{ "SPDXID": "SPDXRef-DOCUMENT", "name": "sbom-sha256:3ce6423da6da92712f74c8feca4280bdc4f561a4b2fe9e73fd2b1b2d04156989", "spdxVersion": "SPDX-2.3", "creationInfo": { "created": "2026-11-09T18:30:47Z", "creators": [ "Tool: apko (v1.4.18)", "Organization: Chainguard, Inc" ], "licenseListVersion": "3.27" }, "dataLicense": "CC0-1.0", "documentNamespace": "https://spdx.org/spdxdocs/apko/", "documentDescribes": [ "SPDXRef-Package-Image-sha256-8c36e97cb43e2cd1cce2fb634cb5519a682f4c4e37b5cc8681de3b98d1a5a6a1" ], "packages": [ { "SPDXID": "SPDXRef-Package-Image-sha256-8c36e97cb43e2cd1cce2fb634cb5519a682f4c4e37b5cc8681de3b98d1a5a6a1", "name": "sha256:8c36e97cb43e2cd1cce2fb634cb5519a682f4c4e37b5cc8681de3b98d1a5a6a1", "versionInfo": "sha256:8c36e97cb43e2cd1cce2fb634cb5519a682f4c4e37b5cc8681de3b98d1a5a6a1", "filesAnalyzed": false, "description": "apko container image", "downloadLocation": "NOASSERTION", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "CONTAINER", "checksums": [ { "algorithm": "SHA256", "checksumValue": "8c36e97cb43e2cd1cce2fb634cb5519a682f4c4e37b5cc8681de3b98d1a5a6a1" } ], "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:oci/node@sha256:8c36e97cb43e2cd1cce2fb634cb5519a682f4c4e37b5cc8681de3b98d1a5a6a1?arch=arm64\u0026mediaType=application%2Fvnd.oci.image.manifest.v1%2Bjson\u0026os=linux", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-ImageLayer-sha256-3ce6423da6da92712f74c8feca4280bdc4f561a4b2fe9e73fd2b1b2d04156989", "name": "sha256:3ce6423da6da92712f74c8feca4280bdc4f561a4b2fe9e73fd2b1b2d04156989", "versionInfo": "20230201", "filesAnalyzed": false, "description": "apko operating system layer", "downloadLocation": "NOASSERTION", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "CONTAINER", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:oci/node@sha256:3ce6423da6da92712f74c8feca4280bdc4f561a4b2fe9e73fd2b1b2d04156989?arch=arm64\u0026mediaType=application%2Fvnd.oci.image.layer.v1.tar%2Bgzip\u0026os=linux", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-OperatingSystem-wolfi", "name": "wolfi", "versionInfo": "20230201", "filesAnalyzed": false, "description": "Operating System", "downloadLocation": "NOASSERTION", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "OPERATING_SYSTEM" }, { "SPDXID": "SPDXRef-Package-apk-wolfi-baselayout-20230201-r31", "name": "wolfi-baselayout", "versionInfo": "20230201-r31", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/wolfi-baselayout@20230201-r31?arch=aarch64\u0026distro=wolfi", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Melange-wolfi-baselayout.yaml-ed415005c84750f03c4a9252137813734a224ae7", "name": "wolfi-baselayout.yaml", "versionInfo": "ed415005c84750f03c4a9252137813734a224ae7", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "INSTALL", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/chainguard-dev/stereo@ed415005c84750f03c4a9252137813734a224ae7#wolfi-baselayout.yaml", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-wolfi-baselayout-10b2691c19a945ed", "name": "wolfi-baselayout", "versionInfo": "20230201-r31", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "description": "baselayout data for Wolfi", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/wolfi-baselayout@20230201-r31?arch=aarch64\u0026origin=wolfi-baselayout", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-wolfi-baselayout", "name": "wolfi-baselayout", "versionInfo": "20230201-r31", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-ca-certificates-bundle-20261020-r0", "name": "ca-certificates-bundle", "versionInfo": "20261020-r0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MPL-2.0 AND MIT", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/ca-certificates-bundle@20261020-r0?arch=aarch64\u0026distro=wolfi", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Melange-ca-certificates.yaml-8061afafa65af5a9026707a8880e14120dd6f4a0", "name": "ca-certificates.yaml", "versionInfo": "8061afafa65af5a9026707a8880e14120dd6f4a0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "INSTALL", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/chainguard-dev/stereo@8061afafa65af5a9026707a8880e14120dd6f4a0#ca-certificates.yaml", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Source-gitlab.alpinelinux.org-alpine-ca-certificates-20261020-2058424fda70ee478bcce872dcf141a0c5499ee0-0", "name": "alpine/ca-certificates", "versionInfo": "20261020", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MPL-2.0 AND MIT", "downloadLocation": "https://tarballs.cgr.dev/a/f7f6555663adc30d4e3c43a90ddef6942dabe93d06f7a7201cf29d993222346a-2058424fda70ee478bcce872dcf141a0c5499ee0.tar.gz", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "SOURCE", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:generic/alpine%2Fca-certificates@20261020?vcs_url=git%2Bhttps:%2F%2Fgitlab.alpinelinux.org%2Falpine%2Fca-certificates%402058424fda70ee478bcce872dcf141a0c5499ee0", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-ca-certificates-bundle-39152a1ba5759050", "name": "ca-certificates-bundle", "versionInfo": "20261020-r0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "(MPL-2.0 AND MIT)", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/ca-certificates-bundle@20261020-r0?arch=aarch64\u0026origin=ca-certificates", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-ca-certificates-bundle", "name": "ca-certificates-bundle", "versionInfo": "20261020-r0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-glibc-2.44-locale-posix-2.44-r14", "name": "glibc-2.44-locale-posix", "versionInfo": "2.44-r14", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "LGPL-2.1-or-later", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/glibc-2.44-locale-posix@2.44-r14?arch=aarch64\u0026distro=wolfi", "referenceType": "purl" }, { "referenceCategory": "SECURITY", "referenceLocator": "cpe:2.3:a:gnu:glibc:2.44:*:*:*:*:*:*:*", "referenceType": "cpe23Type" } ] }, { "SPDXID": "SPDXRef-Package-Melange-glibc-2.44.yaml-86ee3612cb47379928ac34ad99dfbfd45d138ff9", "name": "glibc-2.44.yaml", "versionInfo": "86ee3612cb47379928ac34ad99dfbfd45d138ff9", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "INSTALL", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/chainguard-dev/stereo@86ee3612cb47379928ac34ad99dfbfd45d138ff9#glibc-2.44.yaml", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Source-gitlab.com-gnutools-glibc.git-release-2.44-master-c5c6fc6f449dbc95e3a68cacd61852dc0a48e57c-0", "name": "gnutools/glibc", "versionInfo": "c5c6fc6f449dbc95e3a68cacd61852dc0a48e57c", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "LGPL-2.1-or-later", "downloadLocation": "https://tarballs.cgr.dev/g/9390037ac2ec26cf74ce7c6709d852e0ce67205355e04fbdb9b9549f47a5bb40-c5c6fc6f449dbc95e3a68cacd61852dc0a48e57c.tar.gz", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "SOURCE", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:generic/gnutools%2Fglibc@c5c6fc6f449dbc95e3a68cacd61852dc0a48e57c?vcs_url=git%2Bhttps:%2F%2Fgitlab.com%2Fgnutools%2Fglibc.git%40c5c6fc6f449dbc95e3a68cacd61852dc0a48e57c", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-glibc-2.44-locale-posix-e2c2b3125b2659a5", "name": "glibc-2.44-locale-posix", "versionInfo": "2.44-r14", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "LGPL-2.1-or-later", "description": "POSIX locale data for glibc", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "SECURITY", "referenceLocator": "cpe:2.3:a:gnu:glibc:2.44-r14:*:*:*:*:*:*:*", "referenceType": "cpe23Type" }, { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/glibc-2.44-locale-posix@2.44-r14?arch=aarch64\u0026origin=glibc-2.44", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-glibc-2.44-locale-posix", "name": "glibc-2.44-locale-posix", "versionInfo": "2.44-r14", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-libgcc-16.2.0-r3", "name": "libgcc", "versionInfo": "16.2.0-r3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "GPL-3.0-or-later WITH GCC-exception-3.1", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/libgcc@16.2.0-r3?arch=aarch64\u0026distro=wolfi", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Melange-gcc.yaml-4d188060cbd00821a95f1ef60605da4817e781bb", "name": "gcc.yaml", "versionInfo": "4d188060cbd00821a95f1ef60605da4817e781bb", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "INSTALL", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/chainguard-dev/stereo@4d188060cbd00821a95f1ef60605da4817e781bb#gcc.yaml", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Source-gitlab.com-gnutools-gcc.git-releases-gcc-16.2.0-78d4ac73dd391005b895a6148cd9831e28e1208b-0", "name": "gnutools/gcc", "versionInfo": "releases/gcc-16.2.0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "GPL-3.0-or-later