{"SPDXID": "SPDXRef-DOCUMENT", "creationInfo": {"comment": "This document was created by analyzing recipe files during the build.", "created": "2025-07-31T16:49:01Z", "creators": ["Tool: OpenEmbedded Core create-spdx.bbclass", "Organization: OpenEmbedded ()", "Person: N/A ()"], "licenseListVersion": "3.14"}, "dataLicense": "CC0-1.0", "documentNamespace": "http://spdx.org/spdxdocs/recipe-grpc-aa076c07-7337-5132-abdf-ab93802e40eb", "externalDocumentRefs": [{"checksum": {"algorithm": "SHA1", "checksumValue": "12fdf181d7697ad3518118f8650f5ca716449e7a"}, "externalDocumentId": "DocumentRef-dependency-recipe-abseil-cpp", "spdxDocument": "http://spdx.org/spdxdocs/recipe-abseil-cpp-fe167ef4-926a-54ff-9942-7f1f1e7ae827"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "cca6de26adfc499bd88aed2cffcb0b49ec696b37"}, "externalDocumentId": "DocumentRef-dependency-recipe-c-ares", "spdxDocument": "http://spdx.org/spdxdocs/recipe-c-ares-e950013a-dec8-5c7f-bc83-ff0de1c506e7"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "e3e41199a9cd654aa02b6684c9fdbf21fbe4962d"}, "externalDocumentId": "DocumentRef-dependency-recipe-cmake-native", "spdxDocument": "http://spdx.org/spdxdocs/recipe-cmake-native-065aeeea-e673-57cc-a9f5-a3fe1fc2b3ea"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "61c4c9fa6caa523659d597c841a54e13f2bb60c1"}, "externalDocumentId": "DocumentRef-dependency-recipe-gcc-cross-x86_64", "spdxDocument": "http://spdx.org/spdxdocs/recipe-gcc-cross-x86_64-a54677b2-404d-5f88-948b-b1314035058d"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "30520a4ae26791b7983db8f8679fe7835a8db213"}, "externalDocumentId": "DocumentRef-dependency-recipe-gcc-runtime", "spdxDocument": "http://spdx.org/spdxdocs/recipe-gcc-runtime-a8177036-816d-5f00-a030-969647302050"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "213cdc28cbe9aab8984a310ac6b382f25ab74e7e"}, "externalDocumentId": "DocumentRef-dependency-recipe-glibc", "spdxDocument": "http://spdx.org/spdxdocs/recipe-glibc-8ec5f1d4-204b-530d-8854-79bbb314d6d7"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "a1a7a314a67c268f425caed9e8d4fb505d564bdc"}, "externalDocumentId": "DocumentRef-dependency-recipe-googletest", "spdxDocument": "http://spdx.org/spdxdocs/recipe-googletest-b8b57919-3cdf-56a1-94b4-e31e8d705671"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "bd73dc42afe6015f52f440314c7297f4cbc60c54"}, "externalDocumentId": "DocumentRef-dependency-recipe-grpc-native", "spdxDocument": "http://spdx.org/spdxdocs/recipe-grpc-native-94a3fae6-4d6d-5691-8fd3-e0bf04913c1c"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "ed855f606f6a71e8d80743558a6024600dd29a4d"}, "externalDocumentId": "DocumentRef-dependency-recipe-libnsl2", "spdxDocument": "http://spdx.org/spdxdocs/recipe-libnsl2-b9aef6fc-7a15-5b2e-8c92-3bf580d97cc0"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "8913d3066e9af698eea1a2659af63de2c7d05cc4"}, "externalDocumentId": "DocumentRef-dependency-recipe-ninja-native", "spdxDocument": "http://spdx.org/spdxdocs/recipe-ninja-native-69509a4d-51be-58e4-8b69-f8cab885e13f"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "02db2f293d6de11fd3b740a83bcacfa81b03a60e"}, "externalDocumentId": "DocumentRef-dependency-recipe-openssl", "spdxDocument": "http://spdx.org/spdxdocs/recipe-openssl-48156327-17ba-5e34-b313-de0c1f21058e"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "73d806023c8dad1ffbc85b85597aff2b1ab3acc6"}, "externalDocumentId": "DocumentRef-dependency-recipe-pkgconfig-native", "spdxDocument": "http://spdx.org/spdxdocs/recipe-pkgconfig-native-f02bc6f9-93d3-5de4-bfc1-f49135872105"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "2db410746340f82c7e7d2ef5599f0e9bd156655b"}, "externalDocumentId": "DocumentRef-dependency-recipe-protobuf", "spdxDocument": "http://spdx.org/spdxdocs/recipe-protobuf-3f06ff92-5365-567d-b44f-b0cfa5839d59"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "3d488b8654b80c90c2b224ef40426061243c17a0"}, "externalDocumentId": "DocumentRef-dependency-recipe-protobuf-native", "spdxDocument": "http://spdx.org/spdxdocs/recipe-protobuf-native-ddfe1e2d-16c7-58ed-852a-5fad8b8771e7"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "c72f296125777637414153a74cb46202377969b6"}, "externalDocumentId": "DocumentRef-dependency-recipe-re2", "spdxDocument": "http://spdx.org/spdxdocs/recipe-re2-af46b027-265c-53ec-8c44-dbddce00fdbf"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "c16f972057a1fed5f89ba38b1d883f0bad3d5f01"}, "externalDocumentId": "DocumentRef-dependency-recipe-zlib", "spdxDocument": "http://spdx.org/spdxdocs/recipe-zlib-5b14b6f4-7132-524f-8cee-cdebd6df7ce5"}], "name": "recipe-grpc", "packages": [{"SPDXID": "SPDXRef-Recipe-grpc", "copyrightText": "NOASSERTION", "description": "A