Flatpak Application Ontology
type: Ontology
abstract: Models Flatpak's sandboxed application distribution including application IDs, runtimes, SDK extensions, finish-args (sandbox permissions), and Flathub remotes. Captures the application-level packaging model distinct from system-level package managers.
created: 2026-04-14
license: https://creativecommons.org/publicdomain/zero/1.0/
modified: 2026-04-21
comment: Ontology for representing Flatpak applications, runtimes, and remotes
prior version: https://purl.org/packagegraph/ontology/flatpak/0.6.0
version info: 0.7.0

applicable architecture
type: ObjectProperty
domain: Dependency
range: Architecture
IAO_0000115: Specifies the architecture(s) for which this dependency applies. Many package ecosystems support architecture-conditional dependencies: RPM allows architecture qualifiers in Requires directives (e.g., glibc is required on x86_64 but not wasm), Debian allows architecture restrictions in Build-Depends fields (e.g., [amd64] [arm64]). When omitted, the dependency applies to all architectures.
comment: The architecture(s) for which this dependency applies (architecture-conditional dependencies)

build depends on
type: ObjectProperty
sub property of: depends on
domain: Source Package
range: Package
IAO_0000115: A relationship indicating that one package is required to compile or build a source package from its source code, but is not required for the resulting binary packages to function.
comment: Indicates a build-time dependency that is required to build the source package but not needed at runtime.

built from source
type: ObjectProperty
sub property of: wasDerivedFrom
inverse of: produced binary
type: AsymmetricProperty
domain: Binary Package
range: Source Package
IAO_0000115: Associates a binary package with the source package from which it was compiled, enabling grouping of related binary outputs.
comment: Links a binary package to the source package it was built from

check requires
type: ObjectProperty
sub property of: depends on
domain: Source Package
range: Package
IAO_0000115: A test-time dependency required to run a source package's test suite but not needed for building or runtime. Used in RPM BuildRequires with check context.
comment: Indicates a test-time dependency for running the package's test suite

conflicts
type: ObjectProperty
type: SymmetricProperty
type: IrreflexiveProperty
domain: Package
range: Package
IAO_0000115: A symmetric relationship indicating that two packages cannot be installed simultaneously on the same system due to incompatibilities or resource conflicts. If package A conflicts with package B, then B conflicts with A.
comment: Indicates that a package cannot be installed alongside another package (symmetric relationship)

contained in
type: ObjectProperty
inverse of: contains
domain: Package
range: Repository
IAO_0000115: A relationship that associates a software package with the repository where it is stored and made available for distribution.
comment: Links a package to the repository that contains it

contains
type: ObjectProperty
domain: Repository
range: Package
IAO_0000115: A relationship that associates a repository with the packages it hosts and makes available for distribution.
comment: Links a repository to the packages it contains

contributes to
type: ObjectProperty
domain: Contributor
range: Repository
IAO_0000115: Associates a contributor role with repositories it contributes to, enabling analysis of contributor activity across repositories.
comment: Links a contributor role to repositories it contributes to. Conceptually related to hasContributor (Repository→Agent convenience shortcut), but not formally inverse to avoid OntoClean role/identity collapse.

contributor organization
type: ObjectProperty
domain: Contributor
range: Organization
IAO_0000115: Associates a contributor with the organization they are affiliated with, enabling analysis of contributor diversity and organizational representation in package maintenance.
comment: Links a contributor to their affiliated organization

cross-distribution alternative
type: ObjectProperty
type: SymmetricProperty
domain: Package
range: Package
IAO_0000115: Associates packages from different distributions that provide similar functionality or serve analogous purposes. This is a correspondence assertion, not formal equivalence — it is symmetric but intentionally NOT transitive, as cross-distribution package equivalence is context-dependent (e.g., Debian libssl-dev corresponds to Fedora openssl-devel, but Alpine equivalents may differ in ABI or capabilities).
comment: Links packages that serve similar functions across distributions. Intentionally non-transitive: A~B and B~C does not imply A~C.

dependency target
type: ObjectProperty
domain: Dependency
range: Package
IAO_0000115: Identifies the specific package that satisfies a dependency, linking the reified Dependency to its target Package.
comment: The package that a dependency relationship targets

dependency type
type: ObjectProperty
domain: Dependency
IAO_0000115: Classifies the nature of a dependency relationship by linking the reified Dependency node directly to the formal property predicate that defines its semantics. Values are property URIs (pkg:dependsOn, pkg:buildDependsOn, pkg:recommends, etc.) using OWL 2 punning. This harmonizes the dual-model: the reified node references the exact shortcut predicate it represents, unifying what was previously a disconnected magic string with the traversable property hierarchy.
comment: The type of dependency relationship, represented by the URI of the corresponding shortcut property

depends on
type: ObjectProperty
inverse of: is dependency of
domain: Package
range: Package
IAO_0000115: A relationship indicating that one package requires another package to be present and functional in order to operate correctly.
comment: Indicates that a package requires another package to function

derived from
type: ObjectProperty
domain: Distribution
range: Distribution
IAO_0000115: Specifies that one distribution is based on or derived from another distribution's codebase and package set.
comment: Indicates that one distribution is derived from another

derived from commit
type: ObjectProperty
sub property of: wasDerivedFrom
domain: Package
range: Commit
IAO_0000115: Associates a package with the specific VCS commit from which it was built, enabling precise source-to-binary traceability and build reproducibility verification.
comment: Links a package to the VCS commit it was built from

derived from distribution
type: ObjectProperty
domain: Distribution
range: Distribution
IAO_0000115: Indicates that one distribution is derived from another (e.g., Ubuntu from Debian, CentOS from RHEL), establishing distribution lineage for package tracking.
comment: Indicates that one distribution is derived from another

directly conflicts with
type: ObjectProperty
sub property of: conflicts
type: SymmetricProperty
domain: Package
range: Package
IAO_0000115: A direct conflict relationship between packages, providing an efficient query path for identifying incompatible packages.
comment: Direct conflict relationship between packages for efficient querying

