<?xml version="1.0" encoding="UTF-8"?>
<bom serialNumber="urn:uuid:406453a4-ff5d-3293-834b-c8cf9eb07f35" version="1" xmlns="http://cyclonedx.org/schema/bom/1.6">
  <metadata>
    <lifecycles>
      <lifecycle>
        <phase>build</phase>
      </lifecycle>
    </lifecycles>
    <tools>
      <components>
        <component type="library">
          <author>OWASP Foundation</author>
          <group>org.cyclonedx</group>
          <name>cyclonedx-maven-plugin</name>
          <version>2.9.0</version>
          <description>CycloneDX Maven plugin</description>
          <hashes>
            <hash alg="MD5">dfaeab7ec837ce07874e2ee66fdc57d3</hash>
            <hash alg="SHA-1">8bab47bafc8183d0a5f37790ff55ed05ead1ae2d</hash>
            <hash alg="SHA-256">67117e03eae4a03ca8bab3add044995f4899aa21798a2510b8265ef8101e90ac</hash>
            <hash alg="SHA-512">ae6b706516bb76da806b7854aef9e348fa593f5159ae9d693ad38942165c0ebc0846d977a477f6029612d43468fd2cd73a5aa253c228a94fb8d184e0acefc3d2</hash>
            <hash alg="SHA-384">ee872354d8b0dcd6f9835a913b3aaba70d9365a46043be78020183282a1e9fca812e969246cbe31d642541591b46648b</hash>
            <hash alg="SHA3-384">e5167f9e7ceba3b7b4d1900c404543907868745334bedc69cdf79c271727148413033a3b1426b733b7549e612e44adee</hash>
            <hash alg="SHA3-256">41fc0bc2275f354e2c7da01041ce73ce677364799cba53920a180aa5d4571c63</hash>
            <hash alg="SHA3-512">ed7f97900b09b818dbc0b8a23c00a2843e1bc34e2e8eb5b6df52533af0a15b721de6f7d5c2fd9352b8d4fde768e080053b40a16f0f9f04c336fe9b44abe83fc0</hash>
          </hashes>
        </component>
      </components>
    </tools>
    <component type="library" bom-ref="pkg:maven/org.apache.arrow/arrow-memory-netty-buffer-patch@18.1.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.arrow</group>
      <name>arrow-memory-netty-buffer-patch</name>
      <version>18.1.0</version>
      <description>Netty Buffer needed to patch that is consumed by Arrow Memory Netty</description>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.arrow/arrow-memory-netty-buffer-patch@18.1.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://arrow.apache.org/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/apache/arrow/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://lists.apache.org/list.html?dev@arrow.apache.org</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/arrow/tree/apache-arrow-18.1.0</url>
        </reference>
      </externalReferences>
    </component>
    <properties>
      <property name="maven.goal">makeBom</property>
      <property name="maven.scopes">compile,provided,runtime,system</property>
      <property name="cdx:reproducible">enabled</property>
    </properties>
  </metadata>
  <components>
    <component type="library" bom-ref="pkg:maven/org.apache.arrow/arrow-memory-core@18.1.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.arrow</group>
      <name>arrow-memory-core</name>
      <version>18.1.0</version>
      <description>Core off-heap memory management libraries for Arrow ValueVectors.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">b623f3c2b3c747c0e79fef6ec1486993</hash>
        <hash alg="SHA-1">35f4853d512f06759759b40b53bac850867886f8</hash>
        <hash alg="SHA-256">bc42ead76b54879bee621608727b19c24bc58dc1eb5d760eafc8aa8519ec427c</hash>
        <hash alg="SHA-512">819f1fc8d4a555419dbd5cbd0f8821d61cdf971c6c5586f6a0e44464044aa9bf033939344214a17a8994c18a3bfec74f933541b0b23c9c6a0a4b4672400972fc</hash>
        <hash alg="SHA-384">01bad752734bd1f7cd32339c88cf58b13631925799628d16858d283fc63176c1bedf8b6cf79fcca60155a3a8a4d7b122</hash>
        <hash alg="SHA3-384">8dc1ee8d4d2d17b206952724070354e37ec7062d3d5a26b10b56539c632e834ca51fa1f2c65bdc965fc91c604d1ab8ea</hash>
        <hash alg="SHA3-256">5a2f86266fb80afe49ffac6e2b92e3baa12062d49a2cb076d0e29551943ccc1e</hash>
        <hash alg="SHA3-512">2ad3744642effa4f95319b9ab1ed526fc2c3659d327f60c1c7458011086068e70325fdccd54333dedbf3f473bc9575607ac6ad6367de5ec49dcaa218a740f10f</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.arrow/arrow-memory-core@18.1.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://arrow.apache.org/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/apache/arrow/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://lists.apache.org/list.html?dev@arrow.apache.org</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/arrow/tree/apache-arrow-18.1.0</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.netty/netty-buffer@4.1.114.Final?type=jar">
      <publisher>The Netty Project</publisher>
      <group>io.netty</group>
      <name>netty-buffer</name>
      <version>4.1.114.Final</version>
      <description>Netty is an asynchronous event-driven network application framework for
    rapid development of maintainable high performance protocol servers and
    clients.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">056f3a0df3ccafc134eb361c451b7ec2</hash>
        <hash alg="SHA-1">f1d77d15c0b781cd9395a2a956262766fd0c7602</hash>
        <hash alg="SHA-256">436ea25725d92c1f590a857d46dc1c8f5c54d7f2775984db2655e5e3bc0d97c9</hash>
