type: CreationInfo
spec version: 3.0.1
created by: SPDXRef-gnrtd0
created using: syft-[not provided] (additionalToolSPDXRef-gnrtd1)
created: 2026-07-04T18:31:38Z

type: CreationInfo
spec version: 3.0.1
created by: SPDXRef-gnrtd2
created using: syft-[not provided] (additionalToolSPDXRef-gnrtd3)
created: 2026-07-04T18:31:38Z

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP1/update/x86_64-3e678694-1e4a-4a8d-812c-dc9a3de71536-specv3/SPDXRef-gnrtd976
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd977
from: gdk-pixbuf2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd991
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd992
from: cairo-gobject
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd68
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd69
from: libstdc++
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd889
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd887
from: libtiff
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd845
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd846
from: cairo
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd873
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd874
from: freetype
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd860
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd861
from: glib2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd81
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd82
from: zlib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd62
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd63
from: libgcc
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd870
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd871
from: freetype
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd137
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd138
from: glibc
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd988
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd989
from: cairo-gobject
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd973
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd974
from: gdk-pixbuf2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd864
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd46
from: harfbuzz
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd857
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd858
from: glib2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd501
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd502
from: python3
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd315
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd46
from: libxml2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd862
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd46
from: harfbuzz
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd59
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd60
from: libgcc
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd4847
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd46
from: giflib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd848
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd849
from: cairo
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd11360
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd11361
from: fontforge
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd811
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd812
from: libpng
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd343
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd46
from: brotli
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd886
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd887
from: libtiff
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd262
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd263
from: readline
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd84
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd85
from: zlib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd504
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd502
from: python3
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd11357
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd11358
from: fontforge
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd814
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd812
from: libpng
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd134
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd135
from: glibc
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd265
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd266
from: readline
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd313
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd46
from: libxml2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd71
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd72
from: libstdc++
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd345
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd46
from: brotli
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd4849
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd46
from: giflib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd11354
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: harfbuzz
from: fontforge
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd11355
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: glibc
from: fontforge
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd11343
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: cairo-gobject
from: fontforge
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd11345
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: cairo
from: fontforge
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd11348
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: readline
from: fontforge
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd11340
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: brotli
from: fontforge
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd11346
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: libtiff
from: fontforge
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd11352
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: giflib
from: fontforge
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd11341
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: libstdc++
from: fontforge
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd11344
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: libxml2
from: fontforge
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd11356
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: libgcc
from: fontforge
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd11353
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: zlib
from: fontforge
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd11342
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: libpng
from: fontforge
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd11351
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: glib2
from: fontforge
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd11347
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: gdk-pixbuf2
from: fontforge
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd11350
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: python3
from: fontforge
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd11349
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: freetype
from: fontforge
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd977
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd887
type: simplelicensing_LicenseExpression
simplelicensing license expression: libtiff
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd858
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd82
type: simplelicensing_LicenseExpression
simplelicensing license expression: zlib and Boost
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd138
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net-2.0 and ISC and Public Domain and GFDL-1.3-only
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd11358
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd861
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd69
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd266
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd812
type: simplelicensing_LicenseExpression
simplelicensing license expression: Zlib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd874
type: simplelicensing_LicenseExpression
simplelicensing license expression: (BSD-3-Clause AND MIT AND MIT-Modern-Variant AND Zlib AND (FTL OR GPL-2.0-or-later))
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd974
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd871
type: simplelicensing_LicenseExpression
simplelicensing license expression: (BSD-3-Clause AND MIT AND MIT-Modern-Variant AND Zlib AND (FTL OR GPL-2.0-or-later))
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd502
type: simplelicensing_LicenseExpression
simplelicensing license expression: Python-2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd849
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2 or MPLv1.1
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd46
type: simplelicensing_LicenseExpression
simplelicensing license expression: MIT
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd72
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd263
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd846
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2 or MPLv1.1
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd992
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2 or MPLv1.1
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd11361
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd63
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd60
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd85
type: simplelicensing_LicenseExpression
simplelicensing license expression: zlib and Boost
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd135
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net-2.0 and ISC and Public Domain and GFDL-1.3-only
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd989
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2 or MPLv1.1
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd11359
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd847
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd70
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd264
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd990
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd314
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd975
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd813
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd859
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd863
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd83
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd4848
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd344
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd136
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd888
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd503
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd61
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd872
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd984
type: software_Package
supplied by: SPDXRef-gnrtd990
software download location: NOASSERTION
summary: GObject bindings for cairo
software package version: 0:1.18.0-2.oe2403sp1
software home page: http://cairographics.org
description: Cairo is a 2D graphics library designed to provide high-quality display and print output. This package contains functionality to make cairo graphics library integrate well with the GObject object system used by GNOME.
