{ "SPDXID": "SPDXRef-DOCUMENT", "name": "sbom-sha256:b5c3da964d6b5840193b4246511a94262110e329ca13dc5fe9034b241c08d832", "spdxVersion": "SPDX-2.3", "creationInfo": { "created": "2026-11-09T22:24:07Z", "creators": [ "Tool: apko (v1.4.18)", "Organization: Chainguard, Inc" ], "licenseListVersion": "3.27" }, "dataLicense": "CC0-1.0", "documentNamespace": "https://spdx.org/spdxdocs/apko/", "documentDescribes": [ "SPDXRef-Package-Image-sha256-7a2156461e9eef432502f4f5a72108d721abffafd65fdb69f49b76606d049b68" ], "packages": [ { "SPDXID": "SPDXRef-Package-Image-sha256-7a2156461e9eef432502f4f5a72108d721abffafd65fdb69f49b76606d049b68", "name": "sha256:7a2156461e9eef432502f4f5a72108d721abffafd65fdb69f49b76606d049b68", "versionInfo": "sha256:7a2156461e9eef432502f4f5a72108d721abffafd65fdb69f49b76606d049b68", "filesAnalyzed": false, "description": "apko container image", "downloadLocation": "NOASSERTION", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "CONTAINER", "checksums": [ { "algorithm": "SHA256", "checksumValue": "7a2156461e9eef432502f4f5a72108d721abffafd65fdb69f49b76606d049b68" } ], "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:oci/go@sha256:7a2156461e9eef432502f4f5a72108d721abffafd65fdb69f49b76606d049b68?arch=arm64\u0026mediaType=application%2Fvnd.oci.image.manifest.v1%2Bjson\u0026os=linux", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-ImageLayer-sha256-b5c3da964d6b5840193b4246511a94262110e329ca13dc5fe9034b241c08d832", "name": "sha256:b5c3da964d6b5840193b4246511a94262110e329ca13dc5fe9034b241c08d832", "versionInfo": "20230201", "filesAnalyzed": false, "description": "apko operating system layer", "downloadLocation": "NOASSERTION", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "CONTAINER", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:oci/go@sha256:b5c3da964d6b5840193b4246511a94262110e329ca13dc5fe9034b241c08d832?arch=arm64\u0026mediaType=application%2Fvnd.oci.image.layer.v1.tar%2Bgzip\u0026os=linux", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-OperatingSystem-wolfi", "name": "wolfi", "versionInfo": "20230201", "filesAnalyzed": false, "description": "Operating System", "downloadLocation": "NOASSERTION", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "OPERATING_SYSTEM" }, { "SPDXID": "SPDXRef-Package-apk-wolfi-baselayout-20230201-r31", "name": "wolfi-baselayout", "versionInfo": "20230201-r31", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/wolfi-baselayout@20230201-r31?arch=aarch64\u0026distro=wolfi", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Melange-wolfi-baselayout.yaml-ed415005c84750f03c4a9252137813734a224ae7", "name": "wolfi-baselayout.yaml", "versionInfo": "ed415005c84750f03c4a9252137813734a224ae7", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "INSTALL", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/chainguard-dev/stereo@ed415005c84750f03c4a9252137813734a224ae7#wolfi-baselayout.yaml", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-wolfi-baselayout-10b2691c19a945ed", "name": "wolfi-baselayout", "versionInfo": "20230201-r31", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "description": "baselayout data for Wolfi", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/wolfi-baselayout@20230201-r31?arch=aarch64\u0026origin=wolfi-baselayout", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-wolfi-baselayout", "name": "wolfi-baselayout", "versionInfo": "20230201-r31", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-ca-certificates-bundle-20261020-r0", "name": "ca-certificates-bundle", "versionInfo": "20261020-r0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MPL-2.0 AND MIT", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/ca-certificates-bundle@20261020-r0?arch=aarch64\u0026distro=wolfi", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Melange-ca-certificates.yaml-8061afafa65af5a9026707a8880e14120dd6f4a0", "name": "ca-certificates.yaml", "versionInfo": "8061afafa65af5a9026707a8880e14120dd6f4a0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "INSTALL", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/chainguard-dev/stereo@8061afafa65af5a9026707a8880e14120dd6f4a0#ca-certificates.yaml", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Source-gitlab.alpinelinux.org-alpine-ca-certificates-20261020-2058424fda70ee478bcce872dcf141a0c5499ee0-0", "name": "alpine/ca-certificates", "versionInfo": "20261020", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MPL-2.0 AND MIT", "downloadLocation": "https://tarballs.cgr.dev/a/f7f6555663adc30d4e3c43a90ddef6942dabe93d06f7a7201cf29d993222346a-2058424fda70ee478bcce872dcf141a0c5499ee0.tar.gz", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "SOURCE", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:generic/alpine%2Fca-certificates@20261020?vcs_url=git%2Bhttps:%2F%2Fgitlab.alpinelinux.org%2Falpine%2Fca-certificates%402058424fda70ee478bcce872dcf141a0c5499ee0", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-ca-certificates-bundle-39152a1ba5759050", "name": "ca-certificates-bundle", "versionInfo": "20261020-r0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "(MPL-2.0 AND MIT)", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/ca-certificates-bundle@20261020-r0?arch=aarch64\u0026origin=ca-certificates", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-ca-certificates-bundle", "name": "ca-certificates-bundle", "versionInfo": "20261020-r0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-glibc-2.44-locale-posix-2.44-r15", "name": "glibc-2.44-locale-posix", "versionInfo": "2.44-r15", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "LGPL-2.1-or-later", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/glibc-2.44-locale-posix@2.44-r15?arch=aarch64\u0026distro=wolfi", "referenceType": "purl" }, { "referenceCategory": "SECURITY", "referenceLocator": "cpe:2.3:a:gnu:glibc:2.44:*:*:*:*:*:*:*", "referenceType": "cpe23Type" } ] }, { "SPDXID": "SPDXRef-Package-Melange-glibc-2.44.yaml-f903916d7bbf6d7dc87dd9e05b827df096b22255", "name": "glibc-2.44.yaml", "versionInfo": "f903916d7bbf6d7dc87dd9e05b827df096b22255", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "INSTALL", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/chainguard-dev/stereo@f903916d7bbf6d7dc87dd9e05b827df096b22255#glibc-2.44.yaml", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Source-gitlab.com-gnutools-glibc.git-release-2.44-master-47e2b570410fab606de29f550534a721184852c3-0", "name": "gnutools/glibc", "versionInfo": "47e2b570410fab606de29f550534a721184852c3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "LGPL-2.1-or-later", "downloadLocation": "https://tarballs.cgr.dev/g/9390037ac2ec26cf74ce7c6709d852e0ce67205355e04fbdb9b9549f47a5bb40-47e2b570410fab606de29f550534a721184852c3.tar.gz", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "SOURCE", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:generic/gnutools%2Fglibc@47e2b570410fab606de29f550534a721184852c3?vcs_url=git%2Bhttps:%2F%2Fgitlab.com%2Fgnutools%2Fglibc.git%4047e2b570410fab606de29f550534a721184852c3", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-glibc-2.44-locale-posix-662d452b2ea361dc", "name": "glibc-2.44-locale-posix", "versionInfo": "2.44-r15", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "LGPL-2.1-or-later", "description": "POSIX locale data for glibc", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "SECURITY", "referenceLocator": "cpe:2.3:a:gnu:glibc:2.44-r15:*:*:*:*:*:*:*", "referenceType": "cpe23Type" }, { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/glibc-2.44-locale-posix@2.44-r15?arch=aarch64\u0026origin=glibc-2.44", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-glibc-2.44-locale-posix", "name": "glibc-2.44-locale-posix", "versionInfo": "2.44-r15", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-libgcc-16.2.0-r3", "name": "libgcc", "versionInfo": "16.2.0-r3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "GPL-3.0-or-later WITH GCC-exception-3.1", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/libgcc@16.2.0-r3?arch=aarch64\u0026distro=wolfi", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Melange-gcc.yaml-4d188060cbd00821a95f1ef60605da4817e781bb", "name": "gcc.yaml", "versionInfo": "4d188060cbd00821a95f1ef60605da4817e781bb", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "INSTALL", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/chainguard-dev/stereo@4d188060cbd00821a95f1ef60605da4817e781bb#gcc.yaml", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Source-gitlab.com-gnutools-gcc.git-releases-gcc-16.2.0-78d4ac73dd391005b895a6148cd9831e28e1208b-0", "name": "gnutools/gcc", "versionInfo": "releases/gcc-16.2.0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "GPL-3.0-or-later WITH GCC-exception-3.1", "downloadLocation": "https://tarballs.cgr.dev/g/dc3e72361e36d33e861a0662815d63a4f1b8578521cc6935343a4aa87327bdec-78d4ac73dd391005b895a6148cd9831e28e1208b.tar.gz", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "SOURCE", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:generic/gnutools%2Fgcc@releases%2Fgcc-16.2.0?vcs_url=git%2Bhttps:%2F%2Fgitlab.com%2Fgnutools%2Fgcc.git%4078d4ac73dd391005b895a6148cd9831e28e1208b", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-libgcc-6f0563db807ae406", "name": "libgcc", "versionInfo": "16.2.0-r3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "(GPL-3.0-or-later WITH GCC-exception-3.1)", "description": "GCC runtime library", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "SECURITY", "referenceLocator": "cpe:2.3:a:gnu:gcc:16.2.0:*:*:*:*:*:*:*", "referenceType": "cpe23Type" }, { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/libgcc@16.2.0-r3?arch=aarch64\u0026origin=gcc", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-libgcc", "name": "libgcc", "versionInfo": "16.2.0-r3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-glibc-2.44-2.44-r15", "name": "glibc-2.44", "versionInfo": "2.44-r15", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "LGPL-2.1-or-later", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/glibc-2.44@2.44-r15?arch=aarch64\u0026distro=wolfi", "referenceType": "purl" }, { "referenceCategory": "SECURITY", "referenceLocator": "cpe:2.3:a:gnu:glibc:2.44:*:*:*:*:*:*:*", "referenceType": "cpe23Type" } ] }, { "SPDXID": "SPDXRef-Package-apk-glibc-2.44-09050f0de1709b32", "name": "glibc-2.44", "versionInfo": "2.44-r15", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "LGPL-2.1-or-later", "description": "the GNU C library", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "SECURITY", "referenceLocator": "cpe:2.3:a:gnu:glibc:2.44-r15:*:*:*:*:*:*:*", "referenceType": "cpe23Type" }, { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/glibc-2.44@2.44-r15?arch=aarch64\u0026origin=glibc-2.44", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-glibc-2.44", "name": "glibc-2.44", "versionInfo": "2.44-r15", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-ld-linux-2.44-2.44-r15", "name": "ld-linux-2.44", "versionInfo": "2.44-r15", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "LGPL-2.1-or-later", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/ld-linux-2.44@2.44-r15?arch=aarch64\u0026distro=wolfi", "referenceType": "purl" }, { "referenceCategory": "SECURITY", "referenceLocator": "cpe:2.3:a:gnu:glibc:2.44:*:*:*:*:*:*:*", "referenceType": "cpe23Type" } ] }, { "SPDXID": "SPDXRef-Package-apk-ld-linux-2.44-0758def42e65ad42", "name": "ld-linux-2.44", "versionInfo": "2.44-r15", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "LGPL-2.1-or-later", "description": "the GLIBC ELF interpreter", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "SECURITY", "referenceLocator": "cpe:2.3:a:gnu:glibc:2.44-r15:*:*:*:*:*:*:*", "referenceType": "cpe23Type" }, { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/ld-linux-2.44@2.44-r15?arch=aarch64\u0026origin=glibc-2.44", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-ld-linux-2.44", "name": "ld-linux-2.44", "versionInfo": "2.44-r15", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-ncurses-terminfo-base-6.6.20261107-r0", "name": "ncurses-terminfo-base", "versionInfo": "6.6.20261107-r0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/ncurses-terminfo-base@6.6.20261107-r0?arch=aarch64\u0026distro=wolfi", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Melange-ncurses.yaml-57b90c0084b0bc101663cdfcaa44f4ce83312443", "name": "ncurses.yaml", "versionInfo": "57b90c0084b0bc101663cdfcaa44f4ce83312443", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "INSTALL", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/chainguard-dev/stereo@57b90c0084b0bc101663cdfcaa44f4ce83312443#ncurses.yaml", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Source-github.com-ThomasDickey-ncurses-snapshots-v6C956C9520261107-7404b376832583182c52722dc09d86b8675db375-0", "name": "ncurses-snapshots", "versionInfo": "v6_6_20261107", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "downloadLocation": "https://github.com/ThomasDickey/ncurses-snapshots/archive/7404b376832583182c52722dc09d86b8675db375.tar.gz", "originator": "Organization: Thomasdickey", "supplier": "Organization: Thomasdickey", "primaryPackagePurpose": "SOURCE", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/thomasdickey/ncurses-snapshots@v6_6_20261107", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-ncurses-terminfo-base-d4376d4149bf9b00", "name": "ncurses-terminfo-base", "versionInfo": "6.6.20261107-r0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "description": "descriptions of common terminals", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "SECURITY", "referenceLocator": "cpe:2.3:a:gnu:ncurses:6.6.20261107:*:*:*:*:*:*:*", "referenceType": "cpe23Type" }, { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/ncurses-terminfo-base@6.6.20261107-r0?arch=aarch64\u0026origin=ncurses", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-ncurses-terminfo-base", "name": "ncurses-terminfo-base", "versionInfo": "6.6.20261107-r0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-ncurses-6.6.20261107-r0", "name": "ncurses", "versionInfo": "6.6.20261107-r0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/ncurses@6.6.20261107-r0?arch=aarch64\u0026distro=wolfi", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-ncurses-fe6e9d338447068c", "name": "ncurses", "versionInfo": "6.6.20261107-r0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "description": "console display library", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "SECURITY", "referenceLocator": "cpe:2.3:a:gnu:ncurses:6.6.20261107:*:*:*:*:*:*:*", "referenceType": "cpe23Type" }, { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/ncurses@6.6.20261107-r0?arch=aarch64\u0026origin=ncurses", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-ncurses", "name": "ncurses", "versionInfo": "6.6.20261107-r0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-bash-5.3-r14", "name": "bash", "versionInfo": "5.3-r14", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "GPL-3.0-or-later", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/bash@5.3-r14?arch=aarch64\u0026distro=wolfi", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Melange-bash.yaml-ac7b15dc2695924986372a27cd7d6c4e029c5efa", "name": "bash.yaml", "versionInfo": "ac7b15dc2695924986372a27cd7d6c4e029c5efa", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "INSTALL", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/chainguard-dev/stereo@ac7b15dc2695924986372a27cd7d6c4e029c5efa#bash.yaml", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Source-git.savannah.gnu.org-git-bash.git-bash-5.3-b8c60bc9ca365f8261fa97900b6fa939f6ebc303-0", "name": "git/bash", "versionInfo": "bash-5.3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "GPL-3.0-or-later", "downloadLocation": "https://tarballs.cgr.dev/g/0e7c34c3027d7f6da5723ac0c18a27c10a29ce56d560c36969b71020e9407623-b8c60bc9ca365f8261fa97900b6fa939f6ebc303.tar.gz", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "SOURCE", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:generic/git%2Fbash@bash-5.3?vcs_url=git%2Bhttps:%2F%2Fgit.savannah.gnu.org%2Fgit%2Fbash.git%40b8c60bc9ca365f8261fa97900b6fa939f6ebc303", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-bash-8fcfdb8c2df1d6c6", "name": "bash", "versionInfo": "5.3-r14", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "GPL-3.0-or-later", "description": "GNU bourne again shell", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/bash@5.3-r14?arch=aarch64\u0026origin=bash", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-bash", "name": "bash", "versionInfo": "5.3-r14", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-libstdcC43C43-16.2.0-r3", "name": "libstdc++", "versionInfo": "16.2.0-r3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "GPL-3.0-or-later WITH GCC-exception-3.1", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/libstdc%2B%2B@16.2.0-r3?arch=aarch64\u0026distro=wolfi", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-libstdc---d49b493ee2e3bbae", "name": "libstdc++", "versionInfo": "16.2.0-r3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "(GPL-3.0-or-later WITH GCC-exception-3.1)", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "SECURITY", "referenceLocator": "cpe:2.3:a:gnu:gcc:16.2.0:*:*:*:*:*:*:*", "referenceType": "cpe23Type" }, { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/libstdc%2B%2B@16.2.0-r3?arch=aarch64\u0026origin=gcc", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-libstdc--", "name": "libstdc++", "versionInfo": "16.2.0-r3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-zlib-1.3.2.1C95rc20260921-r2", "name": "zlib", "versionInfo": "1.3.2.1_rc20260921-r2", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MPL-2.0 AND MIT", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/zlib@1.3.2.1_rc20260921-r2?arch=aarch64\u0026distro=wolfi", "referenceType": "purl" }, { "referenceCategory": "SECURITY", "referenceLocator": "cpe:2.3:a:zlib:zlib:1.3.2.1_rc20260921:*:*:*:*:*:*:*", "referenceType": "cpe23Type" } ] }, { "SPDXID": "SPDXRef-Package-Melange-zlib.yaml-5aeb575ed7ca64fb21dfda042e170d08f1654bbc", "name": "zlib.yaml", "versionInfo": "5aeb575ed7ca64fb21dfda042e170d08f1654bbc", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "INSTALL", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/chainguard-dev/stereo@5aeb575ed7ca64fb21dfda042e170d08f1654bbc#zlib.yaml", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Source-github.com-madler-zlib-develop-767c4c947852e143f582c85f14cf573411df1b35-0", "name": "zlib", "versionInfo": "767c4c947852e143f582c85f14cf573411df1b35", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MPL-2.0 AND MIT", "downloadLocation": "https://github.com/madler/zlib/archive/767c4c947852e143f582c85f14cf573411df1b35.tar.gz", "originator": "Organization: Madler", "supplier": "Organization: Madler", "primaryPackagePurpose": "SOURCE", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/madler/zlib@767c4c947852e143f582c85f14cf573411df1b35", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-zlib-1dd8dbeab0faefff", "name": "zlib", "versionInfo": "1.3.2.1_rc20260921-r2", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "(MPL-2.0 AND MIT)", "description": "a library implementing the zlib compression algorithms", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "SECURITY", "referenceLocator": "cpe:2.3:a:zlib:zlib:1.3.2.1_rc20260921-r2:*:*:*:*:*:*:*", "referenceType": "cpe23Type" }, { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/zlib@1.3.2.1_rc20260921-r2?arch=aarch64\u0026origin=zlib", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-zlib", "name": "zlib", "versionInfo": "1.3.2.1_rc20260921-r2", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-libzstd1-1.5.7-r13", "name": "libzstd1", "versionInfo": "1.5.7-r13", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "BSD-2-Clause AND GPL-2.0-only", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/libzstd1@1.5.7-r13?arch=aarch64\u0026distro=wolfi", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Melange-zstd.yaml-0d1cb8462683e2c06d7591b8b4ad4d1f2797a0f7", "name": "zstd.yaml", "versionInfo": "0d1cb8462683e2c06d7591b8b4ad4d1f2797a0f7", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "INSTALL", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/chainguard-dev/stereo@0d1cb8462683e2c06d7591b8b4ad4d1f2797a0f7#zstd.yaml", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Source-github.com-facebook-zstd-v1.5.7-f8745da6ff1ad1e7bab384bd1f9d742439278e99-0", "name": "zstd", "versionInfo": "v1.5.7", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "BSD-2-Clause AND GPL-2.0-only", "downloadLocation": "https://github.com/facebook/zstd/archive/f8745da6ff1ad1e7bab384bd1f9d742439278e99.tar.gz", "originator": "Organization: Facebook", "supplier": "Organization: Facebook", "primaryPackagePurpose": "SOURCE", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/facebook/zstd@v1.5.7", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-libzstd1-cecd9c4f8a1f1ddf", "name": "libzstd1", "versionInfo": "1.5.7-r13", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "(BSD-2-Clause AND GPL-2.0-only)", "description": "libzstd runtime libraries", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/libzstd1@1.5.7-r13?arch=aarch64\u0026origin=zstd", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-libzstd1", "name": "libzstd1", "versionInfo": "1.5.7-r13", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-binutils-2.47-r3", "name": "binutils", "versionInfo": "2.47-r3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "GPL-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/binutils@2.47-r3?arch=aarch64\u0026distro=wolfi", "referenceType": "purl" }, { "referenceCategory": "SECURITY", "referenceLocator": "cpe:2.3:a:gnu:binutils:2.47:*:*:*:*:*:*:*", "referenceType": "cpe23Type" } ] }, { "SPDXID": "SPDXRef-Package-Melange-binutils.yaml-4d188060cbd00821a95f1ef60605da4817e781bb", "name": "binutils.yaml", "versionInfo": "4d188060cbd00821a95f1ef60605da4817e781bb", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "INSTALL", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/chainguard-dev/stereo@4d188060cbd00821a95f1ef60605da4817e781bb#binutils.yaml", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Source-gitlab.com-gnutools-binutils-gdb.git-binutils-2C9547-6ce87bbc521cf46eaee9a1f7ef61cee2cdfb3e32-0", "name": "gnutools/binutils-gdb", "versionInfo": "binutils-2_47", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "GPL-2.0", "downloadLocation": "https://tarballs.cgr.dev/g/17778ed923e473efcee78a06924800d851c2acb832e469ef63e7301bb6eb43c1-6ce87bbc521cf46eaee9a1f7ef61cee2cdfb3e32.tar.gz", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "SOURCE", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:generic/gnutools%2Fbinutils-gdb@binutils-2_47?vcs_url=git%2Bhttps:%2F%2Fgitlab.com%2Fgnutools%2Fbinutils-gdb.git%406ce87bbc521cf46eaee9a1f7ef61cee2cdfb3e32", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-binutils-1e8a1ecfca898ef1", "name": "binutils", "versionInfo": "2.47-r3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "GPL-2.0-only", "description": "GNU