{
  "SPDXID": "SPDXRef-DOCUMENT",
  "name": "pinentry-0.1.2.1-1.oe2403.aarch64.rpm",
  "spdxVersion": "SPDX-2.2",
  "creationInfo": {
    "created": "2026-05-15T06:57:53.750891916Z",
    "creators": [
      "openeuler_creator"
    ]
  },
  "dataLicense": "CC0-1.0",
  "documentNamespace": "https://sbom.openEuler.org/pinentry-0.1.2.1-1.oe2403.aarch64.rpm",
  "packages": [
    {
      "SPDXID": "SPDXRef-rpm-atk-2.51.0",
      "name": "atk",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "5ceb21c8192457c4488bc61a4a15df1c1397f1f8ab66165f08947138f1303b50"
        }
      ],
      "description": "The ATK library provides a set of interfaces for adding accessibility\nsupport to applications and graphical user interface toolkits. By\nsupporting the ATK interfaces, an application or toolkit can be used\nwith tools such as screen readers, magnifiers, and alternative input\ndevices.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/atk@2.51.0-3.oe2403?arch=x86_64&epoch=0&upstream=at-spi2-core-2.51.0-3.oe2403.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.linuxfoundation.org/en/AT-SPI_on_D-Bus",
      "sourceInfo": "acquired package info from repodata DB: repodata/87ee4e92c1e5173adb9dd158ec9c2e7bd500bbe68c80fdd1cfc6721bbb15534f-primary.sqlite.bz2",
      "summary": "Interfaces for accessibility support",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.51.0-3.oe2403"
    },
    {
      "SPDXID": "SPDXRef-rpm-bash-5.2.15",
      "name": "bash",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "7efac69f54416b21bdc1d052bee86bc9193d2889fb299a5c97224fe4ba7ccf7a"
        }
      ],
      "description": "Bash is the GNU Project's shell. Bash is the Bourne Again SHell. Bash is an sh-compatible\nshell that incorporates useful features from the Korn shell (ksh) and C shell (csh). It is\nintended to conform to the IEEE POSIX P1003.2/ISO 9945.2 Shell and Tools standard. It offers\nfunctional improvements over sh for both programming and interactive use. In addition, most\nsh scripts can be run by Bash without modification.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/bash@5.2.15-9.oe2403?arch=x86_64&epoch=0&upstream=bash-5.2.15-9.oe2403.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://www.gnu.org/software/bash",
      "sourceInfo": "acquired package info from repodata DB: repodata/87ee4e92c1e5173adb9dd158ec9c2e7bd500bbe68c80fdd1cfc6721bbb15534f-primary.sqlite.bz2",
      "summary": "It is the Bourne Again Shell",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:5.2.15-9.oe2403"
    },
    {
      "SPDXID": "SPDXRef-rpm-cairo-1.18.0",
      "name": "cairo",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "fc8a17005ecf820eb4f6d9368f312bfae51d8ebe5c49e1fcd3f82e4473897ec3"
        }
      ],
      "description": "Cairo is a 2D graphics libarary with support for multiple output devices.\nIt provides high-quality display and print output and this package also\ncontains functionality to make cairo graphics library integrate well with\nGObject used by GNOME.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/cairo@1.18.0-1.oe2403?arch=x86_64&epoch=0&upstream=cairo-1.18.0-1.oe2403.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://cairographics.org",
      "sourceInfo": "acquired package info from repodata DB: repodata/87ee4e92c1e5173adb9dd158ec9c2e7bd500bbe68c80fdd1cfc6721bbb15534f-primary.sqlite.bz2",
      "summary": "A 2D graphics library",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.18.0-1.oe2403"
    },
    {
      "SPDXID": "SPDXRef-rpm-cairo-gobject-1.18.0",
      "name": "cairo-gobject",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "9105f11db2db6fcf55a3cca20b58c08bc6d8b5fb67f2952a1c61f893eec7254f"
        }
      ],
      "description": "Cairo is a 2D graphics library designed to provide high-quality display\nand print output.\n\nThis package contains functionality to make cairo graphics library\nintegrate well with the GObject object system used by GNOME.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/cairo-gobject@1.18.0-1.oe2403?arch=x86_64&epoch=0&upstream=cairo-1.18.0-1.oe2403.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://cairographics.org",