directly depends on
type: ObjectProperty
sub property of: depends on
inverse of: is direct dependency of
domain: Package
range: Package
property chain axiom: has dependency
property chain axiom: dependency target
IAO_0000115: A direct dependency relationship between packages, providing an efficient query path that bypasses the detailed dependency metadata structure. This property is a materialized convenience shortcut semantically grounded by the property chain axiom: if X hasDependency D and D dependencyTarget Y, then X directlyDependsOn Y. For version constraint details, traverse the Dependency reification.
comment: Materialized convenience shortcut of the hasDependency → dependencyTarget chain. For version constraint details, traverse the Dependency reification. NOTE: owl:propertyChainAxiom requires OWL 2 reasoning to materialize — Fuseki without OWL reasoning will not auto-derive this property from hasDependency chains.

directly provides
type: ObjectProperty
sub property of: provides
domain: Package
range: Package
IAO_0000115: A direct provision relationship indicating that one package provides the functionality of another, optimized for efficient dependency resolution queries.
comment: Direct provision relationship between packages for efficient querying

ecosystem package
type: ObjectProperty
domain: Upstream Project
range: Package Identity
IAO_0000115: Links an upstream project to package identities in various ecosystems (PyPI, npm, Cargo, etc.). Enables queries like 'what packages from different ecosystems come from the same project'.
comment: Links an upstream project to a package identity in a specific ecosystem

enhances
type: ObjectProperty
sub property of: depends on
domain: Package
range: Package
IAO_0000115: A reverse-direction weak dependency indicating that installing this package enhances the functionality of the target package. Used in Debian Enhances tag. If package A enhances package B, installing A provides additional features to B.
comment: Indicates that this package enhances another package's functionality

excluded architecture
type: ObjectProperty
domain: Package Identity
range: Architecture
IAO_0000115: Indicates an architecture on which this package is known to be unavailable due to architectural constraints or hardware requirements, not build failures. Used to distinguish missing packages from architecturally impossible ones.
comment: Indicates an architecture on which this package is known to be unavailable due to architectural constraints

has ABI
type: ObjectProperty
domain: Package
range: Application Binary Interface
IAO_0000115: Associates a package with the application binary interface it conforms to.
comment: Links a package to its application binary interface

has account
type: ObjectProperty
domain: Person
range: Contributor Account
IAO_0000115: Associates a person with a ContributorAccount representing their identity on a specific platform (e.g., GitHub username, Fedora Account System login, Debian maintainer email).
comment: Links a person to their platform account identifier

has checksum
type: ObjectProperty
domain: Package
range: Checksum
IAO_0000115: Associates a package with a Checksum instance containing a hash value and algorithm.
comment: Links a package to one of its checksums

has contributor
type: ObjectProperty
domain: Repository
range: Agent
IAO_0000115: Convenience property linking a repository directly to the agents (Person or SoftwareAgent) contributing to it. For detailed role information, traverse via contribution role assignments.
comment: Links a repository directly to contributing agents (persons or software agents). Conceptually related to contributesTo (Contributor→Repository), but not formally inverse to avoid OntoClean role/identity collapse.

has dependency
type: ObjectProperty
domain: Package
range: Dependency
IAO_0000115: Associates a package with a structured dependency that captures the target package, version constraints, and dependency type. Detailed dependency with type and version constraint. The directlyDependsOn shortcut provides a simpler graph traversal path for queries that don't need constraint details.
comment: Links a package to a reified dependency relationship with version constraints. The directlyDependsOn property provides a materialized shortcut (via owl:propertyChainAxiom) for simpler traversal.

has instruction set architecture
type: ObjectProperty
domain: Package
range: Instruction Set Architecture
IAO_0000115: Associates a binary package with the specific instruction set architecture it was compiled for.
comment: Links a package to its instruction set architecture

has license
type: ObjectProperty
domain: Package
range: License
IAO_0000115: A relationship that associates a software package with the legal license under which it is distributed and may be used.
comment: Links a package to its license

has maintainer role
type: ObjectProperty
domain: Maintainer
range: Maintainer Role
IAO_0000115: Associates a maintainer with their specific role and responsibilities for packages.
comment: Links a maintainer to their specific role

has maintenance role
type: ObjectProperty
domain: Package
range: Maintainer
IAO_0000115: Associates a package with a Maintainer role assignment, providing access to role type (via hasMaintainerRole), start date (via maintainerSince), and the agent holding the role (via heldBy).
comment: Links a package to a maintenance role assignment providing detailed role metadata

has package
type: ObjectProperty
domain: Package Identity
range: Binary Package
IAO_0000115: The inverse relationship of isVersionOf, linking a package identity to all versioned binary packages that belong to it. Enables efficient 'list all versions of package X' queries from the identity node.
comment: Links a package identity to its versioned binary package instances.

has release
type: ObjectProperty
domain: Distribution
range: Distribution Release
IAO_0000115: Associates a distribution with a specific versioned release, such as Debian 12 or Fedora 41.
comment: Links a distribution to one of its releases

has upstream project
type: ObjectProperty
domain: Source Package
range: Upstream Project
IAO_0000115: Associates a source package with the upstream open source project that it packages for distribution.
comment: Links a source package to the upstream project it packages

has version
type: ObjectProperty
inverse of: version of
domain: Package
range: Version
IAO_0000115: A relationship that associates a software package with a specific version or release of that package.
comment: Links a package to one of its versions

has version constraint
type: ObjectProperty
domain: Dependency
range: Version Constraint
IAO_0000115: Associates a dependency with a structured version constraint that specifies acceptable version ranges.
comment: Links a dependency to a structured version constraint

