Packages / Alpine Linux 3.23 / spdx-licenses

[Source: spdx-licenses]

Package: spdx-licenses (3.27.0-r0)

Various data formats for the SPDX License List

Download spdx-licenses

ArchitecturePackage sizeInstalled sizeFilesPackage
aarch641.2 KiB0 Blist of filesNot published
x86_641.2 KiB0 Blist of filesNot published

Package-file coverage (not observed)

The active import did not include the repository's package-file index (Debian Contents for this cohort). This is missing coverage, not an observation that the package contains or installs zero files.

No package-associated file paths were observed for the displayed build metadata.

Field source: Alpine Linux 3.23 community aarch64

Use this package

OpenFactory can boot this operating system in a browser VM, or start a build that includes the native package name from this record.

Try Alpine Linux 3.23 in the browserBuild an image that includes spdx-licenses

Versions, suites, and repositories

Each row is recorded package-index metadata for one version, architecture, suite, and repository. Names, URLs, and sizes are source-reported; a link is a potentially mutable retrieval location, not an OpenFactory redistribution claim or proof that OpenFactory retained the artifact bytes.

VersionReleaseArchitectureRepositoryPackage sizeInstalled sizePublisher repository artifact
3.27.0-r0v3.23 / communityaarch64Alpine Linux 3.23 · community · aarch641.2 KiB0 BNot reported
3.27.0-r0v3.23 / communityx86_64Alpine Linux 3.23 · community · x86_641.2 KiB0 BNot reported

Field source: Alpine Linux 3.23 community aarch64

Known vulnerabilities

No matching advisories in the tracked sources.

Last synced:

[CVE catalog]

Checksums

Repository signatures authenticate metadata. Artifact hashing is recorded separately. Neither establishes package safety.

3.27.0-r0 / aarch64Observed Sep 1, 2026apk-checksum Q1uK9Nk+z9dR…2XTxcHs=Source-reported digest

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Source-reported digest (apk-checksum): Q1uK9Nk+z9dR7wSgkyvr8W2XTxcHs=

Field source: Alpine Linux 3.23 community aarch64

3.27.0-r0 / x86_64Observed Sep 1, 2026apk-checksum Q1ipmQDPubbQ…buUQ9ro=Source-reported digest

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Source-reported digest (apk-checksum): Q1ipmQDPubbQpOEBAOK/x5buUQ9ro=

Field source: Alpine Linux 3.23 community x86_64

Sources

  • Alpine Linux 3.23 community aarch64Sep 1, 2026

    Authoritative source; repository metadata signature verified

    Signature evidence

    v3-23-community-aarch64:9d4d5738ce344f6ec950cf8aa259d9bc21eafa803fab1bb0c1e6a8fbc90ea2ea

    Repository-signature verification record
    Signed-object SHA-256
    02d9f1e388110632b9800d2af508ed93384639622858cd16d0809803579468e2
    Keyring revision
    alpine-aarch64
    SHA-256 776977684fe729c59796fb6fc0279858c44c1195302892a8da4bbb3ee167e67f
    Tool and policy
    1
    openfactory-software-catalog-signature-v1
    Verification time
    Sep 1, 2026
  • Alpine Linux 3.23 community x86_64Sep 1, 2026

    Authoritative source; repository metadata signature verified

    Signature evidence

    v3-23-community-x86-64:593675b29d97519f9b0067c786106f4eaad38b1adf120dbc952a7e6eec9e7c70

    Repository-signature verification record
    Signed-object SHA-256
    0f6caafa33babbeb740964ae2865cb4b365c5d32dd4162857a2d264e7afcb1c9
    Keyring revision
    alpine-x86_64
    SHA-256 203c4f30dddf6b0661bdf0255ddc5b7e2f703f580ae61791f00f81945132b509
    Tool and policy
    1
    openfactory-software-catalog-signature-v1
    Verification time
    Sep 1, 2026