{
  "SPDXID": "SPDXRef-DOCUMENT",
  "name": "sbom-sha256:bd23f52ed9aa3c09e7ac8dfebf462af1520df970a87582adf4b9c211b0662765",
  "spdxVersion": "SPDX-2.3",
  "creationInfo": {
    "created": "2026-11-09T18:30:47Z",
    "creators": [
      "Tool: apko (v1.4.18)",
      "Organization: Chainguard, Inc"
    ],
    "licenseListVersion": "3.27"
  },
  "dataLicense": "CC0-1.0",
  "documentNamespace": "https://spdx.org/spdxdocs/apko/",
  "documentDescribes": [
    "SPDXRef-Package-Image-sha256-4edf425c96d678c3016b5060f5b8648d91dec73dac8537d8733c1571e546455a"
  ],
  "packages": [
    {
      "SPDXID": "SPDXRef-Package-Image-sha256-4edf425c96d678c3016b5060f5b8648d91dec73dac8537d8733c1571e546455a",
      "name": "sha256:4edf425c96d678c3016b5060f5b8648d91dec73dac8537d8733c1571e546455a",
      "versionInfo": "sha256:4edf425c96d678c3016b5060f5b8648d91dec73dac8537d8733c1571e546455a",
      "filesAnalyzed": false,
      "description": "apko container image",
      "downloadLocation": "NOASSERTION",
      "supplier": "Organization: Wolfi",
      "primaryPackagePurpose": "CONTAINER",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "4edf425c96d678c3016b5060f5b8648d91dec73dac8537d8733c1571e546455a"
        }
      ],
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceLocator": "pkg:oci/node@sha256:4edf425c96d678c3016b5060f5b8648d91dec73dac8537d8733c1571e546455a?arch=amd64\u0026mediaType=application%2Fvnd.oci.image.manifest.v1%2Bjson\u0026os=linux",
          "referenceType": "purl"
        }
      ]
    },
    {
      "SPDXID": "SPDXRef-Package-ImageLayer-sha256-bd23f52ed9aa3c09e7ac8dfebf462af1520df970a87582adf4b9c211b0662765",
      "name": "sha256:bd23f52ed9aa3c09e7ac8dfebf462af1520df970a87582adf4b9c211b0662765",
      "versionInfo": "20230201",
      "filesAnalyzed": false,
      "description": "apko operating system layer",
      "downloadLocation": "NOASSERTION",
      "supplier": "Organization: Wolfi",
      "primaryPackagePurpose": "CONTAINER",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceLocator": "pkg:oci/node@sha256:bd23f52ed9aa3c09e7ac8dfebf462af1520df970a87582adf4b9c211b0662765?arch=amd64\u0026mediaType=application%2Fvnd.oci.image.layer.v1.tar%2Bgzip\u0026os=linux",
          "referenceType": "purl"
        }
      ]
    },
    {
      "SPDXID": "SPDXRef-OperatingSystem-wolfi",
      "name": "wolfi",
      "versionInfo": "20230201",
      "filesAnalyzed": false,
      "description": "Operating System",
      "downloadLocation": "NOASSERTION",
      "supplier": "Organization: Wolfi",
      "primaryPackagePurpose": "OPERATING_SYSTEM"
    },
    {
      "SPDXID": "SPDXRef-Package-apk-wolfi-baselayout-20230201-r31",
      "name": "wolfi-baselayout",
      "versionInfo": "20230201-r31",
      "filesAnalyzed": false,
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "MIT",
      "downloadLocation": "NOASSERTION",
      "originator": "Organization: Wolfi",
      "supplier": "Organization: Wolfi",
      "copyrightText": "NOASSERTION",
      "primaryPackagePurpose": "APPLICATION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceLocator": "pkg:apk/wolfi/wolfi-baselayout@20230201-r31?arch=x86_64\u0026distro=wolfi",
          "referenceType": "purl"
        }
      ]
    },
    {
      "SPDXID": "SPDXRef-Package-Melange-wolfi-baselayout.yaml-ed415005c84750f03c4a9252137813734a224ae7",
      "name": "wolfi-baselayout.yaml",
      "versionInfo": "ed415005c84750f03c4a9252137813734a224ae7",
      "filesAnalyzed": false,
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "Apache-2.0",
      "downloadLocation": "NOASSERTION",
      "originator": "Organization: Wolfi",
      "supplier": "Organization: Wolfi",
      "primaryPackagePurpose": "INSTALL",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceLocator": "pkg:github/chainguard-dev/stereo@ed415005c84750f03c4a9252137813734a224ae7#wolfi-baselayout.yaml",
          "referenceType": "purl"
        }
      ]
    },
    {
      "SPDXID": "SPDXRef-Package-apk-wolfi-baselayout-9980a17ea85a76d3",
      "name": "wolfi-baselayout",
      "versionInfo": "20230201-r31",
      "filesAnalyzed": false,
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "MIT",
      "description": "baselayout data for Wolfi",
      "downloadLocation": "NOASSERTION",
      "originator": "Organization: Wolfi",
      "supplier": "Organization: chainguard",
      "sourceInfo": "acquired package info from APK DB: /.PKGINFO",
      "copyrightText": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceLocator": "pkg:apk/wolfi/wolfi-baselayout@20230201-r31?arch=x86_64\u0026origin=wolfi-baselayout",
          "referenceType": "purl"
        }
      ]
    },
    {
      "SPDXID": "SPDXRef-DocumentRoot-Directory-wolfi-baselayout",
      "name": "wolfi-baselayout",
      "versionInfo": "20230201-r31",
      "filesAnalyzed": false,
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "downloadLocation": "NOASSERTION",
      "originator": "Organization: Wolfi",
      "supplier": "Organization: chainguard",
      "copyrightText": "NOASSERTION",
      "primaryPackagePurpose": "FILE"
    },
    {
      "SPDXID": "SPDXRef-Package-apk-ca-certificates-bundle-20261020-r0",
      "name": "ca-certificates-bundle",
      "versionInfo": "20261020-r0",
      "filesAnalyzed": false,
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "MPL-2.0 AND MIT",
      "downloadLocation": "NOASSERTION",
      "originator": "Organization: Wolfi",
      "supplier": "Organization: Wolfi",
      "copyrightText": "NOASSERTION",
      "primaryPackagePurpose": "APPLICATION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceLocator": "pkg:apk/wolfi/ca-certificates-bundle@20261020-r0?arch=x86_64\u0026distro=wolfi",
          "referenceType": "purl"
        }
      ]
    },
    {
      "SPDXID": "SPDXRef-Package-Melange-ca-certificates.yaml-8061afafa65af5a9026707a8880e14120dd6f4a0",
      "name": "ca-certificates.yaml",
      "versionInfo": "8061afafa65af5a9026707a8880e14120dd6f4a0",
      "filesAnalyzed": false,
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "Apache-2.0",
      "downloadLocation": "NOASSERTION",
      "originator": "Organization: Wolfi",
      "supplier": "Organization: Wolfi",
      "primaryPackagePurpose": "INSTALL",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceLocator": "pkg:github/chainguard-dev/stereo@8061afafa65af5a9026707a8880e14120dd6f4a0#ca-certificates.yaml",
          "referenceType": "purl"
        }
      ]
    },
    {
      "SPDXID": "SPDXRef-Package-Source-gitlab.alpinelinux.org-alpine-ca-certificates-20261020-2058424fda70ee478bcce872dcf141a0c5499ee0-0",
      "name": "alpine/ca-certificates",
      "versionInfo": "20261020",
      "filesAnalyzed": false,
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "MPL-2.0 AND MIT",
      "downloadLocation": "https://tarballs.cgr.dev/a/f7f6555663adc30d4e3c43a90ddef6942dabe93d06f7a7201cf29d993222346a-2058424fda70ee478bcce872dcf141a0c5499ee0.tar.gz",
      "originator": "Organization: Wolfi",
      "supplier": "Organization: Wolfi",
      "primaryPackagePurpose": "SOURCE",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceLocator": "pkg:generic/alpine%2Fca-certificates@20261020?vcs_url=git%2Bhttps:%2F%2Fgitlab.alpinelinux.org%2Falpine%2Fca-certificates%402058424fda70ee478bcce872dcf141a0c5499ee0",
          "referenceType": "purl"
        }
      ]
    },
    {
      "SPDXID": "SPDXRef-Package-apk-ca-certificates-bundle-3a36aed2688bdba8",
      "name": "ca-certificates-bundle",
