Linux workstation

Fedora 43 native package

appstream-compose

Library for generating AppStream data

Packages / Fedora 43 / Unspecified / appstream-compose

[Source: appstream]

Package: appstream-compose (1.1.3-1.fc43)

External Resources:

Homepage: [github.com]

Similar packages:

Library for generating AppStream data

Library for generating AppStream data.

Other Packages Related to appstream-compose:

  • dep: appstream(aarch-64) (= 1.1.3-1.fc43)

    Package not available

  • dep: ld-linux-aarch64.so.1()(64bit)

    Package not available

  • dep: ld-linux-aarch64.so.1(GLIBC_2.17)(64bit)

    Package not available

  • dep: libappstream.so.5()(64bit)

    Package not available

  • dep: libblake3.so.0()(64bit)

    Package not available

  • dep: libcairo.so.2()(64bit)

    Package not available

  • dep: libfontconfig.so.1()(64bit)

    Package not available

  • dep: libfreetype.so.6()(64bit)

    Package not available

  • dep: libfyaml.so.0()(64bit)

    Package not available

  • dep: libgcc_s.so.1()(64bit)

    Package not available

  • dep: libgcc_s.so.1(GCC_3.0)(64bit)

    Package not available

  • dep: libgcc_s.so.1(GCC_3.3.1)(64bit)

    Package not available

  • dep: libgdk_pixbuf-2.0.so.0()(64bit)

    Package not available

  • dep: libgio-2.0.so.0()(64bit)

    Package not available

  • dep: libglib-2.0.so.0()(64bit)

    Package not available

  • dep: libgobject-2.0.so.0()(64bit)

    Package not available

  • dep: libm.so.6()(64bit)

    Package not available

  • dep: libm.so.6(GLIBC_2.17)(64bit)

    Package not available

  • dep: libpango-1.0.so.0()(64bit)

    Package not available

  • dep: librsvg-2.so.2()(64bit)

    Package not available

  • dep: rtld(GNU_HASH)

    Package not available

  • dep: libc.so.6(GLIBC_2.34)(64bit)

    Package not available

Download appstream-compose

ArchitecturePackage SizeInstalled SizeFiles
aarch64124 KiB419 KiB[list of files]
i686137 KiB356 KiB[list of files]
x86_64131 KiB375 KiB[list of files]

Package file paths (36)

Paths come from the repository package-file index for the observed builds. They describe archive/package associations, not every file that will exist on a running system after maintainer scripts, alternatives, generated state, diversions, or installation choices.

  • /usr/lib64/girepository-1.0/AppStreamCompose-1.0.typelib
  • /usr/lib64/libappstream-compose.so.0
  • /usr/lib64/libappstream-compose.so.1.1.0
  • /usr/lib64/libappstream-compose.so.1.1.3
  • /usr/lib/.build-id
  • /usr/lib/.build-id/0a
  • /usr/lib/.build-id/0a/21d9c3b9371bc72e8616ae7af0752db39bc782
  • /usr/lib/.build-id/1f
  • /usr/lib/.build-id/1f/38f1f91bf493088d5e769aa3562050813bea2c
  • /usr/lib/.build-id/2c
  • /usr/lib/.build-id/2c/1016f4e0c947a11b68ca3417448fc111f64169
  • /usr/lib/.build-id/3b
  • /usr/lib/.build-id/3b/b29aca39a706bd795498cd6366d5ec76fa35d4
  • /usr/lib/.build-id/5c
  • /usr/lib/.build-id/5c/3f21dbce8378d46afd23bb7a2aedf8c539ad79
  • /usr/lib/.build-id/62
  • /usr/lib/.build-id/62/77293c419c3917dbf2be40d6ab3389aa96948a
  • /usr/lib/.build-id/86
  • /usr/lib/.build-id/86/5727ca48affcd0cdc9dd4f6e4a7dde722fba60
  • /usr/lib/.build-id/8d
  • /usr/lib/.build-id/8d/28b28bdf1a19157fe943d4c23b8d36289b5b71
  • /usr/lib/.build-id/ad
  • /usr/lib/.build-id/ad/86857042d671d8c746daaa596c963aa3bca8bc
  • /usr/lib/.build-id/c2
  • /usr/lib/.build-id/c2/c794dd4cc99c7541d39a99f4cafdcf43032e16
  • /usr/lib/.build-id/c4
  • /usr/lib/.build-id/c4/fde575610ce2d3ffa81518e6563a8238ec8037
  • /usr/lib/.build-id/fd
  • /usr/lib/.build-id/fd/f24fa9943cd1f3924e280f6154fc8a32630eb7
  • /usr/libexec/appstreamcli-compose
  • /usr/lib/girepository-1.0/AppStreamCompose-1.0.typelib
  • /usr/lib/libappstream-compose.so.0
  • /usr/lib/libappstream-compose.so.1.1.0
  • /usr/lib/libappstream-compose.so.1.1.3
  • /usr/share/man/man1/appstreamcli-compose.1.gz
  • /usr/share/metainfo/org.freedesktop.appstream.compose.metainfo.xml

