OWASP Foundation CycloneDX Maven plugin 2.7.11 a70e8b649ab4a2bb7922d360173c8237 4c3c0878c15561639076e5be7a48ffcd6111c5ee 70997d52dbffd4e797c467b2062c6ba9b8b5a7380ff2884779f2743b6172ebb5 bc1ce91190c642f68fd3571939d7668def3b879ec8e5a87a213a9710a106e0290f60f9e0414593d19cca958c4fcb5d4450bd2793bcd609948419c8a2a6a7f5c8 3c8421bdafd1754fb424f16dccc83bfe0827648c1cadfffc98bdf1c7da65475dfe48d2f4b16d233bb8819e155ba6a4f3 ad88cf6a0e0a5d51df49a4dab5530a28de9df7eec8460c045dff3e1f9316b82a244a125d52b937fe9d4ee72e44f5d01a b4d9c3ef07c34517fd9f33178ba95ffc9618eb84a3671e71b0c82991ec3717e5 935b43aba8999dc7d95d93288a251c97b6b32852841b7bef31516c27c8d65c8de7f8411f1829f765ee760f25930c766db6a49df68e5994e18721c0a71f606f1e The Apache Software Foundation org.apache.avro avro-compiler 1.11.4 Compilers for Avro IDL and Avro Specific Java API Apache-2.0 https://www.apache.org/licenses/LICENSE-2.0 pkg:maven/org.apache.avro/avro-compiler@1.11.4?type=bundle https://avro.apache.orghttps://repository.apache.org/service/local/staging/deploy/maven2https://issues.apache.org/jira/browse/AVROhttps://mail-archives.apache.org/mod_mbox/avro-dev/scm:git:https://github.com/apache/avro/lang/avro-parent/avro-compiler makeBom compile,provided,runtime,system enabled The Apache Software Foundation org.apache.avro avro 1.11.4 Avro core components required 915002011d651686f94b4e20d25234a6 25d54640c4a17aa342490c4c63c172759361bf56 eeba11b77070b9aa6337d886fdf778f6695f6c4c3dcfd2a02389925c885079fa 2133473bcafb3997f70dd0dc44e76872beed30910dc88522d898e639df0c58f8fefec4c734e46bf0244cf2ca1b49e90b0fdf5c9d7ccd06b41f8f9ad98da1cca5 701113d1e68c4582aad203692567bff7538d6ac2707195b413e9f831215e0c8622e83383adcc822a353524c28aba5dda 017e0363dfdf0019a2e75785c1f7a8aebe1a61f2c96393bacea3238d8f010d3d82ddcf3466d474ebb113ef67e9ecf192 135d7a5a6e9723e77cee8ede0687f459f8fbb828f4111dc351f747b2b72eb0dd 04d0041f4d215b51a446ec9c2b2998042285f81d85dd316f046b46420b71d459e3f66530ddbc2b98772ee5ced0d8788cb21c46b09d2139d311930ce5424ac3b9 Apache-2.0 https://www.apache.org/licenses/LICENSE-2.0 pkg:maven/org.apache.avro/avro@1.11.4?type=jar https://avro.apache.orghttps://repository.apache.org/service/local/staging/deploy/maven2https://issues.apache.org/jira/browse/AVROhttps://mail-archives.apache.org/mod_mbox/avro-dev/scm:git:https://github.com/apache/avro/lang/avro-parent/avro FasterXML com.fasterxml.jackson.core jackson-core 2.14.3 Core Jackson processing abstractions (aka Streaming API), implementation for JSON required abb25b80cda20ddc2cd3bbd8fccd0d34 4fa101f81504ed6811bf1823270adb51a9b45ff3 7ee2debad3c002e97b28b84d5f1b2044a38e780abb673948238f5bc656e2fe44 7907fbde57f1ebd18d0935d34c5c9657e7dcff924c540b6ba732f87ed2e9e653ee499b21b464b3b74fa569d5865ffa717b8e2098d600a5f74cef4e97f39cc7d5 0d584c6b0ce820441e7e8f341d567924ab236de62f4ad8a40f1af37e983946ea07a9de3a4b607b76bf3c421a02720d0e 