held by
type: ObjectProperty
inverse of: holds role
domain: Contributor
range: Agent
IAO_0000115: The inverse of holdsRole — links a role assignment to the agent (Person or SoftwareAgent) holding it, enabling representation of both human maintainers and automated bot contributors.
comment: Links a role assignment back to the agent (person or software agent) who holds it

holds role
type: ObjectProperty
domain: Agent
range: Contributor
IAO_0000115: Associates an agent (Person or SoftwareAgent) with a contribution or maintenance role assignment.
comment: Links an agent (person or software agent) to a contributor or maintainer role they hold

installs file
type: ObjectProperty
domain: Binary Package
range: Installed File
IAO_0000115: Associates a binary package with a file it installs on the target filesystem.
comment: Links a binary package to a file it installs on the system

is dependency of
type: ObjectProperty
domain: Package
range: Package
IAO_0000115: The inverse relationship of dependsOn, indicating that this package is required by another package.
comment: Indicates that this package is a dependency of another package

is direct dependency of
type: ObjectProperty
sub property of: is dependency of
domain: Package
range: Package
IAO_0000115: The inverse relationship of directlyDependsOn, indicating that this package is a direct dependency of another package. Critical for blast radius analysis - enables efficient queries for 'what directly depends on this package'.
comment: Indicates that this package is a direct dependency of another package

is provided by
type: ObjectProperty
inverse of: provides
domain: Package
range: Package
IAO_0000115: The inverse relationship of provides, indicating that this package's functionality is offered by another package.
comment: Indicates that this package's functionality is provided by another package

is replaced by
type: ObjectProperty
inverse of: replaces
domain: Package
range: Package
IAO_0000115: The inverse relationship of replaces, indicating that this package is superseded by another package.
comment: Indicates that this package is replaced by another package

is version of
type: ObjectProperty
inverse of: has package
domain: Binary Package
range: Package Identity
IAO_0000115: Associates a specific versioned binary package with the canonical package identity it belongs to. Enables queries that traverse from a versioned instance to all other versions of the same package.
comment: Links a versioned binary package to its version-agnostic package identity.

maintained by
type: ObjectProperty
sub property of: wasAttributedTo
inverse of: maintains
domain: Package
range: Agent
IAO_0000115: Convenience property linking a package directly to the agent (Person or SoftwareAgent) maintaining it. For detailed role metadata (role type, start date), use hasMaintenanceRole.
comment: Links a package directly to the agent (person or software agent) maintaining it

maintains
type: ObjectProperty
domain: Agent
range: Package
IAO_0000115: The inverse of maintainedBy, linking an agent (Person or SoftwareAgent) to the packages they maintain.
comment: Links an agent (person or software agent) to the packages they maintain

managed by
type: ObjectProperty
inverse of: manages
domain: Repository
range: Package Manager
IAO_0000115: A relationship that associates a package repository with the package management system that controls and provides access to it.
comment: Links a repository to the package manager that manages it

manages
type: ObjectProperty
domain: Package Manager
range: Repository
IAO_0000115: A relationship that associates a package manager with the repositories it controls and provides access to.
comment: Links a package manager to the repositories it manages

member of package set
type: ObjectProperty
domain: Package
range: Package Set
IAO_0000115: Associates a package with a named package set that it belongs to, enabling classification of packages into product-specific or distribution-specific groupings.
comment: Links a package to a package set it belongs to

packaging repository
type: ObjectProperty
domain: Package Identity
range: Repository
IAO_0000115: Associates a package identity with the distribution-specific repository that contains the packaging metadata (debian/ directory, spec files, patches). Distinct from the upstream repository — packaging repos are distro-specific while upstream repos are universal.
comment: The distribution-specific packaging repository (e.g., Debian Salsa, Fedora dist-git). Contains packaging rules, patches, and build configuration.

part of distribution
type: ObjectProperty
range: Distribution
IAO_0000115: Associates packages, repositories, or other components with their parent distribution.
comment: Links packages or repositories to their parent distribution

part of ecosystem
type: ObjectProperty
domain: Distribution
range: Package Ecosystem
IAO_0000115: Associates a distribution with the broader package ecosystem it belongs to.
comment: Links a distribution to its broader ecosystem

part of release
type: ObjectProperty
range: Distribution Release
IAO_0000115: Associates packages, repositories, or other components with a specific versioned release of a distribution.
comment: Links packages or repositories to a specific distribution release

performed by
type: ObjectProperty
sub property of: wasAssociatedWith
domain: Packaging Activity
range: Agent
IAO_0000115: Associates a packaging activity with the agent (person, organization, or automated system) that performed it.
comment: Links a packaging activity to the agent that performed it

pre-depends
type: ObjectProperty
sub property of: depends on
domain: Package
range: Package
IAO_0000115: A strict dependency that must be fully installed and configured before this package can even be unpacked. Stronger than regular depends. Used in Debian Pre-Depends tag for critical system dependencies.
comment: Indicates a pre-installation dependency (stronger than regular depends)

produced binary
type: ObjectProperty
domain: Source Package
range: Binary Package
IAO_0000115: Associates a source package with the binary packages produced by building it.
comment: Links a source package to binary packages it produces

project repository
type: ObjectProperty
domain: Upstream Project
range: Repository
IAO_0000115: Links an upstream project to its primary source code repository. Makes UpstreamProject the central hub for cross-ecosystem identity - connect all ecosystem packages to the project, then to the shared repository.
comment: Links an upstream project to its VCS repository

provides
type: ObjectProperty
domain: Package
range: Package
IAO_0000115: A relationship indicating that one package offers the same functionality or interface as another package, potentially serving as a substitute or alternative implementation.
comment: Indicates that a package provides the functionality of another package

provides capability
type: ObjectProperty
domain: Package
range: Capability
IAO_0000115: Associates a package with a capability it provides, such as a shared library (libssl.so.3), virtual package name, or other functionality. Critical for shared library dependency resolution - enables 'what provides this .so' queries.
comment: Links a package to a capability it provides

