Skip to content

Instantly share code, notes, and snippets.

@bureado

bureado/gist:6cab8aeeb9b4753e310990b58913fc1a Secret

Created June 26, 2021 01:50
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save bureado/6cab8aeeb9b4753e310990b58913fc1a to your computer and use it in GitHub Desktop.
Save bureado/6cab8aeeb9b4753e310990b58913fc1a to your computer and use it in GitHub Desktop.
Download ZIP
Raw
gistfile1.txt
## Document Header
SPDXVersion: SPDX-2.1
DataLicense: CC0-1.0
SPDXID: SPDXRef-DOCUMENT
DocumentName: DEMO-APT-SBOM-v2
DocumentNamespace: https://foo.bar
Creator: Person: bureado
Created: 2021-06-15T19:00:00Z
CreatorComment: <text>See https://gist.github.com/bureado/29e5da5fbf30fcb9bdde83d6c8f6d1b8</text>
## 2.4 Primary Component (described by the SBOM)
PackageName: Debian GNU/Linux 10 (buster)
SPDXID: SPDXRef-docker-debian-latest-4a7a1f401734
PackageComment: <text>This is a Debian GNU/Linux 10 (buster) container running Debian 10.9, obtained from "docker.io/library/debian@sha256:acf7795dc91df17e10effee064bd229580a9c34213b4dba578d64768af5d8c51"</text>
ExternalRef: PACKAGE-MANAGER purl pkg:docker/debian@acf7795dc91df17e10effee064bd229580a9c34213b4dba578d64768af5d8c51
PackageVersion: acf7795dc91df17e10effee064bd229580a9c34213b4dba578d64768af5d8c51
PackageSupplier: Organization: Debian
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-docker-debian-latest-4a7a1f401734
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS NONE
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: adduser
SPDXID: SPDXRef-adduser
PackageComment: <text>PURL is pkg:deb/debian/adduser@3.118?arch=all</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/adduser@3.118?arch=all
PackageVersion: 3.118
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-adduser
Relationship: SPDXRef-adduser CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared:
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256: bd71dd1ab8dcd6005390708f23741d07f1913877affb7604dfd55f85d009aa2b
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: apache2
SPDXID: SPDXRef-apache2
PackageComment: <text>PURL is pkg:deb/debian/apache2@2.4.38-3+deb10u4?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/apache2@2.4.38-3+deb10u4?arch=amd64
PackageVersion: 2.4.38-3+deb10u4
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-apache2
Relationship: SPDXRef-apache2 CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared:
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256:
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: apache2-bin
SPDXID: SPDXRef-apache2-bin
PackageComment: <text>PURL is pkg:deb/debian/apache2-bin@2.4.38-3+deb10u4?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/apache2-bin@2.4.38-3+deb10u4?arch=amd64
PackageVersion: 2.4.38-3+deb10u4
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-apache2-bin
Relationship: SPDXRef-apache2-bin CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: Apache-2.0 Apache-2.0 PCRE GPL-3+ BSD-3-clause-Smrgrav Apache-2.0 Apache-2.0 BSD-2-clause-Darwin Apache-2.0 Apache-2.0 Apache-2.0 Apache-2.0 Expat Apache-2.0 Apache-2.0 Zeus PCRE MD5 GPL-3+ GPL-2+ Haines BSD-2-clause-Darwin Cisco BSD-3-clause-Smrgrav BSD-3-clause-Cambridge Custom Expat
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256:
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: apache2-data
SPDXID: SPDXRef-apache2-data
PackageComment: <text>PURL is pkg:deb/debian/apache2-data@2.4.38-3+deb10u4?arch=all</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/apache2-data@2.4.38-3+deb10u4?arch=all
PackageVersion: 2.4.38-3+deb10u4
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-apache2-data
Relationship: SPDXRef-apache2-data CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared:
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256:
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: apache2-utils
SPDXID: SPDXRef-apache2-utils
PackageComment: <text>PURL is pkg:deb/debian/apache2-utils@2.4.38-3+deb10u4?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/apache2-utils@2.4.38-3+deb10u4?arch=amd64
PackageVersion: 2.4.38-3+deb10u4
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-apache2-utils
Relationship: SPDXRef-apache2-utils CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared:
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256:
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: apt
SPDXID: SPDXRef-apt
PackageComment: <text>PURL is pkg:deb/debian/apt@1.8.2.3?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/apt@1.8.2.3?arch=amd64
PackageVersion: 1.8.2.3
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-apt
Relationship: SPDXRef-apt CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: GPLv2+
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256: 89d691610de7c717abffd2f85932f8e48da71212a1e2e05681855f1f99d1c4f9
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: azure-cli
SPDXID: SPDXRef-azure-cli
PackageComment: <text>PURL is pkg:deb/debian/azure-cli@2.9.0-1~buster?arch=all</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/azure-cli@2.9.0-1~buster?arch=all
PackageVersion: 2.9.0-1~buster
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-azure-cli
Relationship: SPDXRef-azure-cli CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared:
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256:
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: base-files
SPDXID: SPDXRef-base-files
PackageComment: <text>PURL is pkg:deb/debian/base-files@10.3+deb10u9?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/base-files@10.3+deb10u9?arch=amd64
PackageVersion: 10.3+deb10u9
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-base-files
Relationship: SPDXRef-base-files CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared:
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256: a01220a67b386188e412100adcf986d5ad7c5f2d4a04b77f0b85bcafdd1009a1
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: base-passwd
SPDXID: SPDXRef-base-passwd
PackageComment: <text>PURL is pkg:deb/debian/base-passwd@3.5.46?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/base-passwd@3.5.46?arch=amd64
PackageVersion: 3.5.46
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-base-passwd
Relationship: SPDXRef-base-passwd CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: GPL-2 public-domain GPL-2 GPL-2
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256: 2d109edc0719199b6fc1c00ce3ea3fd65e4ae22a591b21f45f299e15b6e84b17
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: bash
SPDXID: SPDXRef-bash
PackageComment: <text>PURL is pkg:deb/debian/bash@5.0-4?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/bash@5.0-4?arch=amd64
PackageVersion: 5.0-4
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-bash
Relationship: SPDXRef-bash CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared:
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256: d07f3528c615545bb182269362926bc171adab565dade3e8c35cb3bae8ad9e5e
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: bsdutils
SPDXID: SPDXRef-bsdutils
PackageComment: <text>PURL is pkg:deb/debian/bsdutils@1:2.33.1-0.1?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/bsdutils@1:2.33.1-0.1?arch=amd64
PackageVersion: 1:2.33.1-0.1
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-bsdutils
Relationship: SPDXRef-bsdutils CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: GPL-2+ GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 public-domain BSD-4-clause MIT MIT BSD-2-clause BSD-2-clause BSD-2-clause BSD-3-clause BSD-3-clause LGPL-2+ LGPL-2+ LGPL-2+ LGPL-2.1+ LGPL-2.1+ LGPL-2.1+ GPL-3+ LGPL-2.1+ LGPL LGPL-2.1+ LGPL LGPL LGPL-2.1+ LGPL-3+ LGPL-2.1+ GPL-2+ GPL-2+ public-domain GPL-2 GPL-2+ GPL-3+ BSD-2-clause BSD-3-clause BSD-4-clause LGPL LGPL-2+ LGPL-2.1+ LGPL-3+ MIT
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256: 304923c85c084df531443e142b9505e387c6eaf96b5a5b167a43374073052ba3
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: bzip2
SPDXID: SPDXRef-bzip2
PackageComment: <text>PURL is pkg:deb/debian/bzip2@1.0.6-9.2~deb10u1?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/bzip2@1.0.6-9.2~deb10u1?arch=amd64
PackageVersion: 1.0.6-9.2~deb10u1
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-bzip2
Relationship: SPDXRef-bzip2 CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: BSD-variant GPL-2
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256:
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: ca-certificates
SPDXID: SPDXRef-ca-certificates
PackageComment: <text>PURL is pkg:deb/debian/ca-certificates@20200601~deb10u2?arch=all</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/ca-certificates@20200601~deb10u2?arch=all
PackageVersion: 20200601~deb10u2
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-ca-certificates
Relationship: SPDXRef-ca-certificates CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: GPL-2+ MPL-2.0
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256:
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: coreutils
SPDXID: SPDXRef-coreutils
PackageComment: <text>PURL is pkg:deb/debian/coreutils@8.30-3?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/coreutils@8.30-3?arch=amd64
PackageVersion: 8.30-3
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-coreutils
Relationship: SPDXRef-coreutils CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared:
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256: ae6e5cd6e9aaf74d66edded3931a7a6c916625b8b890379189c75574f6856bf4
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: cron
SPDXID: SPDXRef-cron
PackageComment: <text>PURL is pkg:deb/debian/cron@3.0pl1-134+deb10u1?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/cron@3.0pl1-134+deb10u1?arch=amd64
PackageVersion: 3.0pl1-134+deb10u1
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-cron
Relationship: SPDXRef-cron CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256:
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: curl
SPDXID: SPDXRef-curl
PackageComment: <text>PURL is pkg:deb/debian/curl@7.64.0-4+deb10u2?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/curl@7.64.0-4+deb10u2?arch=amd64
PackageVersion: 7.64.0-4+deb10u2
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-curl
Relationship: SPDXRef-curl CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: curl curl curl curl ISC BSD-3-Clause public-domain curl curl curl curl BSD-4-Clause curl BSD-3-Clause BSD-3-Clause curl other other curl curl BSD-3-Clause BSD-4-Clause ISC
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256:
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: dash
SPDXID: SPDXRef-dash
PackageComment: <text>PURL is pkg:deb/debian/dash@0.5.10.2-5?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/dash@0.5.10.2-5?arch=amd64
PackageVersion: 0.5.10.2-5
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-dash
Relationship: SPDXRef-dash CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: BSD-3-Clause FSFULLR FSFULLR FSFUL BSD-3-clause BSD-3-clause BSD-3-clause BSD-3-clause BSD-3-clause BSD-3-clause BSD-3-clause BSD-3-clause BSD-3-clause BSD-3-clause BSD-3-clause BSD-3-clause BSD-3-clause BSD-3-clause BSD-3-clause BSD-3-clause Expat GPL-2+ public-domain BSD-3-clause FSFULLR GPL-2+ BSD-3-clause FSFUL FSFULLR Expat GPL-2+
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256: e4872d9f258e76665317c94c637b4270dc1c15c9cf42da90dbfde0225c7f4564
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: debconf
SPDXID: SPDXRef-debconf
PackageComment: <text>PURL is pkg:deb/debian/debconf@1.5.71?arch=all</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/debconf@1.5.71?arch=all
PackageVersion: 1.5.71
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-debconf
Relationship: SPDXRef-debconf CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: BSD-2-clause BSD-2-clause BSD-2-clause BSD-2-clause BSD-2-clause BSD-2-clause BSD-2-clause BSD-2-clause BSD-2-clause BSD-2-clause BSD-2-clause BSD-2-clause
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256: 27a3138139b8cce80a814db942688413d94c8f538651a9944d616962a8f71fae
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: debian-archive-keyring
SPDXID: SPDXRef-debian-archive-keyring
PackageComment: <text>PURL is pkg:deb/debian/debian-archive-keyring@2019.1+deb10u1?arch=all</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/debian-archive-keyring@2019.1+deb10u1?arch=all
PackageVersion: 2019.1+deb10u1
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-debian-archive-keyring
Relationship: SPDXRef-debian-archive-keyring CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared:
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256: 54f799da5506e144f1ab1563a45c6914c58850b2c9d5ac5f4800d5a39f84dc9e
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: debianutils
SPDXID: SPDXRef-debianutils
PackageComment: <text>PURL is pkg:deb/debian/debianutils@4.8.6.1?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/debianutils@4.8.6.1?arch=amd64
PackageVersion: 4.8.6.1
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-debianutils
Relationship: SPDXRef-debianutils CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared:
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256: a61f69765e0871d1d9c1f9915d0c7fbd2d5365d02f2fe99039f3dff64fd527e9
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: diffutils
SPDXID: SPDXRef-diffutils
PackageComment: <text>PURL is pkg:deb/debian/diffutils@1:3.7-3?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/diffutils@1:3.7-3?arch=amd64
PackageVersion: 1:3.7-3
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-diffutils
Relationship: SPDXRef-diffutils CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared:
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256: f3b681c0d66a0dae75d188b3e294c1301b33189841fd6a1155b6d28048726770
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: distro-info-data
SPDXID: SPDXRef-distro-info-data
PackageComment: <text>PURL is pkg:deb/debian/distro-info-data@0.41+deb10u3?arch=all</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/distro-info-data@0.41+deb10u3?arch=all
PackageVersion: 0.41+deb10u3
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-distro-info-data
Relationship: SPDXRef-distro-info-data CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: ISC
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256:
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: dpkg
SPDXID: SPDXRef-dpkg
PackageComment: <text>PURL is pkg:deb/debian/dpkg@1.19.7?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/dpkg@1.19.7?arch=amd64
PackageVersion: 1.19.7
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-dpkg
Relationship: SPDXRef-dpkg CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: GPL-2+ GPL-2+ GPL-2 BSD-2-clause public-domain-s-s-d public-domain-md5 GPL-2+ GPL-2 BSD-2-clause
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256: 4eaa78124b0a5495fd06afefc79f7c96a7f7795c6b6a45349ac4173b0c9b7362
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: e2fsprogs
SPDXID: SPDXRef-e2fsprogs
PackageComment: <text>PURL is pkg:deb/debian/e2fsprogs@1.44.5-1+deb10u3?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/e2fsprogs@1.44.5-1+deb10u3?arch=amd64
PackageVersion: 1.44.5-1+deb10u3
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-e2fsprogs
Relationship: SPDXRef-e2fsprogs CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared:
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256: 3e6f9134334e16b818d81c84bbe3173fef55e4a1ea2b092b2482a2b4f089891c
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: etcd-client
SPDXID: SPDXRef-etcd-client
PackageComment: <text>PURL is pkg:deb/debian/etcd-client@3.2.26+dfsg-3+b1?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/etcd-client@3.2.26+dfsg-3+b1?arch=amd64
PackageVersion: 3.2.26+dfsg-3+b1
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-etcd-client
Relationship: SPDXRef-etcd-client CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared:
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256:
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: etcd-server
SPDXID: SPDXRef-etcd-server
PackageComment: <text>PURL is pkg:deb/debian/etcd-server@3.2.26+dfsg-3+b1?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/etcd-server@3.2.26+dfsg-3+b1?arch=amd64
PackageVersion: 3.2.26+dfsg-3+b1
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-etcd-server
Relationship: SPDXRef-etcd-server CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared:
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256:
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: exim4-base
SPDXID: SPDXRef-exim4-base
PackageComment: <text>PURL is pkg:deb/debian/exim4-base@4.92-8+deb10u6?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/exim4-base@4.92-8+deb10u6?arch=amd64
PackageVersion: 4.92-8+deb10u6
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-exim4-base
Relationship: SPDXRef-exim4-base CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared:
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256:
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: exim4-config
SPDXID: SPDXRef-exim4-config
