{
  "SPDXID": "SPDXRef-DOCUMENT",
  "name": "shadow-subid-devel-2.4.14.3-8.oe2403.aarch64.rpm",
  "spdxVersion": "SPDX-2.2",
  "creationInfo": {
    "created": "2026-07-25T18:05:22.657440598Z",
    "creators": [
      "openeuler_creator"
    ]
  },
  "dataLicense": "CC0-1.0",
  "documentNamespace": "https://sbom.openEuler.org/shadow-subid-devel-2.4.14.3-8.oe2403.aarch64.rpm",
  "packages": [
    {
      "SPDXID": "SPDXRef-rpm-shadow-subid-devel-4.14.3",
      "name": "shadow-subid-devel",
      "licenseConcluded": "BSD and GPLv2+",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "eae03b564326a8d00c80ee28f3fe68e94f6a1f2b2634761152a9dcc684f10fac"
        }
      ],
      "description": "Development files for shadow-utils-subid.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/shadow-subid-devel@4.14.3-8.oe2403?arch=x86_64&epoch=2&upstream=shadow-4.14.3-8.oe2403.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://pkg-shadow.alioth.debian.org/",
      "licenseDeclared": "BSD and GPLv2+",
      "sourceInfo": "acquired package info from repodata DB: repodata/18c2be42fe2b5b288fc0e4628777cec64a6dd8c9b9c960757aa68407d41ebc3f-primary.sqlite.bz2",
      "summary": "Development package for shadow-utils-subid",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "2:4.14.3-8.oe2403"
    },
    {
      "SPDXID": "SPDXRef-rpm-attr-2.5.1",
      "name": "attr",
      "licenseConcluded": "GPLv2+ AND LGPLv2+",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "22e33c368993d6a26a958946876c536732ac5fa903cbfa3530fa5a3d2b0c8f8b"
        }
      ],
      "description": "A set of tools for manipulating extended attributes on filesystem\nobjects, in particular getfattr(1) and setfattr(1).\nAn attr(1) command is also provided which is largely compatible\nwith the SGI IRIX tool of the same name.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/attr@2.5.1-5.oe2403?arch=x86_64&epoch=0&upstream=attr-2.5.1-5.oe2403.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://savannah.nongnu.org/projects/attr",
      "licenseDeclared": "GPLv2+ AND LGPLv2+",
      "sourceInfo": "acquired package info from repodata DB: repodata/18c2be42fe2b5b288fc0e4628777cec64a6dd8c9b9c960757aa68407d41ebc3f-primary.sqlite.bz2",
      "summary": "Commands for Manipulating Filesystem Extended Attributes",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.5.1-5.oe2403"
    },
    {
      "SPDXID": "SPDXRef-rpm-audit-libs-3.1.2",
      "name": "audit-libs",
      "licenseConcluded": "LGPLv2+",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "f282ce49667dc9252d43e3fc001203656dee676d815d390535c9eb7d6590fd35"
        }
      ],
      "description": "The audit-libs package contains the dynamic libraries needed for\napplications to use the audit framework.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/audit-libs@3.1.2-9.oe2403?arch=x86_64&epoch=1&upstream=audit-3.1.2-9.oe2403.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://people.redhat.com/sgrubb/audit/",
      "licenseDeclared": "LGPLv2+",
      "sourceInfo": "acquired package info from repodata DB: repodata/18c2be42fe2b5b288fc0e4628777cec64a6dd8c9b9c960757aa68407d41ebc3f-primary.sqlite.bz2",
      "summary": "Dynamic library for libaudit",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "1:3.1.2-9.oe2403"
    },
    {
      "SPDXID": "SPDXRef-rpm-glibc-2.38",
      "name": "glibc",
      "licenseConcluded": "LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net-2.0 and ISC and Public Domain and GFDL-1.3-only",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "9c9d46dff23e85b1a909276e9dfa93ea5c35b9fa788ba716e1634854f582059e"
        }
      ],
      "description": "The GNU C Library project provides the core libraries for the GNU system and\nGNU/Linux systems, as well as many other systems that use Linux as the kernel.\nThese libraries provide critical APIs including ISO C11, POSIX.1-2008, BSD,\nOS-specific APIs and more. These APIs include such foundational facilities as\nopen, read, write, malloc, printf, getaddrinfo, dlopen, pthread_create, crypt,\n login, exit and more.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/glibc@2.38-101.oe2403?arch=x86_64&epoch=0&upstream=glibc-2.38-101.oe2403.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.gnu.org/software/glibc/",
      "licenseDeclared": "LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net-2.0 and ISC and Public Domain and GFDL-1.3-only",
      "sourceInfo": "acquired package info from repodata DB: repodata/18c2be42fe2b5b288fc0e4628777cec64a6dd8c9b9c960757aa68407d41ebc3f-primary.sqlite.bz2",
      "summary": "The GNU libc libraries",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.38-101.oe2403"
    },
    {
      "SPDXID": "SPDXRef-rpm-libacl-2.3.1",
      "name": "libacl",
      "licenseConcluded": "LGPLv2+",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "98915fa6e621f5537ed900495775ea8e92b38199bbc61ecfaffee5e6e63426e4"
        }
      ],
      "description": "This package contains the library for manipulating access control list.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/libacl@2.3.1-3.oe2403?arch=x86_64&epoch=0&upstream=acl-2.3.1-3.oe2403.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://savannah.nongnu.org/projects/acl",
      "licenseDeclared": "LGPLv2+",
      "sourceInfo": "acquired package info from repodata DB: repodata/18c2be42fe2b5b288fc0e4628777cec64a6dd8c9b9c960757aa68407d41ebc3f-primary.sqlite.bz2",
      "summary": "Library for supporting access control list",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.3.1-3.oe2403"
    },
    {
      "SPDXID": "SPDXRef-rpm-pam-1.5.3",
      "name": "pam",
      "licenseConcluded": "BSD and GPLv2+",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "e212f6509316c3631bec3a16df2c4d0be8770f86b2d7fb1e60a5208467ea1349"
        }
      ],
      "description": "PAM (Pluggable Authentication Modules) is a system of libraries that\nhandle the authentication tasks of applications (services) on the system.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/pam@1.5.3-5.oe2403?arch=x86_64&epoch=0&upstream=pam-1.5.3-5.oe2403.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.linux-pam.org/",
      "licenseDeclared": "BSD and GPLv2+",
      "sourceInfo": "acquired package info from repodata DB: repodata/18c2be42fe2b5b288fc0e4628777cec64a6dd8c9b9c960757aa68407d41ebc3f-primary.sqlite.bz2",
      "summary": "Pluggable Authentication Modules for Linux",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.5.3-5.oe2403"
    }
  ],
  "relationships": [
    {
      "spdxElementId": "SPDXRef-rpm-shadow-subid-devel-4.14.3",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-attr-2.5.1"
    },
    {
      "spdxElementId": "SPDXRef-rpm-shadow-subid-devel-4.14.3",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-audit-libs-3.1.2"
    },
    {
      "spdxElementId": "SPDXRef-rpm-shadow-subid-devel-4.14.3",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-glibc-2.38"
    },
    {
      "spdxElementId": "SPDXRef-rpm-shadow-subid-devel-4.14.3",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-libacl-2.3.1"
    },
    {
      "spdxElementId": "SPDXRef-rpm-shadow-subid-devel-4.14.3",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-pam-1.5.3"
    }
  ]
}