{"@context":"https://spdx.org/rdf/3.0.1/spdx-context.jsonld","@graph":[{"type":"CreationInfo","@id":"_:CreationInfo0","created":"2011-04-05T23:00:00Z","createdBy":["http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/agent/OpenEmbedded"],"createdUsing":["http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/tool/oe-spdx-creator_1_0"],"specVersion":"3.0.1"},{"type":"CreationInfo","@id":"_:CreationInfo1","created":"2025-07-20T16:15:44Z","createdBy":["http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/agent/OpenEmbedded"],"createdUsing":["http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/tool/oe-spdx-creator_1_0"],"specVersion":"3.0.1"},{"type":"Organization","spdxId":"http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/agent/OpenEmbedded","creationInfo":"_:CreationInfo0","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias"}],"name":"OpenEmbedded"},{"type":"Tool","spdxId":"http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/tool/oe-spdx-creator_1_0","creationInfo":"_:CreationInfo0","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias"}],"name":"oe-spdx-creator 1.0"},{"type":"build_Build","spdxId":"http://spdx.org/spdxdocs/pixman-ebea6f11-6b46-5116-a1d7-de83467f926e/aacfa11dd0d59e6ea9477877ba88331461ae259a08d88745b6188f54c26f09a5/build/recipe","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/0f5a451f13e2743ba5f675f3d14e7760d9c9f63b65b344c6280ff6823cf4db8e/pixman/UNIHASH/build/recipe"}],"name":"pixman:do_create_spdx:recipe","build_buildType":"http://openembedded.org/bitbake/do_create_spdx/recipe"},{"type":"SpdxDocument","spdxId":"http://spdx.org/spdxdocs/pixman-ebea6f11-6b46-5116-a1d7-de83467f926e/aacfa11dd0d59e6ea9477877ba88331461ae259a08d88745b6188f54c26f09a5/document/recipe-pixman","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/doc/pixman/recipe-pixman/pixman/UNIHASH/document/recipe-pixman","https://rdf.openembedded.org/spdx/3.0/link-name":"0f5a451f13e2743ba5f675f3d14e7760d9c9f63b65b344c6280ff6823cf4db8e"}],"name":"recipe-pixman","profileConformance":["build","core","security","simpleLicensing","software"],"rootElement":["http://spdx.org/spdxdocs/pixman-ebea6f11-6b46-5116-a1d7-de83467f926e/aacfa11dd0d59e6ea9477877ba88331461ae259a08d88745b6188f54c26f09a5/build/recipe"]},{"type":"simplelicensing_SimpleLicensingText","spdxId":"http://spdx.org/spdxdocs/pixman-ebea6f11-6b46-5116-a1d7-de83467f926e/aacfa11dd0d59e6ea9477877ba88331461ae259a08d88745b6188f54c26f09a5/license-text/PD","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/0f5a451f13e2743ba5f675f3d14e7760d9c9f63b65b344c6280ff6823cf4db8e/pixman/UNIHASH/license-text/PD"}],"name":"PD","simplelicensing_licenseText":"Software released to the public domain"},{"type":"simplelicensing_LicenseExpression","spdxId":"http://spdx.org/spdxdocs/pixman-ebea6f11-6b46-5116-a1d7-de83467f926e/aacfa11dd0d59e6ea9477877ba88331461ae259a08d88745b6188f54c26f09a5/license/3_27_0/MIT_AND_LicenseRef-PD/4083fe969adc4197b94a7847dd90869b","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/0f5a451f13e2743ba5f675f3d14e7760d9c9f63b65b344c6280ff6823cf4db8e/pixman/UNIHASH/license/3_27_0/MIT_AND_LicenseRef-PD/4083fe969adc4197b94a7847dd90869b"}],"simplelicensing_customIdToUri":[{"type":"DictionaryEntry","key":"LicenseRef-PD","value":"http://spdxdocs.org/openembedded-alias/by-doc-hash/0f5a451f13e2743ba5f675f3d14e7760d9c9f63b65b344c6280ff6823cf4db8e/pixman/UNIHASH/license-text/PD"}],"simplelicensing_licenseExpression":"MIT AND LicenseRef-PD","simplelicensing_licenseListVersion":"3.27.0"},{"type":"LifecycleScopedRelationship","spdxId":"http://spdx.org/spdxdocs/pixman-ebea6f11-6b46-5116-a1d7-de83467f926e/aacfa11dd0d59e6ea9477877ba88331461ae259a08d88745b6188f54c26f09a5/relationship/50062deff4ccf2278e4349850e7f8125","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/0f5a451f13e2743ba5f675f3d14e7760d9c9f63b65b344c6280ff6823cf4db8e/pixman/UNIHASH/relationship/50062deff4ccf2278e4349850e7f8125"}],"from":"http://spdx.org/spdxdocs/pixman-ebea6f11-6b46-5116-a1d7-de83467f926e/aacfa11dd0d59e6ea9477877ba88331461ae259a08d88745b6188f54c26f09a5/build/recipe","relationshipType":"dependsOn","to":["http://spdxdocs.org/openembedded-alias/by-doc-hash/135d465a523919ff8bf03e11ab4280c2d9625fd876d728639a461a41e43976de/gcc-runtime/UNIHASH/build/recipe","http://spdxdocs.org/openembedded-alias/by-doc-hash/3d4ceabb7db09c3738e3348d9ed94c3eb745dd9756fae5bbc6d2a18eca0e8b7c/meson-native/UNIHASH/build/recipe","http://spdxdocs.org/openembedded-alias/by-doc-hash/4f85d23f04f7107632034fe7f9a7f6aa396ad03a503af13cde3f455b90606f51/ninja-native/UNIHASH/build/recipe","http://spdxdocs.org/openembedded-alias/by-doc-hash/57301e8063a8bf25308226271627db2b78675cda9f648c5c6c14a2b9c18f48dc/zlib/UNIHASH/build/recipe","http://spdxdocs.org/openembedded-alias/by-doc-hash/8bcc50109a89a2a5b45d13a5cd9a3fb7e276afd2bf762de4772a02f224c2f6bf/glibc/UNIHASH/build/recipe","http://spdxdocs.org/openembedded-alias/by-doc-hash/a99e029532bd32332b3abbc83f6448bff7b86a18c436c4d2304c17282c332d40/python3-native/UNIHASH/build/recipe","http://spdxdocs.org/openembedded-alias/by-doc-hash/bbdd8d771d43ab958fdc500fc604f5c5c73ee12ef0eb9118668516ac3a42ea7a/gcc-cross-aarch64/UNIHASH/build/recipe","http://spdxdocs.org/openembedded-alias/by-doc-hash/c07b112b9f63935e1c33b3627039e4a27ca0bb24542a71bcbe1ae805d0d69207/pkgconfig-native/UNIHASH/build/recipe","http://spdxdocs.org/openembedded-alias/by-doc-hash/c8d755670219c10bdc093947386070b8b7c7c4137b26ce7d87f15af749ebf5f6/qemu-native/UNIHASH/build/recipe"],"scope":"build"},{"type":"Relationship","spdxId":"http://spdx.org/spdxdocs/pixman-ebea6f11-6b46-5116-a1d7-de83467f926e/aacfa11dd0d59e6ea9477877ba88331461ae259a08d88745b6188f54c26f09a5/relationship/792a52c89fd293f52f6f84520523d765","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/0f5a451f13e2743ba5f675f3d14e7760d9c9f63b65b344c6280ff6823cf4db8e/pixman/UNIHASH/relationship/792a52c89fd293f52f6f84520523d765"}],"from":"http://spdx.org/spdxdocs/pixman-ebea6f11-6b46-5116-a1d7-de83467f926e/aacfa11dd0d59e6ea9477877ba88331461ae259a08d88745b6188f54c26f09a5/source/1","relationshipType":"hasDeclaredLicense","to":["http://spdxdocs.org/openembedded-alias/by-doc-hash/0f5a451f13e2743ba5f675f3d14e7760d9c9f63b65b344c6280ff6823cf4db8e/pixman/UNIHASH/license/3_27_0/MIT_AND_LicenseRef-PD/4083fe969adc4197b94a7847dd90869b"]},{"type":"LifecycleScopedRelationship","spdxId":"http://spdx.org/spdxdocs/pixman-ebea6f11-6b46-5116-a1d7-de83467f926e/aacfa11dd0d59e6ea9477877ba88331461ae259a08d88745b6188f54c26f09a5/relationship/9c9e8ad68923817d5ce28bbb1d468f57","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/0f5a451f13e2743ba5f675f3d14e7760d9c9f63b65b344c6280ff6823cf4db8e/pixman/UNIHASH/relationship/9c9e8ad68923817d5ce28bbb1d468f57"}],"from":"http://spdx.org/spdxdocs/pixman-ebea6f11-6b46-5116-a1d7-de83467f926e/aacfa11dd0d59e6ea9477877ba88331461ae259a08d88745b6188f54c26f09a5/build/recipe","relationshipType":"hasInput","to":["http://spdx.org/spdxdocs/pixman-ebea6f11-6b46-5116-a1d7-de83467f926e/aacfa11dd0d59e6ea9477877ba88331461ae259a08d88745b6188f54c26f09a5/source/1"],"scope":"build"},{"type":"software_Package","spdxId":"http://spdx.org/spdxdocs/pixman-ebea6f11-6b46-5116-a1d7-de83467f926e/aacfa11dd0d59e6ea9477877ba88331461ae259a08d88745b6188f54c26f09a5/source/1","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/0f5a451f13e2743ba5f675f3d14e7760d9c9f63b65b344c6280ff6823cf4db8e/pixman/UNIHASH/source/1"}],"name":"pixman-0.46.4.tar.gz","verifiedUsing":[{"type":"Hash","algorithm":"sha256","hashValue":"d09c44ebc3bd5bee7021c79f922fe8fb2fb57f7320f55e97ff9914d2346a591c"}],"software_primaryPurpose":"source","software_downloadLocation":"https://www.cairographics.org/releases/pixman-0.46.4.tar.gz"},{"type":"security_Vulnerability","spdxId":"http://spdx.org/spdxdocs/pixman-ebea6f11-6b46-5116-a1d7-de83467f926e/aacfa11dd0d59e6ea9477877ba88331461ae259a08d88745b6188f54c26f09a5/vulnerability/CVE-2023-37769","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/0f5a451f13e2743ba5f675f3d14e7760d9c9f63b65b344c6280ff6823cf4db8e/pixman/UNIHASH/vulnerability/CVE-2023-37769"}],"externalIdentifier":[{"type":"ExternalIdentifier","externalIdentifierType":"cve","identifier":"CVE-2023-37769","identifierLocator":["https://cveawg.mitre.org/api/cve/CVE-2023-37769","https://www.cve.org/CVERecord?id=CVE-2023-37769"]}]}]}