{
  "SPDXID": "SPDXRef-DOCUMENT",
  "name": "python3-0.3.11.6-10.oe2403.aarch64.rpm",
  "spdxVersion": "SPDX-2.2",
  "creationInfo": {
    "created": "2026-05-15T10:02:59.761115512Z",
    "creators": [
      "openeuler_creator"
    ]
  },
  "dataLicense": "CC0-1.0",
  "documentNamespace": "https://sbom.openEuler.org/python3-0.3.11.6-10.oe2403.aarch64.rpm",
  "packages": [
    {
      "SPDXID": "SPDXRef-rpm-coreutils-9.4",
      "name": "coreutils",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "5adc2b57027700f62925bd520aab7a7347bb53535232a42c5b2bd34f637e77cf"
        }
      ],
      "description": "These are the GNU core utilities.  This package is the combination of\nthe old GNU fileutils, sh-utils, and textutils packages.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/coreutils@9.4-17.oe2403?arch=x86_64&epoch=0&upstream=coreutils-9.4-17.oe2403.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://www.gnu.org/software/coreutils/",
      "sourceInfo": "acquired package info from repodata DB: repodata/2bb6343ca00d88863a698ab00ba013225f850ee24693ea62b101c4b2153d4ddb-primary.sqlite.bz2",
      "summary": "A set of basic GNU tools commonly used in shell scripts",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:9.4-17.oe2403"
    },
    {
      "SPDXID": "SPDXRef-rpm-expat-2.5.0",
      "name": "expat",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "a7c6724e61a7be91475ce3c5cded933611cdae73f37f2a879add699a424f289e"
        }
      ],
      "description": "expat is a stream-oriented XML parser library written in C.\nexpat excels with files too large to fit RAM, and where\nperformance and flexibility are crucial.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/expat@2.5.0-10.oe2403?arch=x86_64&epoch=0&upstream=expat-2.5.0-10.oe2403.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://libexpat.github.io/",
      "sourceInfo": "acquired package info from repodata DB: repodata/2bb6343ca00d88863a698ab00ba013225f850ee24693ea62b101c4b2153d4ddb-primary.sqlite.bz2",
      "summary": "An XML parser library",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.5.0-10.oe2403"
    },
    {
      "SPDXID": "SPDXRef-rpm-glibc-2.38",
      "name": "glibc",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "9c9d46dff23e85b1a909276e9dfa93ea5c35b9fa788ba716e1634854f582059e"
        }
      ],
      "description": "The GNU C Library project provides the core libraries for the GNU system and\nGNU/Linux systems, as well as many other systems that use Linux as the kernel.\nThese libraries provide critical APIs including ISO C11, POSIX.1-2008, BSD,\nOS-specific APIs and more. These APIs include such foundational facilities as\nopen, read, write, malloc, printf, getaddrinfo, dlopen, pthread_create, crypt,\n login, exit and more.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/glibc@2.38-101.oe2403?arch=x86_64&epoch=0&upstream=glibc-2.38-101.oe2403.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.gnu.org/software/glibc/",
      "sourceInfo": "acquired package info from repodata DB: repodata/2bb6343ca00d88863a698ab00ba013225f850ee24693ea62b101c4b2153d4ddb-primary.sqlite.bz2",
      "summary": "The GNU libc libraries",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.38-101.oe2403"
    },
    {
      "SPDXID": "SPDXRef-rpm-libffi-3.4.4",
      "name": "libffi",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "8e71a046957bb4224c4b5e0b2cff53e5e6fd508dfff7ef5f31dc1ab055ce38e2"
        }
      ],
      "description": "Compilers for high level languages generate code that follows certain conventions. These\nconventions are necessary, in part, for separate compilation to work. One such convention\nis the \"calling convention\". The \"calling convention\" is a set of assumptions made by the\ncompiler about where function arguments will be found on entry to a function. A \"calling\nconvention\" also specifies where the return value for a function is found.