{ "bomFormat" : "CycloneDX", "specVersion" : "1.5", "serialNumber" : "urn:uuid:f6eac96b-3ae3-3bbf-b56a-292ad1515f00", "version" : 1, "metadata" : { "lifecycles" : [ { "phase" : "build" } ], "tools" : [ { "vendor" : "OWASP Foundation", "name" : "CycloneDX Maven plugin", "version" : "2.8.0", "hashes" : [ { "alg" : "MD5", "content" : "76ffec6a7ddd46b2b24517411874eb99" }, { "alg" : "SHA-1", "content" : "5b0d5b41975b53be4799b9621b4af0cfc41d44b6" }, { "alg" : "SHA-256", "content" : "6852aa0f4e42a2db745bab80e384951a6a65b9215d041081d675780999027e81" }, { "alg" : "SHA-512", "content" : "417de20fcdcb11c9713bacbd57290d8e68037fdb4553fd31b8cb08bd760ad52dc65ea88ad4be15844ad3fd5a4d3e440d2f70326f2fe1e63ec78e059c9a883f8d" }, { "alg" : "SHA-384", "content" : "5eb755c6492e7a7385fa9a1e1f4517875bcb834b2df437808a37a2d6f5285df428741762305980315a63fcef1406597d" }, { "alg" : "SHA3-384", "content" : "0fe16a47cf7aab0b22251dafcc39939b68e8f1778093309d8d2060b51a08df445a8b8ed5a9561669faf2e55f907c76d8" }, { "alg" : "SHA3-256", "content" : "3e5a1eb5ab7d0797498862794709ff8eaaa071fe4cc9ec77f52db7e2f97ef487" }, { "alg" : "SHA3-512", "content" : "59281a3e29e76270d7f44b40b5b9f05e55f1ae3ec716d80add806f360940809e3813998ac7c5758043b8e248aed73b86e37dc506cdb4cde03c16bb617d8e5a3a" } ] } ], "component" : { "publisher" : "The Apache Software Foundation", "group" : "org.apache.commons", "name" : "commons-compress", "version" : "1.27.1", "description" : "Apache Commons Compress defines an API for working with compression and archive formats. These include bzip2, gzip, pack200, LZMA, XZ, Snappy, traditional Unix Compress, DEFLATE, DEFLATE64, LZ4, Brotli, Zstandard and ar, cpio, jar, tar, zip, dump, 7z, arj.", "licenses" : [ { "license" : { "id" : "Apache-2.0", "url" : "https://www.apache.org/licenses/LICENSE-2.0" } } ], "purl" : "pkg:maven/org.apache.commons/commons-compress@1.27.1?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://commons.apache.org/proper/commons-compress/" }, { "type" : "build-system", "url" : "https://github.com/apache/commons-parent/actions" }, { "type" : "distribution-intake", "url" : "https://repository.apache.org/service/local/staging/deploy/maven2" }, { "type" : "issue-tracker", "url" : "https://issues.apache.org/jira/browse/COMPRESS" }, { "type" : "mailing-list", "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/" }, { "type" : "vcs", "url" : "https://gitbox.apache.org/repos/asf?p=commons-compress.git" } ], "type" : "library", "bom-ref" : "pkg:maven/org.apache.commons/commons-compress@1.27.1?type=jar" }, "properties" : [ { "name" : "maven.goal", "value" : "makeAggregateBom" }, { "name" : "maven.scopes", "value" : "compile,provided,runtime,system" }, { "name" : "cdx:reproducible", "value" : "enabled" } ] }, "components" : [ { "publisher" : "com.github.luben", "group" : "com.github.luben", "name" : "zstd-jni", "version" : "1.5.6-4", "description" : "JNI bindings for Zstd native library that provides fast and high compression lossless algorithm for Java and all JVM languages.", "scope" : "optional", "hashes" : [ { "alg" : "MD5", "content" : "808e96f7bc2d4a3c5f68e95786f74cc9" }, { "alg" : "SHA-1", "content" : "ba9e303e0b5e94cdd0017390d7d8c06f47fd61f7" }, { "alg" : "SHA-256", "content" : "793ca8734aa15687e7e64564eab8b6ae9ee2720eae27aa663074682144b1c386" }, { "alg" : "SHA-512", "content" : "91ae51e05bfe322e18875cd158f311a0aaef62059fd391b83c4d06447f31518863654fc218891eb99f72def102964c01d8122c73890498fef7288f060cb29e88" }, { "alg" : "SHA-384", "content" : "0c56933ba08e88187767e688325fdc8e281e8cb2838d6125819da484df8ecf07bfe0b88c9a5b12049efb24f8711f6f76" }, { "alg" : "SHA3-384", "content" : "257b31ed4be57edd59c93a7b379c29c04ebba03397a528fc87bd2faa512ad4d95f7d3d6207e840b359fe8697dc66365b" }, { "alg" : "SHA3-256", "content" : "9548d91de11376d8c4af0a3400078473e77225ae4ec1c8956d41b2af2e81810b" }, { "alg" : "SHA3-512", "content" : "3db8c2f18fad2bcd1bc9486309228374d33e6f15d39ed8324da58a8d7d17175fb278f20004f549095333a76ce2637441e74da49fd32637e5cca640e82a2b36c7" } ], "licenses" : [ { "license" : { "id" : "BSD-2-Clause" } } ], "purl" : "pkg:maven/com.github.luben/zstd-jni@1.5.6-4?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://github.com/luben/zstd-jni" } ], "type" : "library", "bom-ref" : "pkg:maven/com.github.luben/zstd-jni@1.5.6-4?type=jar" }, { "group" : "org.brotli", "name" : "dec", "version" : "0.1.2", "description" : "Brotli is a generic-purpose lossless compression algorithm.", "scope" : "optional", "hashes" : [ { "alg" : "MD5", "content" : "4b1cd14cf29733941cc536b27e6aedfa" }, { "alg" : "SHA-1", "content" : "0c26a897ae0d524809eef1c786cc6183b4ddcc3b" }, { "alg" : "SHA-256", "content" : "615c0c3efef990d77831104475fba6a1f7971388691d4bad1471ad84101f6d52" }, { "alg" : "SHA-512", "content" : "d4cd2b33f7c358012ff01db6a13ebfe1e8051a580698bffcd942c47451012cf53ce49a400b1c8bf7502b01e631d79d7c6417202a145622572d79fd145ccde61a" }, { "alg" : "SHA-384", "content" : "d6b8ad9d0ee6baf8c3a29c1dc2911eaf207352e2c7de893a0185e987e7eae87827890c1d4dbf31c46f25846fbcdc08bb" }, { "alg" : "SHA3-384", "content" : "d16c32130bf6b168ff4c8a3dedf1b17787f8d6f0eab9de21e51ed3ab1e7d85925dd02315972f6ca3a4493357aad545cb" }, { "alg" : "SHA3-256", "content" : "962dc76a5c487de8d34308860ab65927bf91f50ccb12f37bffb036a7a05145a4" }, { "alg" : "SHA3-512", "content" : "a82a3f79b57d30613606ca51dc432b097fa75aab5c87fb45eabec6d80ddeff1b329100b325bb07005aebaec166952c4599a863d4bfd5a684bad21103a2046311" } ], "licenses" : [ { "license" : { "id" : "MIT", "url" : "https://opensource.org/licenses/MIT" } } ], "purl" : "pkg:maven/org.brotli/dec@0.1.2?type=jar", "externalReferences" : [ { "type" : "website", "url" : "http://brotli.org/dec" }, { "type" : "vcs", "url" : "https://github.com/google/brotli/dec" } ], "type" : "library", "bom-ref" : "pkg:maven/org.brotli/dec@0.1.2?type=jar" }, { "group" : "org.tukaani", "name" : "xz", "version" : "1.10", "description" : "XZ data compression", "scope" : "optional", "hashes" : [ { "alg" : "MD5", "content" : "56e3fd256e5423a74393bd5eaa5302bb" }, { "alg" : "SHA-1", "content" : "1be8166f89e035a56c6bfc67dbc423996fe577e2" }, { "alg" : "SHA-256", "content" : "95c63c1a55b22dd6453890a419cc1a640f790bbf7d8ae82db1e30aefefb08888" }, { "alg" : "SHA-512", "content" : "af234bb2a5d42b355ea020c5b687268f0336e393eae69a05251677151d1e85b1e34999d5a6be6451e0b047e3cf13341dc227a5483553766252b0ea66025a44f9" }, { "alg" : "SHA-384", "content" : "b078b623faac3600d11bf905fd3e800439b101bf11096834305c04e015aae0096765bbd20e61bacae83eadd7e3a9e2af" }, { "alg" : "SHA3-384", "content" : "c51f9a76a9d9972526c8acf1d0e3eebe77557ea00aba2296bf4eee2cd47e11c98fcec5343c2507c83dc2e2ff6c73a40f" }, { "alg" : "SHA3-256", "content" : "e211a91b89c5198152dd602caf00f3433462004859e885d5dfb4f00ca6b2633e" }, { "alg" : "SHA3-512", "content" : "baa9fff0a0c0e1409bc2b5cf1b024397aef8a189a11b648bc0d4eea0b4827a30a78865b2db7ad99b0143e370de2a854efc3b95ca61fa770ab46c12e68aff2754" } ], "licenses" : [ { "license" : { "id" : "0BSD", "url" : "http://landley.net/toybox/license.html" } } ], "purl" : "pkg:maven/org.tukaani/xz@1.10?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://tukaani.org/xz/java.html" }, { "type" : "vcs", "url" : "https://github.com/tukaani-project/xz-java" } ], "type" : "library", "bom-ref" : "pkg:maven/org.tukaani/xz@1.10?type=jar" }, { "publisher" : "The Apache Software Foundation", "group" : "commons-codec", "name" : "commons-codec", "version" : "1.17.1", "description" : "The Apache Commons Codec component contains encoders and decoders for various formats such as Base16, Base32, Base64, digest, and Hexadecimal. In addition to these widely used encoders and decoders, the codec package also maintains a collection of phonetic encoding utilities.", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "7b3438ab4c6d91e0066d410947e43f3e" }, { "alg" : "SHA-1", "content" : "973638b7149d333563584137ebf13a691bb60579" }, { "alg" : "SHA-256", "content" : "f9f6cb103f2ddc3c99a9d80ada2ae7bf0685111fd6bffccb72033d1da4e6ff23" }, { "alg" : "SHA-512", "content" : "a7db98db470e6ad338266ff442fbdfbc277ba1d07a591336f7d15dc49fdac884da7dac04d806628b12437f993d8b5e6a4b800a66590ff11936dbf8bedcd8e860" }, { "alg" : "SHA-384", "content" : "ef0b8e0fbea5ee057b2c39114ff862a057d207d4dd6b4fd2f5ca96bfc039e76274f1dd02ddf985f1fa965736a522f5c5" }, { "alg" : "SHA3-384", "content" : "ac30c88a6c4bbdfa79cb697cd179627d2addae842e48e2ab167c4f9c5475d05ef4743f58fbed254dd7abc6f3877644fe" }, { "alg" : "SHA3-256", "content" : "f3fe1daf04e63f556d72f4f59f149327b65d899d6afe1de770b42faae2e323df" }, { "alg" : "SHA3-512", "content" : "29901c3e6394dd87f13a91b5432c678ac144cb6c86271b06c57c73c0480b23a4688d0266e2dd04abf5e1d148a2e80e1215dd87d2cb5ffbf2c023409f4f5f8f86" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0", "url" : "https://www.apache.org/licenses/LICENSE-2.0" } } ], "purl" : "pkg:maven/commons-codec/commons-codec@1.17.1?