{"@context":"https://spdx.org/rdf/3.0.1/spdx-context.jsonld","@graph":[{"type":"CreationInfo","@id":"_:CreationInfo0","created":"2011-04-05T23:00:00Z","createdBy":["http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/agent/OpenEmbedded"],"createdUsing":["http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/tool/oe-spdx-creator_1_0"],"specVersion":"3.0.1"},{"type":"CreationInfo","@id":"_:CreationInfo1","created":"2025-06-24T20:32:27Z","createdBy":["http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/agent/OpenEmbedded"],"createdUsing":["http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/tool/oe-spdx-creator_1_0"],"specVersion":"3.0.1"},{"type":"Organization","spdxId":"http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/agent/OpenEmbedded","creationInfo":"_:CreationInfo0","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias"}],"name":"OpenEmbedded"},{"type":"Tool","spdxId":"http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/tool/oe-spdx-creator_1_0","creationInfo":"_:CreationInfo0","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias"}],"name":"oe-spdx-creator 1.0"},{"type":"build_Build","spdxId":"http://spdx.org/spdxdocs/nativesdk-shadow-e7e73285-7a2e-53e2-94e2-47341af4a81e/0bb3302ddbccc2898be03e9c97f7f5c7509267a83e52797f5c67e6563aac1d69/build/recipe","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/b7ec5b98784e237f78cfcbd514d2e5a657b6383b4ab074e8168a94956bff02f9/nativesdk-shadow/UNIHASH/build/recipe"}],"name":"nativesdk-shadow:do_create_spdx:recipe","build_buildType":"http://openembedded.org/bitbake/do_create_spdx/recipe"},{"type":"SpdxDocument","spdxId":"http://spdx.org/spdxdocs/nativesdk-shadow-e7e73285-7a2e-53e2-94e2-47341af4a81e/0bb3302ddbccc2898be03e9c97f7f5c7509267a83e52797f5c67e6563aac1d69/document/recipe-nativesdk-shadow","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/doc/nativesdk-shadow/recipe-nativesdk-shadow/nativesdk-shadow/UNIHASH/document/recipe-nativesdk-shadow","https://rdf.openembedded.org/spdx/3.0/link-name":"b7ec5b98784e237f78cfcbd514d2e5a657b6383b4ab074e8168a94956bff02f9"}],"name":"recipe-nativesdk-shadow","profileConformance":["build","core","security","simpleLicensing","software"],"rootElement":["http://spdx.org/spdxdocs/nativesdk-shadow-e7e73285-7a2e-53e2-94e2-47341af4a81e/0bb3302ddbccc2898be03e9c97f7f5c7509267a83e52797f5c67e6563aac1d69/build/recipe"]},{"type":"simplelicensing_LicenseExpression","spdxId":"http://spdx.org/spdxdocs/nativesdk-shadow-e7e73285-7a2e-53e2-94e2-47341af4a81e/0bb3302ddbccc2898be03e9c97f7f5c7509267a83e52797f5c67e6563aac1d69/license/3_27_0/BSD-3-Clause","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/b7ec5b98784e237f78cfcbd514d2e5a657b6383b4ab074e8168a94956bff02f9/nativesdk-shadow/UNIHASH/license/3_27_0/BSD-3-Clause"}],"simplelicensing_licenseExpression":"BSD-3-Clause","simplelicensing_licenseListVersion":"3.27.0"},{"type":"Relationship","spdxId":"http://spdx.org/spdxdocs/nativesdk-shadow-e7e73285-7a2e-53e2-94e2-47341af4a81e/0bb3302ddbccc2898be03e9c97f7f5c7509267a83e52797f5c67e6563aac1d69/relationship/5d936c38b2b5c3eeb3b3a6feaf9f2166","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/b7ec5b98784e237f78cfcbd514d2e5a657b6383b4ab074e8168a94956bff