binutils", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "SECURITY", "referenceLocator": "cpe:2.3:a:gnu:binutils:2.47-r3:*:*:*:*:*:*:*", "referenceType": "cpe23Type" }, { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/binutils@2.47-r3?arch=aarch64\u0026origin=binutils", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-binutils", "name": "binutils", "versionInfo": "2.47-r3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-libxcrypt-4.5.2-r8", "name": "libxcrypt", "versionInfo": "4.5.2-r8", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "GPL-2.0-or-later AND LGPL-2.1-or-later", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/libxcrypt@4.5.2-r8?arch=aarch64\u0026distro=wolfi", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Melange-libxcrypt.yaml-b9898dbb7125f3678bc8c6cd9e7a43d9d9d2c518", "name": "libxcrypt.yaml", "versionInfo": "b9898dbb7125f3678bc8c6cd9e7a43d9d9d2c518", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "INSTALL", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/chainguard-dev/stereo@b9898dbb7125f3678bc8c6cd9e7a43d9d9d2c518#libxcrypt.yaml", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Source-github.com-besser82-libxcrypt-v4.5.2-db70b42bd7b2a5b00a8580c8dec0aa66791c950a-0", "name": "libxcrypt", "versionInfo": "v4.5.2", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "GPL-2.0-or-later AND LGPL-2.1-or-later", "downloadLocation": "https://github.com/besser82/libxcrypt/archive/db70b42bd7b2a5b00a8580c8dec0aa66791c950a.tar.gz", "originator": "Organization: Besser82", "supplier": "Organization: Besser82", "primaryPackagePurpose": "SOURCE", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/besser82/libxcrypt@v4.5.2", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-libxcrypt-673cf320fa080268", "name": "libxcrypt", "versionInfo": "4.5.2-r8", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "(GPL-2.0-or-later AND LGPL-2.1-or-later)", "description": "Modern library for one-way hashing of passwords", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/libxcrypt@4.5.2-r8?arch=aarch64\u0026origin=libxcrypt", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-libxcrypt", "name": "libxcrypt", "versionInfo": "4.5.2-r8", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-libxcrypt-dev-4.5.2-r8", "name": "libxcrypt-dev", "versionInfo": "4.5.2-r8", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "GPL-2.0-or-later AND LGPL-2.1-or-later", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/libxcrypt-dev@4.5.2-r8?arch=aarch64\u0026distro=wolfi", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-libxcrypt-dev-8c2338cb2aa23912", "name": "libxcrypt-dev", "versionInfo": "4.5.2-r8", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "(GPL-2.0-or-later AND LGPL-2.1-or-later)", "description": "libxcrypt dev", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/libxcrypt-dev@4.5.2-r8?arch=aarch64\u0026origin=libxcrypt", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-libxcrypt-dev", "name": "libxcrypt-dev", "versionInfo": "4.5.2-r8", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-linux-headers-7.3.3-r0", "name": "linux-headers", "versionInfo": "7.3.3-r0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "GPL-2.0-only WITH Linux-syscall-note", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/linux-headers@7.3.3-r0?arch=aarch64\u0026distro=wolfi", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Melange-linux-headers.yaml-eeddf20cbd03c0444c2f0ff756eaf232fd6e6954", "name": "linux-headers.yaml", "versionInfo": "eeddf20cbd03c0444c2f0ff756eaf232fd6e6954", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "INSTALL", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/chainguard-dev/stereo@eeddf20cbd03c0444c2f0ff756eaf232fd6e6954#linux-headers.yaml", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Source-github.com-gregkh-linux-v7.3.3-d50d994bffa3c7c6db2d8bc4c5f0c55e3f46b0cd-0", "name": "linux", "versionInfo": "v7.3.3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "GPL-2.0-only WITH Linux-syscall-note", "downloadLocation": "https://github.com/gregkh/linux/archive/d50d994bffa3c7c6db2d8bc4c5f0c55e3f46b0cd.tar.gz", "originator": "Organization: Gregkh", "supplier": "Organization: Gregkh", "primaryPackagePurpose": "SOURCE", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/gregkh/linux@v7.3.3", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-linux-headers-fff820186b196074", "name": "linux-headers", "versionInfo": "7.3.3-r0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "(GPL-2.0-only WITH Linux-syscall-note)", "description": "the Linux kernel headers (cross compilation)", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/linux-headers@7.3.3-r0?arch=aarch64\u0026origin=linux-headers", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-linux-headers", "name": "linux-headers", "versionInfo": "7.3.3-r0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-glibc-2.44-dev-2.44-r15", "name": "glibc-2.44-dev", "versionInfo": "2.44-r15", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "LGPL-2.1-or-later", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/glibc-2.44-dev@2.44-r15?arch=aarch64\u0026distro=wolfi", "referenceType": "purl" }, { "referenceCategory": "SECURITY", "referenceLocator": "cpe:2.3:a:gnu:glibc:2.44:*:*:*:*:*:*:*", "referenceType": "cpe23Type" } ] }, { "SPDXID": "SPDXRef-Package-apk-glibc-2.44-dev-f24deef626112c50", "name": "glibc-2.44-dev", "versionInfo": "2.44-r15", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "LGPL-2.1-or-later", "description": "GLIBC development headers", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "SECURITY", "referenceLocator": "cpe:2.3:a:gnu:glibc:2.44-r15:*:*:*:*:*:*:*", "referenceType": "cpe23Type" }, { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/glibc-2.44-dev@2.44-r15?arch=aarch64\u0026origin=glibc-2.44", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-glibc-2.44-dev", "name": "glibc-2.44-dev", "versionInfo": "2.44-r15", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-libquadmath-16.2.0-r3", "name": "libquadmath", "versionInfo": "16.2.0-r3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "GPL-3.0-or-later WITH GCC-exception-3.1", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/libquadmath@16.2.0-r3?arch=aarch64\u0026distro=wolfi", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-libquadmath-eced2a8c338f6266", "name": "libquadmath", "versionInfo": "16.2.0-r3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "(GPL-3.0-or-later WITH GCC-exception-3.1)", "description": "128-bit math library provided by GCC", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "SECURITY", "referenceLocator": "cpe:2.3:a:gnu:gcc:16.2.0:*:*:*:*:*:*:*", "referenceType": "cpe23Type" }, { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/libquadmath@16.2.0-r3?arch=aarch64\u0026origin=gcc", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-libquadmath", "name": "libquadmath", "versionInfo": "16.2.0-r3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-libstdcC43C43-dev-16.2.0-r3", "name": "libstdc++-dev", "versionInfo": "16.2.0-r3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "GPL-3.0-or-later WITH GCC-exception-3.1", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/libstdc%2B%2B-dev@16.2.0-r3?arch=aarch64\u0026distro=wolfi", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-libstdc---dev-9471f042b8187882", "name": "libstdc++-dev", "versionInfo": "16.2.0-r3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "(GPL-3.0-or-later WITH GCC-exception-3.1)", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "SECURITY", "referenceLocator": "cpe:2.3:a:gnu:gcc:16.2.0:*:*:*:*:*:*:*", "referenceType": "cpe23Type" }, { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/libstdc%2B%2B-dev@16.2.0-r3?arch=aarch64\u0026origin=gcc", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-libstdc---dev", "name": "libstdc++-dev", "versionInfo": "16.2.0-r3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-openssf-compiler-options-20250904-r12", "name": "openssf-compiler-options", "versionInfo": "20250904-r12", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "CC-BY-4.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/openssf-compiler-options@20250904-r12?arch=aarch64\u0026distro=wolfi", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Melange-openssf-compiler-options.yaml-4d188060cbd00821a95f1ef60605da4817e781bb", "name": "openssf-compiler-options.yaml", "versionInfo": "4d188060cbd00821a95f1ef60605da4817e781bb", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "INSTALL", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/chainguard-dev/stereo@4d188060cbd00821a95f1ef60605da4817e781bb#openssf-compiler-options.yaml", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-openssf-compiler-options-210ef94615c3fa51", "name": "openssf-compiler-options", "versionInfo": "20250904-r12", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "CC-BY-4.0", "description": "Compiler Options Hardening Guide for C and C++", "downloadLocation": "https://best.openssf.org/Compiler-Hardening-Guides/Compiler-Options-Hardening-Guide-for-C-and-C++.html", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/openssf-compiler-options@20250904-r12?arch=aarch64\u0026origin=openssf-compiler-options", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-openssf-compiler-options", "name": "openssf-compiler-options", "versionInfo": "20250904-r12", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-posix-cc-wrappers-2-r10", "name": "posix-cc-wrappers", "versionInfo": "2-r10", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/posix-cc-wrappers@2-r10?arch=aarch64\u0026distro=wolfi", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Melange-posix-cc-wrappers.yaml-2337ebe7af4495f2fe254da240c747c753c2f87c", "name": "posix-cc-wrappers.yaml", "versionInfo": "2337ebe7af4495f2fe254da240c747c753c2f87c", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "INSTALL", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/chainguard-dev/stereo@2337ebe7af4495f2fe254da240c747c753c2f87c#posix-cc-wrappers.yaml", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-posix-cc-wrappers-632bd7516159d11f", "name": "posix-cc-wrappers", "versionInfo": "2-r10", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "description": "Wrappers around GCC and Clang for POSIX conformance", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/posix-cc-wrappers@2-r10?arch=aarch64\u0026origin=posix-cc-wrappers", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-posix-cc-wrappers", "name": "posix-cc-wrappers", "versionInfo": "2-r10", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-libatomic-16.2.0-r3", "name": "libatomic", "versionInfo": "16.2.0-r3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "GPL-3.0-or-later WITH GCC-exception-3.1", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/libatomic@16.2.0-r3?arch=aarch64\u0026distro=wolfi", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-libatomic-e813bd19ce98ec2c", "name": "libatomic", "versionInfo": "16.2.0-r3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "(GPL-3.0-or-later WITH GCC-exception-3.1)", "description": "GCC atomic library", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "SECURITY", "referenceLocator": "cpe:2.3:a:gnu:gcc:16.2.0:*:*:*:*:*:*:*", "referenceType": "cpe23Type" }, { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/libatomic@16.2.0-r3?arch=aarch64\u0026origin=gcc", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-libatomic", "name": "libatomic", "versionInfo": "16.2.0-r3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-gmp-6.3.0-r12", "name": "gmp", "versionInfo": "6.3.0-r12", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "LGPL-3.0-or-later OR GPL-2.0-or-later", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/gmp@6.3.0-r12?arch=aarch64\u0026distro=wolfi", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Melange-gmp.yaml-443eb31899638f2f252b0e587db298058036ba64", "name": "gmp.yaml", "versionInfo": "443eb31899638f2f252b0e587db298058036ba64", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "INSTALL", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/chainguard-dev/stereo@443eb31899638f2f252b0e587db298058036ba64#gmp.yaml", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Source-gmp-6.3.0-0", "name": "gmp", "versionInfo": "6.3.0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "https://ftp.gnu.org/gnu/gmp/gmp-6.3.0.tar.xz", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "SOURCE", "checksums": [ { "algorithm": "SHA256", "checksumValue": "a3c2b80201b89e68616f4ad30bc66aee4927c3ce50e33929ca819d5c43538898" } ], "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:generic/gmp@6.3.0?checksum=sha256:a3c2b80201b89e68616f4ad30bc66aee4927c3ce50e33929ca819d5c43538898\u0026download_url=https:%2F%2Fftp.gnu.org%2Fgnu%2Fgmp%2Fgmp-6.3.0.tar.xz", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-gmp-d6ad0f29a7de0f81", "name": "gmp", "versionInfo": "6.3.0-r12", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "(LGPL-3.0-or-later OR GPL-2.0-or-later)", "description": "a library for arbitrary precision arithmetic", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/gmp@6.3.0-r12?arch=aarch64\u0026origin=gmp", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-gmp", "name": "gmp", "versionInfo": "6.3.0-r12", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-libgomp-16.2.0-r3", "name": "libgomp", "versionInfo": "16.2.0-r3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "GPL-3.0-or-later WITH GCC-exception-3.1", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/libgomp@16.2.0-r3?arch=aarch64\u0026distro=wolfi", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-libgomp-125fda46fec4bf7c", "name": "libgomp", "versionInfo": "16.2.0-r3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "(GPL-3.0-or-later WITH GCC-exception-3.1)", "description": "GNU parallel programming library", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "SECURITY", "referenceLocator": "cpe:2.3:a:gnu:gcc:16.2.0:*:*:*:*:*:*:*", "referenceType": "cpe23Type" }, { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/libgomp@16.2.0-r3?arch=aarch64\u0026origin=gcc", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-libgomp", "name": "libgomp", "versionInfo": "16.2.0-r3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-isl-0.28-r6", "name": "isl", "versionInfo": "0.28-r6", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/isl@0.28-r6?arch=aarch64\u0026distro=wolfi", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Melange-isl.yaml-443eb31899638f2f252b0e587db298058036ba64", "name": "isl.yaml", "versionInfo": "443eb31899638f2f252b0e587db298058036ba64", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "INSTALL", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/chainguard-dev/stereo@443eb31899638f2f252b0e587db298058036ba64#isl.yaml", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Source-repo.or.cz-isl.git-isl-0.28-6c2b19a0405759f4d31bf48b73492be4a2b1d813-0", "name": "isl", "versionInfo": "isl-0.28", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "downloadLocation": "https://tarballs.cgr.dev/i/8732b02bd9fa0d40b2a4149d543eee9ceb5b0634050f6313b8a5b953dcdc54c9-6c2b19a0405759f4d31bf48b73492be4a2b1d813.tar.gz", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "SOURCE", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:generic/isl@isl-0.28?vcs_url=git%2Bhttps:%2F%2Frepo.or.cz%2Fisl.git%406c2b19a0405759f4d31bf48b73492be4a2b1d813", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-isl-8d545a41d55d54ef", "name": "isl", "versionInfo": "0.28-r6", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "description": "an integer set library for the polyhedral model", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/isl@0.28-r6?arch=aarch64\u0026origin=isl", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-isl", "name": "isl", "versionInfo": "0.28-r6", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-mpfr-4.2.2-r5", "name": "mpfr", "versionInfo": "4.2.2-r5", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "LGPL-3.0-or-later", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/mpfr@4.2.2-r5?arch=aarch64\u0026distro=wolfi", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Melange-mpfr.yaml-491b184c82ef2868d73a46a98997db789342ff15", "name": "mpfr.yaml", "versionInfo": "491b184c82ef2868d73a46a98997db789342ff15", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "INSTALL", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/chainguard-dev/stereo@491b184c82ef2868d73a46a98997db789342ff15#mpfr.yaml", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Source-gitlab.inria.fr-mpfr-mpfr.git-4.2.2-eaa57b856d814af32f97d5e5eb129fb986235323-0", "name": "mpfr/mpfr", "versionInfo": "4.2.2", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "LGPL-3.0-or-later", "downloadLocation": "https://tarballs.cgr.dev/m/72f92a77f14c1d6bab90d8ccf97b5b4f95edc8da48ac5db7fcef83176097d756-eaa57b856d814af32f97d5e5eb129fb986235323.tar.gz", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "SOURCE", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:generic/mpfr%2Fmpfr@4.2.2?vcs_url=git%2Bhttps:%2F%2Fgitlab.inria.fr%2Fmpfr%2Fmpfr.git%40eaa57b856d814af32f97d5e5eb129fb986235323", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-mpfr-c34be4c04688944b", "name": "mpfr", "versionInfo": "4.2.2-r5", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "LGPL-3.0-or-later", "description": "multiple-precision floating-point library", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/mpfr@4.2.2-r5?arch=aarch64\u0026origin=mpfr", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-mpfr", "name": "mpfr", "versionInfo": "4.2.2-r5", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-mpc-1.4.1-r3", "name": "mpc", "versionInfo": "1.4.1-r3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "LGPL-3.0-or-later", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/mpc@1.4.1-r3?arch=aarch64\u0026distro=wolfi", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Melange-mpc.yaml-491b184c82ef2868d73a46a98997db789342ff15", "name": "mpc.yaml", "versionInfo": "491b184c82ef2868d73a46a98997db789342ff15", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "INSTALL", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/chainguard-dev/stereo@491b184c82ef2868d73a46a98997db789342ff15#mpc.yaml", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Source-gitlab.inria.fr-mpc-mpc.git-1.4.1-532a18ae8222f928c58f7ffd1b4f0122062172bd-0", "name": "mpc/mpc", "versionInfo": "1.4.1", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "LGPL-3.0-or-later", "downloadLocation": "https://tarballs.cgr.dev/m/c0ad7a07c1e591222c3671fc81ecf35e2d040219fdd07e0f939196a38dc98d5e-532a18ae8222f928c58f7ffd1b4f0122062172bd.tar.gz", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "SOURCE", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:generic/mpc%2Fmpc@1.4.1?vcs_url=git%2Bhttps:%2F%2Fgitlab.inria.fr%2Fmpc%2Fmpc.git%40532a18ae8222f928c58f7ffd1b4f0122062172bd", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-mpc-930fd1d45bf5075e", "name": "mpc", "versionInfo": "1.4.1-r3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "LGPL-3.0-or-later", "description": "multiple-precision C library", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/mpc@1.4.1-r3?arch=aarch64\u0026origin=mpc", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-mpc", "name": "mpc", "versionInfo": "1.4.1-r3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-gcc-16.2.0-r3", "name": "gcc", "versionInfo": "16.2.0-r3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "GPL-3.0-or-later WITH GCC-exception-3.1", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/gcc@16.2.0-r3?arch=aarch64\u0026distro=wolfi", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-gcc-0e6e3694b0231f23", "name": "gcc", "versionInfo": "16.2.0-r3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "(GPL-3.0-or-later WITH GCC-exception-3.1)", "description": "the GNU compiler collection", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "SECURITY", "referenceLocator": "cpe:2.3:a:gnu:gcc:16.2.0:*:*:*:*:*:*:*", "referenceType": "cpe23Type" }, { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/gcc@16.2.0-r3?arch=aarch64\u0026origin=gcc", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-gcc", "name": "gcc", "versionInfo": "16.2.0-r3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-make-4.4.1-r15", "name": "make", "versionInfo": "4.4.1-r15", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "GPL-3.0-or-later", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/make@4.4.1-r15?arch=aarch64\u0026distro=wolfi", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Melange-make.yaml-a54c6ffd90cbe4bb3ea62488789234b189e71bd5", "name": "make.yaml", "versionInfo": "a54c6ffd90cbe4bb3ea62488789234b189e71bd5", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "INSTALL", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/chainguard-dev/stereo@a54c6ffd90cbe4bb3ea62488789234b189e71bd5#make.yaml", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Source-git.savannah.gnu.org-git-make.git-4.4.1-d66a65ad5a0e31b287f53930b0f09e31801f1613-0", "name": "git/make", "versionInfo": "4.4.1", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "GPL-3.0-or-later", "downloadLocation": "https://tarballs.cgr.dev/g/8614f9e29422f1dfe08dfec0a56b1ac7f4cdce15fd17f169e95128edd68e6ba6-d66a65ad5a0e31b287f53930b0f09e31801f1613.tar.gz", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "SOURCE", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:generic/git%2Fmake@4.4.1?vcs_url=git%2Bhttps:%2F%2Fgit.savannah.gnu.org%2Fgit%2Fmake.git%40d66a65ad5a0e31b287f53930b0f09e31801f1613", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-make-5690278a28233d1e", "name": "make", "versionInfo": "4.4.1-r15", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "GPL-3.0-or-later", "description": "GNU make", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/make@4.4.1-r15?arch=aarch64\u0026origin=make", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-make", "name": "make", "versionInfo": "4.4.1-r15", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-pkgconf-3.0.10-r2", "name": "pkgconf", "versionInfo": "3.0.10-r2", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "ISC", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/pkgconf@3.0.10-r2?arch=aarch64\u0026distro=wolfi", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Melange-pkgconf.yaml-40e94215f5dcd578d6e737bd1b126cdbb5acf9cb", "name": "pkgconf.yaml", "versionInfo": "40e94215f5dcd578d6e737bd1b126cdbb5acf9cb", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "INSTALL", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/chainguard-dev/stereo@40e94215f5dcd578d6e737bd1b126cdbb5acf9cb#pkgconf.yaml", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Source-github.com-pkgconf-pkgconf-pkgconf-3.0.10-511e6e6b8c82367e75d02edb56ad98da766e06b6-0", "name": "pkgconf", "versionInfo": "pkgconf-3.0.10", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "ISC", "downloadLocation": "https://github.com/pkgconf/pkgconf/archive/511e6e6b8c82367e75d02edb56ad98da766e06b6.tar.gz", "originator": "Organization: Pkgconf", "supplier": "Organization: Pkgconf", "primaryPackagePurpose": "SOURCE", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/pkgconf/pkgconf@pkgconf-3.0.10", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-pkgconf-6f387a3bcd6a4956", "name": "pkgconf", "versionInfo": "3.0.10-r2", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "ISC", "description": "An