PackageComment: <text>PURL is pkg:deb/debian/exim4-config@4.92-8+deb10u6?arch=all</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/exim4-config@4.92-8+deb10u6?arch=all
PackageVersion: 4.92-8+deb10u6
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-exim4-config
Relationship: SPDXRef-exim4-config CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared:
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256:
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: exim4-daemon-light
SPDXID: SPDXRef-exim4-daemon-light
PackageComment: <text>PURL is pkg:deb/debian/exim4-daemon-light@4.92-8+deb10u6?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/exim4-daemon-light@4.92-8+deb10u6?arch=amd64
PackageVersion: 4.92-8+deb10u6
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-exim4-daemon-light
Relationship: SPDXRef-exim4-daemon-light CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared:
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256:
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: fdisk
SPDXID: SPDXRef-fdisk
PackageComment: <text>PURL is pkg:deb/debian/fdisk@2.33.1-0.1?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/fdisk@2.33.1-0.1?arch=amd64
PackageVersion: 2.33.1-0.1
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-fdisk
Relationship: SPDXRef-fdisk CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: GPL-2+ GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 public-domain BSD-4-clause MIT MIT BSD-2-clause BSD-2-clause BSD-2-clause BSD-3-clause BSD-3-clause LGPL-2+ LGPL-2+ LGPL-2+ LGPL-2.1+ LGPL-2.1+ LGPL-2.1+ GPL-3+ LGPL-2.1+ LGPL LGPL-2.1+ LGPL LGPL LGPL-2.1+ LGPL-3+ LGPL-2.1+ GPL-2+ GPL-2+ public-domain GPL-2 GPL-2+ GPL-3+ BSD-2-clause BSD-3-clause BSD-4-clause LGPL LGPL-2+ LGPL-2.1+ LGPL-3+ MIT
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256: 8d2bb3aa11c56220bf6d460330d2043d06ab712d6efd5b5ef225f2215c7878d3
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: file
SPDXID: SPDXRef-file
PackageComment: <text>PURL is pkg:deb/debian/file@1:5.35-4+deb10u2?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/file@1:5.35-4+deb10u2?arch=amd64
PackageVersion: 1:5.35-4+deb10u2
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-file
Relationship: SPDXRef-file CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: BSD-2-Clause-alike BSD-2-Clause-alike BSD-2-Clause-alike public-domain BSD-2-Clause-netbsd BSD-2-Clause-netbsd BSD-2-Clause-netbsd BSD-2-Clause-regents MIT-Old-Style-with-legal-disclaimer-2 BSD-2-Clause-alike BSD-2-Clause-alike public-domain BSD-2-Clause-netbsd BSD-2-Clause-regents MIT-Old-Style-with-legal-disclaimer-2
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256:
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: findutils
SPDXID: SPDXRef-findutils
PackageComment: <text>PURL is pkg:deb/debian/findutils@4.6.0+git+20190209-2?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/findutils@4.6.0+git+20190209-2?arch=amd64
PackageVersion: 4.6.0+git+20190209-2
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-findutils
Relationship: SPDXRef-findutils CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared:
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256: 1dea4dc0c8ee9addff8ca1126f40edf07e454a5f09f11179d8de4218588c5337
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: gcc-8-base
SPDXID: SPDXRef-gcc-8-base
PackageComment: <text>PURL is pkg:deb/debian/gcc-8-base@8.3.0-6?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/gcc-8-base@8.3.0-6?arch=amd64
PackageVersion: 8.3.0-6
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-gcc-8-base
Relationship: SPDXRef-gcc-8-base CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared:
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256: 1b00f7cef567645a7e695caf6c1ad395577e7d2e903820097ebd3496ddcfcc84
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: gpgv
SPDXID: SPDXRef-gpgv
PackageComment: <text>PURL is pkg:deb/debian/gpgv@2.2.12-1+deb10u1?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/gpgv@2.2.12-1+deb10u1?arch=amd64
PackageVersion: 2.2.12-1+deb10u1
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-gpgv
Relationship: SPDXRef-gpgv CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: GPL-3+ GPL-3+ permissive permissive LGPL-2.1+ Expat GPL-3+ GPL-3+ LGPL-3+ GPL-3+ RFC-Reference TinySCHEME GPL-3+ CC0-1.0 TinySCHEME permissive RFC-Reference GPL-3+ LGPL-3+ LGPL-2.1+ BSD-3-clause Expat CC0-1.0
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256: ae81b7fad02a6553e8f4aa55becf591fb5f209f7f946b474e99c5f4b837f109e
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: grep
SPDXID: SPDXRef-grep
PackageComment: <text>PURL is pkg:deb/debian/grep@3.3-1?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/grep@3.3-1?arch=amd64
PackageVersion: 3.3-1
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-grep
Relationship: SPDXRef-grep CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: GPL-3+ GPL-3+ GPL-3+
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256: 149585b7242c3f698f5280b013b3b9a1747a346a22649f71768e077e90b99a17
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: guile-2.2-libs
SPDXID: SPDXRef-guile-2.2-libs
PackageComment: <text>PURL is pkg:deb/debian/guile-2.2-libs@2.2.4+1-2+deb10u1?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/guile-2.2-libs@2.2.4+1-2+deb10u1?arch=amd64
PackageVersion: 2.2.4+1-2+deb10u1
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-guile-2.2-libs
Relationship: SPDXRef-guile-2.2-libs CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared:
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256:
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: gzip
SPDXID: SPDXRef-gzip
PackageComment: <text>PURL is pkg:deb/debian/gzip@1.9-3?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/gzip@1.9-3?arch=amd64
PackageVersion: 1.9-3
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-gzip
Relationship: SPDXRef-gzip CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: GPL-3+ GPL-3+ GFDL-1.3+-no-invariant FSF-manpages GPL-3+ GFDL-1.3+-no-invariant FSF-manpages
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256: 8d1a1d1b73bbb347102e9001371d1ef6891f97262e9dce8dd827032aa5c78d34
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: hostname
SPDXID: SPDXRef-hostname
PackageComment: <text>PURL is pkg:deb/debian/hostname@3.21?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/hostname@3.21?arch=amd64
PackageVersion: 3.21
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-hostname
Relationship: SPDXRef-hostname CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: License:
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256: 869a81b7837e9a90125c511ae9dc2e7118fb3f53b99a045ced541e2564ea0d29
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: init-system-helpers
SPDXID: SPDXRef-init-system-helpers
PackageComment: <text>PURL is pkg:deb/debian/init-system-helpers@1.56+nmu1?arch=all</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/init-system-helpers@1.56+nmu1?arch=all
PackageVersion: 1.56+nmu1
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-init-system-helpers
Relationship: SPDXRef-init-system-helpers CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: BSD-3-clause BSD-3-clause GPL-2+ GPL-2+ GPL-2+ GPL-2+ BSD-3-clause
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256: c457150e2faa01e6677a1d91aa76a868d2b7114deb17ade2ccc2b99235310805
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: iproute2
SPDXID: SPDXRef-iproute2
PackageComment: <text>PURL is pkg:deb/debian/iproute2@4.20.0-2+deb10u1?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/iproute2@4.20.0-2+deb10u1?arch=amd64
PackageVersion: 4.20.0-2+deb10u1
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-iproute2
Relationship: SPDXRef-iproute2 CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: GPL-2 GPL-2 GPL-2
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256:
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: iputils-ping
SPDXID: SPDXRef-iputils-ping
PackageComment: <text>PURL is pkg:deb/debian/iputils-ping@3:20180629-2+deb10u2?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/iputils-ping@3:20180629-2+deb10u2?arch=amd64
PackageVersion: 3:20180629-2+deb10u2
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-iputils-ping
Relationship: SPDXRef-iputils-ping CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared:
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256:
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: krb5-locales
SPDXID: SPDXRef-krb5-locales
PackageComment: <text>PURL is pkg:deb/debian/krb5-locales@1.17-3+deb10u1?arch=all</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/krb5-locales@1.17-3+deb10u1?arch=all
PackageVersion: 1.17-3+deb10u1
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-krb5-locales
Relationship: SPDXRef-krb5-locales CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared:
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256:
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: libacl1
SPDXID: SPDXRef-libacl1
PackageComment: <text>PURL is pkg:deb/debian/libacl1@2.2.53-4?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/libacl1@2.2.53-4?arch=amd64
PackageVersion: 2.2.53-4
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-libacl1
Relationship: SPDXRef-libacl1 CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: GPL-2+ LGPL-2+
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256: ca1b512a4a09317018408bbb65ee3f48abdf03dcb8da671554a1f2bd8e5d4de4
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: libapache2-mod-php7.3
SPDXID: SPDXRef-libapache2-mod-php7.3
PackageComment: <text>PURL is pkg:deb/debian/libapache2-mod-php7.3@7.3.27-1~deb10u1?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/libapache2-mod-php7.3@7.3.27-1~deb10u1?arch=amd64
PackageVersion: 7.3.27-1~deb10u1
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-libapache2-mod-php7.3
Relationship: SPDXRef-libapache2-mod-php7.3 CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared:
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256:
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: libapr1
SPDXID: SPDXRef-libapr1
PackageComment: <text>PURL is pkg:deb/debian/libapr1@1.6.5-1+b1?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/libapr1@1.6.5-1+b1?arch=amd64
PackageVersion: 1.6.5-1+b1
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-libapr1
Relationship: SPDXRef-libapr1 CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared:
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256:
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: libaprutil1
SPDXID: SPDXRef-libaprutil1
PackageComment: <text>PURL is pkg:deb/debian/libaprutil1@1.6.1-4?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/libaprutil1@1.6.1-4?arch=amd64
PackageVersion: 1.6.1-4
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-libaprutil1
Relationship: SPDXRef-libaprutil1 CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared:
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256:
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: libaprutil1-dbd-sqlite3
SPDXID: SPDXRef-libaprutil1-dbd-sqlite3
PackageComment: <text>PURL is pkg:deb/debian/libaprutil1-dbd-sqlite3@1.6.1-4?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/libaprutil1-dbd-sqlite3@1.6.1-4?arch=amd64
PackageVersion: 1.6.1-4
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-libaprutil1-dbd-sqlite3
Relationship: SPDXRef-libaprutil1-dbd-sqlite3 CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared:
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256:
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: libaprutil1-ldap
SPDXID: SPDXRef-libaprutil1-ldap
PackageComment: <text>PURL is pkg:deb/debian/libaprutil1-ldap@1.6.1-4?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/libaprutil1-ldap@1.6.1-4?arch=amd64
PackageVersion: 1.6.1-4
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-libaprutil1-ldap
Relationship: SPDXRef-libaprutil1-ldap CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared:
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256:
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: libapt-pkg5.0
SPDXID: SPDXRef-libapt-pkg5.0
PackageComment: <text>PURL is pkg:deb/debian/libapt-pkg5.0@1.8.2.3?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/libapt-pkg5.0@1.8.2.3?arch=amd64
PackageVersion: 1.8.2.3
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-libapt-pkg5.0
Relationship: SPDXRef-libapt-pkg5.0 CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: GPLv2+
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256: f56cefd15f3d36cfcf2b3810992059568de0838d5f39e7334052a8056a83d82c
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: libargon2-1
SPDXID: SPDXRef-libargon2-1
PackageComment: <text>PURL is pkg:deb/debian/libargon2-1@0~20171227-0.2?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/libargon2-1@0~20171227-0.2?arch=amd64
PackageVersion: 0~20171227-0.2
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-libargon2-1
Relationship: SPDXRef-libargon2-1 CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: CC0 CC0 CC0 CC0 CC0 CC0 Apache-2.0
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256:
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: libattr1
SPDXID: SPDXRef-libattr1
PackageComment: <text>PURL is pkg:deb/debian/libattr1@1:2.4.48-4?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/libattr1@1:2.4.48-4?arch=amd64
PackageVersion: 1:2.4.48-4
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-libattr1
Relationship: SPDXRef-libattr1 CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: GPL-2+ LGPL-2+
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256: 4ba903c087f2b9661e067ca210cfd83ef2dc1a162a15b8735997bfa96ac8e760
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: libaudit-common
SPDXID: SPDXRef-libaudit-common
PackageComment: <text>PURL is pkg:deb/debian/libaudit-common@1:2.8.4-3?arch=all</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/libaudit-common@1:2.8.4-3?arch=all
PackageVersion: 1:2.8.4-3
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-libaudit-common
Relationship: SPDXRef-libaudit-common CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: GPL-2 GPL-2 LGPL-2.1 GPL-2 GPL-2
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256: 4e51dc247cde083528d410f525c6157b08be8b69511891cf972bc87025311371
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: libaudit1
SPDXID: SPDXRef-libaudit1
PackageComment: <text>PURL is pkg:deb/debian/libaudit1@1:2.8.4-3?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/libaudit1@1:2.8.4-3?arch=amd64
PackageVersion: 1:2.8.4-3
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-libaudit1
Relationship: SPDXRef-libaudit1 CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: GPL-2 GPL-2 LGPL-2.1 GPL-2 GPL-2
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256: 21f2b3dfbe7db9e15ff9c01e1ad8db35a0adf41b70a3aa71e809f7631fc2253d
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: libblkid1
SPDXID: SPDXRef-libblkid1
PackageComment: <text>PURL is pkg:deb/debian/libblkid1@2.33.1-0.1?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/libblkid1@2.33.1-0.1?arch=amd64
PackageVersion: 2.33.1-0.1
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-libblkid1
Relationship: SPDXRef-libblkid1 CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: GPL-2+ GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 public-domain BSD-4-clause MIT MIT BSD-2-clause BSD-2-clause BSD-2-clause BSD-3-clause BSD-3-clause LGPL-2+ LGPL-2+ LGPL-2+ LGPL-2.1+ LGPL-2.1+ LGPL-2.1+ GPL-3+ LGPL-2.1+ LGPL LGPL-2.1+ LGPL LGPL LGPL-2.1+ LGPL-3+ LGPL-2.1+ GPL-2+ GPL-2+ public-domain GPL-2 GPL-2+ GPL-3+ BSD-2-clause BSD-3-clause BSD-4-clause LGPL LGPL-2+ LGPL-2.1+ LGPL-3+ MIT
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256: 0b15f3eb3cf2fbe540f99ae1c9fd5ec1730f2245b99e31c91755de71b967343a
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: libbrotli1
SPDXID: SPDXRef-libbrotli1
PackageComment: <text>PURL is pkg:deb/debian/libbrotli1@1.0.7-2+deb10u1?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/libbrotli1@1.0.7-2+deb10u1?arch=amd64
PackageVersion: 1.0.7-2+deb10u1
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-libbrotli1
Relationship: SPDXRef-libbrotli1 CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: MIT MIT MIT
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256:
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: libbsd0
SPDXID: SPDXRef-libbsd0
PackageComment: <text>PURL is pkg:deb/debian/libbsd0@0.9.1-2+deb10u1?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/libbsd0@0.9.1-2+deb10u1?arch=amd64
PackageVersion: 0.9.1-2+deb10u1
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-libbsd0
Relationship: SPDXRef-libbsd0 CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: BSD-3-clause BSD-4-clause-Niels-Provos BSD-4-clause-Christopher-G-Demetriou BSD-3-clause BSD-3-clause-Regents BSD-3-clause-Regents BSD-3-clause-author BSD-3-clause-John-Birrell BSD-5-clause-Peter-Wemm BSD-2-clause-NetBSD BSD-2-clause BSD-2-clause-verbatim BSD-2-clause-author ISC ISC-Original Expat public-domain Beerware BSD-3-clause-Regents BSD-3-clause-author BSD-3-clause BSD-2-clause-NetBSD BSD-2-clause-author BSD-2-clause
