type: CreationInfo
spec version: 3.0.1
created by: SPDXRef-gnrtd0
created using: syft-[not provided] (additionalToolSPDXRef-gnrtd1)
created: 2026-07-04T18:03:45Z

type: CreationInfo
spec version: 3.0.1
created by: SPDXRef-gnrtd2
created using: syft-[not provided] (additionalToolSPDXRef-gnrtd3)
created: 2026-07-04T18:03:45Z

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS/update/x86_64-bf0594bd-6a54-4972-8097-fcd02afc62ca-specv3/SPDXRef-gnrtd148
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd149
from: libstdc++
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd989
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd990
from: libpng
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd13465
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd13466
from: fontforge
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1035
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd103
from: harfbuzz
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1030
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd1031
from: glib2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd94
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd95
from: zlib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd992
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd990
from: libpng
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd572
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd103
from: brotli
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd189
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd190
from: glibc
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1040
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd1041
from: freetype
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd277
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd275
from: python3
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1013
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd1014
from: cairo
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd274
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd275
from: python3
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1180
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd1181
from: cairo-gobject
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1027
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd1028
from: glib2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5355
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd103
from: giflib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1033
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd103
from: harfbuzz
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd139
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd140
from: libgcc
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd192
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd193
from: glibc
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd984
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd982
from: libtiff
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd574
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd103
from: brotli
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1203
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd1204
from: gtk3
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd247
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd248
from: readline
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd250
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd251
from: readline
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd145
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd146
from: libstdc++
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1169
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd1170
from: gdk-pixbuf2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5357
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd103
from: giflib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd13468
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd13469
from: fontforge
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd142
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd143
from: libgcc
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1010
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd1011
from: cairo
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1043
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd1044
from: freetype
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd91
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd92
from: zlib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd533
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd103
from: libxml2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1183
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd1184
from: cairo-gobject
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd981
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd982
from: libtiff
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1200
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd1201
from: gtk3
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd531
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd103
from: libxml2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1172
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd1173
from: gdk-pixbuf2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd13463
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: cairo-gobject
from: fontforge
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd13461
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: libtiff
from: fontforge
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd13454
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: zlib
from: fontforge
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd13451
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: gdk-pixbuf2
from: fontforge
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd13458
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: libstdc++
from: fontforge
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd13462
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: brotli
from: fontforge
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd13460
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: libxml2
from: fontforge
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd13455
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: giflib
from: fontforge
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd13453
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: glib2
from: fontforge
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd13464
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: cairo
from: fontforge
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd13448
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: glibc
from: fontforge
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd13459
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: libpng
from: fontforge
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd13447
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: gtk3
from: fontforge
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd13456
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: readline
from: fontforge
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd13457
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: python3
from: fontforge
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd13452
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: freetype
from: fontforge
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd13449
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: libgcc
from: fontforge
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd13450
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: harfbuzz
from: fontforge
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd193
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net-2.0 and ISC and Public Domain and GFDL-1.3-only
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1011
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2 or MPLv1.1
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd990
type: simplelicensing_LicenseExpression
simplelicensing license expression: Zlib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd149
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1173
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1041
type: simplelicensing_LicenseExpression
simplelicensing license expression: (BSD-3-Clause AND MIT AND MIT-Modern-Variant AND Zlib AND (FTL OR GPL-2.0-or-later))
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd248
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1181
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2 or MPLv1.1
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1014
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2 or MPLv1.1
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd143
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd92
type: simplelicensing_LicenseExpression
simplelicensing license expression: zlib and Boost
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1201
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd251
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1028
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd13469
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd275
type: simplelicensing_LicenseExpression
simplelicensing license expression: Python-2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd95
type: simplelicensing_LicenseExpression
simplelicensing license expression: zlib and Boost
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1044
type: simplelicensing_LicenseExpression
simplelicensing license expression: (BSD-3-Clause AND MIT AND (FTL OR GPL-2.0-or-later) AND MIT-Modern-Variant AND Zlib)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd982
type: simplelicensing_LicenseExpression
simplelicensing license expression: libtiff
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1204
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd190
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net-2.0 and ISC and Public Domain and GFDL-1.3-only
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd103
type: simplelicensing_LicenseExpression
simplelicensing license expression: MIT
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd140
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd146
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1184
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2 or MPLv1.1
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd13466
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1031
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1170
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd249
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd983
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd573
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd141
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1034
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd93
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd191
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd147
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1029
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd532
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1012
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1202
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1042
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5356
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd276
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1171
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1182
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd991
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd13467
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd138
type: software_Package
supplied by: SPDXRef-gnrtd141
software download location: NOASSERTION
summary: GCC version 12 shared support library
software package version: 0:12.3.1-36.oe2403
software home page: https://gcc.gnu.org
description: This package contains GCC shared support library which is needed e.g. for exception handling support.