4163ac7d8f4fe59319c2fb76bfadcca883bc5fb92b9525d2d930284063cb384b4a7faac49829c4195aaffe64f4054447 52215985453eacefd6659967b51b684d7ebcc30a26163f31b8b7b0f5864fb7b4 e15a4a70c5bf68f77f535931c9d4ab4907efc80ce9d60a49d02fbd259511284e307f0fbbdbf60dcd2930c017a2f9a39c25541a528b6947d1d2388a28db299022 Apache-2.0 pkg:maven/com.fasterxml.jackson.core/jackson-core@2.14.3?type=jar https://github.com/FasterXML/jackson-corehttps://oss.sonatype.org/service/local/staging/deploy/maven2/https://github.com/FasterXML/jackson-core/issueshttps://github.com/FasterXML/jackson-core The Apache Software Foundation org.apache.commons commons-compress 1.26.2 Apache Commons Compress defines an API for working with compression and archive formats. These include bzip2, gzip, pack200, LZMA, XZ, Snappy, traditional Unix Compress, DEFLATE, DEFLATE64, LZ4, Brotli, Zstandard and ar, cpio, jar, tar, zip, dump, 7z, arj. required d2c5abbd0a822c0b79cf4f03ead483ee eb1f823447af685208e684fce84783b43517960c 9168a03141d8fc7eda21a2360d83cc0412bcbb1d6204d992bd48c2573cb3c6b8 7106a722d26da945f6d6eea6f0c61b420bff45749bf60c572d992c545b10ccd926dc4b9a9f366ff29d5940c99f26dfeca98f6c1c4b630632a65f04c2d7b94b26 8422ef0d5e9ca419a8b3a33a4c330348f4495b9edded4fde38636d11e99fc3f725df11769d310edc233beed2401daf53 b32406c91771cfc12e61722add9ab2ef8efa32bf16bdcf80b415f5604bb9b61977c08e6f87f2ef59705c761caca4ffb8 26c54771c66adc967a167306982bded1fc36a6a2d590401fc435303c9e6256a7 3f4054fd56ae8d4f012f2cae5469215010123c1ada8931bdcd634551027816afefd8bd871b2ee99f168e2d5a347e0e28c31427dd79e3f42cefcff2662a5603ff Apache-2.0 https://www.apache.org/licenses/LICENSE-2.0 pkg:maven/org.apache.commons/commons-compress@1.26.2?type=jar https://commons.apache.org/proper/commons-compress/https://github.com/apache/commons-parent/actionshttps://repository.apache.org/service/local/staging/deploy/maven2https://issues.apache.org/jira/browse/COMPRESShttps://mail-archives.apache.org/mod_mbox/commons-user/https://gitbox.apache.org/repos/asf?p=commons-compress.git The Apache Software Foundation commons-codec commons-codec 1.17.0 The Apache Commons Codec component contains encoder and decoders for various formats such as Base16, Base32, Base64, digest, and Hexadecimal. In addition to these widely used encoders and decoders, the codec package also maintains a collection of phonetic encoding utilities. required ca1f080782f7e77cb3aec451e7a7f02d 0dbe8eef6e14460e73da07f7b11bf994d6626355 f700de80ac270d0344fdea7468201d8b9c805e5c648331c3619f2ee067ccfc59 cb9c3b2055d0b31d106293f0bc3696f90a11a30953e5b05a1a3c453e98a563475c93d7c6d1707e75f59d0806fba5fd8e4486b8bd72e58bb6ae995bdbbeeb7e17 a0fd174b2f8a21b43828371a7ee03c915b79e69d7b0e16cfe6367f794e2f8e6bbebc261e8a4ba35a79779b2338a774a4 803fb227bd6770cc21c701b9529606f95ba05c30ea3d807b18b3681fde0c7cabd0e2f40ab36567832f63e0c42b77d0f2 41b9b86fd0b19ff44d19d108302d7b0111ed86d07a65a90efe1023537fad8748 