WITH GCC-exception-3.1", "downloadLocation": "https://tarballs.cgr.dev/g/dc3e72361e36d33e861a0662815d63a4f1b8578521cc6935343a4aa87327bdec-78d4ac73dd391005b895a6148cd9831e28e1208b.tar.gz", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "SOURCE", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:generic/gnutools%2Fgcc@releases%2Fgcc-16.2.0?vcs_url=git%2Bhttps:%2F%2Fgitlab.com%2Fgnutools%2Fgcc.git%4078d4ac73dd391005b895a6148cd9831e28e1208b", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-libgcc-6f0563db807ae406", "name": "libgcc", "versionInfo": "16.2.0-r3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "(GPL-3.0-or-later WITH GCC-exception-3.1)", "description": "GCC runtime library", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "SECURITY", "referenceLocator": "cpe:2.3:a:gnu:gcc:16.2.0:*:*:*:*:*:*:*", "referenceType": "cpe23Type" }, { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/libgcc@16.2.0-r3?arch=aarch64\u0026origin=gcc", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-libgcc", "name": "libgcc", "versionInfo": "16.2.0-r3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-glibc-2.44-2.44-r14", "name": "glibc-2.44", "versionInfo": "2.44-r14", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "LGPL-2.1-or-later", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/glibc-2.44@2.44-r14?arch=aarch64\u0026distro=wolfi", "referenceType": "purl" }, { "referenceCategory": "SECURITY", "referenceLocator": "cpe:2.3:a:gnu:glibc:2.44:*:*:*:*:*:*:*", "referenceType": "cpe23Type" } ] }, { "SPDXID": "SPDXRef-Package-apk-glibc-2.44-94bbc3326135f6b7", "name": "glibc-2.44", "versionInfo": "2.44-r14", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "LGPL-2.1-or-later", "description": "the GNU C library", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "SECURITY", "referenceLocator": "cpe:2.3:a:gnu:glibc:2.44-r14:*:*:*:*:*:*:*", "referenceType": "cpe23Type" }, { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/glibc-2.44@2.44-r14?arch=aarch64\u0026origin=glibc-2.44", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-glibc-2.44", "name": "glibc-2.44", "versionInfo": "2.44-r14", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-ld-linux-2.44-2.44-r14", "name": "ld-linux-2.44", "versionInfo": "2.44-r14", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "LGPL-2.1-or-later", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/ld-linux-2.44@2.44-r14?arch=aarch64\u0026distro=wolfi", "referenceType": "purl" }, { "referenceCategory": "SECURITY", "referenceLocator": "cpe:2.3:a:gnu:glibc:2.44:*:*:*:*:*:*:*", "referenceType": "cpe23Type" } ] }, { "SPDXID": "SPDXRef-Package-apk-ld-linux-2.44-7fd0b6ac1f498b59", "name": "ld-linux-2.44", "versionInfo": "2.44-r14", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "LGPL-2.1-or-later", "description": "the GLIBC ELF interpreter", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "SECURITY", "referenceLocator": "cpe:2.3:a:gnu:glibc:2.44-r14:*:*:*:*:*:*:*", "referenceType": "cpe23Type" }, { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/ld-linux-2.44@2.44-r14?arch=aarch64\u0026origin=glibc-2.44", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-ld-linux-2.44", "name": "ld-linux-2.44", "versionInfo": "2.44-r14", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-ncurses-terminfo-base-6.6.20261107-r0", "name": "ncurses-terminfo-base", "versionInfo": "6.6.20261107-r0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/ncurses-terminfo-base@6.6.20261107-r0?arch=aarch64\u0026distro=wolfi", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Melange-ncurses.yaml-57b90c0084b0bc101663cdfcaa44f4ce83312443", "name": "ncurses.yaml", "versionInfo": "57b90c0084b0bc101663cdfcaa44f4ce83312443", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "INSTALL", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/chainguard-dev/stereo@57b90c0084b0bc101663cdfcaa44f4ce83312443#ncurses.yaml", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Source-github.com-ThomasDickey-ncurses-snapshots-v6C956C9520261107-7404b376832583182c52722dc09d86b8675db375-0", "name": "ncurses-snapshots", "versionInfo": "v6_6_20261107", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "downloadLocation": "https://github.com/ThomasDickey/ncurses-snapshots/archive/7404b376832583182c52722dc09d86b8675db375.tar.gz", "originator": "Organization: Thomasdickey", "supplier": "Organization: Thomasdickey", "primaryPackagePurpose": "SOURCE", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/thomasdickey/ncurses-snapshots@v6_6_20261107", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-ncurses-terminfo-base-d4376d4149bf9b00", "name": "ncurses-terminfo-base", "versionInfo": "6.6.20261107-r0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "description": "descriptions of common terminals", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "SECURITY", "referenceLocator": "cpe:2.3:a:gnu:ncurses:6.6.20261107:*:*:*:*:*:*:*", "referenceType": "cpe23Type" }, { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/ncurses-terminfo-base@6.6.20261107-r0?arch=aarch64\u0026origin=ncurses", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-ncurses-terminfo-base", "name": "ncurses-terminfo-base", "versionInfo": "6.6.20261107-r0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-ncurses-6.6.20261107-r0", "name": "ncurses", "versionInfo": "6.6.20261107-r0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/ncurses@6.6.20261107-r0?arch=aarch64\u0026distro=wolfi", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-ncurses-fe6e9d338447068c", "name": "ncurses", "versionInfo": "6.6.20261107-r0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "description": "console display library", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "SECURITY", "referenceLocator": "cpe:2.3:a:gnu:ncurses:6.6.20261107:*:*:*:*:*:*:*", "referenceType": "cpe23Type" }, { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/ncurses@6.6.20261107-r0?arch=aarch64\u0026origin=ncurses", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-ncurses", "name": "ncurses", "versionInfo": "6.6.20261107-r0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-bash-5.3-r14", "name": "bash", "versionInfo": "5.3-r14", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "GPL-3.0-or-later", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/bash@5.3-r14?arch=aarch64\u0026distro=wolfi", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Melange-bash.yaml-ac7b15dc2695924986372a27cd7d6c4e029c5efa", "name": "bash.yaml", "versionInfo": "ac7b15dc2695924986372a27cd7d6c4e029c5efa", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "INSTALL", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/chainguard-dev/stereo@ac7b15dc2695924986372a27cd7d6c4e029c5efa#bash.yaml", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Source-git.savannah.gnu.org-git-bash.git-bash-5.3-b8c60bc9ca365f8261fa97900b6fa939f6ebc303-0", "name": "git/bash", "versionInfo": "bash-5.3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "GPL-3.0-or-later", "downloadLocation": "https://tarballs.cgr.dev/g/0e7c34c3027d7f6da5723ac0c18a27c10a29ce56d560c36969b71020e9407623-b8c60bc9ca365f8261fa97900b6fa939f6ebc303.tar.gz", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "SOURCE", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:generic/git%2Fbash@bash-5.3?vcs_url=git%2Bhttps:%2F%2Fgit.savannah.gnu.org%2Fgit%2Fbash.git%40b8c60bc9ca365f8261fa97900b6fa939f6ebc303", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-bash-8fcfdb8c2df1d6c6", "name": "bash", "versionInfo": "5.3-r14", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "GPL-3.0-or-later", "description": "GNU bourne again shell", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/bash@5.3-r14?arch=aarch64\u0026origin=bash", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-bash", "name": "bash", "versionInfo": "5.3-r14", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-libxcrypt-4.5.2-r8", "name": "libxcrypt", "versionInfo": "4.5.2-r8", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "GPL-2.0-or-later AND