{ "SPDXID": "SPDXRef-DOCUMENT", "name": "sbom-sha256:dad5593e5839ce63321aecd9953f4c19021d7db48ea049c76a93f30aaab912d6", "spdxVersion": "SPDX-2.3", "creationInfo": { "created": "2026-11-09T20:44:16Z", "creators": [ "Tool: apko (v1.4.18)", "Organization: Chainguard, Inc" ], "licenseListVersion": "3.27" }, "dataLicense": "CC0-1.0", "documentNamespace": "https://spdx.org/spdxdocs/apko/", "documentDescribes": [ "SPDXRef-Package-Image-sha256-2fa9f3b8b5278e28d05bee0e797db69ef6ec8030575f2e5086732fba3f5ac0cf" ], "packages": [ { "SPDXID": "SPDXRef-Package-Image-sha256-2fa9f3b8b5278e28d05bee0e797db69ef6ec8030575f2e5086732fba3f5ac0cf", "name": "sha256:2fa9f3b8b5278e28d05bee0e797db69ef6ec8030575f2e5086732fba3f5ac0cf", "versionInfo": "sha256:2fa9f3b8b5278e28d05bee0e797db69ef6ec8030575f2e5086732fba3f5ac0cf", "filesAnalyzed": false, "description": "apko container image", "downloadLocation": "NOASSERTION", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "CONTAINER", "checksums": [ { "algorithm": "SHA256", "checksumValue": "2fa9f3b8b5278e28d05bee0e797db69ef6ec8030575f2e5086732fba3f5ac0cf" } ], "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:oci/go@sha256:2fa9f3b8b5278e28d05bee0e797db69ef6ec8030575f2e5086732fba3f5ac0cf?arch=amd64\u0026mediaType=application%2Fvnd.oci.image.manifest.v1%2Bjson\u0026os=linux", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-ImageLayer-sha256-dad5593e5839ce63321aecd9953f4c19021d7db48ea049c76a93f30aaab912d6", "name": "sha256:dad5593e5839ce63321aecd9953f4c19021d7db48ea049c76a93f30aaab912d6", "versionInfo": "20230201", "filesAnalyzed": false, "description": "apko operating system layer", "downloadLocation": "NOASSERTION", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "CONTAINER", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:oci/go@sha256:dad5593e5839ce63321aecd9953f4c19021d7db48ea049c76a93f30aaab912d6?arch=amd64\u0026mediaType=application%2Fvnd.oci.image.layer.v1.tar%2Bgzip\u0026os=linux", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-OperatingSystem-wolfi", "name": "wolfi", "versionInfo": "20230201", "filesAnalyzed": false, "description": "Operating System", "downloadLocation": "NOASSERTION", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "OPERATING_SYSTEM" }, { "SPDXID": "SPDXRef-Package-apk-wolfi-baselayout-20230201-r31", "name": "wolfi-baselayout", "versionInfo": "20230201-r31", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/wolfi-baselayout@20230201-r31?arch=x86_64\u0026distro=wolfi", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Melange-wolfi-baselayout.yaml-ed415005c84750f03c4a9252137813734a224ae7", "name": "wolfi-baselayout.yaml", "versionInfo": "ed415005c84750f03c4a9252137813734a224ae7", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "INSTALL", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/chainguard-dev/stereo@ed415005c84750f03c4a9252137813734a224ae7#wolfi-baselayout.yaml", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-wolfi-baselayout-9980a17ea85a76d3", "name": "wolfi-baselayout", "versionInfo": "20230201-r31", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "description": "baselayout data for Wolfi", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/wolfi-baselayout@20230201-r31?arch=x86_64\u0026origin=wolfi-baselayout", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-wolfi-baselayout", "name": "wolfi-baselayout", "versionInfo": "20230201-r31", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-ca-certificates-bundle-20261020-r0", "name": "ca-certificates-bundle", "versionInfo": "20261020-r0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MPL-2.0 AND MIT", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/ca-certificates-bundle@20261020-r0?arch=x86_64\u0026distro=wolfi", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Melange-ca-certificates.yaml-8061afafa65af5a9026707a8880e14120dd6f4a0", "name": "ca-certificates.yaml", "versionInfo": "8061afafa65af5a9026707a8880e14120dd6f4a0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "INSTALL", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/chainguard-dev/stereo@8061afafa65af5a9026707a8880e14120dd6f4a0#ca-certificates.yaml", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Source-gitlab.alpinelinux.org-alpine-ca-certificates-20261020-2058424fda70ee478bcce872dcf141a0c5499ee0-0", "name": "alpine/ca-certificates", "versionInfo": "20261020", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MPL-2.0 AND MIT", "downloadLocation": "https://tarballs.cgr.dev/a/f7f6555663adc30d4e3c43a90ddef6942dabe93d06f7a7201cf29d993222346a-2058424fda70ee478bcce872dcf141a0c5499ee0.tar.gz", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "SOURCE", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:generic/alpine%2Fca-certificates@20261020?vcs_url=git%2Bhttps:%2F%2Fgitlab.alpinelinux.org%2Falpine%2Fca-certificates%402058424fda70ee478bcce872dcf141a0c5499ee0", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-ca-certificates-bundle-3a36aed2688bdba8", "name": "ca-certificates-bundle", "versionInfo": "20261020-r0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "(MPL-2.0 AND MIT)", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/ca-certificates-bundle@20261020-r0?arch=x86_64\u0026origin=ca-certificates", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-ca-certificates-bundle", "name": "ca-certificates-bundle", "versionInfo": "20261020-r0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-glibc-2.44-locale-posix-2.44-r15", "name": "glibc-2.44-locale-posix", "versionInfo": "2.44-r15", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "LGPL-2.1-or-later", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/glibc-2.44-locale-posix@2.44-r15?arch=x86_64\u0026distro=wolfi", "referenceType": "purl" }, { "referenceCategory": "SECURITY", "referenceLocator": "cpe:2.3:a:gnu:glibc:2.44:*:*:*:*:*:*:*", "referenceType": "cpe23Type" } ] }, { "SPDXID": "SPDXRef-Package-Melange-glibc-2.44.yaml-f903916d7bbf6d7dc87dd9e05b827df096b22255", "name": "glibc-2.44.yaml", "versionInfo": "f903916d7bbf6d7dc87dd9e05b827df096b22255", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "INSTALL", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/chainguard-dev/stereo@f903916d7bbf6d7dc87dd9e05b827df096b22255#glibc-2.44.yaml", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Source-gitlab.com-gnutools-glibc.git-release-2.44-master-47e2b570410fab606de29f550534a721184852c3-0", "name": "gnutools/glibc", "versionInfo": "47e2b570410fab606de29f550534a721184852c3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "LGPL-2.1-or-later", "downloadLocation": "https://tarballs.cgr.dev/g/9390037ac2ec26cf74ce7c6709d852e0ce67205355e04fbdb9b9549f47a5bb40-47e2b570410fab606de29f550534a721184852c3.tar.gz", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "SOURCE", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:generic/gnutools%2Fglibc@47e2b570410fab606de29f550534a721184852c3?vcs_url=git%2Bhttps:%2F%2Fgitlab.com%2Fgnutools%2Fglibc.git%4047e2b570410fab606de29f550534a721184852c3", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-glibc-2.44-locale-posix-a56ff4917dc48084", "name": "glibc-2.44-locale-posix", "versionInfo": "2.44-r15", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "LGPL-2.1-or-later", "description": "POSIX locale data for glibc", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "SECURITY", "referenceLocator": "cpe:2.3:a:gnu:glibc:2.44-r15:*:*:*:*:*:*:*", "referenceType": "cpe23Type" }, { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/glibc-2.44-locale-posix@2.44-r15?arch=x86_64\u0026origin=glibc-2.44", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-glibc-2.44-locale-posix", "name": "glibc-2.44-locale-posix", "versionInfo": "2.44-r15", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-libgcc-16.2.0-r3", "name": "libgcc", "versionInfo": "16.2.0-r3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "GPL-3.0-or-later WITH GCC-exception-3.1", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/libgcc@16.2.0-r3?arch=x86_64\u0026distro=wolfi", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Melange-gcc.yaml-4d188060cbd00821a95f1ef60605da4817e781bb", "name": "gcc.yaml", "versionInfo": "4d188060cbd00821a95f1ef60605da4817e781bb", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "INSTALL", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/chainguard-dev/stereo@4d188060cbd00821a95f1ef60605da4817e781bb#gcc.yaml", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Source-gitlab.com-gnutools-gcc.git-releases-gcc-16.2.0-78d4ac73dd391005b895a6148cd9831e28e1208b-0", "name": "gnutools/gcc", "versionInfo": "releases/gcc-16.2.0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "GPL-3.0-or-later WITH GCC-exception-3.1", "downloadLocation": "https://tarballs.cgr.dev/g/dc3e72361e36d33e861a0662815d63a4f1b8578521cc6935343a4aa87327bdec-78d4ac73dd391005b895a6148cd9831e28e1208b.tar.gz", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "SOURCE", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:generic/gnutools%2Fgcc@releases%2Fgcc-16.2.0?vcs_url=git%2Bhttps:%2F%2Fgitlab.com%2Fgnutools%2Fgcc.git%4078d4ac73dd391005b895a6148cd9831e28e1208b", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-libgcc-c8364f237745c3d5", "name": "libgcc", "versionInfo": "16.2.0-r3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "(GPL-3.0-or-later WITH GCC-exception-3.1)", "description": "GCC runtime library", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "SECURITY", "referenceLocator": "cpe:2.3:a:gnu:gcc:16.2.0:*:*:*:*:*:*:*", "referenceType": "cpe23Type" }, { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/libgcc@16.2.0-r3?arch=x86_64\u0026origin=gcc", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-libgcc", "name": "libgcc", "versionInfo": "16.2.0-r3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-glibc-2.44-2.44-r15", "name": "glibc-2.44", "versionInfo": "2.44-r15", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "LGPL-2.1-or-later", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/glibc-2.44@2.44-r15?arch=x86_64\u0026distro=wolfi", "referenceType": "purl" }, { "referenceCategory": "SECURITY", "referenceLocator": "cpe:2.3:a:gnu:glibc:2.44:*:*:*:*:*:*:*", "referenceType": "cpe23Type" } ] }, { "SPDXID": "SPDXRef-Package-apk-glibc-2.44-c1689b70e1563cb1", "name": "glibc-2.44", "versionInfo": "2.44-r15", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "LGPL-2.1-or-later", "description": "the GNU C library", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "SECURITY", "referenceLocator": "cpe:2.3:a:gnu:glibc:2.44-r15:*:*:*:*:*:*:*", "referenceType": "cpe23Type" }, { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/glibc-2.44@2.44-r15?arch=x86_64\u0026origin=glibc-2.44", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-glibc-2.44", "name": "glibc-2.44", "versionInfo": "2.44-r15", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-ld-linux-2.44-2.44-r15", "name": "ld-linux-2.44", "versionInfo": "2.44-r15", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "LGPL-2.1-or-later", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/ld-linux-2.44@2.44-r15?arch=x86_64\u0026distro=wolfi", "referenceType": "purl" }, { "referenceCategory": "SECURITY", "referenceLocator": "cpe:2.3:a:gnu:glibc:2.44:*:*:*:*:*:*:*", "referenceType": "cpe23Type" } ] }, { "SPDXID": "SPDXRef-Package-apk-ld-linux-2.44-eb48de0a040b9e28", "name": "ld-linux-2.44", "versionInfo": "2.44-r15", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "LGPL-2.1-or-later", "description": "the GLIBC ELF interpreter", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "SECURITY", "referenceLocator": "cpe:2.3:a:gnu:glibc:2.44-r15:*:*:*:*:*:*:*", "referenceType": "cpe23Type" }, { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/ld-linux-2.44@2.44-r15?arch=x86_64\u0026origin=glibc-2.44", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-ld-linux-2.44", "name": "ld-linux-2.44", "versionInfo": "2.44-r15", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-ncurses-terminfo-base-6.6.20261107-r0", "name": "ncurses-terminfo-base", "versionInfo": "6.6.20261107-r0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/ncurses-terminfo-base@6.6.20261107-r0?arch=x86_64\u0026distro=wolfi", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Melange-ncurses.yaml-57b90c0084b0bc101663cdfcaa44f4ce83312443", "name": "ncurses.yaml", "versionInfo": "57b90c0084b0bc101663cdfcaa44f4ce83312443", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "INSTALL", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/chainguard-dev/stereo@57b90c0084b0bc101663cdfcaa44f4ce83312443#ncurses.yaml", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Source-github.com-ThomasDickey-ncurses-snapshots-v6C956C9520261107-7404b376832583182c52722dc09d86b8675db375-0", "name": "ncurses-snapshots", "versionInfo": "v6_6_20261107", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "downloadLocation": "https://github.com/ThomasDickey/ncurses-snapshots/archive/7404b376832583182c52722dc09d86b8675db375.tar.gz", "originator": "Organization: Thomasdickey", "supplier": "Organization: Thomasdickey", "primaryPackagePurpose": "SOURCE", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/thomasdickey/ncurses-snapshots@v6_6_20261107", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-ncurses-terminfo-base-6598c48598cb2742", "name": "ncurses-terminfo-base", "versionInfo": "6.6.20261107-r0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "description": "descriptions of common