      "sourceInfo": "acquired package info from repodata DB: repodata/87ee4e92c1e5173adb9dd158ec9c2e7bd500bbe68c80fdd1cfc6721bbb15534f-primary.sqlite.bz2",
      "summary": "GObject bindings for cairo",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.18.0-1.oe2403"
    },
    {
      "SPDXID": "SPDXRef-rpm-coreutils-9.4",
      "name": "coreutils",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "9a93e8ae2c255bbb13eaa3b57ea17ef5f753be5cf64b617630d2b07edce125d8"
        }
      ],
      "description": "These are the GNU core utilities.  This package is the combination of\nthe old GNU fileutils, sh-utils, and textutils packages.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/coreutils@9.4-3.oe2403?arch=x86_64&epoch=0&upstream=coreutils-9.4-3.oe2403.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://www.gnu.org/software/coreutils/",
      "sourceInfo": "acquired package info from repodata DB: repodata/87ee4e92c1e5173adb9dd158ec9c2e7bd500bbe68c80fdd1cfc6721bbb15534f-primary.sqlite.bz2",
      "summary": "A set of basic GNU tools commonly used in shell scripts",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:9.4-3.oe2403"
    },
    {
      "SPDXID": "SPDXRef-rpm-fontconfig-2.15.0",
      "name": "fontconfig",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "6361e4a17a6cb7a3dd48506e1c0ffee199c74f1c9444b24a77839ab72c851a03"
        }
      ],
      "description": "Fontconfig  provide different font according to requirements specified by applications,discover new fonts when installed automatically\nbe used in concert with the X Render Extension and FreeType to implement high quality, anti-aliased and subpixel rendered text on a display",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/fontconfig@2.15.0-1.oe2403?arch=x86_64&epoch=0&upstream=fontconfig-2.15.0-1.oe2403.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://fontconfig.org",
      "sourceInfo": "acquired package info from repodata DB: repodata/87ee4e92c1e5173adb9dd158ec9c2e7bd500bbe68c80fdd1cfc6721bbb15534f-primary.sqlite.bz2",
      "summary": "Fontconfig is a library for configuring and customizing font access",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.15.0-1.oe2403"
    },
    {
      "SPDXID": "SPDXRef-rpm-freetype-2.13.2",
      "name": "freetype",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "b0952a517a8396f70a2910f1b9b72f5ee1ab167eb080526d15698a3d2d8cd03c"
        }
      ],
      "description": "FreeType is written in C, designed to be small,efficient, highly customizable, and portable while capable of producing high-quality\noutput (glyph images) of most vector and bitmap font formats",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/freetype@2.13.2-1.oe2403?arch=x86_64&epoch=0&upstream=freetype-2.13.2-1.oe2403.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.freetype.org",
      "sourceInfo": "acquired package info from repodata DB: repodata/87ee4e92c1e5173adb9dd158ec9c2e7bd500bbe68c80fdd1cfc6721bbb15534f-primary.sqlite.bz2",
      "summary": "FreeType is a freely available software library to render fonts",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.13.2-1.oe2403"
    },
    {
      "SPDXID": "SPDXRef-rpm-gcr-3.41.2",
      "name": "gcr",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "55f7fd718ab9e465ab2a542241076640ea19b97506e599d71c61cb7b47ed584b"
        }
      ],
      "description": "gcr is a library for displaying certificates, and crypto UI, accessing key stores. It also provides a viewer for\ncrypto files on the GNOME desktop.gck is a library for accessing PKCS#11 modules like smart cards.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/gcr@3.41.2-1.oe2403?arch=x86_64&epoch=0&upstream=gcr-3.41.2-1.oe2403.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://wiki.gnome.org/Projects/CryptoGlue",
      "sourceInfo": "acquired package info from repodata DB: repodata/87ee4e92c1e5173adb9dd158ec9c2e7bd500bbe68c80fdd1cfc6721bbb15534f-primary.sqlite.bz2",
      "summary": "A library for bits of crypto UI and parsing",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:3.41.2-1.oe2403"
    },
    {
      "SPDXID": "SPDXRef-rpm-gcr-base-3.41.2",
      "name": "gcr-base",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "a76e95b7b6b74ed01019388df1dc7020845a006229d759627bf0648ee9db52d8"
