{
  "SPDXID": "SPDXRef-DOCUMENT",
  "name": "fontforge-0.20230101-4.oe2403.aarch64.rpm",
  "spdxVersion": "SPDX-2.2",
  "creationInfo": {
    "created": "2026-05-16T14:07:39.839010253Z",
    "creators": [
      "openeuler_creator"
    ]
  },
  "dataLicense": "CC0-1.0",
  "documentNamespace": "https://sbom.openEuler.org/fontforge-0.20230101-4.oe2403.aarch64.rpm",
  "packages": [
    {
      "SPDXID": "SPDXRef-rpm-brotli-1.1.0",
      "name": "brotli",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "94586f5f44b81035f0c284bcb8a8cba4e6a895d3a146d4ec2af6ce2aeaf221c6"
        }
      ],
      "description": "Brotli is a generic-purpose lossless compression algorithm that compresses\ndata using a combination of a modern variant of the LZ77 algorithm, Huffman\ncoding and 2nd order context modeling, with a compression ratio comparable\nto the best currently available general-purpose compression methods.\nIt is similar in speed with deflate but offers more dense compression.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/brotli@1.1.0-2.oe2403?arch=aarch64&epoch=0&upstream=brotli-1.1.0-2.oe2403.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://github.com/google/brotli",
      "sourceInfo": "acquired package info from repodata DB: repodata/68a9d337dc82d0b3219cca7d4feec09999a19d4eeb5807dd430c4336b1a36be1-primary.sqlite.bz2",
      "summary": "Lossless compression algorithm",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.1.0-2.oe2403"
    },
    {
      "SPDXID": "SPDXRef-rpm-cairo-1.18.0",
      "name": "cairo",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "6f9f720aefd80b609cca38076c7115e3a572085f3ea49d8e66df4e99e7490834"
        }
      ],
      "description": "Cairo is a 2D graphics libarary with support for multiple output devices.\nIt provides high-quality display and print output and this package also\ncontains functionality to make cairo graphics library integrate well with\nGObject used by GNOME.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/cairo@1.18.0-2.oe2403?arch=aarch64&epoch=0&upstream=cairo-1.18.0-2.oe2403.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://cairographics.org",
      "sourceInfo": "acquired package info from repodata DB: repodata/68a9d337dc82d0b3219cca7d4feec09999a19d4eeb5807dd430c4336b1a36be1-primary.sqlite.bz2",
      "summary": "A 2D graphics library",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.18.0-2.oe2403"
    },
    {
      "SPDXID": "SPDXRef-rpm-cairo-gobject-1.18.0",
      "name": "cairo-gobject",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "923df93fcf5c8ff1272143f85fad90b184ac6ef20e6978509dd02d94244f4421"
        }
      ],
      "description": "Cairo is a 2D graphics library designed to provide high-quality display\nand print output.\n\nThis package contains functionality to make cairo graphics library\nintegrate well with the GObject object system used by GNOME.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/cairo-gobject@1.18.0-2.oe2403?arch=aarch64&epoch=0&upstream=cairo-1.18.0-2.oe2403.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://cairographics.org",
      "sourceInfo": "acquired package info from repodata DB: repodata/68a9d337dc82d0b3219cca7d4feec09999a19d4eeb5807dd430c4336b1a36be1-primary.sqlite.bz2",
      "summary": "GObject bindings for cairo",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.18.0-2.oe2403"
    },
    {
      "SPDXID": "SPDXRef-rpm-freetype-2.13.2",
      "name": "freetype",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "9da2850b2da08b8a5eb398ee3d9c05059c6215d1f6039a3ed0db452f171ec8b1"
        }
      ],
      "description": "FreeType is written in C, designed to be small,efficient, highly customizable, and portable while capable of producing high-quality\noutput (glyph images) of most vector and bitmap font formats",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/freetype@2.13.2-3.oe2403?arch=aarch64&epoch=0&upstream=freetype-2.13.2-3.oe2403.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://www.freetype.org",
      "sourceInfo": "acquired package info from repodata DB: repodata/68a9d337dc82d0b3219cca7d4feec09999a19d4eeb5807dd430c4336b1a36be1-primary.sqlite.bz2",
      "summary": "FreeType is a freely available software library to render fonts",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.13.2-3.oe2403"