LGPL-2.1-or-later", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/libxcrypt@4.5.2-r8?arch=aarch64\u0026distro=wolfi", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Melange-libxcrypt.yaml-b9898dbb7125f3678bc8c6cd9e7a43d9d9d2c518", "name": "libxcrypt.yaml", "versionInfo": "b9898dbb7125f3678bc8c6cd9e7a43d9d9d2c518", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "INSTALL", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/chainguard-dev/stereo@b9898dbb7125f3678bc8c6cd9e7a43d9d9d2c518#libxcrypt.yaml", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Source-github.com-besser82-libxcrypt-v4.5.2-db70b42bd7b2a5b00a8580c8dec0aa66791c950a-0", "name": "libxcrypt", "versionInfo": "v4.5.2", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "GPL-2.0-or-later AND LGPL-2.1-or-later", "downloadLocation": "https://github.com/besser82/libxcrypt/archive/db70b42bd7b2a5b00a8580c8dec0aa66791c950a.tar.gz", "originator": "Organization: Besser82", "supplier": "Organization: Besser82", "primaryPackagePurpose": "SOURCE", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/besser82/libxcrypt@v4.5.2", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-libxcrypt-673cf320fa080268", "name": "libxcrypt", "versionInfo": "4.5.2-r8", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "(GPL-2.0-or-later AND LGPL-2.1-or-later)", "description": "Modern library for one-way hashing of passwords", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/libxcrypt@4.5.2-r8?arch=aarch64\u0026origin=libxcrypt", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-libxcrypt", "name": "libxcrypt", "versionInfo": "4.5.2-r8", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-libcrypt1-2.44-2.44-r14", "name": "libcrypt1-2.44", "versionInfo": "2.44-r14", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "LGPL-2.1-or-later", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/libcrypt1-2.44@2.44-r14?arch=aarch64\u0026distro=wolfi", "referenceType": "purl" }, { "referenceCategory": "SECURITY", "referenceLocator": "cpe:2.3:a:gnu:glibc:2.44:*:*:*:*:*:*:*", "referenceType": "cpe23Type" } ] }, { "SPDXID": "SPDXRef-Package-apk-libcrypt1-2.44-07e91cda91134f6e", "name": "libcrypt1-2.44", "versionInfo": "2.44-r14", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "LGPL-2.1-or-later", "description": "Password hashing library included with glibc", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "SECURITY", "referenceLocator": "cpe:2.3:a:gnu:glibc:2.44-r14:*:*:*:*:*:*:*", "referenceType": "cpe23Type" }, { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/libcrypt1-2.44@2.44-r14?arch=aarch64\u0026origin=glibc-2.44", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-libcrypt1-2.44", "name": "libcrypt1-2.44", "versionInfo": "2.44-r14", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-busybox-1.38.0-r3", "name": "busybox", "versionInfo": "1.38.0-r3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "GPL-2.0-only", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/busybox@1.38.0-r3?arch=aarch64\u0026distro=wolfi", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Melange-busybox.yaml-59d45eb49286129d8d21b2469befa3b55be4719b", "name": "busybox.yaml", "versionInfo": "59d45eb49286129d8d21b2469befa3b55be4719b", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "INSTALL", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/chainguard-dev/stereo@59d45eb49286129d8d21b2469befa3b55be4719b#busybox.yaml", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Source-github.com-vda-linux-busyboxC95mirror-1C9538C950-fc71374dfccd46448c62947269a35f1420d7ee28-0", "name": "busybox_mirror", "versionInfo": "1_38_0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "GPL-2.0-only", "downloadLocation": "https://github.com/vda-linux/busybox_mirror/archive/fc71374dfccd46448c62947269a35f1420d7ee28.tar.gz", "originator": "Organization: Vda-Linux", "supplier": "Organization: Vda-Linux", "primaryPackagePurpose": "SOURCE", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/vda-linux/busybox_mirror@1_38_0", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-busybox-3debcaeac335b503", "name": "busybox", "versionInfo": "1.38.0-r3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "GPL-2.0-only", "description": "swiss-army knife for embedded systems", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/busybox@1.38.0-r3?arch=aarch64\u0026origin=busybox", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-busybox", "name": "busybox", "versionInfo": "1.38.0-r3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-c-ares-1.34.9-r0", "name": "c-ares", "versionInfo": "1.34.9-r0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/c-ares@1.34.9-r0?arch=aarch64\u0026distro=wolfi", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Melange-c-ares.yaml-af6b55f0eea2dce5a488569d02ea2c396f46effd", "name": "c-ares.yaml", "versionInfo": "af6b55f0eea2dce5a488569d02ea2c396f46effd", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "INSTALL", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/chainguard-dev/stereo@af6b55f0eea2dce5a488569d02ea2c396f46effd#c-ares.yaml", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Source-github.com-c-ares-c-ares-v1.34.9-bc91829cce983a35ec01f5dbc05465858a3df469-0", "name": "c-ares", "versionInfo": "v1.34.9", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "downloadLocation": "https://github.com/c-ares/c-ares/archive/bc91829cce983a35ec01f5dbc05465858a3df469.tar.gz", "originator": "Organization: C-Ares", "supplier": "Organization: C-Ares", "primaryPackagePurpose": "SOURCE", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/c-ares/c-ares@v1.34.9", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-c-ares-e97328716bcafcaa", "name": "c-ares", "versionInfo": "1.34.9-r0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "description": "an asynchronous DNS resolution library", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/c-ares@1.34.9-r0?arch=aarch64\u0026origin=c-ares", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-c-ares", "name": "c-ares", "versionInfo": "1.34.9-r0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-icu79-data-full-79.1-r1", "name": "icu79-data-full", "versionInfo": "79.1-r1", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/icu79-data-full@79.1-r1?arch=aarch64\u0026distro=wolfi", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Melange-icu.yaml-f5ef816d1cb2bd0e165a402c4e8a4c4622464bf3", "name": "icu.yaml", "versionInfo": "f5ef816d1cb2bd0e165a402c4e8a4c4622464bf3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "INSTALL", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/chainguard-dev/stereo@f5ef816d1cb2bd0e165a402c4e8a4c4622464bf3#icu.yaml", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Source-github.com-unicode-org-icu-release-79.1-ddc6b66926bfac6036144ca9902992a0d6d50af9-0", "name": "icu", "versionInfo": "release-79.1", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "downloadLocation": "https://github.com/unicode-org/icu/archive/ddc6b66926bfac6036144ca9902992a0d6d50af9.tar.gz", "originator": "Organization: Unicode-Org", "supplier": "Organization: Unicode-Org", "primaryPackagePurpose": "SOURCE", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/unicode-org/icu@release-79.1", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Source-github.com-unicode-org-icu-data-main-c5aeb38e05607d094b783f0665bd66219b038ca9-1", "name": "icu-data", "versionInfo": "c5aeb38e05607d094b783f0665bd66219b038ca9", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "downloadLocation": "https://github.com/unicode-org/icu-data/archive/c5aeb38e05607d094b783f0665bd66219b038ca9.tar.gz", "originator": "Organization: Unicode-Org", "supplier": "Organization: Unicode-Org", "primaryPackagePurpose": "SOURCE", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/unicode-org/icu-data@c5aeb38e05607d094b783f0665bd66219b038ca9", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-icu79-data-full-dfda4c12dccf0f20", "name": "icu79-data-full", "versionInfo": "79.1-r1", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "description": "Full ICU data", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/icu79-data-full@79.1-r1?arch=aarch64\u0026origin=icu", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-icu79-data-full", "name": "icu79-data-full", "versionInfo": "79.1-r1", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-libbrotlicommon1-1.2.1-r3", "name": "libbrotlicommon1", "versionInfo": "1.2.1-r3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/libbrotlicommon1@1.2.1-r3?arch=aarch64\u0026distro=wolfi", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Melange-brotli.yaml-f5ef816d1cb2bd0e165a402c4e8a4c4622464bf3", "name": "brotli.yaml", "versionInfo": "f5ef816d1cb2bd0e165a402c4e8a4c4622464bf3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "INSTALL", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/chainguard-dev/stereo@f5ef816d1cb2bd0e165a402c4e8a4c4622464bf3#brotli.yaml", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Source-github.com-google-brotli.git-v1.2.1-db24a98aed38a16de78cc05ca15cdd8dc2a0d92d-0", "name": "brotli", "versionInfo": "v1.2.1", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "downloadLocation": "https://github.com/google/brotli/archive/db24a98aed38a16de78cc05ca15cdd8dc2a0d92d.tar.gz", "originator": "Organization: Google", "supplier": "Organization: Google", "primaryPackagePurpose": "SOURCE", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/google/brotli@v1.2.1", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-libbrotlicommon1-4cfba742c9bc8e0d", "name": "libbrotlicommon1", "versionInfo": "1.2.1-r3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/libbrotlicommon1@1.2.1-r3?arch=aarch64\u0026origin=brotli", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-libbrotlicommon1", "name": "libbrotlicommon1", "versionInfo": "1.2.1-r3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-libbrotlidec1-1.2.1-r3", "name": "libbrotlidec1", "versionInfo": "1.2.1-r3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/libbrotlidec1@1.2.1-r3?arch=aarch64\u0026distro=wolfi", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-libbrotlidec1-7682b7a41fbe0c53", "name": "libbrotlidec1", "versionInfo": "1.2.1-r3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/libbrotlidec1@1.2.1-r3?arch=aarch64\u0026origin=brotli", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-libbrotlidec1", "name": "libbrotlidec1", "versionInfo": "1.2.1-r3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-libbrotlienc1-1.2.1-r3", "name": "libbrotlienc1", "versionInfo": "1.2.1-r3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/libbrotlienc1@1.2.1-r3?arch=aarch64\u0026distro=wolfi", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-libbrotlienc1-9032cd875fed45d9", "name": "libbrotlienc1", "versionInfo": "1.2.1-r3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/libbrotlienc1@1.2.1-r3?arch=aarch64\u0026origin=brotli", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-libbrotlienc1", "name": "libbrotlienc1", "versionInfo": "1.2.1-r3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-libstdcC43C43-16.2.0-r3", "name": "libstdc++", "versionInfo": "16.2.0-r3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "GPL-3.0-or-later WITH GCC-exception-3.1", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/libstdc%2B%2B@16.2.0-r3?arch=aarch64\u0026distro=wolfi", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-libstdc---d49b493ee2e3bbae", "name": "libstdc++", "versionInfo": "16.2.0-r3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "(GPL-3.0-or-later WITH GCC-exception-3.1)", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "SECURITY", "referenceLocator": "cpe:2.3:a:gnu:gcc:16.2.0:*:*:*:*:*:*:*", "referenceType": "cpe23Type" }, { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/libstdc%2B%2B@16.2.0-r3?arch=aarch64\u0026origin=gcc", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-libstdc--", "name": "libstdc++", "versionInfo": "16.2.0-r3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-libicu79-79.1-r1", "name": "libicu79", "versionInfo": "79.1-r1", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/libicu79@79.1-r1?arch=aarch64\u0026distro=wolfi", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-libicu79-ccbe9a514ca528c5", "name": "libicu79", "versionInfo": "79.1-r1", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "description": "International Components for Unicode library (libs)", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/libicu79@79.1-r1?arch=aarch64\u0026origin=icu", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-libicu79", "name": "libicu79", "versionInfo": "79.1-r1", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-libnghttp2-14-1.71.0-r0", "name": "libnghttp2-14", "versionInfo": "1.71.0-r0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/libnghttp2-14@1.71.0-r0?arch=aarch64\u0026distro=wolfi", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Melange-nghttp2.yaml-153ee2bd742f744ddedf5c4a97110fa46307574b", "name": "nghttp2.yaml", "versionInfo": "153ee2bd742f744ddedf5c4a97110fa46307574b", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "INSTALL", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/chainguard-dev/stereo@153ee2bd742f744ddedf5c4a97110fa46307574b#nghttp2.yaml", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Source-github.com-nghttp2-nghttp2.git-v1.71.0-80dcb8140af050fac91a7e6af4fc6dd013404bd1-0", "name": "nghttp2", "versionInfo": "v1.71.0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "downloadLocation": "https://github.com/nghttp2/nghttp2/archive/80dcb8140af050fac91a7e6af4fc6dd013404bd1.tar.gz", "originator": "Organization: Nghttp2", "supplier": "Organization: Nghttp2", "primaryPackagePurpose": "SOURCE", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/nghttp2/nghttp2@v1.71.0", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-libnghttp2-14-f0405241798ad783", "name": "libnghttp2-14", "versionInfo": "1.71.0-r0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "description": "nghttp2 client library", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/libnghttp2-14@1.71.0-r0?arch=aarch64\u0026origin=nghttp2", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-libnghttp2-14", "name": "libnghttp2-14", "versionInfo": "1.71.0-r0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-libuv-1.53.0-r0", "name": "libuv", "versionInfo": "1.53.0-r0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT AND ISC", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/libuv@1.53.0-r0?arch=aarch64\u0026distro=wolfi", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Melange-libuv.yaml-6ee5086b767a2f31854a43ce96bd3b6a275cc36c", "name": "libuv.yaml", "versionInfo": "6ee5086b767a2f31854a43ce96bd3b6a275cc36c", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "INSTALL", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/chainguard-dev/stereo@6ee5086b767a2f31854a43ce96bd3b6a275cc36c#libuv.yaml", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Source-github.com-libuv-libuv.git-v1.53.0-840404ce8ba7cc0204be52389a6cfff9f2c90fb6-0", "name": "libuv", "versionInfo": "v1.53.0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT AND ISC", "downloadLocation": "https://github.com/libuv/libuv/archive/840404ce8ba7cc0204be52389a6cfff9f2c90fb6.tar.gz", "originator": "Organization: Libuv", "supplier": "Organization: Libuv", "primaryPackagePurpose": "SOURCE", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/libuv/libuv@v1.53.0", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-libuv-1ca688a614853a23", "name": "libuv", "versionInfo": "1.53.0-r0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "(MIT AND ISC)", "description": "cross-platform asynchronous I/O library", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/libuv@1.53.0-r0?arch=aarch64\u0026origin=libuv", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-libuv", "name": "libuv", "versionInfo": "1.53.0-r0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-openssl-provider-legacy-allowed-4.1.0-r0", "name": "openssl-provider-legacy-allowed", "versionInfo": "4.1.0-r0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/openssl-provider-legacy-allowed@4.1.0-r0?arch=aarch64\u0026distro=wolfi", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Melange-openssl-provider-legacy-allowed.yaml-aeae4801330be6fd269d5ed5640dc37b58ccab09", "name": "openssl-provider-legacy-allowed.yaml", "versionInfo": "aeae4801330be6fd269d5ed5640dc37b58ccab09", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "INSTALL", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/chainguard-dev/stereo@aeae4801330be6fd269d5ed5640dc37b58ccab09#openssl-provider-legacy-allowed.yaml", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Source-github.com-openssl-openssl-openssl-4.1.0-2f4e3a5fec05394068cfa7379890ab552483a8a6-0", "name": "openssl", "versionInfo": "openssl-4.1.0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "https://github.com/openssl/openssl/archive/2f4e3a5fec05394068cfa7379890ab552483a8a6.tar.gz", "originator": "Organization: Openssl", "supplier": "Organization: Openssl", "primaryPackagePurpose": "SOURCE", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/openssl/openssl@openssl-4.1.0", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-openssl-provider-legacy-allowed-db13521aee4e9c16", "name": "openssl-provider-legacy-allowed", "versionInfo": "4.1.0-r0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "description": "Chainguard Legacy Allowed FIPS 140-3 I.G. 2.4.A Provider", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/openssl-provider-legacy-allowed@4.1.0-r0?arch=aarch64\u0026origin=openssl-provider-legacy-allowed", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-openssl-provider-legacy-allowed", "name": "openssl-provider-legacy-allowed", "versionInfo": "4.1.0-r0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-openssl-4.0-libcrypto-4.0.3-r8", "name": "openssl-4.0-libcrypto", "versionInfo": "4.0.3-r8", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/openssl-4.0-libcrypto@4.0.3-r8?arch=aarch64\u0026distro=wolfi", "referenceType": "purl" }, { "referenceCategory": "SECURITY", "referenceLocator": "cpe:2.3:a:openssl:openssl:4.0.3:*:*:*:*:*:*:*", "referenceType": "cpe23Type" } ] }, { "SPDXID": "SPDXRef-Package-Melange-openssl-4.0.yaml-53fb2f6751f832fa61ddba06cb8a40dbba5f409f", "name": "openssl-4.0.yaml", "versionInfo": "53fb2f6751f832fa61ddba06cb8a40dbba5f409f", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "INSTALL", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/chainguard-dev/stereo@53fb2f6751f832fa61ddba06cb8a40dbba5f409f#openssl-4.0.yaml", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Source-github.com-openssl-openssl-openssl-4.0.3-af1775b60dfa141a4ad762585052cabeb9f37e9e-0", "name": "openssl", "versionInfo": "openssl-4.0.3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "https://github.com/openssl/openssl/archive/af1775b60dfa141a4ad762585052cabeb9f37e9e.tar.gz", "originator": "Organization: Openssl", "supplier": "Organization: Openssl", "primaryPackagePurpose": "SOURCE", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/openssl/openssl@openssl-4.0.3", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-openssl-4.0-libcrypto-12ff2dbbb7bfc81c", "name": "openssl-4.0-libcrypto", "versionInfo": "4.0.3-r8", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "description": "OpenSSL libcrypto library", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "SECURITY", "referenceLocator": "cpe:2.3:a:openssl:openssl:4.0.3-r8:*:*:*:*:*:*:*", "referenceType": "cpe23Type" }, { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/openssl-4.0-libcrypto@4.0.3-r8?arch=aarch64\u0026origin=openssl-4.0", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-openssl-4.0-libcrypto", "name": "openssl-4.0-libcrypto", "versionInfo": "4.0.3-r8", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-openssl-4.0-libssl-4.0.3-r8", "name": "openssl-4.0-libssl", "versionInfo": "4.0.3-r8", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/openssl-4.0-libssl@4.0.3-r8?arch=aarch64\u0026distro=wolfi", "referenceType": "purl" }, { "referenceCategory": "SECURITY", "referenceLocator": "cpe:2.3:a:openssl:openssl:4.0.3:*:*:*:*:*:*:*", "referenceType": "cpe23Type" } ] }, { "SPDXID": "SPDXRef-Package-apk-openssl-4.0-libssl-120767333b011958", "name": "openssl-4.0-libssl", "versionInfo": "4.0.3-r8", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "description": "OpenSSL libssl library", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "SECURITY", "referenceLocator": "cpe:2.3:a:openssl:openssl:4.0.3-r8:*:*:*:*:*:*:*", "referenceType": "cpe23Type" }, { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/openssl-4.0-libssl@4.0.3-r8?arch=aarch64\u0026origin=openssl-4.0", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-openssl-4.0-libssl", "name": "openssl-4.0-libssl", "versionInfo": "4.0.3-r8", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-zlib-1.3.2.1C95rc20260921-r2", "name": "zlib", "versionInfo": "1.3.2.1_rc20260921-r2", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MPL-2.0 AND MIT", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/zlib@1.3.2.1_rc20260921-r2?arch=aarch64\u0026distro=wolfi", "referenceType": "purl" }, { "referenceCategory": "SECURITY", "referenceLocator": "cpe:2.3:a:zlib:zlib:1.3.2.1_rc20260921:*:*:*:*:*:*:*", "referenceType": "cpe23Type" } ] }, { "SPDXID": "SPDXRef-Package-Melange-zlib.yaml-5aeb575ed7ca64fb21dfda042e170d08f1654bbc", "name": "zlib.yaml", "versionInfo": "5aeb575ed7ca64fb21dfda042e170d08f1654bbc", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "INSTALL", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/chainguard-dev/stereo@5aeb575ed7ca64fb21dfda042e170d08f1654bbc#zlib.yaml", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Source-github.com-madler-zlib-develop-767c4c947852e143f582c85f14cf573411df1b35-0", "name": "zlib", "versionInfo": "767c4c947852e143f582c85f14cf573411df1b35", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MPL-2.0 AND MIT", "downloadLocation": "https://github.com/madler/zlib/archive/767c4c947852e143f582c85f14cf573411df1b35.tar.gz", "originator": "Organization: Madler", "supplier": "Organization: Madler", "primaryPackagePurpose": "SOURCE", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/madler/zlib@767c4c947852e143f582c85f14cf573411df1b35", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-zlib-1dd8dbeab0faefff", "name": "zlib", "versionInfo": "1.3.2.1_rc20260921-r2", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "(MPL-2.0 AND MIT)", "description": "a library implementing the zlib compression algorithms", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "SECURITY", "referenceLocator": "cpe:2.3:a:zlib:zlib:1.3.2.1_rc20260921-r2:*:*:*:*:*:*:*", "referenceType": "cpe23Type" }, { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/zlib@1.3.2.1_rc20260921-r2?arch=aarch64\u0026origin=zlib", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-zlib", "name": "zlib", "versionInfo": "1.3.2.1_rc20260921-r2", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-nodejs-26-26.13.0-r1", "name": "nodejs-26", "versionInfo": "26.13.0-r1", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/nodejs-26@26.13.0-r1?arch=aarch64\u0026distro=wolfi", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Melange-nodejs-26.yaml-d4fd592d287f751bd0ac55081ed4834a15a65a1a", "name": "nodejs-26.yaml", "versionInfo": "d4fd592d287f751bd0ac55081ed4834a15a65a1a", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "INSTALL", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/chainguard-dev/stereo@d4fd592d287f751bd0ac55081ed4834a15a65a1a#nodejs-26.yaml", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Source-github.com-nodejs-node.git-v26.13.0-18b32a3b1552e199a01f1a8d9fd64aa756d3b75b-0", "name": "node", "versionInfo": "v26.13.0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "downloadLocation": "https://github.com/nodejs/node/archive/18b32a3b1552e199a01f1a8d9fd64aa756d3b75b.tar.gz", "originator": "Organization: Nodejs", "supplier": "Organization: Nodejs", "primaryPackagePurpose": "SOURCE", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/nodejs/node@v26.13.0", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-nodejs-26-03878ee445ce7c34", "name": "nodejs-26", "versionInfo": "26.13.0-r1", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "description": "JavaScript runtime built on V8 engine", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/nodejs-26@26.13.0-r1?arch=aarch64\u0026origin=nodejs-26", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-nodejs-26", "name": "nodejs-26", "versionInfo": "26.13.0-r1", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-tzdata-2026f-r0", "name": "tzdata", "versionInfo": "2026f-r0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "CC-PDDC", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/tzdata@2026f-r0?arch=aarch64\u0026distro=wolfi", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Melange-tzdata.yaml-b01ceefc114cf44ccb6d35f405795435f98bf0c2", "name": "tzdata.yaml", "versionInfo": "b01ceefc114cf44ccb6d35f405795435f98bf0c2", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "INSTALL", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/chainguard-dev/stereo@b01ceefc114cf44ccb6d35f405795435f98bf0c2#tzdata.yaml", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Source-github.com-eggert-tz-2026f-a6cb1a1cebcc96269a02b25323c1a9424e3349a8-0", "name": "tz", "versionInfo": "2026f", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "CC-PDDC", "downloadLocation": "https://github.com/eggert/tz/archive/a6cb1a1cebcc96269a02b25323c1a9424e3349a8.tar.gz", "originator": "Organization: Eggert", "supplier": "Organization: Eggert", "primaryPackagePurpose": "SOURCE", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/eggert/tz@2026f", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-tzdata-c9ffaae8b2257589", "name": "tzdata", "versionInfo": "2026f-r0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "CC-PDDC", "description": "Timezone data provided by IANA", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/tzdata@2026f-r0?arch=aarch64\u0026origin=tzdata", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-tzdata", "name": "tzdata", "versionInfo": "2026f-r0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" } ], "relationships": [ { "spdxElementId": "SPDXRef-Package-Image-sha256-8c36e97cb43e2cd1cce2fb634cb5519a682f4c4e37b5cc8681de3b98d1a5a6a1", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-ImageLayer-sha256-3ce6423da6da92712f74c8feca4280bdc4f561a4b2fe9e73fd2b1b2d04156989" }, { "spdxElementId": "SPDXRef-Package-apk-wolfi-baselayout-20230201-r31", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-wolfi-baselayout.yaml-ed415005c84750f03c4a9252137813734a224ae7" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-wolfi-baselayout", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-wolfi-baselayout-10b2691c19a945ed" }, { "spdxElementId": "SPDXRef-Package-apk-wolfi-baselayout-20230201-r31", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-wolfi-baselayout" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-8c36e97cb43e2cd1cce2fb634cb5519a682f4c4e37b5cc8681de3b98d1a5a6a1", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-wolfi-baselayout-20230201-r31" }, { "spdxElementId": "SPDXRef-Package-apk-ca-certificates-bundle-20261020-r0", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-ca-certificates.yaml-8061afafa65af5a9026707a8880e14120dd6f4a0" }, { "spdxElementId": "SPDXRef-Package-apk-ca-certificates-bundle-20261020-r0", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-gitlab.alpinelinux.org-alpine-ca-certificates-20261020-2058424fda70ee478bcce872dcf141a0c5499ee0-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-ca-certificates-bundle", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-ca-certificates-bundle-39152a1ba5759050" }, { "spdxElementId": "SPDXRef-Package-apk-ca-certificates-bundle-20261020-r0", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-ca-certificates-bundle" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-8c36e97cb43e2cd1cce2fb634cb5519a682f4c4e37b5cc8681de3b98d1a5a6a1", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-ca-certificates-bundle-20261020-r0" }, { "spdxElementId": "SPDXRef-Package-apk-glibc-2.44-locale-posix-2.44-r14", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-glibc-2.44.yaml-86ee3612cb47379928ac34ad99dfbfd45d138ff9" }, { "spdxElementId": "SPDXRef-Package-apk-glibc-2.44-locale-posix-2.44-r14", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-gitlab.com-gnutools-glibc.git-release-2.44-master-c5c6fc6f449dbc95e3a68cacd61852dc0a48e57c-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-glibc-2.44-locale-posix", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-glibc-2.44-locale-posix-e2c2b3125b2659a5" }, { "spdxElementId": "SPDXRef-Package-apk-glibc-2.44-locale-posix-2.44-r14", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-glibc-2.44-locale-posix" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-8c36e97cb43e2cd1cce2fb634cb5519a682f4c4e37b5cc8681de3b98d1a5a6a1", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-glibc-2.44-locale-posix-2.44-r14" }, { "spdxElementId": "SPDXRef-Package-apk-libgcc-16.2.0-r3", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-gcc.yaml-4d188060cbd00821a95f1ef60605da4817e781bb" }, { "spdxElementId": "SPDXRef-Package-apk-libgcc-16.2.0-r3", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-gitlab.com-gnutools-gcc.git-releases-gcc-16.2.0-78d4ac73dd391005b895a6148cd9831e28e1208b-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-libgcc", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-libgcc-6f0563db807ae406" }, { "spdxElementId": "SPDXRef-Package-apk-libgcc-16.2.0-r3", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-libgcc" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-8c36e97cb43e2cd1cce2fb634cb5519a682f4c4e37b5cc8681de3b98d1a5a6a1", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-libgcc-16.2.0-r3" }, { "spdxElementId": "SPDXRef-Package-apk-glibc-2.44-2.44-r14", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-glibc-2.44.yaml-86ee3612cb47379928ac34ad99dfbfd45d138ff9" }, { "spdxElementId": "SPDXRef-Package-apk-glibc-2.44-2.44-r14", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-gitlab.com-gnutools-glibc.git-release-2.44-master-c5c6fc6f449dbc95e3a68cacd61852dc0a48e57c-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-glibc-2.44", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-glibc-2.44-94bbc3326135f6b7" }, { "spdxElementId": "SPDXRef-Package-apk-glibc-2.44-2.44-r14", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-glibc-2.44" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-8c36e97cb43e2cd1cce2fb634cb5519a682f4c4e37b5cc8681de3b98d1a5a6a1", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-glibc-2.44-2.44-r14" }, { "spdxElementId": "SPDXRef-Package-apk-ld-linux-2.44-2.44-r14", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-glibc-2.44.yaml-86ee3612cb47379928ac34ad99dfbfd45d138ff9" }, { "spdxElementId": "SPDXRef-Package-apk-ld-linux-2.44-2.44-r14", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-gitlab.com-gnutools-glibc.git-release-2.44-master-c5c6fc6f449dbc95e3a68cacd61852dc0a48e57c-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-ld-linux-2.44", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-ld-linux-2.44-7fd0b6ac1f498b59" }, { "spdxElementId": "SPDXRef-Package-apk-ld-linux-2.44-2.44-r14", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-ld-linux-2.44" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-8c36e97cb43e2cd1cce2fb634cb5519a682f4c4e37b5cc8681de3b98d1a5a6a1", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-ld-linux-2.44-2.44-r14" }, { "spdxElementId": "SPDXRef-Package-apk-ncurses-terminfo-base-6.6.20261107-r0", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-ncurses.yaml-57b90c0084b0bc101663cdfcaa44f4ce83312443" }, { "spdxElementId": "SPDXRef-Package-apk-ncurses-terminfo-base-6.6.20261107-r0", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-github.com-ThomasDickey-ncurses-snapshots-v6C956C9520261107-7404b376832583182c52722dc09d86b8675db375-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-ncurses-terminfo-base", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-ncurses-terminfo-base-d4376d4149bf9b00" }, { "spdxElementId": "SPDXRef-Package-apk-ncurses-terminfo-base-6.6.20261107-r0", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-ncurses-terminfo-base" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-8c36e97cb43e2cd1cce2fb634cb5519a682f4c4e37b5cc8681de3b98d1a5a6a1", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-ncurses-terminfo-base-6.6.20261107-r0" }, { "spdxElementId": "SPDXRef-Package-apk-ncurses-6.6.20261107-r0", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-ncurses.yaml-57b90c0084b0bc101663cdfcaa44f4ce83312443" }, { "spdxElementId": "SPDXRef-Package-apk-ncurses-6.6.20261107-r0", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-github.com-ThomasDickey-ncurses-snapshots-v6C956C9520261107-7404b376832583182c52722dc09d86b8675db375-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-ncurses", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-ncurses-fe6e9d338447068c" }, { "spdxElementId": "SPDXRef-Package-apk-ncurses-6.6.20261107-r0", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-ncurses" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-8c36e97cb43e2cd1cce2fb634cb5519a682f4c4e37b5cc8681de3b98d1a5a6a1", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-ncurses-6.6.20261107-r0" }, { "spdxElementId": "SPDXRef-Package-apk-bash-5.3-r14", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-bash.yaml-ac7b15dc2695924986372a27cd7d6c4e029c5efa" }, { "spdxElementId": "SPDXRef-Package-apk-bash-5.3-r14", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-git.savannah.gnu.org-git-bash.git-bash-5.3-b8c60bc9ca365f8261fa97900b6fa939f6ebc303-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-bash", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-bash-8fcfdb8c2df1d6c6" }, { "spdxElementId": "SPDXRef-Package-apk-bash-5.3-r14", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-bash" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-8c36e97cb43e2cd1cce2fb634cb5519a682f4c4e37b5cc8681de3b98d1a5a6a1", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-bash-5.3-r14" }, { "spdxElementId": "SPDXRef-Package-apk-libxcrypt-4.5.2-r8", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-libxcrypt.yaml-b9898dbb7125f3678bc8c6cd9e7a43d9d9d2c518" }, { "spdxElementId": "SPDXRef-Package-apk-libxcrypt-4.5.2-r8", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-github.com-besser82-libxcrypt-v4.5.2-db70b42bd7b2a5b00a8580c8dec0aa66791c950a-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-libxcrypt", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-libxcrypt-673cf320fa080268" }, { "spdxElementId": "SPDXRef-Package-apk-libxcrypt-4.5.2-r8", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-libxcrypt" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-8c36e97cb43e2cd1cce2fb634cb5519a682f4c4e37b5cc8681de3b98d1a5a6a1", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-libxcrypt-4.5.2-r8" }, { "spdxElementId": "SPDXRef-Package-apk-libcrypt1-2.44-2.44-r14", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-glibc-2.44.yaml-86ee3612cb47379928ac34ad99dfbfd45d138ff9" }, { "spdxElementId": "SPDXRef-Package-apk-libcrypt1-2.44-2.44-r14", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-gitlab.com-gnutools-glibc.git-release-2.44-master-c5c6fc6f449dbc95e3a68cacd61852dc0a48e57c-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-libcrypt1-2.44", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-libcrypt1-2.44-07e91cda91134f6e" }, { "spdxElementId": "SPDXRef-Package-apk-libcrypt1-2.44-2.44-r14", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-libcrypt1-2.44" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-8c36e97cb43e2cd1cce2fb634cb5519a682f4c4e37b5cc8681de3b98d1a5a6a1", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-libcrypt1-2.44-2.44-r14" }, { "spdxElementId": "SPDXRef-Package-apk-busybox-1.38.0-r3", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-busybox.yaml-59d45eb49286129d8d21b2469befa3b55be4719b" }, { "spdxElementId": "SPDXRef-Package-apk-busybox-1.38.0-r3", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-github.com-vda-linux-busyboxC95mirror-1C9538C950-fc71374dfccd46448c62947269a35f1420d7ee28-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-busybox", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-busybox-3debcaeac335b503" }, { "spdxElementId": "SPDXRef-Package-apk-busybox-1.38.0-r3", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-busybox" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-8c36e97cb43e2cd1cce2fb634cb5519a682f4c4e37b5cc8681de3b98d1a5a6a1", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-busybox-1.38.0-r3" }, { "spdxElementId": "SPDXRef-Package-apk-c-ares-1.34.9-r0", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-c-ares.yaml-af6b55f0eea2dce5a488569d02ea2c396f46effd" }, { "spdxElementId": "SPDXRef-Package-apk-c-ares-1.34.9-r0", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-github.com-c-ares-c-ares-v1.34.9-bc91829cce983a35ec01f5dbc05465858a3df469-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-c-ares", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-c-ares-e97328716bcafcaa" }, { "spdxElementId": "SPDXRef-Package-apk-c-ares-1.34.9-r0", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-c-ares" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-8c36e97cb43e2cd1cce2fb634cb5519a682f4c4e37b5cc8681de3b98d1a5a6a1", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-c-ares-1.34.9-r0" }, { "spdxElementId": "SPDXRef-Package-apk-icu79-data-full-79.1-r1", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-icu.yaml-f5ef816d1cb2bd0e165a402c4e8a4c4622464bf3" }, { "spdxElementId": "SPDXRef-Package-apk-icu79-data-full-79.1-r1", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-github.com-unicode-org-icu-release-79.1-ddc6b66926bfac6036144ca9902992a0d6d50af9-0" }, { "spdxElementId": "SPDXRef-Package-apk-icu79-data-full-79.1-r1", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-github.com-unicode-org-icu-data-main-c5aeb38e05607d094b783f0665bd66219b038ca9-1" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-icu79-data-full", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-icu79-data-full-dfda4c12dccf0f20" }, { "spdxElementId": "SPDXRef-Package-apk-icu79-data-full-79.1-r1", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-icu79-data-full" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-8c36e97cb43e2cd1cce2fb634cb5519a682f4c4e37b5cc8681de3b98d1a5a6a1", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-icu79-data-full-79.1-r1" }, { "spdxElementId": "SPDXRef-Package-apk-libbrotlicommon1-1.2.1-r3", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-brotli.yaml-f5ef816d1cb2bd0e165a402c4e8a4c4622464bf3" }, { "spdxElementId": "SPDXRef-Package-apk-libbrotlicommon1-1.2.1-r3", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-github.com-google-brotli.git-v1.2.1-db24a98aed38a16de78cc05ca15cdd8dc2a0d92d-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-libbrotlicommon1", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-libbrotlicommon1-4cfba742c9bc8e0d" }, { "spdxElementId": "SPDXRef-Package-apk-libbrotlicommon1-1.2.1-r3", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-libbrotlicommon1" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-8c36e97cb43e2cd1cce2fb634cb5519a682f4c4e37b5cc8681de3b98d1a5a6a1", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-libbrotlicommon1-1.2.1-r3" }, { "spdxElementId": "SPDXRef-Package-apk-libbrotlidec1-1.2.1-r3", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-brotli.yaml-f5ef816d1cb2bd0e165a402c4e8a4c4622464bf3" }, { "spdxElementId": "SPDXRef-Package-apk-libbrotlidec1-1.2.1-r3", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-github.com-google-brotli.git-v1.2.1-db24a98aed38a16de78cc05ca15cdd8dc2a0d92d-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-libbrotlidec1", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-libbrotlidec1-7682b7a41fbe0c53" }, { "spdxElementId": "SPDXRef-Package-apk-libbrotlidec1-1.2.1-r3", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-libbrotlidec1" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-8c36e97cb43e2cd1cce2fb634cb5519a682f4c4e37b5cc8681de3b98d1a5a6a1", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-libbrotlidec1-1.2.1-r3" }, { "spdxElementId": "SPDXRef-Package-apk-libbrotlienc1-1.2.1-r3", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-brotli.yaml-f5ef816d1cb2bd0e165a402c4e8a4c4622464bf3" }, { "spdxElementId": "SPDXRef-Package-apk-libbrotlienc1-1.2.1-r3", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-github.com-google-brotli.git-v1.2.1-db24a98aed38a16de78cc05ca15cdd8dc2a0d92d-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-libbrotlienc1", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-libbrotlienc1-9032cd875fed45d9" }, { "spdxElementId": "SPDXRef-Package-apk-libbrotlienc1-1.2.1-r3", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-libbrotlienc1" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-8c36e97cb43e2cd1cce2fb634cb5519a682f4c4e37b5cc8681de3b98d1a5a6a1", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-libbrotlienc1-1.2.1-r3" }, { "spdxElementId": "SPDXRef-Package-apk-libstdcC43C43-16.2.0-r3", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-gcc.yaml-4d188060cbd00821a95f1ef60605da4817e781bb" }, { "spdxElementId": "SPDXRef-Package-apk-libstdcC43C43-16.2.0-r3", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-gitlab.com-gnutools-gcc.git-releases-gcc-16.2.0-78d4ac73dd391005b895a6148cd9831e28e1208b-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-libstdc--", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