{"@context":"https://spdx.org/rdf/3.0.1/spdx-context.jsonld","@graph":[{"type":"CreationInfo","@id":"_:CreationInfo0","created":"2011-04-05T23:00:00Z","createdBy":["http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/agent/OpenEmbedded"],"createdUsing":["http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/tool/oe-spdx-creator_1_0"],"specVersion":"3.0.1"},{"type":"CreationInfo","@id":"_:CreationInfo1","created":"2025-06-24T20:32:27Z","createdBy":["http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/agent/OpenEmbedded"],"createdUsing":["http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/tool/oe-spdx-creator_1_0"],"specVersion":"3.0.1"},{"type":"Organization","spdxId":"http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/agent/OpenEmbedded","creationInfo":"_:CreationInfo0","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias"}],"name":"OpenEmbedded"},{"type":"Tool","spdxId":"http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/tool/oe-spdx-creator_1_0","creationInfo":"_:CreationInfo0","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias"}],"name":"oe-spdx-creator 1.0"},{"type":"build_Build","spdxId":"http://spdx.org/spdxdocs/shadow-native-05abf2b1-b55e-5fed-a2f3-3336e7a17f60/3fecce3a60fc9a5fdef2d980308723fa383850a196c15b19ec2aa736de9d8e52/build/recipe","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/deb9dfc088331f72b6adbea5329fd2f7a09411ce16e4f714e3b82a65890be5f4/shadow-native/UNIHASH/build/recipe"}],"name":"shadow-native:do_create_spdx:recipe","build_buildType":"http://openembedded.org/bitbake/do_create_spdx/recipe"},{"type":"SpdxDocument","spdxId":"http://spdx.org/spdxdocs/shadow-native-05abf2b1-b55e-5fed-a2f3-3336e7a17f60/3fecce3a60fc9a5fdef2d980308723fa383850a196c15b19ec2aa736de9d8e52/document/recipe-shadow-native","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/doc/shadow-native/recipe-shadow-native/shadow-native/UNIHASH/document/recipe-shadow-native","https://rdf.openembedded.org/spdx/3.0/link-name":"deb9dfc088331f72b6adbea5329fd2f7a09411ce16e4f714e3b82a65890be5f4"},{"type":"https://rdf.openembedded.org/spdx/3.0/document-extension","https://rdf.openembedded.org/spdx/3.0/is-native":true}],"name":"recipe-shadow-native","profileConformance":["build","core","security","simpleLicensing","software"],"rootElement":["http://spdx.org/spdxdocs/shadow-native-05abf2b1-b55e-5fed-a2f3-3336e7a17f60/3fecce3a60fc9a5fdef2d980308723fa383850a196c15b19ec2aa736de9d8e52/build/recipe"]},{"type":"simplelicensing_LicenseExpression","spdxId":"http://spdx.org/spdxdocs/shadow-native-05abf2b1-b55e-5fed-a2f3-3336e7a17f60/3fecce3a60fc9a5fdef2d980308723fa383850a196c15b19ec2aa736de9d8e52/license/3_27_0/BSD-3-Clause","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/deb9dfc088331f72b6adbea5329fd2f7a09411ce16e4f714e3b82a65890be5f4/shadow-native/UNIHASH/license/3_27_0/BSD-3-Clause"}],"simplelicensing_licenseExpression":"BSD-3-Clause","simplelicensing_licenseListVersion":"3.27.0"},{"type":"Relationship","spdxId":"http://