\n\nSome programs may not know at the time of compilation what arguments are to be passed to a\nfunction. For instance, an interpreter may be told at run-time about the number and types\nof arguments used to call a given function. Libffi can be used in such programs to provide\na bridge from the interpreter program to compiled code.\n\nThe libffi library provides a portable, high level programming interface to various calling\nconventions. This allows a programmer to call any function specified by a call interface\ndescription at run-time.\n\nFFI stands for Foreign Function Interface. A foreign function interface is the popular name\nfor the interface that allows code written in one language to call code written in another\nlanguage. The libffi library really only provides the lowest, machine dependent layer of a\nfully featured foreign function interface. A layer must exist above libffi that handles type\nconversions for values passed between the two languages.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/libffi@3.4.4-6.oe2403?arch=x86_64&epoch=0&upstream=libffi-3.4.4-6.oe2403.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://sourceware.org/libffi",
      "sourceInfo": "acquired package info from repodata DB: repodata/2bb6343ca00d88863a698ab00ba013225f850ee24693ea62b101c4b2153d4ddb-primary.sqlite.bz2",
      "summary": "A Portable Foreign Function Interface Library",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:3.4.4-6.oe2403"
    },
    {
      "SPDXID": "SPDXRef-rpm-libtirpc-1.3.4",
      "name": "libtirpc",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "78d82a258d552067e5bc060480ada6e7448828ec313994c83355964b2a40f6af"
        }
      ],
      "description": "Libtirpc is a Transport-Independent RPC library for Linux",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/libtirpc@1.3.4-3.oe2403?arch=x86_64&epoch=0&upstream=libtirpc-1.3.4-3.oe2403.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://git.linux-nfs.org/?p=steved/libtirpc.git;a=summary",
      "sourceInfo": "acquired package info from repodata DB: repodata/2bb6343ca00d88863a698ab00ba013225f850ee24693ea62b101c4b2153d4ddb-primary.sqlite.bz2",
      "summary": "Transport-independent RPC library",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.3.4-3.oe2403"
    },
    {
      "SPDXID": "SPDXRef-rpm-libuuid-2.39.1",
      "name": "libuuid",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "6211fc51b697b6173a36fcdb0995c2fe539a5b6a3943a59218a76528c0488b77"
        }
      ],
      "description": "This package is the universally unique ID library.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/libuuid@2.39.1-22.oe2403?arch=x86_64&epoch=0&upstream=util-linux-2.39.1-22.oe2403.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git",
      "sourceInfo": "acquired package info from repodata DB: repodata/2bb6343ca00d88863a698ab00ba013225f850ee24693ea62b101c4b2153d4ddb-primary.sqlite.bz2",
      "summary": "Universally unique ID library",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.39.1-22.oe2403"
    },
    {
      "SPDXID": "SPDXRef-rpm-ncurses-libs-6.4",
      "name": "ncurses-libs",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "1acdb7f2260a8f33e3db4baa812e317f33e88e5d6fd141b3300ffc139e102646"
        }
      ],
      "description": "Libraries for ncurses.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/ncurses-libs@6.4-10.oe2403?arch=x86_64&epoch=0&upstream=ncurses-6.4-10.oe2403.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://invisible-island.net/ncurses/ncurses.html",
      "sourceInfo": "acquired package info from repodata DB: repodata/2bb6343ca00d88863a698ab00ba013225f850ee24693ea62b101c4b2153d4ddb-primary.sqlite.bz2",
      "summary": "Libraries for ncurses",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:6.4-10.oe2403"
    },
    {
      "SPDXID": "SPDXRef-rpm-openssl-libs-3.0.12",
      "name": "openssl-libs",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "11ff6447fa7e838070569b85e08bf2a09e44b3d63a6fffbd572f1443bf1debd5"
        }
      ],
      "description": "The openssl-libs package contains the libraries that are used\nby various applications which support cryptographic algorithms\nand protocols.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/openssl-libs@3.0.12-10.oe2403?arch=x86_64&epoch=1&upstream=openssl-3.0.12-10.oe2403.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://www.openssl.org/",