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256:
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: libbz2-1.0
SPDXID: SPDXRef-libbz2-1.0
PackageComment: <text>PURL is pkg:deb/debian/libbz2-1.0@1.0.6-9.2~deb10u1?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/libbz2-1.0@1.0.6-9.2~deb10u1?arch=amd64
PackageVersion: 1.0.6-9.2~deb10u1
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-libbz2-1.0
Relationship: SPDXRef-libbz2-1.0 CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: BSD-variant GPL-2
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256: 238193cbaa71cc5365ef2aa5ad45de8521ac38dd54f4ab53bafa7de15046fa89
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: libc-bin
SPDXID: SPDXRef-libc-bin
PackageComment: <text>PURL is pkg:deb/debian/libc-bin@2.28-10?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/libc-bin@2.28-10?arch=amd64
PackageVersion: 2.28-10
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-libc-bin
Relationship: SPDXRef-libc-bin CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared:
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256: 00b5e84af0ee76c2a025e98cdccc6b6b11c62736f4dffef2362ddeb7e77a76f7
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: libc-l10n
SPDXID: SPDXRef-libc-l10n
PackageComment: <text>PURL is pkg:deb/debian/libc-l10n@2.28-10?arch=all</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/libc-l10n@2.28-10?arch=all
PackageVersion: 2.28-10
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-libc-l10n
Relationship: SPDXRef-libc-l10n CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared:
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256:
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: libc6
SPDXID: SPDXRef-libc6
PackageComment: <text>PURL is pkg:deb/debian/libc6@2.28-10?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/libc6@2.28-10?arch=amd64
PackageVersion: 2.28-10
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-libc6
Relationship: SPDXRef-libc6 CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared:
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256: 6f703e27185f594f8633159d00180ea1df12d84f152261b6e88af75667195a79
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: libcap-ng0
SPDXID: SPDXRef-libcap-ng0
PackageComment: <text>PURL is pkg:deb/debian/libcap-ng0@0.7.9-2?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/libcap-ng0@0.7.9-2?arch=amd64
PackageVersion: 0.7.9-2
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-libcap-ng0
Relationship: SPDXRef-libcap-ng0 CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: License:
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256: 4f9caf61638db6dcf79529ef756a2d36c7aae6604d486a5055bb3212d823b691
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: libcap2
SPDXID: SPDXRef-libcap2
PackageComment: <text>PURL is pkg:deb/debian/libcap2@1:2.25-2?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/libcap2@1:2.25-2?arch=amd64
PackageVersion: 1:2.25-2
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-libcap2
Relationship: SPDXRef-libcap2 CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: BSD-3-clause BSD-3-clause BSD-3-clause BSD-3-clause BSD-3-clause BSD-3-clause BSD-3-clause BSD-3-clause BSD-3-clause BSD-3-clause GPL-2 GPL-2+
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256:
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: libcap2-bin
SPDXID: SPDXRef-libcap2-bin
PackageComment: <text>PURL is pkg:deb/debian/libcap2-bin@1:2.25-2?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/libcap2-bin@1:2.25-2?arch=amd64
PackageVersion: 1:2.25-2
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-libcap2-bin
Relationship: SPDXRef-libcap2-bin CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: BSD-3-clause BSD-3-clause BSD-3-clause BSD-3-clause BSD-3-clause BSD-3-clause BSD-3-clause BSD-3-clause BSD-3-clause BSD-3-clause GPL-2 GPL-2+
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256:
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: libcom-err2
SPDXID: SPDXRef-libcom-err2
PackageComment: <text>PURL is pkg:deb/debian/libcom-err2@1.44.5-1+deb10u3?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/libcom-err2@1.44.5-1+deb10u3?arch=amd64
PackageVersion: 1.44.5-1+deb10u3
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-libcom-err2
Relationship: SPDXRef-libcom-err2 CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared:
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256: e5ea8e6db9453ed13199f4cbfe8e29d76c579eb6f678ab9bb4bebd7d12c1936e
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: libcurl4
SPDXID: SPDXRef-libcurl4
PackageComment: <text>PURL is pkg:deb/debian/libcurl4@7.64.0-4+deb10u2?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/libcurl4@7.64.0-4+deb10u2?arch=amd64
PackageVersion: 7.64.0-4+deb10u2
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-libcurl4
Relationship: SPDXRef-libcurl4 CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: curl curl curl curl ISC BSD-3-Clause public-domain curl curl curl curl BSD-4-Clause curl BSD-3-Clause BSD-3-Clause curl other other curl curl BSD-3-Clause BSD-4-Clause ISC
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256:
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: libdb5.3
SPDXID: SPDXRef-libdb5.3
PackageComment: <text>PURL is pkg:deb/debian/libdb5.3@5.3.28+dfsg1-0.5?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/libdb5.3@5.3.28+dfsg1-0.5?arch=amd64
PackageVersion: 5.3.28+dfsg1-0.5
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-libdb5.3
Relationship: SPDXRef-libdb5.3 CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared:
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256: c7f0e9a423840731362ee52d4344c0bcf84318fbc06dad4fefe0e61d9e7062bc
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: libdebconfclient0
SPDXID: SPDXRef-libdebconfclient0
PackageComment: <text>PURL is pkg:deb/debian/libdebconfclient0@0.249?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/libdebconfclient0@0.249?arch=amd64
PackageVersion: 0.249
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-libdebconfclient0
Relationship: SPDXRef-libdebconfclient0 CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared:
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256: a03b7b51c597fa9341493907717a63f4ff16b6396cb471535da42e721bd706ec
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: libedit2
SPDXID: SPDXRef-libedit2
PackageComment: <text>PURL is pkg:deb/debian/libedit2@3.1-20181209-1?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/libedit2@3.1-20181209-1?arch=amd64
PackageVersion: 3.1-20181209-1
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-libedit2
Relationship: SPDXRef-libedit2 CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: BSD-3-clause
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256:
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: libelf1
SPDXID: SPDXRef-libelf1
PackageComment: <text>PURL is pkg:deb/debian/libelf1@0.176-1.1?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/libelf1@0.176-1.1?arch=amd64
PackageVersion: 0.176-1.1
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-libelf1
Relationship: SPDXRef-libelf1 CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: License:
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256:
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: libevent-2.1-6
SPDXID: SPDXRef-libevent-2.1-6
PackageComment: <text>PURL is pkg:deb/debian/libevent-2.1-6@2.1.8-stable-4?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/libevent-2.1-6@2.1.8-stable-4?arch=amd64
PackageVersion: 2.1.8-stable-4
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-libevent-2.1-6
Relationship: SPDXRef-libevent-2.1-6 CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared:
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256:
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: libexpat1
SPDXID: SPDXRef-libexpat1
PackageComment: <text>PURL is pkg:deb/debian/libexpat1@2.2.6-2+deb10u1?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/libexpat1@2.2.6-2+deb10u1?arch=amd64
PackageVersion: 2.2.6-2+deb10u1
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-libexpat1
Relationship: SPDXRef-libexpat1 CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: MIT MIT MIT
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256:
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: libext2fs2
SPDXID: SPDXRef-libext2fs2
PackageComment: <text>PURL is pkg:deb/debian/libext2fs2@1.44.5-1+deb10u3?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/libext2fs2@1.44.5-1+deb10u3?arch=amd64
PackageVersion: 1.44.5-1+deb10u3
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-libext2fs2
Relationship: SPDXRef-libext2fs2 CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared:
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256: b700e55869082aa47b325b156a542c78598754f588f540ee8a2bf5cabdc5290f
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: libfdisk1
SPDXID: SPDXRef-libfdisk1
PackageComment: <text>PURL is pkg:deb/debian/libfdisk1@2.33.1-0.1?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/libfdisk1@2.33.1-0.1?arch=amd64
PackageVersion: 2.33.1-0.1
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-libfdisk1
Relationship: SPDXRef-libfdisk1 CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: GPL-2+ GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 public-domain BSD-4-clause MIT MIT BSD-2-clause BSD-2-clause BSD-2-clause BSD-3-clause BSD-3-clause LGPL-2+ LGPL-2+ LGPL-2+ LGPL-2.1+ LGPL-2.1+ LGPL-2.1+ GPL-3+ LGPL-2.1+ LGPL LGPL-2.1+ LGPL LGPL LGPL-2.1+ LGPL-3+ LGPL-2.1+ GPL-2+ GPL-2+ public-domain GPL-2 GPL-2+ GPL-3+ BSD-2-clause BSD-3-clause BSD-4-clause LGPL LGPL-2+ LGPL-2.1+ LGPL-3+ MIT
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256: a9426ad822dac0a2c8ee6907d2a3079c418749fb4516ba972e577cb3004ac1eb
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: libffi6
SPDXID: SPDXRef-libffi6
PackageComment: <text>PURL is pkg:deb/debian/libffi6@3.2.1-9?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/libffi6@3.2.1-9?arch=amd64
PackageVersion: 3.2.1-9
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-libffi6
Relationship: SPDXRef-libffi6 CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: License:
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256: d4d748d897e8e53aa239ead23a18724a1a30085cc6ca41a8c31b3b1e1b3452f4
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: libfribidi0
SPDXID: SPDXRef-libfribidi0
PackageComment: <text>PURL is pkg:deb/debian/libfribidi0@1.0.5-3.1+deb10u1?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/libfribidi0@1.0.5-3.1+deb10u1?arch=amd64
PackageVersion: 1.0.5-3.1+deb10u1
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-libfribidi0
Relationship: SPDXRef-libfribidi0 CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: LGPL-2.1+ LGPL-2.1+ LGPL-2.1+
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256:
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: libgc1c2
SPDXID: SPDXRef-libgc1c2
PackageComment: <text>PURL is pkg:deb/debian/libgc1c2@1:7.6.4-0.4?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/libgc1c2@1:7.6.4-0.4?arch=amd64
PackageVersion: 1:7.6.4-0.4
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-libgc1c2
Relationship: SPDXRef-libgc1c2 CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared:
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256:
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: libgcc1
SPDXID: SPDXRef-libgcc1
PackageComment: <text>PURL is pkg:deb/debian/libgcc1@1:8.3.0-6?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/libgcc1@1:8.3.0-6?arch=amd64
PackageVersion: 1:8.3.0-6
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-libgcc1
Relationship: SPDXRef-libgcc1 CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared:
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256: b1bb7611f3372732889d502cb1d09fe572b5fbb5288a4a8b1ed0363fecc3555a
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: libgcrypt20
SPDXID: SPDXRef-libgcrypt20
PackageComment: <text>PURL is pkg:deb/debian/libgcrypt20@1.8.4-5?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/libgcrypt20@1.8.4-5?arch=amd64
PackageVersion: 1.8.4-5
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-libgcrypt20
Relationship: SPDXRef-libgcrypt20 CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: License:
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256: 1b826517b328e29a441cc89e5c427896182ffc946713329f50accc8417856136
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: libgdbm-compat4
SPDXID: SPDXRef-libgdbm-compat4
PackageComment: <text>PURL is pkg:deb/debian/libgdbm-compat4@1.18.1-4?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/libgdbm-compat4@1.18.1-4?arch=amd64
PackageVersion: 1.18.1-4
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-libgdbm-compat4
Relationship: SPDXRef-libgdbm-compat4 CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: GPL-3+ GPL-2+ GPL-3+ GPL-3+ GFDL-NIV-1.3+ GPL-3+ GPL-2+ GFDL-NIV-1.3+
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256:
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: libgdbm6
SPDXID: SPDXRef-libgdbm6
PackageComment: <text>PURL is pkg:deb/debian/libgdbm6@1.18.1-4?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/libgdbm6@1.18.1-4?arch=amd64
PackageVersion: 1.18.1-4
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-libgdbm6
Relationship: SPDXRef-libgdbm6 CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: GPL-3+ GPL-2+ GPL-3+ GPL-3+ GFDL-NIV-1.3+ GPL-3+ GPL-2+ GFDL-NIV-1.3+
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256:
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: libgmp10
SPDXID: SPDXRef-libgmp10
PackageComment: <text>PURL is pkg:deb/debian/libgmp10@2:6.1.2+dfsg-4?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/libgmp10@2:6.1.2+dfsg-4?arch=amd64
PackageVersion: 2:6.1.2+dfsg-4
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-libgmp10
Relationship: SPDXRef-libgmp10 CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared:
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256: d9c9661c7d4d686a82c29d183124adacbefff797f1ef5723d509dbaa2e92a87c
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: libgnutls-dane0
SPDXID: SPDXRef-libgnutls-dane0
PackageComment: <text>PURL is pkg:deb/debian/libgnutls-dane0@3.6.7-4+deb10u7?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/libgnutls-dane0@3.6.7-4+deb10u7?arch=amd64
PackageVersion: 3.6.7-4+deb10u7
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-libgnutls-dane0
Relationship: SPDXRef-libgnutls-dane0 CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: The License: License: CC0 Expat Apache-2.0 LGPLv3+_or_GPLv2+ Apache-2.0 Apache-2.0 Expat Expat Expat LGPLv2.1+ LGPLv3+_or_GPLv2+ LGPLv3+_or_GPLv2+ Expat LGPLv3+_or_GPLv2+ LGPLv3+_or_GPLv2+ LGPLv3+_or_GPLv2+ LGPLv3+_or_GPLv2+ LGPLv3+_or_GPLv2+ LGPLv3+_or_GPLv2+ LGPLv3+_or_GPLv2+ LGPLv3+_or_GPLv2+ LGPLv3+_or_GPLv2+ LGPLv3+_or_GPLv2+ LGPLv3+_or_GPLv2+ LGPLv3+_or_GPLv2+ LGPLv3+_or_GPLv2+ LGPLv3+_or_GPLv2+ LGPLv3+_or_GPLv2+ LGPLv3+_or_GPLv2+ LGPLv3+_or_GPLv2+ LGPLv3+_or_GPLv2+ License: LGPLv3+_or_GPLv2+ LGPLv3+_or_GPLv2+ GPLv3+ GPLv3+ GPLv3+ GPLv3+ GPLv3+ GPLv3+ LGPLv2.1+ GPLv3+ GPLv3+ GPLv3+ GPLv3+ GPLv3+ GPLv3+ GPLv3+ GPLv3+ GPLv3+ GPLv3+ GPLv3+ GPLv3+ GPLv3+ GPLv3+ LGPLv2.1+ GPLv3+ GPLv3+ GPLv3+ GPLv3+ GPLv3+ GPLv3+ BSD-3-Clause
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256:
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: libgnutls30
SPDXID: SPDXRef-libgnutls30
PackageComment: <text>PURL is pkg:deb/debian/libgnutls30@3.6.7-4+deb10u7?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/libgnutls30@3.6.7-4+deb10u7?arch=amd64
PackageVersion: 3.6.7-4+deb10u7
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-libgnutls30
Relationship: SPDXRef-libgnutls30 CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: The License: License: CC0 Expat Apache-2.0 LGPLv3+_or_GPLv2+ Apache-2.0 Apache-2.0 Expat Expat Expat LGPLv2.1+ LGPLv3+_or_GPLv2+ LGPLv3+_or_GPLv2+ Expat LGPLv3+_or_GPLv2+ LGPLv3+_or_GPLv2+ LGPLv3+_or_GPLv2+ LGPLv3+_or_GPLv2+ LGPLv3+_or_GPLv2+ LGPLv3+_or_GPLv2+ LGPLv3+_or_GPLv2+ LGPLv3+_or_GPLv2+ LGPLv3+_or_GPLv2+ LGPLv3+_or_GPLv2+ LGPLv3+_or_GPLv2+ LGPLv3+_or_GPLv2+ LGPLv3+_or_GPLv2+ LGPLv3+_or_GPLv2+ LGPLv3+_or_GPLv2+ LGPLv3+_or_GPLv2+ LGPLv3+_or_GPLv2+ LGPLv3+_or_GPLv2+ License: LGPLv3+_or_GPLv2+ LGPLv3+_or_GPLv2+ GPLv3+ GPLv3+ GPLv3+ GPLv3+ GPLv3+ GPLv3+ LGPLv2.1+ GPLv3+ GPLv3+ GPLv3+ GPLv3+ GPLv3+ GPLv3+ GPLv3+ GPLv3+ GPLv3+ GPLv3+ GPLv3+ GPLv3+ GPLv3+ GPLv3+ LGPLv2.1+ GPLv3+ GPLv3+ GPLv3+ GPLv3+ GPLv3+ GPLv3+ BSD-3-Clause
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256: 7f9096293466c2f69c83566175e34b4af4a64096d7de5bc96a65cfabe47aabe8
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: libgpg-error0
SPDXID: SPDXRef-libgpg-error0
PackageComment: <text>PURL is pkg:deb/debian/libgpg-error0@1.35-1?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/libgpg-error0@1.35-1?arch=amd64
PackageVersion: 1.35-1
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-libgpg-error0