      "versionInfo": "20261020-r0",
      "filesAnalyzed": false,
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "(MPL-2.0 AND MIT)",
      "downloadLocation": "NOASSERTION",
      "originator": "Organization: Wolfi",
      "supplier": "Organization: chainguard",
      "sourceInfo": "acquired package info from APK DB: /.PKGINFO",
      "copyrightText": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceLocator": "pkg:apk/wolfi/ca-certificates-bundle@20261020-r0?arch=x86_64\u0026origin=ca-certificates",
          "referenceType": "purl"
        }
      ]
    },
    {
      "SPDXID": "SPDXRef-DocumentRoot-Directory-ca-certificates-bundle",
      "name": "ca-certificates-bundle",
      "versionInfo": "20261020-r0",
      "filesAnalyzed": false,
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "downloadLocation": "NOASSERTION",
      "originator": "Organization: Wolfi",
      "supplier": "Organization: chainguard",
      "copyrightText": "NOASSERTION",
      "primaryPackagePurpose": "FILE"
    },
    {
      "SPDXID": "SPDXRef-Package-apk-glibc-2.44-locale-posix-2.44-r14",
      "name": "glibc-2.44-locale-posix",
      "versionInfo": "2.44-r14",
      "filesAnalyzed": false,
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "LGPL-2.1-or-later",
      "downloadLocation": "NOASSERTION",
      "originator": "Organization: Wolfi",
      "supplier": "Organization: Wolfi",
      "copyrightText": "NOASSERTION",
      "primaryPackagePurpose": "APPLICATION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceLocator": "pkg:apk/wolfi/glibc-2.44-locale-posix@2.44-r14?arch=x86_64\u0026distro=wolfi",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "SECURITY",
          "referenceLocator": "cpe:2.3:a:gnu:glibc:2.44:*:*:*:*:*:*:*",
          "referenceType": "cpe23Type"
        }
      ]
    },
    {
      "SPDXID": "SPDXRef-Package-Melange-glibc-2.44.yaml-86ee3612cb47379928ac34ad99dfbfd45d138ff9",
      "name": "glibc-2.44.yaml",
      "versionInfo": "86ee3612cb47379928ac34ad99dfbfd45d138ff9",
      "filesAnalyzed": false,
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "Apache-2.0",
      "downloadLocation": "NOASSERTION",
      "originator": "Organization: Wolfi",
      "supplier": "Organization: Wolfi",
      "primaryPackagePurpose": "INSTALL",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceLocator": "pkg:github/chainguard-dev/stereo@86ee3612cb47379928ac34ad99dfbfd45d138ff9#glibc-2.44.yaml",
          "referenceType": "purl"
        }
      ]
    },
    {
      "SPDXID": "SPDXRef-Package-Source-gitlab.com-gnutools-glibc.git-release-2.44-master-c5c6fc6f449dbc95e3a68cacd61852dc0a48e57c-0",
      "name": "gnutools/glibc",
      "versionInfo": "c5c6fc6f449dbc95e3a68cacd61852dc0a48e57c",
      "filesAnalyzed": false,
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "LGPL-2.1-or-later",
      "downloadLocation": "https://tarballs.cgr.dev/g/9390037ac2ec26cf74ce7c6709d852e0ce67205355e04fbdb9b9549f47a5bb40-c5c6fc6f449dbc95e3a68cacd61852dc0a48e57c.tar.gz",
      "originator": "Organization: Wolfi",
      "supplier": "Organization: Wolfi",
      "primaryPackagePurpose": "SOURCE",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceLocator": "pkg:generic/gnutools%2Fglibc@c5c6fc6f449dbc95e3a68cacd61852dc0a48e57c?vcs_url=git%2Bhttps:%2F%2Fgitlab.com%2Fgnutools%2Fglibc.git%40c5c6fc6f449dbc95e3a68cacd61852dc0a48e57c",
          "referenceType": "purl"
        }
      ]
    },
    {
      "SPDXID": "SPDXRef-Package-apk-glibc-2.44-locale-posix-45facf68c079fe77",
      "name": "glibc-2.44-locale-posix",
      "versionInfo": "2.44-r14",
      "filesAnalyzed": false,
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "LGPL-2.1-or-later",
      "description": "POSIX locale data for glibc",
      "downloadLocation": "NOASSERTION",
      "originator": "Organization: Wolfi",
      "supplier": "Organization: chainguard",
      "sourceInfo": "acquired package info from APK DB: /.PKGINFO",
      "copyrightText": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "SECURITY",
          "referenceLocator": "cpe:2.3:a:gnu:glibc:2.44-r14:*:*:*:*:*:*:*",
          "referenceType": "cpe23Type"
        },
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceLocator": "pkg:apk/wolfi/glibc-2.44-locale-posix@2.44-r14?arch=x86_64\u0026origin=glibc-2.44",
          "referenceType": "purl"
        }
      ]
    },
    {
      "SPDXID": "SPDXRef-DocumentRoot-Directory-glibc-2.44-locale-posix",
      "name": "glibc-2.44-locale-posix",
      "versionInfo": "2.44-r14",
      "filesAnalyzed": false,
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "downloadLocation": "NOASSERTION",
      "originator": "Organization: Wolfi",
      "supplier": "Organization: chainguard",
      "copyrightText": "NOASSERTION",
      "primaryPackagePurpose": "FILE"
    },
    {
      "SPDXID": "SPDXRef-Package-apk-libgcc-16.2.0-r3",
      "name": "libgcc",
      "versionInfo": "16.2.0-r3",
      "filesAnalyzed": false,
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "GPL-3.0-or-later WITH GCC-exception-3.1",
      "downloadLocation": "NOASSERTION",
      "originator": "Organization: Wolfi",
      "supplier": "Organization: Wolfi",
      "copyrightText": "NOASSERTION",
      "primaryPackagePurpose": "APPLICATION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceLocator": "pkg:apk/wolfi/libgcc@16.2.0-r3?arch=x86_64\u0026distro=wolfi",
          "referenceType": "purl"
        }
      ]
    },
    {
      "SPDXID": "SPDXRef-Package-Melange-gcc.yaml-4d188060cbd00821a95f1ef60605da4817e781bb",
      "name": "gcc.yaml",
      "versionInfo": "4d188060cbd00821a95f1ef60605da4817e781bb",
      "filesAnalyzed": false,
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "Apache-2.0",
      "downloadLocation": "NOASSERTION",
      "originator": "Organization: Wolfi",
      "supplier": "Organization: Wolfi",
      "primaryPackagePurpose": "INSTALL",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceLocator": "pkg:github/chainguard-dev/stereo@4d188060cbd00821a95f1ef60605da4817e781bb#gcc.yaml",
          "referenceType": "purl"
        }
      ]
    },
    {
      "SPDXID": "SPDXRef-Package-Source-gitlab.com-gnutools-gcc.git-releases-gcc-16.2.0-78d4ac73dd391005b895a6148cd9831e28e1208b-0",
      "name": "gnutools/gcc",
      "versionInfo": "releases/gcc-16.2.0",
      "filesAnalyzed": false,
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "GPL-3.0-or-later WITH GCC-exception-3.1",
      "downloadLocation": "https://tarballs.cgr.dev/g/dc3e72361e36d33e861a0662815d63a4f1b8578521cc6935343a4aa87327bdec-78d4ac73dd391005b895a6148cd9831e28e1208b.tar.gz",
      "originator": "Organization: Wolfi",
      "supplier": "Organization: Wolfi",
      "primaryPackagePurpose": "SOURCE",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceLocator": "pkg:generic/gnutools%2Fgcc@releases%2Fgcc-16.2.0?vcs_url=git%2Bhttps:%2F%2Fgitlab.com%2Fgnutools%2Fgcc.git%4078d4ac73dd391005b895a6148cd9831e28e1208b",
          "referenceType": "purl"
        }
      ]
    },
    {
      "SPDXID": "SPDXRef-Package-apk-libgcc-c8364f237745c3d5",
      "name": "libgcc",
      "versionInfo": "16.2.0-r3",
      "filesAnalyzed": false,
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "(GPL-3.0-or-later WITH GCC-exception-3.1)",
      "description": "GCC runtime library",
      "downloadLocation": "NOASSERTION",
      "originator": "Organization: Wolfi",
      "supplier": "Organization: chainguard",
      "sourceInfo": "acquired package info from APK DB: /.PKGINFO",
