{
  "SPDXID": "SPDXRef-DOCUMENT",
  "name": "gimp-2.3.0.2-1.oe2403sp1.aarch64.rpm",
  "spdxVersion": "SPDX-2.2",
  "creationInfo": {
    "created": "2026-05-16T14:20:06.451001321Z",
    "creators": [
      "openeuler_creator"
    ]
  },
  "dataLicense": "CC0-1.0",
  "documentNamespace": "https://sbom.openEuler.org/gimp-2.3.0.2-1.oe2403sp1.aarch64.rpm",
  "packages": [
    {
      "SPDXID": "SPDXRef-rpm-OpenEXR-libs-3.1.11",
      "name": "OpenEXR-libs",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "c1535c9ba4e2f2bb6a7b4b1cd73e6ae1ace586a96b37ea9d02e1c38b12b88d59"
        }
      ],
      "description": "Libraries for OpenEXR.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/OpenEXR-libs@3.1.11-4.oe2403sp1?arch=aarch64&epoch=0&upstream=OpenEXR-3.1.11-4.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.openexr.com/",
      "sourceInfo": "acquired package info from repodata DB: repodata/b94370cc3a4d1c86107b4fa0a07587cf80733324c877020730dad0c3ad717021-primary.sqlite.bz2",
      "summary": "Libraries for OpenEXR",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:3.1.11-4.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-alsa-lib-1.2.10",
      "name": "alsa-lib",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "0d7645420237c94706d1f96027372dbb665501dcce55be03c846aefb42ec2155"
        }
      ],
      "description": "The alsa-lib is a library to interface with ALSA in the Linux kernel\nand virtual devices using a plugin system.\nMore detail: https://alsa.opensrc.org/Alsa-lib",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/alsa-lib@1.2.10-4.oe2403sp1?arch=aarch64&epoch=0&upstream=alsa-lib-1.2.10-4.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://alsa-project.org/",
      "sourceInfo": "acquired package info from repodata DB: repodata/b94370cc3a4d1c86107b4fa0a07587cf80733324c877020730dad0c3ad717021-primary.sqlite.bz2",
      "summary": "the user space library that developers compile ALSA applications against",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.2.10-4.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-babl-0.1.112",
      "name": "babl",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "a80de3a558051f2050319629a96bd7ec7ef3b4c84fa1bef748b281fc9935ab20"
        }
      ],
      "description": "babl is a dynamic, any to any, pixel format translation library.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/babl@0.1.112-1.oe2403sp1?arch=aarch64&epoch=0&upstream=babl-0.1.112-1.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://gegl.org/babl/",
      "sourceInfo": "acquired package info from repodata DB: repodata/b94370cc3a4d1c86107b4fa0a07587cf80733324c877020730dad0c3ad717021-primary.sqlite.bz2",
      "summary": "Dynamic Pixel Format Translation Library",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:0.1.112-1.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-cairo-1.18.0",
      "name": "cairo",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "77a870d682a22baff8420c61a513b1f1bd87d77c1b0dcd67f41138e8da5a5efa"
        }
      ],
      "description": "Cairo is a 2D graphics libarary with support for multiple output devices.\nIt provides high-quality display and print output and this package also\ncontains functionality to make cairo graphics library integrate well with\nGObject used by GNOME.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/cairo@1.18.0-2.oe2403sp1?arch=aarch64&epoch=0&upstream=cairo-1.18.0-2.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://cairographics.org",
      "sourceInfo": "acquired package info from repodata DB: repodata/b94370cc3a4d1c86107b4fa0a07587cf80733324c877020730dad0c3ad717021-primary.sqlite.bz2",
      "summary": "A 2D graphics library",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.18.0-2.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-freetype-2.13.2",
      "name": "freetype",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "e2d85f92bcc31e49a24ec36f9af7cd8b4a8fc6e5513a2d80270cc692168f6b90"
        }
      ],
      "description": "FreeType is written in C, designed to be small,efficient, highly customizable, and portable while capable of producing high-quality\noutput (glyph images) of most vector and bitmap font formats",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/freetype@2.13.2-3.oe2403sp1?arch=aarch64&epoch=0&upstream=freetype-2.13.2-3.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://www.freetype.org",
      "sourceInfo": "acquired package info from repodata DB: repodata/b94370cc3a4d1c86107b4fa0a07587cf80733324c877020730dad0c3ad717021-primary.sqlite.bz2",
      "summary": "FreeType is a freely available software library to render fonts",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.13.2-3.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-gdk-pixbuf2-2.42.10",