      "sourceInfo": "acquired package info from repodata DB: repodata/2bb6343ca00d88863a698ab00ba013225f850ee24693ea62b101c4b2153d4ddb-primary.sqlite.bz2",
      "summary": "A general purpose cryptography library with TLS implementation",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "1:3.0.12-10.oe2403"
    },
    {
      "SPDXID": "SPDXRef-rpm-python-pip-wheel-23.3.1",
      "name": "python-pip-wheel",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "7294465d4c27fe96835a07518f16de3931c81b36788f2bfd52851cf8140fe9ba"
        }
      ],
      "description": "A Python wheel of pip to use with venv",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/python-pip-wheel@23.3.1-10.oe2403?arch=noarch&epoch=0&upstream=python-pip-23.3.1-10.oe2403.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.pip-installer.org",
      "sourceInfo": "acquired package info from repodata DB: repodata/2bb6343ca00d88863a698ab00ba013225f850ee24693ea62b101c4b2153d4ddb-primary.sqlite.bz2",
      "summary": "The pip wheel",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:23.3.1-10.oe2403"
    },
    {
      "SPDXID": "SPDXRef-rpm-python-setuptools-68.0.0",
      "name": "python-setuptools",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "25e8b45547365c05a6a9b15b38084a6d423a26edc17b33752ad2a6554e015626"
        }
      ],
      "description": "Setuptools is a collection of enhancements to the Python distutils that allow\nyou to more easily build and distribute Python packages, especially ones that\nhave dependencies on other packages.\n\nThis package contains a python wheel of setuptools to use with venv.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/python-setuptools@68.0.0-2.oe2403?arch=noarch&epoch=0&upstream=python-setuptools-68.0.0-2.oe2403.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://pypi.python.org/pypi/setuptools",
      "sourceInfo": "acquired package info from repodata DB: repodata/2bb6343ca00d88863a698ab00ba013225f850ee24693ea62b101c4b2153d4ddb-primary.sqlite.bz2",
      "summary": "Easily build and distribute Python packages",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:68.0.0-2.oe2403"
    },
    {
      "SPDXID": "SPDXRef-rpm-readline-8.2",
      "name": "readline",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "7d0fd84ff4c2b6d0679dcd59d4f550665073bd33d3a858f04e4e73790f49644c"
        }
      ],
      "description": "The GNU Readline library provides a set of functions for use by\napplications that allow users to edit command lines as they are\ntyped in. Both Emacs and vi editing modes are available.The Readline\nlibrary includes additional functions to maintain a list of\npreviously-entered command lines, to recall and perhaps reedit those\nlines, and perform csh-like history expansion on previous commands.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/readline@8.2-5.oe2403?arch=x86_64&epoch=0&upstream=readline-8.2-5.oe2403.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://tiswww.case.edu/php/chet/readline/rltop.html",
      "sourceInfo": "acquired package info from repodata DB: repodata/2bb6343ca00d88863a698ab00ba013225f850ee24693ea62b101c4b2153d4ddb-primary.sqlite.bz2",
      "summary": "Readline library for editing typed command lines",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:8.2-5.oe2403"
    },
    {
      "SPDXID": "SPDXRef-rpm-sqlite-3.42.0",
      "name": "sqlite",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "be98beab4002fd2ff4c4a05c780f5b72b58f9e29b5eba56341a11d262768ca74"
        }
      ],
      "description": "SQLite is a C-language library that implements a small, fast, self-contained,\nhigh-reliability, full-featured, SQL database engine. SQLite is the most used\ndatabase engine in the world. SQLite is built into all mobile phones and most\ncomputers and comes bundled inside countless other applications that people\nuse every day.It also include lemon and sqlite3_analyzer and tcl tools.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/sqlite@3.42.0-4.oe2403?arch=x86_64&epoch=0&upstream=sqlite-3.42.0-4.oe2403.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.sqlite.org/",
