{ "@context": "https://spdx.org/rdf/3.0.1/spdx-context.jsonld", "@graph": [ { "@id": "_:creationInfo_0", "type": "CreationInfo", "specVersion": "3.0.1", "createdBy": [ "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/aarch64-e3609e43-c49a-4718-8e81-5144b9faffd8-specv3/SPDXRef-gnrtd0" ], "createdUsing": [ "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/aarch64-e3609e43-c49a-4718-8e81-5144b9faffd8-specv3/additionalToolSPDXRef-gnrtd1" ], "created": "2026-07-11T17:57:00Z" }, { "@id": "_:creationInfo_1", "type": "CreationInfo", "specVersion": "3.0.1", "createdBy": [ "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/aarch64-e3609e43-c49a-4718-8e81-5144b9faffd8-specv3/SPDXRef-gnrtd2" ], "createdUsing": [ "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/aarch64-e3609e43-c49a-4718-8e81-5144b9faffd8-specv3/additionalToolSPDXRef-gnrtd3" ], "created": "2026-07-11T17:57:00Z" }, { "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/aarch64-e3609e43-c49a-4718-8e81-5144b9faffd8-specv3/SPDXRef-gnrtd20448", "type": "Relationship", "relationshipType": "hasDeclaredLicense", "to": [ "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/aarch64-e3609e43-c49a-4718-8e81-5144b9faffd8-specv3/SPDXRef-gnrtd20449" ], "from": "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/aarch64-e3609e43-c49a-4718-8e81-5144b9faffd8-specv3/SPDXRef-gnrtd20442", "creationInfo": "_:creationInfo_0" }, { "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/aarch64-e3609e43-c49a-4718-8e81-5144b9faffd8-specv3/SPDXRef-gnrtd39", "type": "Relationship", "relationshipType": "hasDeclaredLicense", "to": [ "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/aarch64-e3609e43-c49a-4718-8e81-5144b9faffd8-specv3/SPDXRef-gnrtd40" ], "from": "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/aarch64-e3609e43-c49a-4718-8e81-5144b9faffd8-specv3/SPDXRef-gnrtd11", "creationInfo": "_:creationInfo_0" }, { "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/aarch64-e3609e43-c49a-4718-8e81-5144b9faffd8-specv3/SPDXRef-gnrtd36", "type": "Relationship", "relationshipType": "hasConcludedLicense", "to": [ "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/aarch64-e3609e43-c49a-4718-8e81-5144b9faffd8-specv3/SPDXRef-gnrtd37" ], "from": "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/aarch64-e3609e43-c49a-4718-8e81-5144b9faffd8-specv3/SPDXRef-gnrtd11", "creationInfo": "_:creationInfo_0" }, { "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/aarch64-e3609e43-c49a-4718-8e81-5144b9faffd8-specv3/SPDXRef-gnrtd2189", "type": "Relationship", "relationshipType": "hasConcludedLicense", "to": [ "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/aarch64-e3609e43-c49a-4718-8e81-5144b9faffd8-specv3/SPDXRef-gnrtd2190" ], "from": "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/aarch64-e3609e43-c49a-4718-8e81-5144b9faffd8-specv3/SPDXRef-gnrtd2146", "creationInfo": "_:creationInfo_0" }, { "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/aarch64-e3609e43-c49a-4718-8e81-5144b9faffd8-specv3/SPDXRef-gnrtd2192", "type": "Relationship", "relationshipType": "hasDeclaredLicense", "to": [ "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/aarch64-e3609e43-c49a-4718-8e81-5144b9faffd8-specv3/SPDXRef-gnrtd2190" ], "from": "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/aarch64-e3609e43-c49a-4718-8e81-5144b9faffd8-specv3/SPDXRef-gnrtd2146", "creationInfo": "_:creationInfo_0" }, { "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/aarch64-e3609e43-c49a-4718-8e81-5144b9faffd8-specv3/SPDXRef-gnrtd20445", "type": "Relationship", "relationshipType": "hasConcludedLicense", "to": [ "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/aarch64-e3609e43-c49a-4718-8e81-5144b9faffd8-specv3/SPDXRef-gnrtd20446" ], "from": "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/aarch64-e3609e43-c49a-4718-8e81-5144b9faffd8-specv3/SPDXRef-gnrtd20442", "creationInfo": "_:creationInfo_0" }, { "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/aarch64-e3609e43-c49a-4718-8e81-5144b9faffd8-specv3/SPDXRef-gnrtd20443", "type": "LifecycleScopedRelationship", "relationshipType": "dependsOn", "scope": "build", "completeness": "noAssertion", "to": [ "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/aarch64-e3609e43-c49a-4718-8e81-5144b9faffd8-specv3/SPDXRef-gnrtd11" ], "from": "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/aarch64-e3609e43-c49a-4718-8e81-5144b9faffd8-specv3/SPDXRef-gnrtd20442", "creationInfo": "_:creationInfo_0" }, { "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/aarch64-e3609e43-c49a-4718-8e81-5144b9faffd8-specv3/SPDXRef-gnrtd20444", "type": "LifecycleScopedRelationship", "relationshipType": "dependsOn", "scope": "build", "completeness": "noAssertion", "to": [ "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/aarch64-e3609e43-c49a-4718-8e81-5144b9faffd8-specv3/SPDXRef-gnrtd2146" ], "from": "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/aarch64-e3609e43-c49a-4718-8e81-5144b9faffd8-specv3/SPDXRef-gnrtd20442", "creationInfo": "_:creationInfo_0" }, { "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/aarch64-e3609e43-c49a-4718-8e81-5144b9faffd8-specv3/SPDXRef-gnrtd20449", "type": "simplelicensing_LicenseExpression", "simplelicensing_licenseExpression": "GPLv2", "creationInfo": "_:creationInfo_0" }, { "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/aarch64-e3609e43-c49a-4718-8e81-5144b9faffd8-specv3/SPDXRef-gnrtd37", "type": "simplelicensing_LicenseExpression", "simplelicensing_licenseExpression": "LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net-2.0 and ISC and Public Domain and GFDL-1.3-only", "creationInfo": "_:creationInfo_0" }, { "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/aarch64-e3609e43-c49a-4718-8e81-5144b9faffd8-specv3/SPDXRef-gnrtd40", "type": "simplelicensing_LicenseExpression", "simplelicensing_licenseExpression": "LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net-2.0 and ISC and Public Domain and GFDL-1.3-only", "creationInfo": "_:creationInfo_0" }, { "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/aarch64-e3609e43-c49a-4718-8e81-5144b9faffd8-specv3/SPDXRef-gnrtd20446", "type": "simplelicensing_LicenseExpression", "simplelicensing_licenseExpression": "GPLv2", "creationInfo": "_:creationInfo_0" }, { "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/aarch64-e3609e43-c49a-4718-8e81-5144b9faffd8-specv3/SPDXRef-gnrtd2190", "type": "simplelicensing_LicenseExpression", "simplelicensing_licenseExpression": "curl", "creationInfo": "_:creationInfo_0" }, { "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/aarch64-e3609e43-c49a-4718-8e81-5144b9faffd8-specv3/SPDXRef-gnrtd38", "type": "Organization", "name": "http://openeuler.org", "creationInfo": "_:creationInfo_0" }, { "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/aarch64-e3609e43-c49a-4718-8e81-5144b9faffd8-specv3/SPDXRef-gnrtd20447", "type": "Organization", "name": "http://openeuler.org", "creationInfo": "_:creationInfo_0" }, { "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/aarch64-e3609e43-c49a-4718-8e81-5144b9faffd8-specv3/SPDXRef-gnrtd2191", "type": "Organization", "name": "http://openeuler.org", "creationInfo": "_:creationInfo_0" }, { "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/aarch64-e3609e43-c49a-4718-8e81-5144b9faffd8-specv3/SPDXRef-gnrtd11", "type": "software_Package", "software_copyrightText": "", "suppliedBy": "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/aarch64-e3609e43-c49a-4718-8e81-5144b9faffd8-specv3/SPDXRef-gnrtd38", "software_downloadLocation": "NOASSERTION", "summary": "The GNU libc libraries", "software_packageVersion": "0:2.38-101.oe2403sp3", "software_homePage": "http://www.gnu.org/software/glibc/", "description": "The GNU C Library project provides the core libraries for the GNU system and\nGNU/Linux systems, as well as many other systems that use Linux as the kernel.