{
  "SPDXID": "SPDXRef-DOCUMENT",
  "name": "flatpak-0.1.10.2-10.oe2403.aarch64.rpm",
  "spdxVersion": "SPDX-2.2",
  "creationInfo": {
    "created": "2026-05-16T14:07:39.839010253Z",
    "creators": [
      "openeuler_creator"
    ]
  },
  "dataLicense": "CC0-1.0",
  "documentNamespace": "https://sbom.openEuler.org/flatpak-0.1.10.2-10.oe2403.aarch64.rpm",
  "packages": [
    {
      "SPDXID": "SPDXRef-rpm-bubblewrap-0.8.0",
      "name": "bubblewrap",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "52d31d2db091bc71c97a2777dff8b3e362b5c42c85d3b697eb5d463e86ee42ad"
        }
      ],
      "description": "There is an effort in the Linux kernel called user namespaces which\nattempts to allow unprivileged users to use container features.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/bubblewrap@0.8.0-2.oe2403?arch=aarch64&epoch=0&upstream=bubblewrap-0.8.0-2.oe2403.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://github.com/projectatomic/bubblewrap",
      "sourceInfo": "acquired package info from repodata DB: repodata/68a9d337dc82d0b3219cca7d4feec09999a19d4eeb5807dd430c4336b1a36be1-primary.sqlite.bz2",
      "summary": "Core execution tool for unprivileged containers",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:0.8.0-2.oe2403"
    },
    {
      "SPDXID": "SPDXRef-rpm-coreutils-9.4",
      "name": "coreutils",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "96046483156ab4fe6ab9f6eb7b3b374baabedf8ee522b1dded364ab84e21706a"
        }
      ],
      "description": "These are the GNU core utilities.  This package is the combination of\nthe old GNU fileutils, sh-utils, and textutils packages.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/coreutils@9.4-17.oe2403?arch=aarch64&epoch=0&upstream=coreutils-9.4-17.oe2403.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://www.gnu.org/software/coreutils/",
      "sourceInfo": "acquired package info from repodata DB: repodata/68a9d337dc82d0b3219cca7d4feec09999a19d4eeb5807dd430c4336b1a36be1-primary.sqlite.bz2",
      "summary": "A set of basic GNU tools commonly used in shell scripts",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:9.4-17.oe2403"
    },
    {
      "SPDXID": "SPDXRef-rpm-gdk-pixbuf2-2.42.10",
      "name": "gdk-pixbuf2",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "b8facd3c203f9b4e17dee30f03100ec3137f03cc8f65789464b4196776784ab0"
        }
      ],
      "description": "gdk is written in C but has been designed from the ground up to support a wide range of languages.\nIt provide a complete set of widgets,and suitable for projects ranging from small one-off\ntools to complete application suites.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/gdk-pixbuf2@2.42.10-3.oe2403?arch=aarch64&epoch=0&upstream=gdk-pixbuf2-2.42.10-3.oe2403.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://gitlab.gnome.org/GNOME/gdk-pixbuf",
      "sourceInfo": "acquired package info from repodata DB: repodata/68a9d337dc82d0b3219cca7d4feec09999a19d4eeb5807dd430c4336b1a36be1-primary.sqlite.bz2",
      "summary": "gdk is a multi-platform toolkit for creating graphical user interfaces.",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.42.10-3.oe2403"
    },
    {
      "SPDXID": "SPDXRef-rpm-glib2-2.78.3",
      "name": "glib2",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "b2c205579309f9b22b473fd31b8bd8b4a06acb5056c875f18e37f367ef23dae2"
        }
      ],
      "description": "GLib is a bundle of three (formerly five) low-level system libraries\nwritten in C and developed mainly by GNOME. GLib's code was separated\nfrom GTK, so it can be used by software other than GNOME and has been\ndeveloped in parallel ever since.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/glib2@2.78.3-10.oe2403?arch=aarch64&epoch=0&upstream=glib2-2.78.3-10.oe2403.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://www.gtk.org",
      "sourceInfo": "acquired package info from repodata DB: repodata/68a9d337dc82d0b3219cca7d4feec09999a19d4eeb5807dd430c4336b1a36be1-primary.sqlite.bz2",
      "summary": "The core library that forms the basis for projects such as GTK+ and GNOME",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.78.3-10.oe2403"
    },
    {
      "SPDXID": "SPDXRef-rpm-glibc-2.38",
      "name": "glibc",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "cff8963e4c6a9e4441fbe31a6e353923c61223f0e5fff41181d6817705b2b80c"
        }
      ],
      "description": "The GNU C Library project provides the core libraries for the GNU system and\nGNU/Linux systems, as well as many other systems that use Linux as the kernel.\nThese libraries provide critical APIs including ISO C11, POSIX.1-2008, BSD,\nOS-specific APIs and more. These APIs include such foundational facilities as\nopen, read, write, malloc, printf, getaddrinfo, dlopen, pthread_create, crypt,\n login, exit and more.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/glibc@2.38-101.oe2403?arch=aarch64&epoch=0&upstream=glibc-2.38-101.oe2403.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.gnu.org/software/glibc/",