high performance, open source, general-purpose RPC framework. Provides gRPC libraries for multiple languages written on top of shared C core library (C++, Node.js, Python, Ruby, Objective-C, PHP, C#)", "downloadLocation": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceLocator": "cpe:2.3:*:*:grpc:1.60.1:*:*:*:*:*:*:*", "referenceType": "http://spdx.org/rdf/references/cpe23Type"}], "homepage": "https://github.com/grpc/grpc", "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0 AND BSD-3-Clause AND MPL-2.0", "licenseInfoFromFiles": ["NOASSERTION"], "name": "grpc", "sourceInfo": "CVEs fixed: CVE-2024-11407 CVE-2024-7246", "summary": "grpc version 1.60.1-r0", "supplier": "Organization: OpenEmbedded ()", "versionInfo": "1.60.1"}, {"SPDXID": "SPDXRef-Download-grpc-1", "copyrightText": "NOASSERTION", "downloadLocation": "gitsm+https://github.com/grpc/grpc.git@e5ae3b6b44bf3b64d24bfb4b4f82556239b986db", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "licenseInfoFromFiles": ["NOASSERTION"], "name": "grpc-source-1", "supplier": "NOASSERTION"}], "relationships": [{"relatedSpdxElement": "SPDXRef-Recipe-grpc", "relationshipType": "DESCRIBES", "spdxElementId": "SPDXRef-DOCUMENT"}, {"relatedSpdxElement": "SPDXRef-Download-grpc-1", "relationshipType": "DESCRIBES", "spdxElementId": "SPDXRef-DOCUMENT"}, {"relatedSpdxElement": "SPDXRef-Recipe-grpc", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "SPDXRef-Download-grpc-1"}, {"relatedSpdxElement": "SPDXRef-Recipe-grpc", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-abseil-cpp:SPDXRef-Recipe-abseil-cpp"}, {"relatedSpdxElement": "SPDXRef-Recipe-grpc", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-c-ares:SPDXRef-Recipe-c-ares"}, {"relatedSpdxElement": "SPDXRef-Recipe-grpc", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-cmake-native:SPDXRef-Recipe-cmake-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-grpc", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-gcc-cross-x86_64:SPDXRef-Recipe-gcc-cross-x86_64"}, {"relatedSpdxElement": "SPDXRef-Recipe-grpc", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-gcc-runtime:SPDXRef-Recipe-gcc-runtime"}, {"relatedSpdxElement": "SPDXRef-Recipe-grpc", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-glibc:SPDXRef-Recipe-glibc"}, {"relatedSpdxElement": "SPDXRef-Recipe-grpc", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-googletest:SPDXRef-Recipe-googletest"}, {"relatedSpdxElement": "SPDXRef-Recipe-grpc", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-grpc-native:SPDXRef-Recipe-grpc-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-grpc", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-libnsl2:SPDXRef-Recipe-libnsl2"}, {"relatedSpdxElement": "SPDXRef-Recipe-grpc", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-ninja-native:SPDXRef-Recipe-ninja-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-grpc", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-openssl:SPDXRef-Recipe-openssl"}, {"relatedSpdxElement": "SPDXRef-Recipe-grpc", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-pkgconfig-native:SPDXRef-Recipe-pkgconfig-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-grpc", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-protobuf:SPDXRef-Recipe-protobuf"}, {"relatedSpdxElement": "SPDXRef-Recipe-grpc", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-protobuf-native:SPDXRef-Recipe-protobuf-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-grpc", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-re2:SPDXRef-Recipe-re2"}, {"relatedSpdxElement": "SPDXRef-Recipe-grpc", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-zlib:SPDXRef-Recipe-zlib"}], "spdxVersion": "SPDX-2.2"}