<?xml version="1.0" encoding="UTF-8"?>
<bom serialNumber="urn:uuid:150af0b5-6060-3144-ae7a-def3a8017d77" version="1" xmlns="http://cyclonedx.org/schema/bom/1.6">
  <metadata>
    <lifecycles>
      <lifecycle>
        <phase>build</phase>
      </lifecycle>
    </lifecycles>
    <tools>
      <components>
        <component type="library">
          <author>OWASP Foundation</author>
          <group>org.cyclonedx</group>
          <name>cyclonedx-maven-plugin</name>
          <version>2.9.1</version>
          <description>CycloneDX Maven plugin</description>
          <hashes>
            <hash alg="MD5">9c7a565cf28cce58557d0c621c5ea4b1</hash>
            <hash alg="SHA-1">be882d5a22050bfa9d19090b1420c188617d0e1c</hash>
            <hash alg="SHA-256">698e0f37184a5b28c245c4065fd036dfce253b52f82fbb7113d81d36326cc249</hash>
            <hash alg="SHA-512">c0f0b11026858166f872a2eb54719492e5cecaa0bc9cd6b30b3ecb4a174eed220f4a1b5829d18d6734128e778d3cb3db7ffed177c92866133129cb29081814a0</hash>
            <hash alg="SHA-384">d80964707dfe5caca8c70521d5066f57589304c0a657e6fbc7c0614ea0fc7b3b3dbe7778361eee0f54ba111e9cb0ffcb</hash>
            <hash alg="SHA3-384">80bc3a275d9514bc457461ff52a72add8c7ecbbc01d8912efce57139016c544ee776981851be0a58fa977ab4221f703f</hash>
            <hash alg="SHA3-256">142317d6f245390f4fd2d0c100b16281b8dfc5c0c2cff86943bdcc97039cb699</hash>
            <hash alg="SHA3-512">af0fb9137c90b65d1a07f72e4d51ae509956cdb8800f35c961b037cdda1fe4a14ce3b496cef71ba85f1621affcfe29cd42704ae4191ff0b090a9602087c8997b</hash>
          </hashes>
        </component>
      </components>
    </tools>
    <component type="library" bom-ref="pkg:maven/org.apache.arrow/arrow-format@18.3.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.arrow</group>
      <name>arrow-format</name>
      <version>18.3.0</version>
      <description>Generated Java files from the IPC Flatbuffer definitions.</description>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.arrow/arrow-format@18.3.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://arrow.apache.org/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/apache/arrow-java/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://lists.apache.org/list.html?dev@arrow.apache.org</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/arrow-java/tree/v18.3.0</url>
        </reference>
      </externalReferences>
    </component>
    <properties>
      <property name="maven.goal">makeBom</property>
      <property name="maven.scopes">compile,provided,runtime,system</property>
      <property name="cdx:reproducible">enabled</property>
    </properties>
  </metadata>
  <components>
    <component type="library" bom-ref="pkg:maven/com.google.flatbuffers/flatbuffers-java@25.2.10?type=jar">
      <group>com.google.flatbuffers</group>
      <name>flatbuffers-java</name>
      <version>25.2.10</version>
      <description>Memory Efficient Serialization Library</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">cadad6a81a9f7dc532ab7a5cb97a50c7</hash>
        <hash alg="SHA-1">9bb1a149ec48588fc04a3d00a3cc4e0135273b4e</hash>
        <hash alg="SHA-256">587bd6c31cda747587493a113bec8602d3a0b0ca579b2b1b838ef71b19e6525d</hash>
        <hash alg="SHA-512">9c4b26d5554b7a6f9907f18033ec0fc060fd2af58d836d033e2b076319d782473f7f0a3ef4f9d16e859b2c5b15f73d83ac889323dbdcbd7563ea495c59b9c626</hash>
        <hash alg="SHA-384">d560b2c573b607ab3c34f7ef13887814204fabb0e49e5f98f28c5f0f8fa7a86feeeca5f7a830237a7d8e735ca0df8d8a</hash>
        <hash alg="SHA3-384">f70604f012c9f91eeb264fd4245dd3b1ac3a6039ca8d46ccd6a24e7f4d0976d92eb14097ef92595eb49aa8d7124a84ec</hash>
        <hash alg="SHA3-256">c5af0cdd09bdc4197104b03820b944e0a24193bcc7ecafdd621b711cec27999b</hash>
        <hash alg="SHA3-512">52291e71a8d81ce74519f7e5d2d7c3e8bcdd699e137d02ab3d620e848f4732c33dccd5cd670875cc3b4efb12ff80b34b987b5a634aac6f816fb7c80c48678c4a</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.flatbuffers/flatbuffers-java@25.2.10?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/google/flatbuffers</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/google/flatbuffers</url>
        </reference>
      </externalReferences>
    </component>
  </components>
  <dependencies>
    <dependency ref="pkg:maven/org.apache.arrow/arrow-format@18.3.0?type=jar">
      <dependency ref="pkg:maven/com.google.flatbuffers/flatbuffers-java@25.2.10?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.google.flatbuffers/flatbuffers-java@25.2.10?type=jar"/>
  </dependencies>
</bom>