\nThese libraries provide critical APIs including ISO C11, POSIX.1-2008, BSD,\nOS-specific APIs and more. These APIs include such foundational facilities as\nopen, read, write, malloc, printf, getaddrinfo, dlopen, pthread_create, crypt,\n login, exit and more.", "name": "glibc", "software_sourceInfo": "acquired package info from repodata DB: repodata/e5f38ba4169a71daafe2fb47abf7ae468a296eb65a434bbe3807eeb03acf9346-primary.sqlite.bz2", "software_packageUrl": "pkg:rpm/glibc@2.38-101.oe2403sp3?arch=aarch64&epoch=0&upstream=glibc-2.38-101.oe2403sp3.src.rpm", "creationInfo": "_:creationInfo_0" }, { "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/aarch64-e3609e43-c49a-4718-8e81-5144b9faffd8-specv3/SPDXRef-gnrtd2146", "type": "software_Package", "software_copyrightText": "", "suppliedBy": "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/aarch64-e3609e43-c49a-4718-8e81-5144b9faffd8-specv3/SPDXRef-gnrtd2191", "software_downloadLocation": "NOASSERTION", "summary": "A library for getting files from web servers", "software_packageVersion": "0:8.4.0-26.oe2403sp3", "software_homePage": "https://curl.se/", "description": "A library for getting files from web servers.", "name": "libcurl", "software_sourceInfo": "acquired package info from repodata DB: repodata/e5f38ba4169a71daafe2fb47abf7ae468a296eb65a434bbe3807eeb03acf9346-primary.sqlite.bz2", "software_packageUrl": "pkg:rpm/libcurl@8.4.0-26.oe2403sp3?arch=aarch64&epoch=0&upstream=curl-8.4.0-26.oe2403sp3.src.rpm", "creationInfo": "_:creationInfo_0" }, { "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/aarch64-e3609e43-c49a-4718-8e81-5144b9faffd8-specv3/SPDXRef-gnrtd20442", "type": "software_Package", "software_copyrightText": "", "suppliedBy": "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/aarch64-e3609e43-c49a-4718-8e81-5144b9faffd8-specv3/SPDXRef-gnrtd20447", "software_downloadLocation": "NOASSERTION", "summary": "Several Ogg Vorbis Tools", "software_packageVersion": "1:1.4.2-5.oe2403sp3", "software_homePage": "http://www.xiph.org/", "description": "Ogg Vorbis is a fully open, non-proprietary, patent-and-royalty-free, general-purpose\ncompressed audio format for mid to high quality (8kHz-48.0kHz, 16+ bit, polyphonic) audio\nand music at fixed and variable bitrates from 16 to 128 kbps/channel. This places Vorbis\nin the same competitive class as audio representations such as MPEG-4 (AAC), and similar\nto, but higher performance than MPEG-1/2 audio layer 3, MPEG-4 audio (TwinVQ), WMA and PAC.", "name": "vorbis-tools", "software_sourceInfo": "acquired package info from repodata DB: repodata/e5f38ba4169a71daafe2fb47abf7ae468a296eb65a434bbe3807eeb03acf9346-primary.sqlite.bz2", "software_packageUrl": "pkg:rpm/vorbis-tools@1.4.2-5.oe2403sp3?arch=aarch64&epoch=1&upstream=vorbis-tools-1.4.2-5.oe2403sp3.src.rpm", "creationInfo": "_:creationInfo_0" }, { "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/aarch64-e3609e43-c49a-4718-8e81-5144b9faffd8-specv3/additionalToolSPDXRef-gnrtd3", "type": "Tool", "name": "syft-[not provided]", "creationInfo": "_:creationInfo_1" }, { "spdxId": "https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/aarch64-e3609e43-c49a-4718-8e81-5144b9faffd8-specv3/additionalToolSPDXRef-gnrtd1", "type": "Tool", "name": "syft-[not provided]", "creationInfo": "_:creationInfo_0" } ] }