terminals", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "SECURITY", "referenceLocator": "cpe:2.3:a:gnu:ncurses:6.6.20261107:*:*:*:*:*:*:*", "referenceType": "cpe23Type" }, { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/ncurses-terminfo-base@6.6.20261107-r0?arch=x86_64\u0026origin=ncurses", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-ncurses-terminfo-base", "name": "ncurses-terminfo-base", "versionInfo": "6.6.20261107-r0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-ncurses-6.6.20261107-r0", "name": "ncurses", "versionInfo": "6.6.20261107-r0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/ncurses@6.6.20261107-r0?arch=x86_64\u0026distro=wolfi", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-ncurses-d8905fddac6bbdfe", "name": "ncurses", "versionInfo": "6.6.20261107-r0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "description": "console display library", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "SECURITY", "referenceLocator": "cpe:2.3:a:gnu:ncurses:6.6.20261107:*:*:*:*:*:*:*", "referenceType": "cpe23Type" }, { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/ncurses@6.6.20261107-r0?arch=x86_64\u0026origin=ncurses", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-ncurses", "name": "ncurses", "versionInfo": "6.6.20261107-r0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-bash-5.3-r14", "name": "bash", "versionInfo": "5.3-r14", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "GPL-3.0-or-later", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/bash@5.3-r14?arch=x86_64\u0026distro=wolfi", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Melange-bash.yaml-ac7b15dc2695924986372a27cd7d6c4e029c5efa", "name": "bash.yaml", "versionInfo": "ac7b15dc2695924986372a27cd7d6c4e029c5efa", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "INSTALL", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/chainguard-dev/stereo@ac7b15dc2695924986372a27cd7d6c4e029c5efa#bash.yaml", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Source-git.savannah.gnu.org-git-bash.git-bash-5.3-b8c60bc9ca365f8261fa97900b6fa939f6ebc303-0", "name": "git/bash", "versionInfo": "bash-5.3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "GPL-3.0-or-later", "downloadLocation": "https://tarballs.cgr.dev/g/0e7c34c3027d7f6da5723ac0c18a27c10a29ce56d560c36969b71020e9407623-b8c60bc9ca365f8261fa97900b6fa939f6ebc303.tar.gz", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "SOURCE", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:generic/git%2Fbash@bash-5.3?vcs_url=git%2Bhttps:%2F%2Fgit.savannah.gnu.org%2Fgit%2Fbash.git%40b8c60bc9ca365f8261fa97900b6fa939f6ebc303", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-bash-68d4d037932aa447", "name": "bash", "versionInfo": "5.3-r14", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "GPL-3.0-or-later", "description": "GNU bourne again shell", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/bash@5.3-r14?arch=x86_64\u0026origin=bash", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-bash", "name": "bash", "versionInfo": "5.3-r14", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-libxcrypt-4.5.2-r8", "name": "libxcrypt", "versionInfo": "4.5.2-r8", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "GPL-2.0-or-later AND LGPL-2.1-or-later", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/libxcrypt@4.5.2-r8?arch=x86_64\u0026distro=wolfi", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Melange-libxcrypt.yaml-b9898dbb7125f3678bc8c6cd9e7a43d9d9d2c518", "name": "libxcrypt.yaml", "versionInfo": "b9898dbb7125f3678bc8c6cd9e7a43d9d9d2c518", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "INSTALL", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/chainguard-dev/stereo@b9898dbb7125f3678bc8c6cd9e7a43d9d9d2c518#libxcrypt.yaml", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Source-github.com-besser82-libxcrypt-v4.5.2-db70b42bd7b2a5b00a8580c8dec0aa66791c950a-0", "name": "libxcrypt", "versionInfo": "v4.5.2", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "GPL-2.0-or-later AND LGPL-2.1-or-later", "downloadLocation": "https://github.com/besser82/libxcrypt/archive/db70b42bd7b2a5b00a8580c8dec0aa66791c950a.tar.gz", "originator": "Organization: Besser82", "supplier": "Organization: Besser82", "primaryPackagePurpose": "SOURCE", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/besser82/libxcrypt@v4.5.2", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-libxcrypt-46c52164e01d9aa1", "name": "libxcrypt", "versionInfo": "4.5.2-r8", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "(GPL-2.0-or-later AND LGPL-2.1-or-later)", "description": "Modern library for one-way hashing of passwords", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/libxcrypt@4.5.2-r8?arch=x86_64\u0026origin=libxcrypt", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-libxcrypt", "name": "libxcrypt", "versionInfo": "4.5.2-r8", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-libcrypt1-2.44-2.44-r15", "name": "libcrypt1-2.44", "versionInfo": "2.44-r15", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "LGPL-2.1-or-later", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/libcrypt1-2.44@2.44-r15?arch=x86_64\u0026distro=wolfi", "referenceType": "purl" }, { "referenceCategory": "SECURITY", "referenceLocator": "cpe:2.3:a:gnu:glibc:2.44:*:*:*:*:*:*:*", "referenceType": "cpe23Type" } ] }, { "SPDXID": "SPDXRef-Package-apk-libcrypt1-2.44-5cd9e5de3cd29b16", "name": "libcrypt1-2.44", "versionInfo": "2.44-r15", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "LGPL-2.1-or-later", "description": "Password hashing library included with glibc", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "SECURITY", "referenceLocator": "cpe:2.3:a:gnu:glibc:2.44-r15:*:*:*:*:*:*:*", "referenceType": "cpe23Type" }, { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/libcrypt1-2.44@2.44-r15?arch=x86_64\u0026origin=glibc-2.44", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-libcrypt1-2.44", "name": "libcrypt1-2.44", "versionInfo": "2.44-r15", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-busybox-1.38.0-r3", "name": "busybox", "versionInfo": "1.38.0-r3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "GPL-2.0-only", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/busybox@1.38.0-r3?arch=x86_64\u0026distro=wolfi", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Melange-busybox.yaml-59d45eb49286129d8d21b2469befa3b55be4719b", "name": "busybox.yaml", "versionInfo": "59d45eb49286129d8d21b2469befa3b55be4719b", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "INSTALL", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/chainguard-dev/stereo@59d45eb49286129d8d21b2469befa3b55be4719b#busybox.yaml", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Source-github.com-vda-linux-busyboxC95mirror-1C9538C950-fc71374dfccd46448c62947269a35f1420d7ee28-0", "name": "busybox_mirror", "versionInfo": "1_38_0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "GPL-2.0-only", "downloadLocation": "https://github.com/vda-linux/busybox_mirror/archive/fc71374dfccd46448c62947269a35f1420d7ee28.tar.gz", "originator": "Organization: Vda-Linux", "supplier": "Organization: Vda-Linux", "primaryPackagePurpose": "SOURCE", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/vda-linux/busybox_mirror@1_38_0", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-busybox-053d10e1045ff32f", "name": "busybox", "versionInfo": "1.38.0-r3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "GPL-2.0-only", "description": "swiss-army knife for embedded systems", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/busybox@1.38.0-r3?arch=x86_64\u0026origin=busybox", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-busybox", "name": "busybox", "versionInfo": "1.38.0-r3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-openssl-provider-legacy-allowed-4.1.0-r0", "name": "openssl-provider-legacy-allowed", "versionInfo": "4.1.0-r0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/openssl-provider-legacy-allowed@4.1.0-r0?arch=x86_64\u0026distro=wolfi", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Melange-openssl-provider-legacy-allowed.yaml-aeae4801330be6fd269d5ed5640dc37b58ccab09", "name": "openssl-provider-legacy-allowed.yaml", "versionInfo": "aeae4801330be6fd269d5ed5640dc37b58ccab09", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "INSTALL", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/chainguard-dev/stereo@aeae4801330be6fd269d5ed5640dc37b58ccab09#openssl-provider-legacy-allowed.yaml", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Source-github.com-openssl-openssl-openssl-4.1.0-2f4e3a5fec05394068cfa7379890ab552483a8a6-0", "name": "openssl", "versionInfo": "openssl-4.1.0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "https://github.com/openssl/openssl/archive/2f4e3a5fec05394068cfa7379890ab552483a8a6.tar.gz", "originator": "Organization: Openssl", "supplier": "Organization: Openssl", "primaryPackagePurpose": "SOURCE", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/openssl/openssl@openssl-4.1.0", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-openssl-provider-legacy-allowed-cee4dbd63a907ac5", "name": "openssl-provider-legacy-allowed", "versionInfo": "4.1.0-r0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "description": "Chainguard Legacy Allowed FIPS 140-3 I.G. 2.4.A Provider", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/openssl-provider-legacy-allowed@4.1.0-r0?arch=x86_64\u0026origin=openssl-provider-legacy-allowed", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-openssl-provider-legacy-allowed", "name": "openssl-provider-legacy-allowed", "versionInfo": "4.1.0-r0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-libbrotlicommon1-1.2.1-r3", "name": "libbrotlicommon1", "versionInfo": "1.2.1-r3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/libbrotlicommon1@1.2.1-r3?arch=x86_64\u0026distro=wolfi", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Melange-brotli.yaml-f5ef816d1cb2bd0e165a402c4e8a4c4622464bf3", "name": "brotli.yaml", "versionInfo": "f5ef816d1cb2bd0e165a402c4e8a4c4622464bf3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "INSTALL", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/chainguard-dev/stereo@f5ef816d1cb2bd0e165a402c4e8a4c4622464bf3#brotli.yaml", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Source-github.com-google-brotli.git-v1.2.1-db24a98aed38a16de78cc05ca15cdd8dc2a0d92d-0", "name": "brotli", "versionInfo": "v1.2.1", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "downloadLocation": "https://github.com/google/brotli/archive/db24a98aed38a16de78cc05ca15cdd8dc2a0d92d.tar.gz", "originator": "Organization: Google", "supplier": "Organization: Google", "primaryPackagePurpose": "SOURCE", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/google/brotli@v1.2.1", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-libbrotlicommon1-019a96c31ef87ce8", "name": "libbrotlicommon1", "versionInfo": "1.2.1-r3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/libbrotlicommon1@1.2.1-r3?arch=x86_64\u0026origin=brotli", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-libbrotlicommon1", "name": "libbrotlicommon1", "versionInfo": "1.2.1-r3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-libbrotlidec1-1.2.1-r3", "name": "libbrotlidec1", "versionInfo": "1.2.1-r3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/libbrotlidec1@1.2.1-r3?arch=x86_64\u0026distro=wolfi", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-libbrotlidec1-5c8410b8684c24d7", "name": "libbrotlidec1", "versionInfo": "1.2.1-r3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/libbrotlidec1@1.2.1-r3?arch=x86_64\u0026origin=brotli", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-libbrotlidec1", "name": "libbrotlidec1", "versionInfo": "1.2.1-r3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-libbrotlienc1-1.2.1-r3", "name": "libbrotlienc1", "versionInfo": "1.2.1-r3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/libbrotlienc1@1.2.1-r3?arch=x86_64\u0026distro=wolfi", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-libbrotlienc1-51ea849c3490853b", "name": "libbrotlienc1", "versionInfo": "1.2.1-r3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/libbrotlienc1@1.2.1-r3?arch=x86_64\u0026origin=brotli", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-libbrotlienc1", "name": "libbrotlienc1", "versionInfo": "1.2.1-r3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-openssl-4.0-libcrypto-4.0.3-r8", "name": "openssl-4.0-libcrypto", "versionInfo": "4.0.3-r8", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/openssl-4.0-libcrypto@4.0.3-r8?arch=x86_64\u0026distro=wolfi", "referenceType": "purl" }, { "referenceCategory": "SECURITY", "referenceLocator": "cpe:2.3:a:openssl:openssl:4.0.3:*:*:*:*:*:*:*", "referenceType": "cpe23Type" } ] }, { "SPDXID": "SPDXRef-Package-Melange-openssl-4.0.yaml-53fb2f6751f832fa61ddba06cb8a40dbba5f409f", "name": "openssl-4.0.yaml", "versionInfo": "53fb2f6751f832fa61ddba06cb8a40dbba5f409f", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "INSTALL", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/chainguard-dev/stereo@53fb2f6751f832fa61ddba06cb8a40dbba5f409f#openssl-4.0.yaml", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Source-github.com-openssl-openssl-openssl-4.0.3-af1775b60dfa141a4ad762585052cabeb9f37e9e-0", "name": "openssl", "versionInfo": "openssl-4.0.3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "https://github.com/openssl/openssl/archive/af1775b60dfa141a4ad762585052cabeb9f37e9e.tar.gz", "originator": "Organization: Openssl", "supplier": "Organization: Openssl", "primaryPackagePurpose": "SOURCE", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/openssl/openssl@openssl-4.0.3", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-openssl-4.0-libcrypto-05d763fb35e638dc", "name": "openssl-4.0-libcrypto", "versionInfo": "4.0.3-r8", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "description": "OpenSSL