      "copyrightText": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "SECURITY",
          "referenceLocator": "cpe:2.3:a:gnu:gcc:16.2.0:*:*:*:*:*:*:*",
          "referenceType": "cpe23Type"
        },
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceLocator": "pkg:apk/wolfi/libgcc@16.2.0-r3?arch=x86_64\u0026origin=gcc",
          "referenceType": "purl"
        }
      ]
    },
    {
      "SPDXID": "SPDXRef-DocumentRoot-Directory-libgcc",
      "name": "libgcc",
      "versionInfo": "16.2.0-r3",
      "filesAnalyzed": false,
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "downloadLocation": "NOASSERTION",
      "originator": "Organization: Wolfi",
      "supplier": "Organization: chainguard",
      "copyrightText": "NOASSERTION",
      "primaryPackagePurpose": "FILE"
    },
    {
      "SPDXID": "SPDXRef-Package-apk-glibc-2.44-2.44-r14",
      "name": "glibc-2.44",
      "versionInfo": "2.44-r14",
      "filesAnalyzed": false,
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "LGPL-2.1-or-later",
      "downloadLocation": "NOASSERTION",
      "originator": "Organization: Wolfi",
      "supplier": "Organization: Wolfi",
      "copyrightText": "NOASSERTION",
      "primaryPackagePurpose": "APPLICATION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceLocator": "pkg:apk/wolfi/glibc-2.44@2.44-r14?arch=x86_64\u0026distro=wolfi",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "SECURITY",
          "referenceLocator": "cpe:2.3:a:gnu:glibc:2.44:*:*:*:*:*:*:*",
          "referenceType": "cpe23Type"
        }
      ]
    },
    {
      "SPDXID": "SPDXRef-Package-apk-glibc-2.44-78e84dfd00c23400",
      "name": "glibc-2.44",
      "versionInfo": "2.44-r14",
      "filesAnalyzed": false,
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "LGPL-2.1-or-later",
      "description": "the GNU C library",
      "downloadLocation": "NOASSERTION",
      "originator": "Organization: Wolfi",
      "supplier": "Organization: chainguard",
      "sourceInfo": "acquired package info from APK DB: /.PKGINFO",
      "copyrightText": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "SECURITY",
          "referenceLocator": "cpe:2.3:a:gnu:glibc:2.44-r14:*:*:*:*:*:*:*",
          "referenceType": "cpe23Type"
        },
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceLocator": "pkg:apk/wolfi/glibc-2.44@2.44-r14?arch=x86_64\u0026origin=glibc-2.44",
          "referenceType": "purl"
        }
      ]
    },
    {
      "SPDXID": "SPDXRef-DocumentRoot-Directory-glibc-2.44",
      "name": "glibc-2.44",
      "versionInfo": "2.44-r14",
      "filesAnalyzed": false,
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "downloadLocation": "NOASSERTION",
      "originator": "Organization: Wolfi",
      "supplier": "Organization: chainguard",
      "copyrightText": "NOASSERTION",
      "primaryPackagePurpose": "FILE"
    },
    {
      "SPDXID": "SPDXRef-Package-apk-ld-linux-2.44-2.44-r14",
      "name": "ld-linux-2.44",
      "versionInfo": "2.44-r14",
      "filesAnalyzed": false,
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "LGPL-2.1-or-later",
      "downloadLocation": "NOASSERTION",
      "originator": "Organization: Wolfi",
      "supplier": "Organization: Wolfi",
      "copyrightText": "NOASSERTION",
      "primaryPackagePurpose": "APPLICATION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceLocator": "pkg:apk/wolfi/ld-linux-2.44@2.44-r14?arch=x86_64\u0026distro=wolfi",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "SECURITY",
          "referenceLocator": "cpe:2.3:a:gnu:glibc:2.44:*:*:*:*:*:*:*",
          "referenceType": "cpe23Type"
        }
      ]
    },
    {
      "SPDXID": "SPDXRef-Package-apk-ld-linux-2.44-f538e31a6e7895e7",
      "name": "ld-linux-2.44",
      "versionInfo": "2.44-r14",
      "filesAnalyzed": false,
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "LGPL-2.1-or-later",
      "description": "the GLIBC ELF interpreter",
      "downloadLocation": "NOASSERTION",
      "originator": "Organization: Wolfi",
      "supplier": "Organization: chainguard",
      "sourceInfo": "acquired package info from APK DB: /.PKGINFO",
      "copyrightText": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "SECURITY",
          "referenceLocator": "cpe:2.3:a:gnu:glibc:2.44-r14:*:*:*:*:*:*:*",
          "referenceType": "cpe23Type"
        },
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceLocator": "pkg:apk/wolfi/ld-linux-2.44@2.44-r14?arch=x86_64\u0026origin=glibc-2.44",
          "referenceType": "purl"
        }
      ]
    },
    {
      "SPDXID": "SPDXRef-DocumentRoot-Directory-ld-linux-2.44",
      "name": "ld-linux-2.44",
      "versionInfo": "2.44-r14",
      "filesAnalyzed": false,
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "downloadLocation": "NOASSERTION",
      "originator": "Organization: Wolfi",
      "supplier": "Organization: chainguard",
      "copyrightText": "NOASSERTION",
      "primaryPackagePurpose": "FILE"
    },
    {
      "SPDXID": "SPDXRef-Package-apk-ncurses-terminfo-base-6.6.20261107-r0",
      "name": "ncurses-terminfo-base",
      "versionInfo": "6.6.20261107-r0",
      "filesAnalyzed": false,
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "MIT",
      "downloadLocation": "NOASSERTION",
      "originator": "Organization: Wolfi",
      "supplier": "Organization: Wolfi",
      "copyrightText": "NOASSERTION",
      "primaryPackagePurpose": "APPLICATION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceLocator": "pkg:apk/wolfi/ncurses-terminfo-base@6.6.20261107-r0?arch=x86_64\u0026distro=wolfi",
          "referenceType": "purl"
        }
      ]
    },
    {
      "SPDXID": "SPDXRef-Package-Melange-ncurses.yaml-57b90c0084b0bc101663cdfcaa44f4ce83312443",
      "name": "ncurses.yaml",
      "versionInfo": "57b90c0084b0bc101663cdfcaa44f4ce83312443",
      "filesAnalyzed": false,
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "Apache-2.0",
      "downloadLocation": "NOASSERTION",
      "originator": "Organization: Wolfi",
      "supplier": "Organization: Wolfi",
      "primaryPackagePurpose": "INSTALL",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceLocator": "pkg:github/chainguard-dev/stereo@57b90c0084b0bc101663cdfcaa44f4ce83312443#ncurses.yaml",
          "referenceType": "purl"
        }
      ]
    },
    {
      "SPDXID": "SPDXRef-Package-Source-github.com-ThomasDickey-ncurses-snapshots-v6C956C9520261107-7404b376832583182c52722dc09d86b8675db375-0",
      "name": "ncurses-snapshots",
      "versionInfo": "v6_6_20261107",
      "filesAnalyzed": false,
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "MIT",
      "downloadLocation": "https://github.com/ThomasDickey/ncurses-snapshots/archive/7404b376832583182c52722dc09d86b8675db375.tar.gz",
      "originator": "Organization: Thomasdickey",
      "supplier": "Organization: Thomasdickey",
      "primaryPackagePurpose": "SOURCE",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceLocator": "pkg:github/thomasdickey/ncurses-snapshots@v6_6_20261107",
          "referenceType": "purl"
        }
      ]
    },
    {
      "SPDXID": "SPDXRef-Package-apk-ncurses-terminfo-base-6598c48598cb2742",
      "name": "ncurses-terminfo-base",
      "versionInfo": "6.6.20261107-r0",
      "filesAnalyzed": false,
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "MIT",
      "description": "descriptions of common terminals",
      "downloadLocation": "NOASSERTION",
      "originator": "Organization: Wolfi",
