{"SPDXID": "SPDXRef-DOCUMENT", "creationInfo": {"comment": "This document was created by analyzing recipe files during the build.", "created": "2025-03-29T03:41:30Z", "creators": ["Tool: OpenEmbedded Core create-spdx.bbclass", "Organization: OpenEmbedded ()", "Person: N/A ()"], "licenseListVersion": "3.14"}, "dataLicense": "CC0-1.0", "documentNamespace": "http://spdx.org/spdxdocs/recipe-protobuf-3f06ff92-5365-567d-b44f-b0cfa5839d59", "externalDocumentRefs": [{"checksum": {"algorithm": "SHA1", "checksumValue": "b8af2b4e51d7fe72dfc266a4dc46bd64d19bf820"}, "externalDocumentId": "DocumentRef-dependency-recipe-abseil-cpp", "spdxDocument": "http://spdx.org/spdxdocs/recipe-abseil-cpp-fe167ef4-926a-54ff-9942-7f1f1e7ae827"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "c3447425277e0ec9d548b45fb935a70df9187b21"}, "externalDocumentId": "DocumentRef-dependency-recipe-cmake-native", "spdxDocument": "http://spdx.org/spdxdocs/recipe-cmake-native-065aeeea-e673-57cc-a9f5-a3fe1fc2b3ea"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "ccb30edee107982c214f7bc0cd2e978cd0762378"}, "externalDocumentId": "DocumentRef-dependency-recipe-gcc-cross-x86_64", "spdxDocument": "http://spdx.org/spdxdocs/recipe-gcc-cross-x86_64-a54677b2-404d-5f88-948b-b1314035058d"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "4ca733ea4969fe6f5c4c4cf6de07e9766b9857ed"}, "externalDocumentId": "DocumentRef-dependency-recipe-gcc-runtime", "spdxDocument": "http://spdx.org/spdxdocs/recipe-gcc-runtime-a8177036-816d-5f00-a030-969647302050"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "025d8ef9cfd4e04556c0b4e2bd2099624375f7be"}, "externalDocumentId": "DocumentRef-dependency-recipe-glibc", "spdxDocument": "http://spdx.org/spdxdocs/recipe-glibc-8ec5f1d4-204b-530d-8854-79bbb314d6d7"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "75fad4f9f5af7ff113357b97b21bc0aecca1bace"}, "externalDocumentId": "DocumentRef-dependency-recipe-ninja-native", "spdxDocument": "http://spdx.org/spdxdocs/recipe-ninja-native-69509a4d-51be-58e4-8b69-f8cab885e13f"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "55fcbd9fb7f2988727e5a5ecdbea7e9e2960d8ec"}, "externalDocumentId": "DocumentRef-dependency-recipe-pkgconfig-native", "spdxDocument": "http://spdx.org/spdxdocs/recipe-pkgconfig-native-f02bc6f9-93d3-5de4-bfc1-f49135872105"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "fa66f87e246f9306193c6543f1d0248811c656ec"}, "externalDocumentId": "DocumentRef-dependency-recipe-protobuf-native", "spdxDocument": "http://spdx.org/spdxdocs/recipe-protobuf-native-ddfe1e2d-16c7-58ed-852a-5fad8b8771e7"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "ba4892142a0b2701d418d6d9b5f2633d9e8931c4"}, "externalDocumentId": "DocumentRef-dependency-recipe-zlib", "spdxDocument": "http://spdx.org/spdxdocs/recipe-zlib-5b14b6f4-7132-524f-8cee-cdebd6df7ce5"}], "name": "recipe-protobuf", "packages": [{"SPDXID": "SPDXRef-Recipe-protobuf", "copyrightText": "NOASSERTION", "description": "Protocol Buffers are a way of encoding structured data in an efficient yet extensible format. Google uses Protocol Buffers for almost all of its internal RPC protocols and file formats.", "downloadLocation": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceLocator": "cpe:2.3:*:*:protobuf:4.25.3:*:*:*:*:*:*:*", "referenceType": "http://spdx.org/rdf/references/cpe23Type"}], "homepage": "https://github.com/google/protobuf", "licenseConcluded": "NOASSERTION", "licenseDeclared": "BSD-3-Clause", "licenseInfoFromFiles": ["NOASSERTION"], "name": "protobuf", "sourceInfo": "CVEs fixed: CVE-2024-7254", "summary": "Protocol Buffers - structured data serialisation mechanism", "supplier": "Organization: OpenEmbedded ()", "versionInfo": "4.25.3"}, {"SPDXID": "SPDXRef-Download-protobuf-1", "copyrightText": "NOASSERTION", "downloadLocation": "gitsm+https://github.com/protocolbuffers/protobuf.git@4a2aef570deb2bfb8927426558701e8bfc26f2a4", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "licenseInfoFromFiles": ["NOASSERTION"], "name": "protobuf-source-1", "supplier": "NOASSERTION"}], "relationships": [{"relatedSpdxElement": "SPDXRef-Recipe-protobuf", "relationshipType": "DESCRIBES", "spdxElementId": "SPDXRef-DOCUMENT"}, {"relatedSpdxElement": "SPDXRef-Download-protobuf-1", "relationshipType": "DESCRIBES", "spdxElementId": "SPDXRef-DOCUMENT"}, {"relatedSpdxElement": "SPDXRef-Recipe-protobuf", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "SPDXRef-Download-protobuf-1"}, {"relatedSpdxElement": "SPDXRef-Recipe-protobuf", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-abseil-cpp:SPDXRef-Recipe-abseil-cpp"}, {"relatedSpdxElement": "SPDXRef-Recipe-protobuf", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-cmake-native:SPDXRef-Recipe-cmake-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-protobuf", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-gcc-cross-x86_64:SPDXRef-Recipe-gcc-cross-x86_64"}, {"relatedSpdxElement": "SPDXRef-Recipe-protobuf", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-gcc-runtime:SPDXRef-Recipe-gcc-runtime"}, {"relatedSpdxElement": "SPDXRef-Recipe-protobuf", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-glibc:SPDXRef-Recipe-glibc"}, {"relatedSpdxElement": "SPDXRef-Recipe-protobuf", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-ninja-native:SPDXRef-Recipe-ninja-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-protobuf", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-pkgconfig-native:SPDXRef-Recipe-pkgconfig-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-protobuf", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-protobuf-native:SPDXRef-Recipe-protobuf-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-protobuf", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-zlib:SPDXRef-Recipe-zlib"}], "spdxVersion": "SPDX-2.2"}