    },
    {
      "SPDXID": "SPDXRef-rpm-gdk-pixbuf2-2.42.10",
      "name": "gdk-pixbuf2",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "b8facd3c203f9b4e17dee30f03100ec3137f03cc8f65789464b4196776784ab0"
        }
      ],
      "description": "gdk is written in C but has been designed from the ground up to support a wide range of languages.\nIt provide a complete set of widgets,and suitable for projects ranging from small one-off\ntools to complete application suites.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/gdk-pixbuf2@2.42.10-3.oe2403?arch=aarch64&epoch=0&upstream=gdk-pixbuf2-2.42.10-3.oe2403.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://gitlab.gnome.org/GNOME/gdk-pixbuf",
      "sourceInfo": "acquired package info from repodata DB: repodata/68a9d337dc82d0b3219cca7d4feec09999a19d4eeb5807dd430c4336b1a36be1-primary.sqlite.bz2",
      "summary": "gdk is a multi-platform toolkit for creating graphical user interfaces.",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.42.10-3.oe2403"
    },
    {
      "SPDXID": "SPDXRef-rpm-giflib-5.2.2",
      "name": "giflib",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "08404424f64242eab108ff5ad71d2525d2a13a49aa520c1b15fe9c06b135d29f"
        }
      ],
      "description": "giflib is a library of gif images and provides utilities for processing images.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/giflib@5.2.2-1.oe2403?arch=aarch64&epoch=0&upstream=giflib-5.2.2-1.oe2403.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.sourceforge.net/projects/giflib/",
      "sourceInfo": "acquired package info from repodata DB: repodata/68a9d337dc82d0b3219cca7d4feec09999a19d4eeb5807dd430c4336b1a36be1-primary.sqlite.bz2",
      "summary": "A library and utilities for processing GIFs",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:5.2.2-1.oe2403"
    },
    {
      "SPDXID": "SPDXRef-rpm-glib2-2.78.3",
      "name": "glib2",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "b2c205579309f9b22b473fd31b8bd8b4a06acb5056c875f18e37f367ef23dae2"
        }
      ],
      "description": "GLib is a bundle of three (formerly five) low-level system libraries\nwritten in C and developed mainly by GNOME. GLib's code was separated\nfrom GTK, so it can be used by software other than GNOME and has been\ndeveloped in parallel ever since.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/glib2@2.78.3-10.oe2403?arch=aarch64&epoch=0&upstream=glib2-2.78.3-10.oe2403.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://www.gtk.org",
      "sourceInfo": "acquired package info from repodata DB: repodata/68a9d337dc82d0b3219cca7d4feec09999a19d4eeb5807dd430c4336b1a36be1-primary.sqlite.bz2",
      "summary": "The core library that forms the basis for projects such as GTK+ and GNOME",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.78.3-10.oe2403"
    },
    {
      "SPDXID": "SPDXRef-rpm-glibc-2.38",
      "name": "glibc",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "cff8963e4c6a9e4441fbe31a6e353923c61223f0e5fff41181d6817705b2b80c"
        }
      ],
      "description": "The GNU C Library project provides the core libraries for the GNU system and\nGNU/Linux systems, as well as many other systems that use Linux as the kernel.\nThese libraries provide critical APIs including ISO C11, POSIX.1-2008, BSD,\nOS-specific APIs and more. These APIs include such foundational facilities as\nopen, read, write, malloc, printf, getaddrinfo, dlopen, pthread_create, crypt,\n login, exit and more.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/glibc@2.38-101.oe2403?arch=aarch64&epoch=0&upstream=glibc-2.38-101.oe2403.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.gnu.org/software/glibc/",
      "sourceInfo": "acquired package info from repodata DB: repodata/68a9d337dc82d0b3219cca7d4feec09999a19d4eeb5807dd430c4336b1a36be1-primary.sqlite.bz2",
      "summary": "The GNU libc libraries",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.38-101.oe2403"
    },
    {
      "SPDXID": "SPDXRef-rpm-gtk3-3.24.41",
      "name": "gtk3",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "d043ab733a527e8bc7b98025d07d3eab972aab7a25a95eb4a1ba4d5ef51fd742"
        }
      ],