spdx.org/spdxdocs/shadow-native-05abf2b1-b55e-5fed-a2f3-3336e7a17f60/3fecce3a60fc9a5fdef2d980308723fa383850a196c15b19ec2aa736de9d8e52/relationship/3e5f8662b7256710f9189c9f6e458ab5","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/deb9dfc088331f72b6adbea5329fd2f7a09411ce16e4f714e3b82a65890be5f4/shadow-native/UNIHASH/relationship/3e5f8662b7256710f9189c9f6e458ab5"}],"from":"http://spdx.org/spdxdocs/shadow-native-05abf2b1-b55e-5fed-a2f3-3336e7a17f60/3fecce3a60fc9a5fdef2d980308723fa383850a196c15b19ec2aa736de9d8e52/source/2","relationshipType":"hasDeclaredLicense","to":["http://spdxdocs.org/openembedded-alias/by-doc-hash/deb9dfc088331f72b6adbea5329fd2f7a09411ce16e4f714e3b82a65890be5f4/shadow-native/UNIHASH/license/3_27_0/BSD-3-Clause"]},{"type":"Relationship","spdxId":"http://spdx.org/spdxdocs/shadow-native-05abf2b1-b55e-5fed-a2f3-3336e7a17f60/3fecce3a60fc9a5fdef2d980308723fa383850a196c15b19ec2aa736de9d8e52/relationship/4ce5860df612eb36df9d2d1cad7f32ae","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/deb9dfc088331f72b6adbea5329fd2f7a09411ce16e4f714e3b82a65890be5f4/shadow-native/UNIHASH/relationship/4ce5860df612eb36df9d2d1cad7f32ae"}],"from":"http://spdx.org/spdxdocs/shadow-native-05abf2b1-b55e-5fed-a2f3-3336e7a17f60/3fecce3a60fc9a5fdef2d980308723fa383850a196c15b19ec2aa736de9d8e52/source/1","relationshipType":"hasDeclaredLicense","to":["http://spdxdocs.org/openembedded-alias/by-doc-hash/deb9dfc088331f72b6adbea5329fd2f7a09411ce16e4f714e3b82a65890be5f4/shadow-native/UNIHASH/license/3_27_0/BSD-3-Clause"]},{"type":"Relationship","spdxId":"http://spdx.org/spdxdocs/shadow-native-05abf2b1-b55e-5fed-a2f3-3336e7a17f60/3fecce3a60fc9a5fdef2d980308723fa383850a196c15b19ec2aa736de9d8e52/relationship/6b65e352bd57ecc6dc0d2e78e7ed2628","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/deb9dfc088331f72b6adbea5329fd2f7a09411ce16e4f714e3b82a65890be5f4/shadow-native/UNIHASH/relationship/6b65e352bd57ecc6dc0d2e78e7ed2628"}],"from":"http://spdx.org/spdxdocs/shadow-native-05abf2b1-b55e-5fed-a2f3-3336e7a17f60/3fecce3a60fc9a5fdef2d980308723fa383850a196c15b19ec2aa736de9d8e52/source/4","relationshipType":"hasDeclaredLicense","to":["http://spdxdocs.org/openembedded-alias/by-doc-hash/deb9dfc088331f72b6adbea5329fd2f7a09411ce16e4f714e3b82a65890be5f4/shadow-native/UNIHASH/license/3_27_0/BSD-3-Clause"]},{"type":"LifecycleScopedRelationship","spdxId":"http://spdx.org/spdxdocs/shadow-native-05abf2b1-b55e-5fed-a2f3-3336e7a17f60/3fecce3a60fc9a5fdef2d980308723fa383850a196c15b19ec2aa736de9d8e52/relationship/8a59a9c04bc385709c67e00faa547bdb","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/deb9dfc088331f72b6adbea5329fd2f7a09411ce16e4f714e3b82a65890be5f4/shadow-native/UNIHASH/relationship/8a59a9c04bc385709c67e00faa547bdb"}],"from":"http://spdx.org/spdxdocs/shadow-native-05abf2b1-b55e-5fed-a2f3-3336e7a17f60/3fecce3a60fc9a5fdef2d980308723fa383850a196c15b19ec2aa736de9d8e52/build/recipe","relationshipType":"dependsOn","to":["http://spdxdocs.org/openembedded-alias/by-doc-hash/51f