name: cairo-gobject
software source info: acquired package info from repodata DB: repodata/97a8837b13d1803b9266184a3cf9dafc96fd7534775890089deafb0b3375ffe6-primary.sqlite.bz2
software package url: pkg:rpm/cairo-gobject@1.18.0-2.oe2403sp1?arch=x86_64&epoch=0&upstream=cairo-1.18.0-2.oe2403sp1.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd341
type: software_Package
supplied by: SPDXRef-gnrtd344
software download location: NOASSERTION
summary: Lossless compression algorithm
software package version: 0:1.1.0-2.oe2403sp1
software home page: https://github.com/google/brotli
description: Brotli is a generic-purpose lossless compression algorithm that compresses data using a combination of a modern variant of the LZ77 algorithm, Huffman coding and 2nd order context modeling, with a compression ratio comparable to the best currently available general-purpose compression methods. It is similar in speed with deflate but offers more dense compression.
name: brotli
software source info: acquired package info from repodata DB: repodata/97a8837b13d1803b9266184a3cf9dafc96fd7534775890089deafb0b3375ffe6-primary.sqlite.bz2
software package url: pkg:rpm/brotli@1.1.0-2.oe2403sp1?arch=x86_64&epoch=0&upstream=brotli-1.1.0-2.oe2403sp1.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd9
type: software_Package
supplied by: SPDXRef-gnrtd136
software download location: NOASSERTION
summary: The GNU libc libraries
software package version: 0:2.38-101.oe2403sp1
software home page: http://www.gnu.org/software/glibc/
description: The GNU C Library project provides the core libraries for the GNU system and GNU/Linux systems, as well as many other systems that use Linux as the kernel. These libraries provide critical APIs including ISO C11, POSIX.1-2008, BSD, OS-specific APIs and more. These APIs include such foundational facilities as open, read, write, malloc, printf, getaddrinfo, dlopen, pthread_create, crypt, login, exit and more.
name: glibc
software source info: acquired package info from repodata DB: repodata/97a8837b13d1803b9266184a3cf9dafc96fd7534775890089deafb0b3375ffe6-primary.sqlite.bz2
software package url: pkg:rpm/glibc@2.38-101.oe2403sp1?arch=x86_64&epoch=0&upstream=glibc-2.38-101.oe2403sp1.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd11339
type: software_Package
supplied by: SPDXRef-gnrtd11359
software download location: NOASSERTION
summary: Outline and bitmap font editor
software package version: 0:20230101-4.oe2403sp1
software home page: http://fontforge.github.io/
description: FontForge (former PfaEdit) is a font editor for outline and bitmap fonts. It supports a range of font formats, including PostScript (ASCII and binary Type 1, some Type 3 and Type 0), TrueType, OpenType (Type2) and CID-keyed fonts.