      "name": "gdk-pixbuf2",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "45d331014fdcc5751e5ddde3d6362e851c1102c2c8444cf6b10ca927a3edbfe1"
        }
      ],
      "description": "gdk is written in C but has been designed from the ground up to support a wide range of languages.\nIt provide a complete set of widgets,and suitable for projects ranging from small one-off\ntools to complete application suites.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/gdk-pixbuf2@2.42.10-5.oe2403sp1?arch=aarch64&epoch=0&upstream=gdk-pixbuf2-2.42.10-5.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://gitlab.gnome.org/GNOME/gdk-pixbuf",
      "sourceInfo": "acquired package info from repodata DB: repodata/b94370cc3a4d1c86107b4fa0a07587cf80733324c877020730dad0c3ad717021-primary.sqlite.bz2",
      "summary": "gdk is a multi-platform toolkit for creating graphical user interfaces.",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.42.10-5.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-gegl04-0.4.58",
      "name": "gegl04",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "f5cddd97efa02c131c23b8de2b8ece30c9c1c1349d100144f1688dc8173ef4ff"
        }
      ],
      "description": "GEGL provides infrastructure to do demand based cached non destructive\nimage editing on larger than RAM buffers. Through babl, it provides\nsupport for a wide range of color models and pixel storage formats for\ninput and output.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/gegl04@0.4.58-1.oe2403sp1?arch=aarch64&epoch=0&upstream=gegl04-0.4.58-1.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://gegl.org/",
      "sourceInfo": "acquired package info from repodata DB: repodata/b94370cc3a4d1c86107b4fa0a07587cf80733324c877020730dad0c3ad717021-primary.sqlite.bz2",
      "summary": "Generic Graphics Library",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:0.4.58-1.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-ghostscript-9.56.1",
      "name": "ghostscript",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "c0e225b346ed258b7d4f9a9d128f9c2840b5198040b87154d4a717d16debdd57"
        }
      ],
      "description": "Ghostscript is an interpreter for PostScript™ and Portable Document Format (PDF) files.\nGhostscript consists of a PostScript interpreter layer, and a graphics library.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/ghostscript@9.56.1-15.oe2403sp1?arch=aarch64&epoch=0&upstream=ghostscript-9.56.1-15.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://ghostscript.com/",
      "sourceInfo": "acquired package info from repodata DB: repodata/b94370cc3a4d1c86107b4fa0a07587cf80733324c877020730dad0c3ad717021-primary.sqlite.bz2",
      "summary": "An interpreter for PostScript and PDF files",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:9.56.1-15.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-gimp-libs-3.0.2",
      "name": "gimp-libs",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "2381017e3aa5ff1fcd2e6c4d9d4f44ea4cb4a88e447ffe4397f5b7c83b524764"
        }
      ],
      "description": "The GIMP is an image composition and editing program. GIMP offers\nmany tools and filters, and provides a large image manipulation\ntoolbox and scripting.\n\nThis package provides GIMP libraries.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/gimp-libs@3.0.2-1.oe2403sp1?arch=aarch64&epoch=2&upstream=gimp-3.0.2-1.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://www.gimp.org/",
      "sourceInfo": "acquired package info from repodata DB: repodata/b94370cc3a4d1c86107b4fa0a07587cf80733324c877020730dad0c3ad717021-primary.sqlite.bz2",
      "summary": "The GNU Image Manipulation Program - Libraries",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "2:3.0.2-1.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-glib2-2.78.3",
      "name": "glib2",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "fb49e7cc91649c7305d5e9db8b5ef1428d7b885b2cc06d981e354d42901307bf"
        }
      ],
      "description": "GLib is a bundle of three (formerly five) low-level system libraries\nwritten in C and developed mainly by GNOME. GLib's code was separated\nfrom GTK, so it can be used by software other than GNOME and has been\ndeveloped in parallel ever since.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/glib2@2.78.3-10.oe2403sp1?arch=aarch64&epoch=0&upstream=glib2-2.78.3-10.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://www.gtk.org",
      "sourceInfo": "acquired package info from repodata DB: repodata/b94370cc3a4d1c86107b4fa0a07587cf80733324c877020730dad0c3ad717021-primary.sqlite.bz2",
      "summary": "The core library that forms the basis for projects such as GTK+ and GNOME",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.78.3-10.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-glibc-2.38",