21a35aa2175f4c35b15314273194dd186b8b168d3232a993dbb98fe0c50c8/attr-native/UNIHASH/build/recipe","http://spdxdocs.org/openembedded-alias/by-doc-hash/9cc45e3603cae7ce135c3216a9e5faccb8a7cbcf341c43bd07e3e333a6d2aca4/automake-native/UNIHASH/build/recipe","http://spdxdocs.org/openembedded-alias/by-doc-hash/c07b112b9f63935e1c33b3627039e4a27ca0bb24542a71bcbe1ae805d0d69207/pkgconfig-native/UNIHASH/build/recipe","http://spdxdocs.org/openembedded-alias/by-doc-hash/e3574ba33813b0fffaccba318bb72f872a08cc856c8ed034d0e7375c333b4c40/gettext-minimal-native/UNIHASH/build/recipe","http://spdxdocs.org/openembedded-alias/by-doc-hash/e58947bda9390c1359ba3b69716d4710ef9f6f8d8090f3cd9cfb0e5f7ccedf76/libtool-native/UNIHASH/build/recipe","http://spdxdocs.org/openembedded-alias/by-doc-hash/eca6ad4547d28b7368dd74b5b8060361c0cd87df256ed9ebae0e8e0b1efd6c82/libbsd-native/UNIHASH/build/recipe","http://spdxdocs.org/openembedded-alias/by-doc-hash/edde7694b89e3f5c36b6cf8d7fdf96a4469d0409cf4310d38a40b966599057b5/autoconf-native/UNIHASH/build/recipe"],"scope":"build"},{"type":"LifecycleScopedRelationship","spdxId":"http://spdx.org/spdxdocs/shadow-native-05abf2b1-b55e-5fed-a2f3-3336e7a17f60/3fecce3a60fc9a5fdef2d980308723fa383850a196c15b19ec2aa736de9d8e52/relationship/9f492404a17ebdb4e13ee6cae10327f8","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/deb9dfc088331f72b6adbea5329fd2f7a09411ce16e4f714e3b82a65890be5f4/shadow-native/UNIHASH/relationship/9f492404a17ebdb4e13ee6cae10327f8"}],"from":"http://spdx.org/spdxdocs/shadow-native-05abf2b1-b55e-5fed-a2f3-3336e7a17f60/3fecce3a60fc9a5fdef2d980308723fa383850a196c15b19ec2aa736de9d8e52/build/recipe","relationshipType":"hasInput","to":["http://spdx.org/spdxdocs/shadow-native-05abf2b1-b55e-5fed-a2f3-3336e7a17f60/3fecce3a60fc9a5fdef2d980308723fa383850a196c15b19ec2aa736de9d8e52/source/1","http://spdx.org/spdxdocs/shadow-native-05abf2b1-b55e-5fed-a2f3-3336e7a17f60/3fecce3a60fc9a5fdef2d980308723fa383850a196c15b19ec2aa736de9d8e52/source/2","http://spdx.org/spdxdocs/shadow-native-05abf2b1-b55e-5fed-a2f3-3336e7a17f60/3fecce3a60fc9a5fdef2d980308723fa383850a196c15b19ec2aa736de9d8e52/source/3","http://spdx.org/spdxdocs/shadow-native-05abf2b1-b55e-5fed-a2f3-3336e7a17f60/3fecce3a60fc9a5fdef2d980308723fa383850a196c15b19ec2aa736de9d8e52/source/4"],"scope":"build"},{"type":"Relationship","spdxId":"http://spdx.org/spdxdocs/shadow-native-05abf2b1-b55e-5fed-a2f3-3336e7a17f60/3fecce3a60fc9a5fdef2d980308723fa383850a196c15b19ec2aa736de9d8e52/relationship/fca1b718954d95dfc8e8e96e4e976498","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/deb9dfc088331f72b6adbea5329fd2f7a09411ce16e4f714e3b82a65890be5f4/shadow-native/UNIHASH/relationship/fca1b718954d95dfc8e8e96e4e976498"}],"from":"http://spdx.org/spdxdocs/shadow-native-05abf2b1-b55e-5fed-a2f3-3336e7a17f60/3fecce3a60fc9a5fdef2d980308723fa383850a196c15b19ec2aa736de9d8e52/source/3","relationshipType":"hasDeclaredLicense","to":["http://spdxdocs.org/openembedded-alias/by-doc-hash/deb9dfc088331f72b6adbea5329fd2f7a