{"@context":"https://spdx.org/rdf/3.0.1/spdx-context.jsonld","@graph":[{"type":"CreationInfo","@id":"_:CreationInfo0","created":"2011-04-05T23:00:00Z","createdBy":["http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/agent/OpenEmbedded"],"createdUsing":["http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/tool/oe-spdx-creator_1_0"],"specVersion":"3.0.1"},{"type":"CreationInfo","@id":"_:CreationInfo1","created":"2025-03-08T12:35:35Z","createdBy":["http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/agent/OpenEmbedded"],"createdUsing":["http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/tool/oe-spdx-creator_1_0"],"specVersion":"3.0.1"},{"type":"Organization","spdxId":"http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/agent/OpenEmbedded","creationInfo":"_:CreationInfo0","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias"}],"name":"OpenEmbedded"},{"type":"Tool","spdxId":"http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/tool/oe-spdx-creator_1_0","creationInfo":"_:CreationInfo0","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias"}],"name":"oe-spdx-creator 1.0"},{"type":"build_Build","spdxId":"http://spdx.org/spdxdocs/cairo-native-1194a49c-5036-5647-98a9-2052df90f0c2/ee7712e91653b36f92ef0789dad314ca467ca36927552ad8f100e98541277741/build/recipe","build_buildType":"http://openembedded.org/bitbake/do_create_spdx/recipe","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/72f02afdb0b12ad25f1c61fb3aebf21efe7f6f4b3fc94386e1cdec31c3dfff45/cairo-native/UNIHASH/build/recipe"}],"name":"cairo-native:do_create_spdx:recipe"},{"type":"SpdxDocument","spdxId":"http://spdx.org/spdxdocs/cairo-native-1194a49c-5036-5647-98a9-2052df90f0c2/ee7712e91653b36f92ef0789dad314ca467ca36927552ad8f100e98541277741/document/build-cairo-native","profileConformance":["build","core","security","simpleLicensing","software"],"rootElement":["http://spdx.org/spdxdocs/cairo-native-1194a49c-5036-5647-98a9-2052df90f0c2/ee7712e91653b36f92ef0789dad314ca467ca36927552ad8f100e98541277741/build/recipe"],"creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/doc/cairo-native/build-cairo-native/cairo-native/UNIHASH/document/build-cairo-native","https://rdf.openembedded.org/spdx/3.0/link-name":"72f02afdb0b12ad25f1c61fb3aebf21efe7f6f4b3fc94386e1cdec31c3dfff45"},{"type":"https://rdf.openembedded.org/spdx/3.0/document-extension","https://rdf.openembedded.org/spdx/3.0/is-native":true}],"name":"build-cairo-native"},{"type":"simplelicensing_LicenseExpression","spdxId":"http://spdx.org/spdxdocs/cairo-native-1194a49c-5036-5647-98a9-2052df90f0c2/ee7712e91653b36f92ef0789dad314ca467ca36927552ad8f100e98541277741/license/3_28_0/__MPL-1_1_OR_LGPL-2_1-only___AND_GPL-3_0-or-later","simplelicensing_licenseExpression":"( MPL-1.1 OR LGPL-2.1-only ) AND