Relationship: SPDXRef-libgpg-error0 CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: LGPL-2.1+ LGPL-2.1+ LGPL-2.1+ LGPL-2.1+ LGPL-2.1+ g10-permissive g10-permissive LGPL-2.1+ LGPL-2.1+ GPL-3+ g10-permissive g10-permissive LGPL-2.1+ GPL-3+ BSD-3-clause
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256: 996b67baf6b5c6fda0db2df27cce15701b122403d0a7f30e9a1f50d07205450a
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: libgpm2
SPDXID: SPDXRef-libgpm2
PackageComment: <text>PURL is pkg:deb/debian/libgpm2@1.20.7-5?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/libgpm2@1.20.7-5?arch=amd64
PackageVersion: 1.20.7-5
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-libgpm2
Relationship: SPDXRef-libgpm2 CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: GPL-2.0+ GPL-3.0+ GPL-2.0+ GPL-2.0+ GPL-2.0+ GPL-3.0+
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256:
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: libgsasl7
SPDXID: SPDXRef-libgsasl7
PackageComment: <text>PURL is pkg:deb/debian/libgsasl7@1.8.0-8+b2?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/libgsasl7@1.8.0-8+b2?arch=amd64
PackageVersion: 1.8.0-8+b2
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-libgsasl7
Relationship: SPDXRef-libgsasl7 CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: GPL-3+ LGPL-2+ GFDL-1.3+ other
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256:
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: libgssapi-krb5-2
SPDXID: SPDXRef-libgssapi-krb5-2
PackageComment: <text>PURL is pkg:deb/debian/libgssapi-krb5-2@1.17-3+deb10u1?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/libgssapi-krb5-2@1.17-3+deb10u1?arch=amd64
PackageVersion: 1.17-3+deb10u1
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-libgssapi-krb5-2
Relationship: SPDXRef-libgssapi-krb5-2 CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared:
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256:
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: libhogweed4
SPDXID: SPDXRef-libhogweed4
PackageComment: <text>PURL is pkg:deb/debian/libhogweed4@3.4.1-1?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/libhogweed4@3.4.1-1?arch=amd64
PackageVersion: 3.4.1-1
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-libhogweed4
Relationship: SPDXRef-libhogweed4 CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: LGPL-2.1+ LGPL-2.1+ LGPL-2.1+ LGPL-2.1+ LGPL-2.1+ LGPL-2.1+ LGPL-2.1+ LGPL-2.1+ LGPL-2.1+ LGPL-2+ LGPL-2.1+ LGPL-2.1+ LGPL-2.1+ LGPL-2.1+ LGPL-2.1+ LGPL-2.1+ LGPL-2.1+ LGPL-2.1+ LGPL-2.1+ LGPL-2.1+ LGPL-2.1+ LGPL-2.1+ other LGPL-2.1+ LGPL-2.1+ GPL-2+ GPL-2+ public-domain GPL-2 GAP LGPL-2.1+ GPL-2+
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256: a938f22b6cead37c5f980a59330e71e2df1df4af890ea6b3432485c0da96ea58
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: libicu63
SPDXID: SPDXRef-libicu63
PackageComment: <text>PURL is pkg:deb/debian/libicu63@63.1-6+deb10u1?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/libicu63@63.1-6+deb10u1?arch=amd64
PackageVersion: 63.1-6+deb10u1
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-libicu63
Relationship: SPDXRef-libicu63 CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared:
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256:
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: libidn11
SPDXID: SPDXRef-libidn11
PackageComment: <text>PURL is pkg:deb/debian/libidn11@1.33-2.2?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/libidn11@1.33-2.2?arch=amd64
PackageVersion: 1.33-2.2
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-libidn11
Relationship: SPDXRef-libidn11 CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: GPL-3+ GFDL-1.3+ LGPL-3+ LGPL-3+ GPL-3+ LGPL-3+ GPL-3+ LGPL-3+ LGPL-3+ LGPL-2.1+ GPL-3+ GAP
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256:
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: libidn2-0
SPDXID: SPDXRef-libidn2-0
PackageComment: <text>PURL is pkg:deb/debian/libidn2-0@2.0.5-1+deb10u1?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/libidn2-0@2.0.5-1+deb10u1?arch=amd64
PackageVersion: 2.0.5-1+deb10u1
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-libidn2-0
Relationship: SPDXRef-libidn2-0 CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: GPL-3+ LGPL-3+ GPL-3+ GPL-3+ Unicode GPL-3+ GPL-2+ LGPL-3+ Unicode
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256: 13c3129c4930cd8b1255dbc5da7068c036f217218d1017634b83847a659fad16
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: libjansson4
SPDXID: SPDXRef-libjansson4
PackageComment: <text>PURL is pkg:deb/debian/libjansson4@2.12-1?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/libjansson4@2.12-1?arch=amd64
PackageVersion: 2.12-1
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-libjansson4
Relationship: SPDXRef-libjansson4 CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: Expat Expat Expat Expat
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256:
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: libk5crypto3
SPDXID: SPDXRef-libk5crypto3
PackageComment: <text>PURL is pkg:deb/debian/libk5crypto3@1.17-3+deb10u1?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/libk5crypto3@1.17-3+deb10u1?arch=amd64
PackageVersion: 1.17-3+deb10u1
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-libk5crypto3
Relationship: SPDXRef-libk5crypto3 CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared:
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256:
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: libkeyutils1
SPDXID: SPDXRef-libkeyutils1
PackageComment: <text>PURL is pkg:deb/debian/libkeyutils1@1.6-6?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/libkeyutils1@1.6-6?arch=amd64
PackageVersion: 1.6-6
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-libkeyutils1
Relationship: SPDXRef-libkeyutils1 CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: GPL-2+ LGPL-2+ LGPL-2+ GPL-2+ LGPL-2+
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256:
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: libkrb5-3
SPDXID: SPDXRef-libkrb5-3
PackageComment: <text>PURL is pkg:deb/debian/libkrb5-3@1.17-3+deb10u1?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/libkrb5-3@1.17-3+deb10u1?arch=amd64
PackageVersion: 1.17-3+deb10u1
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-libkrb5-3
Relationship: SPDXRef-libkrb5-3 CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared:
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256:
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: libkrb5support0
SPDXID: SPDXRef-libkrb5support0
PackageComment: <text>PURL is pkg:deb/debian/libkrb5support0@1.17-3+deb10u1?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/libkrb5support0@1.17-3+deb10u1?arch=amd64
PackageVersion: 1.17-3+deb10u1
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-libkrb5support0
Relationship: SPDXRef-libkrb5support0 CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared:
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256:
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: libkyotocabinet16v5
SPDXID: SPDXRef-libkyotocabinet16v5
PackageComment: <text>PURL is pkg:deb/debian/libkyotocabinet16v5@1.2.76-4.2+b1?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/libkyotocabinet16v5@1.2.76-4.2+b1?arch=amd64
PackageVersion: 1.2.76-4.2+b1
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-libkyotocabinet16v5
Relationship: SPDXRef-libkyotocabinet16v5 CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared:
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256:
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: libldap-2.4-2
SPDXID: SPDXRef-libldap-2.4-2
PackageComment: <text>PURL is pkg:deb/debian/libldap-2.4-2@2.4.47+dfsg-3+deb10u6?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/libldap-2.4-2@2.4.47+dfsg-3+deb10u6?arch=amd64
PackageVersion: 2.4.47+dfsg-3+deb10u6
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-libldap-2.4-2
Relationship: SPDXRef-libldap-2.4-2 CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared:
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256:
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: libldap-common
SPDXID: SPDXRef-libldap-common
PackageComment: <text>PURL is pkg:deb/debian/libldap-common@2.4.47+dfsg-3+deb10u6?arch=all</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/libldap-common@2.4.47+dfsg-3+deb10u6?arch=all
PackageVersion: 2.4.47+dfsg-3+deb10u6
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-libldap-common
Relationship: SPDXRef-libldap-common CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared:
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256:
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: libllvm7
SPDXID: SPDXRef-libllvm7
PackageComment: <text>PURL is pkg:deb/debian/libllvm7@1:7.0.1-8+deb10u2?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/libllvm7@1:7.0.1-8+deb10u2?arch=amd64
PackageVersion: 1:7.0.1-8+deb10u2
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-libllvm7
Relationship: SPDXRef-libllvm7 CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared:
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256:
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: libltdl7
SPDXID: SPDXRef-libltdl7
PackageComment: <text>PURL is pkg:deb/debian/libltdl7@2.4.6-9?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/libltdl7@2.4.6-9?arch=amd64
PackageVersion: 2.4.6-9
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-libltdl7
Relationship: SPDXRef-libltdl7 CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: License:
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256:
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: liblua5.2-0
SPDXID: SPDXRef-liblua5.2-0
PackageComment: <text>PURL is pkg:deb/debian/liblua5.2-0@5.2.4-1.1+b2?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/liblua5.2-0@5.2.4-1.1+b2?arch=amd64
PackageVersion: 5.2.4-1.1+b2
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-liblua5.2-0
Relationship: SPDXRef-liblua5.2-0 CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: Expat
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256:
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: liblz4-1
SPDXID: SPDXRef-liblz4-1
PackageComment: <text>PURL is pkg:deb/debian/liblz4-1@1.8.3-1?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/liblz4-1@1.8.3-1?arch=amd64
PackageVersion: 1.8.3-1
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-liblz4-1
Relationship: SPDXRef-liblz4-1 CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: BSD-2-clause BSD-2-clause BSD-2-clause BSD-2-clause GPL-2+ GPL-2+ GPL-2+ GPL-2+ GPL-2 GPL-2 GPL-2 BSD-2-clause GPL-2+ GPL-2 GPL-2+ BSD-2-clause
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256: 826203ecea7e8cb87aebfbb7bd2afc9f7e519f4c0f578c0404e21416572d1005
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: liblzma5
SPDXID: SPDXRef-liblzma5
PackageComment: <text>PURL is pkg:deb/debian/liblzma5@5.2.4-1?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/liblzma5@5.2.4-1?arch=amd64
PackageVersion: 5.2.4-1
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-liblzma5
Relationship: SPDXRef-liblzma5 CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: License: PD probably-PD GPL-2+ PD PD LGPL-2.1+ permissive-fsf Autoconf permissive-nowarranty GPL-2 none none PD PD PD permissive-nowarranty config-h LGPL-2.1+ noderivs PD-debian LGPL-2.1+ GPL-2 GPL-2+ Autoconf permissive-fsf permissive-nowarranty
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256: 292dfe85defad3a08cca62beba85e90b0231d16345160f4a66aba96399c85859
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: liblzo2-2
SPDXID: SPDXRef-liblzo2-2
PackageComment: <text>PURL is pkg:deb/debian/liblzo2-2@2.10-0.1?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/liblzo2-2@2.10-0.1?arch=amd64
PackageVersion: 2.10-0.1
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-liblzo2-2
Relationship: SPDXRef-liblzo2-2 CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: GPL-2+ GPL-2+ GPL-2+
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256:
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: libmagic-mgc
SPDXID: SPDXRef-libmagic-mgc
PackageComment: <text>PURL is pkg:deb/debian/libmagic-mgc@1:5.35-4+deb10u2?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/libmagic-mgc@1:5.35-4+deb10u2?arch=amd64
PackageVersion: 1:5.35-4+deb10u2
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-libmagic-mgc
Relationship: SPDXRef-libmagic-mgc CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: BSD-2-Clause-alike BSD-2-Clause-alike BSD-2-Clause-alike public-domain BSD-2-Clause-netbsd BSD-2-Clause-netbsd BSD-2-Clause-netbsd BSD-2-Clause-regents MIT-Old-Style-with-legal-disclaimer-2 BSD-2-Clause-alike BSD-2-Clause-alike public-domain BSD-2-Clause-netbsd BSD-2-Clause-regents MIT-Old-Style-with-legal-disclaimer-2
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256:
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: libmagic1
SPDXID: SPDXRef-libmagic1
PackageComment: <text>PURL is pkg:deb/debian/libmagic1@1:5.35-4+deb10u2?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/libmagic1@1:5.35-4+deb10u2?arch=amd64
PackageVersion: 1:5.35-4+deb10u2
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-libmagic1
Relationship: SPDXRef-libmagic1 CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: BSD-2-Clause-alike BSD-2-Clause-alike BSD-2-Clause-alike public-domain BSD-2-Clause-netbsd BSD-2-Clause-netbsd BSD-2-Clause-netbsd BSD-2-Clause-regents MIT-Old-Style-with-legal-disclaimer-2 BSD-2-Clause-alike BSD-2-Clause-alike public-domain BSD-2-Clause-netbsd BSD-2-Clause-regents MIT-Old-Style-with-legal-disclaimer-2
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256:
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: libmailutils5
SPDXID: SPDXRef-libmailutils5
PackageComment: <text>PURL is pkg:deb/debian/libmailutils5@1:3.5-4?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/libmailutils5@1:3.5-4?arch=amd64
PackageVersion: 1:3.5-4
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-libmailutils5
Relationship: SPDXRef-libmailutils5 CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared:
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256:
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: libmariadb3
SPDXID: SPDXRef-libmariadb3
PackageComment: <text>PURL is pkg:deb/debian/libmariadb3@1:10.3.29-0+deb10u1?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/libmariadb3@1:10.3.29-0+deb10u1?arch=amd64
PackageVersion: 1:10.3.29-0+deb10u1
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-libmariadb3
Relationship: SPDXRef-libmariadb3 CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: GPL-2 GPL-2+ GPL-2 GPL-2+ GPL-2 GPL-2 GPL-2+ public-domain BSD-3-clause BSD-3-clause LGPL-2.1+ BSD-2-clause LGPL-2.1+ LGPL-2 GPL-2+ BSD-2-clause BSD-2-clause LGPL-2.1+ GPL-2+ GPL-2+ GPL-2 unlimited-free-doc LGPL GPL-2 GPL-2+ GPL-2 GPL-2 GPL-2 GPL-2+ LGPL LGPL GPL-2 GPL-2 GPL-2 LGPL public-domain GPL-3+-with-bison-exception GPL-2+-with-bison-exception GPL-3+-with-bison-exception GPL-3+-with-bison-exception GPL-2 BSD-2-clause public-domain public-domain BSD-3-clause BSD-3-clause BSD-2-clause GPL-2 LGPL-2.1+ LGPL-2.1+ GPL-2 GPL-2 GPL-2 GPL-2 LGPL LGPL SWsoft public-domain GPL-2 GPL-2 public-domain BSD-3-clause GPL-2 GPL-2+ GPL-3+ LGPL-2.1+ GPL-2+ MIT/X11 BSD-3-clause GPL-2 GPL-2 LGPL-2+ BSD-2-clause LGPL LGPL-2+ BSD-2-Clause zlib/libpng GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 GPL-2+ GPL-3+ LGPL LGPL-2 LGPL-2+ LGPL-2.1+ BSD-2-clause BSD-3-clause Artistic public-domain
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256:
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: libmnl0
SPDXID: SPDXRef-libmnl0
PackageComment: <text>PURL is pkg:deb/debian/libmnl0@1.0.4-2?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/libmnl0@1.0.4-2?arch=amd64
PackageVersion: 1.0.4-2
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-libmnl0
Relationship: SPDXRef-libmnl0 CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: LGPL-2.1 GPL-2+ GPL-2+ LGPL-2.1
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256:
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: libmount1
SPDXID: SPDXRef-libmount1
PackageComment: <text>PURL is pkg:deb/debian/libmount1@2.33.1-0.1?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/libmount1@2.33.1-0.1?arch=amd64
PackageVersion: 2.33.1-0.1
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-libmount1
Relationship: SPDXRef-libmount1 CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: GPL-2+ GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 public-domain BSD-4-clause MIT MIT BSD-2-clause BSD-2-clause BSD-2-clause BSD-3-clause BSD-3-clause LGPL-2+ LGPL-2+ LGPL-2+ LGPL-2.1+ LGPL-2.1+ LGPL-2.1+ GPL-3+ LGPL-2.1+ LGPL LGPL-2.1+ LGPL LGPL LGPL-2.1+ LGPL-3+ LGPL-2.1+ GPL-2+ GPL-2+ public-domain GPL-2 GPL-2+ GPL-3+ BSD-2-clause BSD-3-clause BSD-4-clause LGPL LGPL-2+ LGPL-2.1+ LGPL-3+ MIT
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256: b8b28669dc4995a7a48d47d9199d1806d4fce9c4051277279d4dcc514c086ba3
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: libmpdec2