      "supplier": "Organization: chainguard",
      "sourceInfo": "acquired package info from APK DB: /.PKGINFO",
      "copyrightText": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "SECURITY",
          "referenceLocator": "cpe:2.3:a:gnu:ncurses:6.6.20261107:*:*:*:*:*:*:*",
          "referenceType": "cpe23Type"
        },
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceLocator": "pkg:apk/wolfi/ncurses-terminfo-base@6.6.20261107-r0?arch=x86_64\u0026origin=ncurses",
          "referenceType": "purl"
        }
      ]
    },
    {
      "SPDXID": "SPDXRef-DocumentRoot-Directory-ncurses-terminfo-base",
      "name": "ncurses-terminfo-base",
      "versionInfo": "6.6.20261107-r0",
      "filesAnalyzed": false,
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "downloadLocation": "NOASSERTION",
      "originator": "Organization: Wolfi",
      "supplier": "Organization: chainguard",
      "copyrightText": "NOASSERTION",
      "primaryPackagePurpose": "FILE"
    },
    {
      "SPDXID": "SPDXRef-Package-apk-ncurses-6.6.20261107-r0",
      "name": "ncurses",
      "versionInfo": "6.6.20261107-r0",
      "filesAnalyzed": false,
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "MIT",
      "downloadLocation": "NOASSERTION",
      "originator": "Organization: Wolfi",
      "supplier": "Organization: Wolfi",
      "copyrightText": "NOASSERTION",
      "primaryPackagePurpose": "APPLICATION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceLocator": "pkg:apk/wolfi/ncurses@6.6.20261107-r0?arch=x86_64\u0026distro=wolfi",
          "referenceType": "purl"
        }
      ]
    },
    {
      "SPDXID": "SPDXRef-Package-apk-ncurses-d8905fddac6bbdfe",
      "name": "ncurses",
      "versionInfo": "6.6.20261107-r0",
      "filesAnalyzed": false,
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "MIT",
      "description": "console display library",
      "downloadLocation": "NOASSERTION",
      "originator": "Organization: Wolfi",
      "supplier": "Organization: chainguard",
      "sourceInfo": "acquired package info from APK DB: /.PKGINFO",
      "copyrightText": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "SECURITY",
          "referenceLocator": "cpe:2.3:a:gnu:ncurses:6.6.20261107:*:*:*:*:*:*:*",
          "referenceType": "cpe23Type"
        },
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceLocator": "pkg:apk/wolfi/ncurses@6.6.20261107-r0?arch=x86_64\u0026origin=ncurses",
          "referenceType": "purl"
        }
      ]
    },
    {
      "SPDXID": "SPDXRef-DocumentRoot-Directory-ncurses",
      "name": "ncurses",
      "versionInfo": "6.6.20261107-r0",
      "filesAnalyzed": false,
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "downloadLocation": "NOASSERTION",
      "originator": "Organization: Wolfi",
      "supplier": "Organization: chainguard",
      "copyrightText": "NOASSERTION",
      "primaryPackagePurpose": "FILE"
    },
    {
      "SPDXID": "SPDXRef-Package-apk-bash-5.3-r14",
      "name": "bash",
      "versionInfo": "5.3-r14",
      "filesAnalyzed": false,
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "GPL-3.0-or-later",
      "downloadLocation": "NOASSERTION",
      "originator": "Organization: Wolfi",
      "supplier": "Organization: Wolfi",
      "copyrightText": "NOASSERTION",
      "primaryPackagePurpose": "APPLICATION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceLocator": "pkg:apk/wolfi/bash@5.3-r14?arch=x86_64\u0026distro=wolfi",
          "referenceType": "purl"
        }
      ]
    },
    {
      "SPDXID": "SPDXRef-Package-Melange-bash.yaml-ac7b15dc2695924986372a27cd7d6c4e029c5efa",
      "name": "bash.yaml",
      "versionInfo": "ac7b15dc2695924986372a27cd7d6c4e029c5efa",
      "filesAnalyzed": false,
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "Apache-2.0",
      "downloadLocation": "NOASSERTION",
      "originator": "Organization: Wolfi",
      "supplier": "Organization: Wolfi",
      "primaryPackagePurpose": "INSTALL",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceLocator": "pkg:github/chainguard-dev/stereo@ac7b15dc2695924986372a27cd7d6c4e029c5efa#bash.yaml",
          "referenceType": "purl"
        }
      ]
    },
    {
      "SPDXID": "SPDXRef-Package-Source-git.savannah.gnu.org-git-bash.git-bash-5.3-b8c60bc9ca365f8261fa97900b6fa939f6ebc303-0",
      "name": "git/bash",
      "versionInfo": "bash-5.3",
      "filesAnalyzed": false,
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "GPL-3.0-or-later",
      "downloadLocation": "https://tarballs.cgr.dev/g/0e7c34c3027d7f6da5723ac0c18a27c10a29ce56d560c36969b71020e9407623-b8c60bc9ca365f8261fa97900b6fa939f6ebc303.tar.gz",
      "originator": "Organization: Wolfi",
      "supplier": "Organization: Wolfi",
      "primaryPackagePurpose": "SOURCE",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceLocator": "pkg:generic/git%2Fbash@bash-5.3?vcs_url=git%2Bhttps:%2F%2Fgit.savannah.gnu.org%2Fgit%2Fbash.git%40b8c60bc9ca365f8261fa97900b6fa939f6ebc303",
          "referenceType": "purl"
        }
      ]
    },
    {
      "SPDXID": "SPDXRef-Package-apk-bash-68d4d037932aa447",
      "name": "bash",
      "versionInfo": "5.3-r14",
      "filesAnalyzed": false,
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "GPL-3.0-or-later",
      "description": "GNU bourne again shell",
      "downloadLocation": "NOASSERTION",
      "originator": "Organization: Wolfi",
      "supplier": "Organization: chainguard",
      "sourceInfo": "acquired package info from APK DB: /.PKGINFO",
      "copyrightText": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceLocator": "pkg:apk/wolfi/bash@5.3-r14?arch=x86_64\u0026origin=bash",
          "referenceType": "purl"
        }
      ]
    },
    {
      "SPDXID": "SPDXRef-DocumentRoot-Directory-bash",
      "name": "bash",
      "versionInfo": "5.3-r14",
      "filesAnalyzed": false,
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "downloadLocation": "NOASSERTION",
      "originator": "Organization: Wolfi",
      "supplier": "Organization: chainguard",
      "copyrightText": "NOASSERTION",
      "primaryPackagePurpose": "FILE"
    },
    {
      "SPDXID": "SPDXRef-Package-apk-libxcrypt-4.5.2-r8",
      "name": "libxcrypt",
      "versionInfo": "4.5.2-r8",
      "filesAnalyzed": false,
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "GPL-2.0-or-later AND LGPL-2.1-or-later",
      "downloadLocation": "NOASSERTION",
      "originator": "Organization: Wolfi",
      "supplier": "Organization: Wolfi",
      "copyrightText": "NOASSERTION",
      "primaryPackagePurpose": "APPLICATION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceLocator": "pkg:apk/wolfi/libxcrypt@4.5.2-r8?arch=x86_64\u0026distro=wolfi",
          "referenceType": "purl"
        }
      ]
    },
    {
      "SPDXID": "SPDXRef-Package-Melange-libxcrypt.yaml-b9898dbb7125f3678bc8c6cd9e7a43d9d9d2c518",
      "name": "libxcrypt.yaml",
      "versionInfo": "b9898dbb7125f3678bc8c6cd9e7a43d9d9d2c518",
      "filesAnalyzed": false,
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "Apache-2.0",
      "downloadLocation": "NOASSERTION",
      "originator": "Organization: Wolfi",
      "supplier": "Organization: Wolfi",
      "primaryPackagePurpose": "INSTALL",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceLocator": "pkg:github/chainguard-dev/stereo@b9898dbb7125f3678bc8c6cd9e7a43d9d9d2c518#libxcrypt.yaml",
          "referenceType": "purl"
        }
      ]
    },
    {