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://commons.apache.org/proper/commons-codec/" }, { "type" : "build-system", "url" : "https://github.com/apache/commons-parent/actions" }, { "type" : "distribution-intake", "url" : "https://repository.apache.org/service/local/staging/deploy/maven2" }, { "type" : "issue-tracker", "url" : "https://issues.apache.org/jira/browse/CODEC" }, { "type" : "mailing-list", "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/" }, { "type" : "vcs", "url" : "https://github.com/apache/commons-codec" } ], "type" : "library", "bom-ref" : "pkg:maven/commons-codec/commons-codec@1.17.1?type=jar" }, { "publisher" : "OW2", "group" : "org.ow2.asm", "name" : "asm", "version" : "9.7", "description" : "ASM, a very small and fast Java bytecode manipulation framework", "scope" : "optional", "hashes" : [ { "alg" : "MD5", "content" : "3957b18bf02a62edcb6726d074b90b08" }, { "alg" : "SHA-1", "content" : "073d7b3086e14beb604ced229c302feff6449723" }, { "alg" : "SHA-256", "content" : "adf46d5e34940bdf148ecdd26a9ee8eea94496a72034ff7141066b3eea5c4e9d" }, { "alg" : "SHA-512", "content" : "ada37fcc95884a4d2cbc64495f5f67556c847e7724e26ccfbb15cc42a476436fa54b5d4fd4d9ed340241d848999d415e1cff07045d9e97d451c16aeed4911045" }, { "alg" : "SHA-384", "content" : "b34c6230cd1c46e34067ae8429f72c7e031a1c0fc75b93ef6accf18fd5fe6a74c3659160b3199652d88bd916cbd63d4a" }, { "alg" : "SHA3-384", "content" : "9a89b843fededac03bb2448087468814e1214c3de8e754a3456b8b6f518fff1db41b2e787a0a255b6d2a99906f3d2890" }, { "alg" : "SHA3-256", "content" : "a8377efe9c0ccba595a223feb3a90bbfcb0a3f9b1ac30975abf1f2493d864f50" }, { "alg" : "SHA3-512", "content" : "aeb8e1002420c8998b59c44c27574205a55730e7f8e299b88e730bb187d9fff3723347441f0e1adebb12839e1bd7c418ea1275b81c12a2cdb510faac76fc5369" } ], "licenses" : [ { "license" : { "id" : "BSD-3-Clause", "url" : "https://opensource.org/licenses/BSD-3-Clause" } } ], "purl" : "pkg:maven/org.ow2.asm/asm@9.7?type=jar", "externalReferences" : [ { "type" : "website", "url" : "http://asm.ow2.io/" }, { "type" : "distribution-intake", "url" : "https://repository.ow2.org/nexus/service/local/staging/deploy/maven2" }, { "type" : "issue-tracker", "url" : "https://gitlab.ow2.org/asm/asm/issues" }, { "type" : "mailing-list", "url" : "https://mail.ow2.org/wws/arc/asm/" }, { "type" : "vcs", "url" : "https://gitlab.ow2.org/asm/asm/" } ], "type" : "library", "bom-ref" : "pkg:maven/org.ow2.asm/asm@9.7?type=jar" }, { "publisher" : "The Apache Software Foundation", "group" : "commons-io", "name" : "commons-io", "version" : "2.16.1", "description" : "The Apache Commons IO library contains utility classes, stream implementations, file filters, file comparators, endian transformation classes, and much more.", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "ed8191a5a217940140001b0acfed18d9" }, { "alg" : "SHA-1", "content" : "377d592e740dc77124e0901291dbfaa6810a200e" }, { "alg" : "SHA-256", "content" : "f41f7baacd716896447ace9758621f62c1c6b0a91d89acee488da26fc477c84f" }, { "alg" : "SHA-512", "content" : "97eab31b073c5c57c8bcfaa2fec7b481a15a9a1f9ed864dfdc63b57f062b230557caa734c3133aca1165facb588c58db0185c07832241d70159e87a4bcf48008" }, { "alg" : "SHA-384", "content" : "bd78e2eb3d005046d1329557d3a77529e98384d4d87940374eef432d73d5a06ef20fb7b0c44389de64496fe134dcf199" }, { "alg" : "SHA3-384", "content" : "f9acc2f04f076328d17e2d0615da4367470b45b15f828008d8df57033401ae6b3b83b21cf9bc1745ff3cfe5a102bc48e" }, { "alg" : "SHA3-256", "content" : "5d4bbe43356c92e3970b69892b44a10cc736ef8cb1bedfc753cc8df050520161" }, { "alg" : "SHA3-512", "content" : "29440ccf2551b383c7e6cbdf78ef7784a421322e418da1be3fcd3251c8a826ffd5c6d1bea32b9c80e74744c035cc9cd8483e629e407110ff3133a05cb34bef93" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0", "url" : "https://www.apache.org/licenses/LICENSE-2.0" } } ], "purl" : "pkg:maven/commons-io/commons-io@2.16.1?