{"SPDXID": "SPDXRef-DOCUMENT", "creationInfo": {"comment": "This document was created by analyzing recipe files during the build.", "created": "2026-06-06T17:46:09Z", "creators": ["Tool: OpenEmbedded Core create-spdx.bbclass", "Organization: OpenEmbedded ()", "Person: N/A ()"], "licenseListVersion": "3.14"}, "dataLicense": "CC0-1.0", "documentNamespace": "http://spdx.org/spdxdocs/recipe-go-runtime-393054ae-505a-5f30-8e3b-75c9021ab3f5", "externalDocumentRefs": [{"checksum": {"algorithm": "SHA1", "checksumValue": "d296762c233f157e4d720db8e9a6356be17f0b3f"}, "externalDocumentId": "DocumentRef-dependency-recipe-gcc-cross-aarch64", "spdxDocument": "http://spdx.org/spdxdocs/recipe-gcc-cross-aarch64-e05122e2-842a-5b45-a068-7a450933ae13"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "9cf53ce36d31656610b32136ebc4613391786e44"}, "externalDocumentId": "DocumentRef-dependency-recipe-gcc-runtime", "spdxDocument": "http://spdx.org/spdxdocs/recipe-gcc-runtime-a8177036-816d-5f00-a030-969647302050"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "5bf49e7815632a4cf96599f363ea890671350f90"}, "externalDocumentId": "DocumentRef-dependency-recipe-glibc", "spdxDocument": "http://spdx.org/spdxdocs/recipe-glibc-8ec5f1d4-204b-530d-8854-79bbb314d6d7"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "22542c3625e97d73ddc8c7fc549c0217c57fb801"}, "externalDocumentId": "DocumentRef-dependency-recipe-go-binary-native", "spdxDocument": "http://spdx.org/spdxdocs/recipe-go-binary-native-6f599abf-8971-5f57-816c-3f71def8a65b"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "55d736b2e5e61a0e6f36be12a71201ae6f086019"}, "externalDocumentId": "DocumentRef-dependency-recipe-go-cross-cortexa72-cortexa53", "spdxDocument": "http://spdx.org/spdxdocs/recipe-go-cross-cortexa72-cortexa53-2c98fa9b-fac4-5281-8341-8dc08e1c6c3a"}], "name": "recipe-go-runtime", "packages": [{"SPDXID": "SPDXRef-Recipe-go-runtime", "copyrightText": "NOASSERTION", "description": " The Go programming language is an open source project to make  programmers more productive. Go is expressive, concise, clean, and efficient. Its concurrency mechanisms make it easy to write programs that get the most out of multicore and networked machines, while its novel type system enables flexible and modular program construction. Go compiles quickly to machine code yet has the convenience of garbage collection and the power of run-time reflection. It's a fast, statically typed, compiled language that feels like a dynamically typed, interpreted language.", "downloadLocation": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceLocator": "cpe:2.3:*:golang:go:1.22.12:*:*:*:*:*:*:*", "referenceType": "http://spdx.org/rdf/references/cpe23Type"}], "homepage": " http://golang.org/", "licenseConcluded": "NOASSERTION", "licenseDeclared": "BSD-3-Clause", "licenseInfoFromFiles": ["NOASSERTION"], "name": "go-runtime", "sourceInfo": "CVEs fixed: CVE-2025-4673 CVE-2025-61724 CVE-2025-58189 CVE-2025-58185 CVE-2025-58187 CVE-2025-47912 CVE-2025-61727 CVE-2025-58188 CVE-2025-61723 CVE-2025-22870 CVE-2025-61729 CVE-2025-22871 CVE-2025-4674 CVE-2025-47906 CVE-2025-47907", "summary": "Go programming language compiler", "supplier": "Organization: OpenEmbedded ()", "versionInfo": "1.22.12"}, {"SPDXID": "SPDXRef-Download-go-runtime-1", "checksums": [{"algorithm": "SHA256", "checksumValue": "012a7e1f37f362c0918c1dfa3334458ac2da1628c4b9cf4d9ca02db986e17d71"}], "copyrightText": "NOASSERTION", "downloadLocation": "https://golang.org/dl/go1.22.12.src.tar.gz", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "licenseInfoFromFiles": ["NOASSERTION"], "name": "go-runtime-source-1", "supplier": "NOASSERTION"}], "relationships": [{"relatedSpdxElement": "SPDXRef-Recipe-go-runtime", "relationshipType": "DESCRIBES", "spdxElementId": "SPDXRef-DOCUMENT"}, {"relatedSpdxElement": "SPDXRef-Download-go-runtime-1", "relationshipType": "DESCRIBES", "spdxElementId": "SPDXRef-DOCUMENT"}, {"relatedSpdxElement": "SPDXRef-Recipe-go-runtime", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "SPDXRef-Download-go-runtime-1"}, {"relatedSpdxElement": "SPDXRef-Recipe-go-runtime", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-gcc-cross-aarch64:SPDXRef-Recipe-gcc-cross-aarch64"}, {"relatedSpdxElement": "SPDXRef-Recipe-go-runtime", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-gcc-runtime:SPDXRef-Recipe-gcc-runtime"}, {"relatedSpdxElement": "SPDXRef-Recipe-go-runtime", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-glibc:SPDXRef-Recipe-glibc"}, {"relatedSpdxElement": "SPDXRef-Recipe-go-runtime", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-go-binary-native:SPDXRef-Recipe-go-binary-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-go-runtime", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-go-cross-cortexa72-cortexa53:SPDXRef-Recipe-go-cross-cortexa72-cortexa53"}], "spdxVersion": "SPDX-2.2"}