libcrypto library", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "SECURITY", "referenceLocator": "cpe:2.3:a:openssl:openssl:4.0.3-r8:*:*:*:*:*:*:*", "referenceType": "cpe23Type" }, { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/openssl-4.0-libcrypto@4.0.3-r8?arch=x86_64\u0026origin=openssl-4.0", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-openssl-4.0-libcrypto", "name": "openssl-4.0-libcrypto", "versionInfo": "4.0.3-r8", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-gdbm-1.26-r9", "name": "gdbm", "versionInfo": "1.26-r9", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "GPL-3.0-or-later", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/gdbm@1.26-r9?arch=x86_64\u0026distro=wolfi", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Melange-gdbm.yaml-bdc197227f39597f43727c03854efbb4e834c5ef", "name": "gdbm.yaml", "versionInfo": "bdc197227f39597f43727c03854efbb4e834c5ef", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "INSTALL", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/chainguard-dev/stereo@bdc197227f39597f43727c03854efbb4e834c5ef#gdbm.yaml", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Source-git.savannah.gnu.org-git-gdbm.git-v1.26-8ca8f03ab6cc125139a395ec2d522aebb15f8060-0", "name": "git/gdbm", "versionInfo": "v1.26", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "GPL-3.0-or-later", "downloadLocation": "https://tarballs.cgr.dev/g/42740bd9e1a78209c3c68f439ab4397c34f0ed77c165a024d710bdd48e76d1df-8ca8f03ab6cc125139a395ec2d522aebb15f8060.tar.gz", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "SOURCE", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:generic/git%2Fgdbm@v1.26?vcs_url=git%2Bhttps:%2F%2Fgit.savannah.gnu.org%2Fgit%2Fgdbm.git%408ca8f03ab6cc125139a395ec2d522aebb15f8060", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-gdbm-0e6151a2dd64572b", "name": "gdbm", "versionInfo": "1.26-r9", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "GPL-3.0-or-later", "description": "GNU dbm is a set of database routines which use extensible hashing", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/gdbm@1.26-r9?arch=x86_64\u0026origin=gdbm", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-gdbm", "name": "gdbm", "versionInfo": "1.26-r9", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-lmdb-0.9.35-r3", "name": "lmdb", "versionInfo": "0.9.35-r3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "OLDAP-2.8", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/lmdb@0.9.35-r3?arch=x86_64\u0026distro=wolfi", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Melange-lmdb.yaml-a4a523651db588c0ec27f7880438828e0eefec5a", "name": "lmdb.yaml", "versionInfo": "a4a523651db588c0ec27f7880438828e0eefec5a", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "INSTALL", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/chainguard-dev/stereo@a4a523651db588c0ec27f7880438828e0eefec5a#lmdb.yaml", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Source-github.com-LMDB-lmdb.git-LMDBC950.9.35-69087ced3cb6082f7dcfb4fc2dcaa3b68a7e2e8c-0", "name": "lmdb", "versionInfo": "LMDB_0.9.35", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "OLDAP-2.8", "downloadLocation": "https://github.com/LMDB/lmdb/archive/69087ced3cb6082f7dcfb4fc2dcaa3b68a7e2e8c.tar.gz", "originator": "Organization: Lmdb", "supplier": "Organization: Lmdb", "primaryPackagePurpose": "SOURCE", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/lmdb/lmdb@LMDB_0.9.35", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-lmdb-fcb750b5a341ed46", "name": "lmdb", "versionInfo": "0.9.35-r3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "OLDAP-2.8", "description": "Lightning Memory-Mapped Database", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/lmdb@0.9.35-r3?arch=x86_64\u0026origin=lmdb", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-lmdb", "name": "lmdb", "versionInfo": "0.9.35-r3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-readline-8.3-r3", "name": "readline", "versionInfo": "8.3-r3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "GPL-3.0-or-later", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/readline@8.3-r3?arch=x86_64\u0026distro=wolfi", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Melange-readline.yaml-20a5359ac0a7a6aca23efa343f0f29c8d3ea1453", "name": "readline.yaml", "versionInfo": "20a5359ac0a7a6aca23efa343f0f29c8d3ea1453", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "INSTALL", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/chainguard-dev/stereo@20a5359ac0a7a6aca23efa343f0f29c8d3ea1453#readline.yaml", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Source-git.savannah.gnu.org-git-readline.git-readline-8.3-447b8290b3e2e2d117dc8e9cdb83b0dc6448a638-0", "name": "git/readline", "versionInfo": "readline-8.3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "GPL-3.0-or-later", "downloadLocation": "https://tarballs.cgr.dev/g/ca1544b7a4361c29393002e6b6d7b40cf760179801b69a5c375d2d2ed53e109a-447b8290b3e2e2d117dc8e9cdb83b0dc6448a638.tar.gz", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "SOURCE", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:generic/git%2Freadline@readline-8.3?vcs_url=git%2Bhttps:%2F%2Fgit.savannah.gnu.org%2Fgit%2Freadline.git%40447b8290b3e2e2d117dc8e9cdb83b0dc6448a638", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-readline-b03be3e49eccd7a8", "name": "readline", "versionInfo": "8.3-r3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "GPL-3.0-or-later", "description": "GNU readline library", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/readline@8.3-r3?arch=x86_64\u0026origin=readline", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-readline", "name": "readline", "versionInfo": "8.3-r3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-sqlite-libs-3.54.1-r0", "name": "sqlite-libs", "versionInfo": "3.54.1-r0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "blessing", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/sqlite-libs@3.54.1-r0?arch=x86_64\u0026distro=wolfi", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Melange-sqlite.yaml-b0ca8c95606371be2557980059c10b34df30fa9f", "name": "sqlite.yaml", "versionInfo": "b0ca8c95606371be2557980059c10b34df30fa9f", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "INSTALL", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/chainguard-dev/stereo@b0ca8c95606371be2557980059c10b34df30fa9f#sqlite.yaml", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Source-sqlite-3.54.1-0", "name": "sqlite", "versionInfo": "3.54.1", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "https://www.sqlite.org/2026/sqlite-src-3540100.zip", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "SOURCE", "checksums": [ { "algorithm": "SHA256", "checksumValue": "387e7f6cad4797b17848c07d453dc6606917bb356a6cfe5a3abafd38c240c71b" } ], "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:generic/sqlite@3.54.1?checksum=sha256:387e7f6cad4797b17848c07d453dc6606917bb356a6cfe5a3abafd38c240c71b\u0026download_url=https:%2F%2Fwww.sqlite.org%2F2026%2Fsqlite-src-3540100.zip", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-sqlite-libs-3537f4439535e52a", "name": "sqlite-libs", "versionInfo": "3.54.1-r0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "blessing", "description": "sqlite library", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/sqlite-libs@3.54.1-r0?arch=x86_64\u0026origin=sqlite", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-sqlite-libs", "name": "sqlite-libs", "versionInfo": "3.54.1-r0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-heimdal-libs-7.8.0-r55", "name": "heimdal-libs", "versionInfo": "7.8.0-r55", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "BSD-3-Clause", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/heimdal-libs@7.8.0-r55?arch=x86_64\u0026distro=wolfi", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Melange-heimdal.yaml-98d0e0fa47c531020de219448a43d120a8c0360a", "name": "heimdal.yaml", "versionInfo": "98d0e0fa47c531020de219448a43d120a8c0360a", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "INSTALL", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/chainguard-dev/stereo@98d0e0fa47c531020de219448a43d120a8c0360a#heimdal.yaml", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Source-github.com-heimdal-heimdal-heimdal-7.8.0-a6cf94577c0d1e5bca5304342e4ddffb18255afe-0", "name": "heimdal", "versionInfo": "heimdal-7.8.0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "BSD-3-Clause", "downloadLocation": "https://github.com/heimdal/heimdal/archive/a6cf94577c0d1e5bca5304342e4ddffb18255afe.tar.gz", "originator": "Organization: Heimdal", "supplier": "Organization: Heimdal", "primaryPackagePurpose": "SOURCE", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/heimdal/heimdal@heimdal-7.8.0", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-heimdal-libs-9286e31dba85ed60", "name": "heimdal-libs", "versionInfo": "7.8.0-r55", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "BSD-3-Clause", "description": "libraries shipped by heimdal", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/heimdal-libs@7.8.0-r55?arch=x86_64\u0026origin=heimdal", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-heimdal-libs", "name": "heimdal-libs", "versionInfo": "7.8.0-r55", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-cyrus-sasl-heimdal-libs-2.1.28-r58", "name": "cyrus-sasl-heimdal-libs", "versionInfo": "2.1.28-r58", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "BSD-3-Clause", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/cyrus-sasl-heimdal-libs@2.1.28-r58?arch=x86_64\u0026distro=wolfi", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Melange-cyrus-sasl-heimdal.yaml-6a2a53d0046e82dc1f45ac4a9c9593d8d91aaa78", "name": "cyrus-sasl-heimdal.yaml", "versionInfo": "6a2a53d0046e82dc1f45ac4a9c9593d8d91aaa78", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "INSTALL", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/chainguard-dev/stereo@6a2a53d0046e82dc1f45ac4a9c9593d8d91aaa78#cyrus-sasl-heimdal.yaml", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Source-github.com-cyrusimap-cyrus-sasl.git-cyrus-sasl-2.1.28-7a6b45b177070198fed0682bea5fa87c18abb084-0", "name": "cyrus-sasl", "versionInfo": "cyrus-sasl-2.1.28", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "BSD-3-Clause", "downloadLocation": "https://github.com/cyrusimap/cyrus-sasl/archive/7a6b45b177070198fed0682bea5fa87c18abb084.tar.gz", "originator": "Organization: Cyrusimap", "supplier": "Organization: Cyrusimap", "primaryPackagePurpose": "SOURCE", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/cyrusimap/cyrus-sasl@cyrus-sasl-2.1.28", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-cyrus-sasl-heimdal-libs-231201da7d952797", "name": "cyrus-sasl-heimdal-libs", "versionInfo": "2.1.28-r58", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "BSD-3-Clause", "description": "Shared libraries for cyrus-sasl-heimdal", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/cyrus-sasl-heimdal-libs@2.1.28-r58?arch=x86_64\u0026origin=cyrus-sasl-heimdal", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-cyrus-sasl-heimdal-libs", "name": "cyrus-sasl-heimdal-libs", "versionInfo": "2.1.28-r58", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-krb5-conf-1.0-r10", "name": "krb5-conf", "versionInfo": "1.0-r10", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/krb5-conf@1.0-r10?arch=x86_64\u0026distro=wolfi", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Melange-krb5-conf.yaml-f0f4cc5b0d900deaf94dfdcd841e289db97111e1", "name": "krb5-conf.yaml", "versionInfo": "f0f4cc5b0d900deaf94dfdcd841e289db97111e1", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "INSTALL", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/chainguard-dev/stereo@f0f4cc5b0d900deaf94dfdcd841e289db97111e1#krb5-conf.yaml", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-krb5-conf-fa13a22c4be9d33b", "name": "krb5-conf", "versionInfo": "1.0-r10", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "description": "Shared krb5.conf for both MIT krb5 and heimdal", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/krb5-conf@1.0-r10?arch=x86_64\u0026origin=krb5-conf", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-krb5-conf", "name": "krb5-conf", "versionInfo": "1.0-r10", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-libcomC95err-1.47.4-r5", "name": "libcom_err", "versionInfo": "1.47.4-r5", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "GPL-2.0-or-later AND LGPL-2.0-or-later AND BSD-3-Clause AND MIT", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/libcom_err@1.47.4-r5?arch=x86_64\u0026distro=wolfi", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Melange-e2fsprogs.yaml-b89fefe984e6541788116bd15d4f8dce3dc021a9", "name": "e2fsprogs.yaml", "versionInfo": "b89fefe984e6541788116bd15d4f8dce3dc021a9", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "INSTALL", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/chainguard-dev/stereo@b89fefe984e6541788116bd15d4f8dce3dc021a9#e2fsprogs.yaml", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Source-github.com-tytso-e2fsprogs-v1.47.4-7ee1d505ef3b37831215f490411f346fe57e9053-0", "name": "e2fsprogs", "versionInfo": "v1.47.4", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "GPL-2.0-or-later AND LGPL-2.0-or-later AND BSD-3-Clause AND MIT", "downloadLocation": "https://github.com/tytso/e2fsprogs/archive/7ee1d505ef3b37831215f490411f346fe57e9053.tar.gz", "originator": "Organization: Tytso", "supplier": "Organization: Tytso", "primaryPackagePurpose": "SOURCE", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/tytso/e2fsprogs@v1.47.4", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-libcom-err-abd868c77f389bd6", "name": "libcom_err", "versionInfo": "1.47.4-r5", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "(GPL-2.0-or-later AND LGPL-2.0-or-later AND BSD-3-Clause AND MIT)", "description": "Common error description library", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/libcom_err@1.47.4-r5?arch=x86_64\u0026origin=e2fsprogs", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-libcom-err", "name": "libcom_err", "versionInfo": "1.47.4-r5", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-keyutils-libs-1.6.3-r41", "name": "keyutils-libs", "versionInfo": "1.6.3-r41", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "GPL-2.0-or-later OR LGPL-2.0-or-later", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/keyutils-libs@1.6.3-r41?arch=x86_64\u0026distro=wolfi", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Melange-keyutils.yaml-014624f79627768df6f5ff49f4265a7057c2e206", "name": "keyutils.yaml", "versionInfo": "014624f79627768df6f5ff49f4265a7057c2e206", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "INSTALL", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/chainguard-dev/stereo@014624f79627768df6f5ff49f4265a7057c2e206#keyutils.yaml", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Source-kernel.googlesource.com-pub-scm-linux-kernel-git-dhowells-keyutils.git-v1.6.3-cb3bb194cca88211cbfcdde2f10c0f43c3fb8ec3-0", "name": "pub/scm/linux/kernel/git/dhowells/keyutils", "versionInfo": "v1.6.3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "GPL-2.0-or-later OR LGPL-2.0-or-later", "downloadLocation": "https://tarballs.cgr.dev/p/c4263df0120f9cbea0297c9b6574d5bafd566f98b9cec2e39be1c0e378836781-cb3bb194cca88211cbfcdde2f10c0f43c3fb8ec3.tar.gz", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "SOURCE", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:generic/pub%2Fscm%2Flinux%2Fkernel%2Fgit%2Fdhowells%2Fkeyutils@v1.6.3?vcs_url=git%2Bhttps:%2F%2Fkernel.googlesource.com%2Fpub%2Fscm%2Flinux%2Fkernel%2Fgit%2Fdhowells%2Fkeyutils.git%40cb3bb194cca88211cbfcdde2f10c0f43c3fb8ec3", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-keyutils-libs-33941f83b328991d", "name": "keyutils-libs", "versionInfo": "1.6.3-r41", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "(GPL-2.0-or-later OR LGPL-2.0-or-later)", "description": "keyutils library", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/keyutils-libs@1.6.3-r41?arch=x86_64\u0026origin=keyutils", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-keyutils-libs", "name": "keyutils-libs", "versionInfo": "1.6.3-r41", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-openssl-4.0-libssl-4.0.3-r8", "name": "openssl-4.0-libssl", "versionInfo": "4.0.3-r8", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/openssl-4.0-libssl@4.0.3-r8?arch=x86_64\u0026distro=wolfi", "referenceType": "purl" }, { "referenceCategory": "SECURITY", "referenceLocator": "cpe:2.3:a:openssl:openssl:4.0.3:*:*:*:*:*:*:*", "referenceType": "cpe23Type" } ] }, { "SPDXID": "SPDXRef-Package-apk-openssl-4.0-libssl-c679b855376e9cb3", "name": "openssl-4.0-libssl", "versionInfo": "4.0.3-r8", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "description": "OpenSSL libssl library", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "SECURITY", "referenceLocator": "cpe:2.3:a:openssl:openssl:4.0.3-r8:*:*:*:*:*:*:*", "referenceType": "cpe23Type" }, { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/openssl-4.0-libssl@4.0.3-r8?arch=x86_64\u0026origin=openssl-4.0", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-openssl-4.0-libssl", "name": "openssl-4.0-libssl", "versionInfo": "4.0.3-r8", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-libverto-0.3.2-r11", "name": "libverto", "versionInfo": "0.3.2-r11", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/libverto@0.3.2-r11?arch=x86_64\u0026distro=wolfi", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Melange-libverto.yaml-491b184c82ef2868d73a46a98997db789342ff15", "name": "libverto.yaml", "versionInfo": "491b184c82ef2868d73a46a98997db789342ff15", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "INSTALL", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/chainguard-dev/stereo@491b184c82ef2868d73a46a98997db789342ff15#libverto.yaml", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Source-github.com-latchset-libverto-0.3.2-1e8f574f702f270d96e42348e7cc088da5acc9ae-0", "name": "libverto", "versionInfo": "0.3.2", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "downloadLocation": "https://github.com/latchset/libverto/archive/1e8f574f702f270d96e42348e7cc088da5acc9ae.tar.gz", "originator": "Organization: Latchset", "supplier": "Organization: Latchset", "primaryPackagePurpose": "SOURCE", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/latchset/libverto@0.3.2", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-libverto-72af9e6bf0f3c7eb", "name": "libverto", "versionInfo": "0.3.2-r11", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "description": "Main loop abstraction library", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/libverto@0.3.2-r11?arch=x86_64\u0026origin=libverto", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-libverto", "name": "libverto", "versionInfo": "0.3.2-r11", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-krb5-libs-1.22.2-r6", "name": "krb5-libs", "versionInfo": "1.22.2-r6", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/krb5-libs@1.22.2-r6?arch=x86_64\u0026distro=wolfi", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Melange-krb5.yaml-d8c1739b8ac0376433f810660cfe5c19987e66d2", "name": "krb5.yaml", "versionInfo": "d8c1739b8ac0376433f810660cfe5c19987e66d2", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "INSTALL", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/chainguard-dev/stereo@d8c1739b8ac0376433f810660cfe5c19987e66d2#krb5.yaml", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Source-github.com-krb5-krb5.git-krb5-1.22.2-final-8570e77819563e036027e1da789d08ec9333ed4d-0", "name": "krb5", "versionInfo": "krb5-1.22.2-final", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "downloadLocation": "https://github.com/krb5/krb5/archive/8570e77819563e036027e1da789d08ec9333ed4d.tar.gz", "originator": "Organization: Krb5", "supplier": "Organization: Krb5", "primaryPackagePurpose": "SOURCE", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/krb5/krb5@krb5-1.22.2-final", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-krb5-libs-cf468385c5ad41a7", "name": "krb5-libs", "versionInfo": "1.22.2-r6", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "description": "The shared libraries used by Kerberos 5", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/krb5-libs@1.22.2-r6?arch=x86_64\u0026origin=krb5", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-krb5-libs", "name": "krb5-libs", "versionInfo": "1.22.2-r6", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-libunistring-1.5-r1", "name": "libunistring", "versionInfo": "1.5-r1", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "GPL-2.0-or-later OR LGPL-3.0-or-later", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/libunistring@1.5-r1?arch=x86_64\u0026distro=wolfi", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Melange-libunistring.yaml-d8c1739b8ac0376433f810660cfe5c19987e66d2", "name": "libunistring.yaml", "versionInfo": "d8c1739b8ac0376433f810660cfe5c19987e66d2", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "INSTALL", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/chainguard-dev/stereo@d8c1739b8ac0376433f810660cfe5c19987e66d2#libunistring.yaml", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Source-https.git.savannah.gnu.org-git-libunistring.git-v1.5-9a0b11a515258048ba17f05009cbd317298de92d-0", "name": "git/libunistring", "versionInfo": "v1.5", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "GPL-2.0-or-later OR LGPL-3.0-or-later", "downloadLocation": "https://tarballs.cgr.dev/g/8647b56477282eff9978402011260dd5cf99ea235db78088a35a84c76d6356c8-9a0b11a515258048ba17f05009cbd317298de92d.tar.gz", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "SOURCE", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:generic/git%2Flibunistring@v1.5?vcs_url=git%2Bhttps:%2F%2Fhttps.git.savannah.gnu.org%2Fgit%2Flibunistring.git%409a0b11a515258048ba17f05009cbd317298de92d", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-libunistring-24657f606183fbd8", "name": "libunistring", "versionInfo": "1.5-r1", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "(GPL-2.0-or-later OR LGPL-3.0-or-later)", "description": "Library for manipulating Unicode strings and C strings", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/libunistring@1.5-r1?arch=x86_64\u0026origin=libunistring", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-libunistring", "name": "libunistring", "versionInfo": "1.5-r1", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-libidn2-2.3.8-r12", "name": "libidn2", "versionInfo": "2.3.8-r12", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "GPL-2.0-or-later AND LGPL-3.0-or-later", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/libidn2@2.3.8-r12?arch=x86_64\u0026distro=wolfi", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Melange-libidn2.yaml-491b184c82ef2868d73a46a98997db789342ff15", "name": "libidn2.yaml", "versionInfo": "491b184c82ef2868d73a46a98997db789342ff15", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "INSTALL", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/chainguard-dev/stereo@491b184c82ef2868d73a46a98997db789342ff15#libidn2.yaml", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Source-gitlab.com-libidn-libidn2-v2.3.8-9bc3ac79e2ae81ade245a0e308bf13c981efaa83-0", "name": "libidn/libidn2", "versionInfo": "v2.3.8", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "GPL-2.0-or-later AND LGPL-3.0-or-later", "downloadLocation": "https://tarballs.cgr.dev/l/647ec517d7d5a099d6182bc708cd871327e049f96c961ab62ae2acea4398bf29-9bc3ac79e2ae81ade245a0e308bf13c981efaa83.tar.gz", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "SOURCE", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:generic/libidn%2Flibidn2@v2.3.8?vcs_url=git%2Bhttps:%2F%2Fgitlab.com%2Flibidn%2Flibidn2%409bc3ac79e2ae81ade245a0e308bf13c981efaa83", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-libidn2-c2a5069cc7f337b2", "name": "libidn2", "versionInfo": "2.3.8-r12", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "(GPL-2.0-or-later AND LGPL-3.0-or-later)", "description": "Encode/Decode library for internationalized domain names", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/libidn2@2.3.8-r12?arch=x86_64\u0026origin=libidn2", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-libidn2", "name": "libidn2", "versionInfo": "2.3.8-r12", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-libldap-2.7-2.7.2-r0", "name": "libldap-2.7", "versionInfo": "2.7.2-r0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "OLDAP-2.8", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/libldap-2.7@2.7.2-r0?arch=x86_64\u0026distro=wolfi", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Melange-openldap-2.7.yaml-0906e934a58fa878f8d3cfa650c6aab092cc7f26", "name": "openldap-2.7.yaml", "versionInfo": "0906e934a58fa878f8d3cfa650c6aab092cc7f26", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "INSTALL", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/chainguard-dev/stereo@0906e934a58fa878f8d3cfa650c6aab092cc7f26#openldap-2.7.yaml", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Source-github.com-openldap-openldap.git-OPENLDAPC95RELC95ENGC952C957C952-5030280ed039f03fe7725a21f892d7f4e0b98076-0", "name": "openldap", "versionInfo": "OPENLDAP_REL_ENG_2_7_2", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "OLDAP-2.8", "downloadLocation": "https://github.com/openldap/openldap/archive/5030280ed039f03fe7725a21f892d7f4e0b98076.tar.gz", "originator": "Organization: Openldap", "supplier": "Organization: Openldap", "primaryPackagePurpose": "SOURCE", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/openldap/openldap@OPENLDAP_REL_ENG_2_7_2", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-libldap-2.7-50eee4bb77b57fc5", "name": "libldap-2.7", "versionInfo": "2.7.2-r0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "OLDAP-2.8", "description": "OpenLDAP libraries", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/libldap-2.7@2.7.2-r0?arch=x86_64\u0026origin=openldap-2.7", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-libldap-2.7", "name": "libldap-2.7", "versionInfo": "2.7.2-r0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-libnghttp2-14-1.71.0-r0", "name": "libnghttp2-14", "versionInfo": "1.71.0-r0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/libnghttp2-14@1.71.0-r0?arch=x86_64\u0026distro=wolfi", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Melange-nghttp2.yaml-153ee2bd742f744ddedf5c4a97110fa46307574b", "name": "nghttp2.yaml", "versionInfo": "153ee2bd742f744ddedf5c4a97110fa46307574b", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "INSTALL", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/chainguard-dev/stereo@153ee2bd742f744ddedf5c4a97110fa46307574b#nghttp2.yaml", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Source-github.com-nghttp2-nghttp2.git-v1.71.0-80dcb8140af050fac91a7e6af4fc6dd013404bd1-0", "name": "nghttp2", "versionInfo": "v1.71.0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "downloadLocation": "https://github.com/nghttp2/nghttp2/archive/80dcb8140af050fac91a7e6af4fc6dd013404bd1.tar.gz", "originator": "Organization: Nghttp2", "supplier": "Organization: Nghttp2", "primaryPackagePurpose": "SOURCE", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/nghttp2/nghttp2@v1.71.0", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-libnghttp2-14-2dea1951a0c6092e", "name": "libnghttp2-14", "versionInfo": "1.71.0-r0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "description": "nghttp2 client library", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/libnghttp2-14@1.71.0-r0?arch=x86_64\u0026origin=nghttp2", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-libnghttp2-14", "name": "libnghttp2-14", "versionInfo": "1.71.0-r0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-nghttp3-1.19.0-r0", "name": "nghttp3", "versionInfo": "1.19.0-r0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/nghttp3@1.19.0-r0?arch=x86_64\u0026distro=wolfi", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Melange-nghttp3.yaml-10e9291816e1a18eee8044d5c02177de477e1f29", "name": "nghttp3.yaml", "versionInfo": "10e9291816e1a18eee8044d5c02177de477e1f29", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "INSTALL", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/chainguard-dev/stereo@10e9291816e1a18eee8044d5c02177de477e1f29#nghttp3.yaml", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Source-github.com-ngtcp2-nghttp3.git-v1.19.0-dc83309ca5fd2beb91cc5c030a2d30525e9f2a00-0", "name": "nghttp3", "versionInfo": "v1.19.0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "downloadLocation": "https://github.com/ngtcp2/nghttp3/archive/dc83309ca5fd2beb91cc5c030a2d30525e9f2a00.tar.gz", "originator": "Organization: Ngtcp2", "supplier": "Organization: Ngtcp2", "primaryPackagePurpose": "SOURCE", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/ngtcp2/nghttp3@v1.19.0", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-nghttp3-cce6f802620cbc0f", "name": "nghttp3", "versionInfo": "1.19.0-r0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "description": "HTTP/3 library written in C", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/nghttp3@1.19.0-r0?arch=x86_64\u0026origin=nghttp3", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-nghttp3", "name": "nghttp3", "versionInfo": "1.19.0-r0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-ngtcp2-1.26.0-r0", "name": "ngtcp2", "versionInfo": "1.26.0-r0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/ngtcp2@1.26.0-r0?arch=x86_64\u0026distro=wolfi", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Melange-ngtcp2.yaml-a3a25ebdd1c3e71a190ca09e4f5a7beb6732dc78", "name": "ngtcp2.yaml", "versionInfo": "a3a25ebdd1c3e71a190ca09e4f5a7beb6732dc78", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "INSTALL", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/chainguard-dev/stereo@a3a25ebdd1c3e71a190ca09e4f5a7beb6732dc78#ngtcp2.yaml", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Source-github.com-ngtcp2-ngtcp2.git-v1.26.0-6a22a4d7a111f6b52391910e40ad3681a09cfb9c-0", "name": "ngtcp2", "versionInfo": "v1.26.0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "downloadLocation": "https://github.com/ngtcp2/ngtcp2/archive/6a22a4d7a111f6b52391910e40ad3681a09cfb9c.tar.gz", "originator": "Organization: Ngtcp2", "supplier": "Organization: Ngtcp2", "primaryPackagePurpose": "SOURCE", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/ngtcp2/ngtcp2@v1.26.0", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-ngtcp2-4cdb37ec0ead9500", "name": "ngtcp2", "versionInfo": "1.26.0-r0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "description": "ngtcp2 project is an effort to implement IETF QUIC protocol", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/ngtcp2@1.26.0-r0?arch=x86_64\u0026origin=ngtcp2", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-ngtcp2", "name": "ngtcp2", "versionInfo": "1.26.0-r0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-libpsl-0.23.3-r4", "name": "libpsl", "versionInfo": "0.23.3-r4", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/libpsl@0.23.3-r4?arch=x86_64\u0026distro=wolfi", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Melange-libpsl.yaml-491b184c82ef2868d73a46a98997db789342ff15", "name": "libpsl.yaml", "versionInfo": "491b184c82ef2868d73a46a98997db789342ff15", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "INSTALL", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/chainguard-dev/stereo@491b184c82ef2868d73a46a98997db789342ff15#libpsl.yaml", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Source-github.com-rockdaboot-libpsl.git-0.23.3-c486db8d221cbac55f87508d4da4db4497760997-0", "name": "libpsl", "versionInfo": "0.23.3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "downloadLocation": "https://github.com/rockdaboot/libpsl/archive/c486db8d221cbac55f87508d4da4db4497760997.tar.gz", "originator": "Organization: Rockdaboot", "supplier": "Organization: Rockdaboot", "primaryPackagePurpose": "SOURCE", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/rockdaboot/libpsl@0.23.3", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-libpsl-cfb612d905aac653", "name": "libpsl", "versionInfo": "0.23.3-r4", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "description": "C library for the Publix Suffix List", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/libpsl@0.23.3-r4?arch=x86_64\u0026origin=libpsl", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-libpsl", "name": "libpsl", "versionInfo": "0.23.3-r4", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-zlib-1.3.2.1C95rc20260921-r2", "name": "zlib", "versionInfo": "1.3.2.1_rc20260921-r2", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MPL-2.0 AND MIT", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/zlib@1.3.2.1_rc20260921-r2?arch=x86_64\u0026distro=wolfi", "referenceType": "purl" }, { "referenceCategory": "SECURITY", "referenceLocator": "cpe:2.3:a:zlib:zlib:1.3.2.1_rc20260921:*:*:*:*:*:*:*", "referenceType": "cpe23Type" } ] }, { "SPDXID": "SPDXRef-Package-Melange-zlib.yaml-5aeb575ed7ca64fb21dfda042e170d08f1654bbc", "name": "zlib.yaml", "versionInfo": "5aeb575ed7ca64fb21dfda042e170d08f1654bbc", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "INSTALL", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/chainguard-dev/stereo@5aeb575ed7ca64fb21dfda042e170d08f1654bbc#zlib.yaml", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Source-github.com-madler-zlib-develop-767c4c947852e143f582c85f14cf573411df1b35-0", "name": "zlib", "versionInfo": "767c4c947852e143f582c85f14cf573411df1b35", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MPL-2.0 AND MIT", "downloadLocation": "https://github.com/madler/zlib/archive/767c4c947852e143f582c85f14cf573411df1b35.tar.gz", "originator": "Organization: Madler", "supplier": "Organization: Madler", "primaryPackagePurpose": "SOURCE", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/madler/zlib@767c4c947852e143f582c85f14cf573411df1b35", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-zlib-408fd061819ff234", "name": "zlib", "versionInfo": "1.3.2.1_rc20260921-r2", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "(MPL-2.0 AND MIT)", "description": "a library implementing the zlib compression algorithms", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "SECURITY", "referenceLocator": "cpe:2.3:a:zlib:zlib:1.3.2.1_rc20260921-r2:*:*:*:*:*:*:*", "referenceType": "cpe23Type" }, { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/zlib@1.3.2.1_rc20260921-r2?arch=x86_64\u0026origin=zlib", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-zlib", "name": "zlib", "versionInfo": "1.3.2.1_rc20260921-r2", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-libcurl-openssl4-8.23.0-r3", "name": "libcurl-openssl4", "versionInfo": "8.23.0-r3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/libcurl-openssl4@8.23.0-r3?arch=x86_64\u0026distro=wolfi", "referenceType": "purl" }, { "referenceCategory": "SECURITY", "referenceLocator": "cpe:2.3:a:haxx:curl:8.23.0:*:*:*:*:*:*:*", "referenceType": "cpe23Type" } ] }, { "SPDXID": "SPDXRef-Package-Melange-curl.yaml-010cb3d3ce5812142c1ff59d0b260650190c6241", "name": "curl.yaml", "versionInfo": "010cb3d3ce5812142c1ff59d0b260650190c6241", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "INSTALL", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/chainguard-dev/stereo@010cb3d3ce5812142c1ff59d0b260650190c6241#curl.yaml", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Source-github.com-curl-curl.git-curl-8C9523C950-3163ec065643ba20709f190111f42c3e1fe95273-0", "name": "curl", "versionInfo": "curl-8_23_0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "downloadLocation": "https://github.com/curl/curl/archive/3163ec065643ba20709f190111f42c3e1fe95273.tar.gz", "originator": "Organization: Curl", "supplier": "Organization: Curl", "primaryPackagePurpose": "SOURCE", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/curl/curl@curl-8_23_0", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-libcurl-openssl4-c5b225641fd62954", "name": "libcurl-openssl4", "versionInfo": "8.23.0-r3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "description": "curl library (openssl backend)", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "SECURITY", "referenceLocator": "cpe:2.3:a:haxx:curl:8.23.0-r3:*:*:*:*:*:*:*", "referenceType": "cpe23Type" }, { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/libcurl-openssl4@8.23.0-r3?arch=x86_64\u0026origin=curl", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-libcurl-openssl4", "name": "libcurl-openssl4", "versionInfo": "8.23.0-r3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-libexpat1-2.10.0-r1", "name": "libexpat1", "versionInfo": "2.10.0-r1", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/libexpat1@2.10.0-r1?arch=x86_64\u0026distro=wolfi", "referenceType": "purl" }, { "referenceCategory": "SECURITY", "referenceLocator": "cpe:2.3:a:libexpat_project:libexpat:2.10.0:*:*:*:*:*:*:*", "referenceType": "cpe23Type" } ] }, { "SPDXID": "SPDXRef-Package-Melange-expat.yaml-5aeb575ed7ca64fb21dfda042e170d08f1654bbc", "name": "expat.yaml", "versionInfo": "5aeb575ed7ca64fb21dfda042e170d08f1654bbc", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "INSTALL", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/chainguard-dev/stereo@5aeb575ed7ca64fb21dfda042e170d08f1654bbc#expat.yaml", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Source-github.com-libexpat-libexpat-RC952C9510C950-a70841d9ffa64ddde29ab824ed6305035ebe4c47-0", "name": "libexpat", "versionInfo": "R_2_10_0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "downloadLocation": "https://github.com/libexpat/libexpat/archive/a70841d9ffa64ddde29ab824ed6305035ebe4c47.tar.gz", "originator": "Organization: Libexpat", "supplier": "Organization: Libexpat", "primaryPackagePurpose": "SOURCE", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/libexpat/libexpat@R_2_10_0", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-libexpat1-e9e360db12e59673", "name": "libexpat1", "versionInfo": "2.10.0-r1", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "description": "libexpat shared library", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "SECURITY", "referenceLocator": "cpe:2.3:a:libexpat_project:libexpat:2.10.0-r1:*:*:*:*:*:*:*", "referenceType": "cpe23Type" }, { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/libexpat1@2.10.0-r1?arch=x86_64\u0026origin=expat", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-libexpat1", "name": "libexpat1", "versionInfo": "2.10.0-r1", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-libpcre2-8-0-10.49-r3", "name": "libpcre2-8-0", "versionInfo": "10.49-r3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "BSD-3-Clause", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/libpcre2-8-0@10.49-r3?arch=x86_64\u0026distro=wolfi", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Melange-pcre2.yaml-5aeb575ed7ca64fb21dfda042e170d08f1654bbc", "name": "pcre2.yaml", "versionInfo": "5aeb575ed7ca64fb21dfda042e170d08f1654bbc", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "INSTALL", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/chainguard-dev/stereo@5aeb575ed7ca64fb21dfda042e170d08f1654bbc#pcre2.yaml", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Source-github.com-PCRE2Project-pcre2.git-pcre2-10.49-6f9d7c1373262c541324a16a358785b33ef116cf-0", "name": "pcre2", "versionInfo": "pcre2-10.49", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "BSD-3-Clause", "downloadLocation": "https://github.com/PCRE2Project/pcre2/archive/6f9d7c1373262c541324a16a358785b33ef116cf.tar.gz", "originator": "Organization: Pcre2project", "supplier": "Organization: Pcre2project", "primaryPackagePurpose": "SOURCE", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/pcre2project/pcre2@pcre2-10.49", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-libpcre2-8-0-ab3ff18a4df64c44", "name": "libpcre2-8-0", "versionInfo": "10.49-r3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "BSD-3-Clause", "description": "pcre2 runtime library 8-bit", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/libpcre2-8-0@10.49-r3?arch=x86_64\u0026origin=pcre2", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-libpcre2-8-0", "name": "libpcre2-8-0", "versionInfo": "10.49-r3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-git-2.56.0-r3", "name": "git", "versionInfo": "2.56.0-r3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "GPL-2.0-or-later AND ( Artistic-1.0-Perl OR GPL-1.0-or-later )", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/git@2.56.0-r3?arch=x86_64\u0026distro=wolfi", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Melange-git.yaml-a3655395a06e663e8406d260a966b9e022e11f7e", "name": "git.yaml", "versionInfo": "a3655395a06e663e8406d260a966b9e022e11f7e", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "INSTALL", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/chainguard-dev/stereo@a3655395a06e663e8406d260a966b9e022e11f7e#git.yaml", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Source-kernel.googlesource.com-pub-scm-git-git.git-v2.56.0-a018953688f1b10bddf91bff8747068f5f4746a4-0", "name": "pub/scm/git/git", "versionInfo": "v2.56.0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "GPL-2.0-or-later AND ( Artistic-1.0-Perl OR GPL-1.0-or-later )", "downloadLocation": "https://tarballs.cgr.dev/p/13d95d86c3cf193d4f0417e059a08cc793fc772f803086b07d168643a0b50f40-a018953688f1b10bddf91bff8747068f5f4746a4.tar.gz", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "SOURCE", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:generic/pub%2Fscm%2Fgit%2Fgit@v2.56.0?vcs_url=git%2Bhttps:%2F%2Fkernel.googlesource.com%2Fpub%2Fscm%2Fgit%2Fgit.git%40a018953688f1b10bddf91bff8747068f5f4746a4", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-git-de822c546ba6a811", "name": "git", "versionInfo": "2.56.0-r3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "GPL-2.0-or-later AND ( Artistic-1.0-Perl OR GPL-1.0-or-later )", "description": "distributed version control system", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "SECURITY", "referenceLocator": "cpe:2.3:a:git-scm:git:2.56.0:*:*:*:*:*:*:*", "referenceType": "cpe23Type" }, { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/git@2.56.0-r3?arch=x86_64\u0026origin=git", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-git", "name": "git", "versionInfo": "2.56.0-r3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-go-1.27-upstream-1.27.3-r0", "name": "go-1.27-upstream", "versionInfo": "1.27.3-r0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "BSD-3-Clause", "downloadLocation": "NOASSERTION", "originator": "Organization: Unknown", "supplier": "Organization: Unknown", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/unknown/go-1.27-upstream@1.27.3-r0?arch=x86_64", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Melange-melange-go-1.27-upstream.yaml-60d4c5fca1dae7e58bf86478a7175ec40f8c7df5", "name": "melange/go-1.27-upstream.yaml", "versionInfo": "60d4c5fca1dae7e58bf86478a7175ec40f8c7df5", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Unknown", "supplier": "Organization: Unknown", "primaryPackagePurpose": "INSTALL", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/https:/%2Funknown%2Funknown%2Funknown@60d4c5fca1dae7e58bf86478a7175ec40f8c7df5#melange/go-1.27-upstream.yaml", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-tzdata-2026f-r0", "name": "tzdata", "versionInfo": "2026f-r0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "CC-PDDC", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/tzdata@2026f-r0?arch=x86_64\u0026distro=wolfi", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Melange-tzdata.yaml-b01ceefc114cf44ccb6d35f405795435f98bf0c2", "name": "tzdata.yaml", "versionInfo": "b01ceefc114cf44ccb6d35f405795435f98bf0c2", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "INSTALL", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/chainguard-dev/stereo@b01ceefc114cf44ccb6d35f405795435f98bf0c2#tzdata.yaml", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Source-github.com-eggert-tz-2026f-a6cb1a1cebcc96269a02b25323c1a9424e3349a8-0", "name": "tz", "versionInfo": "2026f", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "CC-PDDC", "downloadLocation": "https://github.com/eggert/tz/archive/a6cb1a1cebcc96269a02b25323c1a9424e3349a8.tar.gz", "originator": "Organization: Eggert", "supplier": "Organization: Eggert", "primaryPackagePurpose": "SOURCE", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/eggert/tz@2026f", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-tzdata-2a758f1785d5e6c8", "name": "tzdata", "versionInfo": "2026f-r0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "CC-PDDC", "description": "Timezone data provided by IANA", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/tzdata@2026f-r0?arch=x86_64\u0026origin=tzdata", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-tzdata", "name": "tzdata", "versionInfo": "2026f-r0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" } ], "relationships": [ { "spdxElementId": "SPDXRef-Package-Image-sha256-2fa9f3b8b5278e28d05bee0e797db69ef6ec8030575f2e5086732fba3f5ac0cf", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-ImageLayer-sha256-dad5593e5839ce63321aecd9953f4c19021d7db48ea049c76a93f30aaab912d6" }, { "spdxElementId": "SPDXRef-Package-apk-wolfi-baselayout-20230201-r31", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-wolfi-baselayout.yaml-ed415005c84750f03c4a9252137813734a224ae7" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-wolfi-baselayout", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-wolfi-baselayout-9980a17ea85a76d3" }, { "spdxElementId": "SPDXRef-Package-apk-wolfi-baselayout-20230201-r31", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-wolfi-baselayout" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-2fa9f3b8b5278e28d05bee0e797db69ef6ec8030575f2e5086732fba3f5ac0cf", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-wolfi-baselayout-20230201-r31" }, { "spdxElementId": "SPDXRef-Package-apk-ca-certificates-bundle-20261020-r0", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-ca-certificates.yaml-8061afafa65af5a9026707a8880e14120dd6f4a0" }, { "spdxElementId": "SPDXRef-Package-apk-ca-certificates-bundle-20261020-r0", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-gitlab.alpinelinux.org-alpine-ca-certificates-20261020-2058424fda70ee478bcce872dcf141a0c5499ee0-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-ca-certificates-bundle", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-ca-certificates-bundle-3a36aed2688bdba8" }, { "spdxElementId": "SPDXRef-Package-apk-ca-certificates-bundle-20261020-r0", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-ca-certificates-bundle" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-2fa9f3b8b5278e28d05bee0e797db69ef6ec8030575f2e5086732fba3f5ac0cf", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-ca-certificates-bundle-20261020-r0" }, { "spdxElementId": "SPDXRef-Package-apk-glibc-2.44-locale-posix-2.44-r15", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-glibc-2.44.yaml-f903916d7bbf6d7dc87dd9e05b827df096b22255" }, { "spdxElementId": "SPDXRef-Package-apk-glibc-2.44-locale-posix-2.44-r15", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-gitlab.com-gnutools-glibc.git-release-2.44-master-47e2b570410fab606de29f550534a721184852c3-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-glibc-2.44-locale-posix", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-glibc-2.44-locale-posix-a56ff4917dc48084" }, { "spdxElementId": "SPDXRef-Package-apk-glibc-2.44-locale-posix-2.44-r15", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-glibc-2.44-locale-posix" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-2fa9f3b8b5278e28d05bee0e797db69ef6ec8030575f2e5086732fba3f5ac0cf", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-glibc-2.44-locale-posix-2.44-r15" }, { "spdxElementId": "SPDXRef-Package-apk-libgcc-16.2.0-r3", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-gcc.yaml-4d188060cbd00821a95f1ef60605da4817e781bb" }, { "spdxElementId": "SPDXRef-Package-apk-libgcc-16.2.0-r3", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-gitlab.com-gnutools-gcc.git-releases-gcc-16.2.0-78d4ac73dd391005b895a6148cd9831e28e1208b-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-libgcc", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-libgcc-c8364f237745c3d5" }, { "spdxElementId": "SPDXRef-Package-apk-libgcc-16.2.0-r3", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-libgcc" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-2fa9f3b8b5278e28d05bee0e797db69ef6ec8030575f2e5086732fba3f5ac0cf", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-libgcc-16.2.0-r3" }, { "spdxElementId": "SPDXRef-Package-apk-glibc-2.44-2.44-r15", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-glibc-2.44.yaml-f903916d7bbf6d7dc87dd9e05b827df096b22255" }, { "spdxElementId": "SPDXRef-Package-apk-glibc-2.44-2.44-r15", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-gitlab.com-gnutools-glibc.git-release-2.44-master-47e2b570410fab606de29f550534a721184852c3-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-glibc-2.44", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-glibc-2.44-c1689b70e1563cb1" }, { "spdxElementId": "SPDXRef-Package-apk-glibc-2.44-2.44-r15", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-glibc-2.44" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-2fa9f3b8b5278e28d05bee0e797db69ef6ec8030575f2e5086732fba3f5ac0cf", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-glibc-2.44-2.44-r15" }, { "spdxElementId": "SPDXRef-Package-apk-ld-linux-2.44-2.44-r15", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-glibc-2.44.yaml-f903916d7bbf6d7dc87dd9e05b827df096b22255" }, { "spdxElementId": "SPDXRef-Package-apk-ld-linux-2.44-2.44-r15", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-gitlab.com-gnutools-glibc.git-release-2.44-master-47e2b570410fab606de29f550534a721184852c3-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-ld-linux-2.44", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-ld-linux-2.44-eb48de0a040b9e28" }, { "spdxElementId": "SPDXRef-Package-apk-ld-linux-2.44-2.44-r15", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-ld-linux-2.44" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-2fa9f3b8b5278e28d05bee0e797db69ef6ec8030575f2e5086732fba3f5ac0cf", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-ld-linux-2.44-2.44-r15" }, { "spdxElementId": "SPDXRef-Package-apk-ncurses-terminfo-base-6.6.20261107-r0", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-ncurses.yaml-57b90c0084b0bc101663cdfcaa44f4ce83312443" }, { "spdxElementId": "SPDXRef-Package-apk-ncurses-terminfo-base-6.6.20261107-r0", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-github.com-ThomasDickey-ncurses-snapshots-v6C956C9520261107-7404b376832583182c52722dc09d86b8675db375-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-ncurses-terminfo-base", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-ncurses-terminfo-base-6598c48598cb2742" }, { "spdxElementId": "SPDXRef-Package-apk-ncurses-terminfo-base-6.6.20261107-r0", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-ncurses-terminfo-base" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-2fa9f3b8b5278e28d05bee0e797db69ef6ec8030575f2e5086732fba3f5ac0cf", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-ncurses-terminfo-base-6.6.20261107-r0" }, { "spdxElementId": "SPDXRef-Package-apk-ncurses-6.6.20261107-r0", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-ncurses.yaml-57b90c0084b0bc101663cdfcaa44f4ce83312443" }, { "spdxElementId": "SPDXRef-Package-apk-ncurses-6.6.20261107-r0", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-github.com-ThomasDickey-ncurses-snapshots-v6C956C9520261107-7404b376832583182c52722dc09d86b8675db375-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-ncurses", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-ncurses-d8905fddac6bbdfe" }, { "spdxElementId": "SPDXRef-Package-apk-ncurses-6.6.20261107-r0", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-ncurses" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-2fa9f3b8b5278e28d05bee0e797db69ef6ec8030575f2e5086732fba3f5ac0cf", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-ncurses-6.6.20261107-r0" }, { "spdxElementId": "SPDXRef-Package-apk-bash-5.3-r14", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-bash.yaml-ac7b15dc2695924986372a27cd7d6c4e029c5efa" }, { "spdxElementId": "SPDXRef-Package-apk-bash-5.3-r14", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-git.savannah.gnu.org-git-bash.git-bash-5.3-b8c60bc9ca365f8261fa97900b6fa939f6ebc303-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-bash", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-bash-68d4d037932aa447" }, { "spdxElementId": "SPDXRef-Package-apk-bash-5.3-r14", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-bash" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-2fa9f3b8b5278e28d05bee0e797db69ef6ec8030575f2e5086732fba3f5ac0cf", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-bash-5.3-r14" }, { "spdxElementId": "SPDXRef-Package-apk-libxcrypt-4.5.2-r8", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-libxcrypt.yaml-b9898dbb7125f3678bc8c6cd9e7a43d9d9d2c518" }, { "spdxElementId": "SPDXRef-Package-apk-libxcrypt-4.5.2-r8", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-github.com-besser82-libxcrypt-v4.5.2-db70b42bd7b2a5b00a8580c8dec0aa66791c950a-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-libxcrypt", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-libxcrypt-46c52164e01d9aa1" }, { "spdxElementId": "SPDXRef-Package-apk-libxcrypt-4.5.2-r8", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-libxcrypt" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-2fa9f3b8b5278e28d05bee0e797db69ef6ec8030575f2e5086732fba3f5ac0cf", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-libxcrypt-4.5.2-r8" }, { "spdxElementId": "SPDXRef-Package-apk-libcrypt1-2.44-2.44-r15", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-glibc-2.44.yaml-f903916d7bbf6d7dc87dd9e05b827df096b22255" }, { "spdxElementId": "SPDXRef-Package-apk-libcrypt1-2.44-2.44-r15", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-gitlab.com-gnutools-glibc.