{
  "SPDXID": "SPDXRef-DOCUMENT",
  "name": "dnf-0.4.16.2-4.oe2403.aarch64.rpm",
  "spdxVersion": "SPDX-2.2",
  "creationInfo": {
    "created": "2026-08-08T18:23:06.882101294Z",
    "creators": [
      "openeuler_creator"
    ]
  },
  "dataLicense": "CC0-1.0",
  "documentNamespace": "https://sbom.openEuler.org/dnf-0.4.16.2-4.oe2403.aarch64.rpm",
  "packages": [
    {
      "SPDXID": "SPDXRef-rpm-dnf-4.16.2",
      "name": "dnf",
      "licenseConcluded": "GPL-2.0-or-later AND GPL-1.0-only",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "bc881e67e88f8a71ea4e2aed3ae6c322b5c639a08920016102a6349076c65643"
        }
      ],
      "description": "DNF is a software package manager that installs, updates, and removespackages\non RPM-based Linux distributions. It automatically computes dependencies and\ndetermines the actions required to install packages.DNF also makes it easier\nto maintain groups of machines, eliminating the need to manually update each\none using rpm.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/dnf@4.16.2-4.oe2403?arch=noarch&epoch=0&upstream=dnf-4.16.2-4.oe2403.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://github.com/rpm-software-management/dnf",
      "licenseDeclared": "GPL-2.0-or-later AND GPL-1.0-only",
      "sourceInfo": "acquired package info from repodata DB: repodata/9b2ee55844e864ec17da870960e33c0b4d69092a893cd7daa8a2acffe004cc46-primary.sqlite.bz2",
      "summary": "A software package manager that manages packages on Linux distributions.",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:4.16.2-4.oe2403"
    },
    {
      "SPDXID": "SPDXRef-rpm-coreutils-9.4",
      "name": "coreutils",
      "licenseConcluded": "GPLv3+",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "96046483156ab4fe6ab9f6eb7b3b374baabedf8ee522b1dded364ab84e21706a"
        }
      ],
      "description": "These are the GNU core utilities.  This package is the combination of\nthe old GNU fileutils, sh-utils, and textutils packages.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/coreutils@9.4-17.oe2403?arch=aarch64&epoch=0&upstream=coreutils-9.4-17.oe2403.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://www.gnu.org/software/coreutils/",
      "licenseDeclared": "GPLv3+",
      "sourceInfo": "acquired package info from repodata DB: repodata/9b2ee55844e864ec17da870960e33c0b4d69092a893cd7daa8a2acffe004cc46-primary.sqlite.bz2",
      "summary": "A set of basic GNU tools commonly used in shell scripts",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:9.4-17.oe2403"
    },
    {
      "SPDXID": "SPDXRef-rpm-libreport-filesystem-2.17.10",
      "name": "libreport-filesystem",
      "licenseConcluded": "GPLv2+",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "4b78959ee2d20231bbeef44e125e0d9faae75553de65531f00a106f46184777c"
        }
      ],
      "description": "Filesystem layout for libreport",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/libreport-filesystem@2.17.10-3.oe2403?arch=noarch&epoch=0&upstream=libreport-2.17.10-3.oe2403.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://abrt.readthedocs.org/",
      "licenseDeclared": "GPLv2+",
      "sourceInfo": "acquired package info from repodata DB: repodata/9b2ee55844e864ec17da870960e33c0b4d69092a893cd7daa8a2acffe004cc46-primary.sqlite.bz2",
      "summary": "Filesystem layout for libreport",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.17.10-3.oe2403"
    },
    {
      "SPDXID": "SPDXRef-rpm-python3-dnf-4.16.2",
      "name": "python3-dnf",
      "licenseConcluded": "GPL-2.0-or-later AND GPL-1.0-only",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "e0222cd6e31c343e424ea7d020778f75988a839ab7696a039e4e99becc8f5b17"
        }
      ],
      "description": "Python 3 interface to DNF.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/python3-dnf@4.16.2-4.oe2403?arch=noarch&epoch=0&upstream=dnf-4.16.2-4.oe2403.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://github.com/rpm-software-management/dnf",
      "licenseDeclared": "GPL-2.0-or-later AND GPL-1.0-only",
      "sourceInfo": "acquired package info from repodata DB: repodata/9b2ee55844e864ec17da870960e33c0b4d69092a893cd7daa8a2acffe004cc46-primary.sqlite.bz2",
      "summary": "Python 3 interface to DNF",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:4.16.2-4.oe2403"
    }
  ],
  "relationships": [
    {
      "spdxElementId": "SPDXRef-rpm-dnf-4.16.2",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-coreutils-9.4"
    },
    {
      "spdxElementId": "SPDXRef-rpm-dnf-4.16.2",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-libreport-filesystem-2.17.10"
    },
    {
      "spdxElementId": "SPDXRef-rpm-dnf-4.16.2",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-python3-dnf-4.16.2"
    }
  ]
}