recommends
type: ObjectProperty
sub property of: depends on
domain: Package
range: Package
IAO_0000115: A weak dependency relationship suggesting that installing the target package enhances functionality but is not required. Used in Debian Recommends and RPM Recommends tags. If package A recommends package B, A works without B but gains features when B is present.
comment: Suggests installing another package for enhanced functionality

release contains
type: ObjectProperty
inverse of: part of release
domain: Distribution Release
range: Package
IAO_0000115: Links a distribution release to packages it contains, enabling efficient 'what packages are in this release' queries.
comment: Links a distribution release to packages it contains

replaces
type: ObjectProperty
type: AsymmetricProperty
type: IrreflexiveProperty
domain: Package
range: Package
IAO_0000115: An asymmetric relationship indicating that one package is intended to supersede and replace another package, typically during system upgrades or package transitions. If package A replaces package B, then package B does not replace package A.
comment: Indicates that a package replaces another package (asymmetric relationship)

requires capability
type: ObjectProperty
domain: Package
range: Capability
IAO_0000115: Associates a package with a capability it requires, such as a shared library (libssl.so.3), virtual package name, or other functionality. Critical for shared library dependency resolution - enables 'what requires this .so' queries and CVE blast radius analysis.
comment: Links a package to a capability it requires

satisfies capability
type: ObjectProperty
domain: Installed File
range: Capability
IAO_0000115: Links an installed file (typically a shared library .so artifact) to the abstract capability it satisfies, closing the loop between filesystem artifacts and package dependency requirements. This shortcut enables efficient queries for shared library resolution analysis: which specific file provides libssl.so.3?
comment: The abstract capability that this installed file satisfies (typically for shared libraries)

suggests
type: ObjectProperty
sub property of: depends on
domain: Package
range: Package
IAO_0000115: An even weaker dependency relationship than recommends, indicating that the target package may be useful in certain contexts but is not typically needed. Used in Debian Suggests and RPM Suggests tags.
comment: Suggests another package that may be useful in some scenarios

superseded by
type: ObjectProperty
domain: Package
range: Package
IAO_0000115: Indicates that this package's functionality has been absorbed into another package due to subpackage reorganization across architectures or builds. Used to track packages that exist on some arches but are merged into others on different arches.
comment: Indicates that this package's functionality has been absorbed into another package (subpackage reorganization)

supersedes
type: ObjectProperty
inverse of: superseded by
domain: Package
range: Package
IAO_0000115: Indicates that this package absorbs the functionality of another package, typically due to subpackage consolidation or reorganization across architectures.
comment: Indicates that this package absorbs the functionality of another package

supplements
type: ObjectProperty
sub property of: depends on
domain: Package
range: Package
IAO_0000115: Indicates that this package supplements the functionality of another package, working in tandem with it. Used in some Debian-derived distributions.
comment: Indicates that this package supplements another package

supported architecture
type: ObjectProperty
domain: Source Package
range: Architecture
IAO_0000115: Associates a source package with an architecture it declares support for building, as declared in the source package control file.
comment: An architecture that the source package can be built for

target architecture
type: ObjectProperty
domain: Package
range: Architecture
IAO_0000115: A relationship that associates a software package with the specific hardware or system architecture for which it has been compiled or designed.
comment: Links a package to the architecture it targets

upstream ecosystem
type: ObjectProperty
domain: Package
range: Package Ecosystem
IAO_0000115: Links a package to the upstream software ecosystem it originates from, enabling ecosystem-level cross-referencing and analysis. The Ecosystem entity allows traversal to all packages from that ecosystem rather than matching string literals.
comment: The upstream package ecosystem entity (cargo, pypi, npm, gomod, etc.)

upstream equivalent
type: ObjectProperty
type: SymmetricProperty
domain: Package Identity
range: Package Identity
IAO_0000115: Symmetric relationship between package identities from different ecosystems that represent the same software (e.g., Debian python3-requests ↔ PyPI requests). Enables bidirectional cross-ecosystem identity queries.
comment: This package identity is equivalent to another package identity from a different ecosystem

upstream package identity
type: ObjectProperty
domain: Package Identity
range: Package Identity
IAO_0000115: Links a distribution package identity to the upstream package identity in the native ecosystem (e.g., Debian python3-requests → PyPI requests). Replaces dead-end upstreamPackageName literal with a traversable object property - critical for supply chain analysis.
comment: Links to the upstream package identity in its native ecosystem

upstream repository
type: ObjectProperty
inverse of: hasPackage
domain: Package Identity
range: Repository
IAO_0000115: Associates a package identity with the canonical upstream source code repository. This is the primary cross-distribution identity anchor — packages from different distros that share the same upstream repository are the same software, regardless of package name.
comment: The upstream VCS repository this package is built from. Derived from Homepage/URL when it points to a known forge, or from dist-git spec files.

used dependency
type: ObjectProperty
sub property of: used
domain: Build Activity
range: Package
IAO_0000115: Associates a build activity with the packages or dependencies it required during the build process.
comment: Links a build activity to dependencies it required

used source
type: ObjectProperty
sub property of: used
domain: Packaging Activity
range: Entity
IAO_0000115: Associates a packaging activity with the source code, files, or other materials it used as input.
comment: Links a packaging activity to source materials it used

version of
type: ObjectProperty
domain: Version
range: Package
IAO_0000115: The inverse relationship of hasVersion, linking a version back to the package it belongs to. Critical for security queries that start from an affected version and need to find the package.
comment: Links a version to the package it belongs to

was built by
type: ObjectProperty
sub property of: wasGeneratedBy
domain: Package
range: Build Activity
IAO_0000115: Associates a package with the specific build activity that compiled and created it from source materials.
comment: Links a package to the build activity that created it

has extension
type: ObjectProperty
domain: Flatpak Application
range: Extension
IAO_0000115: Associates an application or runtime with an extension.

has permission
type: ObjectProperty
domain: Flatpak Application
range: Permission
IAO_0000115: Associates an application with a sandbox permission.