        }
      ],
      "description": "The gcr-base package includes the gcr-base library.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/gcr-base@3.41.2-1.oe2403?arch=x86_64&epoch=0&upstream=gcr-3.41.2-1.oe2403.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://wiki.gnome.org/Projects/CryptoGlue",
      "sourceInfo": "acquired package info from repodata DB: repodata/87ee4e92c1e5173adb9dd158ec9c2e7bd500bbe68c80fdd1cfc6721bbb15534f-primary.sqlite.bz2",
      "summary": "Library files for gcr",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:3.41.2-1.oe2403"
    },
    {
      "SPDXID": "SPDXRef-rpm-gdk-pixbuf2-2.42.10",
      "name": "gdk-pixbuf2",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "cfa8e293d8556cdd7f1898a8615a30373f581ac48ee4ac9679d46721f962f3b9"
        }
      ],
      "description": "gdk is written in C but has been designed from the ground up to support a wide range of languages.\nIt provide a complete set of widgets,and suitable for projects ranging from small one-off\ntools to complete application suites.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/gdk-pixbuf2@2.42.10-2.oe2403?arch=x86_64&epoch=0&upstream=gdk-pixbuf2-2.42.10-2.oe2403.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://gitlab.gnome.org/GNOME/gdk-pixbuf",
      "sourceInfo": "acquired package info from repodata DB: repodata/87ee4e92c1e5173adb9dd158ec9c2e7bd500bbe68c80fdd1cfc6721bbb15534f-primary.sqlite.bz2",
      "summary": "gdk is a multi-platform toolkit for creating graphical user interfaces.",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.42.10-2.oe2403"
    },
    {
      "SPDXID": "SPDXRef-rpm-glib2-2.78.3",
      "name": "glib2",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "5641cbe20fef3894a0c98717e3be894a1b40adec534fe796840dab22ebb64a02"
        }
      ],
      "description": "GLib is a bundle of three (formerly five) low-level system libraries\nwritten in C and developed mainly by GNOME. GLib's code was separated\nfrom GTK, so it can be used by software other than GNOME and has been\ndeveloped in parallel ever since.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/glib2@2.78.3-1.oe2403?arch=x86_64&epoch=0&upstream=glib2-2.78.3-1.oe2403.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://www.gtk.org",
      "sourceInfo": "acquired package info from repodata DB: repodata/87ee4e92c1e5173adb9dd158ec9c2e7bd500bbe68c80fdd1cfc6721bbb15534f-primary.sqlite.bz2",
      "summary": "The core library that forms the basis for projects such as GTK+ and GNOME",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.78.3-1.oe2403"
    },
    {
      "SPDXID": "SPDXRef-rpm-glibc-2.38",
      "name": "glibc",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "1da3351aa7403c603949d381b7c30ea80598cb9cdf9ae0206816118e9b566939"
        }
      ],
      "description": "The GNU C Library project provides the core libraries for the GNU system and\nGNU/Linux systems, as well as many other systems that use Linux as the kernel.\nThese libraries provide critical APIs including ISO C11, POSIX.1-2008, BSD,\nOS-specific APIs and more. These APIs include such foundational facilities as\nopen, read, write, malloc, printf, getaddrinfo, dlopen, pthread_create, crypt,\n login, exit and more.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/glibc@2.38-29.oe2403?arch=x86_64&epoch=0&upstream=glibc-2.38-29.oe2403.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.gnu.org/software/glibc/",
      "sourceInfo": "acquired package info from repodata DB: repodata/87ee4e92c1e5173adb9dd158ec9c2e7bd500bbe68c80fdd1cfc6721bbb15534f-primary.sqlite.bz2",
      "summary": "The GNU libc libraries",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.38-29.oe2403"
    },
    {
      "SPDXID": "SPDXRef-rpm-gtk2-2.24.33",
      "name": "gtk2",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "016c72640f6993b2ce0a48a96d46e5e26c565ed4cdb0e3046e03a1e6eba786a3"
        }
      ],
      "description": "GTK+ is a library for creating graphical user interfaces. The library\nis created in C programming language. The GTK+ is also called the GIMP\nToolkit. Originally, the library was created while developing the GIMP\nimage manipulation program.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/gtk2@2.24.33-9.oe2403?arch=x86_64&epoch=0&upstream=gtk2-2.24.33-9.oe2403.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.gtk.org",