      "SPDXID": "SPDXRef-Package-Source-github.com-besser82-libxcrypt-v4.5.2-db70b42bd7b2a5b00a8580c8dec0aa66791c950a-0",
      "name": "libxcrypt",
      "versionInfo": "v4.5.2",
      "filesAnalyzed": false,
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "GPL-2.0-or-later AND LGPL-2.1-or-later",
      "downloadLocation": "https://github.com/besser82/libxcrypt/archive/db70b42bd7b2a5b00a8580c8dec0aa66791c950a.tar.gz",
      "originator": "Organization: Besser82",
      "supplier": "Organization: Besser82",
      "primaryPackagePurpose": "SOURCE",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceLocator": "pkg:github/besser82/libxcrypt@v4.5.2",
          "referenceType": "purl"
        }
      ]
    },
    {
      "SPDXID": "SPDXRef-Package-apk-libxcrypt-46c52164e01d9aa1",
      "name": "libxcrypt",
      "versionInfo": "4.5.2-r8",
      "filesAnalyzed": false,
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "(GPL-2.0-or-later AND LGPL-2.1-or-later)",
      "description": "Modern library for one-way hashing of passwords",
      "downloadLocation": "NOASSERTION",
      "originator": "Organization: Wolfi",
      "supplier": "Organization: chainguard",
      "sourceInfo": "acquired package info from APK DB: /.PKGINFO",
      "copyrightText": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceLocator": "pkg:apk/wolfi/libxcrypt@4.5.2-r8?arch=x86_64\u0026origin=libxcrypt",
          "referenceType": "purl"
        }
      ]
    },
    {
      "SPDXID": "SPDXRef-DocumentRoot-Directory-libxcrypt",
      "name": "libxcrypt",
      "versionInfo": "4.5.2-r8",
      "filesAnalyzed": false,
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "downloadLocation": "NOASSERTION",
      "originator": "Organization: Wolfi",
      "supplier": "Organization: chainguard",
      "copyrightText": "NOASSERTION",
      "primaryPackagePurpose": "FILE"
    },
    {
      "SPDXID": "SPDXRef-Package-apk-libcrypt1-2.44-2.44-r14",
      "name": "libcrypt1-2.44",
      "versionInfo": "2.44-r14",
      "filesAnalyzed": false,
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "LGPL-2.1-or-later",
      "downloadLocation": "NOASSERTION",
      "originator": "Organization: Wolfi",
      "supplier": "Organization: Wolfi",
      "copyrightText": "NOASSERTION",
      "primaryPackagePurpose": "APPLICATION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceLocator": "pkg:apk/wolfi/libcrypt1-2.44@2.44-r14?arch=x86_64\u0026distro=wolfi",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "SECURITY",
          "referenceLocator": "cpe:2.3:a:gnu:glibc:2.44:*:*:*:*:*:*:*",
          "referenceType": "cpe23Type"
        }
      ]
    },
    {
      "SPDXID": "SPDXRef-Package-apk-libcrypt1-2.44-40042ba071505d6b",
      "name": "libcrypt1-2.44",
      "versionInfo": "2.44-r14",
      "filesAnalyzed": false,
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "LGPL-2.1-or-later",
      "description": "Password hashing library included with glibc",
      "downloadLocation": "NOASSERTION",
      "originator": "Organization: Wolfi",
      "supplier": "Organization: chainguard",
      "sourceInfo": "acquired package info from APK DB: /.PKGINFO",
      "copyrightText": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "SECURITY",
          "referenceLocator": "cpe:2.3:a:gnu:glibc:2.44-r14:*:*:*:*:*:*:*",
          "referenceType": "cpe23Type"
        },
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceLocator": "pkg:apk/wolfi/libcrypt1-2.44@2.44-r14?arch=x86_64\u0026origin=glibc-2.44",
          "referenceType": "purl"
        }
      ]
    },
    {
      "SPDXID": "SPDXRef-DocumentRoot-Directory-libcrypt1-2.44",
      "name": "libcrypt1-2.44",
      "versionInfo": "2.44-r14",
      "filesAnalyzed": false,
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "downloadLocation": "NOASSERTION",
      "originator": "Organization: Wolfi",
      "supplier": "Organization: chainguard",
      "copyrightText": "NOASSERTION",
      "primaryPackagePurpose": "FILE"
    },
    {
      "SPDXID": "SPDXRef-Package-apk-busybox-1.38.0-r3",
      "name": "busybox",
      "versionInfo": "1.38.0-r3",
      "filesAnalyzed": false,
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "GPL-2.0-only",
      "downloadLocation": "NOASSERTION",
      "originator": "Organization: Wolfi",
      "supplier": "Organization: Wolfi",
      "copyrightText": "NOASSERTION",
      "primaryPackagePurpose": "APPLICATION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceLocator": "pkg:apk/wolfi/busybox@1.38.0-r3?arch=x86_64\u0026distro=wolfi",
          "referenceType": "purl"
        }
      ]
    },
    {
      "SPDXID": "SPDXRef-Package-Melange-busybox.yaml-59d45eb49286129d8d21b2469befa3b55be4719b",
      "name": "busybox.yaml",
      "versionInfo": "59d45eb49286129d8d21b2469befa3b55be4719b",
      "filesAnalyzed": false,
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "Apache-2.0",
      "downloadLocation": "NOASSERTION",
      "originator": "Organization: Wolfi",
      "supplier": "Organization: Wolfi",
      "primaryPackagePurpose": "INSTALL",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceLocator": "pkg:github/chainguard-dev/stereo@59d45eb49286129d8d21b2469befa3b55be4719b#busybox.yaml",
          "referenceType": "purl"
        }
      ]
    },
    {
      "SPDXID": "SPDXRef-Package-Source-github.com-vda-linux-busyboxC95mirror-1C9538C950-fc71374dfccd46448c62947269a35f1420d7ee28-0",
      "name": "busybox_mirror",
      "versionInfo": "1_38_0",
      "filesAnalyzed": false,
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "GPL-2.0-only",
      "downloadLocation": "https://github.com/vda-linux/busybox_mirror/archive/fc71374dfccd46448c62947269a35f1420d7ee28.tar.gz",
      "originator": "Organization: Vda-Linux",
      "supplier": "Organization: Vda-Linux",
      "primaryPackagePurpose": "SOURCE",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceLocator": "pkg:github/vda-linux/busybox_mirror@1_38_0",
          "referenceType": "purl"
        }
      ]
    },
    {
      "SPDXID": "SPDXRef-Package-apk-busybox-053d10e1045ff32f",
      "name": "busybox",
      "versionInfo": "1.38.0-r3",
      "filesAnalyzed": false,
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "GPL-2.0-only",
      "description": "swiss-army knife for embedded systems",
      "downloadLocation": "NOASSERTION",
      "originator": "Organization: Wolfi",
      "supplier": "Organization: chainguard",
      "sourceInfo": "acquired package info from APK DB: /.PKGINFO",
      "copyrightText": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceLocator": "pkg:apk/wolfi/busybox@1.38.0-r3?arch=x86_64\u0026origin=busybox",
          "referenceType": "purl"
        }
      ]
    },
    {
      "SPDXID": "SPDXRef-DocumentRoot-Directory-busybox",
      "name": "busybox",
      "versionInfo": "1.38.0-r3",
      "filesAnalyzed": false,
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "downloadLocation": "NOASSERTION",
      "originator": "Organization: Wolfi",
      "supplier": "Organization: chainguard",
      "copyrightText": "NOASSERTION",
      "primaryPackagePurpose": "FILE"
    },
    {
      "SPDXID": "SPDXRef-Package-apk-libstdcC43C43-16.2.0-r3",
      "name": "libstdc++",
      "versionInfo": "16.2.0-r3",
      "filesAnalyzed": false,
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "GPL-3.0-or-later WITH GCC-exception-3.1",
      "downloadLocation": "NOASSERTION",
      "originator": "Organization: Wolfi",
      "supplier": "Organization: Wolfi",
      "copyrightText": "NOASSERTION",