09411ce16e4f714e3b82a65890be5f4/shadow-native/UNIHASH/license/3_27_0/BSD-3-Clause"]},{"type":"software_Package","spdxId":"http://spdx.org/spdxdocs/shadow-native-05abf2b1-b55e-5fed-a2f3-3336e7a17f60/3fecce3a60fc9a5fdef2d980308723fa383850a196c15b19ec2aa736de9d8e52/source/1","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/deb9dfc088331f72b6adbea5329fd2f7a09411ce16e4f714e3b82a65890be5f4/shadow-native/UNIHASH/source/1"}],"name":"shadow-4.18.0.tar.gz","verifiedUsing":[{"type":"Hash","algorithm":"sha256","hashValue":"ae486ce4c0bce55c42d76d8478e428c41586f1da2f89fbf5228243fb4d849db4"}],"software_primaryPurpose":"source","software_downloadLocation":"https://github.com/shadow-maint/shadow/releases/download/4.18.0/shadow-4.18.0.tar.gz"},{"type":"software_File","spdxId":"http://spdx.org/spdxdocs/shadow-native-05abf2b1-b55e-5fed-a2f3-3336e7a17f60/3fecce3a60fc9a5fdef2d980308723fa383850a196c15b19ec2aa736de9d8e52/source/2","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/deb9dfc088331f72b6adbea5329fd2f7a09411ce16e4f714e3b82a65890be5f4/shadow-native/UNIHASH/source/2"}],"name":"useradd","verifiedUsing":[{"type":"Hash","algorithm":"sha256","hashValue":"676d9b042379a7857fb776a128e34fb70009477909554cfa5a287b5fd85e50a5"}],"software_primaryPurpose":"source"},{"type":"software_File","spdxId":"http://spdx.org/spdxdocs/shadow-native-05abf2b1-b55e-5fed-a2f3-3336e7a17f60/3fecce3a60fc9a5fdef2d980308723fa383850a196c15b19ec2aa736de9d8e52/source/3","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/deb9dfc088331f72b6adbea5329fd2f7a09411ce16e4f714e3b82a65890be5f4/shadow-native/UNIHASH/source/3"}],"name":"commonio.c-fix-unexpected-open-failure-in-chroot-env.patch","verifiedUsing":[{"type":"Hash","algorithm":"sha256","hashValue":"ff2b7336405490782efb76a54048392005cdf05c9fe5c024264fd3839843ecf2"}],"software_primaryPurpose":"patch"},{"type":"software_File","spdxId":"http://spdx.org/spdxdocs/shadow-native-05abf2b1-b55e-5fed-a2f3-3336e7a17f60/3fecce3a60fc9a5fdef2d980308723fa383850a196c15b19ec2aa736de9d8e52/source/4","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/deb9dfc088331f72b6adbea5329fd2f7a09411ce16e4f714e3b82a65890be5f4/shadow-native/UNIHASH/source/4"}],"name":"disable_syslog.patch","verifiedUsing":[{"type":"Hash","algorithm":"sha256","hashValue":"3a4bb6e5e76609149011e1bcdd1929390b5a0e8bbb1f3bd78ff6fafd83990dcb"}],"software_primaryPurpose":"patch"},{"type":"security_Vulnerability","spdxId":"http://spdx.org/spdxdocs/shadow-native-05abf2b1-b55e-5fed-a2f3-3336e7a17f60/3fecce3a60fc9a5fdef2d980308723fa383850a196c15b19ec2aa736de9d8e52/vulnerability/CVE-2013-4235","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/deb9dfc088331f72b6adbea5329fd2f7a09411ce16e4f714e3b82a65890be5f4/shadow-native/UNIHASH/vulnerability/CVE-2013-4235"}],"externalIdentifier":[{"type":"ExternalIdentifier","externalIdentifierType":"cve","identifier":"CVE-2013-4235","identifierLocator":["https://cveawg.mitre.org/api/cve/CVE-2013-4235","https://www.cve.org/CVERecord?id=CVE-2013-4235"]}]}]}