      "description": "GTK+ is an object-oriented widget toolkit written in the programming language C;\nit has a C-based object-oriented architecture that allows for maximum\nflexibility. The GTK+ library contains a set of graphical control elements\n(widgets)for creating graphical user interfaces. This package contains version 3\nof GTK+.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/gtk3@3.24.41-2.oe2403?arch=aarch64&epoch=0&upstream=gtk3-3.24.41-2.oe2403.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://www.gtk.org",
      "sourceInfo": "acquired package info from repodata DB: repodata/68a9d337dc82d0b3219cca7d4feec09999a19d4eeb5807dd430c4336b1a36be1-primary.sqlite.bz2",
      "summary": "GTK+ graphical user interface library",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:3.24.41-2.oe2403"
    },
    {
      "SPDXID": "SPDXRef-rpm-harfbuzz-8.3.0",
      "name": "harfbuzz",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "03048b1604f90f6a3c79f14a41fe9acc5df757b9c6bce644341af55745d66961"
        }
      ],
      "description": "HarfBuzz is a text-shaping engine. If you give HarfBuzz a font and a string\ncontaining a sequence of Unicode codepoints, HarfBuzz selects and positions\nthe corresponding glyphs from the font, applying all of the necessary layout\nrules and font features. HarfBuzz then returns the string to you in the form\nthat is correctly arranged for the language and writing system.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/harfbuzz@8.3.0-2.oe2403?arch=aarch64&epoch=0&upstream=harfbuzz-8.3.0-2.oe2403.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://harfbuzz.github.io/",
      "sourceInfo": "acquired package info from repodata DB: repodata/68a9d337dc82d0b3219cca7d4feec09999a19d4eeb5807dd430c4336b1a36be1-primary.sqlite.bz2",
      "summary": "A text shaping engine",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:8.3.0-2.oe2403"
    },
    {
      "SPDXID": "SPDXRef-rpm-libgcc-12.3.1",
      "name": "libgcc",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "23e26e1b5cb57e8f45998ffd597bcd35fc33e2f089d1c4067f7e60012a5958ea"
        }
      ],
      "description": "This package contains GCC shared support library which is needed\ne.g. for exception handling support.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/libgcc@12.3.1-36.oe2403?arch=aarch64&epoch=0&upstream=gcc-12.3.1-36.oe2403.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://gcc.gnu.org",
      "sourceInfo": "acquired package info from repodata DB: repodata/68a9d337dc82d0b3219cca7d4feec09999a19d4eeb5807dd430c4336b1a36be1-primary.sqlite.bz2",
      "summary": "GCC version 12 shared support library",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:12.3.1-36.oe2403"
    },
    {
      "SPDXID": "SPDXRef-rpm-libpng-1.6.40",
      "name": "libpng",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "374d5e7cce0b37e456fd0dbb5b188903192fe3115f78b58fe5b222286e06557f"
        }
      ],
      "description": "The libpng package contains libraries used by other programs for reading and writing PNG format files.\nThe PNG format was designed as a replacement for GIF and, to a lesser extent, TIFF,\nwith many improvements and extensions and lack of patent problems.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/libpng@1.6.40-2.oe2403?arch=aarch64&epoch=2&upstream=libpng-1.6.40-2.oe2403.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.libpng.org/pub/png/libpng.html",
      "sourceInfo": "acquired package info from repodata DB: repodata/68a9d337dc82d0b3219cca7d4feec09999a19d4eeb5807dd430c4336b1a36be1-primary.sqlite.bz2",
      "summary": "A library of functions for manipulating PNG image format files",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "2:1.6.40-2.oe2403"
    },
    {
      "SPDXID": "SPDXRef-rpm-libstdc---12.3.1",
      "name": "libstdc++",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "7712e9e3c1b57c7c16eb1afe2cd996ff190d40a94b9682f1845c7b03eefed57a"
        }
      ],
      "description": "The libstdc++ package contains a rewritten standard compliant GCC Standard\nC++ Library.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/libstdc++@12.3.1-36.oe2403?arch=aarch64&epoch=0&upstream=gcc-12.3.1-36.oe2403.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://gcc.gnu.org",
      "sourceInfo": "acquired package info from repodata DB: repodata/68a9d337dc82d0b3219cca7d4feec09999a19d4eeb5807dd430c4336b1a36be1-primary.sqlite.bz2",
      "summary": "GNU Standard C++ Library",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:12.3.1-36.oe2403"
    },
    {
      "SPDXID": "SPDXRef-rpm-libtiff-4.6.0",
      "name": "libtiff",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "93775a0672f4237c7cb05367a1d203e3f7de032413c583a9d9a705d07fcc70e6"
        }
      ],
      "description": "This libtiff provides support for the Tag Image File Format (TIFF), a widely\nused format for storing image data. The latest version of the TIFF specification\nis available on-line in several different formats.And contains command-line programs\nfor manipulating TIFF format image files using the libtiff library.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/libtiff@4.6.0-3.oe2403?arch=aarch64&epoch=0&upstream=libtiff-4.6.0-3.oe2403.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://libtiff.gitlab.io/libtiff/",
      "sourceInfo": "acquired package info from repodata DB: repodata/68a9d337dc82d0b3219cca7d4feec09999a19d4eeb5807dd430c4336b1a36be1-primary.sqlite.bz2",
      "summary": "TIFF Library and Utilities",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:4.6.0-3.oe2403"
    },
    {
      "SPDXID": "SPDXRef-rpm-libxml2-2.11.5",
      "name": "libxml2",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "9efe9fa890847375a8fc373f42a5c2f6506f00aac7d9c31a942d543e1b55b1e9"
        }
      ],
      "description": "This library allows to manipulate XML files. It includes support\nto read, modify and write XML and HTML files. There is DTDs support\nthis includes parsing and validation even with complex DtDs, either\nat parse time or later once the document has been modified. The output\ncan be a simple SAX stream or and in-memory DOM like representations.\nIn this case one can use the built-in XPath and XPointer implementation\nto select sub nodes or ranges. A flexible Input/Output mechanism is\navailable, with existing HTTP and FTP modules and combined to an\nURI library.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/libxml2@2.11.5-15.oe2403?arch=aarch64&epoch=0&upstream=libxml2-2.11.5-15.oe2403.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://xmlsoft.org/",
      "sourceInfo": "acquired package info from repodata DB: repodata/68a9d337dc82d0b3219cca7d4feec09999a19d4eeb5807dd430c4336b1a36be1-primary.sqlite.bz2",
      "summary": "Library providing XML and HTML support",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.11.5-15.oe2403"
    },
    {
      "SPDXID": "SPDXRef-rpm-python3-3.11.6",
      "name": "python3",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "83a9a4342ea79c168b8b393a2652c06187b591346e9b405cb2fa23edf2021cac"
        }
      ],
      "description": "Python combines remarkable power with very clear syntax. It has modules,\nclasses, exceptions, very high level dynamic data types, and dynamic\ntyping. There are interfaces to many system calls and libraries, as well\nas to various windowing systems. New built-in modules are easily written\nin C or C++ (or other languages, depending on the chosen implementation).\nPython is also usable as an extension language for applications written\nin other languages that need easy-to-use scripting or automation interfaces.\n\nThis package Provides python version 3.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/python3@3.11.6-10.oe2403?arch=aarch64&epoch=0&upstream=python3-3.11.6-10.oe2403.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://www.python.org/",
      "sourceInfo": "acquired package info from repodata DB: repodata/68a9d337dc82d0b3219cca7d4feec09999a19d4eeb5807dd430c4336b1a36be1-primary.sqlite.bz2",
      "summary": "Interpreter of the Python3 programming language",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:3.11.6-10.oe2403"
    },
    {
      "SPDXID": "SPDXRef-rpm-readline-8.2",
      "name": "readline",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "9d8a5b5962248294847e964133de4f9b0ee3b89cd23999382b7b040bfb0338bd"
        }
      ],