      "primaryPackagePurpose": "APPLICATION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceLocator": "pkg:apk/wolfi/libstdc%2B%2B@16.2.0-r3?arch=x86_64\u0026distro=wolfi",
          "referenceType": "purl"
        }
      ]
    },
    {
      "SPDXID": "SPDXRef-Package-apk-libstdc---967a4328654175e5",
      "name": "libstdc++",
      "versionInfo": "16.2.0-r3",
      "filesAnalyzed": false,
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "(GPL-3.0-or-later WITH GCC-exception-3.1)",
      "downloadLocation": "NOASSERTION",
      "originator": "Organization: Wolfi",
      "supplier": "Organization: chainguard",
      "sourceInfo": "acquired package info from APK DB: /.PKGINFO",
      "copyrightText": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "SECURITY",
          "referenceLocator": "cpe:2.3:a:gnu:gcc:16.2.0:*:*:*:*:*:*:*",
          "referenceType": "cpe23Type"
        },
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceLocator": "pkg:apk/wolfi/libstdc%2B%2B@16.2.0-r3?arch=x86_64\u0026origin=gcc",
          "referenceType": "purl"
        }
      ]
    },
    {
      "SPDXID": "SPDXRef-DocumentRoot-Directory-libstdc--",
      "name": "libstdc++",
      "versionInfo": "16.2.0-r3",
      "filesAnalyzed": false,
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "downloadLocation": "NOASSERTION",
      "originator": "Organization: Wolfi",
      "supplier": "Organization: chainguard",
      "copyrightText": "NOASSERTION",
      "primaryPackagePurpose": "FILE"
    },
    {
      "SPDXID": "SPDXRef-Package-apk-nodejs-22-upstream-22.23.4-r0",
      "name": "nodejs-22-upstream",
      "versionInfo": "22.23.4-r0",
      "filesAnalyzed": false,
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "MIT",
      "downloadLocation": "NOASSERTION",
      "originator": "Organization: Unknown",
      "supplier": "Organization: Unknown",
      "copyrightText": "NOASSERTION",
      "primaryPackagePurpose": "APPLICATION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceLocator": "pkg:apk/unknown/nodejs-22-upstream@22.23.4-r0?arch=x86_64",
          "referenceType": "purl"
        }
      ]
    },
    {
      "SPDXID": "SPDXRef-Package-Melange-melange-nodejs-22-upstream.yaml-8c2af73bde49e570b73995ca87ebfcf8100036da",
      "name": "melange/nodejs-22-upstream.yaml",
      "versionInfo": "8c2af73bde49e570b73995ca87ebfcf8100036da",
      "filesAnalyzed": false,
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "downloadLocation": "NOASSERTION",
      "originator": "Organization: Unknown",
      "supplier": "Organization: Unknown",
      "primaryPackagePurpose": "INSTALL",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceLocator": "pkg:github/https:/%2Funknown%2Funknown%2Funknown@8c2af73bde49e570b73995ca87ebfcf8100036da#melange/nodejs-22-upstream.yaml",
          "referenceType": "purl"
        }
      ]
    },
    {
      "SPDXID": "SPDXRef-Package-apk-tzdata-2026f-r0",
      "name": "tzdata",
      "versionInfo": "2026f-r0",
      "filesAnalyzed": false,
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "CC-PDDC",
      "downloadLocation": "NOASSERTION",
      "originator": "Organization: Wolfi",
      "supplier": "Organization: Wolfi",
      "copyrightText": "NOASSERTION",
      "primaryPackagePurpose": "APPLICATION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceLocator": "pkg:apk/wolfi/tzdata@2026f-r0?arch=x86_64\u0026distro=wolfi",
          "referenceType": "purl"
        }
      ]
    },
    {
      "SPDXID": "SPDXRef-Package-Melange-tzdata.yaml-b01ceefc114cf44ccb6d35f405795435f98bf0c2",
      "name": "tzdata.yaml",
      "versionInfo": "b01ceefc114cf44ccb6d35f405795435f98bf0c2",
      "filesAnalyzed": false,
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "Apache-2.0",
      "downloadLocation": "NOASSERTION",
      "originator": "Organization: Wolfi",
      "supplier": "Organization: Wolfi",
      "primaryPackagePurpose": "INSTALL",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceLocator": "pkg:github/chainguard-dev/stereo@b01ceefc114cf44ccb6d35f405795435f98bf0c2#tzdata.yaml",
          "referenceType": "purl"
        }
      ]
    },
    {
      "SPDXID": "SPDXRef-Package-Source-github.com-eggert-tz-2026f-a6cb1a1cebcc96269a02b25323c1a9424e3349a8-0",
      "name": "tz",
      "versionInfo": "2026f",
      "filesAnalyzed": false,
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "CC-PDDC",
      "downloadLocation": "https://github.com/eggert/tz/archive/a6cb1a1cebcc96269a02b25323c1a9424e3349a8.tar.gz",
      "originator": "Organization: Eggert",
      "supplier": "Organization: Eggert",
      "primaryPackagePurpose": "SOURCE",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceLocator": "pkg:github/eggert/tz@2026f",
          "referenceType": "purl"
        }
      ]
    },
    {
      "SPDXID": "SPDXRef-Package-apk-tzdata-2a758f1785d5e6c8",
      "name": "tzdata",
      "versionInfo": "2026f-r0",
      "filesAnalyzed": false,
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "CC-PDDC",
      "description": "Timezone data provided by IANA",
      "downloadLocation": "NOASSERTION",
      "originator": "Organization: Wolfi",
      "supplier": "Organization: chainguard",
      "sourceInfo": "acquired package info from APK DB: /.PKGINFO",
      "copyrightText": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceLocator": "pkg:apk/wolfi/tzdata@2026f-r0?arch=x86_64\u0026origin=tzdata",
          "referenceType": "purl"
        }
      ]
    },
    {
      "SPDXID": "SPDXRef-DocumentRoot-Directory-tzdata",
      "name": "tzdata",
      "versionInfo": "2026f-r0",
      "filesAnalyzed": false,
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "downloadLocation": "NOASSERTION",
      "originator": "Organization: Wolfi",
      "supplier": "Organization: chainguard",
      "copyrightText": "NOASSERTION",
      "primaryPackagePurpose": "FILE"
    }
  ],
  "relationships": [
    {
      "spdxElementId": "SPDXRef-Package-Image-sha256-4edf425c96d678c3016b5060f5b8648d91dec73dac8537d8733c1571e546455a",
      "relationshipType": "CONTAINS",
      "relatedSpdxElement": "SPDXRef-Package-ImageLayer-sha256-bd23f52ed9aa3c09e7ac8dfebf462af1520df970a87582adf4b9c211b0662765"
    },
    {
      "spdxElementId": "SPDXRef-Package-apk-wolfi-baselayout-20230201-r31",
      "relationshipType": "DESCRIBED_BY",
      "relatedSpdxElement": "SPDXRef-Package-Melange-wolfi-baselayout.yaml-ed415005c84750f03c4a9252137813734a224ae7"
    },
    {
      "spdxElementId": "SPDXRef-DocumentRoot-Directory-wolfi-baselayout",
      "relationshipType": "CONTAINS",
      "relatedSpdxElement": "SPDXRef-Package-apk-wolfi-baselayout-9980a17ea85a76d3"
    },
    {
      "spdxElementId": "SPDXRef-Package-apk-wolfi-baselayout-20230201-r31",
      "relationshipType": "CONTAINS",
      "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-wolfi-baselayout"
    },
    {
      "spdxElementId": "SPDXRef-Package-Image-sha256-4edf425c96d678c3016b5060f5b8648d91dec73dac8537d8733c1571e546455a",
      "relationshipType": "CONTAINS",
      "relatedSpdxElement": "SPDXRef-Package-apk-wolfi-baselayout-20230201-r31"
    },
    {
      "spdxElementId": "SPDXRef-Package-apk-ca-certificates-bundle-20261020-r0",
      "relationshipType": "DESCRIBED_BY",
      "relatedSpdxElement": "SPDXRef-Package-Melange-ca-certificates.yaml-8061afafa65af5a9026707a8880e14120dd6f4a0"
    },
    {
      "spdxElementId": "SPDXRef-Package-apk-ca-certificates-bundle-20261020-r0",