implementation of pkg-config", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/pkgconf@3.0.10-r2?arch=aarch64\u0026origin=pkgconf", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-pkgconf", "name": "pkgconf", "versionInfo": "3.0.10-r2", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-build-base-1-r10", "name": "build-base", "versionInfo": "1-r10", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/build-base@1-r10?arch=aarch64\u0026distro=wolfi", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Melange-build-base.yaml-fc2e1e90888cd6bc7249d14081f49118edd5dab7", "name": "build-base.yaml", "versionInfo": "fc2e1e90888cd6bc7249d14081f49118edd5dab7", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "INSTALL", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/chainguard-dev/stereo@fc2e1e90888cd6bc7249d14081f49118edd5dab7#build-base.yaml", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-build-base-156943bbea3d824c", "name": "build-base", "versionInfo": "1-r10", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "description": "virtual package for builds", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/build-base@1-r10?arch=aarch64\u0026origin=build-base", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-build-base", "name": "build-base", "versionInfo": "1-r10", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-libcrypt1-2.44-2.44-r15", "name": "libcrypt1-2.44", "versionInfo": "2.44-r15", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "LGPL-2.1-or-later", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/libcrypt1-2.44@2.44-r15?arch=aarch64\u0026distro=wolfi", "referenceType": "purl" }, { "referenceCategory": "SECURITY", "referenceLocator": "cpe:2.3:a:gnu:glibc:2.44:*:*:*:*:*:*:*", "referenceType": "cpe23Type" } ] }, { "SPDXID": "SPDXRef-Package-apk-libcrypt1-2.44-0f2dc656dd485ddc", "name": "libcrypt1-2.44", "versionInfo": "2.44-r15", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "LGPL-2.1-or-later", "description": "Password hashing library included with glibc", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "SECURITY", "referenceLocator": "cpe:2.3:a:gnu:glibc:2.44-r15:*:*:*:*:*:*:*", "referenceType": "cpe23Type" }, { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/libcrypt1-2.44@2.44-r15?arch=aarch64\u0026origin=glibc-2.44", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-libcrypt1-2.44", "name": "libcrypt1-2.44", "versionInfo": "2.44-r15", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-busybox-1.38.0-r3", "name": "busybox", "versionInfo": "1.38.0-r3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "GPL-2.0-only", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/busybox@1.38.0-r3?arch=aarch64\u0026distro=wolfi", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Melange-busybox.yaml-59d45eb49286129d8d21b2469befa3b55be4719b", "name": "busybox.yaml", "versionInfo": "59d45eb49286129d8d21b2469befa3b55be4719b", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "INSTALL", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/chainguard-dev/stereo@59d45eb49286129d8d21b2469befa3b55be4719b#busybox.yaml", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Source-github.com-vda-linux-busyboxC95mirror-1C9538C950-fc71374dfccd46448c62947269a35f1420d7ee28-0", "name": "busybox_mirror", "versionInfo": "1_38_0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "GPL-2.0-only", "downloadLocation": "https://github.com/vda-linux/busybox_mirror/archive/fc71374dfccd46448c62947269a35f1420d7ee28.tar.gz", "originator": "Organization: Vda-Linux", "supplier": "Organization: Vda-Linux", "primaryPackagePurpose": "SOURCE", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/vda-linux/busybox_mirror@1_38_0", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-busybox-3debcaeac335b503", "name": "busybox", "versionInfo": "1.38.0-r3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "GPL-2.0-only", "description": "swiss-army knife for embedded systems", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/busybox@1.38.0-r3?arch=aarch64\u0026origin=busybox", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-busybox", "name": "busybox", "versionInfo": "1.38.0-r3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-openssl-provider-legacy-allowed-4.1.0-r0", "name": "openssl-provider-legacy-allowed", "versionInfo": "4.1.0-r0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/openssl-provider-legacy-allowed@4.1.0-r0?arch=aarch64\u0026distro=wolfi", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Melange-openssl-provider-legacy-allowed.yaml-aeae4801330be6fd269d5ed5640dc37b58ccab09", "name": "openssl-provider-legacy-allowed.yaml", "versionInfo": "aeae4801330be6fd269d5ed5640dc37b58ccab09", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "INSTALL", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/chainguard-dev/stereo@aeae4801330be6fd269d5ed5640dc37b58ccab09#openssl-provider-legacy-allowed.yaml", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Source-github.com-openssl-openssl-openssl-4.1.0-2f4e3a5fec05394068cfa7379890ab552483a8a6-0", "name": "openssl", "versionInfo": "openssl-4.1.0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "https://github.com/openssl/openssl/archive/2f4e3a5fec05394068cfa7379890ab552483a8a6.tar.gz", "originator": "Organization: Openssl", "supplier": "Organization: Openssl", "primaryPackagePurpose": "SOURCE", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/openssl/openssl@openssl-4.1.0", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-openssl-provider-legacy-allowed-db13521aee4e9c16", "name": "openssl-provider-legacy-allowed", "versionInfo": "4.1.0-r0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "description": "Chainguard Legacy Allowed FIPS 140-3 I.G. 2.4.A Provider", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/openssl-provider-legacy-allowed@4.1.0-r0?arch=aarch64\u0026origin=openssl-provider-legacy-allowed", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-openssl-provider-legacy-allowed", "name": "openssl-provider-legacy-allowed", "versionInfo": "4.1.0-r0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-libbrotlicommon1-1.2.1-r3", "name": "libbrotlicommon1", "versionInfo": "1.2.1-r3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/libbrotlicommon1@1.2.1-r3?arch=aarch64\u0026distro=wolfi", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Melange-brotli.yaml-f5ef816d1cb2bd0e165a402c4e8a4c4622464bf3", "name": "brotli.yaml", "versionInfo": "f5ef816d1cb2bd0e165a402c4e8a4c4622464bf3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "INSTALL", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/chainguard-dev/stereo@f5ef816d1cb2bd0e165a402c4e8a4c4622464bf3#brotli.yaml", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Source-github.com-google-brotli.git-v1.2.1-db24a98aed38a16de78cc05ca15cdd8dc2a0d92d-0", "name": "brotli", "versionInfo": "v1.2.1", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "downloadLocation": "https://github.com/google/brotli/archive/db24a98aed38a16de78cc05ca15cdd8dc2a0d92d.tar.gz", "originator": "Organization: Google", "supplier": "Organization: Google", "primaryPackagePurpose": "SOURCE", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/google/brotli@v1.2.1", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-libbrotlicommon1-4cfba742c9bc8e0d", "name": "libbrotlicommon1", "versionInfo": "1.2.1-r3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/libbrotlicommon1@1.2.1-r3?arch=aarch64\u0026origin=brotli", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-libbrotlicommon1", "name": "libbrotlicommon1", "versionInfo": "1.2.1-r3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-libbrotlidec1-1.2.1-r3", "name": "libbrotlidec1", "versionInfo": "1.2.1-r3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/libbrotlidec1@1.2.1-r3?arch=aarch64\u0026distro=wolfi", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-libbrotlidec1-7682b7a41fbe0c53", "name": "libbrotlidec1", "versionInfo": "1.2.1-r3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/libbrotlidec1@1.2.1-r3?arch=aarch64\u0026origin=brotli", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-libbrotlidec1", "name": "libbrotlidec1", "versionInfo": "1.2.1-r3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-libbrotlienc1-1.2.1-r3", "name": "libbrotlienc1", "versionInfo": "1.2.1-r3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/libbrotlienc1@1.2.1-r3?arch=aarch64\u0026distro=wolfi", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-libbrotlienc1-9032cd875fed45d9", "name": "libbrotlienc1", "versionInfo": "1.2.1-r3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/libbrotlienc1@1.2.1-r3?arch=aarch64\u0026origin=brotli", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-libbrotlienc1", "name": "libbrotlienc1", "versionInfo": "1.2.1-r3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-openssl-4.0-libcrypto-4.0.3-r8", "name": "openssl-4.0-libcrypto", "versionInfo": "4.0.3-r8", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/openssl-4.0-libcrypto@4.0.3-r8?arch=aarch64\u0026distro=wolfi", "referenceType": "purl" }, { "referenceCategory": "SECURITY", "referenceLocator": "cpe:2.3:a:openssl:openssl:4.0.3:*:*:*:*:*:*:*", "referenceType": "cpe23Type" } ] }, { "SPDXID": "SPDXRef-Package-Melange-openssl-4.0.yaml-53fb2f6751f832fa61ddba06cb8a40dbba5f409f", "name": "openssl-4.0.yaml", "versionInfo": "53fb2f6751f832fa61ddba06cb8a40dbba5f409f", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "INSTALL", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/chainguard-dev/stereo@53fb2f6751f832fa61ddba06cb8a40dbba5f409f#openssl-4.0.yaml", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Source-github.com-openssl-openssl-openssl-4.0.3-af1775b60dfa141a4ad762585052cabeb9f37e9e-0", "name": "openssl", "versionInfo": "openssl-4.0.3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "https://github.com/openssl/openssl/archive/af1775b60dfa141a4ad762585052cabeb9f37e9e.tar.gz", "originator": "Organization: Openssl", "supplier": "Organization: Openssl", "primaryPackagePurpose": "SOURCE", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/openssl/openssl@openssl-4.0.3", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-openssl-4.0-libcrypto-12ff2dbbb7bfc81c", "name": "openssl-4.0-libcrypto", "versionInfo": "4.0.3-r8", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "description": "OpenSSL libcrypto library", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "SECURITY", "referenceLocator": "cpe:2.3:a:openssl:openssl:4.0.3-r8:*:*:*:*:*:*:*", "referenceType": "cpe23Type" }, { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/openssl-4.0-libcrypto@4.0.3-r8?arch=aarch64\u0026origin=openssl-4.0", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-openssl-4.0-libcrypto", "name": "openssl-4.0-libcrypto", "versionInfo": "4.0.3-r8", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-gdbm-1.26-r9", "name": "gdbm", "versionInfo": "1.26-r9", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "GPL-3.0-or-later", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/gdbm@1.26-r9?arch=aarch64\u0026distro=wolfi", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Melange-gdbm.yaml-443eb31899638f2f252b0e587db298058036ba64", "name": "gdbm.yaml", "versionInfo": "443eb31899638f2f252b0e587db298058036ba64", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "INSTALL", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/chainguard-dev/stereo@443eb31899638f2f252b0e587db298058036ba64#gdbm.yaml", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Source-git.savannah.gnu.org-git-gdbm.git-v1.26-8ca8f03ab6cc125139a395ec2d522aebb15f8060-0", "name": "git/gdbm", "versionInfo": "v1.26", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "GPL-3.0-or-later", "downloadLocation": "https://tarballs.cgr.dev/g/42740bd9e1a78209c3c68f439ab4397c34f0ed77c165a024d710bdd48e76d1df-8ca8f03ab6cc125139a395ec2d522aebb15f8060.tar.gz", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "SOURCE", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:generic/git%2Fgdbm@v1.26?vcs_url=git%2Bhttps:%2F%2Fgit.savannah.gnu.org%2Fgit%2Fgdbm.git%408ca8f03ab6cc125139a395ec2d522aebb15f8060", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-gdbm-7c71982fcefc1584", "name": "gdbm", "versionInfo": "1.26-r9", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "GPL-3.0-or-later", "description": "GNU dbm is a set of database routines which use extensible hashing", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/gdbm@1.26-r9?arch=aarch64\u0026origin=gdbm", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-gdbm", "name": "gdbm", "versionInfo": "1.26-r9", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-lmdb-0.9.35-r3", "name": "lmdb", "versionInfo": "0.9.35-r3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "OLDAP-2.8", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/lmdb@0.9.35-r3?arch=aarch64\u0026distro=wolfi", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Melange-lmdb.yaml-a4a523651db588c0ec27f7880438828e0eefec5a", "name": "lmdb.yaml", "versionInfo": "a4a523651db588c0ec27f7880438828e0eefec5a", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "INSTALL", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/chainguard-dev/stereo@a4a523651db588c0ec27f7880438828e0eefec5a#lmdb.yaml", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Source-github.com-LMDB-lmdb.git-LMDBC950.9.35-69087ced3cb6082f7dcfb4fc2dcaa3b68a7e2e8c-0", "name": "lmdb", "versionInfo": "LMDB_0.9.35", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "OLDAP-2.8", "downloadLocation": "https://github.com/LMDB/lmdb/archive/69087ced3cb6082f7dcfb4fc2dcaa3b68a7e2e8c.tar.gz", "originator": "Organization: Lmdb", "supplier": "Organization: Lmdb", "primaryPackagePurpose": "SOURCE", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/lmdb/lmdb@LMDB_0.9.35", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-lmdb-6e9b5be743f2a982", "name": "lmdb", "versionInfo": "0.9.35-r3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "OLDAP-2.8", "description": "Lightning Memory-Mapped Database", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/lmdb@0.9.35-r3?arch=aarch64\u0026origin=lmdb", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-lmdb", "name": "lmdb", "versionInfo": "0.9.35-r3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-readline-8.3-r3", "name": "readline", "versionInfo": "8.3-r3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "GPL-3.0-or-later", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/readline@8.3-r3?arch=aarch64\u0026distro=wolfi", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Melange-readline.yaml-20a5359ac0a7a6aca23efa343f0f29c8d3ea1453", "name": "readline.yaml", "versionInfo": "20a5359ac0a7a6aca23efa343f0f29c8d3ea1453", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "INSTALL", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/chainguard-dev/stereo@20a5359ac0a7a6aca23efa343f0f29c8d3ea1453#readline.yaml", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Source-git.savannah.gnu.org-git-readline.git-readline-8.3-447b8290b3e2e2d117dc8e9cdb83b0dc6448a638-0", "name": "git/readline", "versionInfo": "readline-8.3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "GPL-3.0-or-later", "downloadLocation": "https://tarballs.cgr.dev/g/ca1544b7a4361c29393002e6b6d7b40cf760179801b69a5c375d2d2ed53e109a-447b8290b3e2e2d117dc8e9cdb83b0dc6448a638.tar.gz", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "SOURCE", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:generic/git%2Freadline@readline-8.3?vcs_url=git%2Bhttps:%2F%2Fgit.savannah.gnu.org%2Fgit%2Freadline.git%40447b8290b3e2e2d117dc8e9cdb83b0dc6448a638", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-readline-ce2ac74b9aec712c", "name": "readline", "versionInfo": "8.3-r3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "GPL-3.0-or-later", "description": "GNU readline library", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/readline@8.3-r3?arch=aarch64\u0026origin=readline", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-readline", "name": "readline", "versionInfo": "8.3-r3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-sqlite-libs-3.54.1-r0", "name": "sqlite-libs", "versionInfo": "3.54.1-r0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "blessing", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/sqlite-libs@3.54.1-r0?arch=aarch64\u0026distro=wolfi", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Melange-sqlite.yaml-b0ca8c95606371be2557980059c10b34df30fa9f", "name": "sqlite.yaml", "versionInfo": "b0ca8c95606371be2557980059c10b34df30fa9f", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "INSTALL", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/chainguard-dev/stereo@b0ca8c95606371be2557980059c10b34df30fa9f#sqlite.yaml", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Source-sqlite-3.54.1-0", "name": "sqlite", "versionInfo": "3.54.1", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "https://www.sqlite.org/2026/sqlite-src-3540100.zip", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "SOURCE", "checksums": [ { "algorithm": "SHA256", "checksumValue": "387e7f6cad4797b17848c07d453dc6606917bb356a6cfe5a3abafd38c240c71b" } ], "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:generic/sqlite@3.54.1?checksum=sha256:387e7f6cad4797b17848c07d453dc6606917bb356a6cfe5a3abafd38c240c71b\u0026download_url=https:%2F%2Fwww.sqlite.org%2F2026%2Fsqlite-src-3540100.zip", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-sqlite-libs-5fc3c1d467f94c6d", "name": "sqlite-libs", "versionInfo": "3.54.1-r0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "blessing", "description": "sqlite library", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/sqlite-libs@3.54.1-r0?arch=aarch64\u0026origin=sqlite", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-sqlite-libs", "name": "sqlite-libs", "versionInfo": "3.54.1-r0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-heimdal-libs-7.8.0-r55", "name": "heimdal-libs", "versionInfo": "7.8.0-r55", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "BSD-3-Clause", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/heimdal-libs@7.8.0-r55?arch=aarch64\u0026distro=wolfi", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Melange-heimdal.yaml-98d0e0fa47c531020de219448a43d120a8c0360a", "name": "heimdal.yaml", "versionInfo": "98d0e0fa47c531020de219448a43d120a8c0360a", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "INSTALL", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/chainguard-dev/stereo@98d0e0fa47c531020de219448a43d120a8c0360a#heimdal.yaml", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Source-github.com-heimdal-heimdal-heimdal-7.8.0-a6cf94577c0d1e5bca5304342e4ddffb18255afe-0", "name": "heimdal", "versionInfo": "heimdal-7.8.0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "BSD-3-Clause", "downloadLocation": "https://github.com/heimdal/heimdal/archive/a6cf94577c0d1e5bca5304342e4ddffb18255afe.tar.gz", "originator": "Organization: Heimdal", "supplier": "Organization: Heimdal", "primaryPackagePurpose": "SOURCE", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/heimdal/heimdal@heimdal-7.8.0", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-heimdal-libs-6466eb5bb4aa80c4", "name": "heimdal-libs", "versionInfo": "7.8.0-r55", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "BSD-3-Clause", "description": "libraries shipped by heimdal", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/heimdal-libs@7.8.0-r55?arch=aarch64\u0026origin=heimdal", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-heimdal-libs", "name": "heimdal-libs", "versionInfo": "7.8.0-r55", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-cyrus-sasl-heimdal-libs-2.1.28-r58", "name": "cyrus-sasl-heimdal-libs", "versionInfo": "2.1.28-r58", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "BSD-3-Clause", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/cyrus-sasl-heimdal-libs@2.1.28-r58?arch=aarch64\u0026distro=wolfi", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Melange-cyrus-sasl-heimdal.yaml-6a2a53d0046e82dc1f45ac4a9c9593d8d91aaa78", "name": "cyrus-sasl-heimdal.yaml", "versionInfo": "6a2a53d0046e82dc1f45ac4a9c9593d8d91aaa78", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "INSTALL", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/chainguard-dev/stereo@6a2a53d0046e82dc1f45ac4a9c9593d8d91aaa78#cyrus-sasl-heimdal.yaml", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Source-github.com-cyrusimap-cyrus-sasl.git-cyrus-sasl-2.1.28-7a6b45b177070198fed0682bea5fa87c18abb084-0", "name": "cyrus-sasl", "versionInfo": "cyrus-sasl-2.1.28", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "BSD-3-Clause", "downloadLocation": "https://github.com/cyrusimap/cyrus-sasl/archive/7a6b45b177070198fed0682bea5fa87c18abb084.tar.gz", "originator": "Organization: Cyrusimap", "supplier": "Organization: Cyrusimap", "primaryPackagePurpose": "SOURCE", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/cyrusimap/cyrus-sasl@cyrus-sasl-2.1.28", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-cyrus-sasl-heimdal-libs-fb4ec8f36333762d", "name": "cyrus-sasl-heimdal-libs", "versionInfo": "2.1.28-r58", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "BSD-3-Clause", "description": "Shared libraries for cyrus-sasl-heimdal", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/cyrus-sasl-heimdal-libs@2.1.28-r58?arch=aarch64\u0026origin=cyrus-sasl-heimdal", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-cyrus-sasl-heimdal-libs", "name": "cyrus-sasl-heimdal-libs", "versionInfo": "2.1.28-r58", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-krb5-conf-1.0-r10", "name": "krb5-conf", "versionInfo": "1.0-r10", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/krb5-conf@1.0-r10?arch=aarch64\u0026distro=wolfi", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Melange-krb5-conf.yaml-f0f4cc5b0d900deaf94dfdcd841e289db97111e1", "name": "krb5-conf.yaml", "versionInfo": "f0f4cc5b0d900deaf94dfdcd841e289db97111e1", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "INSTALL", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/chainguard-dev/stereo@f0f4cc5b0d900deaf94dfdcd841e289db97111e1#krb5-conf.yaml", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-krb5-conf-b4e1ca5d34e15b9e", "name": "krb5-conf", "versionInfo": "1.0-r10", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "description": "Shared krb5.conf for both MIT krb5 and heimdal", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/krb5-conf@1.0-r10?arch=aarch64\u0026origin=krb5-conf", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-krb5-conf", "name": "krb5-conf", "versionInfo": "1.0-r10", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-libcomC95err-1.47.4-r5", "name": "libcom_err", "versionInfo": "1.47.4-r5", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "GPL-2.0-or-later AND LGPL-2.0-or-later AND BSD-3-Clause AND