{"SPDXID": "SPDXRef-DOCUMENT", "creationInfo": {"comment": "This document was created by analyzing recipe files during the build.", "created": "2026-10-19T10:32:44Z", "creators": ["Tool: OpenEmbedded Core create-spdx.bbclass", "Organization: OpenEmbedded ()", "Person: N/A ()"], "licenseListVersion": "3.14"}, "dataLicense": "CC0-1.0", "documentNamespace": "http://spdx.org/spdxdocs/recipe-perl-6f42614c-138d-5270-8ad2-6a8ebaf640d1", "externalDocumentRefs": [{"checksum": {"algorithm": "SHA1", "checksumValue": "03def57800c1f1fb09af550ccb3dbcb569879bff"}, "externalDocumentId": "DocumentRef-dependency-recipe-gcc-cross-aarch64", "spdxDocument": "http://spdx.org/spdxdocs/recipe-gcc-cross-aarch64-e05122e2-842a-5b45-a068-7a450933ae13"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "55a2f3ed40cb19687abaaede46245fa88cb079c5"}, "externalDocumentId": "DocumentRef-dependency-recipe-gcc-runtime", "spdxDocument": "http://spdx.org/spdxdocs/recipe-gcc-runtime-a8177036-816d-5f00-a030-969647302050"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "75d4a6a77d90cd4796a1277973a8db0bb04db2a8"}, "externalDocumentId": "DocumentRef-dependency-recipe-gdbm", "spdxDocument": "http://spdx.org/spdxdocs/recipe-gdbm-a48e2732-379a-500a-8da1-a82a19dc8ab3"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "0f8f2ed9e2627f546c5ae56571a211668c6d4bdc"}, "externalDocumentId": "DocumentRef-dependency-recipe-glibc", "spdxDocument": "http://spdx.org/spdxdocs/recipe-glibc-8ec5f1d4-204b-530d-8854-79bbb314d6d7"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "08a222811806cd4009f1496b85711f3eba31afaf"}, "externalDocumentId": "DocumentRef-dependency-recipe-libxcrypt", "spdxDocument": "http://spdx.org/spdxdocs/recipe-libxcrypt-efbb6a8f-45ef-56f5-b465-7bb29439adf1"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "a5b04b94220364e637bfde51d3e7d23a425138aa"}, "externalDocumentId": "DocumentRef-dependency-recipe-make-native", "spdxDocument": "http://spdx.org/spdxdocs/recipe-make-native-df9bc34d-be65-55f4-94e1-8830884fb2fe"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "24a21d563495e1a17f0c03e062f36542ae3ab0fa"}, "externalDocumentId": "DocumentRef-dependency-recipe-opkg-utils", "spdxDocument": "http://spdx.org/spdxdocs/recipe-opkg-utils-f3c24e09-f6ff-5f5c-ab93-a37218f4e1a7"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "92becf42731e058ba7b9ba6c2d5c56f0f862b51c"}, "externalDocumentId": "DocumentRef-dependency-recipe-perlcross-native", "spdxDocument": "http://spdx.org/spdxdocs/recipe-perlcross-native-2c1f6985-82ff-5005-b2a1-d04a20bf908d"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "aa7c682df9f9fc693cf4d3647a00be892f6b2027"}, "externalDocumentId": "DocumentRef-dependency-recipe-zlib", "spdxDocument": "http://spdx.org/spdxdocs/recipe-zlib-5b14b6f4-7132-524f-8cee-cdebd6df7ce5"}], "name": "recipe-perl", "packages": [{"SPDXID": "SPDXRef-Recipe-perl", "copyrightText": "NOASSERTION", "description": "Perl is a highly capable, feature-rich programming language", "downloadLocation": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceLocator": "cpe:2.3:*:*:perl:5.38.4:*:*:*:*:*:*:*", "referenceType": "http://spdx.org/rdf/references/cpe23Type"}], "homepage": "http://www.perl.org/", "licenseConcluded": "NOASSERTION", "licenseDeclared": "Artistic-1.0 OR GPL-1.0-or-later", "licenseInfoFromFiles": ["NOASSERTION"], "name": "perl", "sourceInfo": "CVEs fixed: CVE-2026-19487 CVE-2026-13221 CVE-2025-40909 CVE-2026-8376 CVE-2026-57432", "summary": "Perl scripting language", "supplier": "Organization: OpenEmbedded ()", "versionInfo": "5.38.4"}, {"SPDXID": "SPDXRef-Download-perl-1", "checksums": [{"algorithm": "SHA256", "checksumValue": "fb888accf8b50b5180e91166e5153608be294c57c19878e95f7659c1f1f12758"}], "copyrightText": "NOASSERTION", "downloadLocation": "https://www.cpan.org/src/5.0/perl-5.38.4.tar.gz", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "licenseInfoFromFiles": ["NOASSERTION"], "name": "perl-source-1", "supplier": "NOASSERTION"}], "relationships": [{"relatedSpdxElement": "SPDXRef-Recipe-perl", "relationshipType": "DESCRIBES", "spdxElementId": "SPDXRef-DOCUMENT"}, {"relatedSpdxElement": "SPDXRef-Download-perl-1", "relationshipType": "DESCRIBES", "spdxElementId": "SPDXRef-DOCUMENT"}, {"relatedSpdxElement": "SPDXRef-Recipe-perl", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "SPDXRef-Download-perl-1"}, {"relatedSpdxElement": "SPDXRef-Recipe-perl", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-gcc-cross-aarch64:SPDXRef-Recipe-gcc-cross-aarch64"}, {"relatedSpdxElement": "SPDXRef-Recipe-perl", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-gcc-runtime:SPDXRef-Recipe-gcc-runtime"}, {"relatedSpdxElement": "SPDXRef-Recipe-perl", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-gdbm:SPDXRef-Recipe-gdbm"}, {"relatedSpdxElement": "SPDXRef-Recipe-perl", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-glibc:SPDXRef-Recipe-glibc"}, {"relatedSpdxElement": "SPDXRef-Recipe-perl", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-libxcrypt:SPDXRef-Recipe-libxcrypt"}, {"relatedSpdxElement": "SPDXRef-Recipe-perl", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-make-native:SPDXRef-Recipe-make-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-perl", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-opkg-utils:SPDXRef-Recipe-opkg-utils"}, {"relatedSpdxElement": "SPDXRef-Recipe-perl", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-perlcross-native:SPDXRef-Recipe-perlcross-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-perl", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-zlib:SPDXRef-Recipe-zlib"}], "spdxVersion": "SPDX-2.2"}