published on
type: ObjectProperty
domain: Flatpak Application
range: Remote
IAO_0000115: Associates an application with the remote it is distributed through.

uses runtime
type: ObjectProperty
domain: Flatpak Application
range: Runtime
IAO_0000115: Associates an application with the runtime it requires.

uses SDK
type: ObjectProperty
domain: Flatpak Application
range: Runtime
IAO_0000115: Associates an application with the SDK used to build it.

account platform
type: DatatypeProperty
domain: Contributor Account
range: string
IAO_0000115: Identifies the platform or service where a contributor account is registered, such as GitHub, Debian, Fedora, or GitLab.
comment: The platform or service where the account exists

account URL
type: DatatypeProperty
domain: Contributor Account
range: anyURI
IAO_0000115: The web URL of a contributor's profile page on a specific platform.
comment: The URL of the contributor's profile on the platform

account username
type: DatatypeProperty
domain: Contributor Account
range: string
IAO_0000115: The username, login, or unique identifier of a contributor on a specific platform.
comment: The username or identifier on the platform

active contributor
type: DatatypeProperty
domain: Contributor
range: boolean
IAO_0000115: Indicates whether a contributor is currently active in package development or maintenance.
comment: Whether the contributor is currently active

activity duration
type: DatatypeProperty
domain: Activity
range: duration
IAO_0000115: The total time duration required to complete a packaging-related activity.
comment: How long a packaging activity took to complete

activity end time
type: DatatypeProperty
sub property of: endedAtTime
domain: Activity
range: dateTime
IAO_0000115: Records the date and time when a packaging-related activity was completed.
comment: When a packaging activity completed

activity log output
type: DatatypeProperty
domain: Activity
range: string
IAO_0000115: The textual log output generated during the execution of a packaging activity, useful for debugging and auditing.
comment: Log output generated during a packaging activity

activity start time
type: DatatypeProperty
sub property of: startedAtTime
domain: Activity
range: dateTime
IAO_0000115: Records the date and time when a packaging-related activity was initiated.
comment: When a packaging activity began

capability name
type: DatatypeProperty
domain: Capability
range: string
IAO_0000115: The identifier for a capability, such as a shared library name (libssl.so.3), virtual package name, or other capability identifier.
comment: The name or identifier of a capability

checksum algorithm
type: DatatypeProperty
type: FunctionalProperty
domain: Checksum
range: string
IAO_0000115: The name of the cryptographic hash algorithm used to compute this checksum value.
comment: The hash algorithm (e.g., SHA-256, MD5, SHA-1)

checksum value
type: DatatypeProperty
type: FunctionalProperty
domain: Checksum
range: string
IAO_0000115: The actual cryptographic hash value as a hexadecimal string.
comment: The hexadecimal hash string

dependency weight
type: DatatypeProperty
domain: Dependency
range: float
IAO_0000115: Provides a numeric weight indicating the relative importance or strength of a dependency relationship.
comment: Relative weight or importance of a dependency

description
type: DatatypeProperty
domain: Package
range: string
IAO_0000115: A textual explanation of the package's purpose, functionality, and features, intended to help users understand what the package provides.
comment: A human-readable description of what the package does

download URL
type: DatatypeProperty
domain: Package
range: anyURI
IAO_0000115: The web address from which the package file or archive can be directly downloaded or accessed.
comment: The URL from which the package can be downloaded

end of life date
type: DatatypeProperty
domain: Distribution Release
range: date
IAO_0000115: The date when a distribution release ceases to receive security updates and support.
comment: The date when the distribution release reaches end of life

epoch
type: DatatypeProperty
domain: Version
range: integer
IAO_0000115: A version component used to differentiate between incompatible versioning schemes or to correct mistakes in version ordering.
comment: The epoch of the version, used in some systems to manage version comparison across different numbering schemes.

exit code
type: DatatypeProperty
domain: Activity
range: int
IAO_0000115: The numeric exit code returned by a packaging activity, indicating success (typically 0) or failure (non-zero).
comment: The exit code returned by a packaging activity

homepage
type: DatatypeProperty
domain: Package
range: anyURI
IAO_0000115: The web address of the main website or homepage associated with the software package or its development project.
comment: The homepage URL of the package or project

identity name
type: DatatypeProperty
type: FunctionalProperty
domain: Package Identity
range: string
IAO_0000115: The package name as used for the version-agnostic identity within a distribution and architecture context. This provides a lexical anchor for PackageIdentity instances, distinct from the versioned packageName on Package instances.
comment: The name of the package identity

install size
type: DatatypeProperty
domain: Package
range: long
IAO_0000115: The amount of disk space, measured in bytes, that the package will occupy after being fully installed on the target system.
comment: The disk space required when the package is installed

installed file path
type: DatatypeProperty
domain: Installed File
range: string
IAO_0000115: The absolute filesystem path where a file is installed on the target system, such as /usr/bin/gcc or /usr/lib/libssl.so.3.
comment: The filesystem path where the file is installed

is current
type: DatatypeProperty
type: FunctionalProperty
domain: Data Snapshot
range: boolean
IAO_0000115: A boolean flag indicating whether this snapshot is the most recent for its data source. Used for tiered storage lifecycle management.
comment: Whether this snapshot represents the current active data for its source.

is vendor originated
type: DatatypeProperty
domain: Package
range: boolean
IAO_0000115: Indicates whether the upstream project was originated by the same organization that packages and distributes it, as opposed to being an independent community project.
comment: Whether the upstream project was created by the packaging vendor