MIT", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/libcom_err@1.47.4-r5?arch=aarch64\u0026distro=wolfi", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Melange-e2fsprogs.yaml-b89fefe984e6541788116bd15d4f8dce3dc021a9", "name": "e2fsprogs.yaml", "versionInfo": "b89fefe984e6541788116bd15d4f8dce3dc021a9", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "INSTALL", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/chainguard-dev/stereo@b89fefe984e6541788116bd15d4f8dce3dc021a9#e2fsprogs.yaml", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Source-github.com-tytso-e2fsprogs-v1.47.4-7ee1d505ef3b37831215f490411f346fe57e9053-0", "name": "e2fsprogs", "versionInfo": "v1.47.4", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "GPL-2.0-or-later AND LGPL-2.0-or-later AND BSD-3-Clause AND MIT", "downloadLocation": "https://github.com/tytso/e2fsprogs/archive/7ee1d505ef3b37831215f490411f346fe57e9053.tar.gz", "originator": "Organization: Tytso", "supplier": "Organization: Tytso", "primaryPackagePurpose": "SOURCE", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/tytso/e2fsprogs@v1.47.4", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-libcom-err-1abd12a37cdb1a36", "name": "libcom_err", "versionInfo": "1.47.4-r5", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "(GPL-2.0-or-later AND LGPL-2.0-or-later AND BSD-3-Clause AND MIT)", "description": "Common error description library", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/libcom_err@1.47.4-r5?arch=aarch64\u0026origin=e2fsprogs", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-libcom-err", "name": "libcom_err", "versionInfo": "1.47.4-r5", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-keyutils-libs-1.6.3-r41", "name": "keyutils-libs", "versionInfo": "1.6.3-r41", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "GPL-2.0-or-later OR LGPL-2.0-or-later", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/keyutils-libs@1.6.3-r41?arch=aarch64\u0026distro=wolfi", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Melange-keyutils.yaml-014624f79627768df6f5ff49f4265a7057c2e206", "name": "keyutils.yaml", "versionInfo": "014624f79627768df6f5ff49f4265a7057c2e206", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "INSTALL", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/chainguard-dev/stereo@014624f79627768df6f5ff49f4265a7057c2e206#keyutils.yaml", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Source-kernel.googlesource.com-pub-scm-linux-kernel-git-dhowells-keyutils.git-v1.6.3-cb3bb194cca88211cbfcdde2f10c0f43c3fb8ec3-0", "name": "pub/scm/linux/kernel/git/dhowells/keyutils", "versionInfo": "v1.6.3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "GPL-2.0-or-later OR LGPL-2.0-or-later", "downloadLocation": "https://tarballs.cgr.dev/p/c4263df0120f9cbea0297c9b6574d5bafd566f98b9cec2e39be1c0e378836781-cb3bb194cca88211cbfcdde2f10c0f43c3fb8ec3.tar.gz", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "SOURCE", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:generic/pub%2Fscm%2Flinux%2Fkernel%2Fgit%2Fdhowells%2Fkeyutils@v1.6.3?vcs_url=git%2Bhttps:%2F%2Fkernel.googlesource.com%2Fpub%2Fscm%2Flinux%2Fkernel%2Fgit%2Fdhowells%2Fkeyutils.git%40cb3bb194cca88211cbfcdde2f10c0f43c3fb8ec3", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-keyutils-libs-3f2a0f44e7289356", "name": "keyutils-libs", "versionInfo": "1.6.3-r41", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "(GPL-2.0-or-later OR LGPL-2.0-or-later)", "description": "keyutils library", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/keyutils-libs@1.6.3-r41?arch=aarch64\u0026origin=keyutils", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-keyutils-libs", "name": "keyutils-libs", "versionInfo": "1.6.3-r41", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-openssl-4.0-libssl-4.0.3-r8", "name": "openssl-4.0-libssl", "versionInfo": "4.0.3-r8", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/openssl-4.0-libssl@4.0.3-r8?arch=aarch64\u0026distro=wolfi", "referenceType": "purl" }, { "referenceCategory": "SECURITY", "referenceLocator": "cpe:2.3:a:openssl:openssl:4.0.3:*:*:*:*:*:*:*", "referenceType": "cpe23Type" } ] }, { "SPDXID": "SPDXRef-Package-apk-openssl-4.0-libssl-120767333b011958", "name": "openssl-4.0-libssl", "versionInfo": "4.0.3-r8", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "description": "OpenSSL libssl library", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "SECURITY", "referenceLocator": "cpe:2.3:a:openssl:openssl:4.0.3-r8:*:*:*:*:*:*:*", "referenceType": "cpe23Type" }, { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/openssl-4.0-libssl@4.0.3-r8?arch=aarch64\u0026origin=openssl-4.0", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-openssl-4.0-libssl", "name": "openssl-4.0-libssl", "versionInfo": "4.0.3-r8", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-libverto-0.3.2-r11", "name": "libverto", "versionInfo": "0.3.2-r11", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/libverto@0.3.2-r11?arch=aarch64\u0026distro=wolfi", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Melange-libverto.yaml-491b184c82ef2868d73a46a98997db789342ff15", "name": "libverto.yaml", "versionInfo": "491b184c82ef2868d73a46a98997db789342ff15", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "INSTALL", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/chainguard-dev/stereo@491b184c82ef2868d73a46a98997db789342ff15#libverto.yaml", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Source-github.com-latchset-libverto-0.3.2-1e8f574f702f270d96e42348e7cc088da5acc9ae-0", "name": "libverto", "versionInfo": "0.3.2", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "downloadLocation": "https://github.com/latchset/libverto/archive/1e8f574f702f270d96e42348e7cc088da5acc9ae.tar.gz", "originator": "Organization: Latchset", "supplier": "Organization: Latchset", "primaryPackagePurpose": "SOURCE", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/latchset/libverto@0.3.2", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-libverto-5541cdf6b32b3e46", "name": "libverto", "versionInfo": "0.3.2-r11", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "description": "Main loop abstraction library", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/libverto@0.3.2-r11?arch=aarch64\u0026origin=libverto", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-libverto", "name": "libverto", "versionInfo": "0.3.2-r11", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-krb5-libs-1.22.2-r6", "name": "krb5-libs", "versionInfo": "1.22.2-r6", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/krb5-libs@1.22.2-r6?arch=aarch64\u0026distro=wolfi", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Melange-krb5.yaml-d8c1739b8ac0376433f810660cfe5c19987e66d2", "name": "krb5.yaml", "versionInfo": "d8c1739b8ac0376433f810660cfe5c19987e66d2", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "INSTALL", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/chainguard-dev/stereo@d8c1739b8ac0376433f810660cfe5c19987e66d2#krb5.yaml", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Source-github.com-krb5-krb5.git-krb5-1.22.2-final-8570e77819563e036027e1da789d08ec9333ed4d-0", "name": "krb5", "versionInfo": "krb5-1.22.2-final", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "downloadLocation": "https://github.com/krb5/krb5/archive/8570e77819563e036027e1da789d08ec9333ed4d.tar.gz", "originator": "Organization: Krb5", "supplier": "Organization: Krb5", "primaryPackagePurpose": "SOURCE", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/krb5/krb5@krb5-1.22.2-final", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-krb5-libs-55983142037434b6", "name": "krb5-libs", "versionInfo": "1.22.2-r6", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "description": "The shared libraries used by Kerberos 5", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/krb5-libs@1.22.2-r6?arch=aarch64\u0026origin=krb5", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-krb5-libs", "name": "krb5-libs", "versionInfo": "1.22.2-r6", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-libunistring-1.5-r1", "name": "libunistring", "versionInfo": "1.5-r1", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "GPL-2.0-or-later OR LGPL-3.0-or-later", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/libunistring@1.5-r1?arch=aarch64\u0026distro=wolfi", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Melange-libunistring.yaml-d8c1739b8ac0376433f810660cfe5c19987e66d2", "name": "libunistring.yaml", "versionInfo": "d8c1739b8ac0376433f810660cfe5c19987e66d2", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "INSTALL", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/chainguard-dev/stereo@d8c1739b8ac0376433f810660cfe5c19987e66d2#libunistring.yaml", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Source-https.git.savannah.gnu.org-git-libunistring.git-v1.5-9a0b11a515258048ba17f05009cbd317298de92d-0", "name": "git/libunistring", "versionInfo": "v1.5", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "GPL-2.0-or-later OR LGPL-3.0-or-later", "downloadLocation": "https://tarballs.cgr.dev/g/8647b56477282eff9978402011260dd5cf99ea235db78088a35a84c76d6356c8-9a0b11a515258048ba17f05009cbd317298de92d.tar.gz", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "SOURCE", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:generic/git%2Flibunistring@v1.5?vcs_url=git%2Bhttps:%2F%2Fhttps.git.savannah.gnu.org%2Fgit%2Flibunistring.git%409a0b11a515258048ba17f05009cbd317298de92d", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-libunistring-c217a539699bc978", "name": "libunistring", "versionInfo": "1.5-r1", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "(GPL-2.0-or-later OR LGPL-3.0-or-later)", "description": "Library for manipulating Unicode strings and C strings", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/libunistring@1.5-r1?arch=aarch64\u0026origin=libunistring", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-libunistring", "name": "libunistring", "versionInfo": "1.5-r1", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-libidn2-2.3.8-r12", "name": "libidn2", "versionInfo": "2.3.8-r12", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "GPL-2.0-or-later AND LGPL-3.0-or-later", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/libidn2@2.3.8-r12?arch=aarch64\u0026distro=wolfi", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Melange-libidn2.yaml-491b184c82ef2868d73a46a98997db789342ff15", "name": "libidn2.yaml", "versionInfo": "491b184c82ef2868d73a46a98997db789342ff15", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "INSTALL", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/chainguard-dev/stereo@491b184c82ef2868d73a46a98997db789342ff15#libidn2.yaml", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Source-gitlab.com-libidn-libidn2-v2.3.8-9bc3ac79e2ae81ade245a0e308bf13c981efaa83-0", "name": "libidn/libidn2", "versionInfo": "v2.3.8", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "GPL-2.0-or-later AND LGPL-3.0-or-later", "downloadLocation": "https://tarballs.cgr.dev/l/647ec517d7d5a099d6182bc708cd871327e049f96c961ab62ae2acea4398bf29-9bc3ac79e2ae81ade245a0e308bf13c981efaa83.tar.gz", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "SOURCE", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:generic/libidn%2Flibidn2@v2.3.8?vcs_url=git%2Bhttps:%2F%2Fgitlab.com%2Flibidn%2Flibidn2%409bc3ac79e2ae81ade245a0e308bf13c981efaa83", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-libidn2-9d8572c340a94c5b", "name": "libidn2", "versionInfo": "2.3.8-r12", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "(GPL-2.0-or-later AND LGPL-3.0-or-later)", "description": "Encode/Decode library for internationalized domain names", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/libidn2@2.3.8-r12?arch=aarch64\u0026origin=libidn2", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-libidn2", "name": "libidn2", "versionInfo": "2.3.8-r12", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-libldap-2.7-2.7.2-r0", "name": "libldap-2.7", "versionInfo": "2.7.2-r0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "OLDAP-2.8", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/libldap-2.7@2.7.2-r0?arch=aarch64\u0026distro=wolfi", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Melange-openldap-2.7.yaml-0906e934a58fa878f8d3cfa650c6aab092cc7f26", "name": "openldap-2.7.yaml", "versionInfo": "0906e934a58fa878f8d3cfa650c6aab092cc7f26", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "INSTALL", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/chainguard-dev/stereo@0906e934a58fa878f8d3cfa650c6aab092cc7f26#openldap-2.7.yaml", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Source-github.com-openldap-openldap.git-OPENLDAPC95RELC95ENGC952C957C952-5030280ed039f03fe7725a21f892d7f4e0b98076-0", "name": "openldap", "versionInfo": "OPENLDAP_REL_ENG_2_7_2", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "OLDAP-2.8", "downloadLocation": "https://github.com/openldap/openldap/archive/5030280ed039f03fe7725a21f892d7f4e0b98076.tar.gz", "originator": "Organization: Openldap", "supplier": "Organization: Openldap", "primaryPackagePurpose": "SOURCE", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/openldap/openldap@OPENLDAP_REL_ENG_2_7_2", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-libldap-2.7-fda93f6e5cb8b10f", "name": "libldap-2.7", "versionInfo": "2.7.2-r0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "OLDAP-2.8", "description": "OpenLDAP libraries", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/libldap-2.7@2.7.2-r0?arch=aarch64\u0026origin=openldap-2.7", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-libldap-2.7", "name": "libldap-2.7", "versionInfo": "2.7.2-r0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-libnghttp2-14-1.71.0-r0", "name": "libnghttp2-14", "versionInfo": "1.71.0-r0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/libnghttp2-14@1.71.0-r0?arch=aarch64\u0026distro=wolfi", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Melange-nghttp2.yaml-153ee2bd742f744ddedf5c4a97110fa46307574b", "name": "nghttp2.yaml", "versionInfo": "153ee2bd742f744ddedf5c4a97110fa46307574b", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "INSTALL", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/chainguard-dev/stereo@153ee2bd742f744ddedf5c4a97110fa46307574b#nghttp2.yaml", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Source-github.com-nghttp2-nghttp2.git-v1.71.0-80dcb8140af050fac91a7e6af4fc6dd013404bd1-0", "name": "nghttp2", "versionInfo": "v1.71.0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "downloadLocation": "https://github.com/nghttp2/nghttp2/archive/80dcb8140af050fac91a7e6af4fc6dd013404bd1.tar.gz", "originator": "Organization: Nghttp2", "supplier": "Organization: Nghttp2", "primaryPackagePurpose": "SOURCE", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/nghttp2/nghttp2@v1.71.0", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-libnghttp2-14-f0405241798ad783", "name": "libnghttp2-14", "versionInfo": "1.71.0-r0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "description": "nghttp2 client library", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/libnghttp2-14@1.71.0-r0?arch=aarch64\u0026origin=nghttp2", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-libnghttp2-14", "name": "libnghttp2-14", "versionInfo": "1.71.0-r0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-nghttp3-1.19.0-r0", "name": "nghttp3", "versionInfo": "1.19.0-r0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/nghttp3@1.19.0-r0?arch=aarch64\u0026distro=wolfi", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Melange-nghttp3.yaml-10e9291816e1a18eee8044d5c02177de477e1f29", "name": "nghttp3.yaml", "versionInfo": "10e9291816e1a18eee8044d5c02177de477e1f29", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "INSTALL", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/chainguard-dev/stereo@10e9291816e1a18eee8044d5c02177de477e1f29#nghttp3.yaml", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Source-github.com-ngtcp2-nghttp3.git-v1.19.0-dc83309ca5fd2beb91cc5c030a2d30525e9f2a00-0", "name": "nghttp3", "versionInfo": "v1.19.0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "downloadLocation": "https://github.com/ngtcp2/nghttp3/archive/dc83309ca5fd2beb91cc5c030a2d30525e9f2a00.tar.gz", "originator": "Organization: Ngtcp2", "supplier": "Organization: Ngtcp2", "primaryPackagePurpose": "SOURCE", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/ngtcp2/nghttp3@v1.19.0", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-nghttp3-55243b5027774927", "name": "nghttp3", "versionInfo": "1.19.0-r0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "description": "HTTP/3 library written in C", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/nghttp3@1.19.0-r0?arch=aarch64\u0026origin=nghttp3", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-nghttp3", "name": "nghttp3", "versionInfo": "1.19.0-r0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-ngtcp2-1.26.0-r0", "name": "ngtcp2", "versionInfo": "1.26.0-r0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/ngtcp2@1.26.0-r0?arch=aarch64\u0026distro=wolfi", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Melange-ngtcp2.yaml-a3a25ebdd1c3e71a190ca09e4f5a7beb6732dc78", "name": "ngtcp2.yaml", "versionInfo": "a3a25ebdd1c3e71a190ca09e4f5a7beb6732dc78", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "INSTALL", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/chainguard-dev/stereo@a3a25ebdd1c3e71a190ca09e4f5a7beb6732dc78#ngtcp2.yaml", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Source-github.com-ngtcp2-ngtcp2.git-v1.26.0-6a22a4d7a111f6b52391910e40ad3681a09cfb9c-0", "name": "ngtcp2", "versionInfo": "v1.26.0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "downloadLocation": "https://github.com/ngtcp2/ngtcp2/archive/6a22a4d7a111f6b52391910e40ad3681a09cfb9c.tar.gz", "originator": "Organization: Ngtcp2", "supplier": "Organization: Ngtcp2", "primaryPackagePurpose": "SOURCE", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/ngtcp2/ngtcp2@v1.26.0", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-ngtcp2-21585986ccd703d4", "name": "ngtcp2", "versionInfo": "1.26.0-r0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "description": "ngtcp2 project is an effort to implement IETF QUIC protocol", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/ngtcp2@1.26.0-r0?arch=aarch64\u0026origin=ngtcp2", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-ngtcp2", "name": "ngtcp2", "versionInfo": "1.26.0-r0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-libpsl-0.23.3-r4", "name": "libpsl", "versionInfo": "0.23.3-r4", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/libpsl@0.23.3-r4?arch=aarch64\u0026distro=wolfi", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Melange-libpsl.yaml-491b184c82ef2868d73a46a98997db789342ff15", "name": "libpsl.yaml", "versionInfo": "491b184c82ef2868d73a46a98997db789342ff15", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "INSTALL", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/chainguard-dev/stereo@491b184c82ef2868d73a46a98997db789342ff15#libpsl.yaml", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Source-github.com-rockdaboot-libpsl.git-0.23.3-c486db8d221cbac55f87508d4da4db4497760997-0", "name": "libpsl", "versionInfo": "0.23.3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "downloadLocation": "https://github.com/rockdaboot/libpsl/archive/c486db8d221cbac55f87508d4da4db4497760997.tar.gz", "originator": "Organization: Rockdaboot", "supplier": "Organization: Rockdaboot", "primaryPackagePurpose": "SOURCE", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/rockdaboot/libpsl@0.23.3", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-libpsl-00717f3e46847b47", "name": "libpsl", "versionInfo": "0.23.3-r4", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "description": "C library for the Publix Suffix List", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/libpsl@0.23.3-r4?arch=aarch64\u0026origin=libpsl", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-libpsl", "name": "libpsl", "versionInfo": "0.23.3-r4", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-libcurl-openssl4-8.23.0-r3", "name": "libcurl-openssl4", "versionInfo": "8.23.0-r3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/libcurl-openssl4@8.23.0-r3?arch=aarch64\u0026distro=wolfi", "referenceType": "purl" }, { "referenceCategory": "SECURITY", "referenceLocator": "cpe:2.3:a:haxx:curl:8.23.0:*:*:*:*:*:*:*", "referenceType": "cpe23Type" } ] }, { "SPDXID": "SPDXRef-Package-Melange-curl.yaml-010cb3d3ce5812142c1ff59d0b260650190c6241", "name": "curl.yaml", "versionInfo": "010cb3d3ce5812142c1ff59d0b260650190c6241", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "INSTALL", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/chainguard-dev/stereo@010cb3d3ce5812142c1ff59d0b260650190c6241#curl.yaml", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Source-github.com-curl-curl.git-curl-8C9523C950-3163ec065643ba20709f190111f42c3e1fe95273-0", "name": "curl", "versionInfo": "curl-8_23_0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "downloadLocation": "https://github.com/curl/curl/archive/3163ec065643ba20709f190111f42c3e1fe95273.tar.gz", "originator": "Organization: Curl", "supplier": "Organization: Curl", "primaryPackagePurpose": "SOURCE", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/curl/curl@curl-8_23_0", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-libcurl-openssl4-dbf9448ef8140af5", "name": "libcurl-openssl4", "versionInfo": "8.23.0-r3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "description": "curl library (openssl backend)", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "SECURITY", "referenceLocator": "cpe:2.3:a:haxx:curl:8.23.0-r3:*:*:*:*:*:*:*", "referenceType": "cpe23Type" }, { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/libcurl-openssl4@8.23.0-r3?arch=aarch64\u0026origin=curl", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-libcurl-openssl4", "name": "libcurl-openssl4", "versionInfo": "8.23.0-r3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-libexpat1-2.10.0-r1", "name": "libexpat1", "versionInfo": "2.10.0-r1", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/libexpat1@2.10.0-r1?arch=aarch64\u0026distro=wolfi", "referenceType": "purl" }, { "referenceCategory": "SECURITY", "referenceLocator": "cpe:2.3:a:libexpat_project:libexpat:2.10.0:*:*:*:*:*:*:*", "referenceType": "cpe23Type" } ] }, { "SPDXID": "SPDXRef-Package-Melange-expat.yaml-5aeb575ed7ca64fb21dfda042e170d08f1654bbc", "name": "expat.yaml", "versionInfo": "5aeb575ed7ca64fb21dfda042e170d08f1654bbc", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "INSTALL", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/chainguard-dev/stereo@5aeb575ed7ca64fb21dfda042e170d08f1654bbc#expat.yaml", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Source-github.com-libexpat-libexpat-RC952C9510C950-a70841d9ffa64ddde29ab824ed6305035ebe4c47-0", "name": "libexpat", "versionInfo": "R_2_10_0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "downloadLocation": "https://github.com/libexpat/libexpat/archive/a70841d9ffa64ddde29ab824ed6305035ebe4c47.tar.gz", "originator": "Organization: Libexpat", "supplier": "Organization: Libexpat", "primaryPackagePurpose": "SOURCE", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/libexpat/libexpat@R_2_10_0", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-libexpat1-95b2883a4585c888", "name": "libexpat1", "versionInfo": "2.10.0-r1", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "description": "libexpat