      "relationshipType": "GENERATED_FROM",
      "relatedSpdxElement": "SPDXRef-Package-Source-gitlab.alpinelinux.org-alpine-ca-certificates-20261020-2058424fda70ee478bcce872dcf141a0c5499ee0-0"
    },
    {
      "spdxElementId": "SPDXRef-DocumentRoot-Directory-ca-certificates-bundle",
      "relationshipType": "CONTAINS",
      "relatedSpdxElement": "SPDXRef-Package-apk-ca-certificates-bundle-3a36aed2688bdba8"
    },
    {
      "spdxElementId": "SPDXRef-Package-apk-ca-certificates-bundle-20261020-r0",
      "relationshipType": "CONTAINS",
      "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-ca-certificates-bundle"
    },
    {
      "spdxElementId": "SPDXRef-Package-Image-sha256-4edf425c96d678c3016b5060f5b8648d91dec73dac8537d8733c1571e546455a",
      "relationshipType": "CONTAINS",
      "relatedSpdxElement": "SPDXRef-Package-apk-ca-certificates-bundle-20261020-r0"
    },
    {
      "spdxElementId": "SPDXRef-Package-apk-glibc-2.44-locale-posix-2.44-r14",
      "relationshipType": "DESCRIBED_BY",
      "relatedSpdxElement": "SPDXRef-Package-Melange-glibc-2.44.yaml-86ee3612cb47379928ac34ad99dfbfd45d138ff9"
    },
    {
      "spdxElementId": "SPDXRef-Package-apk-glibc-2.44-locale-posix-2.44-r14",
      "relationshipType": "GENERATED_FROM",
      "relatedSpdxElement": "SPDXRef-Package-Source-gitlab.com-gnutools-glibc.git-release-2.44-master-c5c6fc6f449dbc95e3a68cacd61852dc0a48e57c-0"
    },
    {
      "spdxElementId": "SPDXRef-DocumentRoot-Directory-glibc-2.44-locale-posix",
      "relationshipType": "CONTAINS",
      "relatedSpdxElement": "SPDXRef-Package-apk-glibc-2.44-locale-posix-45facf68c079fe77"
    },
    {
      "spdxElementId": "SPDXRef-Package-apk-glibc-2.44-locale-posix-2.44-r14",
      "relationshipType": "CONTAINS",
      "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-glibc-2.44-locale-posix"
    },
    {
      "spdxElementId": "SPDXRef-Package-Image-sha256-4edf425c96d678c3016b5060f5b8648d91dec73dac8537d8733c1571e546455a",
      "relationshipType": "CONTAINS",
      "relatedSpdxElement": "SPDXRef-Package-apk-glibc-2.44-locale-posix-2.44-r14"
    },
    {
      "spdxElementId": "SPDXRef-Package-apk-libgcc-16.2.0-r3",
      "relationshipType": "DESCRIBED_BY",
      "relatedSpdxElement": "SPDXRef-Package-Melange-gcc.yaml-4d188060cbd00821a95f1ef60605da4817e781bb"
    },
    {
      "spdxElementId": "SPDXRef-Package-apk-libgcc-16.2.0-r3",
      "relationshipType": "GENERATED_FROM",
      "relatedSpdxElement": "SPDXRef-Package-Source-gitlab.com-gnutools-gcc.git-releases-gcc-16.2.0-78d4ac73dd391005b895a6148cd9831e28e1208b-0"
    },
    {
      "spdxElementId": "SPDXRef-DocumentRoot-Directory-libgcc",
      "relationshipType": "CONTAINS",
      "relatedSpdxElement": "SPDXRef-Package-apk-libgcc-c8364f237745c3d5"
    },
    {
      "spdxElementId": "SPDXRef-Package-apk-libgcc-16.2.0-r3",
      "relationshipType": "CONTAINS",
      "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-libgcc"
    },
    {
      "spdxElementId": "SPDXRef-Package-Image-sha256-4edf425c96d678c3016b5060f5b8648d91dec73dac8537d8733c1571e546455a",
      "relationshipType": "CONTAINS",
      "relatedSpdxElement": "SPDXRef-Package-apk-libgcc-16.2.0-r3"
    },
    {
      "spdxElementId": "SPDXRef-Package-apk-glibc-2.44-2.44-r14",
      "relationshipType": "DESCRIBED_BY",
      "relatedSpdxElement": "SPDXRef-Package-Melange-glibc-2.44.yaml-86ee3612cb47379928ac34ad99dfbfd45d138ff9"
    },
    {
      "spdxElementId": "SPDXRef-Package-apk-glibc-2.44-2.44-r14",
      "relationshipType": "GENERATED_FROM",
      "relatedSpdxElement": "SPDXRef-Package-Source-gitlab.com-gnutools-glibc.git-release-2.44-master-c5c6fc6f449dbc95e3a68cacd61852dc0a48e57c-0"
    },
    {
      "spdxElementId": "SPDXRef-DocumentRoot-Directory-glibc-2.44",
      "relationshipType": "CONTAINS",
      "relatedSpdxElement": "SPDXRef-Package-apk-glibc-2.44-78e84dfd00c23400"
    },
    {
      "spdxElementId": "SPDXRef-Package-apk-glibc-2.44-2.44-r14",
      "relationshipType": "CONTAINS",
      "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-glibc-2.44"
    },
    {
      "spdxElementId": "SPDXRef-Package-Image-sha256-4edf425c96d678c3016b5060f5b8648d91dec73dac8537d8733c1571e546455a",
      "relationshipType": "CONTAINS",
      "relatedSpdxElement": "SPDXRef-Package-apk-glibc-2.44-2.44-r14"
    },
    {
      "spdxElementId": "SPDXRef-Package-apk-ld-linux-2.44-2.44-r14",
      "relationshipType": "DESCRIBED_BY",
      "relatedSpdxElement": "SPDXRef-Package-Melange-glibc-2.44.yaml-86ee3612cb47379928ac34ad99dfbfd45d138ff9"
    },
    {
      "spdxElementId": "SPDXRef-Package-apk-ld-linux-2.44-2.44-r14",
      "relationshipType": "GENERATED_FROM",
      "relatedSpdxElement": "SPDXRef-Package-Source-gitlab.com-gnutools-glibc.git-release-2.44-master-c5c6fc6f449dbc95e3a68cacd61852dc0a48e57c-0"
    },
    {
      "spdxElementId": "SPDXRef-DocumentRoot-Directory-ld-linux-2.44",
      "relationshipType": "CONTAINS",
      "relatedSpdxElement": "SPDXRef-Package-apk-ld-linux-2.44-f538e31a6e7895e7"
    },
    {
      "spdxElementId": "SPDXRef-Package-apk-ld-linux-2.44-2.44-r14",
      "relationshipType": "CONTAINS",
      "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-ld-linux-2.44"
    },
    {
      "spdxElementId": "SPDXRef-Package-Image-sha256-4edf425c96d678c3016b5060f5b8648d91dec73dac8537d8733c1571e546455a",
      "relationshipType": "CONTAINS",
      "relatedSpdxElement": "SPDXRef-Package-apk-ld-linux-2.44-2.44-r14"
    },
    {
      "spdxElementId": "SPDXRef-Package-apk-ncurses-terminfo-base-6.6.20261107-r0",
      "relationshipType": "DESCRIBED_BY",
      "relatedSpdxElement": "SPDXRef-Package-Melange-ncurses.yaml-57b90c0084b0bc101663cdfcaa44f4ce83312443"
    },
    {
      "spdxElementId": "SPDXRef-Package-apk-ncurses-terminfo-base-6.6.20261107-r0",
      "relationshipType": "GENERATED_FROM",
      "relatedSpdxElement": "SPDXRef-Package-Source-github.com-ThomasDickey-ncurses-snapshots-v6C956C9520261107-7404b376832583182c52722dc09d86b8675db375-0"
    },
    {
      "spdxElementId": "SPDXRef-DocumentRoot-Directory-ncurses-terminfo-base",
      "relationshipType": "CONTAINS",
      "relatedSpdxElement": "SPDXRef-Package-apk-ncurses-terminfo-base-6598c48598cb2742"
    },
    {
      "spdxElementId": "SPDXRef-Package-apk-ncurses-terminfo-base-6.6.20261107-r0",
      "relationshipType": "CONTAINS",
      "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-ncurses-terminfo-base"
    },
    {
      "spdxElementId": "SPDXRef-Package-Image-sha256-4edf425c96d678c3016b5060f5b8648d91dec73dac8537d8733c1571e546455a",
      "relationshipType": "CONTAINS",
      "relatedSpdxElement": "SPDXRef-Package-apk-ncurses-terminfo-base-6.6.20261107-r0"
    },
    {
      "spdxElementId": "SPDXRef-Package-apk-ncurses-6.6.20261107-r0",
      "relationshipType": "DESCRIBED_BY",
      "relatedSpdxElement": "SPDXRef-Package-Melange-ncurses.yaml-57b90c0084b0bc101663cdfcaa44f4ce83312443"
    },
    {
      "spdxElementId": "SPDXRef-Package-apk-ncurses-6.6.20261107-r0",
      "relationshipType": "GENERATED_FROM",
      "relatedSpdxElement": "SPDXRef-Package-Source-github.com-ThomasDickey-ncurses-snapshots-v6C956C9520261107-7404b376832583182c52722dc09d86b8675db375-0"
    },
    {
      "spdxElementId": "SPDXRef-DocumentRoot-Directory-ncurses",
      "relationshipType": "CONTAINS",
      "relatedSpdxElement": "SPDXRef-Package-apk-ncurses-d8905fddac6bbdfe"
    },
    {
      "spdxElementId": "SPDXRef-Package-apk-ncurses-6.6.20261107-r0",