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://commons.apache.org/proper/commons-io/" }, { "type" : "build-system", "url" : "https://github.com/apache/commons-parent/actions" }, { "type" : "distribution-intake", "url" : "https://repository.apache.org/service/local/staging/deploy/maven2" }, { "type" : "issue-tracker", "url" : "https://issues.apache.org/jira/browse/IO" }, { "type" : "mailing-list", "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/" }, { "type" : "vcs", "url" : "https://gitbox.apache.org/repos/asf?p=commons-io.git" } ], "type" : "library", "bom-ref" : "pkg:maven/commons-io/commons-io@2.16.1?type=jar" }, { "publisher" : "The Apache Software Foundation", "group" : "org.apache.commons", "name" : "commons-lang3", "version" : "3.16.0", "description" : "Apache Commons Lang, a package of Java utility classes for the classes that are in java.lang's hierarchy, or are considered to be so standard as to justify existence in java.lang. The code is tested using the latest revision of the JDK for supported LTS releases: 8, 11, 17 and 21 currently. See https://github.com/apache/commons-lang/blob/master/.github/workflows/maven.yml Please ensure your build environment is up-to-date and kindly report any build issues.", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "d257553f79beb77f7fb0c73914ff7740" }, { "alg" : "SHA-1", "content" : "90c1928125167fcf3cccbd6cca2b08bbe00530b3" }, { "alg" : "SHA-256", "content" : "7c07549d710861fceb0a71584b20c3ac790060a810ba5f81bad2431bd230d610" }, { "alg" : "SHA-512", "content" : "37dbe28dc33df158e77249aaaec3e5170fd5093a96c8505376124e5b9c26cd67fa60b18c9ceb6b75ad0dd5d31539c5cc172196c83d484f1a73a2cba61f35b019" }, { "alg" : "SHA-384", "content" : "21404cb25f5bcb61edd6ed4039f14ee0f798acb44ec9ee36dfff8e4d1b7c6ccefec959c2c0ee425368258398550c85ad" }, { "alg" : "SHA3-384", "content" : "2ba4ed2a0b3c40ecb2463fbd3d396cff3780e07e10ddbc4811d47eb6dee27c22aa8b0cdf732212b4d710004317c1c1e8" }, { "alg" : "SHA3-256", "content" : "0440ddfcdc43ff3ca7b4966c9aa5b2f2bde4d29eae66cce7c17eed1ffdf24aac" }, { "alg" : "SHA3-512", "content" : "895df0b20406f4a907e0a6f71caa510c72300b96ca2b99d2fd9ef3d741d67dcf9d6066c90bbc2971ed8593ee6c7fb25f8ed233a0a67919a9691c1ee49a17c50d" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0", "url" : "https://www.apache.org/licenses/LICENSE-2.0" } } ], "purl" : "pkg:maven/org.apache.commons/commons-lang3@3.16.0?