shared library", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "SECURITY", "referenceLocator": "cpe:2.3:a:libexpat_project:libexpat:2.10.0-r1:*:*:*:*:*:*:*", "referenceType": "cpe23Type" }, { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/libexpat1@2.10.0-r1?arch=aarch64\u0026origin=expat", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-libexpat1", "name": "libexpat1", "versionInfo": "2.10.0-r1", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-libpcre2-8-0-10.49-r3", "name": "libpcre2-8-0", "versionInfo": "10.49-r3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "BSD-3-Clause", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/libpcre2-8-0@10.49-r3?arch=aarch64\u0026distro=wolfi", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Melange-pcre2.yaml-5aeb575ed7ca64fb21dfda042e170d08f1654bbc", "name": "pcre2.yaml", "versionInfo": "5aeb575ed7ca64fb21dfda042e170d08f1654bbc", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "INSTALL", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/chainguard-dev/stereo@5aeb575ed7ca64fb21dfda042e170d08f1654bbc#pcre2.yaml", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Source-github.com-PCRE2Project-pcre2.git-pcre2-10.49-6f9d7c1373262c541324a16a358785b33ef116cf-0", "name": "pcre2", "versionInfo": "pcre2-10.49", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "BSD-3-Clause", "downloadLocation": "https://github.com/PCRE2Project/pcre2/archive/6f9d7c1373262c541324a16a358785b33ef116cf.tar.gz", "originator": "Organization: Pcre2project", "supplier": "Organization: Pcre2project", "primaryPackagePurpose": "SOURCE", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/pcre2project/pcre2@pcre2-10.49", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-libpcre2-8-0-d0d4429c86d2814c", "name": "libpcre2-8-0", "versionInfo": "10.49-r3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "BSD-3-Clause", "description": "pcre2 runtime library 8-bit", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/libpcre2-8-0@10.49-r3?arch=aarch64\u0026origin=pcre2", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-libpcre2-8-0", "name": "libpcre2-8-0", "versionInfo": "10.49-r3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-git-2.56.0-r3", "name": "git", "versionInfo": "2.56.0-r3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "GPL-2.0-or-later AND ( Artistic-1.0-Perl OR GPL-1.0-or-later )", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/git@2.56.0-r3?arch=aarch64\u0026distro=wolfi", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Melange-git.yaml-a3655395a06e663e8406d260a966b9e022e11f7e", "name": "git.yaml", "versionInfo": "a3655395a06e663e8406d260a966b9e022e11f7e", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "INSTALL", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/chainguard-dev/stereo@a3655395a06e663e8406d260a966b9e022e11f7e#git.yaml", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Source-kernel.googlesource.com-pub-scm-git-git.git-v2.56.0-a018953688f1b10bddf91bff8747068f5f4746a4-0", "name": "pub/scm/git/git", "versionInfo": "v2.56.0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "GPL-2.0-or-later AND ( Artistic-1.0-Perl OR GPL-1.0-or-later )", "downloadLocation": "https://tarballs.cgr.dev/p/13d95d86c3cf193d4f0417e059a08cc793fc772f803086b07d168643a0b50f40-a018953688f1b10bddf91bff8747068f5f4746a4.tar.gz", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "SOURCE", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:generic/pub%2Fscm%2Fgit%2Fgit@v2.56.0?vcs_url=git%2Bhttps:%2F%2Fkernel.googlesource.com%2Fpub%2Fscm%2Fgit%2Fgit.git%40a018953688f1b10bddf91bff8747068f5f4746a4", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-git-19db310f7dfcfb46", "name": "git", "versionInfo": "2.56.0-r3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "GPL-2.0-or-later AND ( Artistic-1.0-Perl OR GPL-1.0-or-later )", "description": "distributed version control system", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "SECURITY", "referenceLocator": "cpe:2.3:a:git-scm:git:2.56.0:*:*:*:*:*:*:*", "referenceType": "cpe23Type" }, { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/git@2.56.0-r3?arch=aarch64\u0026origin=git", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-git", "name": "git", "versionInfo": "2.56.0-r3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-go-1.27-upstream-1.27.3-r0", "name": "go-1.27-upstream", "versionInfo": "1.27.3-r0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "BSD-3-Clause", "downloadLocation": "NOASSERTION", "originator": "Organization: Unknown", "supplier": "Organization: Unknown", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/unknown/go-1.27-upstream@1.27.3-r0?arch=aarch64", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Melange-melange-go-1.27-upstream.yaml-60d4c5fca1dae7e58bf86478a7175ec40f8c7df5", "name": "melange/go-1.27-upstream.yaml", "versionInfo": "60d4c5fca1dae7e58bf86478a7175ec40f8c7df5", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Unknown", "supplier": "Organization: Unknown", "primaryPackagePurpose": "INSTALL", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/https:/%2Funknown%2Funknown%2Funknown@60d4c5fca1dae7e58bf86478a7175ec40f8c7df5#melange/go-1.27-upstream.yaml", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-libbz2-1-1.0.8-r30", "name": "libbz2-1", "versionInfo": "1.0.8-r30", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MPL-2.0 AND MIT", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/libbz2-1@1.0.8-r30?arch=aarch64\u0026distro=wolfi", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Melange-bzip2.yaml-f353805867a3059d7018cceac9746da7c23634fe", "name": "bzip2.yaml", "versionInfo": "f353805867a3059d7018cceac9746da7c23634fe", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "INSTALL", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/chainguard-dev/stereo@f353805867a3059d7018cceac9746da7c23634fe#bzip2.yaml", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Source-sourceware.org-git-bzip2.git-bzip2-1.0.8-6a8690fc8d26c815e798c588f796eabe9d684cf0-0", "name": "git/bzip2", "versionInfo": "bzip2-1.0.8", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MPL-2.0 AND MIT", "downloadLocation": "https://tarballs.cgr.dev/g/bd9e4cde2b52db644da8ff7b19a2e89df1ff408230201c86e08456c98ef2fc12-6a8690fc8d26c815e798c588f796eabe9d684cf0.tar.gz", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "SOURCE", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:generic/git%2Fbzip2@bzip2-1.0.8?vcs_url=git%2Bhttps:%2F%2Fsourceware.org%2Fgit%2Fbzip2.git%406a8690fc8d26c815e798c588f796eabe9d684cf0", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-libbz2-1-161b9abb2535e851", "name": "libbz2-1", "versionInfo": "1.0.8-r30", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "(MPL-2.0 AND MIT)", "description": "bzip2 shared library", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/libbz2-1@1.0.8-r30?arch=aarch64\u0026origin=bzip2", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-libbz2-1", "name": "libbz2-1", "versionInfo": "1.0.8-r30", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-libedit-3.1-r20", "name": "libedit", "versionInfo": "3.1-r20", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "BSD-3-Clause", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/libedit@3.1-r20?arch=aarch64\u0026distro=wolfi", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Melange-libedit.yaml-b6f71ed601ac8895077ff7ce04b2c6eebbe628a6", "name": "libedit.yaml", "versionInfo": "b6f71ed601ac8895077ff7ce04b2c6eebbe628a6", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "INSTALL", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/chainguard-dev/stereo@b6f71ed601ac8895077ff7ce04b2c6eebbe628a6#libedit.yaml", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Source-libedit-3.1-0", "name": "libedit", "versionInfo": "3.1", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "https://www.thrysoee.dk/editline/libedit-20210910-3.1.tar.gz", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "SOURCE", "checksums": [ { "algorithm": "SHA256", "checksumValue": "6792a6a992050762edcca28ff3318cdb7de37dccf7bc30db59fcd7017eed13c5" } ], "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:generic/libedit@3.1?checksum=sha256:6792a6a992050762edcca28ff3318cdb7de37dccf7bc30db59fcd7017eed13c5\u0026download_url=https:%2F%2Fwww.thrysoee.dk%2Feditline%2Flibedit-20210910-3.1.tar.gz", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-libedit-b57a58457f542416", "name": "libedit", "versionInfo": "3.1-r20", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "BSD-3-Clause", "description": "the NetBSD editline library", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/libedit@3.1-r20?arch=aarch64\u0026origin=libedit", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-libedit", "name": "libedit", "versionInfo": "3.1-r20", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-libffi-3.8.0-r2", "name": "libffi", "versionInfo": "3.8.0-r2", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/libffi@3.8.0-r2?arch=aarch64\u0026distro=wolfi", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Melange-libffi.yaml-aaa2344b75ef8b19889f087c91e10b11f191e15c", "name": "libffi.yaml", "versionInfo": "aaa2344b75ef8b19889f087c91e10b11f191e15c", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "INSTALL", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/chainguard-dev/stereo@aaa2344b75ef8b19889f087c91e10b11f191e15c#libffi.yaml", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Source-github.com-libffi-libffi.git-v3.8.0-12ffd1f9dc56fcea79d2f742f424301ae668d663-0", "name": "libffi", "versionInfo": "v3.8.0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "downloadLocation": "https://github.com/libffi/libffi/archive/12ffd1f9dc56fcea79d2f742f424301ae668d663.tar.gz", "originator": "Organization: Libffi", "supplier": "Organization: Libffi", "primaryPackagePurpose": "SOURCE", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/libffi/libffi@v3.8.0", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-libffi-e8a6a080506d2ad6", "name": "libffi", "versionInfo": "3.8.0-r2", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "description": "portable foreign function interface library", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/libffi@3.8.0-r2?arch=aarch64\u0026origin=libffi", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-libffi", "name": "libffi", "versionInfo": "3.8.0-r2", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-libsepol-3.11-r3", "name": "libsepol", "versionInfo": "3.11-r3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "LGPL-2.1", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/libsepol@3.11-r3?arch=aarch64\u0026distro=wolfi", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Melange-libsepol.yaml-203e65dd274965582cb0226c6aa7ca368c2e684e", "name": "libsepol.yaml", "versionInfo": "203e65dd274965582cb0226c6aa7ca368c2e684e", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "INSTALL", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/chainguard-dev/stereo@203e65dd274965582cb0226c6aa7ca368c2e684e#libsepol.yaml", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Source-github.com-SELinuxProject-selinux.git-libsepol-3.11-2233a23a4d4f1bf29054037babec13f30d038e65-0", "name": "selinux", "versionInfo": "libsepol-3.11", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "LGPL-2.1", "downloadLocation": "https://github.com/SELinuxProject/selinux/archive/2233a23a4d4f1bf29054037babec13f30d038e65.tar.gz", "originator": "Organization: Selinuxproject", "supplier": "Organization: Selinuxproject", "primaryPackagePurpose": "SOURCE", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/selinuxproject/selinux@libsepol-3.11", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-libsepol-645fbc9cda7694bd", "name": "libsepol", "versionInfo": "3.11-r3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "LGPL-2.1-only", "description": "SELinux binary policy manipulation library", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/libsepol@3.11-r3?arch=aarch64\u0026origin=libsepol", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-libsepol", "name": "libsepol", "versionInfo": "3.11-r3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-libselinux-3.11-r2", "name": "libselinux", "versionInfo": "3.11-r2", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "libselinux-1.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/libselinux@3.11-r2?arch=aarch64\u0026distro=wolfi", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Melange-libselinux.yaml-7c655233085e1d8dec7fac1996f808f33b0e96cb", "name": "libselinux.yaml", "versionInfo": "7c655233085e1d8dec7fac1996f808f33b0e96cb", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "INSTALL", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/chainguard-dev/stereo@7c655233085e1d8dec7fac1996f808f33b0e96cb#libselinux.yaml", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Source-github.com-SELinuxProject-selinux.git-libselinux-3.11-2233a23a4d4f1bf29054037babec13f30d038e65-0", "name": "selinux", "versionInfo": "libselinux-3.11", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "libselinux-1.0", "downloadLocation": "https://github.com/SELinuxProject/selinux/archive/2233a23a4d4f1bf29054037babec13f30d038e65.tar.gz", "originator": "Organization: Selinuxproject", "supplier": "Organization: Selinuxproject", "primaryPackagePurpose": "SOURCE", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/selinuxproject/selinux@libselinux-3.11", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-libselinux-da40defb50e89447", "name": "libselinux", "versionInfo": "3.11-r2", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "libselinux-1.0", "description": "SELinux library and simple utilities", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/libselinux@3.11-r2?arch=aarch64\u0026origin=libselinux", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-libselinux", "name": "libselinux", "versionInfo": "3.11-r2", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-libuuid-2.42.4-r2", "name": "libuuid", "versionInfo": "2.42.4-r2", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "GPL-3.0-or-later AND GPL-2.0-or-later AND GPL-2.0-only AND GPL-1.0-only AND LGPL-2.1-or-later AND BSD-1-Clause AND BSD-2-Clause AND BSD-3-Clause AND BSD-4-Clause-UC AND MIT AND CC-PDDC", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/libuuid@2.42.4-r2?arch=aarch64\u0026distro=wolfi", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Melange-util-linux.yaml-8298ba7be686605b03c1943f22ccf5a0640e0042", "name": "util-linux.yaml", "versionInfo": "8298ba7be686605b03c1943f22ccf5a0640e0042", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "INSTALL", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/chainguard-dev/stereo@8298ba7be686605b03c1943f22ccf5a0640e0042#util-linux.yaml", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Source-github.com-util-linux-util-linux-v2.42.4-d76cbf8f13e65ff657344f7f6a90042cf755ba59-0", "name": "util-linux", "versionInfo": "v2.42.4", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "GPL-3.0-or-later AND GPL-2.0-or-later AND GPL-2.0-only AND GPL-1.0-only AND LGPL-2.1-or-later AND BSD-1-Clause AND BSD-2-Clause AND BSD-3-Clause AND BSD-4-Clause-UC AND MIT AND CC-PDDC", "downloadLocation": "https://github.com/util-linux/util-linux/archive/d76cbf8f13e65ff657344f7f6a90042cf755ba59.tar.gz", "originator": "Organization: Util-Linux", "supplier": "Organization: Util-Linux", "primaryPackagePurpose": "SOURCE", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/util-linux/util-linux@v2.42.4", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-libuuid-060f7e4f1502928d", "name": "libuuid", "versionInfo": "2.42.4-r2", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "(GPL-3.0-or-later AND GPL-2.0-or-later AND GPL-2.0-only AND GPL-1.0-only AND LGPL-2.1-or-later AND BSD-1-Clause AND BSD-2-Clause AND BSD-3-Clause AND BSD-4-Clause-UC AND MIT AND CC-PDDC)", "description": "DCE compatible Universally Unique Identifier library", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/libuuid@2.42.4-r2?arch=aarch64\u0026origin=util-linux", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-libuuid", "name": "libuuid", "versionInfo": "2.42.4-r2", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-mpdecimal-4.0.1-r6", "name": "mpdecimal", "versionInfo": "4.0.1-r6", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "BSD-2-Clause", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/mpdecimal@4.0.1-r6?arch=aarch64\u0026distro=wolfi", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Melange-mpdecimal.yaml-491b184c82ef2868d73a46a98997db789342ff15", "name": "mpdecimal.yaml", "versionInfo": "491b184c82ef2868d73a46a98997db789342ff15", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "INSTALL", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/chainguard-dev/stereo@491b184c82ef2868d73a46a98997db789342ff15#mpdecimal.yaml", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Source-mpdecimal-4.0.1-0", "name": "mpdecimal", "versionInfo": "4.0.1", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "https://www.bytereef.org/software/mpdecimal/releases/mpdecimal-4.0.1.tar.gz", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "SOURCE", "checksums": [ { "algorithm": "SHA256", "checksumValue": "96d33abb4bb0070c7be0fed4246cd38416188325f820468214471938545b1ac8" } ], "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:generic/mpdecimal@4.0.1?checksum=sha256:96d33abb4bb0070c7be0fed4246cd38416188325f820468214471938545b1ac8\u0026download_url=https:%2F%2Fwww.bytereef.org%2Fsoftware%2Fmpdecimal%2Freleases%2Fmpdecimal-4.0.1.tar.gz", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-mpdecimal-a88311b96b77a716", "name": "mpdecimal", "versionInfo": "4.0.1-r6", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "BSD-2-Clause", "description": "complete implementation of the general decimal arithmetic specification", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/mpdecimal@4.0.1-r6?arch=aarch64\u0026origin=mpdecimal", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-mpdecimal", "name": "mpdecimal", "versionInfo": "4.0.1-r6", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-openssh-client-10.6C95p2-r0", "name": "openssh-client", "versionInfo": "10.6_p2-r0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "ISC", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/openssh-client@10.6_p2-r0?arch=aarch64\u0026distro=wolfi", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Melange-openssh.yaml-71f0a5f6e7036217131d19064dbc1e352c517704", "name": "openssh.yaml", "versionInfo": "71f0a5f6e7036217131d19064dbc1e352c517704", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "INSTALL", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/chainguard-dev/stereo@71f0a5f6e7036217131d19064dbc1e352c517704#openssh.yaml", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Source-github.com-openssh-openssh-portable-VC9510C956C95P2-d449e662b6b8b8cb20e852d8084c269af1c5e8f1-0", "name": "openssh-portable", "versionInfo": "V_10_6_P2", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "ISC", "downloadLocation": "https://github.com/openssh/openssh-portable/archive/d449e662b6b8b8cb20e852d8084c269af1c5e8f1.tar.gz", "originator": "Organization: Openssh", "supplier": "Organization: Openssh", "primaryPackagePurpose": "SOURCE", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/openssh/openssh-portable@V_10_6_P2", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-openssh-client-9c64c3ac2c1eaffa", "name": "openssh-client", "versionInfo": "10.6_p2-r0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "ISC", "description": "OpenSSH client", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/openssh-client@10.6_p2-r0?arch=aarch64\u0026origin=openssh", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-openssh-client", "name": "openssh-client", "versionInfo": "10.6_p2-r0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-py3-pip-wheel-26.2.2-r2", "name": "py3-pip-wheel", "versionInfo": "26.2.2-r2", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/py3-pip-wheel@26.2.2-r2?arch=aarch64\u0026distro=wolfi", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Melange-py3-pip.yaml-58b78718f8e8947523a1ad3eb0deb82aee6911d7", "name": "py3-pip.yaml", "versionInfo": "58b78718f8e8947523a1ad3eb0deb82aee6911d7", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "INSTALL", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/chainguard-dev/stereo@58b78718f8e8947523a1ad3eb0deb82aee6911d7#py3-pip.yaml", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Source-github.com-pypa-pip-26.2.2-b3b696fe2122f2339d782517559bfade2cb6b879-0", "name": "pip", "versionInfo": "26.2.2", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "downloadLocation": "https://github.com/pypa/pip/archive/b3b696fe2122f2339d782517559bfade2cb6b879.tar.gz", "originator": "Organization: Pypa", "supplier": "Organization: Pypa", "primaryPackagePurpose": "SOURCE", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/pypa/pip@26.2.2", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Source-github.com-urllib3-urllib3-2.8.0-b1d30ab61fe0db8f11092805e8c5ac43e091064a-2", "name": "urllib3", "versionInfo": "2.8.0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "downloadLocation": "https://github.com/urllib3/urllib3/archive/b1d30ab61fe0db8f11092805e8c5ac43e091064a.tar.gz", "originator": "Organization: Urllib3", "supplier": "Organization: Urllib3", "primaryPackagePurpose": "SOURCE", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/urllib3/urllib3@2.8.0", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Source-github.com-msgpack-msgpack-python-v1.2.3-742cb6d7ad141343edcccc829b5b06d0c6f8fcb5-3", "name": "msgpack-python", "versionInfo": "v1.2.3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "downloadLocation": "https://github.com/msgpack/msgpack-python/archive/742cb6d7ad141343edcccc829b5b06d0c6f8fcb5.tar.gz", "originator": "Organization: Msgpack", "supplier": "Organization: Msgpack", "primaryPackagePurpose": "SOURCE", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/msgpack/msgpack-python@v1.2.3", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Source-github.com-certifi-python-certifi-2026.10.23-b60466c9f2882d9cf088943c650b0faac06c080c-4", "name": "python-certifi", "versionInfo": "2026.10.23", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "downloadLocation": "https://github.com/certifi/python-certifi/archive/b60466c9f2882d9cf088943c650b0faac06c080c.tar.gz", "originator": "Organization: Certifi", "supplier": "Organization: Certifi", "primaryPackagePurpose": "SOURCE", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/certifi/python-certifi@2026.10.23", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-python-pip-4e6f3f5c92b2698c", "name": "pip", "versionInfo": "26.2.2", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from installed python package manifest file: usr/share/python-wheels/pip-26.2.2-py3-none-any.whl", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:pypi/pip@26.2.2", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-py3-pip-wheel-f8febf0c4eeb5aea", "name": "py3-pip-wheel", "versionInfo": "26.2.2-r2", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "description": "wheel of