GPL-3.0-or-later","simplelicensing_licenseListVersion":"3.28.0","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/72f02afdb0b12ad25f1c61fb3aebf21efe7f6f4b3fc94386e1cdec31c3dfff45/cairo-native/UNIHASH/license/3_28_0/__MPL-1_1_OR_LGPL-2_1-only___AND_GPL-3_0-or-later"}]},{"type":"Relationship","spdxId":"http://spdx.org/spdxdocs/cairo-native-1194a49c-5036-5647-98a9-2052df90f0c2/ee7712e91653b36f92ef0789dad314ca467ca36927552ad8f100e98541277741/relationship/905519ec68a501a9d257dd5247eb78b3","from":"http://spdx.org/spdxdocs/cairo-native-1194a49c-5036-5647-98a9-2052df90f0c2/ee7712e91653b36f92ef0789dad314ca467ca36927552ad8f100e98541277741/source/1","relationshipType":"hasDeclaredLicense","to":["http://spdxdocs.org/openembedded-alias/by-doc-hash/72f02afdb0b12ad25f1c61fb3aebf21efe7f6f4b3fc94386e1cdec31c3dfff45/cairo-native/UNIHASH/license/3_28_0/__MPL-1_1_OR_LGPL-2_1-only___AND_GPL-3_0-or-later"],"creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/72f02afdb0b12ad25f1c61fb3aebf21efe7f6f4b3fc94386e1cdec31c3dfff45/cairo-native/UNIHASH/relationship/905519ec68a501a9d257dd5247eb78b3"}]},{"type":"LifecycleScopedRelationship","spdxId":"http://spdx.org/spdxdocs/cairo-native-1194a49c-5036-5647-98a9-2052df90f0c2/ee7712e91653b36f92ef0789dad314ca467ca36927552ad8f100e98541277741/relationship/abaa568ce4918eeef598878435fc5799","scope":"build","from":"http://spdx.org/spdxdocs/cairo-native-1194a49c-5036-5647-98a9-2052df90f0c2/ee7712e91653b36f92ef0789dad314ca467ca36927552ad8f100e98541277741/build/recipe","relationshipType":"dependsOn","to":["http://spdxdocs.org/openembedded-alias/by-doc-hash/143af7ad7fdf2f5a328b29318e5aaa7e876baca0b9cf7a33b76b08bcfde75a10/pixman-native/UNIHASH/build/recipe","http://spdxdocs.org/openembedded-alias/by-doc-hash/379a347f9013bbb129fe8e2341a7131a71dd862ee3a179144aaa175ccf68ed7e/libx11-native/UNIHASH/build/recipe","http://spdxdocs.org/openembedded-alias/by-doc-hash/424b6ac0acc9f20d9ba00c09f47002bc6e9d6af7f6aa6170f0687fa6985d7d36/glib-2.0-native/UNIHASH/build/recipe","http://spdxdocs.org/openembedded-alias/by-doc-hash/48f93784357609ad5cce240a9fc1f0a545d3f386ea7a4016c314fcb50a6ac085/zlib-native/UNIHASH/build/recipe","http://spdxdocs.org/openembedded-alias/by-doc-hash/529f94d63c77ec960dded099b3c9e79b189d36bbb6a62118c8116dc4ac65145c/python3-native/UNIHASH/build/recipe","http://spdxdocs.org/openembedded-alias/by-doc-hash/59360d5a19984050777815495c76bc8b1346cabf1acc9e3df7c8a7b6aa25fa1a/ninja-native/UNIHASH/build/recipe","http://spdxdocs.org/openembedded-alias/by-doc-hash/59bde57f02a1a2b75c1da9a7d8fe804805725a736fcdc6681cdcacf304038acd/meson-native/UNIHASH/build/recipe","http://spdxdocs.org/openembedded-alias/by-doc-hash/7a26f04eb17b62585c06085d2720b4c3f5bc087e5f15e0d5321fe39fe79afd3e/freetype-native/UNIHASH/build/recipe","http://spdxdocs.org/openembedded-alias/by-doc-hash/9abdf7ef85fbf43833318e9479176191b2e3e1ddf0cc72337e9b25d7c0cb0e3b/libxcb-native/UNIHASH/build/recipe","http://spdxdocs.org/openembedded-alias/by-doc-hash/a2ff9436ad35c7f5b214a4cc65ee5d19e9dcc1d3a35d7ce59750e659b7f21875/libpng-native/UNIHASH/build/recipe","http://spdxdocs.org/openembedded-alias/by-doc-hash/b4514ef7c35e1d7edfa84a1b0a41078ed62fe2a04f504482efd303815d3d8d67/libxrender-native/UNIHASH/build/recipe","http://spdxdocs.org/openembedded-alias/by-doc-hash/bdd47fc83e4d99b005f123f2c76fd24f9465075f5fa3f301f3987f152e28561b/fontconfig-native/UNIHASH/build/recipe","http://spdxdocs.org/openembedded-alias/by-doc-hash/cf0acec3072732d8c7c1cb71f0b09ea7c342d83dc0ac63c4057597198f6a4ecf/libxext-native/UNIHASH/build/recipe","http://spdxdocs.org/openembedded-alias/by-doc-hash/df89af7bd78400ccbfc0a15b5cffe6954b767d69148e84a74ddc967574f3daab/pkgconf-native/UNIHASH/build/recipe","http://spdxdocs.org/openembedded-alias/by-doc