      "name": "glibc",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "2eac576b91f7c5f996a09ed50b523ef670f1eba2b46d32e8493e80ba77f9387c"
        }
      ],
      "description": "The GNU C Library project provides the core libraries for the GNU system and\nGNU/Linux systems, as well as many other systems that use Linux as the kernel.\nThese libraries provide critical APIs including ISO C11, POSIX.1-2008, BSD,\nOS-specific APIs and more. These APIs include such foundational facilities as\nopen, read, write, malloc, printf, getaddrinfo, dlopen, pthread_create, crypt,\n login, exit and more.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/glibc@2.38-101.oe2403sp1?arch=aarch64&epoch=0&upstream=glibc-2.38-101.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.gnu.org/software/glibc/",
      "sourceInfo": "acquired package info from repodata DB: repodata/b94370cc3a4d1c86107b4fa0a07587cf80733324c877020730dad0c3ad717021-primary.sqlite.bz2",
      "summary": "The GNU libc libraries",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.38-101.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-harfbuzz-8.3.0",
      "name": "harfbuzz",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "076cc7d311543740547d1df4ec8dc57e153f48b53e496e99878376af3dc75c4a"
        }
      ],
      "description": "HarfBuzz is a text-shaping engine. If you give HarfBuzz a font and a string\ncontaining a sequence of Unicode codepoints, HarfBuzz selects and positions\nthe corresponding glyphs from the font, applying all of the necessary layout\nrules and font features. HarfBuzz then returns the string to you in the form\nthat is correctly arranged for the language and writing system.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/harfbuzz@8.3.0-2.oe2403sp1?arch=aarch64&epoch=0&upstream=harfbuzz-8.3.0-2.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://harfbuzz.github.io/",
      "sourceInfo": "acquired package info from repodata DB: repodata/b94370cc3a4d1c86107b4fa0a07587cf80733324c877020730dad0c3ad717021-primary.sqlite.bz2",
      "summary": "A text shaping engine",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:8.3.0-2.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-lcms2-2.16",
      "name": "lcms2",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "dd80a371926f9bc1f509f64f18d7436bafb8cd72e53265881eceda04f321b776"
        }
      ],
      "description": "LittleCMS intends to be an OPEN SOURSE small-footprint color management\nengine,with special focus on accuracy and performence.It uses the\nInternational Color Consortium standard (ICC), which is the modern\nstandard when regarding to color management. The ICC specification\nis widely used and is referred to in many International and other\nde-facto standards.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/lcms2@2.16-2.oe2403sp1?arch=aarch64&epoch=0&upstream=lcms2-2.16-2.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://www.littlecms.com",
      "sourceInfo": "acquired package info from repodata DB: repodata/b94370cc3a4d1c86107b4fa0a07587cf80733324c877020730dad0c3ad717021-primary.sqlite.bz2",
      "summary": "Color Management Engine",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.16-2.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-libX11-1.8.7",
      "name": "libX11",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "7aa4962194b45d3db0144cc64e50008cffe60f912cf9dd54ddb34109fbc65255"
        }
      ],
      "description": "Core X11 protocol client library.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/libX11@1.8.7-3.oe2403sp1?arch=aarch64&epoch=0&upstream=libX11-1.8.7-3.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.x.org",
      "sourceInfo": "acquired package info from repodata DB: repodata/b94370cc3a4d1c86107b4fa0a07587cf80733324c877020730dad0c3ad717021-primary.sqlite.bz2",
      "summary": "Core X11 protocol client library",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.8.7-3.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-libXpm-3.5.17",
      "name": "libXpm",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "6b552ebd5a69285df27a10c02a50e3551772620747c469c03c89290c3b0cc20c"
        }
      ],
      "description": "X.Org X11 libXpm runtime library",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/libXpm@3.5.17-2.oe2403sp1?arch=aarch64&epoch=0&upstream=libXpm-3.5.17-2.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://www.x.org",
      "sourceInfo": "acquired package info from repodata DB: repodata/b94370cc3a4d1c86107b4fa0a07587cf80733324c877020730dad0c3ad717021-primary.sqlite.bz2",
      "summary": "X.Org X11 libXpm runtime library",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:3.5.17-2.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-libarchive-3.7.1",
      "name": "libarchive",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "90eda33b1f0c94929b3ea6b523e74dfa9f1f3616cad7b874368a1c4826a2204e"