        <hash alg="SHA-512">d2aef05e50ca3ee73dcc3775b3b5ab23ab357713cbe43c556c06fac683335cfabb306d8ad37f0fb5f80f122ee71805e313e19ad8b5f323846aa6449f426862c9</hash>
        <hash alg="SHA-384">c29a99986e75ba25628cde0cbb55f9b5b1e80b43de5ef797421f849257fb81bf6ca2b16988dbba06ec07a8ff5c4dff3c</hash>
        <hash alg="SHA3-384">f53290909c6d9d13082e67d12e36d63a710700e5f4965798be096742141c7c5d4b87993fa02ff652a052103b7cdb363a</hash>
        <hash alg="SHA3-256">a812d4053034b4e4f69de7551e74608c9eacac1976c2b1f9c15e721cee79cd91</hash>
        <hash alg="SHA3-512">66a6fd750c441b88983d3395e18f0617fa070f02477ddbdb40b6ab332d605a3da7cd366edf2f1dc9ecc1f22c299d266db44c1e451373cdac8537e39a2d630df2</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.netty/netty-buffer@4.1.114.Final?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://netty.io/netty-buffer/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/netty/netty/netty-buffer</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.netty/netty-common@4.1.114.Final?type=jar">
      <publisher>The Netty Project</publisher>
      <group>io.netty</group>
      <name>netty-common</name>
      <version>4.1.114.Final</version>
      <description>Netty is an asynchronous event-driven network application framework for
    rapid development of maintainable high performance protocol servers and
    clients.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">7d949112959bc9442fcdcc0a96b0378b</hash>
        <hash alg="SHA-1">862712e292b162c8ccaa7847a6a54df8178f77e5</hash>
        <hash alg="SHA-256">d6b053b3b27cc568207f254902dcb6f95dd238c1b9d55ef719d2c4f8eb476223</hash>
        <hash alg="SHA-512">a6e5f18e80653891fc84864e193f2c46c2b23ef19c834cb9a97e3117efd56180a9512ea774f84152a00fe85d1af7f8a1efdf3a78043528a5f10433d517477063</hash>
        <hash alg="SHA-384">e42eb47c93c02ade681ef772d2b1d58db0d5f472446430137101ef766b415af9f4538ab84a64a5dec4610f0212428cbf</hash>
        <hash alg="SHA3-384">b7731a9c149ed8cc410ed2f428a66cfde1b289a1a8810bafa67e71f364869aa0b79aca3253410677ff0aff7f9fb3f095</hash>
        <hash alg="SHA3-256">8ce5a5c9ed49fe312c91e0b64eeb663e1dc64a8d4e3acbd209a23a3bca50a6f3</hash>
        <hash alg="SHA3-512">d700b25e248e74129f4c9d78e85a436004dd3696f05ca4bfe42f0e69d256ac95637f2295eb778bda148be617f58f8b27078a86fbfecbf3f0c94ac657719b02f6</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.netty/netty-common@4.1.114.Final?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://netty.io/netty-common/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/netty/netty/netty-common</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.slf4j/slf4j-api@2.0.16?type=jar">
      <publisher>QOS.ch</publisher>
      <group>org.slf4j</group>
      <name>slf4j-api</name>
      <version>2.0.16</version>
      <description>The slf4j API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">c8de8f5d740584cb24b5652cfba8b3c4</hash>
        <hash alg="SHA-1">0172931663a09a1fa515567af5fbef00897d3c04</hash>
        <hash alg="SHA-256">a12578dde1ba00bd9b816d388a0b879928d00bab3c83c240f7013bf4196c579a</hash>
        <hash alg="SHA-512">91c2e7b30f24649bb3edfc7f138c2b7dc715ad36963af159defb80a71205eb7e4c5bcc80d779ef993b567a56724064f190c93985f32665a8df85198a03a2f1bb</hash>
        <hash alg="SHA-384">ed0cc7ad67343b9fe4df03ea534025bf9d90c112b33cd8920f29890d923c349b69820c9c42b9e8882047af848b74f99d</hash>
        <hash alg="SHA3-384">331ac707cfa4b2bda44deffce7d2a640abb9ae12968cb1ac4879ba1b45542e3d3ce1016c812ff1f2449336bc7ea6bebb</hash>
        <hash alg="SHA3-256">3f68204951bb4baedc34fdd7194d0801042268aba0c58ac5d760779510743fbb</hash>
        <hash alg="SHA3-512">d7a2f7359e7b2cd6ae3650d28352bf8789acf5855a3596a3be2a236a94931abf8bacf0d6a457afa43164be53abb19cc223ef4f030822a3295c036c078527e361</hash>
      </hashes>
      <licenses>
        <license>
          <id>MIT</id>
          <url>https://opensource.org/license/mit/</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.slf4j/slf4j-api@2.0.16?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://www.slf4j.org</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/qos-ch/slf4j/slf4j-parent/slf4j-api</url>
        </reference>
      </externalReferences>
    </component>
  </components>
  <dependencies>
    <dependency ref="pkg:maven/org.apache.arrow/arrow-memory-netty-buffer-patch@18.1.0?type=jar">
      <dependency ref="pkg:maven/org.apache.arrow/arrow-memory-core@18.1.0?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-buffer@4.1.114.Final?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-common@4.1.114.Final?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@2.0.16?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.arrow/arrow-memory-core@18.1.0?type=jar">
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@2.0.16?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.slf4j/slf4j-api@2.0.16?type=jar"/>
    <dependency ref="pkg:maven/io.netty/netty-buffer@4.1.114.Final?type=jar">
      <dependency ref="pkg:maven/io.netty/netty-common@4.1.114.Final?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/io.netty/netty-common@4.1.114.Final?type=jar"/>
  </dependencies>
</bom>
