{"SPDXID": "SPDXRef-DOCUMENT", "creationInfo": {"comment": "This document was created by analyzing recipe files during the build.", "created": "2025-11-10T23:12:49Z", "creators": ["Tool: OpenEmbedded Core create-spdx.bbclass", "Organization: OpenEmbedded ()", "Person: N/A ()"], "licenseListVersion": "3.14"}, "dataLicense": "CC0-1.0", "documentNamespace": "http://spdx.org/spdxdocs/recipe-go-runtime-393054ae-505a-5f30-8e3b-75c9021ab3f5", "externalDocumentRefs": [{"checksum": {"algorithm": "SHA1", "checksumValue": "4b7f5865d8e834188b7294e269afbedc2bf999ae"}, "externalDocumentId": "DocumentRef-dependency-recipe-gcc-cross-aarch64", "spdxDocument": "http://spdx.org/spdxdocs/recipe-gcc-cross-aarch64-e05122e2-842a-5b45-a068-7a450933ae13"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "a35935958d23999d186c099c5957e1eade02e2fc"}, "externalDocumentId": "DocumentRef-dependency-recipe-gcc-runtime", "spdxDocument": "http://spdx.org/spdxdocs/recipe-gcc-runtime-a8177036-816d-5f00-a030-969647302050"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "69ddf125aaa4a50b4dda8f21ad352b25b6557204"}, "externalDocumentId": "DocumentRef-dependency-recipe-glibc", "spdxDocument": "http://spdx.org/spdxdocs/recipe-glibc-8ec5f1d4-204b-530d-8854-79bbb314d6d7"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "8b9ab4557f1c8ebef9d344e3ece981ecd65cf6c5"}, "externalDocumentId": "DocumentRef-dependency-recipe-go-binary-native", "spdxDocument": "http://spdx.org/spdxdocs/recipe-go-binary-native-6f599abf-8971-5f57-816c-3f71def8a65b"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "c31746ba6ddc47028a5d953c035b1b9b404111b7"}, "externalDocumentId": "DocumentRef-dependency-recipe-go-cross-cortexa72-cortexa53", "spdxDocument": "http://spdx.org/spdxdocs/recipe-go-cross-cortexa72-cortexa53-2c98fa9b-fac4-5281-8341-8dc08e1c6c3a"}], "name": "recipe-go-runtime", "packages": [{"SPDXID": "SPDXRef-Recipe-go-runtime", "copyrightText": "NOASSERTION", "description": " The Go programming language is an open source project to make  programmers more productive. Go is expressive, concise, clean, and efficient. Its concurrency mechanisms make it easy to write programs that get the most out of multicore and networked machines, while its novel type system enables flexible and modular program construction. Go compiles quickly to machine code yet has the convenience of garbage collection and the power of run-time reflection. It's a fast, statically typed, compiled language that feels like a dynamically typed, interpreted language.", "downloadLocation": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceLocator": "cpe:2.3:*:golang:go:1.22.12:*:*:*:*:*:*:*", "referenceType": "http://spdx.org/rdf/references/cpe23Type"}], "homepage": " http://golang.org/", "licenseConcluded": "NOASSERTION", "licenseDeclared": "BSD-3-Clause", "licenseInfoFromFiles": ["NOASSERTION"], "name": "go-runtime", "sourceInfo": "CVEs fixed: CVE-2025-4673 CVE-2025-22870 CVE-2025-22871 CVE-2025-4674 CVE-2025-47907", "summary": "Go programming language compiler", "supplier": "Organization: OpenEmbedded ()", "versionInfo": "1.22.12"}, {"SPDXID": "SPDXRef-Download-go-runtime-1", "checksums": [{"algorithm": "SHA256", "checksumValue": "012a7e1f37f362c0918c1dfa3334458ac2da1628c4b9cf4d9ca02db986e17d71"}], "copyrightText": "NOASSERTION", "downloadLocation": "https://golang.org/dl/go1.22.12.src.tar.gz", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "licenseInfoFromFiles": ["NOASSERTION"], "name": "go-runtime-source-1", "supplier": "NOASSERTION"}], "relationships": [{"relatedSpdxElement": "SPDXRef-Recipe-go-runtime", "relationshipType": "DESCRIBES", "spdxElementId": "SPDXRef-DOCUMENT"}, {"relatedSpdxElement": "SPDXRef-Download-go-runtime-1", "relationshipType": "DESCRIBES", "spdxElementId": "SPDXRef-DOCUMENT"}, {"relatedSpdxElement": "SPDXRef-Recipe-go-runtime", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "SPDXRef-Download-go-runtime-1"}, {"relatedSpdxElement": "SPDXRef-Recipe-go-runtime", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-gcc-cross-aarch64:SPDXRef-Recipe-gcc-cross-aarch64"}, {"relatedSpdxElement": "SPDXRef-Recipe-go-runtime", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-gcc-runtime:SPDXRef-Recipe-gcc-runtime"}, {"relatedSpdxElement": "SPDXRef-Recipe-go-runtime", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-glibc:SPDXRef-Recipe-glibc"}, {"relatedSpdxElement": "SPDXRef-Recipe-go-runtime", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-go-binary-native:SPDXRef-Recipe-go-binary-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-go-runtime", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-go-cross-cortexa72-cortexa53:SPDXRef-Recipe-go-cross-cortexa72-cortexa53"}], "spdxVersion": "SPDX-2.2"}