name: fontforge
software source info: acquired package info from repodata DB: repodata/97a8837b13d1803b9266184a3cf9dafc96fd7534775890089deafb0b3375ffe6-primary.sqlite.bz2
software package url: pkg:rpm/fontforge@20230101-4.oe2403sp1?arch=x86_64&epoch=0&upstream=fontforge-20230101-4.oe2403sp1.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd830
type: software_Package
supplied by: SPDXRef-gnrtd872
software download location: NOASSERTION
summary: FreeType is a freely available software library to render fonts
software package version: 0:2.13.2-3.oe2403sp1
software home page: https://www.freetype.org
description: FreeType is written in C, designed to be small,efficient, highly customizable, and portable while capable of producing high-quality output (glyph images) of most vector and bitmap font formats
name: freetype
software source info: acquired package info from repodata DB: repodata/97a8837b13d1803b9266184a3cf9dafc96fd7534775890089deafb0b3375ffe6-primary.sqlite.bz2
software package url: pkg:rpm/freetype@2.13.2-3.oe2403sp1?arch=x86_64&epoch=0&upstream=freetype-2.13.2-3.oe2403sp1.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd808
type: software_Package
supplied by: SPDXRef-gnrtd813
software download location: NOASSERTION
summary: A library of functions for manipulating PNG image format files
software package version: 2:1.6.40-12.oe2403sp1
software home page: http://www.libpng.org/pub/png/libpng.html
description: The libpng package contains libraries used by other programs for reading and writing PNG format files. The PNG format was designed as a replacement for GIF and, to a lesser extent, TIFF, with many improvements and extensions and lack of patent problems.
name: libpng
software source info: acquired package info from repodata DB: repodata/97a8837b13d1803b9266184a3cf9dafc96fd7534775890089deafb0b3375ffe6-primary.sqlite.bz2
software package url: pkg:rpm/libpng@1.6.40-12.oe2403sp1?arch=x86_64&epoch=2&upstream=libpng-1.6.40-12.oe2403sp1.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd839
type: software_Package
supplied by: SPDXRef-gnrtd847
software download location: NOASSERTION
summary: A 2D graphics library
software package version: 0:1.18.0-2.oe2403sp1
software home page: http://cairographics.org
description: Cairo is a 2D graphics libarary with support for multiple output devices. It provides high-quality display and print output and this package also contains functionality to make cairo graphics library integrate well with GObject used by GNOME.
name: cairo
software source info: acquired package info from repodata DB: repodata/97a8837b13d1803b9266184a3cf9dafc96fd7534775890089deafb0b3375ffe6-primary.sqlite.bz2
software package url: pkg:rpm/cairo@1.18.0-2.oe2403sp1?arch=x86_64&epoch=0&upstream=cairo-1.18.0-2.oe2403sp1.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd466
type: software_Package
supplied by: SPDXRef-gnrtd503
software download location: NOASSERTION
summary: Interpreter of the Python3 programming language
software package version: 0:3.11.6-11.oe2403sp1
software home page: https://www.python.org/
description: Python combines remarkable power with very clear syntax. It has modules, classes, exceptions, very high level dynamic data types, and dynamic typing. There are interfaces to many system calls and libraries, as well as to various windowing systems. New built-in modules are easily written in C or C++ (or other languages, depending on the chosen implementation). Python is also usable as an extension language for applications written in other languages that need easy-to-use scripting or automation interfaces. This package Provides python version 3.
name: python3
software source info: acquired package info from repodata DB: repodata/97a8837b13d1803b9266184a3cf9dafc96fd7534775890089deafb0b3375ffe6-primary.sqlite.bz2
software package url: pkg:rpm/python3@3.11.6-11.oe2403sp1?arch=x86_64&epoch=0&upstream=python3-3.11.6-11.oe2403sp1.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd79
type: software_Package
supplied by: SPDXRef-gnrtd83
software download location: NOASSERTION
summary: A lossless data-compression library
software package version: 0:1.2.13-5.oe2403sp1
software home page: http://www.zlib.net
description: Zlib is a free, general-purpose, not covered by any patents, lossless data-compression library for use on virtually any computer hardware and operating system. The zlib data format is itself portable across platforms.