name: libgcc
software source info: acquired package info from repodata DB: repodata/18c2be42fe2b5b288fc0e4628777cec64a6dd8c9b9c960757aa68407d41ebc3f-primary.sqlite.bz2
software package url: pkg:rpm/libgcc@12.3.1-36.oe2403?arch=x86_64&epoch=0&upstream=gcc-12.3.1-36.oe2403.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd136
type: software_Package
supplied by: SPDXRef-gnrtd147
software download location: NOASSERTION
summary: GNU Standard C++ Library
software package version: 0:12.3.1-36.oe2403
software home page: https://gcc.gnu.org
description: The libstdc++ package contains a rewritten standard compliant GCC Standard C++ Library.
name: libstdc++
software source info: acquired package info from repodata DB: repodata/18c2be42fe2b5b288fc0e4628777cec64a6dd8c9b9c960757aa68407d41ebc3f-primary.sqlite.bz2
software package url: pkg:rpm/libstdc++@12.3.1-36.oe2403?arch=x86_64&epoch=0&upstream=gcc-12.3.1-36.oe2403.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1004
type: software_Package
supplied by: SPDXRef-gnrtd1012
software download location: NOASSERTION
summary: A 2D graphics library
software package version: 0:1.18.0-2.oe2403
software home page: http://cairographics.org
description: Cairo is a 2D graphics libarary with support for multiple output devices. It provides high-quality display and print output and this package also contains functionality to make cairo graphics library integrate well with GObject used by GNOME.
name: cairo
software source info: acquired package info from repodata DB: repodata/18c2be42fe2b5b288fc0e4628777cec64a6dd8c9b9c960757aa68407d41ebc3f-primary.sqlite.bz2
software package url: pkg:rpm/cairo@1.18.0-2.oe2403?arch=x86_64&epoch=0&upstream=cairo-1.18.0-2.oe2403.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1164
type: software_Package
supplied by: SPDXRef-gnrtd1171
software download location: NOASSERTION
summary: gdk is a multi-platform toolkit for creating graphical user interfaces.
software package version: 0:2.42.10-3.oe2403
software home page: https://gitlab.gnome.org/GNOME/gdk-pixbuf
description: gdk is written in C but has been designed from the ground up to support a wide range of languages. It provide a complete set of widgets,and suitable for projects ranging from small one-off tools to complete application suites.
name: gdk-pixbuf2
software source info: acquired package info from repodata DB: repodata/18c2be42fe2b5b288fc0e4628777cec64a6dd8c9b9c960757aa68407d41ebc3f-primary.sqlite.bz2
software package url: pkg:rpm/gdk-pixbuf2@2.42.10-3.oe2403?arch=x86_64&epoch=0&upstream=gdk-pixbuf2-2.42.10-3.oe2403.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd570
type: software_Package
supplied by: SPDXRef-gnrtd573
software download location: NOASSERTION
summary: Lossless compression algorithm
software package version: 0:1.1.0-2.oe2403
software home page: https://github.com/google/brotli
description: Brotli is a generic-purpose lossless compression algorithm that compresses data using a combination of a modern variant of the LZ77 algorithm, Huffman coding and 2nd order context modeling, with a compression ratio comparable to the best currently available general-purpose compression methods. It is similar in speed with deflate but offers more dense compression.