02f9/nativesdk-shadow/UNIHASH/relationship/5d936c38b2b5c3eeb3b3a6feaf9f2166"}],"from":"http://spdx.org/spdxdocs/nativesdk-shadow-e7e73285-7a2e-53e2-94e2-47341af4a81e/0bb3302ddbccc2898be03e9c97f7f5c7509267a83e52797f5c67e6563aac1d69/source/1","relationshipType":"hasDeclaredLicense","to":["http://spdxdocs.org/openembedded-alias/by-doc-hash/b7ec5b98784e237f78cfcbd514d2e5a657b6383b4ab074e8168a94956bff02f9/nativesdk-shadow/UNIHASH/license/3_27_0/BSD-3-Clause"]},{"type":"Relationship","spdxId":"http://spdx.org/spdxdocs/nativesdk-shadow-e7e73285-7a2e-53e2-94e2-47341af4a81e/0bb3302ddbccc2898be03e9c97f7f5c7509267a83e52797f5c67e6563aac1d69/relationship/87b58108e70b927d5ff382ab108a3b27","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/b7ec5b98784e237f78cfcbd514d2e5a657b6383b4ab074e8168a94956bff02f9/nativesdk-shadow/UNIHASH/relationship/87b58108e70b927d5ff382ab108a3b27"}],"from":"http://spdx.org/spdxdocs/nativesdk-shadow-e7e73285-7a2e-53e2-94e2-47341af4a81e/0bb3302ddbccc2898be03e9c97f7f5c7509267a83e52797f5c67e6563aac1d69/source/2","relationshipType":"hasDeclaredLicense","to":["http://spdxdocs.org/openembedded-alias/by-doc-hash/b7ec5b98784e237f78cfcbd514d2e5a657b6383b4ab074e8168a94956bff02f9/nativesdk-shadow/UNIHASH/license/3_27_0/BSD-3-Clause"]},{"type":"LifecycleScopedRelationship","spdxId":"http://spdx.org/spdxdocs/nativesdk-shadow-e7e73285-7a2e-53e2-94e2-47341af4a81e/0bb3302ddbccc2898be03e9c97f7f5c7509267a83e52797f5c67e6563aac1d69/relationship/ce0afb9497f62012c80f6d35d2674d23","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/b7ec5b98784e237f78cfcbd514d2e5a657b6383b4ab074e8168a94956bff02f9/nativesdk-shadow/UNIHASH/relationship/ce0afb9497f62012c80f6d35d2674d23"}],"from":"http://spdx.org/spdxdocs/nativesdk-shadow-e7e73285-7a2e-53e2-94e2-47341af4a81e/0bb3302ddbccc2898be03e9c97f7f5c7509267a83e52797f5c67e6563aac1d69/build/recipe","relationshipType":"dependsOn","to":["http://spdxdocs.org/openembedded-alias/by-doc-hash/2de2a04f9c52de1c4155b7ed88d199ad4439226b8533ac9052ef0f6d86ba720c/nativesdk-opkg-utils/UNIHASH/build/recipe","http://spdxdocs.org/openembedded-alias/by-doc-hash/2fc10f87a07bb3a4aef44fa907a6c5788dba6dc3ec7aa1d1af472f28900a4e67/nativesdk-gcc-runtime/UNIHASH/build/recipe","http://spdxdocs.org/openembedded-alias/by-doc-hash/37c8b9845fa5e3ebc400d1085d67e3bdc45ffdc2be8a5d6b2db5fa94c012de18/chrpath-native/UNIHASH/build/recipe","http://spdxdocs.org/openembedded-alias/by-doc-hash/650711aa607c4b059a0fe6a86199dab8a58bea8d9aa33a49fe94f97aae48fd63/gcc-crosssdk-x86_64-tdxsdk-linux/UNIHASH/build/recipe","http://spdxdocs.org/openembedded-alias/by-doc-hash/90637a1c4e3f366277c5e0040974cc4c88123ef2036b07b9603126af0af872d1/nativesdk-libxcrypt/UNIHASH/build/recipe","http://spdxdocs.org/openembedded-alias/by-doc-hash/9cc45e3603cae7ce135c3216a9e5faccb8a7cbcf341c43bd07e3e333a6d2aca4/automake-native/UNIHASH/build/recipe","http://spdxdocs.org/openembedded-alias/by-doc-hash/c07b112b9f63935e1c33b3627039e4a27ca0bb24542a71bcbe1ae805d0d69207/pkgconfig-native/UNIHASH/build/recipe","http://spdxdocs.org/openembedded-alias/by-doc-hash/d29b446343a24eaf7121d3bcd9e78a933846aa1b6abd63db76819da0c2a57669/gettext-native/UNIHASH/build/recipe","http://spdxdocs.org/openembedded-alias/by-doc-hash