        }
      ],
      "description": "libarchive is an open-source BSD-licensed C programming library that\nprovides streaming access to a variety of different archive formats,\nincluding tar, cpio, pax, zip, and ISO9660 images. The distribution\nalso includes bsdtar and bsdcpio, full-featured implementations of\ntar and cpio that use libarchive.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/libarchive@3.7.1-10.oe2403sp1?arch=aarch64&epoch=0&upstream=libarchive-3.7.1-10.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://www.libarchive.org/",
      "sourceInfo": "acquired package info from repodata DB: repodata/b94370cc3a4d1c86107b4fa0a07587cf80733324c877020730dad0c3ad717021-primary.sqlite.bz2",
      "summary": "Multi-format archive and compression library",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:3.7.1-10.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-libgcc-12.3.1",
      "name": "libgcc",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "1d4b40de71cdd22d946e0288a72c659bc36cff90e79c2fffe345a74ecc45cc83"
        }
      ],
      "description": "This package contains GCC shared support library which is needed\ne.g. for exception handling support.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/libgcc@12.3.1-64.oe2403sp1?arch=aarch64&epoch=0&upstream=gcc-12.3.1-64.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://gcc.gnu.org",
      "sourceInfo": "acquired package info from repodata DB: repodata/b94370cc3a4d1c86107b4fa0a07587cf80733324c877020730dad0c3ad717021-primary.sqlite.bz2",
      "summary": "GCC version 12 shared support library",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:12.3.1-64.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-libgegl-0-4-0-0.4.58",
      "name": "libgegl-0_4-0",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "7b082c54d8149769245f863ba09534bc2947fee8c7b0e55e5aab3bd7e895a564"
        }
      ],
      "description": "GEGL provides infrastructure to do demand based cached non destructive\nimage editing on larger than RAM buffers. Through babl, it provides\nsupport for a wide range of color models and pixel storage formats for\ninput and output.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/libgegl-0_4-0@0.4.58-1.oe2403sp1?arch=aarch64&epoch=0&upstream=gegl04-0.4.58-1.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://gegl.org/",
      "sourceInfo": "acquired package info from repodata DB: repodata/b94370cc3a4d1c86107b4fa0a07587cf80733324c877020730dad0c3ad717021-primary.sqlite.bz2",
      "summary": "Generic Graphics Library",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:0.4.58-1.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-libgexiv2-0.14.2",
      "name": "libgexiv2",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "2de27fb1b4d4682e5b21202244fd27d5626385256eab1334e4306bbdbc552de5"
        }
      ],
      "description": "gexiv2 is a GObject wrapper around the Exiv2 photo metadata library. It allows for GNOME\napplications to easily inspect and update EXIF, IPTC, and XMP metadata in photo and video\nfiles of various formats.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/libgexiv2@0.14.2-2.oe2403sp1?arch=aarch64&epoch=0&upstream=libgexiv2-0.14.2-2.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://wiki.gnome.org/Projects/gexiv2",
      "sourceInfo": "acquired package info from repodata DB: repodata/b94370cc3a4d1c86107b4fa0a07587cf80733324c877020730dad0c3ad717021-primary.sqlite.bz2",
      "summary": "Gexiv2 is a GObject wrapper around the Exiv2 photo metadata library.",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:0.14.2-2.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-libgomp-12.3.1",
      "name": "libgomp",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "5640a465e568dea65ff246441ace041db931986b1244d0036eb1df2178da2650"
        }
      ],
      "description": "This package contains GCC shared support library which is needed\nfor OpenMP v4.5 support.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/libgomp@12.3.1-64.oe2403sp1?arch=aarch64&epoch=0&upstream=gcc-12.3.1-64.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://gcc.gnu.org",
      "sourceInfo": "acquired package info from repodata DB: repodata/b94370cc3a4d1c86107b4fa0a07587cf80733324c877020730dad0c3ad717021-primary.sqlite.bz2",
      "summary": "GCC OpenMP v4.5 shared support library",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:12.3.1-64.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-libpng-1.6.40",
      "name": "libpng",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "9c741184d442b0341e223c6f56a0b41bc03ad68e8b35cf86c230fd27cc1b3832"
        }
      ],