eaacc9eafccf4bda0c72c5151dbd7e99954842782c91b501af8c7ca462a04b6c59d7ab8e1ef43b3ebc1b12ca62f4574544bc31df10f33f4a15cd3c3399bd808b Apache-2.0 https://www.apache.org/licenses/LICENSE-2.0 pkg:maven/commons-codec/commons-codec@1.17.0?type=jar https://commons.apache.org/proper/commons-codec/https://github.com/apache/commons-parent/actionshttps://repository.apache.org/service/local/staging/deploy/maven2https://issues.apache.org/jira/browse/CODEChttps://mail-archives.apache.org/mod_mbox/commons-user/https://github.com/apache/commons-codec The Apache Software Foundation commons-io commons-io 2.16.1 The Apache Commons IO library contains utility classes, stream implementations, file filters, file comparators, endian transformation classes, and much more. required ed8191a5a217940140001b0acfed18d9 377d592e740dc77124e0901291dbfaa6810a200e f41f7baacd716896447ace9758621f62c1c6b0a91d89acee488da26fc477c84f 97eab31b073c5c57c8bcfaa2fec7b481a15a9a1f9ed864dfdc63b57f062b230557caa734c3133aca1165facb588c58db0185c07832241d70159e87a4bcf48008 bd78e2eb3d005046d1329557d3a77529e98384d4d87940374eef432d73d5a06ef20fb7b0c44389de64496fe134dcf199 f9acc2f04f076328d17e2d0615da4367470b45b15f828008d8df57033401ae6b3b83b21cf9bc1745ff3cfe5a102bc48e 5d4bbe43356c92e3970b69892b44a10cc736ef8cb1bedfc753cc8df050520161 29440ccf2551b383c7e6cbdf78ef7784a421322e418da1be3fcd3251c8a826ffd5c6d1bea32b9c80e74744c035cc9cd8483e629e407110ff3133a05cb34bef93 Apache-2.0 https://www.apache.org/licenses/LICENSE-2.0 pkg:maven/commons-io/commons-io@2.16.1?type=jar https://commons.apache.org/proper/commons-io/https://github.com/apache/commons-parent/actionshttps://repository.apache.org/service/local/staging/deploy/maven2https://issues.apache.org/jira/browse/IOhttps://mail-archives.apache.org/mod_mbox/commons-user/https://gitbox.apache.org/repos/asf?p=commons-io.git The Apache Software Foundation org.apache.commons commons-text 1.10.0 Apache Commons Text is a library focused on algorithms working on strings. required 4afc9bfa2d31dbf7330c98fcc954b892 3363381aef8cef2dbc1023b3e3a9433b08b64e01 770cd903fa7b604d1f7ef7ba17f84108667294b2b478be8ed1af3bffb4ae0018 afd836a1094449e0a791fee67363666c47b6d24acff353a5089b837b332c0f4af89565c354682521e37062d20e6b52d70c77bb4f24cca9b9532c274fc708a831 06c56e6e513dd77cf10d0da46cdea08c34e220e81fa024735b668c6650df4234e564fe865ff5cafea963f56b1e8ffd4a f09065ed066c25debf8c78cbb0bcc738e1ea283302ec992dcfb649acb90091cff879465c65a162e94534d454e3b4e9bb 0b59c567164bb755f2353b78ba66744000a8c4b35e1df05255b080a21c3a3dd5 f0fbce02a862b70f472a27d0722c54ac111ca2eb94584b8b0b73d1926aec26047cd92542ad0b3cf980a6825077587f41b194aa93d6f6350d1b87e59e8df1be7c Apache-2.0 pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar https://commons.apache.org/proper/commons-texthttps://github.com/apache/commons-parent/actionshttps://repository.apache.org/service/local/staging/deploy/maven2https://issues.apache.org/jira/browse/TEXThttps://mail-archives.apache.org/mod_mbox/commons-user/https://gitbox.apache.org/repos/asf?p=commons-text.git The Apache Software Foundation org.apache.commons commons-lang3 3.12.0 Apache Commons Lang, a package of Java utility classes for the classes that are in java.lang's hierarchy, or are considered to be so standard as to justify existence in java.lang. required 19fe50567358922bdad277959ea69545 c6842c86792ff03b9f1d1fe2aab8dc23aa6c6f0e d919d904486c037f8d193412da0c92e22a9fa24230b9d67a57855c5c31c7e94e fbdbc0943cb3498b0148e86a39b773f97c8e6013740f72dbc727faeabea402073e2cc8c4d68198e5fc6b08a13b7700236292e99d4785f2c9989f2e5fac11fd81 c34b8a0e0eba2168ad56fedeb7a1d710b6f1d3f1ce6aae99a4e0247bd120efbbadc8dcb2f731045b8a16e3efd30604dc 8ad6ebe7754bf0caa8cda7e59c0e95360d76e06a7ad6aeec5637985519dbd1dd06e7eed04711039f36ec4c49de280def 18ef639b2aeeb5aedffb18dbf20c79f33e300d99fb31b131689639cc470e6e4c fbea96114dcf4f31cfaaa99987be756ddda3a6c74f8c835461997df794d54b92da1f60fe5c3f1f2a43cb8c5f5db7f4048bef77c70993673c7a93f3660fffc8da Apache-2.0 pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar https://commons.apache.org/proper/commons-lang/https://builds.apache.org/https://repository.apache.org/service/local/staging/deploy/maven2https://issues.apache.org/jira/browse/LANGhttps://mail-archives.apache.org/mod_mbox/commons-user/https://gitbox.apache.org/repos/asf?p=commons-lang.git The Apache Software Foundation org.apache.velocity velocity-engine-core 2.3 Apache Velocity is a general purpose template engine. required e761e6088b946b42289c5d676a515581 e2133b723d0e42be74880d34de6bf6538ea7f915 b086cee8fd8183e240b4afcf54fe38ec33dd8eb0da414636e5bf7aa4d9856629 ec8ccd36d6cefd4325f39d6c215f4177900b7c0fb1e4e96b3c0d9391c033df4d5fb83b7899530f32738afa78c193d4dae700cd5c674954a34e7cf627a4fa1204 5aa3f60e17efb01e2bae1d1169da36a55d7b3ede1d90b1f3e1d3984d2b78fa4bbbba2772ac404e9dae7b37812df11f13 5bc7a76a774653896a0b789726a581de3fbcfa40875945e514f5d8c2e972aeb43ffb2ce5c0da6d4a65b2ef442fc56afc 6ff993b508c05170c3dbd65f6080edf5cdb8b8fd2fa7b94f7d64f20a79d3de9c c44791f0b9e6b3d28717ca56582e2c55bff208aa5bc7bc2cc91003afde0ec0111a55d585c9f09717747ee7e78a688e894b7962fb55a56eaf57413a9c365c567b Apache-2.0 pkg:maven/org.apache.velocity/velocity-engine-core@2.3?type=jar http://velocity.apache.org/engine/devel/velocity-engine-core/https://repository.apache.org/service/local/staging/deploy/maven2https://issues.apache.org/jira/browse/VELOCITYhttps://lists.apache.org/list.html?general@velocity.apache.orghttps://gitbox.apache.org/repos/asf?p=velocity-engine.git/velocity-engine-core FasterXML com.fasterxml.jackson.core jackson-databind 2.14.3 General data-binding functionality for Jackson: works on core streaming API required d9aed5b42f6769cb06d6802250aed19b