      "sourceInfo": "acquired package info from repodata DB: repodata/68a9d337dc82d0b3219cca7d4feec09999a19d4eeb5807dd430c4336b1a36be1-primary.sqlite.bz2",
      "summary": "The GNU libc libraries",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.38-101.oe2403"
    },
    {
      "SPDXID": "SPDXRef-rpm-libarchive-3.7.1",
      "name": "libarchive",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "8c0c3dda0a24744eadd93b45b9c74fb9dccca1bb386e5d044abd393982b4fd1d"
        }
      ],
      "description": "libarchive is an open-source BSD-licensed C programming library that\nprovides streaming access to a variety of different archive formats,\nincluding tar, cpio, pax, zip, and ISO9660 images. The distribution\nalso includes bsdtar and bsdcpio, full-featured implementations of\ntar and cpio that use libarchive.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/libarchive@3.7.1-10.oe2403?arch=aarch64&epoch=0&upstream=libarchive-3.7.1-10.oe2403.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://www.libarchive.org/",
      "sourceInfo": "acquired package info from repodata DB: repodata/68a9d337dc82d0b3219cca7d4feec09999a19d4eeb5807dd430c4336b1a36be1-primary.sqlite.bz2",
      "summary": "Multi-format archive and compression library",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:3.7.1-10.oe2403"
    },
    {
      "SPDXID": "SPDXRef-rpm-libsoup-2.74.3",
      "name": "libsoup",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "a575659af56415f225098d757a9ddcbf3a09d146dc5c7497e18fdd9547bd1c79"
        }
      ],
      "description": "libsoup is an HTTP client/server library for GNOME. It uses GObjects and the glib main loop,\nto integrate well with GNOME applications, and also has a synchronous API,\nfor use in threaded applications.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/libsoup@2.74.3-10.oe2403?arch=aarch64&epoch=0&upstream=libsoup-2.74.3-10.oe2403.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://wiki.gnome.org/Projects/libsoup",
      "sourceInfo": "acquired package info from repodata DB: repodata/68a9d337dc82d0b3219cca7d4feec09999a19d4eeb5807dd430c4336b1a36be1-primary.sqlite.bz2",
      "summary": "An HTTP library implementation",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.74.3-10.oe2403"
    },
    {
      "SPDXID": "SPDXRef-rpm-libxml2-2.11.5",
      "name": "libxml2",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "9efe9fa890847375a8fc373f42a5c2f6506f00aac7d9c31a942d543e1b55b1e9"
        }
      ],
      "description": "This library allows to manipulate XML files. It includes support\nto read, modify and write XML and HTML files. There is DTDs support\nthis includes parsing and validation even with complex DtDs, either\nat parse time or later once the document has been modified. The output\ncan be a simple SAX stream or and in-memory DOM like representations.\nIn this case one can use the built-in XPath and XPointer implementation\nto select sub nodes or ranges. A flexible Input/Output mechanism is\navailable, with existing HTTP and FTP modules and combined to an\nURI library.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/libxml2@2.11.5-15.oe2403?arch=aarch64&epoch=0&upstream=libxml2-2.11.5-15.oe2403.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://xmlsoft.org/",
      "sourceInfo": "acquired package info from repodata DB: repodata/68a9d337dc82d0b3219cca7d4feec09999a19d4eeb5807dd430c4336b1a36be1-primary.sqlite.bz2",
      "summary": "Library providing XML and HTML support",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.11.5-15.oe2403"
    },
    {
      "SPDXID": "SPDXRef-rpm-polkit-libs-123",
      "name": "polkit-libs",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "dd9bc7e9a8317a22f512ffebc96d6b6ed273838840b61ef1926d3eafce469831"
        }
      ],
      "description": "Libraries files for polkit.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/polkit-libs@123-2.oe2403?arch=aarch64&epoch=0&upstream=polkit-123-2.oe2403.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.freedesktop.org/wiki/Software/polkit",
      "sourceInfo": "acquired package info from repodata DB: repodata/68a9d337dc82d0b3219cca7d4feec09999a19d4eeb5807dd430c4336b1a36be1-primary.sqlite.bz2",
      "summary": "Libraries for polkit",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:123-2.oe2403"
    },
    {
      "SPDXID": "SPDXRef-rpm-shadow-4.14.3",
      "name": "shadow",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "f96215210dac4391e4d25af109acc7a0b1723945043d551c2dbcf35fbdfd6d8b"
        }
      ],
      "description": "This package includes the necessary programs for converting plain\npassword files to the shadow password format and to manage user and\ngroup accounts.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/shadow@4.14.3-8.oe2403?arch=aarch64&epoch=2&upstream=shadow-4.14.3-8.oe2403.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://pkg-shadow.alioth.debian.org/",
      "sourceInfo": "acquired package info from repodata DB: repodata/68a9d337dc82d0b3219cca7d4feec09999a19d4eeb5807dd430c4336b1a36be1-primary.sqlite.bz2",
      "summary": "Tools for managing accounts and shadow password files",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "2:4.14.3-8.oe2403"
    },
    {
      "SPDXID": "SPDXRef-rpm-systemd-255",
      "name": "systemd",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "f6eccb8ec6c97b6ea8c4acc2681519cf66e6839608f328903d7069cfe0b83956"
        }
      ],
      "description": "systemd is a system and service manager that runs as PID 1 and starts\nthe rest of the system.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/systemd@255-35.oe2403?arch=aarch64&epoch=0&upstream=systemd-255-35.oe2403.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://systemd.io/",
      "sourceInfo": "acquired package info from repodata DB: repodata/68a9d337dc82d0b3219cca7d4feec09999a19d4eeb5807dd430c4336b1a36be1-primary.sqlite.bz2",
      "summary": "System and Service Manager",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:255-35.oe2403"
    },
    {
      "SPDXID": "SPDXRef-rpm-systemd-libs-255",
      "name": "systemd-libs",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "3bd52c28a321530316a929e526ca484e7bc41810d6760a75c3c4046064ed6f74"
        }
      ],
      "description": "Libraries for systemd and udev.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/systemd-libs@255-35.oe2403?arch=aarch64&epoch=0&upstream=systemd-255-35.oe2403.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://systemd.io/",
      "sourceInfo": "acquired package info from repodata DB: repodata/68a9d337dc82d0b3219cca7d4feec09999a19d4eeb5807dd430c4336b1a36be1-primary.sqlite.bz2",
      "summary": "systemd libraries",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:255-35.oe2403"
    },
    {
      "SPDXID": "SPDXRef-rpm-xdg-dbus-proxy-0.1.2",
      "name": "xdg-dbus-proxy",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "c499de65840cb3df1970ff7d788adb2b41b81b17ae65084acd675d713e0148f0"
        }
      ],
      "description": "xdg-dbus-proxy is a filtering proxy for D-Bus connections. It was originally\npart of the flatpak project, but it has been broken out as a standalone module\nto facilitate using it in other contexts.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/xdg-dbus-proxy@0.1.2-2.oe2403?arch=aarch64&epoch=0&upstream=xdg-dbus-proxy-0.1.2-2.oe2403.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://github.com/flatpak/xdg-dbus-proxy/",
      "sourceInfo": "acquired package info from repodata DB: repodata/68a9d337dc82d0b3219cca7d4feec09999a19d4eeb5807dd430c4336b1a36be1-primary.sqlite.bz2",
      "summary": "Filtering proxy for D-Bus connections",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:0.1.2-2.oe2403"
    }
  ],
  "relationships": [
    {
      "spdxElementId": "SPDXRef-rpm-flatpak-1.10.2",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-bubblewrap-0.8.0"
    },
    {
      "spdxElementId": "SPDXRef-rpm-flatpak-1.10.2",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-coreutils-9.4"
    },
    {
      "spdxElementId": "SPDXRef-rpm-flatpak-1.10.2",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-gdk-pixbuf2-2.42.10"
    },
    {
      "spdxElementId": "SPDXRef-rpm-flatpak-1.10.2",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-glib2-2.78.3"
    },
    {
      "spdxElementId": "SPDXRef-rpm-flatpak-1.10.2",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-glibc-2.38"
    },
    {
      "spdxElementId": "SPDXRef-rpm-flatpak-1.10.2",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-libarchive-3.7.1"
    },
    {
      "spdxElementId": "SPDXRef-rpm-flatpak-1.10.2",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-libsoup-2.74.3"
    },
    {
      "spdxElementId": "SPDXRef-rpm-flatpak-1.10.2",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-libxml2-2.11.5"
    },
    {
      "spdxElementId": "SPDXRef-rpm-flatpak-1.10.2",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-polkit-libs-123"
    },
    {
      "spdxElementId": "SPDXRef-rpm-flatpak-1.10.2",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-shadow-4.14.3"
    },
    {
      "spdxElementId": "SPDXRef-rpm-flatpak-1.10.2",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-systemd-255"
    },
    {
      "spdxElementId": "SPDXRef-rpm-flatpak-1.10.2",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-systemd-libs-255"
    },
    {
      "spdxElementId": "SPDXRef-rpm-flatpak-1.10.2",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-xdg-dbus-proxy-0.1.2"
    }
  ]
}