{"SPDXID": "SPDXRef-DOCUMENT", "creationInfo": {"comment": "This document was created by analyzing recipe files during the build.", "created": "2026-06-10T13:47:46Z", "creators": ["Tool: OpenEmbedded Core create-spdx.bbclass", "Organization: OpenEmbedded ()", "Person: N/A ()"], "licenseListVersion": "3.14"}, "dataLicense": "CC0-1.0", "documentNamespace": "http://spdx.org/spdxdocs/recipe-python3-native-34cc7325-70e1-5a3a-873a-66b0c1f8d193", "externalDocumentRefs": [{"checksum": {"algorithm": "SHA1", "checksumValue": "35f37b5293854c258a05a2c826772e8c620529ce"}, "externalDocumentId": "DocumentRef-dependency-recipe-autoconf-archive-native", "spdxDocument": "http://spdx.org/spdxdocs/recipe-autoconf-archive-native-fd00b327-70b9-5c20-8c90-9c0103cbc9f0"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "7184adccc0125fc9c2281bc5b4f4986d6c4f16df"}, "externalDocumentId": "DocumentRef-dependency-recipe-autoconf-native", "spdxDocument": "http://spdx.org/spdxdocs/recipe-autoconf-native-124e4a29-7bee-575a-9a44-2226fa6af9c9"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "a5e365b29390a54269a144c6f0dac2bf78f6a4ea"}, "externalDocumentId": "DocumentRef-dependency-recipe-automake-native", "spdxDocument": "http://spdx.org/spdxdocs/recipe-automake-native-e3046935-37af-5c2e-b371-e883e5ef1216"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "8ad4fa9c9bca130f1c2a7c52a55f75660c1ccea0"}, "externalDocumentId": "DocumentRef-dependency-recipe-bzip2-native", "spdxDocument": "http://spdx.org/spdxdocs/recipe-bzip2-native-9d1fa3cb-3643-5f5e-9360-58c1eb05c68e"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "e14e3628423730612b0c9f94b2cbc29bfebadf70"}, "externalDocumentId": "DocumentRef-dependency-recipe-expat-native", "spdxDocument": "http://spdx.org/spdxdocs/recipe-expat-native-77c42bb5-262f-5325-a2b1-1b01bd0d010a"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "2b12aee5628ff0086a007f07ec8082278fa35bbb"}, "externalDocumentId": "DocumentRef-dependency-recipe-gdbm-native", "spdxDocument": "http://spdx.org/spdxdocs/recipe-gdbm-native-41413a0a-1570-5d00-a5f5-8d068dbf5997"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "0c965021846a4bbe34fed1abb847c01808702d17"}, "externalDocumentId": "DocumentRef-dependency-recipe-libedit-native", "spdxDocument": "http://spdx.org/spdxdocs/recipe-libedit-native-6f691384-6781-5ebb-82b1-bb916697c420"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "bf7eb75d8311c72ed14349f6b4c53635e02fc545"}, "externalDocumentId": "DocumentRef-dependency-recipe-libffi-native", "spdxDocument": "http://spdx.org/spdxdocs/recipe-libffi-native-16d6a62d-8719-56f3-a4ce-660f29fe886a"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "7e4af159eca7af907db0fda4394a2ca022503d0d"}, "externalDocumentId": "DocumentRef-dependency-recipe-libnsl2-native", "spdxDocument": "http://spdx.org/spdxdocs/recipe-libnsl2-native-25b9f36e-c12d-5dcf-bf25-5892da981acb"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "24419a3f11bbce53fb2276cde6d587507f8af756"}, "externalDocumentId": "DocumentRef-dependency-recipe-libtirpc-native", "spdxDocument": "http://spdx.org/spdxdocs/recipe-libtirpc-native-95d82d43-3a82-5fc4-812e-a93eeb169deb"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "a5aa62dfff4261e1eecc5d015b1592c8fd6f16a3"}, "externalDocumentId": "DocumentRef-dependency-recipe-libtool-native", "spdxDocument": "http://spdx.org/spdxdocs/recipe-libtool-native-af5e5210-5bed-5317-878d-15206849f191"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "4cb90bec523ad3b6cb94be6ed7127b7e98ee63c6"}, "externalDocumentId": "DocumentRef-dependency-recipe-ncurses-native", "spdxDocument": "http://spdx.org/spdxdocs/recipe-ncurses-native-6ee9d8f0-8e87-5b73-a420-c66a1123b8a6"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "b2deed3c104fcc72c14a37db7386dbf68ea8cebe"}, "externalDocumentId": "DocumentRef-dependency-recipe-openssl-native", "spdxDocument": "http://spdx.org/spdxdocs/recipe-openssl-native-29712d98-dace-570a-bc97-e67cefc5997d"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "0b82fcb6d356024080a031afe9a7e38b5ab6e3e1"}, "externalDocumentId": "DocumentRef-dependency-recipe-pkgconfig-native", "spdxDocument": "http://spdx.org/spdxdocs/recipe-pkgconfig-native-f02bc6f9-93d3-5de4-bfc1-f49135872105"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "94b5f3e48a31a31d7b6692b6c19086015970d6f2"}, "externalDocumentId": "DocumentRef-dependency-recipe-sqlite3-native", "spdxDocument": "http://spdx.org/spdxdocs/recipe-sqlite3-native-37e6312b-56b6-52d3-af92-d788e79f1637"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "dec349d6ec31e421df8d25864ca630b4f7307fcc"}, "externalDocumentId": "DocumentRef-dependency-recipe-util-linux-libuuid-native", "spdxDocument": "http://spdx.org/spdxdocs/recipe-util-linux-libuuid-native-103ab003-39fa-5581-bc0b-bcf14aad3f6c"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "87cadcb19168804a465b20475727cbe2e3aa50ad"}, "externalDocumentId": "DocumentRef-dependency-recipe-xz-native", "spdxDocument": "http://spdx.org/spdxdocs/recipe-xz-native-fb9b6d7a-1472-5337-888f-d4bf9e719144"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "b290d844c53b06c87db9b0d945bc24e2c5a5db21"}, "externalDocumentId": "DocumentRef-dependency-recipe-zlib-native", "spdxDocument": "http://spdx.org/spdxdocs/recipe-zlib-native-1fc15e1f-ff2b-539e-861e-33e08efd56d2"}], "name": "recipe-python3-native", "packages": [{"SPDXID": "SPDXRef-Recipe-python3-native", "annotations": [{"annotationDate": "2026-06-10T13:47:46Z", "annotationType": "OTHER", "annotator": "Tool: oe-spdx-creator - 1.0", "comment": "isNative"}], "copyrightText": "NOASSERTION", "description": "Python is a programming language that lets you work more quickly and integrate your systems more effectively.", "downloadLocation": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceLocator": "cpe:2.3:*:python:python:3.12.12:*:*:*:*:*:*:*", "referenceType": "http://spdx.org/rdf/references/cpe23Type"}, {"referenceCategory": "SECURITY", "referenceLocator": "cpe:2.3:*:python_software_foundation:python:3.12.12:*:*:*:*:*:*:*", "referenceType": "http://spdx.org/rdf/references/cpe23Type"}, {"referenceCategory": "SECURITY", "referenceLocator": "cpe:2.3:*:*:cpython:3.12.12:*:*:*:*:*:*:*", "referenceType": "http://spdx.org/rdf/references/cpe23Type"}], "homepage": "http://www.python.org", "licenseConcluded": "NOASSERTION", "licenseDeclared": "PSF-2.0", "licenseInfoFromFiles": ["NOASSERTION"], "name": "python3-native", "sourceInfo": "CVEs fixed: CVE-2025-13837 CVE-2025-13836 CVE-2025-12084 CVE-2025-6075", "summary": "The Python Programming Language", "supplier": "Organization: OpenEmbedded ()", "versionInfo": "3.12.12"}, {"SPDXID": "SPDXRef-Download-python3-native-1", "checksums": [{"algorithm": "SHA256", "checksumValue": "fb85a13414b028c49ba18bbd523c2d055a30b56b18b92ce454ea2c51edc656c4"}], "copyrightText": "NOASSERTION", "downloadLocation": "http://www.python.org/ftp/python/3.12.12/Python-3.12.12.tar.xz", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "licenseInfoFromFiles": ["NOASSERTION"], "name": "python3-native-source-1", "supplier": "NOASSERTION"}], "relationships": [{"relatedSpdxElement": "SPDXRef-Recipe-python3-native", "relationshipType": "DESCRIBES", "spdxElementId": "SPDXRef-DOCUMENT"}, {"relatedSpdxElement": "SPDXRef-Download-python3-native-1", "relationshipType": "DESCRIBES", "spdxElementId": "SPDXRef-DOCUMENT"}, {"relatedSpdxElement": "SPDXRef-Recipe-python3-native", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "SPDXRef-Download-python3-native-1"}, {"relatedSpdxElement": "SPDXRef-Recipe-python3-native", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-autoconf-archive-native:SPDXRef-Recipe-autoconf-archive-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-python3-native", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-autoconf-native:SPDXRef-Recipe-autoconf-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-python3-native", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-automake-native:SPDXRef-Recipe-automake-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-python3-native", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-bzip2-native:SPDXRef-Recipe-bzip2-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-python3-native", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-expat-native:SPDXRef-Recipe-expat-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-python3-native", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-gdbm-native:SPDXRef-Recipe-gdbm-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-python3-native", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-libedit-native:SPDXRef-Recipe-libedit-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-python3-native", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-libffi-native:SPDXRef-Recipe-libffi-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-python3-native", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-libnsl2-native:SPDXRef-Recipe-libnsl2-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-python3-native", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-libtirpc-native:SPDXRef-Recipe-libtirpc-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-python3-native", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-libtool-native:SPDXRef-Recipe-libtool-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-python3-native", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-ncurses-native:SPDXRef-Recipe-ncurses-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-python3-native", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-openssl-native:SPDXRef-Recipe-openssl-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-python3-native", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-pkgconfig-native:SPDXRef-Recipe-pkgconfig-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-python3-native", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-sqlite3-native:SPDXRef-Recipe-sqlite3-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-python3-native", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-util-linux-libuuid-native:SPDXRef-Recipe-util-linux-libuuid-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-python3-native", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-xz-native:SPDXRef-Recipe-xz-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-python3-native", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-zlib-native:SPDXRef-Recipe-zlib-native"}], "spdxVersion": "SPDX-2.2"}