      "description": "The libpng package contains libraries used by other programs for reading and writing PNG format files.\nThe PNG format was designed as a replacement for GIF and, to a lesser extent, TIFF,\nwith many improvements and extensions and lack of patent problems.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/libpng@1.6.40-2.oe2403sp1?arch=aarch64&epoch=2&upstream=libpng-1.6.40-2.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.libpng.org/pub/png/libpng.html",
      "sourceInfo": "acquired package info from repodata DB: repodata/b94370cc3a4d1c86107b4fa0a07587cf80733324c877020730dad0c3ad717021-primary.sqlite.bz2",
      "summary": "A library of functions for manipulating PNG image format files",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "2:1.6.40-2.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-libstdc---12.3.1",
      "name": "libstdc++",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "0e2f2c36f2578b8b57214b6682051bc201ee1ed3ffd0efbf152de8b59775f50d"
        }
      ],
      "description": "The libstdc++ package contains a rewritten standard compliant GCC Standard\nC++ Library.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/libstdc++@12.3.1-64.oe2403sp1?arch=aarch64&epoch=0&upstream=gcc-12.3.1-64.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://gcc.gnu.org",
      "sourceInfo": "acquired package info from repodata DB: repodata/b94370cc3a4d1c86107b4fa0a07587cf80733324c877020730dad0c3ad717021-primary.sqlite.bz2",
      "summary": "GNU Standard C++ Library",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:12.3.1-64.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-libtiff-4.6.0",
      "name": "libtiff",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "803a310a986da17a27fcddfe77e8ffb77bc6b869cf84f898f057cc68e37f8f32"
        }
      ],
      "description": "This libtiff provides support for the Tag Image File Format (TIFF), a widely\nused format for storing image data. The latest version of the TIFF specification\nis available on-line in several different formats.And contains command-line programs\nfor manipulating TIFF format image files using the libtiff library.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/libtiff@4.6.0-4.oe2403sp1?arch=aarch64&epoch=0&upstream=libtiff-4.6.0-4.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://libtiff.gitlab.io/libtiff/",
      "sourceInfo": "acquired package info from repodata DB: repodata/b94370cc3a4d1c86107b4fa0a07587cf80733324c877020730dad0c3ad717021-primary.sqlite.bz2",
      "summary": "TIFF Library and Utilities",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:4.6.0-4.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-openjpeg2-2.5.0",
      "name": "openjpeg2",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "4a27a03f149680752f45c7167aa02a63d07d194ad2c4c9e2fb5369460e838123"
        }
      ],
      "description": "OpenJPEG is an open-source JPEG 2000 codec written in C language. It has been developed in order\nto promote the use of JPEG 2000, a still-image compression standard from the Joint Photographic\nExperts Group (JPEG). Since April 2015, it is officially recognized by ISO/IEC and ITU-T as a\nJPEG 2000 Reference Software.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/openjpeg2@2.5.0-6.oe2403sp1?arch=aarch64&epoch=0&upstream=openjpeg2-2.5.0-6.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://github.com/uclouvain/openjpeg",
      "sourceInfo": "acquired package info from repodata DB: repodata/b94370cc3a4d1c86107b4fa0a07587cf80733324c877020730dad0c3ad717021-primary.sqlite.bz2",
      "summary": "C-Library for JPEG 2000",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.5.0-6.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-poppler-glib-23.12.0",
      "name": "poppler-glib",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "db6c7ce10f7b20e5d2c510a6a012e27a827d1c1f79fd586356288bf88f18eb91"
        }
      ],
      "description": "Glib wrapper for poppler.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/poppler-glib@23.12.0-10.oe2403sp1?arch=aarch64&epoch=0&upstream=poppler-23.12.0-10.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://poppler.freedesktop.org/",
      "sourceInfo": "acquired package info from repodata DB: repodata/b94370cc3a4d1c86107b4fa0a07587cf80733324c877020730dad0c3ad717021-primary.sqlite.bz2",
      "summary": "Glib wrapper for poppler",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:23.12.0-10.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-xz-libs-5.4.7",
      "name": "xz-libs",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "8744b24a505a430a82823c28bd514faa8339e347c868de32d3ec12bda0123f41"
        }
      ],
      "description": "Libraries for decoding files compressed with LZMA or XZ utils.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/xz-libs@5.4.7-5.oe2403sp1?arch=aarch64&epoch=0&upstream=xz-5.4.7-5.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://tukaani.org/xz",
      "sourceInfo": "acquired package info from repodata DB: repodata/b94370cc3a4d1c86107b4fa0a07587cf80733324c877020730dad0c3ad717021-primary.sqlite.bz2",
      "summary": "Libraries for xz",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:5.4.7-5.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-zlib-1.2.13",
      "name": "zlib",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "22502ddd16b586e2ce55380389d28e89222f5f443659f6d428980dad625c4c20"
        }
      ],
      "description": "Zlib is a free, general-purpose, not covered by any patents, lossless data-compression\nlibrary for use on virtually any computer hardware and operating system. The zlib data\nformat is itself portable across platforms.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/zlib@1.2.13-5.oe2403sp1?arch=aarch64&epoch=0&upstream=zlib-1.2.13-5.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.zlib.net",
      "sourceInfo": "acquired package info from repodata DB: repodata/b94370cc3a4d1c86107b4fa0a07587cf80733324c877020730dad0c3ad717021-primary.sqlite.bz2",
      "summary": "A lossless data-compression library",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.2.13-5.oe2403sp1"
    }
  ],
  "relationships": [
    {
      "spdxElementId": "SPDXRef-rpm-gimp-3.0.2",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-OpenEXR-libs-3.1.11"
    },
    {
      "spdxElementId": "SPDXRef-rpm-gimp-3.0.2",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-alsa-lib-1.2.10"
    },
    {
      "spdxElementId": "SPDXRef-rpm-gimp-3.0.2",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-babl-0.1.112"
    },
    {
      "spdxElementId": "SPDXRef-rpm-gimp-3.0.2",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-cairo-1.18.0"
    },
    {
      "spdxElementId": "SPDXRef-rpm-gimp-3.0.2",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-freetype-2.13.2"
    },
    {
      "spdxElementId": "SPDXRef-rpm-gimp-3.0.2",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-gdk-pixbuf2-2.42.10"
    },
    {
      "spdxElementId": "SPDXRef-rpm-gimp-3.0.2",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-gegl04-0.4.58"
    },
    {
      "spdxElementId": "SPDXRef-rpm-gimp-3.0.2",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-ghostscript-9.56.1"
    },
    {
      "spdxElementId": "SPDXRef-rpm-gimp-3.0.2",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-gimp-libs-3.0.2"
    },
    {
      "spdxElementId": "SPDXRef-rpm-gimp-3.0.2",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-glib2-2.78.3"
    },
    {
      "spdxElementId": "SPDXRef-rpm-gimp-3.0.2",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-glibc-2.38"
    },
    {
      "spdxElementId": "SPDXRef-rpm-gimp-3.0.2",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-harfbuzz-8.3.0"
    },
    {
      "spdxElementId": "SPDXRef-rpm-gimp-3.0.2",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-lcms2-2.16"
    },
    {
      "spdxElementId": "SPDXRef-rpm-gimp-3.0.2",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-libX11-1.8.7"
    },
    {
      "spdxElementId": "SPDXRef-rpm-gimp-3.0.2",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-libXpm-3.5.17"
    },
    {
      "spdxElementId": "SPDXRef-rpm-gimp-3.0.2",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-libarchive-3.7.1"
    },
    {
      "spdxElementId": "SPDXRef-rpm-gimp-3.0.2",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-libgcc-12.3.1"
    },
    {
      "spdxElementId": "SPDXRef-rpm-gimp-3.0.2",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-libgegl-0-4-0-0.4.58"
    },
    {
      "spdxElementId": "SPDXRef-rpm-gimp-3.0.2",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-libgexiv2-0.14.2"
    },
    {
      "spdxElementId": "SPDXRef-rpm-gimp-3.0.2",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-libgomp-12.3.1"
    },
    {
      "spdxElementId": "SPDXRef-rpm-gimp-3.0.2",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-libpng-1.6.40"
    },
    {
      "spdxElementId": "SPDXRef-rpm-gimp-3.0.2",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-libstdc---12.3.1"
    },
    {
      "spdxElementId": "SPDXRef-rpm-gimp-3.0.2",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-libtiff-4.6.0"
    },
    {
      "spdxElementId": "SPDXRef-rpm-gimp-3.0.2",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-openjpeg2-2.5.0"
    },
    {
      "spdxElementId": "SPDXRef-rpm-gimp-3.0.2",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-poppler-glib-23.12.0"
    },
    {
      "spdxElementId": "SPDXRef-rpm-gimp-3.0.2",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-xz-libs-5.4.7"
    },
    {
      "spdxElementId": "SPDXRef-rpm-gimp-3.0.2",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-zlib-1.2.13"
    }
  ]
}