      "sourceInfo": "acquired package info from repodata DB: repodata/2bb6343ca00d88863a698ab00ba013225f850ee24693ea62b101c4b2153d4ddb-primary.sqlite.bz2",
      "summary": "Embeded SQL database",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:3.42.0-4.oe2403"
    },
    {
      "SPDXID": "SPDXRef-rpm-xz-libs-5.4.7",
      "name": "xz-libs",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "9ee4005c9c859d45ad1c8a2a4385ca7c7f3ec8dc18a9b7b0716e7ec8ba34f1f0"
        }
      ],
      "description": "Libraries for decoding files compressed with LZMA or XZ utils.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/xz-libs@5.4.7-1.oe2403?arch=x86_64&epoch=0&upstream=xz-5.4.7-1.oe2403.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://tukaani.org/xz",
      "sourceInfo": "acquired package info from repodata DB: repodata/2bb6343ca00d88863a698ab00ba013225f850ee24693ea62b101c4b2153d4ddb-primary.sqlite.bz2",
      "summary": "Libraries for xz",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:5.4.7-1.oe2403"
    },
    {
      "SPDXID": "SPDXRef-rpm-zlib-1.2.13",
      "name": "zlib",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "3c94812056316ee01734063034dd81b8f8efb396fbffa759074a5d7339229ef2"
        }
      ],
      "description": "Zlib is a free, general-purpose, not covered by any patents, lossless data-compression\nlibrary for use on virtually any computer hardware and operating system. The zlib data\nformat is itself portable across platforms.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/zlib@1.2.13-5.oe2403?arch=x86_64&epoch=0&upstream=zlib-1.2.13-5.oe2403.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.zlib.net",
      "sourceInfo": "acquired package info from repodata DB: repodata/2bb6343ca00d88863a698ab00ba013225f850ee24693ea62b101c4b2153d4ddb-primary.sqlite.bz2",
      "summary": "A lossless data-compression library",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.2.13-5.oe2403"
    }
  ],
  "relationships": [
    {
      "spdxElementId": "SPDXRef-rpm-python3-3.11.6",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-coreutils-9.4"
    },
    {
      "spdxElementId": "SPDXRef-rpm-python3-3.11.6",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-expat-2.5.0"
    },
    {
      "spdxElementId": "SPDXRef-rpm-python3-3.11.6",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-glibc-2.38"
    },
    {
      "spdxElementId": "SPDXRef-rpm-python3-3.11.6",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-libffi-3.4.4"
    },
    {
      "spdxElementId": "SPDXRef-rpm-python3-3.11.6",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-libtirpc-1.3.4"
    },
    {
      "spdxElementId": "SPDXRef-rpm-python3-3.11.6",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-libuuid-2.39.1"
    },
    {
      "spdxElementId": "SPDXRef-rpm-python3-3.11.6",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-ncurses-libs-6.4"
    },
    {
      "spdxElementId": "SPDXRef-rpm-python3-3.11.6",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-openssl-libs-3.0.12"
    },
    {
      "spdxElementId": "SPDXRef-rpm-python3-3.11.6",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-python-pip-wheel-23.3.1"
    },
    {
      "spdxElementId": "SPDXRef-rpm-python3-3.11.6",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-python-setuptools-68.0.0"
    },
    {
      "spdxElementId": "SPDXRef-rpm-python3-3.11.6",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-readline-8.2"
    },
    {
      "spdxElementId": "SPDXRef-rpm-python3-3.11.6",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-sqlite-3.42.0"
    },
    {
      "spdxElementId": "SPDXRef-rpm-python3-3.11.6",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-xz-libs-5.4.7"
    },
    {
      "spdxElementId": "SPDXRef-rpm-python3-3.11.6",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-zlib-1.2.13"
    }
  ]
}