      "sourceInfo": "acquired package info from repodata DB: repodata/87ee4e92c1e5173adb9dd158ec9c2e7bd500bbe68c80fdd1cfc6721bbb15534f-primary.sqlite.bz2",
      "summary": "GTK+ graphical user interface library",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.24.33-9.oe2403"
    },
    {
      "SPDXID": "SPDXRef-rpm-gtk3-3.24.41",
      "name": "gtk3",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "a1d97cac2199835ddeb4fecfee5e65095ebeb5fab73a2dd4b5ab2c1ff9232ba4"
        }
      ],
      "description": "GTK+ is an object-oriented widget toolkit written in the programming language C;\nit has a C-based object-oriented architecture that allows for maximum\nflexibility. The GTK+ library contains a set of graphical control elements\n(widgets)for creating graphical user interfaces. This package contains version 3\nof GTK+.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/gtk3@3.24.41-1.oe2403?arch=x86_64&epoch=0&upstream=gtk3-3.24.41-1.oe2403.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://www.gtk.org",
      "sourceInfo": "acquired package info from repodata DB: repodata/87ee4e92c1e5173adb9dd158ec9c2e7bd500bbe68c80fdd1cfc6721bbb15534f-primary.sqlite.bz2",
      "summary": "GTK+ graphical user interface library",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:3.24.41-1.oe2403"
    },
    {
      "SPDXID": "SPDXRef-rpm-harfbuzz-8.3.0",
      "name": "harfbuzz",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "0ff58ad7c22e8ed396f0c8b7072039ca61260719c950f183dd51fb3a1af79d52"
        }
      ],
      "description": "HarfBuzz is a text-shaping engine. If you give HarfBuzz a font and a string\ncontaining a sequence of Unicode codepoints, HarfBuzz selects and positions\nthe corresponding glyphs from the font, applying all of the necessary layout\nrules and font features. HarfBuzz then returns the string to you in the form\nthat is correctly arranged for the language and writing system.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/harfbuzz@8.3.0-1.oe2403?arch=x86_64&epoch=0&upstream=harfbuzz-8.3.0-1.oe2403.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://harfbuzz.github.io/",
      "sourceInfo": "acquired package info from repodata DB: repodata/87ee4e92c1e5173adb9dd158ec9c2e7bd500bbe68c80fdd1cfc6721bbb15534f-primary.sqlite.bz2",
      "summary": "A text shaping engine",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:8.3.0-1.oe2403"
    },
    {
      "SPDXID": "SPDXRef-rpm-libassuan-2.5.6",
      "name": "libassuan",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "5780ae0be7e824304c2f0f6629394e711dd5e642ca590554f43451cb3c853956"
        }
      ],
      "description": "A small library implementing the so-called Assuan protocal,which is used for IPC between most newer GnuPG cmponents,and provides\\\n\\ both server and client sides functions.\\",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/libassuan@2.5.6-2.oe2403?arch=x86_64&epoch=0&upstream=libassuan-2.5.6-2.oe2403.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://www.gnupg.org/",
      "sourceInfo": "acquired package info from repodata DB: repodata/87ee4e92c1e5173adb9dd158ec9c2e7bd500bbe68c80fdd1cfc6721bbb15534f-primary.sqlite.bz2",
      "summary": "A small library implementing the so-called Assuan protocal",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.5.6-2.oe2403"
    },
    {
      "SPDXID": "SPDXRef-rpm-libgpg-error-1.47",
      "name": "libgpg-error",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "cb14b5a1c607d35b45d9ae8cfcd452474e9fe4434263ae415549363c20bca725"
        }
      ],
      "description": "The libgpg-error package contains a library that originally defines common error values for all GnuPG components.\nAmong these are GPG, GPGSM, GPGME, GPG-Agent, libgcrypt, Libksba, DirMngr, Pinentry, SCdaemon.\nBecause Libgpg-error is a common dependency all GnuPG components, more features will be added to this library.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/libgpg-error@1.47-1.oe2403?arch=x86_64&epoch=0&upstream=libgpg-error-1.47-1.oe2403.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://www.gnupg.org/related_software/libgpg-error/",