-hash/e5c6f86bf3027990f5e15bd3fae1af3d5c2fdf66bbc8736a162f8d98e553677e/gtk-doc-native/UNIHASH/build/recipe"],"creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/72f02afdb0b12ad25f1c61fb3aebf21efe7f6f4b3fc94386e1cdec31c3dfff45/cairo-native/UNIHASH/relationship/abaa568ce4918eeef598878435fc5799"}]},{"type":"LifecycleScopedRelationship","spdxId":"http://spdx.org/spdxdocs/cairo-native-1194a49c-5036-5647-98a9-2052df90f0c2/ee7712e91653b36f92ef0789dad314ca467ca36927552ad8f100e98541277741/relationship/b502ce8b868335957a8020bf38946963","scope":"build","from":"http://spdx.org/spdxdocs/cairo-native-1194a49c-5036-5647-98a9-2052df90f0c2/ee7712e91653b36f92ef0789dad314ca467ca36927552ad8f100e98541277741/build/recipe","relationshipType":"hasInput","to":["http://spdx.org/spdxdocs/cairo-native-1194a49c-5036-5647-98a9-2052df90f0c2/ee7712e91653b36f92ef0789dad314ca467ca36927552ad8f100e98541277741/source/1","http://spdx.org/spdxdocs/cairo-native-1194a49c-5036-5647-98a9-2052df90f0c2/ee7712e91653b36f92ef0789dad314ca467ca36927552ad8f100e98541277741/source/2"],"creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/72f02afdb0b12ad25f1c61fb3aebf21efe7f6f4b3fc94386e1cdec31c3dfff45/cairo-native/UNIHASH/relationship/b502ce8b868335957a8020bf38946963"}]},{"type":"Relationship","spdxId":"http://spdx.org/spdxdocs/cairo-native-1194a49c-5036-5647-98a9-2052df90f0c2/ee7712e91653b36f92ef0789dad314ca467ca36927552ad8f100e98541277741/relationship/f1565aae94d466d771d94c2482fd0336","from":"http://spdx.org/spdxdocs/cairo-native-1194a49c-5036-5647-98a9-2052df90f0c2/ee7712e91653b36f92ef0789dad314ca467ca36927552ad8f100e98541277741/source/2","relationshipType":"hasDeclaredLicense","to":["http://spdxdocs.org/openembedded-alias/by-doc-hash/72f02afdb0b12ad25f1c61fb3aebf21efe7f6f4b3fc94386e1cdec31c3dfff45/cairo-native/UNIHASH/license/3_28_0/__MPL-1_1_OR_LGPL-2_1-only___AND_GPL-3_0-or-later"],"creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/72f02afdb0b12ad25f1c61fb3aebf21efe7f6f4b3fc94386e1cdec31c3dfff45/cairo-native/UNIHASH/relationship/f1565aae94d466d771d94c2482fd0336"}]},{"type":"software_Package","spdxId":"http://spdx.org/spdxdocs/cairo-native-1194a49c-5036-5647-98a9-2052df90f0c2/ee7712e91653b36f92ef0789dad314ca467ca36927552ad8f100e98541277741/source/1","software_downloadLocation":"http://cairographics.org/releases/cairo-1.18.4.tar.xz","software_primaryPurpose":"source","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/72f02afdb0b12ad25f1c61fb3aebf21efe7f6f4b3fc94386e1cdec31c3dfff45/cairo-native/UNIHASH/source/1"}],"name":"cairo-1.18.4.tar.xz","verifiedUsing":[{"type":"Hash","algorithm":"sha256","hashValue":"445ed8208a6e4823de1226a74ca319d3600e83f6369f99b14265006599c32ccb"}]},{"type":"software_File","spdxId":"http://spdx.org/spdxdocs/cairo-native-1194a49c-5036-5647-98a9-2052df90f0c2/ee7712e91653b36f92ef0789dad314ca467ca36927552ad8f100e98541277741/source/2","software_primaryPurpose":"patch","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/72f02afdb0b12ad25f1c61fb3aebf21efe7f6f4b3fc94386e1cdec31c3dfff45/cairo-native/UNIHASH/source/2"}],"name":"cairo-get_bitmap_surface-bsc1036789-CVE-2017-7475.diff","verifiedUsing":[{"type":"Hash","algorithm":"sha256","hashValue":"73cdc1c353081459b8083cc2f788699074e15536d16e7a3bb9dff6fc2801a0cc"}]}]}