API for modern cloud applications\nthat allows to easily store and share password,tokens,certificates and any\nother secret in a way that keeps data secure, manageable and auditable.\n\nCustodia is modular, the configuration file controls how authentication,\nauthorization, storage and API plugins are combined and exposed.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/python3-custodia@0.6.0-9.oe2403?arch=noarch&epoch=0&upstream=custodia-0.6.0-9.oe2403.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://github.com/latchset/custodia",
      "licenseDeclared": "GPLv3+",
      "sourceInfo": "acquired package info from repodata DB: repodata/18c2be42fe2b5b288fc0e4628777cec64a6dd8c9b9c960757aa68407d41ebc3f-primary.sqlite.bz2",
      "summary": "Sub-package with python3 custodia modules",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:0.6.0-9.oe2403"
    },
    {
      "SPDXID": "SPDXRef-rpm-python3-3.11.6",
      "name": "python3",
      "licenseConcluded": "Python-2.0",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "25b65267fbe4ce768e0cdd4167aed810b0c619db0cf486d2899f36d39f17b0b2"
        }
      ],
      "description": "Python combines remarkable power with very clear syntax. It has modules,\nclasses, exceptions, very high level dynamic data types, and dynamic\ntyping. There are interfaces to many system calls and libraries, as well\nas to various windowing systems. New built-in modules are easily written\nin C or C++ (or other languages, depending on the chosen implementation).\nPython is also usable as an extension language for applications written\nin other languages that need easy-to-use scripting or automation interfaces.\n\nThis package Provides python version 3.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/python3@3.11.6-10.oe2403?arch=x86_64&epoch=0&upstream=python3-3.11.6-10.oe2403.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://www.python.org/",
      "licenseDeclared": "Python-2.0",
      "sourceInfo": "acquired package info from repodata DB: repodata/18c2be42fe2b5b288fc0e4628777cec64a6dd8c9b9c960757aa68407d41ebc3f-primary.sqlite.bz2",
      "summary": "Interpreter of the Python3 programming language",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:3.11.6-10.oe2403"
    },
    {
      "SPDXID": "SPDXRef-rpm-python3-cryptography-42.0.2",
      "name": "python3-cryptography",
      "licenseConcluded": "ASL 2.0 or BSD",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "5bda9efb6f2bfae3cbfe7af55e50ad68cfad88c78081d8e083c2e9b5d70f777e"
        }
      ],
      "description": "cryptography is a package designed to expose cryptographic primitives and\nrecipes to Python developers.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/python3-cryptography@42.0.2-7.oe2403?arch=x86_64&epoch=0&upstream=python-cryptography-42.0.2-7.oe2403.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://cryptography.io/en/latest/",
      "licenseDeclared": "ASL 2.0 or BSD",
      "sourceInfo": "acquired package info from repodata DB: repodata/18c2be42fe2b5b288fc0e4628777cec64a6dd8c9b9c960757aa68407d41ebc3f-primary.sqlite.bz2",
      "summary": "PyCA's cryptography library",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:42.0.2-7.oe2403"
    },
    {
      "SPDXID": "SPDXRef-rpm-python3-jwcrypto-1.5.0",
      "name": "python3-jwcrypto",
      "licenseConcluded": "LGPL-3.0-or-later",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "b2be13e0149bdf9d896df1334906527fd9a970ecfbb46b5c3eb0f112e17aa461"
        }
      ],
      "description": "Implements JWK, JWS, JWE specifications with python-cryptography",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/python3-jwcrypto@1.5.0-4.oe2403?arch=noarch&epoch=0&upstream=python-jwcrypto-1.5.0-4.oe2403.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://github.com/latchset/jwcrypto",
      "licenseDeclared": "LGPL-3.0-or-later",
      "sourceInfo": "acquired package info from repodata DB: repodata/18c2be42fe2b5b288fc0e4628777cec64a6dd8c9b9c960757aa68407d41ebc3f-primary.sqlite.bz2",
      "summary": "Implementation of JOSE Web standards",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.5.0-4.oe2403"
    },
    {
      "SPDXID": "SPDXRef-rpm-python3-requests-2.31.0",
      "name": "python3-requests",
      "licenseConcluded": "ASL 2.0",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "50d1a1a2e106f9d2093ca11ed80fa64dab286238b532e387b8528a76a1e35c7e"
        }
      ],
      "description": "Requests is an ISC Licensed HTTP library, written in Python, for human\nbeings.\nMost existing Python modules for sending HTTP requests are extremely\nverbose and cumbersome. Python's builtin urllib2 module provides most of\nthe HTTP capabilities you should need, but the api is thoroughly broken.\nIt requires an enormous amount of work (even method overrides) to\nperform the simplest of tasks.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/python3-requests@2.31.0-3.oe2403?arch=noarch&epoch=0&upstream=python-requests-2.31.0-3.oe2403.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://python-requests.org/",
      "licenseDeclared": "ASL 2.0",
      "sourceInfo": "acquired package info from repodata DB: repodata/18c2be42fe2b5b288fc0e4628777cec64a6dd8c9b9c960757aa68407d41ebc3f-primary.sqlite.bz2",
      "summary": "Awesome Python HTTP Library That's Actually Usable",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.31.0-3.oe2403"
    },
    {
      "SPDXID": "SPDXRef-rpm-python3-setuptools-68.0.0",
      "name": "python3-setuptools",
      "licenseConcluded": "MIT and (BSD or ASL 2.0)",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "17438514dd43f05da76e0ca498fa2a4d16a807c0c2ef5fe6b988a60820471f42"
        }
      ],
      "description": "Setuptools is a collection of enhancements to the Python 3 distutils that allow\nyou to more easily build and distribute Python 3 packages, especially ones that\nhave dependencies on other packages.\n\nThis package also contains the runtime components of setuptools, necessary to\nexecute the software that requires pkg_resources.py.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/python3-setuptools@68.0.0-2.oe2403?arch=noarch&epoch=0&upstream=python-setuptools-68.0.0-2.oe2403.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://pypi.python.org/pypi/setuptools",
      "licenseDeclared": "MIT and (BSD or ASL 2.0)",
      "sourceInfo": "acquired package info from repodata DB: repodata/18c2be42fe2b5b288fc0e4628777cec64a6dd8c9b9c960757aa68407d41ebc3f-primary.sqlite.bz2",
      "summary": "Easily build and distribute Python 3 packages",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:68.0.0-2.oe2403"
    }
  ],
  "relationships": [
    {
      "spdxElementId": "SPDXRef-rpm-python3-custodia-0.6.0",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-python3-3.11.6"
    },
    {
      "spdxElementId": "SPDXRef-rpm-python3-custodia-0.6.0",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-python3-cryptography-42.0.2"
    },
    {
      "spdxElementId": "SPDXRef-rpm-python3-custodia-0.6.0",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-python3-jwcrypto-1.5.0"
    },
    {
      "spdxElementId": "SPDXRef-rpm-python3-custodia-0.6.0",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-python3-requests-2.31.0"
    },
    {
      "spdxElementId": "SPDXRef-rpm-python3-custodia-0.6.0",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-python3-setuptools-68.0.0"
    }
  ]
}