ISA-specific code
type: DatatypeProperty
domain: Package
range: boolean
IAO_0000115: Indicates whether the package contains processor-specific optimizations or machine code that is optimized for a particular instruction set architecture.
comment: Indicates whether the package contains ISA-specific optimizations

last commit date
type: DatatypeProperty
domain: Package Identity
range: date
IAO_0000115: The date of the most recent commit to the upstream repository, indicating active development status.
comment: The date of the most recent commit to the upstream repository

last release date
type: DatatypeProperty
domain: Package Identity
range: date
IAO_0000115: The date of the most recent release or version of the package, enabling recency analysis and stale package detection.
comment: The date of the most recent release or version

license name
type: DatatypeProperty
domain: Package
range: string
IAO_0000115: DEPRECATED: A string representation of the package's license. Use hasLicense to link to a License entity instead. The spdxId of the License entity linked via hasLicense is the canonical representation. This property is retained for backward compatibility with existing data but should not be used in new collectors.
comment: DEPRECATED in favor of hasLicense. The SPDX license expression or license name string for the package
deprecated: true

maintainer since
type: DatatypeProperty
domain: Maintainer
range: dateTime
IAO_0000115: Records when a maintainer began their maintenance responsibilities for a package.
comment: Date when the maintainer started maintaining the package

package name
type: DatatypeProperty
type: FunctionalProperty
domain: Package
range: string
IAO_0000115: The unique identifier or name by which a software package is known within a package management system.
comment: The name of a package

package size
type: DatatypeProperty
domain: Package
range: long
IAO_0000115: The size of the package file or archive, measured in bytes, before installation or extraction.
comment: The size of the package file

project name
type: DatatypeProperty
domain: Upstream Project
range: string
IAO_0000115: The canonical or commonly used name of an upstream open source project, such as 'openssl' or 'gcc'.
comment: The canonical name of the upstream project

project URL
type: DatatypeProperty
domain: Upstream Project
range: anyURI
IAO_0000115: The primary website or homepage URL for an upstream open source project.
comment: The primary URL for the upstream project

purl
type: DatatypeProperty
domain: Package Identity
range: anyURI
IAO_0000115: Package URL (PURL) - a standardized, universal identifier for software packages across ecosystems (e.g., pkg:npm/lodash@4.17.21, pkg:pypi/requests@2.28.0). Enables cross-tool interoperability and SBOM generation.
comment: Package URL (PURL) - standardized package identifier

release
type: DatatypeProperty
domain: Version
range: string
IAO_0000115: An identifier for the packaging release of a specific version of the upstream software.
comment: The release number of the package, often indicating a packaging-specific update.

release codename
type: DatatypeProperty
domain: Distribution Release
range: string
IAO_0000115: The informal name or codename of a distribution release, such as 'bookworm' for Debian 12 or 'noble' for Ubuntu 24.04.
comment: The codename of the distribution release

release date
type: DatatypeProperty
domain: Distribution Release
range: date
IAO_0000115: The date when a distribution release was officially published or made available.
comment: The date the distribution release was published

release version
type: DatatypeProperty
domain: Distribution Release
range: string
IAO_0000115: The version identifier of a distribution release, such as '12' for Debian 12 or '41' for Fedora 41.
comment: The version number of the distribution release

repository source URL
type: DatatypeProperty
domain: Distribution Release
range: anyURI
IAO_0000115: The HTTP/HTTPS URL of the package repository metadata that was used as the data source for collection. Enables traceability and re-collection.
comment: The URL from which this repository data was collected

repository type
type: DatatypeProperty
domain: Distribution Release
range: string
IAO_0000115: Classifies the repository source type to enable proper comparison semantics. Release repos are composed for end-user installation. Build repos are Koji build targets. Updates are post-release patches.
comment: The type of package repository (release, development, build, updates, updates-testing)

revision
type: DatatypeProperty
domain: Version
range: string
IAO_0000115: A version component that specifies a minor update or packaging-specific revision.
comment: The revision of the package, often indicating a minor packaging update or a source control revision.

snapshot graph
type: DatatypeProperty
domain: Data Snapshot
range: anyURI
IAO_0000115: The URI of the named graph in Fuseki that contains this snapshot's data.
comment: The named graph URI this snapshot was loaded into.

snapshot source
type: DatatypeProperty
domain: Data Snapshot
range: string
IAO_0000115: A string identifying the tool and data source that produced this snapshot.
comment: Identifier of the data source that produced this snapshot (e.g., 'pg-collect debian', 'enricher-osv').

snapshot timestamp
type: DatatypeProperty
domain: Data Snapshot
range: dateTime
IAO_0000115: The date and time when the data collection or enrichment run completed.
comment: When this data snapshot was created.

SPDX identifier
type: DatatypeProperty
type: FunctionalProperty
domain: License
range: string
IAO_0000115: The SPDX License List identifier for this license (e.g., 'GPL-2.0-only', 'MIT', 'Apache-2.0'), enabling mechanically queryable license classification and compatibility analysis.
comment: The SPDX license identifier

upstream package name
type: DatatypeProperty
domain: Package
range: string
IAO_0000115: The canonical name of the upstream software in its native package ecosystem, extracted from RPM provides entries like crate(foo) or python3dist(bar). Enables cross-ecosystem identity linking. Retained for backward compatibility - prefer upstreamPackageIdentity for new data.
comment: The name of the package in its upstream ecosystem (e.g., crate name, PyPI name)

version constraint operator
type: DatatypeProperty
domain: Version Constraint
range: string
IAO_0000115: The comparison operator that defines how the version constraint should be evaluated, such as greater than, equal to, or less than.
comment: The comparison operator used in a version constraint (e.g., '>=', '=', '<=')

version constraint value
type: DatatypeProperty
domain: Version Constraint
range: string
IAO_0000115: The specific version string that the constraint is compared against using the constraint operator.
comment: The version value used in a version constraint

version string
type: DatatypeProperty
type: FunctionalProperty
domain: Version
range: string
IAO_0000115: A textual representation of a package version, typically following semantic versioning or other versioning schemes to indicate the release sequence and compatibility.
comment: The version identifier of a package

application ID
type: DatatypeProperty
type: FunctionalProperty
domain: Flatpak Application
range: string
IAO_0000115: Reverse-DNS application identifier (e.g., 'org.mozilla.Firefox').