      "relationshipType": "CONTAINS",
      "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-ncurses"
    },
    {
      "spdxElementId": "SPDXRef-Package-Image-sha256-4edf425c96d678c3016b5060f5b8648d91dec73dac8537d8733c1571e546455a",
      "relationshipType": "CONTAINS",
      "relatedSpdxElement": "SPDXRef-Package-apk-ncurses-6.6.20261107-r0"
    },
    {
      "spdxElementId": "SPDXRef-Package-apk-bash-5.3-r14",
      "relationshipType": "DESCRIBED_BY",
      "relatedSpdxElement": "SPDXRef-Package-Melange-bash.yaml-ac7b15dc2695924986372a27cd7d6c4e029c5efa"
    },
    {
      "spdxElementId": "SPDXRef-Package-apk-bash-5.3-r14",
      "relationshipType": "GENERATED_FROM",
      "relatedSpdxElement": "SPDXRef-Package-Source-git.savannah.gnu.org-git-bash.git-bash-5.3-b8c60bc9ca365f8261fa97900b6fa939f6ebc303-0"
    },
    {
      "spdxElementId": "SPDXRef-DocumentRoot-Directory-bash",
      "relationshipType": "CONTAINS",
      "relatedSpdxElement": "SPDXRef-Package-apk-bash-68d4d037932aa447"
    },
    {
      "spdxElementId": "SPDXRef-Package-apk-bash-5.3-r14",
      "relationshipType": "CONTAINS",
      "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-bash"
    },
    {
      "spdxElementId": "SPDXRef-Package-Image-sha256-4edf425c96d678c3016b5060f5b8648d91dec73dac8537d8733c1571e546455a",
      "relationshipType": "CONTAINS",
      "relatedSpdxElement": "SPDXRef-Package-apk-bash-5.3-r14"
    },
    {
      "spdxElementId": "SPDXRef-Package-apk-libxcrypt-4.5.2-r8",
      "relationshipType": "DESCRIBED_BY",
      "relatedSpdxElement": "SPDXRef-Package-Melange-libxcrypt.yaml-b9898dbb7125f3678bc8c6cd9e7a43d9d9d2c518"
    },
    {
      "spdxElementId": "SPDXRef-Package-apk-libxcrypt-4.5.2-r8",
      "relationshipType": "GENERATED_FROM",
      "relatedSpdxElement": "SPDXRef-Package-Source-github.com-besser82-libxcrypt-v4.5.2-db70b42bd7b2a5b00a8580c8dec0aa66791c950a-0"
    },
    {
      "spdxElementId": "SPDXRef-DocumentRoot-Directory-libxcrypt",
      "relationshipType": "CONTAINS",
      "relatedSpdxElement": "SPDXRef-Package-apk-libxcrypt-46c52164e01d9aa1"
    },
    {
      "spdxElementId": "SPDXRef-Package-apk-libxcrypt-4.5.2-r8",
      "relationshipType": "CONTAINS",
      "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-libxcrypt"
    },
    {
      "spdxElementId": "SPDXRef-Package-Image-sha256-4edf425c96d678c3016b5060f5b8648d91dec73dac8537d8733c1571e546455a",
      "relationshipType": "CONTAINS",
      "relatedSpdxElement": "SPDXRef-Package-apk-libxcrypt-4.5.2-r8"
    },
    {
      "spdxElementId": "SPDXRef-Package-apk-libcrypt1-2.44-2.44-r14",
      "relationshipType": "DESCRIBED_BY",
      "relatedSpdxElement": "SPDXRef-Package-Melange-glibc-2.44.yaml-86ee3612cb47379928ac34ad99dfbfd45d138ff9"
    },
    {
      "spdxElementId": "SPDXRef-Package-apk-libcrypt1-2.44-2.44-r14",
      "relationshipType": "GENERATED_FROM",
      "relatedSpdxElement": "SPDXRef-Package-Source-gitlab.com-gnutools-glibc.git-release-2.44-master-c5c6fc6f449dbc95e3a68cacd61852dc0a48e57c-0"
    },
    {
      "spdxElementId": "SPDXRef-DocumentRoot-Directory-libcrypt1-2.44",
      "relationshipType": "CONTAINS",
      "relatedSpdxElement": "SPDXRef-Package-apk-libcrypt1-2.44-40042ba071505d6b"
    },
    {
      "spdxElementId": "SPDXRef-Package-apk-libcrypt1-2.44-2.44-r14",
      "relationshipType": "CONTAINS",
      "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-libcrypt1-2.44"
    },
    {
      "spdxElementId": "SPDXRef-Package-Image-sha256-4edf425c96d678c3016b5060f5b8648d91dec73dac8537d8733c1571e546455a",
      "relationshipType": "CONTAINS",
      "relatedSpdxElement": "SPDXRef-Package-apk-libcrypt1-2.44-2.44-r14"
    },
    {
      "spdxElementId": "SPDXRef-Package-apk-busybox-1.38.0-r3",
      "relationshipType": "DESCRIBED_BY",
      "relatedSpdxElement": "SPDXRef-Package-Melange-busybox.yaml-59d45eb49286129d8d21b2469befa3b55be4719b"
    },
    {
      "spdxElementId": "SPDXRef-Package-apk-busybox-1.38.0-r3",
      "relationshipType": "GENERATED_FROM",
      "relatedSpdxElement": "SPDXRef-Package-Source-github.com-vda-linux-busyboxC95mirror-1C9538C950-fc71374dfccd46448c62947269a35f1420d7ee28-0"
    },
    {
      "spdxElementId": "SPDXRef-DocumentRoot-Directory-busybox",
      "relationshipType": "CONTAINS",
      "relatedSpdxElement": "SPDXRef-Package-apk-busybox-053d10e1045ff32f"
    },
    {
      "spdxElementId": "SPDXRef-Package-apk-busybox-1.38.0-r3",
      "relationshipType": "CONTAINS",
      "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-busybox"
    },
    {
      "spdxElementId": "SPDXRef-Package-Image-sha256-4edf425c96d678c3016b5060f5b8648d91dec73dac8537d8733c1571e546455a",
      "relationshipType": "CONTAINS",
      "relatedSpdxElement": "SPDXRef-Package-apk-busybox-1.38.0-r3"
    },
    {
      "spdxElementId": "SPDXRef-Package-apk-libstdcC43C43-16.2.0-r3",
      "relationshipType": "DESCRIBED_BY",
      "relatedSpdxElement": "SPDXRef-Package-Melange-gcc.yaml-4d188060cbd00821a95f1ef60605da4817e781bb"
    },
    {
      "spdxElementId": "SPDXRef-Package-apk-libstdcC43C43-16.2.0-r3",
      "relationshipType": "GENERATED_FROM",
      "relatedSpdxElement": "SPDXRef-Package-Source-gitlab.com-gnutools-gcc.git-releases-gcc-16.2.0-78d4ac73dd391005b895a6148cd9831e28e1208b-0"
    },
    {
      "spdxElementId": "SPDXRef-DocumentRoot-Directory-libstdc--",
      "relationshipType": "CONTAINS",
      "relatedSpdxElement": "SPDXRef-Package-apk-libstdc---967a4328654175e5"
    },
    {
      "spdxElementId": "SPDXRef-Package-apk-libstdcC43C43-16.2.0-r3",
      "relationshipType": "CONTAINS",
      "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-libstdc--"
    },
    {
      "spdxElementId": "SPDXRef-Package-Image-sha256-4edf425c96d678c3016b5060f5b8648d91dec73dac8537d8733c1571e546455a",
      "relationshipType": "CONTAINS",
      "relatedSpdxElement": "SPDXRef-Package-apk-libstdcC43C43-16.2.0-r3"
    },
    {
      "spdxElementId": "SPDXRef-Package-apk-nodejs-22-upstream-22.23.4-r0",
      "relationshipType": "DESCRIBED_BY",
      "relatedSpdxElement": "SPDXRef-Package-Melange-melange-nodejs-22-upstream.yaml-8c2af73bde49e570b73995ca87ebfcf8100036da"
    },
    {
      "spdxElementId": "SPDXRef-Package-Image-sha256-4edf425c96d678c3016b5060f5b8648d91dec73dac8537d8733c1571e546455a",
      "relationshipType": "CONTAINS",
      "relatedSpdxElement": "SPDXRef-Package-apk-nodejs-22-upstream-22.23.4-r0"
    },
    {
      "spdxElementId": "SPDXRef-Package-apk-tzdata-2026f-r0",
      "relationshipType": "DESCRIBED_BY",
      "relatedSpdxElement": "SPDXRef-Package-Melange-tzdata.yaml-b01ceefc114cf44ccb6d35f405795435f98bf0c2"
    },
    {
      "spdxElementId": "SPDXRef-Package-apk-tzdata-2026f-r0",
      "relationshipType": "GENERATED_FROM",
      "relatedSpdxElement": "SPDXRef-Package-Source-github.com-eggert-tz-2026f-a6cb1a1cebcc96269a02b25323c1a9424e3349a8-0"
    },
    {
      "spdxElementId": "SPDXRef-DocumentRoot-Directory-tzdata",
      "relationshipType": "CONTAINS",
      "relatedSpdxElement": "SPDXRef-Package-apk-tzdata-2a758f1785d5e6c8"
    },
    {
      "spdxElementId": "SPDXRef-Package-apk-tzdata-2026f-r0",
      "relationshipType": "CONTAINS",
      "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-tzdata"
    },
    {
      "spdxElementId": "SPDXRef-Package-Image-sha256-4edf425c96d678c3016b5060f5b8648d91dec73dac8537d8733c1571e546455a",
      "relationshipType": "CONTAINS",
      "relatedSpdxElement": "SPDXRef-Package-apk-tzdata-2026f-r0"
    }
  ]
}