pip", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/py3-pip-wheel@26.2.2-r2?arch=aarch64\u0026origin=py3-pip", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-py3-pip-wheel", "name": "py3-pip-wheel", "versionInfo": "26.2.2-r2", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-xz-5.8.4-r1", "name": "xz", "versionInfo": "5.8.4-r1", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "GPL-3.0-or-later", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/xz@5.8.4-r1?arch=aarch64\u0026distro=wolfi", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Melange-xz.yaml-5aeb575ed7ca64fb21dfda042e170d08f1654bbc", "name": "xz.yaml", "versionInfo": "5aeb575ed7ca64fb21dfda042e170d08f1654bbc", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "INSTALL", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/chainguard-dev/stereo@5aeb575ed7ca64fb21dfda042e170d08f1654bbc#xz.yaml", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Source-github.com-tukaani-project-xz-v5.8.4-d3e650e63c110e830fd5391e7f8b45df0b91d3da-0", "name": "xz", "versionInfo": "v5.8.4", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "GPL-3.0-or-later", "downloadLocation": "https://github.com/tukaani-project/xz/archive/d3e650e63c110e830fd5391e7f8b45df0b91d3da.tar.gz", "originator": "Organization: Tukaani-Project", "supplier": "Organization: Tukaani-Project", "primaryPackagePurpose": "SOURCE", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/tukaani-project/xz@v5.8.4", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-xz-9348e79a976cf12a", "name": "xz", "versionInfo": "5.8.4-r1", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "GPL-3.0-or-later", "description": "Library and CLI tools for XZ and LZMA compressed files", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/xz@5.8.4-r1?arch=aarch64\u0026origin=xz", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-xz", "name": "xz", "versionInfo": "5.8.4-r1", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-python-3.13-base-3.13.18C95git20261030-r0", "name": "python-3.13-base", "versionInfo": "3.13.18_git20261030-r0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "PSF-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/python-3.13-base@3.13.18_git20261030-r0?arch=aarch64\u0026distro=wolfi", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Melange-python-3.13.yaml-52a27d12b5ebd918e282db0e2ff573eec6e57aeb", "name": "python-3.13.yaml", "versionInfo": "52a27d12b5ebd918e282db0e2ff573eec6e57aeb", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "INSTALL", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/chainguard-dev/stereo@52a27d12b5ebd918e282db0e2ff573eec6e57aeb#python-3.13.yaml", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Source-github.com-python-cpython-3.13-42155a0feaca9ba6991942c323cbe9fb7278be3c-0", "name": "cpython", "versionInfo": "42155a0feaca9ba6991942c323cbe9fb7278be3c", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "PSF-2.0", "downloadLocation": "https://github.com/python/cpython/archive/42155a0feaca9ba6991942c323cbe9fb7278be3c.tar.gz", "originator": "Organization: Python", "supplier": "Organization: Python", "primaryPackagePurpose": "SOURCE", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/python/cpython@42155a0feaca9ba6991942c323cbe9fb7278be3c", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-python-3.13-base-c5e711b20bfe5612", "name": "python-3.13-base", "versionInfo": "3.13.18_git20261030-r0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "PSF-2.0", "description": "python-3.13 without /usr/bin/python3", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/python-3.13-base@3.13.18_git20261030-r0?arch=aarch64\u0026origin=python-3.13", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-python-3.13-base", "name": "python-3.13-base", "versionInfo": "3.13.18_git20261030-r0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-python-3.13-3.13.18C95git20261030-r0", "name": "python-3.13", "versionInfo": "3.13.18_git20261030-r0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "PSF-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/python-3.13@3.13.18_git20261030-r0?arch=aarch64\u0026distro=wolfi", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-python-3.13-11dd55cbd97276c0", "name": "python-3.13", "versionInfo": "3.13.18_git20261030-r0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "PSF-2.0", "description": "the Python programming language", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/python-3.13@3.13.18_git20261030-r0?arch=aarch64\u0026origin=python-3.13", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-python-3.13", "name": "python-3.13", "versionInfo": "3.13.18_git20261030-r0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-tzdata-2026f-r0", "name": "tzdata", "versionInfo": "2026f-r0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "CC-PDDC", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/tzdata@2026f-r0?arch=aarch64\u0026distro=wolfi", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Melange-tzdata.yaml-b01ceefc114cf44ccb6d35f405795435f98bf0c2", "name": "tzdata.yaml", "versionInfo": "b01ceefc114cf44ccb6d35f405795435f98bf0c2", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "INSTALL", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/chainguard-dev/stereo@b01ceefc114cf44ccb6d35f405795435f98bf0c2#tzdata.yaml", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Source-github.com-eggert-tz-2026f-a6cb1a1cebcc96269a02b25323c1a9424e3349a8-0", "name": "tz", "versionInfo": "2026f", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "CC-PDDC", "downloadLocation": "https://github.com/eggert/tz/archive/a6cb1a1cebcc96269a02b25323c1a9424e3349a8.tar.gz", "originator": "Organization: Eggert", "supplier": "Organization: Eggert", "primaryPackagePurpose": "SOURCE", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/eggert/tz@2026f", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-tzdata-c9ffaae8b2257589", "name": "tzdata", "versionInfo": "2026f-r0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "CC-PDDC", "description": "Timezone data provided by IANA", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/tzdata@2026f-r0?arch=aarch64\u0026origin=tzdata", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-tzdata", "name": "tzdata", "versionInfo": "2026f-r0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" } ], "relationships": [ { "spdxElementId": "SPDXRef-Package-Image-sha256-7a2156461e9eef432502f4f5a72108d721abffafd65fdb69f49b76606d049b68", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-ImageLayer-sha256-b5c3da964d6b5840193b4246511a94262110e329ca13dc5fe9034b241c08d832" }, { "spdxElementId": "SPDXRef-Package-apk-wolfi-baselayout-20230201-r31", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-wolfi-baselayout.yaml-ed415005c84750f03c4a9252137813734a224ae7" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-wolfi-baselayout", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-wolfi-baselayout-10b2691c19a945ed" }, { "spdxElementId": "SPDXRef-Package-apk-wolfi-baselayout-20230201-r31", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-wolfi-baselayout" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-7a2156461e9eef432502f4f5a72108d721abffafd65fdb69f49b76606d049b68", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-wolfi-baselayout-20230201-r31" }, { "spdxElementId": "SPDXRef-Package-apk-ca-certificates-bundle-20261020-r0", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-ca-certificates.yaml-8061afafa65af5a9026707a8880e14120dd6f4a0" }, { "spdxElementId": "SPDXRef-Package-apk-ca-certificates-bundle-20261020-r0", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-gitlab.alpinelinux.org-alpine-ca-certificates-20261020-2058424fda70ee478bcce872dcf141a0c5499ee0-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-ca-certificates-bundle", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-ca-certificates-bundle-39152a1ba5759050" }, { "spdxElementId": "SPDXRef-Package-apk-ca-certificates-bundle-20261020-r0", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-ca-certificates-bundle" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-7a2156461e9eef432502f4f5a72108d721abffafd65fdb69f49b76606d049b68", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-ca-certificates-bundle-20261020-r0" }, { "spdxElementId": "SPDXRef-Package-apk-glibc-2.44-locale-posix-2.44-r15", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-glibc-2.44.yaml-f903916d7bbf6d7dc87dd9e05b827df096b22255" }, { "spdxElementId": "SPDXRef-Package-apk-glibc-2.44-locale-posix-2.44-r15", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-gitlab.com-gnutools-glibc.git-release-2.44-master-47e2b570410fab606de29f550534a721184852c3-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-glibc-2.44-locale-posix", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-glibc-2.44-locale-posix-662d452b2ea361dc" }, { "spdxElementId": "SPDXRef-Package-apk-glibc-2.44-locale-posix-2.44-r15", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-glibc-2.44-locale-posix" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-7a2156461e9eef432502f4f5a72108d721abffafd65fdb69f49b76606d049b68", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-glibc-2.44-locale-posix-2.44-r15" }, { "spdxElementId": "SPDXRef-Package-apk-libgcc-16.2.0-r3", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-gcc.yaml-4d188060cbd00821a95f1ef60605da4817e781bb" }, { "spdxElementId": "SPDXRef-Package-apk-libgcc-16.2.0-r3", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-gitlab.com-gnutools-gcc.git-releases-gcc-16.2.0-78d4ac73dd391005b895a6148cd9831e28e1208b-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-libgcc", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-libgcc-6f0563db807ae406" }, { "spdxElementId": "SPDXRef-Package-apk-libgcc-16.2.0-r3", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-libgcc" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-7a2156461e9eef432502f4f5a72108d721abffafd65fdb69f49b76606d049b68", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-libgcc-16.2.0-r3" }, { "spdxElementId": "SPDXRef-Package-apk-glibc-2.44-2.44-r15", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-glibc-2.44.yaml-f903916d7bbf6d7dc87dd9e05b827df096b22255" }, { "spdxElementId": "SPDXRef-Package-apk-glibc-2.44-2.44-r15", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-gitlab.com-gnutools-glibc.git-release-2.44-master-47e2b570410fab606de29f550534a721184852c3-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-glibc-2.44", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-glibc-2.44-09050f0de1709b32" }, { "spdxElementId": "SPDXRef-Package-apk-glibc-2.44-2.44-r15", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-glibc-2.44" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-7a2156461e9eef432502f4f5a72108d721abffafd65fdb69f49b76606d049b68", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-glibc-2.44-2.44-r15" }, { "spdxElementId": "SPDXRef-Package-apk-ld-linux-2.44-2.44-r15", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-glibc-2.44.yaml-f903916d7bbf6d7dc87dd9e05b827df096b22255" }, { "spdxElementId": "SPDXRef-Package-apk-ld-linux-2.44-2.44-r15", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-gitlab.com-gnutools-glibc.git-release-2.44-master-47e2b570410fab606de29f550534a721184852c3-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-ld-linux-2.44", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-ld-linux-2.44-0758def42e65ad42" }, { "spdxElementId": "SPDXRef-Package-apk-ld-linux-2.44-2.44-r15", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-ld-linux-2.44" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-7a2156461e9eef432502f4f5a72108d721abffafd65fdb69f49b76606d049b68", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-ld-linux-2.44-2.44-r15" }, { "spdxElementId": "SPDXRef-Package-apk-ncurses-terminfo-base-6.6.20261107-r0", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-ncurses.yaml-57b90c0084b0bc101663cdfcaa44f4ce83312443" }, { "spdxElementId": "SPDXRef-Package-apk-ncurses-terminfo-base-6.6.20261107-r0", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-github.com-ThomasDickey-ncurses-snapshots-v6C956C9520261107-7404b376832583182c52722dc09d86b8675db375-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-ncurses-terminfo-base", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-ncurses-terminfo-base-d4376d4149bf9b00" }, { "spdxElementId": "SPDXRef-Package-apk-ncurses-terminfo-base-6.6.20261107-r0", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-ncurses-terminfo-base" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-7a2156461e9eef432502f4f5a72108d721abffafd65fdb69f49b76606d049b68", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-ncurses-terminfo-base-6.6.20261107-r0" }, { "spdxElementId": "SPDXRef-Package-apk-ncurses-6.6.20261107-r0", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-ncurses.yaml-57b90c0084b0bc101663cdfcaa44f4ce83312443" }, { "spdxElementId": "SPDXRef-Package-apk-ncurses-6.6.20261107-r0", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-github.com-ThomasDickey-ncurses-snapshots-v6C956C9520261107-7404b376832583182c52722dc09d86b8675db375-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-ncurses", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-ncurses-fe6e9d338447068c" }, { "spdxElementId": "SPDXRef-Package-apk-ncurses-6.6.20261107-r0", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-ncurses" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-7a2156461e9eef432502f4f5a72108d721abffafd65fdb69f49b76606d049b68", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-ncurses-6.6.20261107-r0" }, { "spdxElementId": "SPDXRef-Package-apk-bash-5.3-r14", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-bash.yaml-ac7b15dc2695924986372a27cd7d6c4e029c5efa" }, { "spdxElementId": "SPDXRef-Package-apk-bash-5.3-r14", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-git.savannah.gnu.org-git-bash.git-bash-5.3-b8c60bc9ca365f8261fa97900b6fa939f6ebc303-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-bash", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-bash-8fcfdb8c2df1d6c6" }, { "spdxElementId": "SPDXRef-Package-apk-bash-5.3-r14", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-bash" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-7a2156461e9eef432502f4f5a72108d721abffafd65fdb69f49b76606d049b68", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-bash-5.3-r14" }, { "spdxElementId": "SPDXRef-Package-apk-libstdcC43C43-16.2.0-r3", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-gcc.yaml-4d188060cbd00821a95f1ef60605da4817e781bb" }, { "spdxElementId": "SPDXRef-Package-apk-libstdcC43C43-16.2.0-r3", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-gitlab.com-gnutools-gcc.git-releases-gcc-16.2.0-78d4ac73dd391005b895a6148cd9831e28e1208b-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-libstdc--", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-libstdc---d49b493ee2e3bbae" }, { "spdxElementId": "SPDXRef-Package-apk-libstdcC43C43-16.2.0-r3", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-libstdc--" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-7a2156461e9eef432502f4f5a72108d721abffafd65fdb69f49b76606d049b68", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-libstdcC43C43-16.2.0-r3" }, { "spdxElementId": "SPDXRef-Package-apk-zlib-1.3.2.1C95rc20260921-r2", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-zlib.yaml-5aeb575ed7ca64fb21dfda042e170d08f1654bbc" }, { "spdxElementId": "SPDXRef-Package-apk-zlib-1.3.2.1C95rc20260921-r2", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-github.com-madler-zlib-develop-767c4c947852e143f582c85f14cf573411df1b35-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-zlib", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-zlib-1dd8dbeab0faefff" }, { "spdxElementId": "SPDXRef-Package-apk-zlib-1.3.2.1C95rc20260921-r2", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-zlib" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-7a2156461e9eef432502f4f5a72108d721abffafd65fdb69f49b76606d049b68", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-zlib-1.3.2.1C95rc20260921-r2" }, { "spdxElementId": "SPDXRef-Package-apk-libzstd1-1.5.7-r13", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-zstd.yaml-0d1cb8462683e2c06d7591b8b4ad4d1f2797a0f7" }, { "spdxElementId": "SPDXRef-Package-apk-libzstd1-1.5.7-r13", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-github.com-facebook-zstd-v1.5.7-f8745da6ff1ad1e7bab384bd1f9d742439278e99-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-libzstd1", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-libzstd1-cecd9c4f8a1f1ddf" }, { "spdxElementId": "SPDXRef-Package-apk-libzstd1-1.5.7-r13", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-libzstd1" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-7a2156461e9eef432502f4f5a72108d721abffafd65fdb69f49b76606d049b68", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-libzstd1-1.5.7-r13" }, { "spdxElementId": "SPDXRef-Package-apk-binutils-2.47-r3", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-binutils.yaml-4d188060cbd00821a95f1ef60605da4817e781bb" }, { "spdxElementId": "SPDXRef-Package-apk-binutils-2.47-r3", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-gitlab.com-gnutools-binutils-gdb.git-binutils-2C9547-6ce87bbc521cf46eaee9a1f7ef61cee2cdfb3e32-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-binutils", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-binutils-1e8a1ecfca898ef1" }, { "spdxElementId": "SPDXRef-Package-apk-binutils-2.47-r3", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-binutils" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-7a2156461e9eef432502f4f5a72108d721abffafd65fdb69f49b76606d049b68", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-binutils-2.47-r3" }, { "spdxElementId": "SPDXRef-Package-apk-libxcrypt-4.5.2-r8", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-libxcrypt.yaml-b9898dbb7125f3678bc8c6cd9e7a43d9d9d2c518" }, { "spdxElementId": "SPDXRef-Package-apk-libxcrypt-4.5.2-r8", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-github.com-besser82-libxcrypt-v4.5.2-db70b42bd7b2a5b00a8580c8dec0aa66791c950a-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-libxcrypt", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-libxcrypt-673cf320fa080268" }, { "spdxElementId": "SPDXRef-Package-apk-libxcrypt-4.5.2-r8", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-libxcrypt" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-7a2156461e9eef432502f4f5a72108d721abffafd65fdb69f49b76606d049b68", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-libxcrypt-4.5.2-r8" }, { "spdxElementId": "SPDXRef-Package-apk-libxcrypt-dev-4.5.2-r8", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-libxcrypt.yaml-b9898dbb7125f3678bc8c6cd9e7a43d9d9d2c518" }, { "spdxElementId": "SPDXRef-Package-apk-libxcrypt-dev-4.5.2-r8", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-github.com-besser82-libxcrypt-v4.5.2-db70b42bd7b2a5b00a8580c8dec0aa66791c950a-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-libxcrypt-dev", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-libxcrypt-dev-8c2338cb2aa23912" }, { "spdxElementId": "SPDXRef-Package-apk-libxcrypt-dev-4.5.2-r8", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-libxcrypt-dev" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-7a2156461e9eef432502f4f5a72108d721abffafd65fdb69f49b76606d049b68", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-libxcrypt-dev-4.5.2-r8" }, { "spdxElementId": "SPDXRef-Package-apk-linux-headers-7.3.3-r0", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-linux-headers.yaml-eeddf20cbd03c0444c2f0ff756eaf232fd6e6954" }, { "spdxElementId": "SPDXRef-Package-apk-linux-headers-7.3.3-r0", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-github.com-gregkh-linux-v7.3.3-d50d994bffa3c7c6db2d8bc4c5f0c55e3f46b0cd-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-linux-headers", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-linux-headers-fff820186b196074" }, { "spdxElementId": "SPDXRef-Package-apk-linux-headers-7.3.3-r0", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-linux-headers" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-7a2156461e9eef432502f4f5a72108d721abffafd65fdb69f49b76606d049b68", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-linux-headers-7.3.3-r0" }, { "spdxElementId": "SPDXRef-Package-apk-glibc-2.44-dev-2.44-r15", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-glibc-2.44.yaml-f903916d7bbf6d7dc87dd9e05b827df096b22255" }, { "spdxElementId": "SPDXRef-Package-apk-glibc-2.44-dev-2.44-r15", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-gitlab.com-gnutools-glibc.git-release-2.44-master-47e2b570410fab606de29f550534a721184852c3-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-glibc-2.44-dev", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-glibc-2.44-dev-f24deef626112c50" }, { "spdxElementId": "SPDXRef-Package-apk-glibc-2.44-dev-2.44-r15", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-glibc-2.44-dev" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-7a2156461e9eef432502f4f5a72108d721abffafd65fdb69f49b76606d049b68", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-glibc-2.44-dev-2.44-r15" }, { "spdxElementId": "SPDXRef-Package-apk-libquadmath-16.2.0-r3", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-gcc.yaml-4d188060cbd00821a95f1ef60605da4817e781bb" }, { "spdxElementId": "SPDXRef-Package-apk-libquadmath-16.2.0-r3", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-gitlab.com-gnutools-gcc.git-releases-gcc-16.2.0-78d4ac73dd391005b895a6148cd9831e28e1208b-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-libquadmath", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-libquadmath-eced2a8c338f6266" }, { "spdxElementId": "SPDXRef-Package-apk-libquadmath-16.2.0-r3", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-libquadmath" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-7a2156461e9eef432502f4f5a72108d721abffafd65fdb69f49b76606d049b68", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-libquadmath-16.2.0-r3" }, { "spdxElementId": "SPDXRef-Package-apk-libstdcC43C43-dev-16.2.0-r3", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-gcc.yaml-4d188060cbd00821a95f1ef60605da4817e781bb" }, { "spdxElementId": "SPDXRef-Package-apk-libstdcC43C43-dev-16.2.0-r3", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-gitlab.com-gnutools-gcc.git-releases-gcc-16.2.0-78d4ac73dd391005b895a6148cd9831e28e1208b-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-libstdc---dev", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-libstdc---dev-9471f042b8187882" }, { "spdxElementId": "SPDXRef-Package-apk-libstdcC43C43-dev-16.2.0-r3", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-libstdc---dev" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-7a2156461e9eef432502f4f5a72108d721abffafd65fdb69f49b76606d049b68", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-libstdcC43C43-dev-16.2.0-r3" }, { "spdxElementId": "SPDXRef-Package-apk-openssf-compiler-options-20250904-r12", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-openssf-compiler-options.yaml-4d188060cbd00821a95f1ef60605da4817e781bb" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-openssf-compiler-options", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-openssf-compiler-options-210ef94615