{
  "SPDXID": "SPDXRef-DOCUMENT",
  "name": "rpm-build-0.4.18.2-32.oe2403sp1.aarch64.rpm",
  "spdxVersion": "SPDX-2.2",
  "creationInfo": {
    "created": "2026-05-16T14:20:06.451001321Z",
    "creators": [
      "openeuler_creator"
    ]
  },
  "dataLicense": "CC0-1.0",
  "documentNamespace": "https://sbom.openEuler.org/rpm-build-0.4.18.2-32.oe2403sp1.aarch64.rpm",
  "packages": [
    {
      "SPDXID": "SPDXRef-rpm-binutils-2.41",
      "name": "binutils",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "02894411d5c3f0a6c4cace7e37b7143fc4d70aae45ff52c3f7ed829b620dcab2"
        }
      ],
      "description": "Binutils is a collection of binary utilities, including ar (for\ncreating, modifying and extracting from archives), as (a family of GNU\nassemblers), gprof (for displaying call graph profile data), ld (the\nGNU linker), nm (for listing symbols from object files), objcopy (for\ncopying and translating object files), objdump (for displaying\ninformation from object files), ranlib (for generating an index for\nthe contents of an archive), readelf (for displaying detailed\ninformation about binary files), size (for listing the section sizes\nof an object or archive file), strings (for listing printable strings\nfrom files), strip (for discarding symbols), and addr2line (for\nconverting addresses to file and line).",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/binutils@2.41-14.oe2403sp1?arch=aarch64&epoch=0&upstream=binutils-2.41-14.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://sourceware.org/binutils",
      "sourceInfo": "acquired package info from repodata DB: repodata/b94370cc3a4d1c86107b4fa0a07587cf80733324c877020730dad0c3ad717021-primary.sqlite.bz2",
      "summary": "A GNU collection of binary utilities",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.41-14.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-coreutils-9.4",
      "name": "coreutils",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "2101c4dfddc6ceb05b3c5929f46bf4f03d483421b417ef3b156fc38a6f2e52e2"
        }
      ],
      "description": "These are the GNU core utilities.  This package is the combination of\nthe old GNU fileutils, sh-utils, and textutils packages.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/coreutils@9.4-17.oe2403sp1?arch=aarch64&epoch=0&upstream=coreutils-9.4-17.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://www.gnu.org/software/coreutils/",
      "sourceInfo": "acquired package info from repodata DB: repodata/b94370cc3a4d1c86107b4fa0a07587cf80733324c877020730dad0c3ad717021-primary.sqlite.bz2",
      "summary": "A set of basic GNU tools commonly used in shell scripts",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:9.4-17.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-debugedit-5.0",
      "name": "debugedit",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "254d29ad581928a7a65275e7b406bbfabf6084f69284f8b7b345dd3b1aafe670"
        }
      ],
      "description": "Debugedit provides programs and scripts for creating debuginfo and\nsource file distributions, collect build-ids and rewrite source\npaths in DWARF data for debugging, tracing and profiling.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/debugedit@5.0-11.oe2403sp1?arch=aarch64&epoch=0&upstream=debugedit-5.0-11.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://sourceware.org/debugedit/",
      "sourceInfo": "acquired package info from repodata DB: repodata/b94370cc3a4d1c86107b4fa0a07587cf80733324c877020730dad0c3ad717021-primary.sqlite.bz2",
      "summary": "Tools for debuginfo creation",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:5.0-11.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-elfutils-0.190",
      "name": "elfutils",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "6038ba6eac5af02cc97948549df9671b97c5ccbe40d77ae257b13bc58c9f61cc"
        }
      ],
      "description": "Elfutils is a collection of utilities, including stack (to show\nbacktraces), nm (for listing symbols from object files), size\n(for listing the section sizes of an object or archive file),\nstrip (for discarding symbols), elflint (to check for well-formed ELF files) and\nelfcompress (to compress or decompress ELF sections).\nAlso included are helper libraries which implement DWARF, ELF,\nand machine-specific ELF handling and process introspection.\nIt also provides a DSO which allows reading and\nwriting ELF files on a high level. Third party programs depend on\nthis package to read internals of ELF files.\nYama sysctl setting to enable default attach scope settings\nenabling programs to use ptrace attach, access to\n/proc/PID/{mem,personality,stack,syscall}, and the syscalls\nprocess_vm_readv and process_vm_writev which are used for\ninterprocess services, communication and introspection\n(like synchronisation, signaling, debugging, tracing and\nprofiling) of processes.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/elfutils@0.190-7.oe2403sp1?arch=aarch64&epoch=0&upstream=elfutils-0.190-7.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://elfutils.org/",