      "sourceInfo": "acquired package info from repodata DB: repodata/87ee4e92c1e5173adb9dd158ec9c2e7bd500bbe68c80fdd1cfc6721bbb15534f-primary.sqlite.bz2",
      "summary": "Library for common error values and messages in GnuPG components.",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.47-1.oe2403"
    },
    {
      "SPDXID": "SPDXRef-rpm-libsecret-0.20.5",
      "name": "libsecret",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "6020d0b0d9ba0965bc99118edcfcb1c0c62ede58a4c22098a0137ae36b934f85"
        }
      ],
      "description": "A GObject-based library for accessing the Secret Service API of the freedesktop.org\nproject, a cross-desktop effort to access passwords, tokens and other types of secrets.\nlibsecret provides a convenient wrapper for these methods so consumers do not have to\ncall the low-level DBus methods.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/libsecret@0.20.5-2.oe2403?arch=x86_64&epoch=0&upstream=libsecret-0.20.5-2.oe2403.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://wiki.gnome.org/Projects/Libsecret",
      "sourceInfo": "acquired package info from repodata DB: repodata/87ee4e92c1e5173adb9dd158ec9c2e7bd500bbe68c80fdd1cfc6721bbb15534f-primary.sqlite.bz2",
      "summary": "Library for storing and retrieving passwords and other secrets",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:0.20.5-2.oe2403"
    },
    {
      "SPDXID": "SPDXRef-rpm-ncurses-libs-6.4",
      "name": "ncurses-libs",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "7153b30dee32492d5ff8828aef804a2e58be560b31d4e8c6a5bd6bbe480a3559"
        }
      ],
      "description": "Libraries for ncurses.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/ncurses-libs@6.4-8.oe2403?arch=x86_64&epoch=0&upstream=ncurses-6.4-8.oe2403.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://invisible-island.net/ncurses/ncurses.html",
      "sourceInfo": "acquired package info from repodata DB: repodata/87ee4e92c1e5173adb9dd158ec9c2e7bd500bbe68c80fdd1cfc6721bbb15534f-primary.sqlite.bz2",
      "summary": "Libraries for ncurses",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:6.4-8.oe2403"
    },
    {
      "SPDXID": "SPDXRef-rpm-p11-kit-0.25.0",
      "name": "p11-kit",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "4d060730b752b6fee3062b7820b4ca4462d5033df7116e2dedaa71d92275e2e0"
        }
      ],
      "description": "Provides a way to load and enumerate PKCS#11 modules.\nProvides a standard configuration setup for installing\nPKCS#11 modules in such a way that they're discoverable.\nAlso solves problems with coordinating the use of PKCS#11\nby different components or libraries living in the same process.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/p11-kit@0.25.0-2.oe2403?arch=x86_64&epoch=0&upstream=p11-kit-0.25.0-2.oe2403.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://p11-glue.freedesktop.org/p11-kit.html",
      "sourceInfo": "acquired package info from repodata DB: repodata/87ee4e92c1e5173adb9dd158ec9c2e7bd500bbe68c80fdd1cfc6721bbb15534f-primary.sqlite.bz2",
      "summary": "Provides a way to load and enumerate PKCS#11 modules.",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:0.25.0-2.oe2403"
    },
    {
      "SPDXID": "SPDXRef-rpm-pango-1.51.0",
      "name": "pango",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "e8614a61df3b838053aa618f1e99752e4bc7af21bad5c7539ef3dabd68dc1e8c"
        }
      ],
      "description": "Pango is a library for laying out and rendering of text, with an emphasis\non internationalization. Pango can be used anywhere that text layout is needed,\nthough most of the work on Pango so far has been done in the context of the\nGTK+ widget toolkit. Pango forms the core of text and font handling for GTK+.\n\nPango is designed to be modular; the core Pango layout engine can be used\nwith different font backends.\n\nThe integration of Pango with Cairo provides a complete solution with high\nquality text handling and graphics rendering.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/pango@1.51.0-1.oe2403?arch=x86_64&epoch=0&upstream=pango-1.51.0-1.oe2403.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://pango.gnome.org/",