c3fa51" }, { "spdxElementId": "SPDXRef-Package-apk-openssf-compiler-options-20250904-r12", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-openssf-compiler-options" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-7a2156461e9eef432502f4f5a72108d721abffafd65fdb69f49b76606d049b68", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-openssf-compiler-options-20250904-r12" }, { "spdxElementId": "SPDXRef-Package-apk-posix-cc-wrappers-2-r10", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-posix-cc-wrappers.yaml-2337ebe7af4495f2fe254da240c747c753c2f87c" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-posix-cc-wrappers", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-posix-cc-wrappers-632bd7516159d11f" }, { "spdxElementId": "SPDXRef-Package-apk-posix-cc-wrappers-2-r10", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-posix-cc-wrappers" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-7a2156461e9eef432502f4f5a72108d721abffafd65fdb69f49b76606d049b68", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-posix-cc-wrappers-2-r10" }, { "spdxElementId": "SPDXRef-Package-apk-libatomic-16.2.0-r3", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-gcc.yaml-4d188060cbd00821a95f1ef60605da4817e781bb" }, { "spdxElementId": "SPDXRef-Package-apk-libatomic-16.2.0-r3", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-gitlab.com-gnutools-gcc.git-releases-gcc-16.2.0-78d4ac73dd391005b895a6148cd9831e28e1208b-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-libatomic", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-libatomic-e813bd19ce98ec2c" }, { "spdxElementId": "SPDXRef-Package-apk-libatomic-16.2.0-r3", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-libatomic" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-7a2156461e9eef432502f4f5a72108d721abffafd65fdb69f49b76606d049b68", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-libatomic-16.2.0-r3" }, { "spdxElementId": "SPDXRef-Package-apk-gmp-6.3.0-r12", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-gmp.yaml-443eb31899638f2f252b0e587db298058036ba64" }, { "spdxElementId": "SPDXRef-Package-apk-gmp-6.3.0-r12", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-gmp-6.3.0-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-gmp", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-gmp-d6ad0f29a7de0f81" }, { "spdxElementId": "SPDXRef-Package-apk-gmp-6.3.0-r12", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-gmp" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-7a2156461e9eef432502f4f5a72108d721abffafd65fdb69f49b76606d049b68", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-gmp-6.3.0-r12" }, { "spdxElementId": "SPDXRef-Package-apk-libgomp-16.2.0-r3", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-gcc.yaml-4d188060cbd00821a95f1ef60605da4817e781bb" }, { "spdxElementId": "SPDXRef-Package-apk-libgomp-16.2.0-r3", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-gitlab.com-gnutools-gcc.git-releases-gcc-16.2.0-78d4ac73dd391005b895a6148cd9831e28e1208b-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-libgomp", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-libgomp-125fda46fec4bf7c" }, { "spdxElementId": "SPDXRef-Package-apk-libgomp-16.2.0-r3", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-libgomp" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-7a2156461e9eef432502f4f5a72108d721abffafd65fdb69f49b76606d049b68", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-libgomp-16.2.0-r3" }, { "spdxElementId": "SPDXRef-Package-apk-isl-0.28-r6", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-isl.yaml-443eb31899638f2f252b0e587db298058036ba64" }, { "spdxElementId": "SPDXRef-Package-apk-isl-0.28-r6", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-repo.or.cz-isl.git-isl-0.28-6c2b19a0405759f4d31bf48b73492be4a2b1d813-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-isl", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-isl-8d545a41d55d54ef" }, { "spdxElementId": "SPDXRef-Package-apk-isl-0.28-r6", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-isl" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-7a2156461e9eef432502f4f5a72108d721abffafd65fdb69f49b76606d049b68", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-isl-0.28-r6" }, { "spdxElementId": "SPDXRef-Package-apk-mpfr-4.2.2-r5", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-mpfr.yaml-491b184c82ef2868d73a46a98997db789342ff15" }, { "spdxElementId": "SPDXRef-Package-apk-mpfr-4.2.2-r5", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-gitlab.inria.fr-mpfr-mpfr.git-4.2.2-eaa57b856d814af32f97d5e5eb129fb986235323-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-mpfr", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-mpfr-c34be4c04688944b" }, { "spdxElementId": "SPDXRef-Package-apk-mpfr-4.2.2-r5", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-mpfr" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-7a2156461e9eef432502f4f5a72108d721abffafd65fdb69f49b76606d049b68", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-mpfr-4.2.2-r5" }, { "spdxElementId": "SPDXRef-Package-apk-mpc-1.4.1-r3", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-mpc.yaml-491b184c82ef2868d73a46a98997db789342ff15" }, { "spdxElementId": "SPDXRef-Package-apk-mpc-1.4.1-r3", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-gitlab.inria.fr-mpc-mpc.git-1.4.1-532a18ae8222f928c58f7ffd1b4f0122062172bd-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-mpc", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-mpc-930fd1d45bf5075e" }, { "spdxElementId": "SPDXRef-Package-apk-mpc-1.4.1-r3", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-mpc" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-7a2156461e9eef432502f4f5a72108d721abffafd65fdb69f49b76606d049b68", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-mpc-1.4.1-r3" }, { "spdxElementId": "SPDXRef-Package-apk-gcc-16.2.0-r3", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-gcc.yaml-4d188060cbd00821a95f1ef60605da4817e781bb" }, { "spdxElementId": "SPDXRef-Package-apk-gcc-16.2.0-r3", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-gitlab.com-gnutools-gcc.git-releases-gcc-16.2.0-78d4ac73dd391005b895a6148cd9831e28e1208b-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-gcc", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-gcc-0e6e3694b0231f23" }, { "spdxElementId": "SPDXRef-Package-apk-gcc-16.2.0-r3", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-gcc" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-7a2156461e9eef432502f4f5a72108d721abffafd65fdb69f49b76606d049b68", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-gcc-16.2.0-r3" }, { "spdxElementId": "SPDXRef-Package-apk-make-4.4.1-r15", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-make.yaml-a54c6ffd90cbe4bb3ea62488789234b189e71bd5" }, { "spdxElementId": "SPDXRef-Package-apk-make-4.4.1-r15", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-git.savannah.gnu.org-git-make.git-4.4.1-d66a65ad5a0e31b287f53930b0f09e31801f1613-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-make", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-make-5690278a28233d1e" }, { "spdxElementId": "SPDXRef-Package-apk-make-4.4.1-r15", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-make" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-7a2156461e9eef432502f4f5a72108d721abffafd65fdb69f49b76606d049b68", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-make-4.4.1-r15" }, { "spdxElementId": "SPDXRef-Package-apk-pkgconf-3.0.10-r2", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-pkgconf.yaml-40e94215f5dcd578d6e737bd1b126cdbb5acf9cb" }, { "spdxElementId": "SPDXRef-Package-apk-pkgconf-3.0.10-r2", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-github.com-pkgconf-pkgconf-pkgconf-3.0.10-511e6e6b8c82367e75d02edb56ad98da766e06b6-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-pkgconf", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-pkgconf-6f387a3bcd6a4956" }, { "spdxElementId": "SPDXRef-Package-apk-pkgconf-3.0.10-r2", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-pkgconf" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-7a2156461e9eef432502f4f5a72108d721abffafd65fdb69f49b76606d049b68", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-pkgconf-3.0.10-r2" }, { "spdxElementId": "SPDXRef-Package-apk-build-base-1-r10", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-build-base.yaml-fc2e1e90888cd6bc7249d14081f49118edd5dab7" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-build-base", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-build-base-156943bbea3d824c" }, { "spdxElementId": "SPDXRef-Package-apk-build-base-1-r10", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-build-base" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-7a2156461e9eef432502f4f5a72108d721abffafd65fdb69f49b76606d049b68", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-build-base-1-r10" }, { "spdxElementId": "SPDXRef-Package-apk-libcrypt1-2.44-2.44-r15", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-glibc-2.44.yaml-f903916d7bbf6d7dc87dd9e05b827df096b22255" }, { "spdxElementId": "SPDXRef-Package-apk-libcrypt1-2.44-2.44-r15", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-gitlab.com-gnutools-glibc.git-release-2.44-master-47e2b570410fab606de29f550534a721184852c3-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-libcrypt1-2.44", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-libcrypt1-2.44-0f2dc656dd485ddc" }, { "spdxElementId": "SPDXRef-Package-apk-libcrypt1-2.44-2.44-r15", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-libcrypt1-2.44" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-7a2156461e9eef432502f4f5a72108d721abffafd65fdb69f49b76606d049b68", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-libcrypt1-2.44-2.44-r15" }, { "spdxElementId": "SPDXRef-Package-apk-busybox-1.38.0-r3", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-busybox.yaml-59d45eb49286129d8d21b2469befa3b55be4719b" }, { "spdxElementId": "SPDXRef-Package-apk-busybox-1.38.0-r3", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-github.com-vda-linux-busyboxC95mirror-1C9538C950-fc71374dfccd46448c62947269a35f1420d7ee28-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-busybox", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-busybox-3debcaeac335b503" }, { "spdxElementId": "SPDXRef-Package-apk-busybox-1.38.0-r3", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-busybox" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-7a2156461e9eef432502f4f5a72108d721abffafd65fdb69f49b76606d049b68", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-busybox-1.38.0-r3" }, { "spdxElementId": "SPDXRef-Package-apk-openssl-provider-legacy-allowed-4.1.0-r0", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-openssl-provider-legacy-allowed.yaml-aeae4801330be6fd269d5ed5640dc37b58ccab09" }, { "spdxElementId": "SPDXRef-Package-apk-openssl-provider-legacy-allowed-4.1.0-r0", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-github.com-openssl-openssl-openssl-4.1.0-2f4e3a5fec05394068cfa7379890ab552483a8a6-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-openssl-provider-legacy-allowed", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-openssl-provider-legacy-allowed-db13521aee4e9c16" }, { "spdxElementId": "SPDXRef-Package-apk-openssl-provider-legacy-allowed-4.1.0-r0", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-openssl-provider-legacy-allowed" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-7a2156461e9eef432502f4f5a72108d721abffafd65fdb69f49b76606d049b68", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-openssl-provider-legacy-allowed-4.1.0-r0" }, { "spdxElementId": "SPDXRef-Package-apk-libbrotlicommon1-1.2.1-r3", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-brotli.yaml-f5ef816d1cb2bd0e165a402c4e8a4c4622464bf3" }, { "spdxElementId": "SPDXRef-Package-apk-libbrotlicommon1-1.2.1-r3", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-github.com-google-brotli.git-v1.2.1-db24a98aed38a16de78cc05ca15cdd8dc2a0d92d-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-libbrotlicommon1", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-libbrotlicommon1-4cfba742c9bc8e0d" }, { "spdxElementId": "SPDXRef-Package-apk-libbrotlicommon1-1.2.1-r3", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-libbrotlicommon1" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-7a2156461e9eef432502f4f5a72108d721abffafd65fdb69f49b76606d049b68", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-libbrotlicommon1-1.2.1-r3" }, { "spdxElementId": "SPDXRef-Package-apk-libbrotlidec1-1.2.1-r3", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-brotli.yaml-f5ef816d1cb2bd0e165a402c4e8a4c4622464bf3" }, { "spdxElementId": "SPDXRef-Package-apk-libbrotlidec1-1.2.1-r3", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-github.com-google-brotli.git-v1.2.1-db24a98aed38a16de78cc05ca15cdd8dc2a0d92d-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-libbrotlidec1", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-libbrotlidec1-7682b7a41fbe0c53" }, { "spdxElementId": "SPDXRef-Package-apk-libbrotlidec1-1.2.1-r3", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-libbrotlidec1" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-7a2156461e9eef432502f4f5a72108d721abffafd65fdb69f49b76606d049b68", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-libbrotlidec1-1.2.1-r3" }, { "spdxElementId": "SPDXRef-Package-apk-libbrotlienc1-1.2.1-r3", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-brotli.yaml-f5ef816d1cb2bd0e165a402c4e8a4c4622464bf3" }, { "spdxElementId": "SPDXRef-Package-apk-libbrotlienc1-1.2.1-r3", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-github.com-google-brotli.git-v1.2.1-db24a98aed38a16de78cc05ca15cdd8dc2a0d92d-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-libbrotlienc1", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-libbrotlienc1-9032cd875fed45d9" }, { "spdxElementId": "SPDXRef-Package-apk-libbrotlienc1-1.2.1-r3", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-libbrotlienc1" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-7a2156461e9eef432502f4f5a72108d721abffafd65fdb69f49b76606d049b68", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-libbrotlienc1-1.2.1-r3" }, { "spdxElementId": "SPDXRef-Package-apk-openssl-4.0-libcrypto-4.0.3-r8", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-openssl-4.0.yaml-53fb2f6751f832fa61ddba06cb8a40dbba5f409f" }, { "spdxElementId": "SPDXRef-Package-apk-openssl-4.0-libcrypto-4.0.3-r8", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-github.com-openssl-openssl-openssl-4.0.3-af1775b60dfa141a4ad762585052cabeb9f37e9e-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-openssl-4.0-libcrypto", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-openssl-4.0-libcrypto-12ff2dbbb7bfc81c" }, { "spdxElementId": "SPDXRef-Package-apk-openssl-4.0-libcrypto-4.0.3-r8", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-openssl-4.0-libcrypto" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-7a2156461e9eef432502f4f5a72108d721abffafd65fdb69f49b76606d049b68", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-openssl-4.0-libcrypto-4.0.3-r8" }, { "spdxElementId": "SPDXRef-Package-apk-gdbm-1.26-r9", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-gdbm.yaml-443eb31899638f2f252b0e587db298058036ba64" }, { "spdxElementId": "SPDXRef-Package-apk-gdbm-1.26-r9", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-git.savannah.gnu.org-git-gdbm.git-v1.26-8ca8f03ab6cc125139a395ec2d522aebb15f8060-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-gdbm", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-gdbm-7c71982fcefc1584" }, { "spdxElementId": "SPDXRef-Package-apk-gdbm-1.26-r9", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-gdbm" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-7a2156461e9eef432502f4f5a72108d721abffafd65fdb69f49b76606d049b68", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-gdbm-1.26-r9" }, { "spdxElementId": "SPDXRef-Package-apk-lmdb-0.9.35-r3", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-lmdb.yaml-a4a523651db588c0ec27f7880438828e0eefec5a" }, { "spdxElementId": "SPDXRef-Package-apk-lmdb-0.9.35-r3", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-github.com-LMDB-lmdb.git-LMDBC950.9.35-69087ced3cb6082f7dcfb4fc2dcaa3b68a7e2e8c-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-lmdb", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-lmdb-6e9b5be743f2a982" }, { "spdxElementId": "SPDXRef-Package-apk-lmdb-0.9.35-r3", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-lmdb" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-7a2156461e9eef432502f4f5a72108d721abffafd65fdb69f49b76606d049b68", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-lmdb-0.9.35-r3" }, { "spdxElementId": "SPDXRef-Package-apk-readline-8.3-r3", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-readline.yaml-20a5359ac0a7a6aca23efa343f0f29c8d3ea1453" }, { "spdxElementId": "SPDXRef-Package-apk-readline-8.3-r3", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-git.savannah.gnu.org-git-readline.git-readline-8.3-447b8290b3e2e2d117dc8e9cdb83b0dc6448a638-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-readline", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-readline-ce2ac74b9aec712c" }, { "spdxElementId": "SPDXRef-Package-apk-readline-8.3-r3", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-readline" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-7a2156461e9eef432502f4f5a72108d721abffafd65fdb69f49b76606d049b68", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-readline-8.3-r3" }, { "spdxElementId": "SPDXRef-Package-apk-sqlite-libs-3.54.1-r0", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-sqlite.yaml-b0ca8c95606371be2557980059c10b34df30fa9f" }, { "spdxElementId": "SPDXRef-Package-apk-sqlite-libs-3.54.1-r0", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-sqlite-3.54.1-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-sqlite-libs", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-sqlite-libs-5fc3c1d467f94c6d" }, { "spdxElementId": "SPDXRef-Package-apk-sqlite-libs-3.54.1-r0", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-sqlite-libs" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-7a2156461e9eef432502f4f5a72108d721abffafd65fdb69f49b76606d049b68", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-sqlite-libs-3.54.1-r0" }, { "spdxElementId": "SPDXRef-Package-apk-heimdal-libs-7.8.0-r55", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-heimdal.yaml-98d0e0fa47c531020de219448a43d120a8c0360a" }, { "spdxElementId": "SPDXRef-Package-apk-heimdal-libs-7.8.0-r55", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-github.com-heimdal-heimdal-heimdal-7.8.0-a6cf94577c0d1e5bca5304342e4ddffb18255afe-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-heimdal-libs", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-heimdal-libs-6466eb5bb4aa80c4" }, { "spdxElementId": "SPDXRef-Package-apk-heimdal-libs-7.8.0-r55", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-heimdal-libs" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-7a2156461e9eef432502f4f5a72108d721abffafd65fdb69f49b76606d049b68", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-heimdal-libs-7.8.0-r55" }, { "spdxElementId": "SPDXRef-Package-apk-cyrus-sasl-heimdal-libs-2.1.28-r58", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-cyrus-sasl-heimdal.yaml-6a2a53d0046e82dc1f45ac4a9c9593d8d91aaa78" }, { "spdxElementId": "SPDXRef-Package-apk-cyrus-sasl-heimdal-libs-2.1.28-r58", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-github.com-cyrusimap-cyrus-sasl.git-cyrus-sasl-2.1.28-7a6b45b177070198fed0682bea5fa87c18abb084-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-cyrus-sasl-heimdal-libs", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-cyrus-sasl-heimdal-libs-fb4ec8f36333762d" }, { "spdxElementId": "SPDXRef-Package-apk-cyrus-sasl-heimdal-libs-2.1.28-r58", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-cyrus-sasl-heimdal-libs" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-7a2156461e9eef432502f4f5a72108d721abffafd65fdb69f49b76606d049b68", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-cyrus-sasl-heimdal-libs-2.1.28-r58" }, { "spdxElementId": "SPDXRef-Package-apk-krb5-conf-1.0-r10", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-krb5-conf.yaml-f0f4cc5b0d900deaf94dfdcd841e289db97111e1" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-krb5-conf", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-krb5-conf-b4e1ca5d34e15b9e" }, { "spdxElementId": "SPDXRef-Package-apk-krb5-conf-1.0-r10", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-krb5-conf" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-7a2156461e9eef432502f4f5a72108d721abffafd65fdb69f49b76606d049b68", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-krb5-conf-1.0-r10" }, { "spdxElementId": "SPDXRef-Package-apk-libcomC95err-1.47.4-r5", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-e2fsprogs.yaml-b89fefe984e6541788116bd15d4f8dce3dc021a9" }, { "spdxElementId": "SPDXRef-Package-apk-libcomC95err-1.47.4-r5", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-github.com-tytso-e2fsprogs-v1.47.4-7ee1d505ef3b37831215f490411f346fe57e9053-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-libcom-err", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-libcom-err-1abd12a37cdb1a36" }, { "spdxElementId": "SPDXRef-Package-apk-libcomC95err-1.47.4-r5", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-libcom-err" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-7a2156461e9eef432502f4f5a72108d721abffafd65fdb69f49b76606d049b68", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-libcomC95err-1.47.4-r5" }, { "spdxElementId": "SPDXRef-Package-apk-keyutils-libs-1.6.3-r41", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-keyutils.yaml-014624f79627768df6f5ff49f4265a7057c2e206" }, { "spdxElementId": "SPDXRef-Package-apk-keyutils-libs-1.6.3-r41", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-kernel.googlesource.com-pub-scm-linux-kernel-git-dhowells-keyutils.git-v1.6.3-cb3bb194cca88211cbfcdde2f10c0f43c3fb8ec3-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-keyutils-libs", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-keyutils-libs-3f2a0f44e7289356" }, { "spdxElementId": "SPDXRef-Package-apk-keyutils-libs-1.6.3-r41", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-keyutils-libs" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-7a2156461e9eef432502f4f5a72108d721abffafd65fdb69f49b76606d049b68", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-keyutils-libs-1.6.3-r41" }, { "spdxElementId": "SPDXRef-Package-apk-openssl-4.0-libssl-4.0.3-r8", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-openssl-4.0.yaml-53fb2f6751f832fa61ddba06cb8a40dbba5f409f" }, { "spdxElementId": "SPDXRef-Package-apk-openssl-4.0-libssl-4.0.3-r8", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-github.com-openssl-openssl-openssl-4.0.3-af1775b60dfa141a4ad762585052cabeb9f37e9e-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-openssl-4.0-libssl", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-openssl-4.0-libssl-120767333b011958" }, { "spdxElementId": "SPDXRef-Package-apk-openssl-4.0-libssl-4.0.3-r8", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-openssl-4.0-libssl" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