SPDXID: SPDXRef-libmpdec2
PackageComment: <text>PURL is pkg:deb/debian/libmpdec2@2.4.2-2?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/libmpdec2@2.4.2-2?arch=amd64
PackageVersion: 2.4.2-2
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-libmpdec2
Relationship: SPDXRef-libmpdec2 CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared:
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256:
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: libncurses6
SPDXID: SPDXRef-libncurses6
PackageComment: <text>PURL is pkg:deb/debian/libncurses6@6.1+20181013-2+deb10u2?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/libncurses6@6.1+20181013-2+deb10u2?arch=amd64
PackageVersion: 6.1+20181013-2+deb10u2
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-libncurses6
Relationship: SPDXRef-libncurses6 CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: MIT/X11 X11 BSD-3-clause MIT/X11 X11 BSD-3-clause
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256:
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: libncursesw6
SPDXID: SPDXRef-libncursesw6
PackageComment: <text>PURL is pkg:deb/debian/libncursesw6@6.1+20181013-2+deb10u2?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/libncursesw6@6.1+20181013-2+deb10u2?arch=amd64
PackageVersion: 6.1+20181013-2+deb10u2
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-libncursesw6
Relationship: SPDXRef-libncursesw6 CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: MIT/X11 X11 BSD-3-clause MIT/X11 X11 BSD-3-clause
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256: 7dffe9602586300292960f2e3cf4301acfc64a91aed6fa41ea2e719ae75788b3
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: libnettle6
SPDXID: SPDXRef-libnettle6
PackageComment: <text>PURL is pkg:deb/debian/libnettle6@3.4.1-1?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/libnettle6@3.4.1-1?arch=amd64
PackageVersion: 3.4.1-1
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-libnettle6
Relationship: SPDXRef-libnettle6 CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: LGPL-2.1+ LGPL-2.1+ LGPL-2.1+ LGPL-2.1+ LGPL-2.1+ LGPL-2.1+ LGPL-2.1+ LGPL-2.1+ LGPL-2.1+ LGPL-2+ LGPL-2.1+ LGPL-2.1+ LGPL-2.1+ LGPL-2.1+ LGPL-2.1+ LGPL-2.1+ LGPL-2.1+ LGPL-2.1+ LGPL-2.1+ LGPL-2.1+ LGPL-2.1+ LGPL-2.1+ other LGPL-2.1+ LGPL-2.1+ GPL-2+ GPL-2+ public-domain GPL-2 GAP LGPL-2.1+ GPL-2+
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256: 5a384c773ae68b0c7905ecc0abf5e45925794b679674866d7783d88786ffb0d2
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: libnghttp2-14
SPDXID: SPDXRef-libnghttp2-14
PackageComment: <text>PURL is pkg:deb/debian/libnghttp2-14@1.36.0-2+deb10u1?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/libnghttp2-14@1.36.0-2+deb10u1?arch=amd64
PackageVersion: 1.36.0-2+deb10u1
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-libnghttp2-14
Relationship: SPDXRef-libnghttp2-14 CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: Expat Expat MIT MIT Expat all-permissive GPL-3+ MIT BSD-2-clause SIL-OFL-1.1 Expat MIT GPL-3+ all-permissive BSD-2-clause SIL-OFL-1.1
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256:
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: libntlm0
SPDXID: SPDXRef-libntlm0
PackageComment: <text>PURL is pkg:deb/debian/libntlm0@1.5-1+deb10u1?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/libntlm0@1.5-1+deb10u1?arch=amd64
PackageVersion: 1.5-1+deb10u1
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-libntlm0
Relationship: SPDXRef-libntlm0 CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: LGPL-2+
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256:
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: libp11-kit0
SPDXID: SPDXRef-libp11-kit0
PackageComment: <text>PURL is pkg:deb/debian/libp11-kit0@0.23.15-2+deb10u1?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/libp11-kit0@0.23.15-2+deb10u1?arch=amd64
PackageVersion: 0.23.15-2+deb10u1
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-libp11-kit0
Relationship: SPDXRef-libp11-kit0 CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: BSD-3-Clause permissive-like-automake-output BSD-3-Clause BSD-3-Clause ISC ISC+IBM BSD-3-Clause BSD-3-Clause BSD-3-Clause BSD-3-Clause BSD-3-Clause BSD-3-Clause same-as-rest-of-p11kit BSD-3-Clause
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256: 02b2f15ad9cd2ead38dbeb85cdba65d8e4d44155495110231504cd0de1f16f83
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: libpam-modules
SPDXID: SPDXRef-libpam-modules
PackageComment: <text>PURL is pkg:deb/debian/libpam-modules@1.3.1-5?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/libpam-modules@1.3.1-5?arch=amd64
PackageVersion: 1.3.1-5
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-libpam-modules
Relationship: SPDXRef-libpam-modules CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared:
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256: bc8a1c2e17c0855a3ecef398299d88696ed6d8254cc03cce3800c4a4063f7d7d
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: libpam-modules-bin
SPDXID: SPDXRef-libpam-modules-bin
PackageComment: <text>PURL is pkg:deb/debian/libpam-modules-bin@1.3.1-5?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/libpam-modules-bin@1.3.1-5?arch=amd64
PackageVersion: 1.3.1-5
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-libpam-modules-bin
Relationship: SPDXRef-libpam-modules-bin CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared:
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256: 9ba6ca27c6d4077846c2ec3489c30b8d699391393fa0c0de28a1de8cffbf118e
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: libpam-runtime
SPDXID: SPDXRef-libpam-runtime
PackageComment: <text>PURL is pkg:deb/debian/libpam-runtime@1.3.1-5?arch=all</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/libpam-runtime@1.3.1-5?arch=all
PackageVersion: 1.3.1-5
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-libpam-runtime
Relationship: SPDXRef-libpam-runtime CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared:
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256: 8aedc549e97e42fd21429d82a18ead489399ff4c15c6c688cdedea591eed9a66
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: libpam0g
SPDXID: SPDXRef-libpam0g
PackageComment: <text>PURL is pkg:deb/debian/libpam0g@1.3.1-5?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/libpam0g@1.3.1-5?arch=amd64
PackageVersion: 1.3.1-5
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-libpam0g
Relationship: SPDXRef-libpam0g CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared:
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256: b480fef838d01dc647170fdbde8d44c12e05e04da989b3bffd44223457cee0dc
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: libpcre2-8-0
SPDXID: SPDXRef-libpcre2-8-0
PackageComment: <text>PURL is pkg:deb/debian/libpcre2-8-0@10.32-5?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/libpcre2-8-0@10.32-5?arch=amd64
PackageVersion: 10.32-5
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-libpcre2-8-0
Relationship: SPDXRef-libpcre2-8-0 CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared:
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256:
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: libpcre3
SPDXID: SPDXRef-libpcre3
PackageComment: <text>PURL is pkg:deb/debian/libpcre3@2:8.39-12?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/libpcre3@2:8.39-12?arch=amd64
PackageVersion: 2:8.39-12
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-libpcre3
Relationship: SPDXRef-libpcre3 CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared:
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256: 5496ea46b812b1a00104fc97b30e13fc5f8f6e9ec128a8ff4fd2d66a80cc6bee
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: libperl5.28
SPDXID: SPDXRef-libperl5.28
PackageComment: <text>PURL is pkg:deb/debian/libperl5.28@5.28.1-6+deb10u1?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/libperl5.28@5.28.1-6+deb10u1?arch=amd64
PackageVersion: 5.28.1-6+deb10u1
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-libperl5.28
Relationship: SPDXRef-libperl5.28 CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared:
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256:
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: libpopt0
SPDXID: SPDXRef-libpopt0
PackageComment: <text>PURL is pkg:deb/debian/libpopt0@1.16-12?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/libpopt0@1.16-12?arch=amd64
PackageVersion: 1.16-12
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-libpopt0
Relationship: SPDXRef-libpopt0 CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: X-Consortium GPL-2+
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256:
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: libpq5
SPDXID: SPDXRef-libpq5
PackageComment: <text>PURL is pkg:deb/debian/libpq5@11.12-0+deb10u1?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/libpq5@11.12-0+deb10u1?arch=amd64
PackageVersion: 11.12-0+deb10u1
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-libpq5
Relationship: SPDXRef-libpq5 CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: PostgreSQL Custom-regex Tcl Tcl Custom-pg_dump BSD-3-Clause Custom-Unicode BSD-3-Clause double-metaphone nagaysau-ishii blf BSD-3-clause BSD-2-clause imath rijndael BSD-3-Clause Tcl
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256:
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: libprocps7
SPDXID: SPDXRef-libprocps7
PackageComment: <text>PURL is pkg:deb/debian/libprocps7@2:3.3.15-2?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/libprocps7@2:3.3.15-2?arch=amd64
PackageVersion: 2:3.3.15-2
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-libprocps7
Relationship: SPDXRef-libprocps7 CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: LGPL-2.1+ LGPL-2.0+ GPL-2.0+ GPL-2.0+ GPL-2.0+ GPL-2.0+ GPL-2.0+ GPL-2.0+ LGPL-2.0+ LGPL-2.1+
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256:
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: libpsl5
SPDXID: SPDXRef-libpsl5
PackageComment: <text>PURL is pkg:deb/debian/libpsl5@0.20.2-2?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/libpsl5@0.20.2-2?arch=amd64
PackageVersion: 0.20.2-2
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-libpsl5
Relationship: SPDXRef-libpsl5 CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: MIT MIT Chromium MIT Chromium
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256:
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: libpython2.7
SPDXID: SPDXRef-libpython2.7
PackageComment: <text>PURL is pkg:deb/debian/libpython2.7@2.7.16-2+deb10u1?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/libpython2.7@2.7.16-2+deb10u1?arch=amd64
PackageVersion: 2.7.16-2+deb10u1
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-libpython2.7
Relationship: SPDXRef-libpython2.7 CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared:
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256:
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: libpython2.7-minimal
SPDXID: SPDXRef-libpython2.7-minimal
PackageComment: <text>PURL is pkg:deb/debian/libpython2.7-minimal@2.7.16-2+deb10u1?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/libpython2.7-minimal@2.7.16-2+deb10u1?arch=amd64
PackageVersion: 2.7.16-2+deb10u1
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-libpython2.7-minimal
Relationship: SPDXRef-libpython2.7-minimal CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared:
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256:
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: libpython2.7-stdlib
SPDXID: SPDXRef-libpython2.7-stdlib
PackageComment: <text>PURL is pkg:deb/debian/libpython2.7-stdlib@2.7.16-2+deb10u1?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/libpython2.7-stdlib@2.7.16-2+deb10u1?arch=amd64
PackageVersion: 2.7.16-2+deb10u1
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-libpython2.7-stdlib
Relationship: SPDXRef-libpython2.7-stdlib CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared:
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256:
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: libpython3-stdlib
SPDXID: SPDXRef-libpython3-stdlib
PackageComment: <text>PURL is pkg:deb/debian/libpython3-stdlib@3.7.3-1?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/libpython3-stdlib@3.7.3-1?arch=amd64
PackageVersion: 3.7.3-1
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-libpython3-stdlib
Relationship: SPDXRef-libpython3-stdlib CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared:
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256:
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: libpython3.7-minimal
SPDXID: SPDXRef-libpython3.7-minimal
PackageComment: <text>PURL is pkg:deb/debian/libpython3.7-minimal@3.7.3-2+deb10u3?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/libpython3.7-minimal@3.7.3-2+deb10u3?arch=amd64
PackageVersion: 3.7.3-2+deb10u3
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-libpython3.7-minimal
Relationship: SPDXRef-libpython3.7-minimal CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared:
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256:
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: libpython3.7-stdlib
SPDXID: SPDXRef-libpython3.7-stdlib
PackageComment: <text>PURL is pkg:deb/debian/libpython3.7-stdlib@3.7.3-2+deb10u3?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/libpython3.7-stdlib@3.7.3-2+deb10u3?arch=amd64
PackageVersion: 3.7.3-2+deb10u3
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-libpython3.7-stdlib
Relationship: SPDXRef-libpython3.7-stdlib CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared:
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256:
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: libreadline7
SPDXID: SPDXRef-libreadline7
PackageComment: <text>PURL is pkg:deb/debian/libreadline7@7.0-5?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/libreadline7@7.0-5?arch=amd64
PackageVersion: 7.0-5
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-libreadline7
Relationship: SPDXRef-libreadline7 CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared:
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256:
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: librtmp1
SPDXID: SPDXRef-librtmp1
PackageComment: <text>PURL is pkg:deb/debian/librtmp1@2.4+20151223.gitfa8646d.1-2?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/librtmp1@2.4+20151223.gitfa8646d.1-2?arch=amd64
PackageVersion: 2.4+20151223.gitfa8646d.1-2
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-librtmp1
Relationship: SPDXRef-librtmp1 CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared:
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256:
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: libsasl2-2
SPDXID: SPDXRef-libsasl2-2
PackageComment: <text>PURL is pkg:deb/debian/libsasl2-2@2.1.27+dfsg-1+deb10u1?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/libsasl2-2@2.1.27+dfsg-1+deb10u1?arch=amd64
PackageVersion: 2.1.27+dfsg-1+deb10u1
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-libsasl2-2
Relationship: SPDXRef-libsasl2-2 CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: BSD-4-clause GPL-3+ GPL-3+ GPL-3+ GPL-3+ BSD-4-clause
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256:
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: libsasl2-modules
SPDXID: SPDXRef-libsasl2-modules
PackageComment: <text>PURL is pkg:deb/debian/libsasl2-modules@2.1.27+dfsg-1+deb10u1?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/libsasl2-modules@2.1.27+dfsg-1+deb10u1?arch=amd64
PackageVersion: 2.1.27+dfsg-1+deb10u1
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-libsasl2-modules
Relationship: SPDXRef-libsasl2-modules CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: BSD-4-clause GPL-3+ GPL-3+ GPL-3+ GPL-3+ BSD-4-clause
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256:
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: libsasl2-modules-db
SPDXID: SPDXRef-libsasl2-modules-db
PackageComment: <text>PURL is pkg:deb/debian/libsasl2-modules-db@2.1.27+dfsg-1+deb10u1?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/libsasl2-modules-db@2.1.27+dfsg-1+deb10u1?arch=amd64
PackageVersion: 2.1.27+dfsg-1+deb10u1
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-libsasl2-modules-db
Relationship: SPDXRef-libsasl2-modules-db CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: BSD-4-clause GPL-3+ GPL-3+ GPL-3+ GPL-3+ BSD-4-clause
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256:
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: libseccomp2
SPDXID: SPDXRef-libseccomp2
PackageComment: <text>PURL is pkg:deb/debian/libseccomp2@2.3.3-4?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/libseccomp2@2.3.3-4?arch=amd64
PackageVersion: 2.3.3-4
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-libseccomp2
Relationship: SPDXRef-libseccomp2 CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: LGPL-2.1 LGPL-2.1 LGPL-2.1 LGPL-2.1 LGPL-2.1
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256: 0d0fcfc610a7a7023d55835e55ddcf625b760d195ef259fb137afff9ba4f2e9d
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: libselinux1
