Linux workstation

Fedora 44 native package

bomtool

Simple SBOM generator using pc(5) files

Packages / Fedora 44 / Unspecified / bomtool

[Source: pkgconf]

Package: bomtool (2.5.1-1.fc44)

External Resources:

Homepage: [pkgconf.org]

Similar packages:

Simple SBOM generator using pc(5) files

bomtool is a program which helps generate a Software Bill of Materials manifest using data from installed .pc files.

Other Packages Related to bomtool:

  • dep: ld-linux-aarch64.so.1()(64bit)

    Package not available

  • dep: ld-linux-aarch64.so.1(GLIBC_2.17)(64bit)

    Package not available

  • dep: libpkgconf(aarch-64) (= 2.5.1-1.fc44)

    Package not available

  • dep: libpkgconf.so.7()(64bit)

    Package not available

  • dep: rtld(GNU_HASH)

    Package not available

  • dep: libc.so.6(GLIBC_2.34)(64bit)

    Package not available

Download bomtool

ArchitecturePackage SizeInstalled SizeFiles
aarch6418 KiB69 KiB[list of files]
x86_6418 KiB21 KiB[list of files]

Percorsi file del pacchetto (7)

Paths come from the repository package-file index for the observed builds. They describe archive/package associations, not every file that will exist on a running system after maintainer scripts, alternatives, generated state, diversions, or installation choices.

  • /usr/bin/bomtool
  • /usr/lib/.build-id
  • /usr/lib/.build-id/18
  • /usr/lib/.build-id/18/44f7640a03d7c73af7afe91d78ac5fc81d40bc
  • /usr/lib/.build-id/bd
  • /usr/lib/.build-id/bd/a326369b7d92e47ce1859addec184e3430f8e9
  • /usr/share/man/man1/bomtool.1.gz

Field source: Fedora 44 Everything aarch64 revision 44-everything-aarch64:ad124f8125666e9059d7a8180427bdaea80f6286f71140457e5c7edd95883eee

Usa questo pacchetto

OpenFactory può avviare questo sistema operativo in una macchina virtuale del browser, o iniziare una costruzione che include il nome nativo del pacchetto di questo record.

Prova Fedora 44 nel browserCrea un'immagine che include bomtool

Versioni, suite e repository

Ogni riga è metadato dell'indice pacchetti per una versione, architettura, suite e repository. Nomi, URL e dimensioni arrivano dalla fonte; un link è un punto di recupero mutabile, non una redistribuzione OpenFactory.

VersionReleaseArchitectureRepositoryPackage sizeInstalled sizePublisher repository artifact
2.5.1-1.fc4444 / everythingaarch64Fedora 44 · Everything · aarch6418 KiB69 KiBPackages/b/bomtool-2.5.1-1.fc44.aarch64.rpm
2.5.1-1.fc4444 / everythingx86_64Fedora 44 · Everything · x86_6418 KiB21 KiBPackages/b/bomtool-2.5.1-1.fc44.x86_64.rpm

Field source: Fedora 44 Everything aarch64 revision 44-everything-aarch64:ad124f8125666e9059d7a8180427bdaea80f6286f71140457e5c7edd95883eee

Checksum e date di osservazione

For an APT source, signature verification authenticates the repository metadata chain and the Packages index containing this source-reported artifact digest. It does not certify package safety.

2.5.1-1.fc44 / aarch64Observed Sep 1, 2026 to Sep 1, 2026

Verification status: Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Source-reported sha256: d0ba1e57cbf1f3d2083f74552e10dd648b47912e3ce8c2cf5f406e3831ce6e9b

After downloading that exact artifact, compare its bytes with the source-reported expected digest:

printf '%s %s\n' 'd0ba1e57cbf1f3d2083f74552e10dd648b47912e3ce8c2cf5f406e3831ce6e9b' 'bomtool-2.5.1-1.fc44.aarch64.rpm' | sha256sum --check --strict -

A match establishes equality with the repository metadata value. It does not establish safety or catalog-side artifact retrieval.