name: brotli
software source info: acquired package info from repodata DB: repodata/18c2be42fe2b5b288fc0e4628777cec64a6dd8c9b9c960757aa68407d41ebc3f-primary.sqlite.bz2
software package url: pkg:rpm/brotli@1.1.0-2.oe2403?arch=x86_64&epoch=0&upstream=brotli-1.1.0-2.oe2403.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1020
type: software_Package
supplied by: SPDXRef-gnrtd1029
software download location: NOASSERTION
summary: The core library that forms the basis for projects such as GTK+ and GNOME
software package version: 0:2.78.3-10.oe2403
software home page: https://www.gtk.org
description: GLib is a bundle of three (formerly five) low-level system libraries written in C and developed mainly by GNOME. GLib's code was separated from GTK, so it can be used by software other than GNOME and has been developed in parallel ever since.
name: glib2
software source info: acquired package info from repodata DB: repodata/18c2be42fe2b5b288fc0e4628777cec64a6dd8c9b9c960757aa68407d41ebc3f-primary.sqlite.bz2
software package url: pkg:rpm/glib2@2.78.3-10.oe2403?arch=x86_64&epoch=0&upstream=glib2-2.78.3-10.oe2403.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd11
type: software_Package
supplied by: SPDXRef-gnrtd191
software download location: NOASSERTION
summary: The GNU libc libraries
software package version: 0:2.38-101.oe2403
software home page: http://www.gnu.org/software/glibc/
description: The GNU C Library project provides the core libraries for the GNU system and GNU/Linux systems, as well as many other systems that use Linux as the kernel. These libraries provide critical APIs including ISO C11, POSIX.1-2008, BSD, OS-specific APIs and more. These APIs include such foundational facilities as open, read, write, malloc, printf, getaddrinfo, dlopen, pthread_create, crypt, login, exit and more.
name: glibc
software source info: acquired package info from repodata DB: repodata/18c2be42fe2b5b288fc0e4628777cec64a6dd8c9b9c960757aa68407d41ebc3f-primary.sqlite.bz2
software package url: pkg:rpm/glibc@2.38-101.oe2403?arch=x86_64&epoch=0&upstream=glibc-2.38-101.oe2403.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1176
type: software_Package
supplied by: SPDXRef-gnrtd1182
software download location: NOASSERTION
summary: GObject bindings for cairo
software package version: 0:1.18.0-2.oe2403
software home page: http://cairographics.org
description: Cairo is a 2D graphics library designed to provide high-quality display and print output. This package contains functionality to make cairo graphics library integrate well with the GObject object system used by GNOME.
name: cairo-gobject
software source info: acquired package info from repodata DB: repodata/18c2be42fe2b5b288fc0e4628777cec64a6dd8c9b9c960757aa68407d41ebc3f-primary.sqlite.bz2
software package url: pkg:rpm/cairo-gobject@1.18.0-2.oe2403?arch=x86_64&epoch=0&upstream=cairo-1.18.0-2.oe2403.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd999
type: software_Package
supplied by: SPDXRef-gnrtd1042
software download location: NOASSERTION
summary: FreeType is a freely available software library to render fonts
software package version: 0:2.13.2-3.oe2403
software home page: https://www.freetype.org
description: FreeType is written in C, designed to be small,efficient, highly customizable, and portable while capable of producing high-quality output (glyph images) of most vector and bitmap font formats
name: freetype
software source info: acquired package info from repodata DB: repodata/18c2be42fe2b5b288fc0e4628777cec64a6dd8c9b9c960757aa68407d41ebc3f-primary.sqlite.bz2
software package url: pkg:rpm/freetype@2.13.2-3.oe2403?arch=x86_64&epoch=0&upstream=freetype-2.13.2-3.oe2403.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd244
type: software_Package
supplied by: SPDXRef-gnrtd249
software download location: NOASSERTION
summary: Readline library for editing typed command lines
software package version: 0:8.2-5.oe2403
software home page: http://tiswww.case.edu/php/chet/readline/rltop.html
description: The GNU Readline library provides a set of functions for use by applications that allow users to edit command lines as they are typed in. Both Emacs and vi editing modes are available.The Readline library includes additional functions to maintain a list of previously-entered command lines, to recall and perhaps reedit those lines, and perform csh-like history expansion on previous commands.