branch
type: DatatypeProperty
domain: Flatpak Application
range: string
IAO_0000115: The Flatpak branch (typically 'stable', 'beta', or a version like '23.08').

command
type: DatatypeProperty
domain: Flatpak Application
range: string
IAO_0000115: The main executable command run when the application is launched.

commit hash
type: DatatypeProperty
domain: Flatpak Application
range: string
IAO_0000115: The OSTree commit hash identifying the exact installed version of the application.

finish arg
type: DatatypeProperty
domain: Permission
range: string
IAO_0000115: A --finish-args flag specifying a sandbox permission (e.g., '--share=network', '--filesystem=home', '--socket=wayland').

installed size
type: DatatypeProperty
domain: Flatpak Application
range: integer
IAO_0000115: The installed size of the application in bytes.

runtime version
type: DatatypeProperty
domain: Flatpak Application
range: string
IAO_0000115: The version of the runtime required by the application (e.g., '46' for GNOME 46).

Application Binary Interface
type: Class
subclass of: Thing
IAO_0000115: The low-level binary interface that defines calling conventions, data layouts, and system call interfaces for a specific platform.
comment: The binary interface specification for a platform

Architecture
type: Class
subclass of: Thing
IAO_0000115: The specific hardware platform, instruction set, or system architecture for which a software package has been compiled or designed to run.
comment: The hardware or software architecture for which a package is built

Binary Package
type: Class
subclass of: Package
disjoint with: Source Package
IAO_0000115: A binary package containing compiled executables, libraries, or architecture-independent files, ready for installation on a target system.
comment: A compiled, installable package produced from a source package

Build Activity
type: Class
subclass of: Activity
subclass of: Packaging Activity
IAO_0000115: An activity that compiles source code and creates executable binaries or libraries as part of the packaging process. Aligned with PROV-O Activity concept — builds are time-bounded activities with agents (builders) and entities (source/binary artifacts).
comment: The process of compiling and building software from source

Capability
type: Class
subclass of: Thing
IAO_0000115: A functional capability provided by or required by a package, such as a shared library (e.g., libssl.so.3), virtual package name, or other abstract functionality. Critical for shared library dependency resolution - enables blast radius analysis via .so linking.
comment: A capability provided or required by packages (shared library, virtual package, etc.)

Checksum
type: Class
subclass of: Thing
IAO_0000115: A reified checksum associating a cryptographic hash value with the algorithm used to compute it, enabling packages to carry multiple checksums of different types (e.g., SHA-256 and MD5 simultaneously).
comment: A cryptographic hash of a package file, pairing the hash value with its algorithm

Contribution Type
type: Class
subclass of: Thing
IAO_0000115: Categorizes the nature of contributions made to a package, such as code, documentation, packaging, or security updates.
comment: The type of contribution made to a package

Contributor
type: Class
subclass of: Thing
IAO_0000115: A role assignment representing a person's contribution to a package or repository. This is an anti-rigid concept — a person can start or stop holding this role without ceasing to exist.
comment: A contribution role assignment linking a person to a package or repository

Contributor Account
type: Class
subclass of: Thing
IAO_0000115: A platform-specific identity for a contributor, such as a GitHub username, Debian maintainer email, or Fedora Account System login, enabling cross-platform contributor identification.
comment: An identity or account for a contributor on a specific platform

Data Snapshot
type: Class
subclass of: Entity
IAO_0000115: A record of a data collection or enrichment run, tracking the named graph URI, source identifier, timestamp, and currency status for graph lifecycle management.
comment: Metadata about a named graph — when it was collected, from what source, whether it is current.

Dependency
type: Class
subclass of: Thing
IAO_0000115: A requirement relationship between software packages where one package needs another package to be present and functional in order to operate correctly.
comment: A relationship indicating that one package requires another package to function properly

Distribution
type: Class
subclass of: Thing
IAO_0000115: A complete operating system distribution that packages and distributes software using specific package management systems.
comment: A specific Linux/Unix distribution

Distribution Release
type: Class
subclass of: Thing
IAO_0000115: A specific versioned release of a Linux distribution, such as Debian 12 (bookworm) or Fedora 41, containing a defined set of packages.
comment: A specific versioned release of a distribution

Package Ecosystem
type: Class
subclass of: Thing
IAO_0000115: A comprehensive package management ecosystem that may span multiple distributions, formats, and repositories, such as the Debian ecosystem including Ubuntu derivatives.
comment: A broader ecosystem encompassing multiple distributions and package formats

Installation Activity
type: Class
subclass of: Activity
IAO_0000115: An activity that deploys a package and its dependencies onto a target system, making the software available for use.
comment: The process of installing a package on a system

Installed File
type: Class
subclass of: Thing
IAO_0000115: A file that is installed on the target filesystem when a binary package is installed, including executables, libraries, configuration files, and documentation.
comment: A file installed on the system by a binary package

Instruction Set Architecture
type: Class
subclass of: Architecture
IAO_0000115: The processor instruction set architecture that defines the machine code interface, such as x86_64, ARM64, or RISC-V.
comment: The specific instruction set architecture (ISA) for binary packages

License
type: Class
subclass of: Thing
IAO_0000115: A legal document or agreement that specifies the terms and conditions under which a software package may be used, modified, and distributed.
comment: The legal license under which a package is distributed

Maintainer
type: Class
subclass of: Contributor
IAO_0000115: A maintenance role assignment linking a person to a package they maintain. This is an anti-rigid concept — a maintenance role assignment can begin or end without the person ceasing to exist.
comment: A maintenance role assignment linking a person to a package

Maintainer Role
type: Class
subclass of: Thing
IAO_0000115: Defines the specific responsibilities and authority level of a maintainer for a package, such as primary maintainer, co-maintainer, or sponsor.
comment: The specific role a maintainer plays for a package