      "sourceInfo": "acquired package info from repodata DB: repodata/87ee4e92c1e5173adb9dd158ec9c2e7bd500bbe68c80fdd1cfc6721bbb15534f-primary.sqlite.bz2",
      "summary": "System for layout and rendering of internationalized text",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.51.0-1.oe2403"
    },
    {
      "SPDXID": "SPDXRef-rpm-zlib-1.2.13",
      "name": "zlib",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "f71c47cc1a4a0c74aabc1c35b0c451f59b933a0f8b419a413614037bfccef773"
        }
      ],
      "description": "Zlib is a free, general-purpose, not covered by any patents, lossless data-compression\nlibrary for use on virtually any computer hardware and operating system. The zlib data\nformat is itself portable across platforms.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/zlib@1.2.13-2.oe2403?arch=x86_64&epoch=0&upstream=zlib-1.2.13-2.oe2403.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.zlib.net",
      "sourceInfo": "acquired package info from repodata DB: repodata/87ee4e92c1e5173adb9dd158ec9c2e7bd500bbe68c80fdd1cfc6721bbb15534f-primary.sqlite.bz2",
      "summary": "A lossless data-compression library",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.2.13-2.oe2403"
    }
  ],
  "relationships": [
    {
      "spdxElementId": "SPDXRef-rpm-pinentry-1.2.1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-atk-2.51.0"
    },
    {
      "spdxElementId": "SPDXRef-rpm-pinentry-1.2.1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-bash-5.2.15"
    },
    {
      "spdxElementId": "SPDXRef-rpm-pinentry-1.2.1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-cairo-1.18.0"
    },
    {
      "spdxElementId": "SPDXRef-rpm-pinentry-1.2.1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-cairo-gobject-1.18.0"
    },
    {
      "spdxElementId": "SPDXRef-rpm-pinentry-1.2.1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-coreutils-9.4"
    },
    {
      "spdxElementId": "SPDXRef-rpm-pinentry-1.2.1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-fontconfig-2.15.0"
    },
    {
      "spdxElementId": "SPDXRef-rpm-pinentry-1.2.1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-freetype-2.13.2"
    },
    {
      "spdxElementId": "SPDXRef-rpm-pinentry-1.2.1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-gcr-3.41.2"
    },
    {
      "spdxElementId": "SPDXRef-rpm-pinentry-1.2.1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-gcr-base-3.41.2"
    },
    {
      "spdxElementId": "SPDXRef-rpm-pinentry-1.2.1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-gdk-pixbuf2-2.42.10"
    },
    {
      "spdxElementId": "SPDXRef-rpm-pinentry-1.2.1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-glib2-2.78.3"
    },
    {
      "spdxElementId": "SPDXRef-rpm-pinentry-1.2.1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-glibc-2.38"
    },
    {
      "spdxElementId": "SPDXRef-rpm-pinentry-1.2.1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-gtk2-2.24.33"
    },
    {
      "spdxElementId": "SPDXRef-rpm-pinentry-1.2.1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-gtk3-3.24.41"
    },
    {
      "spdxElementId": "SPDXRef-rpm-pinentry-1.2.1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-harfbuzz-8.3.0"
    },
    {
      "spdxElementId": "SPDXRef-rpm-pinentry-1.2.1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-libassuan-2.5.6"
    },
    {
      "spdxElementId": "SPDXRef-rpm-pinentry-1.2.1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-libgpg-error-1.47"
    },
    {
      "spdxElementId": "SPDXRef-rpm-pinentry-1.2.1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-libsecret-0.20.5"
    },
    {
      "spdxElementId": "SPDXRef-rpm-pinentry-1.2.1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-ncurses-libs-6.4"
    },
    {
      "spdxElementId": "SPDXRef-rpm-pinentry-1.2.1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-p11-kit-0.25.0"
    },
    {
      "spdxElementId": "SPDXRef-rpm-pinentry-1.2.1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-pango-1.51.0"
    },
    {
      "spdxElementId": "SPDXRef-rpm-pinentry-1.2.1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-zlib-1.2.13"
    }
  ]
}