-libstdc---d49b493ee2e3bbae" }, { "spdxElementId": "SPDXRef-Package-apk-libstdcC43C43-16.2.0-r3", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-libstdc--" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-8c36e97cb43e2cd1cce2fb634cb5519a682f4c4e37b5cc8681de3b98d1a5a6a1", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-libstdcC43C43-16.2.0-r3" }, { "spdxElementId": "SPDXRef-Package-apk-libicu79-79.1-r1", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-icu.yaml-f5ef816d1cb2bd0e165a402c4e8a4c4622464bf3" }, { "spdxElementId": "SPDXRef-Package-apk-libicu79-79.1-r1", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-github.com-unicode-org-icu-release-79.1-ddc6b66926bfac6036144ca9902992a0d6d50af9-0" }, { "spdxElementId": "SPDXRef-Package-apk-libicu79-79.1-r1", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-github.com-unicode-org-icu-data-main-c5aeb38e05607d094b783f0665bd66219b038ca9-1" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-libicu79", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-libicu79-ccbe9a514ca528c5" }, { "spdxElementId": "SPDXRef-Package-apk-libicu79-79.1-r1", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-libicu79" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-8c36e97cb43e2cd1cce2fb634cb5519a682f4c4e37b5cc8681de3b98d1a5a6a1", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-libicu79-79.1-r1" }, { "spdxElementId": "SPDXRef-Package-apk-libnghttp2-14-1.71.0-r0", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-nghttp2.yaml-153ee2bd742f744ddedf5c4a97110fa46307574b" }, { "spdxElementId": "SPDXRef-Package-apk-libnghttp2-14-1.71.0-r0", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-github.com-nghttp2-nghttp2.git-v1.71.0-80dcb8140af050fac91a7e6af4fc6dd013404bd1-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-libnghttp2-14", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-libnghttp2-14-f0405241798ad783" }, { "spdxElementId": "SPDXRef-Package-apk-libnghttp2-14-1.71.0-r0", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-libnghttp2-14" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-8c36e97cb43e2cd1cce2fb634cb5519a682f4c4e37b5cc8681de3b98d1a5a6a1", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-libnghttp2-14-1.71.0-r0" }, { "spdxElementId": "SPDXRef-Package-apk-libuv-1.53.0-r0", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-libuv.yaml-6ee5086b767a2f31854a43ce96bd3b6a275cc36c" }, { "spdxElementId": "SPDXRef-Package-apk-libuv-1.53.0-r0", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-github.com-libuv-libuv.git-v1.53.0-840404ce8ba7cc0204be52389a6cfff9f2c90fb6-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-libuv", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-libuv-1ca688a614853a23" }, { "spdxElementId": "SPDXRef-Package-apk-libuv-1.53.0-r0", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-libuv" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-8c36e97cb43e2cd1cce2fb634cb5519a682f4c4e37b5cc8681de3b98d1a5a6a1", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-libuv-1.53.0-r0" }, { "spdxElementId": "SPDXRef-Package-apk-openssl-provider-legacy-allowed-4.1.0-r0", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-openssl-provider-legacy-allowed.yaml-aeae4801330be6fd269d5ed5640dc37b58ccab09" }, { "spdxElementId": "SPDXRef-Package-apk-openssl-provider-legacy-allowed-4.1.0-r0", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-github.com-openssl-openssl-openssl-4.1.0-2f4e3a5fec05394068cfa7379890ab552483a8a6-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-openssl-provider-legacy-allowed", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-openssl-provider-legacy-allowed-db13521aee4e9c16" }, { "spdxElementId": "SPDXRef-Package-apk-openssl-provider-legacy-allowed-4.1.0-r0", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-openssl-provider-legacy-allowed" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-8c36e97cb43e2cd1cce2fb634cb5519a682f4c4e37b5cc8681de3b98d1a5a6a1", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-openssl-provider-legacy-allowed-4.1.0-r0" }, { "spdxElementId": "SPDXRef-Package-apk-openssl-4.0-libcrypto-4.0.3-r8", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-openssl-4.0.yaml-53fb2f6751f832fa61ddba06cb8a40dbba5f409f" }, { "spdxElementId": "SPDXRef-Package-apk-openssl-4.0-libcrypto-4.0.3-r8", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-github.com-openssl-openssl-openssl-4.0.3-af1775b60dfa141a4ad762585052cabeb9f37e9e-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-openssl-4.0-libcrypto", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-openssl-4.0-libcrypto-12ff2dbbb7bfc81c" }, { "spdxElementId": "SPDXRef-Package-apk-openssl-4.0-libcrypto-4.0.3-r8", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-openssl-4.0-libcrypto" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-8c36e97cb43e2cd1cce2fb634cb5519a682f4c4e37b5cc8681de3b98d1a5a6a1", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-openssl-4.0-libcrypto-4.0.3-r8" }, { "spdxElementId": "SPDXRef-Package-apk-openssl-4.0-libssl-4.0.3-r8", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-openssl-4.0.yaml-53fb2f6751f832fa61ddba06cb8a40dbba5f409f" }, { "spdxElementId": "SPDXRef-Package-apk-openssl-4.0-libssl-4.0.3-r8", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-github.com-openssl-openssl-openssl-4.0.3-af1775b60dfa141a4ad762585052cabeb9f37e9e-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-openssl-4.0-libssl", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-openssl-4.0-libssl-120767333b011958" }, { "spdxElementId": "SPDXRef-Package-apk-openssl-4.0-libssl-4.0.3-r8", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-openssl-4.0-libssl" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-8c36e97cb43e2cd1cce2fb634cb5519a682f4c4e37b5cc8681de3b98d1a5a6a1", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-openssl-4.0-libssl-4.0.3-r8" }, { "spdxElementId": "SPDXRef-Package-apk-zlib-1.3.2.1C95rc20260921-r2", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-zlib.yaml-5aeb575ed7ca64fb21dfda042e170d08f1654bbc" }, { "spdxElementId": "SPDXRef-Package-apk-zlib-1.3.2.1C95rc20260921-r2", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-github.com-madler-zlib-develop-767c4c947852e143f582c85f14cf573411df1b35-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-zlib", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-zlib-1dd8dbeab0faefff" }, { "spdxElementId": "SPDXRef-Package-apk-zlib-1.3.2.1C95rc20260921-r2", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-zlib" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-8c36e97cb43e2cd1cce2fb634cb5519a682f4c4e37b5cc8681de3b98d1a5a6a1", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-zlib-1.3.2.1C95rc20260921-r2" }, { "spdxElementId": "SPDXRef-Package-apk-nodejs-26-26.13.0-r1", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-nodejs-26.yaml-d4fd592d287f751bd0ac55081ed4834a15a65a1a" }, { "spdxElementId": "SPDXRef-Package-apk-nodejs-26-26.13.0-r1", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-github.com-nodejs-node.git-v26.13.0-18b32a3b1552e199a01f1a8d9fd64aa756d3b75b-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-nodejs-26", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-nodejs-26-03878ee445ce7c34" }, { "spdxElementId": "SPDXRef-Package-apk-nodejs-26-26.13.0-r1", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-nodejs-26" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-8c36e97cb43e2cd1cce2fb634cb5519a682f4c4e37b5cc8681de3b98d1a5a6a1", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-nodejs-26-26.13.0-r1" }, { "spdxElementId": "SPDXRef-Package-apk-tzdata-2026f-r0", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-tzdata.yaml-b01ceefc114cf44ccb6d35f405795435f98bf0c2" }, { "spdxElementId": "SPDXRef-Package-apk-tzdata-2026f-r0", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-github.com-eggert-tz-2026f-a6cb1a1cebcc96269a02b25323c1a9424e3349a8-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-tzdata", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-tzdata-c9ffaae8b2257589" }, { "spdxElementId": "SPDXRef-Package-apk-tzdata-2026f-r0", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-tzdata" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-8c36e97cb43e2cd1cce2fb634cb5519a682f4c4e37b5cc8681de3b98d1a5a6a1", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-tzdata-2026f-r0" } ] }