name: zlib
software source info: acquired package info from repodata DB: repodata/97a8837b13d1803b9266184a3cf9dafc96fd7534775890089deafb0b3375ffe6-primary.sqlite.bz2
software package url: pkg:rpm/zlib@1.2.13-5.oe2403sp1?arch=x86_64&epoch=0&upstream=zlib-1.2.13-5.oe2403sp1.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd833
type: software_Package
supplied by: SPDXRef-gnrtd863
software download location: NOASSERTION
summary: A text shaping engine
software package version: 0:8.3.0-2.oe2403sp1
software home page: https://harfbuzz.github.io/
description: HarfBuzz is a text-shaping engine. If you give HarfBuzz a font and a string containing a sequence of Unicode codepoints, HarfBuzz selects and positions the corresponding glyphs from the font, applying all of the necessary layout rules and font features. HarfBuzz then returns the string to you in the form that is correctly arranged for the language and writing system.
name: harfbuzz
software source info: acquired package info from repodata DB: repodata/97a8837b13d1803b9266184a3cf9dafc96fd7534775890089deafb0b3375ffe6-primary.sqlite.bz2
software package url: pkg:rpm/harfbuzz@8.3.0-2.oe2403sp1?arch=x86_64&epoch=0&upstream=harfbuzz-8.3.0-2.oe2403sp1.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd881
type: software_Package
supplied by: SPDXRef-gnrtd888
software download location: NOASSERTION
summary: TIFF Library and Utilities
software package version: 0:4.6.0-4.oe2403sp1
software home page: https://libtiff.gitlab.io/libtiff/
description: This libtiff provides support for the Tag Image File Format (TIFF), a widely used format for storing image data. The latest version of the TIFF specification is available on-line in several different formats.And contains command-line programs for manipulating TIFF format image files using the libtiff library.
name: libtiff
software source info: acquired package info from repodata DB: repodata/97a8837b13d1803b9266184a3cf9dafc96fd7534775890089deafb0b3375ffe6-primary.sqlite.bz2
software package url: pkg:rpm/libtiff@4.6.0-4.oe2403sp1?arch=x86_64&epoch=0&upstream=libtiff-4.6.0-4.oe2403sp1.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd852
type: software_Package
supplied by: SPDXRef-gnrtd859
software download location: NOASSERTION
summary: The core library that forms the basis for projects such as GTK+ and GNOME
software package version: 0:2.78.3-10.oe2403sp1
software home page: https://www.gtk.org
description: GLib is a bundle of three (formerly five) low-level system libraries written in C and developed mainly by GNOME. GLib's code was separated from GTK, so it can be used by software other than GNOME and has been developed in parallel ever since.
name: glib2
software source info: acquired package info from repodata DB: repodata/97a8837b13d1803b9266184a3cf9dafc96fd7534775890089deafb0b3375ffe6-primary.sqlite.bz2
software package url: pkg:rpm/glib2@2.78.3-10.oe2403sp1?arch=x86_64&epoch=0&upstream=glib2-2.78.3-10.oe2403sp1.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd58
type: software_Package
supplied by: SPDXRef-gnrtd61
software download location: NOASSERTION
summary: GCC version 12 shared support library
software package version: 0:12.3.1-64.oe2403sp1
software home page: https://gcc.gnu.org
description: This package contains GCC shared support library which is needed e.g. for exception handling support.
name: libgcc
software source info: acquired package info from repodata DB: repodata/97a8837b13d1803b9266184a3cf9dafc96fd7534775890089deafb0b3375ffe6-primary.sqlite.bz2
software package url: pkg:rpm/libgcc@12.3.1-64.oe2403sp1?arch=x86_64&epoch=0&upstream=gcc-12.3.1-64.oe2403sp1.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd65
type: software_Package
supplied by: SPDXRef-gnrtd70
software download location: NOASSERTION
summary: GNU Standard C++ Library
software package version: 0:12.3.1-64.oe2403sp1
software home page: https://gcc.gnu.org
description: The libstdc++ package contains a rewritten standard compliant GCC Standard C++ Library.
name: libstdc++
software source info: acquired package info from repodata DB: repodata/97a8837b13d1803b9266184a3cf9dafc96fd7534775890089deafb0b3375ffe6-primary.sqlite.bz2
software package url: pkg:rpm/libstdc++@12.3.1-64.oe2403sp1?arch=x86_64&epoch=0&upstream=gcc-12.3.1-64.oe2403sp1.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd968
type: software_Package
supplied by: SPDXRef-gnrtd975
software download location: NOASSERTION
summary: gdk is a multi-platform toolkit for creating graphical user interfaces.
