<?xml version="1.0" encoding="UTF-8"?>
<bom serialNumber="urn:uuid:b04b6d19-8ec1-3a49-b16d-64312a515603" version="1" xmlns="http://cyclonedx.org/schema/bom/1.6">
  <metadata>
    <lifecycles>
      <lifecycle>
        <phase>build</phase>
      </lifecycle>
    </lifecycles>
    <tools>
      <components>
        <component type="library">
          <author>OWASP Foundation</author>
          <group>org.cyclonedx</group>
          <name>cyclonedx-maven-plugin</name>
          <version>2.9.0</version>
          <description>CycloneDX Maven plugin</description>
          <hashes>
            <hash alg="MD5">dfaeab7ec837ce07874e2ee66fdc57d3</hash>
            <hash alg="SHA-1">8bab47bafc8183d0a5f37790ff55ed05ead1ae2d</hash>
            <hash alg="SHA-256">67117e03eae4a03ca8bab3add044995f4899aa21798a2510b8265ef8101e90ac</hash>
            <hash alg="SHA-512">ae6b706516bb76da806b7854aef9e348fa593f5159ae9d693ad38942165c0ebc0846d977a477f6029612d43468fd2cd73a5aa253c228a94fb8d184e0acefc3d2</hash>
            <hash alg="SHA-384">ee872354d8b0dcd6f9835a913b3aaba70d9365a46043be78020183282a1e9fca812e969246cbe31d642541591b46648b</hash>
            <hash alg="SHA3-384">e5167f9e7ceba3b7b4d1900c404543907868745334bedc69cdf79c271727148413033a3b1426b733b7549e612e44adee</hash>
            <hash alg="SHA3-256">41fc0bc2275f354e2c7da01041ce73ce677364799cba53920a180aa5d4571c63</hash>
            <hash alg="SHA3-512">ed7f97900b09b818dbc0b8a23c00a2843e1bc34e2e8eb5b6df52533af0a15b721de6f7d5c2fd9352b8d4fde768e080053b40a16f0f9f04c336fe9b44abe83fc0</hash>
          </hashes>
        </component>
      </components>
    </tools>
    <component type="library" bom-ref="pkg:maven/org.apache.arrow/arrow-format@18.1.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.arrow</group>
      <name>arrow-format</name>
      <version>18.1.0</version>
      <description>Generated Java files from the IPC Flatbuffer definitions.</description>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.arrow/arrow-format@18.1.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://arrow.apache.org/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/apache/arrow/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://lists.apache.org/list.html?dev@arrow.apache.org</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/arrow/tree/apache-arrow-18.1.0</url>
        </reference>
      </externalReferences>
    </component>
    <properties>
      <property name="maven.goal">makeBom</property>
      <property name="maven.scopes">compile,provided,runtime,system</property>
      <property name="cdx:reproducible">enabled</property>
    </properties>
  </metadata>
  <components>
    <component type="library" bom-ref="pkg:maven/com.google.flatbuffers/flatbuffers-java@24.3.25?type=jar">
      <group>com.google.flatbuffers</group>
      <name>flatbuffers-java</name>
      <version>24.3.25</version>
      <description>Memory Efficient Serialization Library</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">1a690a022070ce829ba8efb923c0cab4</hash>
        <hash alg="SHA-1">edc46436b645a12126322d02608dd21aba5ac433</hash>
        <hash alg="SHA-256">f5b50034a53debda980aca803b8b06949f93a40163bc1db6cd69581d3718e355</hash>
        <hash alg="SHA-512">6b487047753e1b5686fb100e3261b6a01b327a9a83ae9f3ac6a9b40a68fe4550dcd2c2c0442d55d76d9e5ab4fbe3c9894da2f76071fc69d571c3da5d2a2dcc0f</hash>
        <hash alg="SHA-384">3eea7bfbc2b252c10bf31db3c56b61a5e335bb3b90ca25e8905709804fe0b11e28e7dde5c8432632373912f4a06465cb</hash>
        <hash alg="SHA3-384">98e581edd7501ba3905533ef6139ce3d233dcccae72a6ae7d3a4015fe91643cf92144f512536090036e66814f93afc52</hash>
        <hash alg="SHA3-256">6b3bb68eb6679b88aeee103930c29c3f1e5136ecd1edb472f0bbbc89a3076dcf</hash>
        <hash alg="SHA3-512">3c022ec58dca97a395d111029b1a2a88db757dc496f6c99a288be0b57e92a9405219765323cce4492d532ad06c640dda1931f1215de086e5e5f141094ed23fb2</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.flatbuffers/flatbuffers-java@24.3.25?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/google/flatbuffers</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/google/flatbuffers</url>
        </reference>
      </externalReferences>
    </component>
  </components>
  <dependencies>
    <dependency ref="pkg:maven/org.apache.arrow/arrow-format@18.1.0?type=jar">
      <dependency ref="pkg:maven/com.google.flatbuffers/flatbuffers-java@24.3.25?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.google.flatbuffers/flatbuffers-java@24.3.25?type=jar"/>
  </dependencies>
</bom>