      "sourceInfo": "acquired package info from repodata DB: repodata/b94370cc3a4d1c86107b4fa0a07587cf80733324c877020730dad0c3ad717021-primary.sqlite.bz2",
      "summary": "A collection of utilities and DSOs to handle ELF files and DWARF data",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:0.190-7.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-elfutils-libelf-0.190",
      "name": "elfutils-libelf",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "620c5089e6c3d56ded5ae20afae9b328b61f98e82a558e56ca3d5572771864da"
        }
      ],
      "description": "The elfutils-libelf package provides a DSO which allows reading and\nwriting ELF files on a high level.  Third party programs depend on\nthis package to read internals of ELF files.  The programs of the\nelfutils package use it also to generate new ELF files.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/elfutils-libelf@0.190-7.oe2403sp1?arch=aarch64&epoch=0&upstream=elfutils-0.190-7.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://elfutils.org/",
      "sourceInfo": "acquired package info from repodata DB: repodata/b94370cc3a4d1c86107b4fa0a07587cf80733324c877020730dad0c3ad717021-primary.sqlite.bz2",
      "summary": "Library to read and write ELF files",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:0.190-7.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-elfutils-libs-0.190",
      "name": "elfutils-libs",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "66a19677dc773d8a1c308f9c28d1462bfc71b1cb81c7e881310f6ba2b21580aa"
        }
      ],
      "description": "The elfutils-libs package contains libraries which implement DWARF, ELF,\nand machine-specific ELF handling and process introspection.  These\nlibraries are used by the programs in the elfutils package.  The\nelfutils-devel package enables building other programs using these\nlibraries.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/elfutils-libs@0.190-7.oe2403sp1?arch=aarch64&epoch=0&upstream=elfutils-0.190-7.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://elfutils.org/",
      "sourceInfo": "acquired package info from repodata DB: repodata/b94370cc3a4d1c86107b4fa0a07587cf80733324c877020730dad0c3ad717021-primary.sqlite.bz2",
      "summary": "Libraries to handle compiled objects",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:0.190-7.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-gdb-headless-14.1",
      "name": "gdb-headless",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "be4f4f471a5cd9b6c377bec79aa2e59b85bc1b6171052f714a82ed9e785b768c"
        }
      ],
      "description": "GDB, the GNU Project debugger, allows you to see what is going on inside\nanother program while it executes -- or what another program was doing\nat the moment it crashed.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/gdb-headless@14.1-11.oe2403sp1?arch=aarch64&epoch=0&upstream=gdb-14.1-11.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://gnu.org/software/gdb/",
      "sourceInfo": "acquired package info from repodata DB: repodata/b94370cc3a4d1c86107b4fa0a07587cf80733324c877020730dad0c3ad717021-primary.sqlite.bz2",
      "summary": "The GNU Project debugger for C, C++, Fortran, Go and other languages",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:14.1-11.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-glibc-2.38",
      "name": "glibc",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "2eac576b91f7c5f996a09ed50b523ef670f1eba2b46d32e8493e80ba77f9387c"
        }
      ],
      "description": "The GNU C Library project provides the core libraries for the GNU system and\nGNU/Linux systems, as well as many other systems that use Linux as the kernel.\nThese libraries provide critical APIs including ISO C11, POSIX.1-2008, BSD,\nOS-specific APIs and more. These APIs include such foundational facilities as\nopen, read, write, malloc, printf, getaddrinfo, dlopen, pthread_create, crypt,\n login, exit and more.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/glibc@2.38-101.oe2403sp1?arch=aarch64&epoch=0&upstream=glibc-2.38-101.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.gnu.org/software/glibc/",
      "sourceInfo": "acquired package info from repodata DB: repodata/b94370cc3a4d1c86107b4fa0a07587cf80733324c877020730dad0c3ad717021-primary.sqlite.bz2",
      "summary": "The GNU libc libraries",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.38-101.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-gzip-1.12",
      "name": "gzip",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "c06bdee4e5353623aea48a053d91c1879f9cd0f5d28ed3cad662992d48c91148"
        }
      ],