Meta Package
type: Class
subclass of: Package
IAO_0000115: A package that contains minimal or no files itself but serves to group related packages together through dependencies, commonly used for task-based installations.
comment: A package that exists primarily to depend on other packages

Package
type: Class
subclass of: Thing
subclass of: Entity
subclass of: Restriction
  on property: package name
  cardinality: 1
IAO_0000115: A discrete unit of software represented in package repository metadata, typically containing executable code, configuration files, documentation, and metadata. Most packages can be installed, updated, or removed by a package management system, though some entries (such as phantom packages) exist only as metadata references.
comment: A software package that can be installed, maintained, or distributed through a package management system

Package Identity
type: Class
subclass of: Thing
IAO_0000115: A stable, version-independent identifier for a package name within a specific distribution, release, and architecture. BinaryPackage instances link to their identity via isVersionOf. Dependencies point to the identity, enabling direct name-based joins without URI parsing.
comment: The version-agnostic identity of a package within a distribution and architecture. Dependency targets point to this instead of versioned instances.

Package Manager
type: Class
subclass of: Thing
IAO_0000115: A software application or system that automates the process of installing, upgrading, configuring, and removing software packages, including dependency resolution and conflict management.
comment: A software tool that manages the installation, updating, and removal of packages

Package Set
type: Class
subclass of: Thing
IAO_0000115: A named collection of packages within a distribution or product, used to define subsets such as base systems, application streams, or product-specific package sets.
comment: A named subset of packages within a distribution or product

Packaging Activity
type: Class
subclass of: Activity
IAO_0000115: An activity that transforms source code, configuration files, and other materials into a distributable package format.
comment: The process of creating a package from source materials

Person
type: Class
subclass of: Agent
disjoint with: Software Agent
IAO_0000115: A rigid identity representing a human individual. Persons hold roles (Contributor, Maintainer) which are time-dependent and context-dependent. The same Person can maintain packages in multiple distributions and hold different roles over time.
comment: A human individual who can hold contributor or maintainer roles across packages and distributions

Phantom Package
type: Class
subclass of: Package
IAO_0000115: A package that exists in repository primary metadata (e.g., primary.xml for RPM) but has no corresponding files in the file list metadata. Common for TeX Live virtual subpackages and auto-generated meta-entries. Structurally different from a regular Package because it cannot be installed.
comment: A package entry in repository metadata that has no installable files

Publishing Activity
type: Class
subclass of: Activity
IAO_0000115: An activity that uploads and makes a package available for distribution through a package repository.
comment: The process of making a package available in a repository

Repository
type: Class
subclass of: Thing
subclass of: Entity
IAO_0000115: A centralized storage location where software packages are hosted and made available for distribution, typically accessible via network protocols and managed by package management systems.
comment: A storage location for packages, accessible through a package management system

Software Agent
type: Class
subclass of: SoftwareAgent
IAO_0000115: An automated software system that performs package maintenance tasks, such as dependency update bots (Renovate, Dependabot), CI/CD pipelines, or automated security patchers. Distinguished from Person to preserve OntoClean rigidity — a bot is not a foaf:Person.
comment: An automated software agent performing package maintenance tasks

Source Package
type: Class
subclass of: Package
IAO_0000115: A source package containing the original source code, build scripts, and packaging metadata required to produce one or more binary packages for distribution.
comment: A package containing source code that can be built into one or more binary packages

Test Activity
type: Class
subclass of: Activity
IAO_0000115: An activity that executes test suites to verify the functionality and quality of a software package.
comment: The process of running tests on a package

Upstream Project
type: Class
subclass of: Project
subclass of: Thing
subclass of: Restriction
  on property: project name
  cardinality: 1
IAO_0000115: An upstream software project that serves as the origin for packages across multiple distributions, enabling cross-distribution analysis through a shared identity. Aligned with DOAP (Description of a Project) vocabulary — upstream projects are software projects with maintainers, repositories, and releases.
comment: An upstream open source project that is packaged by one or more distributions

Version
type: Class
subclass of: Thing
subclass of: Restriction
  on property: version string
  cardinality: 1
IAO_0000115: A specific release or iteration of a software package, identified by a version string and representing a particular state of the package's development.
comment: A specific version or release of a package

Version Constraint
type: Class
subclass of: Thing
IAO_0000115: A structured specification that defines acceptable version ranges for package dependencies, including operators and target versions.
comment: A structured representation of version constraints for dependencies

Virtual Package
type: Class
subclass of: Capability
IAO_0000115: An abstract functional promise that can be satisfied by one or more concrete packages. Virtual packages have no artifact (no size, no checksum, no installable files) — they represent a capability that multiple packages can provide.
comment: An abstract functional promise that can be satisfied by one or more concrete packages

Extension
type: Class
IAO_0000115: An add-on that extends a runtime or application with additional functionality (e.g., GL drivers, codecs, language packs).
comment: A Flatpak extension adding capabilities to a runtime or app

Flatpak Application
type: Class
subclass of: Binary Package
IAO_0000115: A desktop application packaged in Flatpak format, identified by a reverse-DNS application ID (e.g., org.mozilla.Firefox), running in a Bubblewrap sandbox.
comment: A sandboxed application distributed via Flatpak

Permission
type: Class
IAO_0000115: A sandbox permission granted to the application via --finish-args, controlling access to devices, filesystems, D-Bus services, and network.
comment: A sandbox permission (finish-arg)

Remote
type: Class
subclass of: Repository
IAO_0000115: An OSTree-based repository serving Flatpak applications and runtimes, such as Flathub or a self-hosted remote.
comment: A Flatpak remote repository (e.g., Flathub)

Runtime
type: Class
IAO_0000115: A base platform providing shared libraries, frameworks, and a filesystem root for Flatpak applications (e.g., org.gnome.Platform, org.kde.Platform).
comment: A Flatpak runtime providing shared libraries

PackageGraph Project
type: Organization