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://commons.apache.org/proper/commons-lang/" }, { "type" : "build-system", "url" : "https://github.com/apache/commons-parent/actions" }, { "type" : "distribution-intake", "url" : "https://repository.apache.org/service/local/staging/deploy/maven2" }, { "type" : "issue-tracker", "url" : "https://issues.apache.org/jira/browse/LANG" }, { "type" : "mailing-list", "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/" }, { "type" : "vcs", "url" : "https://gitbox.apache.org/repos/asf?p=commons-lang.git" } ], "type" : "library", "bom-ref" : "pkg:maven/org.apache.commons/commons-lang3@3.16.0?type=jar" }, { "publisher" : "OSGi Alliance", "group" : "org.osgi", "name" : "org.osgi.core", "version" : "6.0.0", "description" : "OSGi Core Release 6, Interfaces and Classes for use in compiling bundles.", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "cae291c61fe8b7a4476d713550c7ff49" }, { "alg" : "SHA-1", "content" : "0c49acdc9ac62cf69ee49cb6f1905b4fdb79ea5c" }, { "alg" : "SHA-256", "content" : "1c1bb435eb34cbf1f743653da38f604d45d53fbc95979053768cd3fc293cb931" }, { "alg" : "SHA-512", "content" : "a6d5388804982ab2cb0ba82b4291e73f006577c54e5dcb0675a2c4922594ddb0265810a4e7c748c88eba76ee350340376b7a9bd25d2de3afb954cf89117cd470" }, { "alg" : "SHA-384", "content" : "8daff91fc229b2874c1ff7a214fdee65b1824fbac76eb7feec609c5b70ab2fd24fc5cf017b339788a5c7aec041ec1a1c" }, { "alg" : "SHA3-384", "content" : "b921d8bea5dab6e7d827ce49a43e6edb4a15c1402e1d70498faf867bd7e9ea61f47b9cbdbf008ed517b71499c02b9e4c" }, { "alg" : "SHA3-256", "content" : "5836efac64dd3757498bc6648cf02e46f136c6b0b39d5f1641218459d6b68ca0" }, { "alg" : "SHA3-512", "content" : "9056edfc04943cdc81041db1851cade670415457221617babeb3d3c5136c3dcc303862e55b545f40584477e0654d11d84db6ede072015b08744241202d79ee63" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/org.osgi/org.osgi.core@6.0.0?type=jar", "externalReferences" : [ { "type" : "website", "url" : "http://www.osgi.org" }, { "type" : "vcs", "url" : "private" } ], "type" : "library", "bom-ref" : "pkg:maven/org.osgi/org.osgi.core@6.0.0?type=jar" } ], "dependencies" : [ { "ref" : "pkg:maven/org.apache.commons/commons-compress@1.27.1?type=jar", "dependsOn" : [ "pkg:maven/com.github.luben/zstd-jni@1.5.6-4?type=jar", "pkg:maven/org.brotli/dec@0.1.2?type=jar", "pkg:maven/org.tukaani/xz@1.10?type=jar", "pkg:maven/commons-codec/commons-codec@1.17.1?type=jar", "pkg:maven/org.ow2.asm/asm@9.7?type=jar", "pkg:maven/commons-io/commons-io@2.16.1?type=jar", "pkg:maven/org.apache.commons/commons-lang3@3.16.0?type=jar", "pkg:maven/org.osgi/org.osgi.core@6.0.0?type=jar" ] }, { "ref" : "pkg:maven/com.github.luben/zstd-jni@1.5.6-4?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/org.brotli/dec@0.1.2?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/org.tukaani/xz@1.10?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/commons-codec/commons-codec@1.17.1?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/org.ow2.asm/asm@9.7?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/commons-io/commons-io@2.16.1?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/org.apache.commons/commons-lang3@3.16.0?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/org.osgi/org.osgi.core@6.0.0?type=jar", "dependsOn" : [ ] } ] }