git-release-2.44-master-47e2b570410fab606de29f550534a721184852c3-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-libcrypt1-2.44", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-libcrypt1-2.44-5cd9e5de3cd29b16" }, { "spdxElementId": "SPDXRef-Package-apk-libcrypt1-2.44-2.44-r15", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-libcrypt1-2.44" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-2fa9f3b8b5278e28d05bee0e797db69ef6ec8030575f2e5086732fba3f5ac0cf", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-libcrypt1-2.44-2.44-r15" }, { "spdxElementId": "SPDXRef-Package-apk-busybox-1.38.0-r3", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-busybox.yaml-59d45eb49286129d8d21b2469befa3b55be4719b" }, { "spdxElementId": "SPDXRef-Package-apk-busybox-1.38.0-r3", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-github.com-vda-linux-busyboxC95mirror-1C9538C950-fc71374dfccd46448c62947269a35f1420d7ee28-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-busybox", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-busybox-053d10e1045ff32f" }, { "spdxElementId": "SPDXRef-Package-apk-busybox-1.38.0-r3", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-busybox" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-2fa9f3b8b5278e28d05bee0e797db69ef6ec8030575f2e5086732fba3f5ac0cf", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-busybox-1.38.0-r3" }, { "spdxElementId": "SPDXRef-Package-apk-openssl-provider-legacy-allowed-4.1.0-r0", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-openssl-provider-legacy-allowed.yaml-aeae4801330be6fd269d5ed5640dc37b58ccab09" }, { "spdxElementId": "SPDXRef-Package-apk-openssl-provider-legacy-allowed-4.1.0-r0", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-github.com-openssl-openssl-openssl-4.1.0-2f4e3a5fec05394068cfa7379890ab552483a8a6-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-openssl-provider-legacy-allowed", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-openssl-provider-legacy-allowed-cee4dbd63a907ac5" }, { "spdxElementId": "SPDXRef-Package-apk-openssl-provider-legacy-allowed-4.1.0-r0", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-openssl-provider-legacy-allowed" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-2fa9f3b8b5278e28d05bee0e797db69ef6ec8030575f2e5086732fba3f5ac0cf", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-openssl-provider-legacy-allowed-4.1.0-r0" }, { "spdxElementId": "SPDXRef-Package-apk-libbrotlicommon1-1.2.1-r3", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-brotli.yaml-f5ef816d1cb2bd0e165a402c4e8a4c4622464bf3" }, { "spdxElementId": "SPDXRef-Package-apk-libbrotlicommon1-1.2.1-r3", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-github.com-google-brotli.git-v1.2.1-db24a98aed38a16de78cc05ca15cdd8dc2a0d92d-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-libbrotlicommon1", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-libbrotlicommon1-019a96c31ef87ce8" }, { "spdxElementId": "SPDXRef-Package-apk-libbrotlicommon1-1.2.1-r3", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-libbrotlicommon1" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-2fa9f3b8b5278e28d05bee0e797db69ef6ec8030575f2e5086732fba3f5ac0cf", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-libbrotlicommon1-1.2.1-r3" }, { "spdxElementId": "SPDXRef-Package-apk-libbrotlidec1-1.2.1-r3", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-brotli.yaml-f5ef816d1cb2bd0e165a402c4e8a4c4622464bf3" }, { "spdxElementId": "SPDXRef-Package-apk-libbrotlidec1-1.2.1-r3", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-github.com-google-brotli.git-v1.2.1-db24a98aed38a16de78cc05ca15cdd8dc2a0d92d-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-libbrotlidec1", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-libbrotlidec1-5c8410b8684c24d7" }, { "spdxElementId": "SPDXRef-Package-apk-libbrotlidec1-1.2.1-r3", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-libbrotlidec1" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-2fa9f3b8b5278e28d05bee0e797db69ef6ec8030575f2e5086732fba3f5ac0cf", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-libbrotlidec1-1.2.1-r3" }, { "spdxElementId": "SPDXRef-Package-apk-libbrotlienc1-1.2.1-r3", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-brotli.yaml-f5ef816d1cb2bd0e165a402c4e8a4c4622464bf3" }, { "spdxElementId": "SPDXRef-Package-apk-libbrotlienc1-1.2.1-r3", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-github.com-google-brotli.git-v1.2.1-db24a98aed38a16de78cc05ca15cdd8dc2a0d92d-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-libbrotlienc1", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-libbrotlienc1-51ea849c3490853b" }, { "spdxElementId": "SPDXRef-Package-apk-libbrotlienc1-1.2.1-r3", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-libbrotlienc1" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-2fa9f3b8b5278e28d05bee0e797db69ef6ec8030575f2e5086732fba3f5ac0cf", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-libbrotlienc1-1.2.1-r3" }, { "spdxElementId": "SPDXRef-Package-apk-openssl-4.0-libcrypto-4.0.3-r8", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-openssl-4.0.yaml-53fb2f6751f832fa61ddba06cb8a40dbba5f409f" }, { "spdxElementId": "SPDXRef-Package-apk-openssl-4.0-libcrypto-4.0.3-r8", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-github.com-openssl-openssl-openssl-4.0.3-af1775b60dfa141a4ad762585052cabeb9f37e9e-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-openssl-4.0-libcrypto", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-openssl-4.0-libcrypto-05d763fb35e638dc" }, { "spdxElementId": "SPDXRef-Package-apk-openssl-4.0-libcrypto-4.0.3-r8", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-openssl-4.0-libcrypto" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-2fa9f3b8b5278e28d05bee0e797db69ef6ec8030575f2e5086732fba3f5ac0cf", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-openssl-4.0-libcrypto-4.0.3-r8" }, { "spdxElementId": "SPDXRef-Package-apk-gdbm-1.26-r9", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-gdbm.yaml-bdc197227f39597f43727c03854efbb4e834c5ef" }, { "spdxElementId": "SPDXRef-Package-apk-gdbm-1.26-r9", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-git.savannah.gnu.org-git-gdbm.git-v1.26-8ca8f03ab6cc125139a395ec2d522aebb15f8060-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-gdbm", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-gdbm-0e6151a2dd64572b" }, { "spdxElementId": "SPDXRef-Package-apk-gdbm-1.26-r9", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-gdbm" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-2fa9f3b8b5278e28d05bee0e797db69ef6ec8030575f2e5086732fba3f5ac0cf", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-gdbm-1.26-r9" }, { "spdxElementId": "SPDXRef-Package-apk-lmdb-0.9.35-r3", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-lmdb.yaml-a4a523651db588c0ec27f7880438828e0eefec5a" }, { "spdxElementId": "SPDXRef-Package-apk-lmdb-0.9.35-r3", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-github.com-LMDB-lmdb.git-LMDBC950.9.35-69087ced3cb6082f7dcfb4fc2dcaa3b68a7e2e8c-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-lmdb", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-lmdb-fcb750b5a341ed46" }, { "spdxElementId": "SPDXRef-Package-apk-lmdb-0.9.35-r3", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-lmdb" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-2fa9f3b8b5278e28d05bee0e797db69ef6ec8030575f2e5086732fba3f5ac0cf", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-lmdb-0.9.35-r3" }, { "spdxElementId": "SPDXRef-Package-apk-readline-8.3-r3", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-readline.yaml-20a5359ac0a7a6aca23efa343f0f29c8d3ea1453" }, { "spdxElementId": "SPDXRef-Package-apk-readline-8.3-r3", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-git.savannah.gnu.org-git-readline.git-readline-8.3-447b8290b3e2e2d117dc8e9cdb83b0dc6448a638-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-readline", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-readline-b03be3e49eccd7a8" }, { "spdxElementId": "SPDXRef-Package-apk-readline-8.3-r3", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-readline" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-2fa9f3b8b5278e28d05bee0e797db69ef6ec8030575f2e5086732fba3f5ac0cf", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-readline-8.3-r3" }, { "spdxElementId": "SPDXRef-Package-apk-sqlite-libs-3.54.1-r0", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-sqlite.yaml-b0ca8c95606371be2557980059c10b34df30fa9f" }, { "spdxElementId": "SPDXRef-Package-apk-sqlite-libs-3.54.1-r0", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-sqlite-3.54.1-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-sqlite-libs", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-sqlite-libs-3537f4439535e52a" }, { "spdxElementId": "SPDXRef-Package-apk-sqlite-libs-3.54.1-r0", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-sqlite-libs" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-2fa9f3b8b5278e28d05bee0e797db69ef6ec8030575f2e5086732fba3f5ac0cf", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-sqlite-libs-3.54.1-r0" }, { "spdxElementId": "SPDXRef-Package-apk-heimdal-libs-7.8.0-r55", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-heimdal.yaml-98d0e0fa47c531020de219448a43d120a8c0360a" }, { "spdxElementId": "SPDXRef-Package-apk-heimdal-libs-7.8.0-r55", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-github.com-heimdal-heimdal-heimdal-7.8.0-a6cf94577c0d1e5bca5304342e4ddffb18255afe-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-heimdal-libs", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-heimdal-libs-9286e31dba85ed60" }, { "spdxElementId": "SPDXRef-Package-apk-heimdal-libs-7.8.0-r55", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-heimdal-libs" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-2fa9f3b8b5278e28d05bee0e797db69ef6ec8030575f2e5086732fba3f5ac0cf", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-heimdal-libs-7.8.0-r55" }, { "spdxElementId": "SPDXRef-Package-apk-cyrus-sasl-heimdal-libs-2.1.28-r58", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-cyrus-sasl-heimdal.yaml-6a2a53d0046e82dc1f45ac4a9c9593d8d91aaa78" }, { "spdxElementId": "SPDXRef-Package-apk-cyrus-sasl-heimdal-libs-2.1.28-r58", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-github.com-cyrusimap-cyrus-sasl.git-cyrus-sasl-2.1.28-7a6b45b177070198fed0682bea5fa87c18abb084-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-cyrus-sasl-heimdal-libs", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-cyrus-sasl-heimdal-libs-231201da7d952797" }, { "spdxElementId": "SPDXRef-Package-apk-cyrus-sasl-heimdal-libs-2.1.28-r58", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-cyrus-sasl-heimdal-libs" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-2fa9f3b8b5278e28d05bee0e797db69ef6ec8030575f2e5086732fba3f5ac0cf", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-cyrus-sasl-heimdal-libs-2.1.28-r58" }, { "spdxElementId": "SPDXRef-Package-apk-krb5-conf-1.0-r10", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-krb5-conf.yaml-f0f4cc5b0d900deaf94dfdcd841e289db97111e1" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-krb5-conf", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-krb5-conf-fa13a22c4be9d33b" }, { "spdxElementId": "SPDXRef-Package-apk-krb5-conf-1.0-r10", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-krb5-conf" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-2fa9f3b8b5278e28d05bee0e797db69ef6ec8030575f2e5086732fba3f5ac0cf", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-krb5-conf-1.0-r10" }, { "spdxElementId": "SPDXRef-Package-apk-libcomC95err-1.47.4-r5", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-e2fsprogs.yaml-b89fefe984e6541788116bd15d4f8dce3dc021a9" }, { "spdxElementId": "SPDXRef-Package-apk-libcomC95err-1.47.4-r5", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-github.com-tytso-e2fsprogs-v1.47.4-7ee1d505ef3b37831215f490411f346fe57e9053-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-libcom-err", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-libcom-err-abd868c77f389bd6" }, { "spdxElementId": "SPDXRef-Package-apk-libcomC95err-1.47.4-r5", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-libcom-err" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-2fa9f3b8b5278e28d05bee0e797db69ef6ec8030575f2e5086732fba3f5ac0cf", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-libcomC95err-1.47.4-r5" }, { "spdxElementId": "SPDXRef-Package-apk-keyutils-libs-1.6.3-r41", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-keyutils.yaml-014624f79627768df6f5ff49f4265a7057c2e206" }, { "spdxElementId": "SPDXRef-Package-apk-keyutils-libs-1.6.3-r41", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-kernel.googlesource.com-pub-scm-linux-kernel-git-dhowells-keyutils.git-v1.6.3-cb3bb194cca88211cbfcdde2f10c0f43c3fb8ec3-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-keyutils-libs", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-keyutils-libs-33941f83b328991d" }, { "spdxElementId": "SPDXRef-Package-apk-keyutils-libs-1.6.3-r41", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-keyutils-libs" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-2fa9f3b8b5278e28d05bee0e797db69ef6ec8030575f2e5086732fba3f5ac0cf", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-keyutils-libs-1.6.3-r41" }, { "spdxElementId": "SPDXRef-Package-apk-openssl-4.0-libssl-4.0.3-r8", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-openssl-4.0.yaml-53fb2f6751f832fa61ddba06cb8a40dbba5f409f" }, { "spdxElementId": "SPDXRef-Package-apk-openssl-4.0-libssl-4.0.3-r8", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-github.com-openssl-openssl-openssl-4.0.3-af1775b60dfa141a4ad762585052cabeb9f37e9e-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-openssl-4.0-libssl", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-openssl-4.0-libssl-c679b855376e9cb3" }, { "spdxElementId": "SPDXRef-Package-apk-openssl-4.0-libssl-4.0.3-r8", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-openssl-4.0-libssl" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-2fa9f3b8b5278e28d05bee0e797db69ef6ec8030575f2e5086732fba3f5ac0cf", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-openssl-4.0-libssl-4.0.3-r8" }, { "spdxElementId": "SPDXRef-Package-apk-libverto-0.3.2-r11", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-libverto.yaml-491b184c82ef2868d73a46a98997db789342ff15" }, { "spdxElementId": "SPDXRef-Package-apk-libverto-0.3.2-r11", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-github.com-latchset-libverto-0.3.2-1e8f574f702f270d96e42348e7cc088da5acc9ae-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-libverto", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-libverto-72af9e6bf0f3c7eb" }, { "spdxElementId": "SPDXRef-Package-apk-libverto-0.3.2-r11", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-libverto" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-2fa9f3b8b5278e28d05bee0e797db69ef6ec8030575f2e5086732fba3f5ac0cf", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-libverto-0.3.2-r11" }, { "spdxElementId": "SPDXRef-Package-apk-krb5-libs-1.22.2-r6", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-krb5.yaml-d8c1739b8ac0376433f810660cfe5c19987e66d2" }, { "spdxElementId": "SPDXRef-Package-apk-krb5-libs-1.22.2-r6", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-github.com-krb5-krb5.git-krb5-1.22.2-final-8570e77819563e036027e1da789d08ec9333ed4d-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-krb5-libs", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-krb5-libs-cf468385c5ad41a7" }, { "spdxElementId": "SPDXRef-Package-apk-krb5-libs-1.22.2-r6", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-krb5-libs" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-2fa9f3b8b5278e28d05bee0e797db69ef6ec8030575f2e5086732fba3f5ac0cf", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-krb5-libs-1.22.2-r6" }, { "spdxElementId": "SPDXRef-Package-apk-libunistring-1.5-r1", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-libunistring.yaml-d8c1739b8ac0376433f810660cfe5c19987e66d2" }, { "spdxElementId": "SPDXRef-Package-apk-libunistring-1.5-r1", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-https.git.savannah.gnu.org-git-libunistring.git-v1.5-9a0b11a515258048ba17f05009cbd317298de92d-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-libunistring", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-libunistring-24657f606183fbd8" }, { "spdxElementId": "SPDXRef-Package-apk-libunistring-1.5-r1", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-libunistring" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-2fa9f3b8b5278e28d05bee0e797db69ef6ec8030575f2e5086732fba3f5ac0cf", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-libunistring-1.5-r1" }, { "spdxElementId": "SPDXRef-Package-apk-libidn2-2.3.8-r12", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-libidn2.yaml-491b184c82ef2868d73a46a98997db789342ff15" }, { "spdxElementId": "SPDXRef-Package-apk-libidn2-2.3.8-r12", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-gitlab.com-libidn-libidn2-v2.3.8-9bc3ac79e2ae81ade245a0e308bf13c981efaa83-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-libidn2", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-libidn2-c2a5069cc7f337b2" }, { "spdxElementId": "SPDXRef-Package-apk-libidn2-2.3.8-r12", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-libidn2" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-2fa9f3b8b5278e28d05bee0e797db69ef6ec8030575f2e5086732fba3f5ac0cf", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-libidn2-2.3.8-r12" }, { "spdxElementId": "SPDXRef-Package-apk-libldap-2.7-2.7.2-r0", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-openldap-2.7.yaml-0906e934a58fa878f8d3cfa650c6aab092cc7f26" }, { "spdxElementId": "SPDXRef-Package-apk-libldap-2.7-2.7.2-r0", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-github.com-openldap-openldap.git-OPENLDAPC95RELC95ENGC952C957C952-5030280ed039f03fe7725a21f892d7f4e0b98076-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-libldap-2.7", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-libldap-2.7-50eee4bb77b57fc5" }, { "spdxElementId": "SPDXRef-Package-apk-libldap-2.7-2.7.2-r0", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-libldap-2.7" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-2fa9f3b8b5278e28d05bee0e797db69ef6ec8030575f2e5086732fba3f5ac0cf", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-libldap-2.7-2.7.2-r0" }, { "spdxElementId": "SPDXRef-Package-apk-libnghttp2-14-1.71.0-r0", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-nghttp2.yaml-153ee2bd742f744ddedf5c4a97110fa46307574b" }, { "spdxElementId": "SPDXRef-Package-apk-libnghttp2-14-1.71.0-r0", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-github.com-nghttp2-nghttp2.git-v1.71.0-80dcb8140af050fac91a7e6af4fc6dd013404bd1-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-libnghttp2-14", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-libnghttp2-14-2dea1951a0c6092e" }, { "spdxElementId": "SPDXRef-Package-apk-libnghttp2-14-1.71.0-r0", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-libnghttp2-14" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-2fa9f3b8b5278e28d05bee0e797db69ef6ec8030575f2e5086732fba3f5ac0cf", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-libnghttp2-14-1.71.0-r0" }, { "spdxElementId": "SPDXRef-Package-apk-nghttp3-1.19.0-r0", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-nghttp3.yaml-10e9291816e1a18eee8044d5c02177de477e1f29" }, { "spdxElementId": "SPDXRef-Package-apk-nghttp3-1.19.0-r0", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-github.com-ngtcp2-nghttp3.git-v1.19.0-dc83309ca5fd2beb91cc5c030a2d30525e9f2a00-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-nghttp3", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-nghttp3-cce6f802620cbc0f" }, { "spdxElementId": "SPDXRef-Package-apk-nghttp3-1.19.0-r0", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-nghttp3" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-2fa9f3b8b5278e28d05bee0e797db69ef6ec8030575f2e5086732fba3f5ac0cf", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-nghttp3-1.19.0-r0" }, { "spdxElementId": "SPDXRef-Package-apk-ngtcp2-1.26.0-r0", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-ngtcp2.yaml-a3a25ebdd1c3e71a190ca09e4f5a7beb6732dc78" }, { "spdxElementId": "SPDXRef-Package-apk-ngtcp2-1.26.0-r0", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-github.com-ngtcp2-ngtcp2.git-v1.26.0-6a22a4d7a111f6b52391910e40ad3681a09cfb9c-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-ngtcp2", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-ngtcp2-4cdb37ec0ead9500" }, { "spdxElementId": "SPDXRef-Package-apk-ngtcp2-1.26.0-r0", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-ngtcp2" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-2fa9f3b8b5278e28d05bee0e797db69ef6ec8030575f2e5086732fba3f5ac0cf", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-ngtcp2-1.26.0-r0" }, { "spdxElementId": "SPDXRef-Package-apk-libpsl-0.23.3-r4", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-libpsl.yaml-491b184c82ef2868d73a46a98997db789342ff15" }, { "spdxElementId": "SPDXRef-Package-apk-libpsl-0.23.3-r4", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-github.com-rockdaboot-libpsl.git-0.23.3-c486db8d221cbac55f87508d4da4db4497760997-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-libpsl", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-libpsl-cfb612d905aac653" }, { "spdxElementId": "SPDXRef-Package-apk-libpsl-0.23.3-r4", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-libpsl" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-2fa9f3b8b5278e28d05bee0e797db69ef6ec8030575f2e5086732fba3f5ac0cf", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-libpsl-0.23.3-r4" }, { "spdxElementId": "SPDXRef-Package-apk-zlib-1.3.2.1C95rc20260921-r2", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-zlib.yaml-5aeb575ed7ca64fb21dfda042e170d08f1654bbc" }, { "spdxElementId": "SPDXRef-Package-apk-zlib-1.3.2.1C95rc20260921-r2", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-github.com-madler-zlib-develop-767c4c947852e143f582c85f14cf573411df1b35-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-zlib", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-zlib-408fd061819ff234" }, { "spdxElementId": "SPDXRef-Package-apk-zlib-1.3.2.1C95rc20260921-r2", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-zlib" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-2fa9f3b8b5278e28d05bee0e797db69ef6ec8030575f2e5086732fba3f5ac0cf", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-zlib-1.3.2.1C95rc20260921-r2" }, { "spdxElementId": "SPDXRef-Package-apk-libcurl-openssl4-8.23.0-r3", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-curl.yaml-010cb3d3ce5812142c1ff59d0b260650190c6241" }, { "spdxElementId": "SPDXRef-Package-apk-libcurl-openssl4-8.23.0-r3", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-github.com-curl-curl.git-curl-8C9523C950-3163ec065643ba20709f190111f42c3e1fe95273-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-libcurl-openssl4", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-libcurl-openssl4-c5b225641fd62954" }, { "spdxElementId": "SPDXRef-Package-apk-libcurl-openssl4-8.23.0-r3", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-libcurl-openssl4" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-2fa9f3b8b5278e28d05bee0e797db69ef6ec8030575f2e5086732fba3f5ac0cf", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-libcurl-openssl4-8.23.0-r3" }, { "spdxElementId": "SPDXRef-Package-apk-libexpat1-2.10.0-r1", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-expat.yaml-5aeb575ed7ca64fb21dfda042e170d08f1654bbc" }, { "spdxElementId": "SPDXRef-Package-apk-libexpat1-2.10.0-r1", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-github.com-libexpat-libexpat-RC952C9510C950-a70841d9ffa64ddde29ab824ed6305035ebe4c47-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-libexpat1", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-libexpat1-e9e360db12e59673" }, { "spdxElementId": "SPDXRef-Package-apk-libexpat1-2.10.0-r1", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-libexpat1" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-2fa9f3b8b5278e28d05bee0e797db69ef6ec8030575f2e5086732fba3f5ac0cf", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-libexpat1-2.10.0-r1" }, { "spdxElementId": "SPDXRef-Package-apk-libpcre2-8-0-10.49-r3", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-pcre2.yaml-5aeb575ed7ca64fb21dfda042e170d08f1654bbc" }, { "spdxElementId": "SPDXRef-Package-apk-libpcre2-8-0-10.49-r3", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-github.com-PCRE2Project-pcre2.git-pcre2-10.49-6f9d7c1373262c541324a16a358785b33ef116cf-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-libpcre2-8-0", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-libpcre2-8-0-ab3ff18a4df64c44" }, { "spdxElementId": "SPDXRef-Package-apk-libpcre2-8-0-10.49-r3", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-libpcre2-8-0" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-2fa9f3b8b5278e28d05bee0e797db69ef6ec8030575f2e5086732fba3f5ac0cf", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-libpcre2-8-0-10.49-r3" }, { "spdxElementId": "SPDXRef-Package-apk-git-2.56.0-r3", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-git.yaml-a3655395a06e663e8406d260a966b9e022e11f7e" }, { "spdxElementId": "SPDXRef-Package-apk-git-2.56.0-r3", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-kernel.googlesource.com-pub-scm-git-git.git-v2.56.0-a018953688f1b10bddf91bff8747068f5f4746a4-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-git", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-git-de822c546ba6a811" }, { "spdxElementId": "SPDXRef-Package-apk-git-2.56.0-r3", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-git" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-2fa9f3b8b5278e28d05bee0e797db69ef6ec8030575f2e5086732fba3f5ac0cf", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-git-2.56.0-r3" }, { "spdxElementId": "SPDXRef-Package-apk-go-1.27-upstream-1.27.3-r0", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-melange-go-1.27-upstream.yaml-60d4c5fca1dae7e58bf86478a7175ec40f8c7df5" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-2fa9f3b8b5278e28d05bee0e797db69ef6ec8030575f2e5086732fba3f5ac0cf", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-go-1.27-upstream-1.27.3-r0" }, { "spdxElementId": "SPDXRef-Package-apk-tzdata-2026f-r0", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-tzdata.yaml-b01ceefc114cf44ccb6d35f405795435f98bf0c2" }, { "spdxElementId": "SPDXRef-Package-apk-tzdata-2026f-r0", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-github.com-eggert-tz-2026f-a6cb1a1cebcc96269a02b25323c1a9424e3349a8-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-tzdata", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-tzdata-2a758f1785d5e6c8" }, { "spdxElementId": "SPDXRef-Package-apk-tzdata-2026f-r0", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-tzdata" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-2fa9f3b8b5278e28d05bee0e797db69ef6ec8030575f2e5086732fba3f5ac0cf", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-tzdata-2026f-r0" } ] }