SPDXID: SPDXRef-libselinux1
PackageComment: <text>PURL is pkg:deb/debian/libselinux1@2.8-1+b1?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/libselinux1@2.8-1+b1?arch=amd64
PackageVersion: 2.8-1+b1
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-libselinux1
Relationship: SPDXRef-libselinux1 CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared:
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256: 05238a8c13c32418511a965e7b756ab031c140ef154ca0b3b2a1bb7a14e2faab
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: libsemanage-common
SPDXID: SPDXRef-libsemanage-common
PackageComment: <text>PURL is pkg:deb/debian/libsemanage-common@2.8-2?arch=all</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/libsemanage-common@2.8-2?arch=all
PackageVersion: 2.8-2
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-libsemanage-common
Relationship: SPDXRef-libsemanage-common CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared:
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256: fa3c50e11afa9250f823218898084bdefea73c7cd1995ef5ed5e7c12e7b46331
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: libsemanage1
SPDXID: SPDXRef-libsemanage1
PackageComment: <text>PURL is pkg:deb/debian/libsemanage1@2.8-2?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/libsemanage1@2.8-2?arch=amd64
PackageVersion: 2.8-2
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-libsemanage1
Relationship: SPDXRef-libsemanage1 CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared:
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256: ebc5346a40336fb481865e48a2a5356b5124fc868269dc2c1fbab2bdc2ac495e
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: libsensors-config
SPDXID: SPDXRef-libsensors-config
PackageComment: <text>PURL is pkg:deb/debian/libsensors-config@1:3.5.0-3?arch=all</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/libsensors-config@1:3.5.0-3?arch=all
PackageVersion: 1:3.5.0-3
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-libsensors-config
Relationship: SPDXRef-libsensors-config CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared:
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256:
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: libsensors5
SPDXID: SPDXRef-libsensors5
PackageComment: <text>PURL is pkg:deb/debian/libsensors5@1:3.5.0-3?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/libsensors5@1:3.5.0-3?arch=amd64
PackageVersion: 1:3.5.0-3
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-libsensors5
Relationship: SPDXRef-libsensors5 CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared:
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256:
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: libsepol1
SPDXID: SPDXRef-libsepol1
PackageComment: <text>PURL is pkg:deb/debian/libsepol1@2.8-1?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/libsepol1@2.8-1?arch=amd64
PackageVersion: 2.8-1
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-libsepol1
Relationship: SPDXRef-libsepol1 CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared:
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256: 5e4ebf890bab2422d3caff579006c02cc3b153e98a61b8c548a951e24c0693f2
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: libsmartcols1
SPDXID: SPDXRef-libsmartcols1
PackageComment: <text>PURL is pkg:deb/debian/libsmartcols1@2.33.1-0.1?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/libsmartcols1@2.33.1-0.1?arch=amd64
PackageVersion: 2.33.1-0.1
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-libsmartcols1
Relationship: SPDXRef-libsmartcols1 CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: GPL-2+ GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 public-domain BSD-4-clause MIT MIT BSD-2-clause BSD-2-clause BSD-2-clause BSD-3-clause BSD-3-clause LGPL-2+ LGPL-2+ LGPL-2+ LGPL-2.1+ LGPL-2.1+ LGPL-2.1+ GPL-3+ LGPL-2.1+ LGPL LGPL-2.1+ LGPL LGPL LGPL-2.1+ LGPL-3+ LGPL-2.1+ GPL-2+ GPL-2+ public-domain GPL-2 GPL-2+ GPL-3+ BSD-2-clause BSD-3-clause BSD-4-clause LGPL LGPL-2+ LGPL-2.1+ LGPL-3+ MIT
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256: 9a83a75545de917ada2d8a3a1aaff88e6897a873637784b0c1b45fbb93459ff4
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: libsodium23
SPDXID: SPDXRef-libsodium23
PackageComment: <text>PURL is pkg:deb/debian/libsodium23@1.0.17-1?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/libsodium23@1.0.17-1?arch=amd64
PackageVersion: 1.0.17-1
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-libsodium23
Relationship: SPDXRef-libsodium23 CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: ISC BSD-2-clause BSD-2-clause BSD-2-clause public-domain public-domain public-domain public-domain CC0 MIT CC0 GPL-2+ public-domain BSD-2-clause CC0
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256:
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: libsqlite3-0
SPDXID: SPDXRef-libsqlite3-0
PackageComment: <text>PURL is pkg:deb/debian/libsqlite3-0@3.27.2-3+deb10u1?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/libsqlite3-0@3.27.2-3+deb10u1?arch=amd64
PackageVersion: 3.27.2-3+deb10u1
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-libsqlite3-0
Relationship: SPDXRef-libsqlite3-0 CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: public-domain GPL-2+
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256:
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: libss2
SPDXID: SPDXRef-libss2
PackageComment: <text>PURL is pkg:deb/debian/libss2@1.44.5-1+deb10u3?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/libss2@1.44.5-1+deb10u3?arch=amd64
PackageVersion: 1.44.5-1+deb10u3
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-libss2
Relationship: SPDXRef-libss2 CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared:
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256: 54b9d0c35c36ebf784ea88fd9fd0572057d43b229e1aa6627ef034f8c5638fd6
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: libssh2-1
SPDXID: SPDXRef-libssh2-1
PackageComment: <text>PURL is pkg:deb/debian/libssh2-1@1.8.0-2.1?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/libssh2-1@1.8.0-2.1?arch=amd64
PackageVersion: 1.8.0-2.1
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-libssh2-1
Relationship: SPDXRef-libssh2-1 CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: BSD3 BSD3 BSD3
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256:
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: libssl1.1
SPDXID: SPDXRef-libssl1.1
PackageComment: <text>PURL is pkg:deb/debian/libssl1.1@1.1.1d-0+deb10u6?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/libssl1.1@1.1.1d-0+deb10u6?arch=amd64
PackageVersion: 1.1.1d-0+deb10u6
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-libssl1.1
Relationship: SPDXRef-libssl1.1 CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared:
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256:
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: libstdc++6
SPDXID: SPDXRef-libstdc++6
PackageComment: <text>PURL is pkg:deb/debian/libstdc++6@8.3.0-6?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/libstdc++6@8.3.0-6?arch=amd64
PackageVersion: 8.3.0-6
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-libstdc++6
Relationship: SPDXRef-libstdc++6 CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared:
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256: 5cc70625329655ff9382580971d4616db8aa39af958b7c995ee84598f142a4ee
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: libsystemd0
SPDXID: SPDXRef-libsystemd0
PackageComment: <text>PURL is pkg:deb/debian/libsystemd0@241-7~deb10u7?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/libsystemd0@241-7~deb10u7?arch=amd64
PackageVersion: 241-7~deb10u7
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-libsystemd0
Relationship: SPDXRef-libsystemd0 CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: LGPL-2.1+ CC0-1.0 GPL-2 GPL-2 Expat public-domain GPL-2+ GPL-2+ LGPL-2.1+ Expat GPL-2 GPL-2 GPL-2+ LGPL-2.1+ CC0-1.0
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256: 8f964923890974eec797e43c6343a7c77a8d2fa044bc0e8d37bbca281a5e7abd
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: libtasn1-6
SPDXID: SPDXRef-libtasn1-6
PackageComment: <text>PURL is pkg:deb/debian/libtasn1-6@4.13-3?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/libtasn1-6@4.13-3?arch=amd64
PackageVersion: 4.13-3
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-libtasn1-6
Relationship: SPDXRef-libtasn1-6 CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared:
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256: 2771ea1ba49d30f033e67e708f71da9b031649c7c13d2ce04cb3ec913ac3b839
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: libtinfo6
SPDXID: SPDXRef-libtinfo6
PackageComment: <text>PURL is pkg:deb/debian/libtinfo6@6.1+20181013-2+deb10u2?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/libtinfo6@6.1+20181013-2+deb10u2?arch=amd64
PackageVersion: 6.1+20181013-2+deb10u2
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-libtinfo6
Relationship: SPDXRef-libtinfo6 CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: MIT/X11 X11 BSD-3-clause MIT/X11 X11 BSD-3-clause
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256: 7f39c7a7b02c3373a427aa276830a6e1e0c4cc003371f34e2e50e9992aa70e1a
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: libudev1
SPDXID: SPDXRef-libudev1
PackageComment: <text>PURL is pkg:deb/debian/libudev1@241-7~deb10u7?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/libudev1@241-7~deb10u7?arch=amd64
PackageVersion: 241-7~deb10u7
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-libudev1
Relationship: SPDXRef-libudev1 CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: LGPL-2.1+ CC0-1.0 GPL-2 GPL-2 Expat public-domain GPL-2+ GPL-2+ LGPL-2.1+ Expat GPL-2 GPL-2 GPL-2+ LGPL-2.1+ CC0-1.0
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256: 08c5fe9535f776bedf9401c34849894b123f723a2d8de81d1ce7b72992c4b369
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: libunbound8
SPDXID: SPDXRef-libunbound8
PackageComment: <text>PURL is pkg:deb/debian/libunbound8@1.9.0-2+deb10u2?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/libunbound8@1.9.0-2+deb10u2?arch=amd64
PackageVersion: 1.9.0-2+deb10u2
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-libunbound8
Relationship: SPDXRef-libunbound8 CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: BSD-3-NLnetLabs GPL-3 ISC BSD-3-WIDE ISC BSD-3-Regents-DEC ISC ISC BSD-3-ADG BSD-3-Todd-Miller ISC BSD-3-NLnetLabs-Mekking BSD-3-Viagénie BSD-3-Farsight BSD-3-VUT BSD-2-VUT BSD-3-CZ.NIC GPL-3+ ISC public-domain ISC
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256:
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: libunistring2
SPDXID: SPDXRef-libunistring2
PackageComment: <text>PURL is pkg:deb/debian/libunistring2@0.9.10-1?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/libunistring2@0.9.10-1?arch=amd64
PackageVersion: 0.9.10-1
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-libunistring2
Relationship: SPDXRef-libunistring2 CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: LGPL-3+ FreeSoftware GPL-2+ GPL-3+ GPL-3+ GPL-2+ GPL-2+ MIT GPL-3+ LGPL-3+ GPL-3+ GPL-2+ GFDL-1.2+ MIT
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256: bc3961271c9f78e7ef93dec3bf7c1047f2cde73dfc3e2b0c475b6115b76780f8
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: libuuid1
SPDXID: SPDXRef-libuuid1
PackageComment: <text>PURL is pkg:deb/debian/libuuid1@2.33.1-0.1?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/libuuid1@2.33.1-0.1?arch=amd64
PackageVersion: 2.33.1-0.1
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-libuuid1
Relationship: SPDXRef-libuuid1 CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: GPL-2+ GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 public-domain BSD-4-clause MIT MIT BSD-2-clause BSD-2-clause BSD-2-clause BSD-3-clause BSD-3-clause LGPL-2+ LGPL-2+ LGPL-2+ LGPL-2.1+ LGPL-2.1+ LGPL-2.1+ GPL-3+ LGPL-2.1+ LGPL LGPL-2.1+ LGPL LGPL LGPL-2.1+ LGPL-3+ LGPL-2.1+ GPL-2+ GPL-2+ public-domain GPL-2 GPL-2+ GPL-3+ BSD-2-clause BSD-3-clause BSD-4-clause LGPL LGPL-2+ LGPL-2.1+ LGPL-3+ MIT
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256: 90b90bef4593d4f347fb1e74a63c5609daa86d4c5003b14e85f58628d6c118b2
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: libwrap0
SPDXID: SPDXRef-libwrap0
PackageComment: <text>PURL is pkg:deb/debian/libwrap0@7.6.q-28?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/libwrap0@7.6.q-28?arch=amd64
PackageVersion: 7.6.q-28
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-libwrap0
Relationship: SPDXRef-libwrap0 CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared:
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256:
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: libxml2
SPDXID: SPDXRef-libxml2
PackageComment: <text>PURL is pkg:deb/debian/libxml2@2.9.4+dfsg1-7+deb10u2?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/libxml2@2.9.4+dfsg1-7+deb10u2?arch=amd64
PackageVersion: 2.9.4+dfsg1-7+deb10u2
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-libxml2
Relationship: SPDXRef-libxml2 CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: MIT-1 MIT-1 ISC ISC ISC MIT-1 MIT-1 ISC
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256:
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: libxslt1.1
SPDXID: SPDXRef-libxslt1.1
PackageComment: <text>PURL is pkg:deb/debian/libxslt1.1@1.1.32-2.2~deb10u1?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/libxslt1.1@1.1.32-2.2~deb10u1?arch=amd64
PackageVersion: 1.1.32-2.2~deb10u1
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-libxslt1.1
Relationship: SPDXRef-libxslt1.1 CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared:
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256:
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: libxtables12
SPDXID: SPDXRef-libxtables12
PackageComment: <text>PURL is pkg:deb/debian/libxtables12@1.8.2-4?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/libxtables12@1.8.2-4?arch=amd64
PackageVersion: 1.8.2-4
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-libxtables12
Relationship: SPDXRef-libxtables12 CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 Artistic GPL-2 GPL-2 GPL-2+ GPL-2+ GPL-2+ GPL-2+ GPL-2+ GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 custom GPL-2 GPL-2+ Artistic
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256:
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: libzstd1
SPDXID: SPDXRef-libzstd1
PackageComment: <text>PURL is pkg:deb/debian/libzstd1@1.3.8+dfsg-3+deb10u2?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/libzstd1@1.3.8+dfsg-3+deb10u2?arch=amd64
PackageVersion: 1.3.8+dfsg-3+deb10u2
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-libzstd1
Relationship: SPDXRef-libzstd1 CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: BSD-3-clause zlib zlib zlib Expat BSD-3-clause Expat Expat GPL-2 BSD-3-clause
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256: 3c1d6fdaeb4a2357c27b3ac7a488eee562fef2961972098be386b5618e6d20ce
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: locales
SPDXID: SPDXRef-locales
PackageComment: <text>PURL is pkg:deb/debian/locales@2.28-10?arch=all</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/locales@2.28-10?arch=all
PackageVersion: 2.28-10
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-locales
Relationship: SPDXRef-locales CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared:
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256:
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: login
SPDXID: SPDXRef-login
PackageComment: <text>PURL is pkg:deb/debian/login@1:4.5-1.1?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/login@1:4.5-1.1?arch=amd64
PackageVersion: 1:4.5-1.1
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-login
Relationship: SPDXRef-login CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared:
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256: fa2d9a8686e5a1d0fef5d7f4c3a1bbd9cb69ee0fa506eec8c6c5528ababe7905
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: logrotate
SPDXID: SPDXRef-logrotate
PackageComment: <text>PURL is pkg:deb/debian/logrotate@3.14.0-4?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/logrotate@3.14.0-4?arch=amd64
PackageVersion: 3.14.0-4
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-logrotate
Relationship: SPDXRef-logrotate CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: GPL-2 GPL-3+ BSD-3-Clause GPL-2 GPL-2 GPL-3+ BSD-3-Clause
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256:
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: lsb-base
SPDXID: SPDXRef-lsb-base
PackageComment: <text>PURL is pkg:deb/debian/lsb-base@10.2019051400?arch=all</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/lsb-base@10.2019051400?arch=all
PackageVersion: 10.2019051400
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-lsb-base
Relationship: SPDXRef-lsb-base CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: GPL-2 GPL-2 BSD-3-clause GPL-2
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256:
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: lsb-release