      "description": "gzip is a single-file/stream lossless data compression\nutility, where the resulting compressed file generally\nhas the suffix .gz.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/gzip@1.12-6.oe2403sp1?arch=aarch64&epoch=0&upstream=gzip-1.12-6.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://www.gnu.org/software/gzip",
      "sourceInfo": "acquired package info from repodata DB: repodata/b94370cc3a4d1c86107b4fa0a07587cf80733324c877020730dad0c3ad717021-primary.sqlite.bz2",
      "summary": "A data compression utility",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.12-6.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-libcap-2.69",
      "name": "libcap",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "5132c056de1e06b3e6a37150fb54f67d7f1af6eee41e4034d014f79fdfcc263f"
        }
      ],
      "description": "This is a library for getting and setting POSIX.1e (formerly POSIX 6)\ndraft 15 capabilities.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/libcap@2.69-4.oe2403sp1?arch=aarch64&epoch=0&upstream=libcap-2.69-4.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://sites.google.com/site/fullycapable",
      "sourceInfo": "acquired package info from repodata DB: repodata/b94370cc3a4d1c86107b4fa0a07587cf80733324c877020730dad0c3ad717021-primary.sqlite.bz2",
      "summary": "A library for getting and setting POSIX.1e draft 15 capabilities",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.69-4.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-libgomp-12.3.1",
      "name": "libgomp",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "5640a465e568dea65ff246441ace041db931986b1244d0036eb1df2178da2650"
        }
      ],
      "description": "This package contains GCC shared support library which is needed\nfor OpenMP v4.5 support.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/libgomp@12.3.1-64.oe2403sp1?arch=aarch64&epoch=0&upstream=gcc-12.3.1-64.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://gcc.gnu.org",
      "sourceInfo": "acquired package info from repodata DB: repodata/b94370cc3a4d1c86107b4fa0a07587cf80733324c877020730dad0c3ad717021-primary.sqlite.bz2",
      "summary": "GCC OpenMP v4.5 shared support library",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:12.3.1-64.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-openEuler-rpm-config-30",
      "name": "openEuler-rpm-config",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "4859d55d57ed3b4a14e4ccccb89bf122fd9d377bd423376219bef185da28dae1"
        }
      ],
      "description": "specific rpm configuration files for openEuler.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/openEuler-rpm-config@30-58.oe2403sp1?arch=aarch64&epoch=0&upstream=openEuler-rpm-config-30-58.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://gitee.com/openeuler/openEuler-rpm-config",
      "sourceInfo": "acquired package info from repodata DB: repodata/b94370cc3a4d1c86107b4fa0a07587cf80733324c877020730dad0c3ad717021-primary.sqlite.bz2",
      "summary": "specific rpm configuration files",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:30-58.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-openssl-libs-3.0.12",
      "name": "openssl-libs",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "8ea7e06092fd40b1a4c5c778664a2d3c2dcbc1b544522742e9d1b5ac7e84fb9d"
        }
      ],
      "description": "The openssl-libs package contains the libraries that are used\nby various applications which support cryptographic algorithms\nand protocols.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/openssl-libs@3.0.12-22.oe2403sp1?arch=aarch64&epoch=1&upstream=openssl-3.0.12-22.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://www.openssl.org/",
      "sourceInfo": "acquired package info from repodata DB: repodata/b94370cc3a4d1c86107b4fa0a07587cf80733324c877020730dad0c3ad717021-primary.sqlite.bz2",
      "summary": "A general purpose cryptography library with TLS implementation",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "1:3.0.12-22.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-readline-8.2",
      "name": "readline",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "4bf0041d231f5cb1e1c596320bd845952476281fa84d54a532a16072211431e1"
        }
      ],
      "description": "The GNU Readline library provides a set of functions for use by\napplications that allow users to edit command lines as they are\ntyped in. Both Emacs and vi editing modes are available.The Readline\nlibrary includes additional functions to maintain a list of\npreviously-entered command lines, to recall and perhaps reedit those\nlines, and perform csh-like history expansion on previous commands.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/readline@8.2-5.oe2403sp1?arch=aarch64&epoch=0&upstream=readline-8.2-5.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://tiswww.case.edu/php/chet/readline/rltop.html",
      "sourceInfo": "acquired package info from repodata DB: repodata/b94370cc3a4d1c86107b4fa0a07587cf80733324c877020730dad0c3ad717021-primary.sqlite.bz2",
      "summary": "Readline library for editing typed command lines",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:8.2-5.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-rpm-4.18.2",
      "name": "rpm",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "5163c702c05ba157fd5f957c4e389a3a15bceb5a28b91478ec83491c80935652"
        }
      ],
      "description": "The RPM Package Manager (RPM) is a powerful package management system capability as below\n\n-building computer software from source into easily distributable packages\n-installing, updating and uninstalling packaged software\n-querying detailed information about the packaged software, whether installed or not\n-verifying integrity of packaged software and resulting software installation",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/rpm@4.18.2-32.oe2403sp1?arch=aarch64&epoch=0&upstream=rpm-4.18.2-32.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://rpm.org/",
      "sourceInfo": "acquired package info from repodata DB: repodata/b94370cc3a4d1c86107b4fa0a07587cf80733324c877020730dad0c3ad717021-primary.sqlite.bz2",
      "summary": "RPM Package Manager",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:4.18.2-32.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-rpm-libs-4.18.2",
      "name": "rpm-libs",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "e2c95bfe05c76cb5a5e3b9adbac254008817b2a81bc528a696e6c290a1fb604e"
        }
      ],
      "description": "Shared library of rpm 4.18.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/rpm-libs@4.18.2-32.oe2403sp1?arch=aarch64&epoch=0&upstream=rpm-4.18.2-32.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://rpm.org/",
      "sourceInfo": "acquired package info from repodata DB: repodata/b94370cc3a4d1c86107b4fa0a07587cf80733324c877020730dad0c3ad717021-primary.sqlite.bz2",
      "summary": "Shared library of rpm 4.18",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:4.18.2-32.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-sed-4.9",
      "name": "sed",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "e208a08990bf239789dc324282fd91d26a0cac9d05779c250974b3caa83e668d"
        }
      ],
      "description": "Sed is a non-interactive command-line text editor. A stream editor is used\nto per-form basic text transformations on an input stream (a file or input\nfrom a pipeline).",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/sed@4.9-5.oe2403sp1?arch=aarch64&epoch=0&upstream=sed-4.9-5.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://www.gnu.org/software/sed/",
      "sourceInfo": "acquired package info from repodata DB: repodata/b94370cc3a4d1c86107b4fa0a07587cf80733324c877020730dad0c3ad717021-primary.sqlite.bz2",
      "summary": "non-interactive command-line text editor",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:4.9-5.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-tar-1.35",
      "name": "tar",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "a807d3c4d2f0d8c212030ef92aa07c4d7fcce494e5106ee2fe94aa9d2e81a8d1"
        }
      ],
      "description": "GNU Tar provides the ability to create tar archives, as well as various other\nkinds of manipulation. For example, you can use Tar on previously created archives\nto extract files, to store additional files, or to update or list files which were\nalready stored.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/tar@1.35-3.oe2403sp1?arch=aarch64&epoch=2&upstream=tar-1.35-3.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.gnu.org/software/tar/",
      "sourceInfo": "acquired package info from repodata DB: repodata/b94370cc3a4d1c86107b4fa0a07587cf80733324c877020730dad0c3ad717021-primary.sqlite.bz2",
      "summary": "An organized and systematic method of controlling a large amount of data",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "2:1.35-3.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-xz-5.4.7",
      "name": "xz",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "c98da257c659bb220825efea68e02b57a6861716f7edf6df7524c9f8cf353ac9"
        }
      ],
      "description": "XZ Utils is free general-purpose data compression software with a high compression ratio.\nXZ Utils were written for POSIX-like systems, but also work on some not-so-POSIX systems. XZ Utils are the successor to LZMA Utils.\n\nThe core of the XZ Utils compression code is based on LZMA SDK, but it has been modified quite a lot to be suitable for XZ Utils.\nThe primary compression algorithm is currently LZMA2, which is used inside the .xz container format. With typical files, XZ Utils create 30% smaller output than gzip and 15% smaller output than bzip2.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/xz@5.4.7-5.oe2403sp1?arch=aarch64&epoch=0&upstream=xz-5.4.7-5.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://tukaani.org/xz",
      "sourceInfo": "acquired package info from repodata DB: repodata/b94370cc3a4d1c86107b4fa0a07587cf80733324c877020730dad0c3ad717021-primary.sqlite.bz2",
      "summary": "A free general-purpose data compreession software with LZMA2 algorithm",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:5.4.7-5.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-xz-libs-5.4.7",
      "name": "xz-libs",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "8744b24a505a430a82823c28bd514faa8339e347c868de32d3ec12bda0123f41"
        }
      ],
      "description": "Libraries for decoding files compressed with LZMA or XZ utils.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/xz-libs@5.4.7-5.oe2403sp1?arch=aarch64&epoch=0&upstream=xz-5.4.7-5.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://tukaani.org/xz",
      "sourceInfo": "acquired package info from repodata DB: repodata/b94370cc3a4d1c86107b4fa0a07587cf80733324c877020730dad0c3ad717021-primary.sqlite.bz2",
      "summary": "Libraries for xz",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:5.4.7-5.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-zlib-1.2.13",
      "name": "zlib",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "22502ddd16b586e2ce55380389d28e89222f5f443659f6d428980dad625c4c20"
        }
      ],
      "description": "Zlib is a free, general-purpose, not covered by any patents, lossless data-compression\nlibrary for use on virtually any computer hardware and operating system. The zlib data\nformat is itself portable across platforms.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/zlib@1.2.13-5.oe2403sp1?arch=aarch64&epoch=0&upstream=zlib-1.2.13-5.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.zlib.net",
      "sourceInfo": "acquired package info from repodata DB: repodata/b94370cc3a4d1c86107b4fa0a07587cf80733324c877020730dad0c3ad717021-primary.sqlite.bz2",
      "summary": "A lossless data-compression library",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.2.13-5.oe2403sp1"
    }
  ],
  "relationships": [
    {
      "spdxElementId": "SPDXRef-rpm-rpm-build-4.18.2",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-binutils-2.41"
    },
    {
      "spdxElementId": "SPDXRef-rpm-rpm-build-4.18.2",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-coreutils-9.4"
    },
    {
      "spdxElementId": "SPDXRef-rpm-rpm-build-4.18.2",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-debugedit-5.0"
    },
    {
      "spdxElementId": "SPDXRef-rpm-rpm-build-4.18.2",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-elfutils-0.190"
    },
    {
      "spdxElementId": "SPDXRef-rpm-rpm-build-4.18.2",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-elfutils-libelf-0.190"
    },
    {
      "spdxElementId": "SPDXRef-rpm-rpm-build-4.18.2",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-elfutils-libs-0.190"
    },
    {
      "spdxElementId": "SPDXRef-rpm-rpm-build-4.18.2",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-gdb-headless-14.1"
    },
    {
      "spdxElementId": "SPDXRef-rpm-rpm-build-4.18.2",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-glibc-2.38"
    },
    {
      "spdxElementId": "SPDXRef-rpm-rpm-build-4.18.2",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-gzip-1.12"
    },
    {
      "spdxElementId": "SPDXRef-rpm-rpm-build-4.18.2",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-libcap-2.69"
    },
    {
      "spdxElementId": "SPDXRef-rpm-rpm-build-4.18.2",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-libgomp-12.3.1"
    },
    {
      "spdxElementId": "SPDXRef-rpm-rpm-build-4.18.2",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-openEuler-rpm-config-30"
    },
    {
      "spdxElementId": "SPDXRef-rpm-rpm-build-4.18.2",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-openssl-libs-3.0.12"
    },
    {
      "spdxElementId": "SPDXRef-rpm-rpm-build-4.18.2",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-readline-8.2"
    },
    {
      "spdxElementId": "SPDXRef-rpm-rpm-build-4.18.2",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-rpm-4.18.2"
    },
    {
      "spdxElementId": "SPDXRef-rpm-rpm-build-4.18.2",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-rpm-libs-4.18.2"
    },
    {
      "spdxElementId": "SPDXRef-rpm-rpm-build-4.18.2",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-sed-4.9"
    },
    {
      "spdxElementId": "SPDXRef-rpm-rpm-build-4.18.2",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-tar-1.35"
    },
    {
      "spdxElementId": "SPDXRef-rpm-rpm-build-4.18.2",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-xz-5.4.7"
    },
    {
      "spdxElementId": "SPDXRef-rpm-rpm-build-4.18.2",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-xz-libs-5.4.7"
    },
    {
      "spdxElementId": "SPDXRef-rpm-rpm-build-4.18.2",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-zlib-1.2.13"
    }
  ]
}