name: readline
software source info: acquired package info from repodata DB: repodata/18c2be42fe2b5b288fc0e4628777cec64a6dd8c9b9c960757aa68407d41ebc3f-primary.sqlite.bz2
software package url: pkg:rpm/readline@8.2-5.oe2403?arch=x86_64&epoch=0&upstream=readline-8.2-5.oe2403.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1002
type: software_Package
supplied by: SPDXRef-gnrtd1034
software download location: NOASSERTION
summary: A text shaping engine
software package version: 0:8.3.0-2.oe2403
software home page: https://harfbuzz.github.io/
description: HarfBuzz is a text-shaping engine. If you give HarfBuzz a font and a string containing a sequence of Unicode codepoints, HarfBuzz selects and positions the corresponding glyphs from the font, applying all of the necessary layout rules and font features. HarfBuzz then returns the string to you in the form that is correctly arranged for the language and writing system.
name: harfbuzz
software source info: acquired package info from repodata DB: repodata/18c2be42fe2b5b288fc0e4628777cec64a6dd8c9b9c960757aa68407d41ebc3f-primary.sqlite.bz2
software package url: pkg:rpm/harfbuzz@8.3.0-2.oe2403?arch=x86_64&epoch=0&upstream=harfbuzz-8.3.0-2.oe2403.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd527
type: software_Package
supplied by: SPDXRef-gnrtd532
software download location: NOASSERTION
summary: Library providing XML and HTML support
software package version: 0:2.11.5-15.oe2403
software home page: http://xmlsoft.org/
description: This library allows to manipulate XML files. It includes support to read, modify and write XML and HTML files. There is DTDs support this includes parsing and validation even with complex DtDs, either at parse time or later once the document has been modified. The output can be a simple SAX stream or and in-memory DOM like representations. In this case one can use the built-in XPath and XPointer implementation to select sub nodes or ranges. A flexible Input/Output mechanism is available, with existing HTTP and FTP modules and combined to an URI library.
name: libxml2
software source info: acquired package info from repodata DB: repodata/18c2be42fe2b5b288fc0e4628777cec64a6dd8c9b9c960757aa68407d41ebc3f-primary.sqlite.bz2
software package url: pkg:rpm/libxml2@2.11.5-15.oe2403?arch=x86_64&epoch=0&upstream=libxml2-2.11.5-15.oe2403.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd205
type: software_Package
supplied by: SPDXRef-gnrtd276
software download location: NOASSERTION
summary: Interpreter of the Python3 programming language
software package version: 0:3.11.6-10.oe2403
software home page: https://www.python.org/
description: Python combines remarkable power with very clear syntax. It has modules, classes, exceptions, very high level dynamic data types, and dynamic typing. There are interfaces to many system calls and libraries, as well as to various windowing systems. New built-in modules are easily written in C or C++ (or other languages, depending on the chosen implementation). Python is also usable as an extension language for applications written in other languages that need easy-to-use scripting or automation interfaces. This package Provides python version 3.
name: python3
software source info: acquired package info from repodata DB: repodata/18c2be42fe2b5b288fc0e4628777cec64a6dd8c9b9c960757aa68407d41ebc3f-primary.sqlite.bz2
software package url: pkg:rpm/python3@3.11.6-10.oe2403?arch=x86_64&epoch=0&upstream=python3-3.11.6-10.oe2403.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd976
type: software_Package
supplied by: SPDXRef-gnrtd983
software download location: NOASSERTION
summary: TIFF Library and Utilities
software package version: 0:4.6.0-3.oe2403
software home page: https://libtiff.gitlab.io/libtiff/
description: This libtiff provides support for the Tag Image File Format (TIFF), a widely used format for storing image data. The latest version of the TIFF specification is available on-line in several different formats.And contains command-line programs for manipulating TIFF format image files using the libtiff library.
name: libtiff
software source info: acquired package info from repodata DB: repodata/18c2be42fe2b5b288fc0e4628777cec64a6dd8c9b9c960757aa68407d41ebc3f-primary.sqlite.bz2
software package url: pkg:rpm/libtiff@4.6.0-3.oe2403?arch=x86_64&epoch=0&upstream=libtiff-4.6.0-3.oe2403.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd986
type: software_Package
supplied by: SPDXRef-gnrtd991
software download location: NOASSERTION
summary: A library of functions for manipulating PNG image format files
software package version: 2:1.6.40-12.oe2403
software home page: http://www.libpng.org/pub/png/libpng.html
description: The libpng package contains libraries used by other programs for reading and writing PNG format files. The PNG format was designed as a replacement for GIF and, to a lesser extent, TIFF, with many improvements and extensions and lack of patent problems.