ba0373b04bf0f03b0cd268cd2e5e8444aaaf9208 ef0694046dc86e8a601e69efef24cda88a85773aaf012f5b9b1167d6f2e7de45 54f4842e09b4166bc0c0851407bdf988a0f88d5f68d58134eb0d393c80e20b337545fffa96c3563b79b71b105d9e55713815749af48cab752633d98c0dbfcf99 624b07a0b597c07a2c82cd6fbbb31d796c69a189931b73b7ce9c35dd0aca6dfca378d08c05e943b10c7f12e06904bb04 4f4a4e2f2c75e03a48d163ece5d9902cdec5959cfb23079b68559fa5ef481bc2582c77c428a2380b87470819d4c4d706 0882e9419fc6aaf3bbab0be8e78cd915336e1f4d3806dcaf9cdc17117e37c9ea a62a293254cc190f1ef40eec99ef95e7342b3c2858673e4f881144084d28393009f19a49137ace8c4f44f551d5e99b163f8d8e73d9d4b951e133d08b106af7b1 Apache-2.0 pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.14.3?type=jar https://github.com/FasterXML/jacksonhttps://oss.sonatype.org/service/local/staging/deploy/maven2/https://github.com/FasterXML/jackson-databind/issueshttps://github.com/FasterXML/jackson-databind FasterXML com.fasterxml.jackson.core jackson-annotations 2.14.3 Core annotations used for value types, used by Jackson data binding package. required f6ee414687751fbadc55998ec49b3ea6 b49701acb02b8e95ae1967821cfbafc220cf5795 ea1b3a9ec60a353f4d7e78559c7140abb9bcf71b31456e9d57c8289f7cf397f1 d265ba6cc1d20721ba7803416005f25d70036cd659bf6071f4d3250d7dab272a2522d7db282e50aeae994907556ef63155d2c0bcc0bd1c96c6460143ff5a8d53 551a607644bcb3f3c06ac9c94861858a0d8f2b62b9120d34f5c2aad94a3a0e75478a94dca7eb290d9814c8dec739905e 79bef0386d15bd152d94ba9e67849eb25c7c4eafd3e8a50c504304dad4653423d78cb8cb54d3853370334519219b5c80 6ed193820d6577652884528ce3d0378516483d51a87652aa7209f3f7ef8326f2 bc5748486a715352e318d809fb3483de615e15422c3264cc52806f4a367035cfbfdaf5258ba460b13e55d25adfc38ee39444f4b7460dfd2cf927817c4c6776ac Apache-2.0 pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.14.3?type=jar https://github.com/FasterXML/jacksonhttps://oss.sonatype.org/service/local/staging/deploy/maven2/https://github.com/FasterXML/jackson-annotations/issueshttps://github.com/FasterXML/jackson-annotations The Apache Software Foundation org.apache.ant ant 1.10.14 master POM required 263e00d844d0e4efa54440ec5ed6362a 1edce9bbfa60dfd51f010879c78f4421dafae7a7 4cbbd9243de4c1042d61d9a15db4c43c90ff93b16d78b39481da1c956c8e9671 9fa6296d1d224e16e6d0ae270e128098d480f8b54dee3deb13d348bf033fa621498dfdafea61d84f0b4710d12c21a42f05be076ddce385754879c8782a333c4e 0f2bae9975d540c9c01872b1f5ff8f8888c2976e1f75e69c7b34175f3bfa9134605c35146f023d7ef9bcb4d6f136ed58 280026cf5236e14efcbc64e5d4524d260495061f1f47b1f9d6345d77c74db71d334572a975506e2310e3bead325974d9 7167898eebe3239ace0f86b116ada1314111741eb69832668827c2e398ccac8a c6f7c44dd307a999216e327efa7c001ce4f2c4ea400bd6f5b6be5b09f09d81f51aef67c9bcaa0aea7cf257fcd8de7198b9a5b151c305a9a04ca0f20b5c16c64c Apache-2.0 pkg:maven/org.apache.ant/ant@1.10.14?type=jar