SPDXID: SPDXRef-lsb-release
PackageComment: <text>PURL is pkg:deb/debian/lsb-release@10.2019051400?arch=all</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/lsb-release@10.2019051400?arch=all
PackageVersion: 10.2019051400
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-lsb-release
Relationship: SPDXRef-lsb-release CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: GPL-2 GPL-2 BSD-3-clause GPL-2
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256:
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: mailutils
SPDXID: SPDXRef-mailutils
PackageComment: <text>PURL is pkg:deb/debian/mailutils@1:3.5-4?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/mailutils@1:3.5-4?arch=amd64
PackageVersion: 1:3.5-4
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-mailutils
Relationship: SPDXRef-mailutils CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: GPL-3+ LGPL-3+ GFDL-NIV+
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256:
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: mailutils-common
SPDXID: SPDXRef-mailutils-common
PackageComment: <text>PURL is pkg:deb/debian/mailutils-common@1:3.5-4?arch=all</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/mailutils-common@1:3.5-4?arch=all
PackageVersion: 1:3.5-4
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-mailutils-common
Relationship: SPDXRef-mailutils-common CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: GPL-3+ LGPL-3+ GFDL-NIV+
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256:
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: mariadb-common
SPDXID: SPDXRef-mariadb-common
PackageComment: <text>PURL is pkg:deb/debian/mariadb-common@1:10.3.29-0+deb10u1?arch=all</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/mariadb-common@1:10.3.29-0+deb10u1?arch=all
PackageVersion: 1:10.3.29-0+deb10u1
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-mariadb-common
Relationship: SPDXRef-mariadb-common CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: GPL-2 GPL-2+ GPL-2 GPL-2+ GPL-2 GPL-2 GPL-2+ public-domain BSD-3-clause BSD-3-clause LGPL-2.1+ BSD-2-clause LGPL-2.1+ LGPL-2 GPL-2+ BSD-2-clause BSD-2-clause LGPL-2.1+ GPL-2+ GPL-2+ GPL-2 unlimited-free-doc LGPL GPL-2 GPL-2+ GPL-2 GPL-2 GPL-2 GPL-2+ LGPL LGPL GPL-2 GPL-2 GPL-2 LGPL public-domain GPL-3+-with-bison-exception GPL-2+-with-bison-exception GPL-3+-with-bison-exception GPL-3+-with-bison-exception GPL-2 BSD-2-clause public-domain public-domain BSD-3-clause BSD-3-clause BSD-2-clause GPL-2 LGPL-2.1+ LGPL-2.1+ GPL-2 GPL-2 GPL-2 GPL-2 LGPL LGPL SWsoft public-domain GPL-2 GPL-2 public-domain BSD-3-clause GPL-2 GPL-2+ GPL-3+ LGPL-2.1+ GPL-2+ MIT/X11 BSD-3-clause GPL-2 GPL-2 LGPL-2+ BSD-2-clause LGPL LGPL-2+ BSD-2-Clause zlib/libpng GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 GPL-2+ GPL-3+ LGPL LGPL-2 LGPL-2+ LGPL-2.1+ BSD-2-clause BSD-3-clause Artistic public-domain
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256:
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: mawk
SPDXID: SPDXRef-mawk
PackageComment: <text>PURL is pkg:deb/debian/mawk@1.3.3-17+b3?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/mawk@1.3.3-17+b3?arch=amd64
PackageVersion: 1.3.3-17+b3
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-mawk
Relationship: SPDXRef-mawk CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared:
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256: 054b9bf39546852c24355349d1973493733ae6ac3f0f82f61708979af17fc79f
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: mime-support
SPDXID: SPDXRef-mime-support
PackageComment: <text>PURL is pkg:deb/debian/mime-support@3.62?arch=all</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/mime-support@3.62?arch=all
PackageVersion: 3.62
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-mime-support
Relationship: SPDXRef-mime-support CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: ad-hoc
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256:
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: mount
SPDXID: SPDXRef-mount
PackageComment: <text>PURL is pkg:deb/debian/mount@2.33.1-0.1?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/mount@2.33.1-0.1?arch=amd64
PackageVersion: 2.33.1-0.1
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-mount
Relationship: SPDXRef-mount CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: GPL-2+ GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 public-domain BSD-4-clause MIT MIT BSD-2-clause BSD-2-clause BSD-2-clause BSD-3-clause BSD-3-clause LGPL-2+ LGPL-2+ LGPL-2+ LGPL-2.1+ LGPL-2.1+ LGPL-2.1+ GPL-3+ LGPL-2.1+ LGPL LGPL-2.1+ LGPL LGPL LGPL-2.1+ LGPL-3+ LGPL-2.1+ GPL-2+ GPL-2+ public-domain GPL-2 GPL-2+ GPL-3+ BSD-2-clause BSD-3-clause BSD-4-clause LGPL LGPL-2+ LGPL-2.1+ LGPL-3+ MIT
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256: cab13d70da8392bd00edbbcb046cf6d9e6791935ff2865836f30b7e595bd6fb0
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: mysql-common
SPDXID: SPDXRef-mysql-common
PackageComment: <text>PURL is pkg:deb/debian/mysql-common@5.8+1.0.5?arch=all</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/mysql-common@5.8+1.0.5?arch=all
PackageVersion: 5.8+1.0.5
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-mysql-common
Relationship: SPDXRef-mysql-common CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: GPL-2+ GPL-2+ GPL-2+
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256:
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: nano
SPDXID: SPDXRef-nano
PackageComment: <text>PURL is pkg:deb/debian/nano@3.2-3?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/nano@3.2-3?arch=amd64
PackageVersion: 3.2-3
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-nano
Relationship: SPDXRef-nano CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: GPL-3+ GFDL-NIV+ GPL-3+ GPL-3+ GFDL-NIV+
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256:
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: ncurses-base
SPDXID: SPDXRef-ncurses-base
PackageComment: <text>PURL is pkg:deb/debian/ncurses-base@6.1+20181013-2+deb10u2?arch=all</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/ncurses-base@6.1+20181013-2+deb10u2?arch=all
PackageVersion: 6.1+20181013-2+deb10u2
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-ncurses-base
Relationship: SPDXRef-ncurses-base CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: MIT/X11 X11 BSD-3-clause MIT/X11 X11 BSD-3-clause
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256: 45e0f42bfcc6e5a2c204d2c585300611d9c0ac915fab6b378f4981651169927f
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: ncurses-bin
SPDXID: SPDXRef-ncurses-bin
PackageComment: <text>PURL is pkg:deb/debian/ncurses-bin@6.1+20181013-2+deb10u2?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/ncurses-bin@6.1+20181013-2+deb10u2?arch=amd64
PackageVersion: 6.1+20181013-2+deb10u2
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-ncurses-bin
Relationship: SPDXRef-ncurses-bin CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: MIT/X11 X11 BSD-3-clause MIT/X11 X11 BSD-3-clause
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256: 1304c853b655945a673bfb40b1053576d107e3956dbabbf635c5140f322f7d59
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: netbase
SPDXID: SPDXRef-netbase
PackageComment: <text>PURL is pkg:deb/debian/netbase@5.6?arch=all</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/netbase@5.6?arch=all
PackageVersion: 5.6
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-netbase
Relationship: SPDXRef-netbase CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared:
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256:
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: openssl
SPDXID: SPDXRef-openssl
PackageComment: <text>PURL is pkg:deb/debian/openssl@1.1.1d-0+deb10u6?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/openssl@1.1.1d-0+deb10u6?arch=amd64
PackageVersion: 1.1.1d-0+deb10u6
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-openssl
Relationship: SPDXRef-openssl CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared:
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256:
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: passwd
SPDXID: SPDXRef-passwd
PackageComment: <text>PURL is pkg:deb/debian/passwd@1:4.5-1.1?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/passwd@1:4.5-1.1?arch=amd64
PackageVersion: 1:4.5-1.1
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-passwd
Relationship: SPDXRef-passwd CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared:
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256: 23af4a550da375cefbac02484e49ed1c2e6717c0f76533137b3f2fa2cc277cf2
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: perl
SPDXID: SPDXRef-perl
PackageComment: <text>PURL is pkg:deb/debian/perl@5.28.1-6+deb10u1?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/perl@5.28.1-6+deb10u1?arch=amd64
PackageVersion: 5.28.1-6+deb10u1
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-perl
Relationship: SPDXRef-perl CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ Expat REGCOMP, GPL-3+-WITH-BISON-EXCEPTION GPL-1+ Expat GPL-1+ Unicode GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ Expat GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ BZIP GPL-1+ ZLIB GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ Artistic GPL-1+ GPL-1+ GPL-2+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-2+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ Expat Expat GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ RRA-KEEP-THIS-NOTICE Expat Expat GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ BSD-3-clause-with-weird-numbering GPL-1+ Expat Expat GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ TEXT-TABS GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ Unicode GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ Artistic BSD-3-clause GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ Artistic SDBM-PUBLIC-DOMAIN GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ RRA-KEEP-THIS-NOTICE GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ DONT-CHANGE-THE-GPL GPL-1+ GPL-1+ Artistic-dist Artistic GPL-1+ GPL-1+ LGPL-2.1 GPL-1+ GPL-2+ Artistic Artistic-2 BZIP ZLIB Expat BSD-3-clause-with-weird-numbering BSD-4-clause-POWERDOG Unicode BSD-3-clause-GENERIC BSD-3-clause REGCOMP TEXT-TABS DONT-CHANGE-THE-GPL SDBM-PUBLIC-DOMAIN GPL-3+-WITH-BISON-EXCEPTION HSIEH-DERIVATIVE HSIEH-BSD RRA-KEEP-THIS-NOTICE Artistic-dist
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256:
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: perl-base
SPDXID: SPDXRef-perl-base
PackageComment: <text>PURL is pkg:deb/debian/perl-base@5.28.1-6+deb10u1?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/perl-base@5.28.1-6+deb10u1?arch=amd64
PackageVersion: 5.28.1-6+deb10u1
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-perl-base
Relationship: SPDXRef-perl-base CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ Expat REGCOMP, GPL-3+-WITH-BISON-EXCEPTION GPL-1+ Expat GPL-1+ Unicode GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ Expat GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ BZIP GPL-1+ ZLIB GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ Artistic GPL-1+ GPL-1+ GPL-2+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-2+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ Expat Expat GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ RRA-KEEP-THIS-NOTICE Expat Expat GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ BSD-3-clause-with-weird-numbering GPL-1+ Expat Expat GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ TEXT-TABS GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ Unicode GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ Artistic BSD-3-clause GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ Artistic SDBM-PUBLIC-DOMAIN GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ RRA-KEEP-THIS-NOTICE GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ DONT-CHANGE-THE-GPL GPL-1+ GPL-1+ Artistic-dist Artistic GPL-1+ GPL-1+ LGPL-2.1 GPL-1+ GPL-2+ Artistic Artistic-2 BZIP ZLIB Expat BSD-3-clause-with-weird-numbering BSD-4-clause-POWERDOG Unicode BSD-3-clause-GENERIC BSD-3-clause REGCOMP TEXT-TABS DONT-CHANGE-THE-GPL SDBM-PUBLIC-DOMAIN GPL-3+-WITH-BISON-EXCEPTION HSIEH-DERIVATIVE HSIEH-BSD RRA-KEEP-THIS-NOTICE Artistic-dist
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256: 41191859a20c49a1f629ecd8899576631858676c4079f7bbff3808f5376e3680
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: perl-modules-5.28
SPDXID: SPDXRef-perl-modules-5.28
PackageComment: <text>PURL is pkg:deb/debian/perl-modules-5.28@5.28.1-6+deb10u1?arch=all</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/perl-modules-5.28@5.28.1-6+deb10u1?arch=all
PackageVersion: 5.28.1-6+deb10u1
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-perl-modules-5.28
Relationship: SPDXRef-perl-modules-5.28 CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ Expat REGCOMP, GPL-3+-WITH-BISON-EXCEPTION GPL-1+ Unicode GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ S2P GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ BZIP GPL-1+ ZLIB GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ Artistic GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-2+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ Expat Expat GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ RRA-KEEP-THIS-NOTICE Expat Expat GPL-1+ Expat GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ BSD-3-clause-with-weird-numbering GPL-1+ Expat Expat GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ TEXT-TABS GPL-2+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ Unicode GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ Artistic BSD-3-clause GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ Artistic GPL-1+ SDBM-PUBLIC-DOMAIN GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ RRA-KEEP-THIS-NOTICE GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ DONT-CHANGE-THE-GPL GPL-1+ GPL-1+ Artistic-dist Artistic GPL-1+ GPL-1+ LGPL-2.1 GPL-1+ GPL-2+ Artistic Artistic-2 BZIP ZLIB Expat BSD-3-clause-with-weird-numbering BSD-4-clause-POWERDOG Unicode BSD-3-clause-GENERIC BSD-3-clause REGCOMP TEXT-TABS S2P DONT-CHANGE-THE-GPL SDBM-PUBLIC-DOMAIN GPL-3+-WITH-BISON-EXCEPTION HSIEH-DERIVATIVE HSIEH-BSD RRA-KEEP-THIS-NOTICE Artistic-dist
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256:
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: php-common
SPDXID: SPDXRef-php-common
PackageComment: <text>PURL is pkg:deb/debian/php-common@2:69?arch=all</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/php-common@2:69?arch=all
PackageVersion: 2:69
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-php-common
Relationship: SPDXRef-php-common CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared:
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256:
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: php7.3-cli
SPDXID: SPDXRef-php7.3-cli
PackageComment: <text>PURL is pkg:deb/debian/php7.3-cli@7.3.27-1~deb10u1?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/php7.3-cli@7.3.27-1~deb10u1?arch=amd64
PackageVersion: 7.3.27-1~deb10u1
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-php7.3-cli
Relationship: SPDXRef-php7.3-cli CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared:
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256:
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: php7.3-common
SPDXID: SPDXRef-php7.3-common
PackageComment: <text>PURL is pkg:deb/debian/php7.3-common@7.3.27-1~deb10u1?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/php7.3-common@7.3.27-1~deb10u1?arch=amd64
PackageVersion: 7.3.27-1~deb10u1
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-php7.3-common
Relationship: SPDXRef-php7.3-common CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared:
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256:
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: php7.3-json
SPDXID: SPDXRef-php7.3-json
PackageComment: <text>PURL is pkg:deb/debian/php7.3-json@7.3.27-1~deb10u1?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/php7.3-json@7.3.27-1~deb10u1?arch=amd64
PackageVersion: 7.3.27-1~deb10u1
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-php7.3-json
Relationship: SPDXRef-php7.3-json CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared:
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256:
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: php7.3-opcache
SPDXID: SPDXRef-php7.3-opcache
PackageComment: <text>PURL is pkg:deb/debian/php7.3-opcache@7.3.27-1~deb10u1?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/php7.3-opcache@7.3.27-1~deb10u1?arch=amd64
PackageVersion: 7.3.27-1~deb10u1
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-php7.3-opcache
Relationship: SPDXRef-php7.3-opcache CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared:
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256:
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: php7.3-readline
SPDXID: SPDXRef-php7.3-readline