      "description": "The GNU Readline library provides a set of functions for use by\napplications that allow users to edit command lines as they are\ntyped in. Both Emacs and vi editing modes are available.The Readline\nlibrary includes additional functions to maintain a list of\npreviously-entered command lines, to recall and perhaps reedit those\nlines, and perform csh-like history expansion on previous commands.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/readline@8.2-5.oe2403?arch=aarch64&epoch=0&upstream=readline-8.2-5.oe2403.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://tiswww.case.edu/php/chet/readline/rltop.html",
      "sourceInfo": "acquired package info from repodata DB: repodata/68a9d337dc82d0b3219cca7d4feec09999a19d4eeb5807dd430c4336b1a36be1-primary.sqlite.bz2",
      "summary": "Readline library for editing typed command lines",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:8.2-5.oe2403"
    },
    {
      "SPDXID": "SPDXRef-rpm-zlib-1.2.13",
      "name": "zlib",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "f6d272b9ce63e0ac8a3de5f9555cce38c44e8aabbd654e09ee1b539992e0adf8"
        }
      ],
      "description": "Zlib is a free, general-purpose, not covered by any patents, lossless data-compression\nlibrary for use on virtually any computer hardware and operating system. The zlib data\nformat is itself portable across platforms.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/zlib@1.2.13-5.oe2403?arch=aarch64&epoch=0&upstream=zlib-1.2.13-5.oe2403.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.zlib.net",
      "sourceInfo": "acquired package info from repodata DB: repodata/68a9d337dc82d0b3219cca7d4feec09999a19d4eeb5807dd430c4336b1a36be1-primary.sqlite.bz2",
      "summary": "A lossless data-compression library",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.2.13-5.oe2403"
    }
  ],
  "relationships": [
    {
      "spdxElementId": "SPDXRef-rpm-fontforge-20230101",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-brotli-1.1.0"
    },
    {
      "spdxElementId": "SPDXRef-rpm-fontforge-20230101",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-cairo-1.18.0"
    },
    {
      "spdxElementId": "SPDXRef-rpm-fontforge-20230101",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-cairo-gobject-1.18.0"
    },
    {
      "spdxElementId": "SPDXRef-rpm-fontforge-20230101",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-freetype-2.13.2"
    },
    {
      "spdxElementId": "SPDXRef-rpm-fontforge-20230101",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-gdk-pixbuf2-2.42.10"
    },
    {
      "spdxElementId": "SPDXRef-rpm-fontforge-20230101",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-giflib-5.2.2"
    },
    {
      "spdxElementId": "SPDXRef-rpm-fontforge-20230101",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-glib2-2.78.3"
    },
    {
      "spdxElementId": "SPDXRef-rpm-fontforge-20230101",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-glibc-2.38"
    },
    {
      "spdxElementId": "SPDXRef-rpm-fontforge-20230101",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-gtk3-3.24.41"
    },
    {
      "spdxElementId": "SPDXRef-rpm-fontforge-20230101",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-harfbuzz-8.3.0"
    },
    {
      "spdxElementId": "SPDXRef-rpm-fontforge-20230101",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-libgcc-12.3.1"
    },
    {
      "spdxElementId": "SPDXRef-rpm-fontforge-20230101",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-libpng-1.6.40"
    },
    {
      "spdxElementId": "SPDXRef-rpm-fontforge-20230101",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-libstdc---12.3.1"
    },
    {
      "spdxElementId": "SPDXRef-rpm-fontforge-20230101",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-libtiff-4.6.0"
    },
    {
      "spdxElementId": "SPDXRef-rpm-fontforge-20230101",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-libxml2-2.11.5"
    },
    {
      "spdxElementId": "SPDXRef-rpm-fontforge-20230101",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-python3-3.11.6"
    },
    {
      "spdxElementId": "SPDXRef-rpm-fontforge-20230101",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-readline-8.2"
    },
    {
      "spdxElementId": "SPDXRef-rpm-fontforge-20230101",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-zlib-1.2.13"
    }
  ]
}