{"SPDXID": "SPDXRef-DOCUMENT", "creationInfo": {"comment": "This document was created by analyzing recipe files during the build.", "created": "2026-03-17T22:51:24Z", "creators": ["Tool: OpenEmbedded Core create-spdx.bbclass", "Organization: OpenEmbedded ()", "Person: N/A ()"], "licenseListVersion": "3.14"}, "dataLicense": "CC0-1.0", "documentNamespace": "http://spdx.org/spdxdocs/recipe-nativesdk-expat-ddf95b33-f25b-5536-8845-db2d82cb3b12", "externalDocumentRefs": [{"checksum": {"algorithm": "SHA1", "checksumValue": "80c401b243e39925f6f2e7f22e49bbd50ed5b910"}, "externalDocumentId": "DocumentRef-dependency-recipe-chrpath-native", "spdxDocument": "http://spdx.org/spdxdocs/recipe-chrpath-native-2690d640-5a3d-5cec-af85-030031084df6"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "3fecefeb2c23e3d828a25fec67d4c8cee3306858"}, "externalDocumentId": "DocumentRef-dependency-recipe-cmake-native", "spdxDocument": "http://spdx.org/spdxdocs/recipe-cmake-native-065aeeea-e673-57cc-a9f5-a3fe1fc2b3ea"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "9f2648176eee339d46f884ddb7e710ca2c061cf4"}, "externalDocumentId": "DocumentRef-dependency-recipe-gcc-crosssdk-x86_64-tdxsdk-linux", "spdxDocument": "http://spdx.org/spdxdocs/recipe-gcc-crosssdk-x86_64-tdxsdk-linux-96d8fb38-45ba-52de-bc2b-65fefa36776c"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "df1ac440b0246cec978ce30557f2f2b6a07dfb6e"}, "externalDocumentId": "DocumentRef-dependency-recipe-nativesdk-gcc-runtime", "spdxDocument": "http://spdx.org/spdxdocs/recipe-nativesdk-gcc-runtime-04ee5d30-f90a-51e8-a914-6763a7127d37"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "b5610339cca696c695615576032be1f5632c699b"}, "externalDocumentId": "DocumentRef-dependency-recipe-nativesdk-glibc", "spdxDocument": "http://spdx.org/spdxdocs/recipe-nativesdk-glibc-6ba38ff0-c104-56b9-a4c9-c6c0cedc9db3"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "00eee2b96b1c5fb7ca6ca3ba6c24941261179057"}, "externalDocumentId": "DocumentRef-dependency-recipe-ninja-native", "spdxDocument": "http://spdx.org/spdxdocs/recipe-ninja-native-69509a4d-51be-58e4-8b69-f8cab885e13f"}], "name": "recipe-nativesdk-expat", "packages": [{"SPDXID": "SPDXRef-Recipe-nativesdk-expat", "copyrightText": "NOASSERTION", "description": "Expat is an XML parser library written in C. It is a stream-oriented parser in which an application registers handlers for things the parser might find in the XML document (like start tags)", "downloadLocation": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceLocator": "cpe:2.3:*:*:expat:2.6.4:*:*:*:*:*:*:*", "referenceType": "http://spdx.org/rdf/references/cpe23Type"}, {"referenceCategory": "SECURITY", "referenceLocator": "cpe:2.3:*:*:libexpat:2.6.4:*:*:*:*:*:*:*", "referenceType": "http://spdx.org/rdf/references/cpe23Type"}], "homepage": "https://github.com/libexpat/libexpat", "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "licenseInfoFromFiles": ["NOASSERTION"], "name": "nativesdk-expat", "sourceInfo": "CVEs fixed: CVE-2024-8176", "summary": "A stream-oriented XML parser library", "supplier": "Organization: OpenEmbedded ()", "versionInfo": "2.6.4"}, {"SPDXID": "SPDXRef-Download-nativesdk-expat-1", "checksums": [{"algorithm": "SHA256", "checksumValue": "8dc480b796163d4436e6f1352e71800a774f73dbae213f1860b60607d2a83ada"}], "copyrightText": "NOASSERTION", "downloadLocation": "https://github.com/libexpat/libexpat/releases//download/R_2_6_4/expat-2.6.4.tar.bz2", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "licenseInfoFromFiles": ["NOASSERTION"], "name": "nativesdk-expat-source-1", "supplier": "NOASSERTION"}], "relationships": [{"relatedSpdxElement": "SPDXRef-Recipe-nativesdk-expat", "relationshipType": "DESCRIBES", "spdxElementId": "SPDXRef-DOCUMENT"}, {"relatedSpdxElement": "SPDXRef-Download-nativesdk-expat-1", "relationshipType": "DESCRIBES", "spdxElementId": "SPDXRef-DOCUMENT"}, {"relatedSpdxElement": "SPDXRef-Recipe-nativesdk-expat", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "SPDXRef-Download-nativesdk-expat-1"}, {"relatedSpdxElement": "SPDXRef-Recipe-nativesdk-expat", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-chrpath-native:SPDXRef-Recipe-chrpath-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-nativesdk-expat", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-cmake-native:SPDXRef-Recipe-cmake-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-nativesdk-expat", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-gcc-crosssdk-x86_64-tdxsdk-linux:SPDXRef-Recipe-gcc-crosssdk-x86_64-tdxsdk-linux"}, {"relatedSpdxElement": "SPDXRef-Recipe-nativesdk-expat", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-nativesdk-gcc-runtime:SPDXRef-Recipe-nativesdk-gcc-runtime"}, {"relatedSpdxElement": "SPDXRef-Recipe-nativesdk-expat", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-nativesdk-glibc:SPDXRef-Recipe-nativesdk-glibc"}, {"relatedSpdxElement": "SPDXRef-Recipe-nativesdk-expat", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-ninja-native:SPDXRef-Recipe-ninja-native"}], "spdxVersion": "SPDX-2.2"}