https://ant.apache.org/https://builds.apache.org/job/Ant-Build-from-POMs/https://nowhere.net/https://issues.apache.org/bugzilla/https://mail-archives.apache.org/mod_mbox/ant-devhttps://gitbox.apache.org/repos/asf/ant.git/ant The Apache Software Foundation org.apache.ant ant-launcher 1.10.14 master POM required 0e6c71b2f05383e1fb891e99f5267663 8d2268288496b0541a2640f2ee07fe3de1a02301 f0909725a7a24e393888f3fbb558347abf506ce2f7ebc581ff26331b94d951a5 11253b888efb900b34f12288f78136a2ef28c889afdfc12fd2fd5a38ea18b648cfa90dffe283b2c8266a2166cc43dd40a01050e6616ec391c71864b2204d2d88 ef0efd42803c505ae7fbfbe79302c29b99af8c1d5e7bdb022f93a89b5272a2f154d4beb7724effdeea0d6738cb7711b3 9e21cd11c628201c7b32daac116d8043e207d36cee9e3da668600991e2b6175ee1ef7c74565c659bb69cb8e8860af7ee 9205c89cf3b4ab21fcfe7fe8f31e0186c8228d39c7b06aace982b6a1ed09213e 22a891ba3141fc834a28dd07aba3309dff3bf8fa26ea537bfdda06c681847f2c5fcea72c156f839aeba028ec949624992e0e0a9a2320a2c65faf16834bb8ae44 Apache-2.0 pkg:maven/org.apache.ant/ant-launcher@1.10.14?type=jar https://ant.apache.org/https://builds.apache.org/job/Ant-Build-from-POMs/https://nowhere.net/https://issues.apache.org/bugzilla/https://mail-archives.apache.org/mod_mbox/ant-devhttps://gitbox.apache.org/repos/asf/ant.git/ant-launcher com.sun tools 1.8.0 required e94d2e05137d455a9138e05ae148813a c390ce30069c299e7e197eb3788d5b12e2d6e1df d7282d08133948262f4d0b193ef09698b416904b7f9380186db475277a05c87d 4d5fffbe8892b75b9fd8a14396a5963e41d38ed8bef473dbd2a6a7ae8385499068a8b28b3c1f9c3dd5ecbc9fb79c0acbfbeea1b6172b19dcc74b9533934738ed 657d428e3ee8dd5a1625784ea4ba512bb45410be4f61e23be10d36277f0b1dc1147d8e03cc2f86bc58719a479254850e 9dc572b44d7fc5cd3e028b5cec59f207064ff4fc5462530bda751b84cae4a29dd44a2dcfd839a6fa768e65761763e9fe 00c21e3cf8179a5cdae742f62cef9e8951ce51c346b738819aac0b9ced6ec4b4 39b30a635c8717861754f413fc354e1a1a4603ad894c7de5ca38e80d45c62982e6c73f607d467e35631a064f2f8ad443cb084374b7ba0567396d6c429c291c0f pkg:maven/com.sun/tools@1.8.0?type=jar QOS.ch org.slf4j slf4j-api 1.7.36 The slf4j API required 872da51f5de7f3923da4de871d57fd85 6c62681a2f655b49963a5983b8b0950a6120ae14 d3ef575e3e4979678dc01bf1dcce51021493b4d11fb7f1be8ad982877c16a1c0 f9b033fc019a44f98b16048da7e2b59edd4a6a527ba60e358f65ab88e0afae03a9340f1b3e8a543d49fa542290f499c5594259affa1ff3e6e7bf3b428d4c610b 2b14ad035877087157e379d3277dcdcd79e58d6bdb147c47d29e377d75ce53ad42cafbf22f5fb7827c7e946ff4876b9a 3bc3110dafb8d5be16a39f3b2671a466463cd99eb39610c0e4719a7bf2d928f2ea213c734887c6926a07c4cca7769e4b ba2608179fcf46e2291a90b9cbb4aa30d718e481f59c350cc21c73b88d826881 14c4edcd19702ef607d78826839d8a6d3a39157df54b89a801d3d3cbbe1307131a77671b041c761122730fb1387888c5ec2e46bdd80e1cb07f8f144676441824 MIT https://opensource.org/licenses/MIT pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar http://www.slf4j.orghttps://oss.sonatype.org/service/local/staging/deploy/maven2/https://github.com/qos-ch/slf4j/slf4j-api