/e58947bda9390c1359ba3b69716d4710ef9f6f8d8090f3cd9cfb0e5f7ccedf76/libtool-native/UNIHASH/build/recipe","http://spdxdocs.org/openembedded-alias/by-doc-hash/ec95d1050dd09a8f8a75494b81742fe37717b475d9c126ce57fe8557b98d5881/nativesdk-glibc/UNIHASH/build/recipe","http://spdxdocs.org/openembedded-alias/by-doc-hash/edde7694b89e3f5c36b6cf8d7fdf96a4469d0409cf4310d38a40b966599057b5/autoconf-native/UNIHASH/build/recipe"],"scope":"build"},{"type":"LifecycleScopedRelationship","spdxId":"http://spdx.org/spdxdocs/nativesdk-shadow-e7e73285-7a2e-53e2-94e2-47341af4a81e/0bb3302ddbccc2898be03e9c97f7f5c7509267a83e52797f5c67e6563aac1d69/relationship/dd42109f912c55ff4f7e62adcc795a18","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/b7ec5b98784e237f78cfcbd514d2e5a657b6383b4ab074e8168a94956bff02f9/nativesdk-shadow/UNIHASH/relationship/dd42109f912c55ff4f7e62adcc795a18"}],"from":"http://spdx.org/spdxdocs/nativesdk-shadow-e7e73285-7a2e-53e2-94e2-47341af4a81e/0bb3302ddbccc2898be03e9c97f7f5c7509267a83e52797f5c67e6563aac1d69/build/recipe","relationshipType":"hasInput","to":["http://spdx.org/spdxdocs/nativesdk-shadow-e7e73285-7a2e-53e2-94e2-47341af4a81e/0bb3302ddbccc2898be03e9c97f7f5c7509267a83e52797f5c67e6563aac1d69/source/1","http://spdx.org/spdxdocs/nativesdk-shadow-e7e73285-7a2e-53e2-94e2-47341af4a81e/0bb3302ddbccc2898be03e9c97f7f5c7509267a83e52797f5c67e6563aac1d69/source/2"],"scope":"build"},{"type":"software_Package","spdxId":"http://spdx.org/spdxdocs/nativesdk-shadow-e7e73285-7a2e-53e2-94e2-47341af4a81e/0bb3302ddbccc2898be03e9c97f7f5c7509267a83e52797f5c67e6563aac1d69/source/1","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/b7ec5b98784e237f78cfcbd514d2e5a657b6383b4ab074e8168a94956bff02f9/nativesdk-shadow/UNIHASH/source/1"}],"name":"shadow-4.18.0.tar.gz","verifiedUsing":[{"type":"Hash","algorithm":"sha256","hashValue":"ae486ce4c0bce55c42d76d8478e428c41586f1da2f89fbf5228243fb4d849db4"}],"software_primaryPurpose":"source","software_downloadLocation":"https://github.com/shadow-maint/shadow/releases/download/4.18.0/shadow-4.18.0.tar.gz"},{"type":"software_File","spdxId":"http://spdx.org/spdxdocs/nativesdk-shadow-e7e73285-7a2e-53e2-94e2-47341af4a81e/0bb3302ddbccc2898be03e9c97f7f5c7509267a83e52797f5c67e6563aac1d69/source/2","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/b7ec5b98784e237f78cfcbd514d2e5a657b6383b4ab074e8168a94956bff02f9/nativesdk-shadow/UNIHASH/source/2"}],"name":"useradd","verifiedUsing":[{"type":"Hash","algorithm":"sha256","hashValue":"676d9b042379a7857fb776a128e34fb70009477909554cfa5a287b5fd85e50a5"}],"software_primaryPurpose":"source"},{"type":"security_Vulnerability","spdxId":"http://spdx.org/spdxdocs/nativesdk-shadow-e7e73285-7a2e-53e2-94e2-47341af4a81e/0bb3302ddbccc2898be03e9c97f7f5c7509267a83e52797f5c67e6563aac1d69/vulnerability/CVE-2013-4235","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/b7ec5b98784e237f78cfcbd514d2e5a657b6383b4ab074e8168a94956bff02f9/nativesdk-shadow/UNIHASH/vulnerability/CVE-2013-4235"}],"externalIdentifier":[{"type":"ExternalIdentifier","externalIdentifierType":"cve","identifier":"CVE-2013-4235","identifierLocator":["https://cveawg.mitre.org/api/cve/CVE-2013-4235","https://www.cve.org/CVERecord?id=CVE-2013-4235"]}]}]}