Field source: Fedora 44 Everything aarch64 revision 44-everything-aarch64:ad124f8125666e9059d7a8180427bdaea80f6286f71140457e5c7edd95883eee

2.5.1-1.fc44 / x86_64Observed Sep 1, 2026 to Sep 1, 2026

Verification status: Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Source-reported sha256: 200b11c86e3836a6f84aeb49a43810ef107d79d2d2d56e82e2083ec4217dec49

After downloading that exact artifact, compare its bytes with the source-reported expected digest:

printf '%s %s\n' '200b11c86e3836a6f84aeb49a43810ef107d79d2d2d56e82e2083ec4217dec49' 'bomtool-2.5.1-1.fc44.x86_64.rpm' | sha256sum --check --strict -

A match establishes equality with the repository metadata value. It does not establish safety or catalog-side artifact retrieval.

Field source: Fedora 44 Everything x86_64 revision 44-everything-x86_64:da3845427d188097f6fd71b417a039bdfb8efefc4f38ca44b5cbb94f95a18991

Completezza del record

The completeness score measures metadata coverage, not software quality, security, compatibility, or suitability.

Summary and description
25/25
Artifact path and source digest
25/25
Dependency metadata
15/15
Package-file index
15/15
Homepage
5/5
License text
5/5
Source package or maintainer
10/10

Recorded total: 100/100

Field source: Fedora 44 Everything aarch64 revision 44-everything-aarch64:ad124f8125666e9059d7a8180427bdaea80f6286f71140457e5c7edd95883eee, Fedora 44 Everything x86_64 revision 44-everything-x86_64:da3845427d188097f6fd71b417a039bdfb8efefc4f38ca44b5cbb94f95a18991. The cross-OS mapping is catalog-derived from the source-reported homepage; it does not establish authorship or publisher identity

Fonti e provenienza

Field-source links above resolve here. Each source entry names the metadata publisher, trust tier, exact snapshot revision, signature result, and observation time; catalog-derived mappings are labeled separately.

  • Fedora 44 Everything aarch64Sep 1, 2026

    Authoritative source; repository metadata signature verified, revision 44-everything-aarch64:ad124f8125666e9059d7a8180427bdaea80f6286f71140457e5c7edd95883eee

    Signature verification covers the configured repository metadata chain. It does not certify that the package is safe or suitable.

    Repository-signature verification record
    Signed-object SHA-256
    236514c32119ab3c85b81fbb9e5e9d92b07aeba0d19d64c9b4fc9117a1863769
    Signer fingerprint
    Not recorded
    Keyring revision
    RPM-GPG-KEY-fedora-44-primary
    SHA-256 93642aec521a1e5e96dd715f7ae0ec0850ebc9de09a94ce03cae5263f26cc18a
    Tool and policy
    1
    openfactory-software-catalog-signature-v1
    Verification time
    Sep 1, 2026
    Signed Release → package-index hash linkage

    Path: Not recorded
    Expected SHA-256: Not recorded
    Observed SHA-256: Not recorded
    Result: match verified

  • Fedora 44 Everything x86_64Sep 1, 2026

    Authoritative source; repository metadata signature verified, revision 44-everything-x86_64:da3845427d188097f6fd71b417a039bdfb8efefc4f38ca44b5cbb94f95a18991

    Signature verification covers the configured repository metadata chain. It does not certify that the package is safe or suitable.

    Repository-signature verification record
    Signed-object SHA-256
    1300b99ac5d04b5561ad901320c8bd59ed1553f4971c3ce2ca48c40242c66676
    Signer fingerprint
    Not recorded
    Keyring revision
    RPM-GPG-KEY-fedora-44-primary
    SHA-256 93642aec521a1e5e96dd715f7ae0ec0850ebc9de09a94ce03cae5263f26cc18a
    Tool and policy
    1
    openfactory-software-catalog-signature-v1
    Verification time
    Sep 1, 2026
    Signed Release → package-index hash linkage

    Path: Not recorded
    Expected SHA-256: Not recorded
    Observed SHA-256: Not recorded
    Result: match verified

bomtool Package for Fedora 44 | OpenFactory