Field source: Fedora 43 updates aarch64 revision 43-updates-aarch64:ac6921c749da1e864e0971122151b63bb17e427965b3d9f9312a07b49ff10cac

Use this package

OpenFactory can boot this operating system in a browser VM, or start a build that includes the native package name from this record.

Try Fedora 43 in the browserBuild an image that includes appstream-compose

Versions, suites, and repositories

Each row is recorded package-index metadata for one version, architecture, suite, and repository. Names, URLs, and sizes are source-reported; a link is a potentially mutable retrieval location, not an OpenFactory redistribution claim or proof that OpenFactory retained the artifact bytes.

VersionReleaseArchitectureRepositoryPackage sizeInstalled sizePublisher repository artifact
1.1.3-1.fc4343 / updatesaarch64Fedora 43 · updates · aarch64124 KiB419 KiBPackages/a/appstream-compose-1.1.3-1.fc43.aarch64.rpm
1.1.3-1.fc4343 / updatesi686Fedora 43 · updates · x86_64137 KiB356 KiBPackages/a/appstream-compose-1.1.3-1.fc43.i686.rpm
1.1.3-1.fc4343 / updatesx86_64Fedora 43 · updates · x86_64131 KiB375 KiBPackages/a/appstream-compose-1.1.3-1.fc43.x86_64.rpm
1.1.0-1.fc4343 / everythingaarch64Fedora 43 · Everything · aarch64124 KiB419 KiBPackages/a/appstream-compose-1.1.0-1.fc43.aarch64.rpm
1.1.0-1.fc4343 / everythingi686Fedora 43 · Everything · x86_64136 KiB357 KiBPackages/a/appstream-compose-1.1.0-1.fc43.i686.rpm
1.1.0-1.fc4343 / everythingx86_64Fedora 43 · Everything · x86_64131 KiB375 KiBPackages/a/appstream-compose-1.1.0-1.fc43.x86_64.rpm

Field source: Fedora 43 updates aarch64 revision 43-updates-aarch64:ac6921c749da1e864e0971122151b63bb17e427965b3d9f9312a07b49ff10cac

Checksums and observation dates

For an APT source, signature verification authenticates the repository metadata chain and the Packages index containing this source-reported artifact digest. It does not certify package safety.

1.1.3-1.fc43 / aarch64Observed Sep 1, 2026 to Sep 1, 2026

Verification status: Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Source-reported sha256: 84da24ad3168560ee9bdde2ab2cbdc1783b68158ee25ac63f0f171ff0bcb92fb

After downloading that exact artifact, compare its bytes with the source-reported expected digest:

printf '%s %s\n' '84da24ad3168560ee9bdde2ab2cbdc1783b68158ee25ac63f0f171ff0bcb92fb' 'appstream-compose-1.1.3-1.fc43.aarch64.rpm' | sha256sum --check --strict -

A match establishes equality with the repository metadata value. It does not establish safety or catalog-side artifact retrieval.

Field source: Fedora 43 updates aarch64 revision 43-updates-aarch64:ac6921c749da1e864e0971122151b63bb17e427965b3d9f9312a07b49ff10cac

1.1.3-1.fc43 / i686Observed Sep 1, 2026 to Sep 1, 2026

Verification status: Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Source-reported sha256: 671044b79e2e5e7d77a6d6fa52aa297d22d0b9dcc3daf19edf126df325238354

After downloading that exact artifact, compare its bytes with the source-reported expected digest:

printf '%s %s\n' '671044b79e2e5e7d77a6d6fa52aa297d22d0b9dcc3daf19edf126df325238354' 'appstream-compose-1.1.3-1.fc43.i686.rpm' | sha256sum --check --strict -

A match establishes equality with the repository metadata value. It does not establish safety or catalog-side artifact retrieval.