software package version: 0:2.42.10-5.oe2403sp1
software home page: https://gitlab.gnome.org/GNOME/gdk-pixbuf
description: gdk is written in C but has been designed from the ground up to support a wide range of languages. It provide a complete set of widgets,and suitable for projects ranging from small one-off tools to complete application suites.
name: gdk-pixbuf2
software source info: acquired package info from repodata DB: repodata/97a8837b13d1803b9266184a3cf9dafc96fd7534775890089deafb0b3375ffe6-primary.sqlite.bz2
software package url: pkg:rpm/gdk-pixbuf2@2.42.10-5.oe2403sp1?arch=x86_64&epoch=0&upstream=gdk-pixbuf2-2.42.10-5.oe2403sp1.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd4845
type: software_Package
supplied by: SPDXRef-gnrtd4848
software download location: NOASSERTION
summary: A library and utilities for processing GIFs
software package version: 0:5.2.2-3.oe2403sp1
software home page: http://www.sourceforge.net/projects/giflib/
description: giflib is a library of gif images and provides utilities for processing images.
name: giflib
software source info: acquired package info from repodata DB: repodata/97a8837b13d1803b9266184a3cf9dafc96fd7534775890089deafb0b3375ffe6-primary.sqlite.bz2
software package url: pkg:rpm/giflib@5.2.2-3.oe2403sp1?arch=x86_64&epoch=0&upstream=giflib-5.2.2-3.oe2403sp1.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd309
type: software_Package
supplied by: SPDXRef-gnrtd314
software download location: NOASSERTION
summary: Library providing XML and HTML support
software package version: 0:2.11.9-12.oe2403sp1
software home page: http://xmlsoft.org/
description: This library allows to manipulate XML files. It includes support to read, modify and write XML and HTML files. There is DTDs support this includes parsing and validation even with complex DtDs, either at parse time or later once the document has been modified. The output can be a simple SAX stream or and in-memory DOM like representations. In this case one can use the built-in XPath and XPointer implementation to select sub nodes or ranges. A flexible Input/Output mechanism is available, with existing HTTP and FTP modules and combined to an URI library.
name: libxml2
software source info: acquired package info from repodata DB: repodata/97a8837b13d1803b9266184a3cf9dafc96fd7534775890089deafb0b3375ffe6-primary.sqlite.bz2
software package url: pkg:rpm/libxml2@2.11.9-12.oe2403sp1?arch=x86_64&epoch=0&upstream=libxml2-2.11.9-12.oe2403sp1.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd259
type: software_Package
supplied by: SPDXRef-gnrtd264
software download location: NOASSERTION
summary: Readline library for editing typed command lines
software package version: 0:8.2-5.oe2403sp1
software home page: http://tiswww.case.edu/php/chet/readline/rltop.html
description: The GNU Readline library provides a set of functions for use by applications that allow users to edit command lines as they are typed in. Both Emacs and vi editing modes are available.The Readline library includes additional functions to maintain a list of previously-entered command lines, to recall and perhaps reedit those lines, and perform csh-like history expansion on previous commands.
name: readline
software source info: acquired package info from repodata DB: repodata/97a8837b13d1803b9266184a3cf9dafc96fd7534775890089deafb0b3375ffe6-primary.sqlite.bz2
software package url: pkg:rpm/readline@8.2-5.oe2403sp1?arch=x86_64&epoch=0&upstream=readline-8.2-5.oe2403sp1.src.rpm
creation info: _:creationInfo_0

spdx id: additionalToolSPDXRef-gnrtd1
type: Tool
name: syft-[not provided]
creation info: _:creationInfo_0

spdx id: additionalToolSPDXRef-gnrtd3
type: Tool
name: syft-[not provided]
creation info: _:creationInfo_1