-7a2156461e9eef432502f4f5a72108d721abffafd65fdb69f49b76606d049b68", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-openssl-4.0-libssl-4.0.3-r8" }, { "spdxElementId": "SPDXRef-Package-apk-libverto-0.3.2-r11", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-libverto.yaml-491b184c82ef2868d73a46a98997db789342ff15" }, { "spdxElementId": "SPDXRef-Package-apk-libverto-0.3.2-r11", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-github.com-latchset-libverto-0.3.2-1e8f574f702f270d96e42348e7cc088da5acc9ae-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-libverto", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-libverto-5541cdf6b32b3e46" }, { "spdxElementId": "SPDXRef-Package-apk-libverto-0.3.2-r11", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-libverto" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-7a2156461e9eef432502f4f5a72108d721abffafd65fdb69f49b76606d049b68", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-libverto-0.3.2-r11" }, { "spdxElementId": "SPDXRef-Package-apk-krb5-libs-1.22.2-r6", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-krb5.yaml-d8c1739b8ac0376433f810660cfe5c19987e66d2" }, { "spdxElementId": "SPDXRef-Package-apk-krb5-libs-1.22.2-r6", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-github.com-krb5-krb5.git-krb5-1.22.2-final-8570e77819563e036027e1da789d08ec9333ed4d-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-krb5-libs", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-krb5-libs-55983142037434b6" }, { "spdxElementId": "SPDXRef-Package-apk-krb5-libs-1.22.2-r6", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-krb5-libs" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-7a2156461e9eef432502f4f5a72108d721abffafd65fdb69f49b76606d049b68", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-krb5-libs-1.22.2-r6" }, { "spdxElementId": "SPDXRef-Package-apk-libunistring-1.5-r1", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-libunistring.yaml-d8c1739b8ac0376433f810660cfe5c19987e66d2" }, { "spdxElementId": "SPDXRef-Package-apk-libunistring-1.5-r1", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-https.git.savannah.gnu.org-git-libunistring.git-v1.5-9a0b11a515258048ba17f05009cbd317298de92d-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-libunistring", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-libunistring-c217a539699bc978" }, { "spdxElementId": "SPDXRef-Package-apk-libunistring-1.5-r1", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-libunistring" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-7a2156461e9eef432502f4f5a72108d721abffafd65fdb69f49b76606d049b68", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-libunistring-1.5-r1" }, { "spdxElementId": "SPDXRef-Package-apk-libidn2-2.3.8-r12", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-libidn2.yaml-491b184c82ef2868d73a46a98997db789342ff15" }, { "spdxElementId": "SPDXRef-Package-apk-libidn2-2.3.8-r12", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-gitlab.com-libidn-libidn2-v2.3.8-9bc3ac79e2ae81ade245a0e308bf13c981efaa83-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-libidn2", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-libidn2-9d8572c340a94c5b" }, { "spdxElementId": "SPDXRef-Package-apk-libidn2-2.3.8-r12", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-libidn2" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-7a2156461e9eef432502f4f5a72108d721abffafd65fdb69f49b76606d049b68", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-libidn2-2.3.8-r12" }, { "spdxElementId": "SPDXRef-Package-apk-libldap-2.7-2.7.2-r0", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-openldap-2.7.yaml-0906e934a58fa878f8d3cfa650c6aab092cc7f26" }, { "spdxElementId": "SPDXRef-Package-apk-libldap-2.7-2.7.2-r0", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-github.com-openldap-openldap.git-OPENLDAPC95RELC95ENGC952C957C952-5030280ed039f03fe7725a21f892d7f4e0b98076-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-libldap-2.7", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-libldap-2.7-fda93f6e5cb8b10f" }, { "spdxElementId": "SPDXRef-Package-apk-libldap-2.7-2.7.2-r0", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-libldap-2.7" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-7a2156461e9eef432502f4f5a72108d721abffafd65fdb69f49b76606d049b68", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-libldap-2.7-2.7.2-r0" }, { "spdxElementId": "SPDXRef-Package-apk-libnghttp2-14-1.71.0-r0", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-nghttp2.yaml-153ee2bd742f744ddedf5c4a97110fa46307574b" }, { "spdxElementId": "SPDXRef-Package-apk-libnghttp2-14-1.71.0-r0", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-github.com-nghttp2-nghttp2.git-v1.71.0-80dcb8140af050fac91a7e6af4fc6dd013404bd1-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-libnghttp2-14", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-libnghttp2-14-f0405241798ad783" }, { "spdxElementId": "SPDXRef-Package-apk-libnghttp2-14-1.71.0-r0", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-libnghttp2-14" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-7a2156461e9eef432502f4f5a72108d721abffafd65fdb69f49b76606d049b68", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-libnghttp2-14-1.71.0-r0" }, { "spdxElementId": "SPDXRef-Package-apk-nghttp3-1.19.0-r0", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-nghttp3.yaml-10e9291816e1a18eee8044d5c02177de477e1f29" }, { "spdxElementId": "SPDXRef-Package-apk-nghttp3-1.19.0-r0", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-github.com-ngtcp2-nghttp3.git-v1.19.0-dc83309ca5fd2beb91cc5c030a2d30525e9f2a00-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-nghttp3", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-nghttp3-55243b5027774927" }, { "spdxElementId": "SPDXRef-Package-apk-nghttp3-1.19.0-r0", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-nghttp3" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-7a2156461e9eef432502f4f5a72108d721abffafd65fdb69f49b76606d049b68", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-nghttp3-1.19.0-r0" }, { "spdxElementId": "SPDXRef-Package-apk-ngtcp2-1.26.0-r0", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-ngtcp2.yaml-a3a25ebdd1c3e71a190ca09e4f5a7beb6732dc78" }, { "spdxElementId": "SPDXRef-Package-apk-ngtcp2-1.26.0-r0", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-github.com-ngtcp2-ngtcp2.git-v1.26.0-6a22a4d7a111f6b52391910e40ad3681a09cfb9c-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-ngtcp2", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-ngtcp2-21585986ccd703d4" }, { "spdxElementId": "SPDXRef-Package-apk-ngtcp2-1.26.0-r0", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-ngtcp2" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-7a2156461e9eef432502f4f5a72108d721abffafd65fdb69f49b76606d049b68", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-ngtcp2-1.26.0-r0" }, { "spdxElementId": "SPDXRef-Package-apk-libpsl-0.23.3-r4", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-libpsl.yaml-491b184c82ef2868d73a46a98997db789342ff15" }, { "spdxElementId": "SPDXRef-Package-apk-libpsl-0.23.3-r4", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-github.com-rockdaboot-libpsl.git-0.23.3-c486db8d221cbac55f87508d4da4db4497760997-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-libpsl", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-libpsl-00717f3e46847b47" }, { "spdxElementId": "SPDXRef-Package-apk-libpsl-0.23.3-r4", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-libpsl" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-7a2156461e9eef432502f4f5a72108d721abffafd65fdb69f49b76606d049b68", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-libpsl-0.23.3-r4" }, { "spdxElementId": "SPDXRef-Package-apk-libcurl-openssl4-8.23.0-r3", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-curl.yaml-010cb3d3ce5812142c1ff59d0b260650190c6241" }, { "spdxElementId": "SPDXRef-Package-apk-libcurl-openssl4-8.23.0-r3", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-github.com-curl-curl.git-curl-8C9523C950-3163ec065643ba20709f190111f42c3e1fe95273-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-libcurl-openssl4", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-libcurl-openssl4-dbf9448ef8140af5" }, { "spdxElementId": "SPDXRef-Package-apk-libcurl-openssl4-8.23.0-r3", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-libcurl-openssl4" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-7a2156461e9eef432502f4f5a72108d721abffafd65fdb69f49b76606d049b68", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-libcurl-openssl4-8.23.0-r3" }, { "spdxElementId": "SPDXRef-Package-apk-libexpat1-2.10.0-r1", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-expat.yaml-5aeb575ed7ca64fb21dfda042e170d08f1654bbc" }, { "spdxElementId": "SPDXRef-Package-apk-libexpat1-2.10.0-r1", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-github.com-libexpat-libexpat-RC952C9510C950-a70841d9ffa64ddde29ab824ed6305035ebe4c47-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-libexpat1", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-libexpat1-95b2883a4585c888" }, { "spdxElementId": "SPDXRef-Package-apk-libexpat1-2.10.0-r1", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-libexpat1" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-7a2156461e9eef432502f4f5a72108d721abffafd65fdb69f49b76606d049b68", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-libexpat1-2.10.0-r1" }, { "spdxElementId": "SPDXRef-Package-apk-libpcre2-8-0-10.49-r3", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-pcre2.yaml-5aeb575ed7ca64fb21dfda042e170d08f1654bbc" }, { "spdxElementId": "SPDXRef-Package-apk-libpcre2-8-0-10.49-r3", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-github.com-PCRE2Project-pcre2.git-pcre2-10.49-6f9d7c1373262c541324a16a358785b33ef116cf-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-libpcre2-8-0", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-libpcre2-8-0-d0d4429c86d2814c" }, { "spdxElementId": "SPDXRef-Package-apk-libpcre2-8-0-10.49-r3", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-libpcre2-8-0" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-7a2156461e9eef432502f4f5a72108d721abffafd65fdb69f49b76606d049b68", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-libpcre2-8-0-10.49-r3" }, { "spdxElementId": "SPDXRef-Package-apk-git-2.56.0-r3", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-git.yaml-a3655395a06e663e8406d260a966b9e022e11f7e" }, { "spdxElementId": "SPDXRef-Package-apk-git-2.56.0-r3", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-kernel.googlesource.com-pub-scm-git-git.git-v2.56.0-a018953688f1b10bddf91bff8747068f5f4746a4-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-git", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-git-19db310f7dfcfb46" }, { "spdxElementId": "SPDXRef-Package-apk-git-2.56.0-r3", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-git" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-7a2156461e9eef432502f4f5a72108d721abffafd65fdb69f49b76606d049b68", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-git-2.56.0-r3" }, { "spdxElementId": "SPDXRef-Package-apk-go-1.27-upstream-1.27.3-r0", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-melange-go-1.27-upstream.yaml-60d4c5fca1dae7e58bf86478a7175ec40f8c7df5" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-7a2156461e9eef432502f4f5a72108d721abffafd65fdb69f49b76606d049b68", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-go-1.27-upstream-1.27.3-r0" }, { "spdxElementId": "SPDXRef-Package-apk-libbz2-1-1.0.8-r30", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-bzip2.yaml-f353805867a3059d7018cceac9746da7c23634fe" }, { "spdxElementId": "SPDXRef-Package-apk-libbz2-1-1.0.8-r30", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-sourceware.org-git-bzip2.git-bzip2-1.0.8-6a8690fc8d26c815e798c588f796eabe9d684cf0-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-libbz2-1", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-libbz2-1-161b9abb2535e851" }, { "spdxElementId": "SPDXRef-Package-apk-libbz2-1-1.0.8-r30", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-libbz2-1" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-7a2156461e9eef432502f4f5a72108d721abffafd65fdb69f49b76606d049b68", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-libbz2-1-1.0.8-r30" }, { "spdxElementId": "SPDXRef-Package-apk-libedit-3.1-r20", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-libedit.yaml-b6f71ed601ac8895077ff7ce04b2c6eebbe628a6" }, { "spdxElementId": "SPDXRef-Package-apk-libedit-3.1-r20", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-libedit-3.1-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-libedit", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-libedit-b57a58457f542416" }, { "spdxElementId": "SPDXRef-Package-apk-libedit-3.1-r20", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-libedit" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-7a2156461e9eef432502f4f5a72108d721abffafd65fdb69f49b76606d049b68", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-libedit-3.1-r20" }, { "spdxElementId": "SPDXRef-Package-apk-libffi-3.8.0-r2", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-libffi.yaml-aaa2344b75ef8b19889f087c91e10b11f191e15c" }, { "spdxElementId": "SPDXRef-Package-apk-libffi-3.8.0-r2", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-github.com-libffi-libffi.git-v3.8.0-12ffd1f9dc56fcea79d2f742f424301ae668d663-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-libffi", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-libffi-e8a6a080506d2ad6" }, { "spdxElementId": "SPDXRef-Package-apk-libffi-3.8.0-r2", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-libffi" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-7a2156461e9eef432502f4f5a72108d721abffafd65fdb69f49b76606d049b68", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-libffi-3.8.0-r2" }, { "spdxElementId": "SPDXRef-Package-apk-libsepol-3.11-r3", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-libsepol.yaml-203e65dd274965582cb0226c6aa7ca368c2e684e" }, { "spdxElementId": "SPDXRef-Package-apk-libsepol-3.11-r3", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-github.com-SELinuxProject-selinux.git-libsepol-3.11-2233a23a4d4f1bf29054037babec13f30d038e65-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-libsepol", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-libsepol-645fbc9cda7694bd" }, { "spdxElementId": "SPDXRef-Package-apk-libsepol-3.11-r3", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-libsepol" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-7a2156461e9eef432502f4f5a72108d721abffafd65fdb69f49b76606d049b68", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-libsepol-3.11-r3" }, { "spdxElementId": "SPDXRef-Package-apk-libselinux-3.11-r2", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-libselinux.yaml-7c655233085e1d8dec7fac1996f808f33b0e96cb" }, { "spdxElementId": "SPDXRef-Package-apk-libselinux-3.11-r2", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-github.com-SELinuxProject-selinux.git-libselinux-3.11-2233a23a4d4f1bf29054037babec13f30d038e65-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-libselinux", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-libselinux-da40defb50e89447" }, { "spdxElementId": "SPDXRef-Package-apk-libselinux-3.11-r2", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-libselinux" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-7a2156461e9eef432502f4f5a72108d721abffafd65fdb69f49b76606d049b68", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-libselinux-3.11-r2" }, { "spdxElementId": "SPDXRef-Package-apk-libuuid-2.42.4-r2", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-util-linux.yaml-8298ba7be686605b03c1943f22ccf5a0640e0042" }, { "spdxElementId": "SPDXRef-Package-apk-libuuid-2.42.4-r2", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-github.com-util-linux-util-linux-v2.42.4-d76cbf8f13e65ff657344f7f6a90042cf755ba59-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-libuuid", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-libuuid-060f7e4f1502928d" }, { "spdxElementId": "SPDXRef-Package-apk-libuuid-2.42.4-r2", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-libuuid" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-7a2156461e9eef432502f4f5a72108d721abffafd65fdb69f49b76606d049b68", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-libuuid-2.42.4-r2" }, { "spdxElementId": "SPDXRef-Package-apk-mpdecimal-4.0.1-r6", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-mpdecimal.yaml-491b184c82ef2868d73a46a98997db789342ff15" }, { "spdxElementId": "SPDXRef-Package-apk-mpdecimal-4.0.1-r6", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-mpdecimal-4.0.1-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-mpdecimal", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-mpdecimal-a88311b96b77a716" }, { "spdxElementId": "SPDXRef-Package-apk-mpdecimal-4.0.1-r6", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-mpdecimal" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-7a2156461e9eef432502f4f5a72108d721abffafd65fdb69f49b76606d049b68", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-mpdecimal-4.0.1-r6" }, { "spdxElementId": "SPDXRef-Package-apk-openssh-client-10.6C95p2-r0", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-openssh.yaml-71f0a5f6e7036217131d19064dbc1e352c517704" }, { "spdxElementId": "SPDXRef-Package-apk-openssh-client-10.6C95p2-r0", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-github.com-openssh-openssh-portable-VC9510C956C95P2-d449e662b6b8b8cb20e852d8084c269af1c5e8f1-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-openssh-client", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-openssh-client-9c64c3ac2c1eaffa" }, { "spdxElementId": "SPDXRef-Package-apk-openssh-client-10.6C95p2-r0", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-openssh-client" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-7a2156461e9eef432502f4f5a72108d721abffafd65fdb69f49b76606d049b68", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-openssh-client-10.6C95p2-r0" }, { "spdxElementId": "SPDXRef-Package-apk-py3-pip-wheel-26.2.2-r2", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-py3-pip.yaml-58b78718f8e8947523a1ad3eb0deb82aee6911d7" }, { "spdxElementId": "SPDXRef-Package-apk-py3-pip-wheel-26.2.2-r2", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-github.com-pypa-pip-26.2.2-b3b696fe2122f2339d782517559bfade2cb6b879-0" }, { "spdxElementId": "SPDXRef-Package-apk-py3-pip-wheel-26.2.2-r2", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-github.com-urllib3-urllib3-2.8.0-b1d30ab61fe0db8f11092805e8c5ac43e091064a-2" }, { "spdxElementId": "SPDXRef-Package-apk-py3-pip-wheel-26.2.2-r2", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-github.com-msgpack-msgpack-python-v1.2.3-742cb6d7ad141343edcccc829b5b06d0c6f8fcb5-3" }, { "spdxElementId": "SPDXRef-Package-apk-py3-pip-wheel-26.2.2-r2", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-github.com-certifi-python-certifi-2026.10.23-b60466c9f2882d9cf088943c650b0faac06c080c-4" }, { "spdxElementId": "SPDXRef-Package-apk-py3-pip-wheel-f8febf0c4eeb5aea", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-python-pip-4e6f3f5c92b2698c" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-py3-pip-wheel", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-python-pip-4e6f3f5c92b2698c" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-py3-pip-wheel", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-py3-pip-wheel-f8febf0c4eeb5aea" }, { "spdxElementId": "SPDXRef-Package-apk-py3-pip-wheel-26.2.2-r2", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-py3-pip-wheel" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-7a2156461e9eef432502f4f5a72108d721abffafd65fdb69f49b76606d049b68", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-py3-pip-wheel-26.2.2-r2" }, { "spdxElementId": "SPDXRef-Package-apk-xz-5.8.4-r1", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-xz.yaml-5aeb575ed7ca64fb21dfda042e170d08f1654bbc" }, { "spdxElementId": "SPDXRef-Package-apk-xz-5.8.4-r1", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-github.com-tukaani-project-xz-v5.8.4-d3e650e63c110e830fd5391e7f8b45df0b91d3da-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-xz", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-xz-9348e79a976cf12a" }, { "spdxElementId": "SPDXRef-Package-apk-xz-5.8.4-r1", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-xz" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-7a2156461e9eef432502f4f5a72108d721abffafd65fdb69f49b76606d049b68", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-xz-5.8.4-r1" }, { "spdxElementId": "SPDXRef-Package-apk-python-3.13-base-3.13.18C95git20261030-r0", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-python-3.13.yaml-52a27d12b5ebd918e282db0e2ff573eec6e57aeb" }, { "spdxElementId": "SPDXRef-Package-apk-python-3.13-base-3.13.18C95git20261030-r0", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-github.com-python-cpython-3.13-42155a0feaca9ba6991942c323cbe9fb7278be3c-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-python-3.13-base", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-python-3.13-base-c5e711b20bfe5612" }, { "spdxElementId": "SPDXRef-Package-apk-python-3.13-base-3.13.18C95git20261030-r0", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-python-3.13-base" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-7a2156461e9eef432502f4f5a72108d721abffafd65fdb69f49b76606d049b68", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-python-3.13-base-3.13.18C95git20261030-r0" }, { "spdxElementId": "SPDXRef-Package-apk-python-3.13-3.13.18C95git20261030-r0", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-python-3.13.yaml-52a27d12b5ebd918e282db0e2ff573eec6e57aeb" }, { "spdxElementId": "SPDXRef-Package-apk-python-3.13-3.13.18C95git20261030-r0", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-github.com-python-cpython-3.13-42155a0feaca9ba6991942c323cbe9fb7278be3c-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-python-3.13", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-python-3.13-11dd55cbd97276c0" }, { "spdxElementId": "SPDXRef-Package-apk-python-3.13-3.13.18C95git20261030-r0", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-python-3.13" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-7a2156461e9eef432502f4f5a72108d721abffafd65fdb69f49b76606d049b68", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-python-3.13-3.13.18C95git20261030-r0" }, { "spdxElementId": "SPDXRef-Package-apk-tzdata-2026f-r0", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-tzdata.yaml-b01ceefc114cf44ccb6d35f405795435f98bf0c2" }, { "spdxElementId": "SPDXRef-Package-apk-tzdata-2026f-r0", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-github.com-eggert-tz-2026f-a6cb1a1cebcc96269a02b25323c1a9424e3349a8-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-tzdata", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-tzdata-c9ffaae8b2257589" }, { "spdxElementId": "SPDXRef-Package-apk-tzdata-2026f-r0", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-tzdata" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-7a2156461e9eef432502f4f5a72108d721abffafd65fdb69f49b76606d049b68", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-tzdata-2026f-r0" } ] }