Field source: Fedora 43 updates x86_64 revision 43-updates-x86_64:d59481a1758810a842f6aaef03eff437442211002d934e2d10266183c629137a

1.1.3-1.fc43 / x86_64Observed Sep 1, 2026 to Sep 1, 2026

Verification status: Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Source-reported sha256: 25a2e447cb50fc7498d223783ac5fe2370353a83cec13c93bdae0d9757851334

After downloading that exact artifact, compare its bytes with the source-reported expected digest:

printf '%s %s\n' '25a2e447cb50fc7498d223783ac5fe2370353a83cec13c93bdae0d9757851334' 'appstream-compose-1.1.3-1.fc43.x86_64.rpm' | sha256sum --check --strict -

A match establishes equality with the repository metadata value. It does not establish safety or catalog-side artifact retrieval.

Field source: Fedora 43 updates x86_64 revision 43-updates-x86_64:d59481a1758810a842f6aaef03eff437442211002d934e2d10266183c629137a

1.1.0-1.fc43 / aarch64Observed Sep 1, 2026 to Sep 1, 2026

Verification status: Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Source-reported sha256: a4a4777b4293e27657c371a3e77d09067e1f8102b127e386abd87feb2ece2f46

After downloading that exact artifact, compare its bytes with the source-reported expected digest:

printf '%s %s\n' 'a4a4777b4293e27657c371a3e77d09067e1f8102b127e386abd87feb2ece2f46' 'appstream-compose-1.1.0-1.fc43.aarch64.rpm' | sha256sum --check --strict -

A match establishes equality with the repository metadata value. It does not establish safety or catalog-side artifact retrieval.

Field source: Fedora 43 Everything aarch64 revision 43-everything-aarch64:6431612747d987257399969298151d19cfe87ed26322be6987e7b00cd0ae66a2

1.1.0-1.fc43 / i686Observed Sep 1, 2026 to Sep 1, 2026

Verification status: Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Source-reported sha256: dbb69c18010f71061f5db722d165ee517a40e7a68c9244d90b180cbf0b7090c4

After downloading that exact artifact, compare its bytes with the source-reported expected digest:

printf '%s %s\n' 'dbb69c18010f71061f5db722d165ee517a40e7a68c9244d90b180cbf0b7090c4' 'appstream-compose-1.1.0-1.fc43.i686.rpm' | sha256sum --check --strict -

A match establishes equality with the repository metadata value. It does not establish safety or catalog-side artifact retrieval.

Field source: Fedora 43 Everything x86_64 revision 43-everything-x86_64:eb1d8634a798b5cfcef64b0114711f431f2cd186b55cce902f1883a32c6ff4f2

1.1.0-1.fc43 / x86_64Observed Sep 1, 2026 to Sep 1, 2026

Verification status: Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Source-reported sha256: ba32651e63d010f802778e451447a7199453c393618c7ba3f3b1d6ee6e80d4fa

After downloading that exact artifact, compare its bytes with the source-reported expected digest:

printf '%s %s\n' 'ba32651e63d010f802778e451447a7199453c393618c7ba3f3b1d6ee6e80d4fa' 'appstream-compose-1.1.0-1.fc43.x86_64.rpm' | sha256sum --check --strict -

A match establishes equality with the repository metadata value. It does not establish safety or catalog-side artifact retrieval.

Field source: Fedora 43 Everything x86_64 revision 43-everything-x86_64:eb1d8634a798b5cfcef64b0114711f431f2cd186b55cce902f1883a32c6ff4f2

Catalog record completeness

The completeness score measures metadata coverage, not software quality, security, compatibility, or suitability.

Summary and description
25/25
Artifact path and source digest
25/25
Dependency metadata
15/15
Package-file index
15/15
Homepage
5/5
License text
5/5
Source package or maintainer
10/10

Recorded total: 100/100

Field source: Fedora 43 Everything aarch64 revision 43-everything-aarch64:6431612747d987257399969298151d19cfe87ed26322be6987e7b00cd0ae66a2, Fedora 43 Everything x86_64 revision 43-everything-x86_64:eb1d8634a798b5cfcef64b0114711f431f2cd186b55cce902f1883a32c6ff4f2, Fedora 43 updates aarch64 revision 43-updates-aarch64:ac6921c749da1e864e0971122151b63bb17e427965b3d9f9312a07b49ff10cac, Fedora 43 updates x86_64 revision 43-updates-x86_64:d59481a1758810a842f6aaef03eff437442211002d934e2d10266183c629137a. The cross-OS mapping is catalog-derived from the source-reported homepage; it does not establish authorship or publisher identity

Sources and provenance

Field-source links above resolve here. Each source entry names the metadata publisher, trust tier, exact snapshot revision, signature result, and observation time; catalog-derived mappings are labeled separately.

  • Fedora 43 Everything aarch64Sep 1, 2026

    Authoritative source; repository metadata signature verified, revision 43-everything-aarch64:6431612747d987257399969298151d19cfe87ed26322be6987e7b00cd0ae66a2

    Signature verification covers the configured repository metadata chain. It does not certify that the package is safe or suitable.

    Repository-signature verification record
    Signed-object SHA-256
    6c2a7b7225a6bd12acd5c95dcd0350a0a5929e195692ff68eb31db0ee6b9897b
    Signer fingerprint
    Not recorded
    Keyring revision
    RPM-GPG-KEY-fedora-43-primary
    SHA-256 2b1449a082d3264dda8e18369f04e9ac4163bf3f8cb530b0783dc2ab064a08ec
    Tool and policy
    1
    openfactory-software-catalog-signature-v1
    Verification time
    Sep 1, 2026
    Signed Release → package-index hash linkage

    Path: Not recorded
    Expected SHA-256: Not recorded
    Observed SHA-256: Not recorded
    Result: match verified

  • Fedora 43 Everything x86_64Sep 1, 2026

    Authoritative source; repository metadata signature verified, revision 43-everything-x86_64:eb1d8634a798b5cfcef64b0114711f431f2cd186b55cce902f1883a32c6ff4f2

    Signature verification covers the configured repository metadata chain. It does not certify that the package is safe or suitable.

    Repository-signature verification record
    Signed-object SHA-256
    42c0002750de6066124693fff143f4854c1e29474d893f7e6a7616012d41338f
    Signer fingerprint
    Not recorded
    Keyring revision
    RPM-GPG-KEY-fedora-43-primary
    SHA-256 2b1449a082d3264dda8e18369f04e9ac4163bf3f8cb530b0783dc2ab064a08ec
    Tool and policy
    1
    openfactory-software-catalog-signature-v1
    Verification time
    Sep 1, 2026
    Signed Release → package-index hash linkage

    Path: Not recorded
    Expected SHA-256: Not recorded
    Observed SHA-256: Not recorded
    Result: match verified

  • Fedora 43 updates aarch64Sep 1, 2026

    Authoritative source; repository metadata signature verified, revision 43-updates-aarch64:ac6921c749da1e864e0971122151b63bb17e427965b3d9f9312a07b49ff10cac

    Signature verification covers the configured repository metadata chain. It does not certify that the package is safe or suitable.

    Repository-signature verification record
    Signed-object SHA-256
    0af1807dead0a1d28599a942743e244fe57da21cf6a935b3e4155f4a3f1070a1
    Signer fingerprint
    Not recorded
    Keyring revision
    RPM-GPG-KEY-fedora-43-primary
    SHA-256 2b1449a082d3264dda8e18369f04e9ac4163bf3f8cb530b0783dc2ab064a08ec
    Tool and policy
    1
    openfactory-software-catalog-signature-v1
    Verification time
    Sep 1, 2026
    Signed Release → package-index hash linkage

    Path: Not recorded
    Expected SHA-256: Not recorded
    Observed SHA-256: Not recorded
    Result: match verified

  • Fedora 43 updates x86_64Sep 1, 2026

    Authoritative source; repository metadata signature verified, revision 43-updates-x86_64:d59481a1758810a842f6aaef03eff437442211002d934e2d10266183c629137a

    Signature verification covers the configured repository metadata chain. It does not certify that the package is safe or suitable.

    Repository-signature verification record
    Signed-object SHA-256
    3ae5fecc3db8c7b4ce0cf54a8ea572ed4694e7e132e201c2f6ab6570259d1061
    Signer fingerprint
    Not recorded
    Keyring revision
    RPM-GPG-KEY-fedora-43-primary
    SHA-256 2b1449a082d3264dda8e18369f04e9ac4163bf3f8cb530b0783dc2ab064a08ec
    Tool and policy
    1
    openfactory-software-catalog-signature-v1
    Verification time
    Sep 1, 2026
    Signed Release → package-index hash linkage

    Path: Not recorded
    Expected SHA-256: Not recorded
    Observed SHA-256: Not recorded
    Result: match verified

appstream-compose Package for Fedora 43 | OpenFactory