name: libpng
software source info: acquired package info from repodata DB: repodata/18c2be42fe2b5b288fc0e4628777cec64a6dd8c9b9c960757aa68407d41ebc3f-primary.sqlite.bz2
software package url: pkg:rpm/libpng@1.6.40-12.oe2403?arch=x86_64&epoch=2&upstream=libpng-1.6.40-12.oe2403.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5353
type: software_Package
supplied by: SPDXRef-gnrtd5356
software download location: NOASSERTION
summary: A library and utilities for processing GIFs
software package version: 0:5.2.2-1.oe2403
software home page: http://www.sourceforge.net/projects/giflib/
description: giflib is a library of gif images and provides utilities for processing images.
name: giflib
software source info: acquired package info from repodata DB: repodata/18c2be42fe2b5b288fc0e4628777cec64a6dd8c9b9c960757aa68407d41ebc3f-primary.sqlite.bz2
software package url: pkg:rpm/giflib@5.2.2-1.oe2403?arch=x86_64&epoch=0&upstream=giflib-5.2.2-1.oe2403.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1124
type: software_Package
supplied by: SPDXRef-gnrtd1202
software download location: NOASSERTION
summary: GTK+ graphical user interface library
software package version: 0:3.24.41-2.oe2403
software home page: https://www.gtk.org
description: GTK+ is an object-oriented widget toolkit written in the programming language C; it has a C-based object-oriented architecture that allows for maximum flexibility. The GTK+ library contains a set of graphical control elements (widgets)for creating graphical user interfaces. This package contains version 3 of GTK+.
name: gtk3
software source info: acquired package info from repodata DB: repodata/18c2be42fe2b5b288fc0e4628777cec64a6dd8c9b9c960757aa68407d41ebc3f-primary.sqlite.bz2
software package url: pkg:rpm/gtk3@3.24.41-2.oe2403?arch=x86_64&epoch=0&upstream=gtk3-3.24.41-2.oe2403.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd13446
type: software_Package
supplied by: SPDXRef-gnrtd13467
software download location: NOASSERTION
summary: Outline and bitmap font editor
software package version: 0:20230101-4.oe2403
software home page: http://fontforge.github.io/
description: FontForge (former PfaEdit) is a font editor for outline and bitmap fonts. It supports a range of font formats, including PostScript (ASCII and binary Type 1, some Type 3 and Type 0), TrueType, OpenType (Type2) and CID-keyed fonts.
name: fontforge
software source info: acquired package info from repodata DB: repodata/18c2be42fe2b5b288fc0e4628777cec64a6dd8c9b9c960757aa68407d41ebc3f-primary.sqlite.bz2
software package url: pkg:rpm/fontforge@20230101-4.oe2403?arch=x86_64&epoch=0&upstream=fontforge-20230101-4.oe2403.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd89
type: software_Package
supplied by: SPDXRef-gnrtd93
software download location: NOASSERTION
summary: A lossless data-compression library
software package version: 0:1.2.13-5.oe2403
software home page: http://www.zlib.net
description: Zlib is a free, general-purpose, not covered by any patents, lossless data-compression library for use on virtually any computer hardware and operating system. The zlib data format is itself portable across platforms.
name: zlib
software source info: acquired package info from repodata DB: repodata/18c2be42fe2b5b288fc0e4628777cec64a6dd8c9b9c960757aa68407d41ebc3f-primary.sqlite.bz2
software package url: pkg:rpm/zlib@1.2.13-5.oe2403?arch=x86_64&epoch=0&upstream=zlib-1.2.13-5.oe2403.src.rpm
creation info: _:creationInfo_0

spdx id: additionalToolSPDXRef-gnrtd1
type: Tool
name: syft-[not provided]
creation info: _:creationInfo_0

spdx id: additionalToolSPDXRef-gnrtd3
type: Tool
name: syft-[not provided]
creation info: _:creationInfo_1