PackageComment: <text>PURL is pkg:deb/debian/php7.3-readline@7.3.27-1~deb10u1?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/php7.3-readline@7.3.27-1~deb10u1?arch=amd64
PackageVersion: 7.3.27-1~deb10u1
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-php7.3-readline
Relationship: SPDXRef-php7.3-readline CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared:
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256:
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: pipexec
SPDXID: SPDXRef-pipexec
PackageComment: <text>PURL is pkg:deb/debian/pipexec@2.5.5-2?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/pipexec@2.5.5-2?arch=amd64
PackageVersion: 2.5.5-2
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-pipexec
Relationship: SPDXRef-pipexec CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared:
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256:
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: postgresql
SPDXID: SPDXRef-postgresql
PackageComment: <text>PURL is pkg:deb/debian/postgresql@11+200+deb10u4?arch=all</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/postgresql@11+200+deb10u4?arch=all
PackageVersion: 11+200+deb10u4
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-postgresql
Relationship: SPDXRef-postgresql CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared:
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256:
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: postgresql-11
SPDXID: SPDXRef-postgresql-11
PackageComment: <text>PURL is pkg:deb/debian/postgresql-11@11.12-0+deb10u1?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/postgresql-11@11.12-0+deb10u1?arch=amd64
PackageVersion: 11.12-0+deb10u1
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-postgresql-11
Relationship: SPDXRef-postgresql-11 CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared:
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256:
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: postgresql-client-11
SPDXID: SPDXRef-postgresql-client-11
PackageComment: <text>PURL is pkg:deb/debian/postgresql-client-11@11.12-0+deb10u1?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/postgresql-client-11@11.12-0+deb10u1?arch=amd64
PackageVersion: 11.12-0+deb10u1
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-postgresql-client-11
Relationship: SPDXRef-postgresql-client-11 CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared:
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256:
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: postgresql-client-common
SPDXID: SPDXRef-postgresql-client-common
PackageComment: <text>PURL is pkg:deb/debian/postgresql-client-common@200+deb10u4?arch=all</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/postgresql-client-common@200+deb10u4?arch=all
PackageVersion: 200+deb10u4
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-postgresql-client-common
Relationship: SPDXRef-postgresql-client-common CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared:
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256:
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: postgresql-common
SPDXID: SPDXRef-postgresql-common
PackageComment: <text>PURL is pkg:deb/debian/postgresql-common@200+deb10u4?arch=all</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/postgresql-common@200+deb10u4?arch=all
PackageVersion: 200+deb10u4
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-postgresql-common
Relationship: SPDXRef-postgresql-common CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared:
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256:
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: procps
SPDXID: SPDXRef-procps
PackageComment: <text>PURL is pkg:deb/debian/procps@2:3.3.15-2?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/procps@2:3.3.15-2?arch=amd64
PackageVersion: 2:3.3.15-2
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-procps
Relationship: SPDXRef-procps CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: LGPL-2.1+ LGPL-2.0+ GPL-2.0+ GPL-2.0+ GPL-2.0+ GPL-2.0+ GPL-2.0+ GPL-2.0+ LGPL-2.0+ LGPL-2.1+
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256:
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: psmisc
SPDXID: SPDXRef-psmisc
PackageComment: <text>PURL is pkg:deb/debian/psmisc@23.2-1?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/psmisc@23.2-1?arch=amd64
PackageVersion: 23.2-1
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-psmisc
Relationship: SPDXRef-psmisc CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: GPL-2+ GPL-2+ GPL-2+ GPL-2+
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256:
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: publicsuffix
SPDXID: SPDXRef-publicsuffix
PackageComment: <text>PURL is pkg:deb/debian/publicsuffix@20190415.1030-1?arch=all</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/publicsuffix@20190415.1030-1?arch=all
PackageVersion: 20190415.1030-1
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-publicsuffix
Relationship: SPDXRef-publicsuffix CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: MPL-2.0 MPL-2.0 CC0 MPL-2.0 CC0
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256:
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: python3
SPDXID: SPDXRef-python3
PackageComment: <text>PURL is pkg:deb/debian/python3@3.7.3-1?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/python3@3.7.3-1?arch=amd64
PackageVersion: 3.7.3-1
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-python3
Relationship: SPDXRef-python3 CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared:
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256:
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: python3-minimal
SPDXID: SPDXRef-python3-minimal
PackageComment: <text>PURL is pkg:deb/debian/python3-minimal@3.7.3-1?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/python3-minimal@3.7.3-1?arch=amd64
PackageVersion: 3.7.3-1
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-python3-minimal
Relationship: SPDXRef-python3-minimal CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared:
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256:
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: python3.7
SPDXID: SPDXRef-python3.7
PackageComment: <text>PURL is pkg:deb/debian/python3.7@3.7.3-2+deb10u3?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/python3.7@3.7.3-2+deb10u3?arch=amd64
PackageVersion: 3.7.3-2+deb10u3
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-python3.7
Relationship: SPDXRef-python3.7 CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared:
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256:
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: python3.7-minimal
SPDXID: SPDXRef-python3.7-minimal
PackageComment: <text>PURL is pkg:deb/debian/python3.7-minimal@3.7.3-2+deb10u3?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/python3.7-minimal@3.7.3-2+deb10u3?arch=amd64
PackageVersion: 3.7.3-2+deb10u3
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-python3.7-minimal
Relationship: SPDXRef-python3.7-minimal CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared:
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256:
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: readline-common
SPDXID: SPDXRef-readline-common
PackageComment: <text>PURL is pkg:deb/debian/readline-common@7.0-5?arch=all</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/readline-common@7.0-5?arch=all
PackageVersion: 7.0-5
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-readline-common
Relationship: SPDXRef-readline-common CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: License:
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256:
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: sed
SPDXID: SPDXRef-sed
PackageComment: <text>PURL is pkg:deb/debian/sed@4.7-1?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/sed@4.7-1?arch=amd64
PackageVersion: 4.7-1
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-sed
Relationship: SPDXRef-sed CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared:
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256: 37917c63d062cd924ba5084820353b256377d88371fbb89537ff06f7a0b5a6c7
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: sensible-utils
SPDXID: SPDXRef-sensible-utils
PackageComment: <text>PURL is pkg:deb/debian/sensible-utils@0.0.12?arch=all</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/sensible-utils@0.0.12?arch=all
PackageVersion: 0.0.12
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-sensible-utils
Relationship: SPDXRef-sensible-utils CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: GPL-2+ GPL-2+ GPL-2+ GPL-2+ GPL-2+ GPL-2+ GPL-2+ GPL-2+ GPL-2+ GPL-2+ GPL-2+ GPL-2+ GPL-2+ GPL-2+ All-permissive All-permissive configure GPL-2+ installsh GPL-2+ All-permissive
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256:
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: ssl-cert
SPDXID: SPDXRef-ssl-cert
PackageComment: <text>PURL is pkg:deb/debian/ssl-cert@1.0.39?arch=all</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/ssl-cert@1.0.39?arch=all
PackageVersion: 1.0.39
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-ssl-cert
Relationship: SPDXRef-ssl-cert CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: BSD-3-clause BSD-3-clause
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256:
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: sysstat
SPDXID: SPDXRef-sysstat
PackageComment: <text>PURL is pkg:deb/debian/sysstat@12.0.3-2?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/sysstat@12.0.3-2?arch=amd64
PackageVersion: 12.0.3-2
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-sysstat
Relationship: SPDXRef-sysstat CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared:
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256:
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: sysvinit-utils
SPDXID: SPDXRef-sysvinit-utils
PackageComment: <text>PURL is pkg:deb/debian/sysvinit-utils@2.93-8?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/sysvinit-utils@2.93-8?arch=amd64
PackageVersion: 2.93-8
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-sysvinit-utils
Relationship: SPDXRef-sysvinit-utils CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: GPL-2+ GPL-2+ GPL-2+
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256: 800cb3bbbae83d095cc7b8f3acb416726a76cde474931f6698b90ff2f7258540
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: tar
SPDXID: SPDXRef-tar
PackageComment: <text>PURL is pkg:deb/debian/tar@1.30+dfsg-6?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/tar@1.30+dfsg-6?arch=amd64
PackageVersion: 1.30+dfsg-6
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-tar
Relationship: SPDXRef-tar CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared:
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256: 8afffcf03195b06b0345a81b307d662fb9419c5795e238ccc5b36eceea3ec22f
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: tzdata
SPDXID: SPDXRef-tzdata
PackageComment: <text>PURL is pkg:deb/debian/tzdata@2021a-0+deb10u1?arch=all</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/tzdata@2021a-0+deb10u1?arch=all
PackageVersion: 2021a-0+deb10u1
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-tzdata
Relationship: SPDXRef-tzdata CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared:
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256: 00da63f221b9afa6bc766742807e398cf183565faba339649bafa3f93375fbcb
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: ucf
SPDXID: SPDXRef-ucf
PackageComment: <text>PURL is pkg:deb/debian/ucf@3.0038+nmu1?arch=all</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/ucf@3.0038+nmu1?arch=all
PackageVersion: 3.0038+nmu1
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-ucf
Relationship: SPDXRef-ucf CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 GPL-2
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256:
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: util-linux
SPDXID: SPDXRef-util-linux
PackageComment: <text>PURL is pkg:deb/debian/util-linux@2.33.1-0.1?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/util-linux@2.33.1-0.1?arch=amd64
PackageVersion: 2.33.1-0.1
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-util-linux
Relationship: SPDXRef-util-linux CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: GPL-2+ GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 public-domain BSD-4-clause MIT MIT BSD-2-clause BSD-2-clause BSD-2-clause BSD-3-clause BSD-3-clause LGPL-2+ LGPL-2+ LGPL-2+ LGPL-2.1+ LGPL-2.1+ LGPL-2.1+ GPL-3+ LGPL-2.1+ LGPL LGPL-2.1+ LGPL LGPL LGPL-2.1+ LGPL-3+ LGPL-2.1+ GPL-2+ GPL-2+ public-domain GPL-2 GPL-2+ GPL-3+ BSD-2-clause BSD-3-clause BSD-4-clause LGPL LGPL-2+ LGPL-2.1+ LGPL-3+ MIT
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256: cb773a92b1ad145d3ab8ff91f037c3aa48a7b2ec52a1fa47a441385eee840ce8
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: vim
SPDXID: SPDXRef-vim
PackageComment: <text>PURL is pkg:deb/debian/vim@2:8.1.0875-5?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/vim@2:8.1.0875-5?arch=amd64
PackageVersion: 2:8.1.0875-5
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-vim
Relationship: SPDXRef-vim CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared:
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256:
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: vim-common
SPDXID: SPDXRef-vim-common
PackageComment: <text>PURL is pkg:deb/debian/vim-common@2:8.1.0875-5?arch=all</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/vim-common@2:8.1.0875-5?arch=all
PackageVersion: 2:8.1.0875-5
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-vim-common
Relationship: SPDXRef-vim-common CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: Vim OPL-1+ BSD-3-clause Expat BSD-2-clause Apache GPL-1+ Expat Vim-Regexp UC public-domain Expat SRA X11 Compaq GPL-2+ Expat XPM LGPL-2.1+ EDL-1 Apache Vim OPL-1+ GPL-2 GPL-2+ GPL-1+ LGPL-2.1+ Artistic-1 Vim-Regexp Apache Expat SRA X11 UC public-domain Compaq XPM BSD-3-clause BSD-2-clause EDL-1
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256:
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: vim-runtime
SPDXID: SPDXRef-vim-runtime
PackageComment: <text>PURL is pkg:deb/debian/vim-runtime@2:8.1.0875-5?arch=all</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/vim-runtime@2:8.1.0875-5?arch=all
PackageVersion: 2:8.1.0875-5
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-vim-runtime
Relationship: SPDXRef-vim-runtime CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared:
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256:
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: wget
SPDXID: SPDXRef-wget
PackageComment: <text>PURL is pkg:deb/debian/wget@1.20.1-1.1?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/wget@1.20.1-1.1?arch=amd64
PackageVersion: 1.20.1-1.1
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-wget
Relationship: SPDXRef-wget CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared:
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256:
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: xxd
SPDXID: SPDXRef-xxd
PackageComment: <text>PURL is pkg:deb/debian/xxd@2:8.1.0875-5?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/xxd@2:8.1.0875-5?arch=amd64
PackageVersion: 2:8.1.0875-5
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-xxd
Relationship: SPDXRef-xxd CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: Vim OPL-1+ BSD-3-clause Expat BSD-2-clause Apache GPL-1+ Expat Vim-Regexp UC public-domain Expat SRA X11 Compaq GPL-2+ Expat XPM LGPL-2.1+ EDL-1 Apache Vim OPL-1+ GPL-2 GPL-2+ GPL-1+ LGPL-2.1+ Artistic-1 Vim-Regexp Apache Expat SRA X11 UC public-domain Compaq XPM BSD-3-clause BSD-2-clause EDL-1
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256:
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: xz-utils
SPDXID: SPDXRef-xz-utils
PackageComment: <text>PURL is pkg:deb/debian/xz-utils@5.2.4-1?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/xz-utils@5.2.4-1?arch=amd64
PackageVersion: 5.2.4-1
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-xz-utils
Relationship: SPDXRef-xz-utils CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: License: PD probably-PD GPL-2+ PD PD LGPL-2.1+ permissive-fsf Autoconf permissive-nowarranty GPL-2 none none PD PD PD permissive-nowarranty config-h LGPL-2.1+ noderivs PD-debian LGPL-2.1+ GPL-2 GPL-2+ Autoconf permissive-fsf permissive-nowarranty
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256:
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: zlib1g
SPDXID: SPDXRef-zlib1g
PackageComment: <text>PURL is pkg:deb/debian/zlib1g@1:1.2.11.dfsg-1?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/zlib1g@1:1.2.11.dfsg-1?arch=amd64
PackageVersion: 1:1.2.11.dfsg-1
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-zlib1g
Relationship: SPDXRef-zlib1g CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: Zlib Zlib Zlib Zlib Zlib
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256: 61bc9085aadd3007433ce6f560a08446a3d3ceb0b5e061db3fc62c42fbfe3eff
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment