{
  "bomFormat" : "CycloneDX",
  "specVersion" : "1.6",
  "serialNumber" : "urn:uuid:26f089ad-50ed-3df9-bf0b-aec634133f52",
  "version" : 1,
  "metadata" : {
    "lifecycles" : [
      {
        "phase" : "build"
      }
    ],
    "tools" : {
      "components" : [
        {
          "type" : "library",
          "author" : "OWASP Foundation",
          "group" : "org.cyclonedx",
          "name" : "cyclonedx-maven-plugin",
          "version" : "2.9.1",
          "description" : "CycloneDX Maven plugin",
          "hashes" : [
            {
              "alg" : "MD5",
              "content" : "9c7a565cf28cce58557d0c621c5ea4b1"
            },
            {
              "alg" : "SHA-1",
              "content" : "be882d5a22050bfa9d19090b1420c188617d0e1c"
            },
            {
              "alg" : "SHA-256",
              "content" : "698e0f37184a5b28c245c4065fd036dfce253b52f82fbb7113d81d36326cc249"
            },
            {
              "alg" : "SHA-512",
              "content" : "c0f0b11026858166f872a2eb54719492e5cecaa0bc9cd6b30b3ecb4a174eed220f4a1b5829d18d6734128e778d3cb3db7ffed177c92866133129cb29081814a0"
            },
            {
              "alg" : "SHA-384",
              "content" : "d80964707dfe5caca8c70521d5066f57589304c0a657e6fbc7c0614ea0fc7b3b3dbe7778361eee0f54ba111e9cb0ffcb"
            },
            {
              "alg" : "SHA3-384",
              "content" : "80bc3a275d9514bc457461ff52a72add8c7ecbbc01d8912efce57139016c544ee776981851be0a58fa977ab4221f703f"
            },
            {
              "alg" : "SHA3-256",
              "content" : "142317d6f245390f4fd2d0c100b16281b8dfc5c0c2cff86943bdcc97039cb699"
            },
            {
              "alg" : "SHA3-512",
              "content" : "af0fb9137c90b65d1a07f72e4d51ae509956cdb8800f35c961b037cdda1fe4a14ce3b496cef71ba85f1621affcfe29cd42704ae4191ff0b090a9602087c8997b"
            }
          ]
        }
      ]
    },
    "component" : {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.avro/avro-compiler@1.12.1?type=bundle",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.avro",
      "name" : "avro-compiler",
      "version" : "1.12.1",
      "description" : "Compilers for Avro IDL and Avro Specific Java API",
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.avro/avro-compiler@1.12.1?type=bundle",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://avro.apache.org"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/AVRO"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/avro-dev/"
        },
        {
          "type" : "vcs",
          "url" : "scm:git:https://github.com/apache/avro/lang/avro-parent/avro-compiler"
        }
      ]
    },
    "properties" : [
      {
        "name" : "maven.goal",
        "value" : "makeBom"
      },
      {
        "name" : "maven.scopes",
        "value" : "compile,provided,runtime,system"
      },
      {
        "name" : "cdx:reproducible",
        "value" : "enabled"
      }
    ]
  },
  "components" : [
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.avro/avro@1.12.1?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.avro",
      "name" : "avro",
      "version" : "1.12.1",
      "description" : "Avro core components",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "83a5127156dbc59c024d8e76302161e7"
        },
        {
          "alg" : "SHA-1",
          "content" : "1c6294ac1d67ce396f51827c87ba2e01de304500"
        },
        {
          "alg" : "SHA-256",
          "content" : "72600f057bfbe2efe35fa55433e7756d45667dc938934be38a6e2be368aca237"
        },
        {
          "alg" : "SHA-512",
          "content" : "1d3ea16d6f374724728660f02fbbb20a42a6f380404cce092d3ab6c143e4e3b8ae9353040ba409af21b06e4a1a1456098020509bed6c12aa9ab6974d52ea8c5f"
        },
        {
          "alg" : "SHA-384",
          "content" : "fbe691d8500a239ba2a4370235f66fd4e53895489181258ecee2a45fa5dc5cfaf191b5973d702f96e17284f96562675c"
        },
        {
          "alg" : "SHA3-384",
          "content" : "2a945cd2245ee74ecba3760b2767abe6b105b4557cc3ab97298dcae75044cd2fa077705b48371ee9ba580c9112ff942c"
        },
        {
          "alg" : "SHA3-256",
          "content" : "1d2f7bbd2ed2e57097bbe760f4c392ea46de7870547170c43b12ddcfa731140b"
        },
        {
          "alg" : "SHA3-512",
          "content" : "c163eca320d4e66751b2e08bc06f1a659059c009e3f98074da2404d4e58994fbaf4ccadb14f3631bf6fdd270c711e4f320a7f83f519f6269afe89b1eb425adc4"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.avro/avro@1.12.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://avro.apache.org"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/AVRO"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/avro-dev/"
        },
        {
          "type" : "vcs",
          "url" : "scm:git:https://github.com/apache/avro/lang/avro-parent/avro"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.20.0?type=jar",
      "publisher" : "FasterXML",
      "group" : "com.fasterxml.jackson.core",
      "name" : "jackson-core",
      "version" : "2.20.0",
      "description" : "Core Jackson processing abstractions (aka Streaming API), implementation for JSON",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "3536b524a7106dae1b4feb71e6f5ff74"
        },
        {
          "alg" : "SHA-1",
          "content" : "3c97f7fad069f7cfae639d790bd93d6a0b2dff31"
        },
        {
          "alg" : "SHA-256",
          "content" : "bc0cf46075877201f8406ee7de2741ae7df6c066f5f0457bd80632a718c06e72"
        },
        {
          "alg" : "SHA-512",
          "content" : "6fde805019901b0e6f6af56c48b60a08ead48e962e167308a3d8ed861470594a80e5c6aec340e7ce8dd12a32d8c0cbb46bc39bc381f027f5977953950e60b083"
        },
        {
          "alg" : "SHA-384",
          "content" : "5f294aa2b3561b2dc5f6bd9958758783294ae31396b8af9cca1495f87d4b8fa470e41b62f6078a407cb6d7f5e8efecee"
        },
        {
          "alg" : "SHA3-384",
          "content" : "ef6efea299577b599d290fd0b48f44e239c0c051b0849b163b2f667641a6ff682bd68745ab3ecad1fb7939de0dd11e4e"
        },
        {
          "alg" : "SHA3-256",
          "content" : "3879cf4a3f6bfcea4181ec464142c7798f979d6cc0a561cd87dea8054f5abb50"
        },
        {
          "alg" : "SHA3-512",
          "content" : "fc84b0702c51b31e4a6eaa0e6eff8914166a51dad8adbb768887ea580106d953e86bfc2fe8c5b99d03e64ef06bf6d33a4ef33e8f045d743b00cb0e05452ec082"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.20.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/FasterXML/jackson-core"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://central.sonatype.com/api/v1/publisher"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/FasterXML/jackson-core/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/FasterXML/jackson-core"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-compress@1.28.0?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-compress",
      "version" : "1.28.0",
      "description" : "Apache Commons Compress defines an API for working with compression and archive formats. These include bzip2, gzip, pack200, LZMA, XZ, Snappy, traditional Unix Compress, DEFLATE, DEFLATE64, LZ4, Brotli, Zstandard and ar, cpio, jar, tar, zip, dump, 7z, arj.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f33efe616d561f8281ef7bf9f2576ad0"
        },
        {
          "alg" : "SHA-1",
          "content" : "e482f2c7a88dac3c497e96aa420b6a769f59c8d7"
        },
        {
          "alg" : "SHA-256",
          "content" : "e1522945218456f3649a39bc4afd70ce4bd466221519dba7d378f2141a4642ca"
        },
        {
          "alg" : "SHA-512",
          "content" : "f1f140f4f40ab3cf3265919db9dbb95a631a29aa784e305f291de4e68876bb711d9217d62d7937cddddd393982decdf71a608b4b3ab7f4e6375cf28af2893d7f"
        },
        {
          "alg" : "SHA-384",
          "content" : "afe6a8fc8e7486c4ecce95276bb1467763d7ff7d941c7bcff8661bbbd4bff442fd0899ff7a11bc540cda86818ee4a8f0"
        },
        {
          "alg" : "SHA3-384",
          "content" : "6afb636ad0805e522913cfd91c8293c485b7f4eff5e45dd3a17a716c3f4b8ab8969e9c00927559a5fb762cba1fdb3d3f"
        },
        {
          "alg" : "SHA3-256",
          "content" : "4420e0b462b5dcc45077e95e012a82a5ae17659e5abe8a685fa086dab6995298"
        },
        {
          "alg" : "SHA3-512",
          "content" : "23e37d13c8ee6c7369e407c29d1f9ee1bb44eca9f09a6f9742f6b4cf3d38dd7a0509fe0142536cd8087b68a76e71d819105af2c23f2aeed08acc58eb93cf7e61"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-compress@1.28.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-compress/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-compress/actions"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/COMPRESS"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-compress.git"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-codec/commons-codec@1.19.0?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-codec",
      "name" : "commons-codec",
      "version" : "1.19.0",
      "description" : "The Apache Commons Codec component contains encoders and decoders for formats such as Base16, Base32, Base64, digest, and Hexadecimal. In addition to these widely used encoders and decoders, the codec package also maintains a collection of phonetic encoding utilities.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "e46fa78c69544eb6239c4e8447e72544"
        },
        {
          "alg" : "SHA-1",
          "content" : "8c0dbe3ae883fceda9b50a6c76e745e548073388"
        },
        {
          "alg" : "SHA-256",
          "content" : "5c3881e4f556855e9c532927ee0c9dfde94cc66760d5805c031a59887070af5f"
        },
        {
          "alg" : "SHA-512",
          "content" : "d98a7a1cfcc08aa9cce4f7778e3f37ecb99da7b1da01944e5fa8faf06fbf9f969f2efb0b416832f419d53085250f711c071f1dac9fa0968483c37034198367fb"
        },
        {
          "alg" : "SHA-384",
          "content" : "f0edec3cd84b2320e6930380d3fe13335d33f041470d27fb93789db0c696ec01dda21b471f0015bf70bffffcbfdb67c0"
        },
        {
          "alg" : "SHA3-384",
          "content" : "ce771ef9f0df326a34ab37e70f710801bb18d545aca0ee492db62770db323ab8a0b5082123ca4826f3d3182748537cfc"
        },
        {
          "alg" : "SHA3-256",
          "content" : "8296db95bb2fac86a0eb68e61e9730084f4272ad6a4a4327a5259c631840e98e"
        },
        {
          "alg" : "SHA3-512",
          "content" : "05da2f8674a257c5d8a1137cadbda71d2635f22237450bf2cbc980380a56905247bea38049c8cd80e60077be2be73b1eae6b466c228e4277763a54979cf856fb"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-codec/commons-codec@1.19.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-codec/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-cli/actions"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/CODEC"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/commons-codec"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-io/commons-io@2.20.0?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-io",
      "name" : "commons-io",
      "version" : "2.20.0",
      "description" : "The Apache Commons IO library contains utility classes, stream implementations, file filters, file comparators, endian transformation classes, and much more.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "94e7e6b9b5fe82388687b584d3571081"
        },
        {
          "alg" : "SHA-1",
          "content" : "36f3474daec2849c149e877614e7f979b2082cd2"
        },
        {
          "alg" : "SHA-256",
          "content" : "df90bba0fe3cb586b7f164e78fe8f8f4da3f2dd5c27fa645f888100ccc25dd72"
        },
        {
          "alg" : "SHA-512",
          "content" : "fea08e150473673b0608eaee3ae1cb4e73834039db80d3b758710d6baf3a5840a0878a4eb64739ae9bb21ccc7148c8520fe873616a3f6d5cdb4305deabdd015c"
        },
        {
          "alg" : "SHA-384",
          "content" : "22db5e18e3512ed44474e75a124a052d5a1a6f35ce458f6a201a5ccc9510c57c10c117dba80ac6ce91745cf2b51e63f2"
        },
        {
          "alg" : "SHA3-384",
          "content" : "a70700d24df3c276ff387c359e0e940b834e413b72a49917de9a82615836eca8cca1bee1ed71790606c795da795e9151"
        },
        {
          "alg" : "SHA3-256",
          "content" : "a8d044d3a4a069d0f20d24112b6427a3a6f02a925b31b932721d1f545ff32cec"
        },
        {
          "alg" : "SHA3-512",
          "content" : "3417bf811d7e5fc1e71b8540f3379751434ea8540c421ff2c8bb5f5ce34401cd0ad8a829b65aa55e055c57141181762c4827099352c2bba453e48ad2df67526a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-io/commons-io@2.20.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-io/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-io/actions"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/IO"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-io.git"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-text@1.14.0?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-text",
      "version" : "1.14.0",
      "description" : "Apache Commons Text is a set of utility functions and reusable components for processing and manipulating text in a Java environment.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "54960a12a82d52df3d5548d6934d87b2"
        },
        {
          "alg" : "SHA-1",
          "content" : "adcb0d4c67eabc79682604b47eb852aaff21138a"
        },
        {
          "alg" : "SHA-256",
          "content" : "121fce2282910c8f0c3ba793a5436b31beb710423cbe2d574a3fb7a73c508e92"
        },
        {
          "alg" : "SHA-512",
          "content" : "4975879372241025bd0a47fe540ed7d0cd3e5eba474b12af67a8c6016be0fbb4f4a3a4a0064f4d2b6aebce67d88ee814da345a5ba3a6ee4f6293b3b4e7bbd065"
        },
        {
          "alg" : "SHA-384",
          "content" : "a038f1a8b58bb7ec17ba55238d3e40f5d9386dfb17870630a728b22741a9592819374e9abbbc6402a439eea4db5b739a"
        },
        {
          "alg" : "SHA3-384",
          "content" : "5325922bb72aa73d2d51cb3fb5592fc77097614fd3ab3ac77e3acdc0fe1dc8c18893cdd9a05768bb725fa40dd8c14527"
        },
        {
          "alg" : "SHA3-256",
          "content" : "31008266592ec8503bcc7f6b4e7125b0e377f57f3a697cdcb02ee7f20f84ddf1"
        },
        {
          "alg" : "SHA3-512",
          "content" : "385249425d8c6ab181039195a03c6337f393a1e1419527e9f072d695367bc0bd6546e752d1912df557bd8788329f7609aa1c63ce42eb135e2d27b6141ce9280f"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-text@1.14.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-text"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-text/actions"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/TEXT"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-text.git"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-lang3",
      "version" : "3.18.0",
      "description" : "Apache Commons Lang, a package of Java utility classes for the classes that are in java.lang's hierarchy, or are considered to be so standard as to justify existence in java.lang. The code is tested using the latest revision of the JDK for supported LTS releases: 8, 11, 17 and 21 currently. See https://github.com/apache/commons-lang/blob/master/.github/workflows/maven.yml Please ensure your build environment is up-to-date and kindly report any build issues.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "48b9886957920a4cdb602780ca345087"
        },
        {
          "alg" : "SHA-1",
          "content" : "fb14946f0e39748a6571de0635acbe44e7885491"
        },
        {
          "alg" : "SHA-256",
          "content" : "4eeeae8d20c078abb64b015ec158add383ac581571cddc45c68f0c9ae0230720"
        },
        {
          "alg" : "SHA-512",
          "content" : "c2c9d497fc1be411050f4011b2407764b78aa098eb42925af8a197eabdbc25b507f09fb898805e9bed4815f35236a508ee5b096e36f363df4d407232d50fc832"
        },
        {
          "alg" : "SHA-384",
          "content" : "4fb3f101106e4ce3666d5c15d276ba86f7683a0ef35f0384edfcd579ea454275edbb7400795d265ec3a38e39997e79b8"
        },
        {
          "alg" : "SHA3-384",
          "content" : "aada7e3612cf3f6190a19fa7c3db74df1e13ec56b300be9bb4317d261d5877c84ab59ba9a09168becdbd82cd41961395"
        },
        {
          "alg" : "SHA3-256",
          "content" : "306d286d0bd7549c203cc802fd755d354c4f7926fa023f4e83623ba1a6261250"
        },
        {
          "alg" : "SHA3-512",
          "content" : "f6f1ecc684e309d7b9fc5c343792508fee935cd2119d962721662c5af88e4864ba6f47a863e083714f315f926c156de1970cd2fb577449bdfdc7bf98a4a451fa"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-lang/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-lang/actions"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/LANG"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf/commons-lang.git"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.velocity/velocity-engine-core@2.4.1?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.velocity",
      "name" : "velocity-engine-core",
      "version" : "2.4.1",
      "description" : "Apache Velocity is a general purpose template engine.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "41a3757dc9d701590be703d1f2bd2462"
        },
        {
          "alg" : "SHA-1",
          "content" : "0b662837e8006d5c383bd128503ea86ef5b4d361"
        },
        {
          "alg" : "SHA-256",
          "content" : "1c19157d1171d560088e485be97c93a7a2f7e9f56e517f0a30273c5c39df6231"
        },
        {
          "alg" : "SHA-512",
          "content" : "77150ed775e644be44d9f1ead19a880c8a02cba18dae97aec4ea8f14db04ee795bce35bd2e5314f2e95d40c01441da954327348f91addc9bb8d0cc9f7c00f561"
        },
        {
          "alg" : "SHA-384",
          "content" : "87cb5f02de5e137db4426938d783233d274b41786de2f27719e8469e188822911acce66992ae074b22a9ff47c0997c38"
        },
        {
          "alg" : "SHA3-384",
          "content" : "a6671daa3dc0091fbca6fdcb7d8799adee1c1c5c68de7da0a0f07870bb22ed94fe9a705223bf23e90b7f7f5a4d12a5c4"
        },
        {
          "alg" : "SHA3-256",
          "content" : "71c8123c1c4bb5fb839e70d229545139b2da58fa3e3d9b09355d355b6f56c595"
        },
        {
          "alg" : "SHA3-512",
          "content" : "381c65e4a7026fc680fd37ffe53616f93b4dba2dc9cbd98f76c56e3e5a4ea2dbd5fa82e6b10da7df1dd3b1b4017d7a583a2777cef421f04412893b27e6202a22"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.velocity/velocity-engine-core@2.4.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://velocity.apache.org/engine/devel/velocity-engine-core/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/VELOCITY"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?general@velocity.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=velocity-engine.git/velocity-engine-core"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.20.0?type=jar",
      "publisher" : "FasterXML",
      "group" : "com.fasterxml.jackson.core",
      "name" : "jackson-databind",
      "version" : "2.20.0",
      "description" : "General data-binding functionality for Jackson: works on core streaming API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "7e33b9e657f74f0f95fe2c881e2f8f76"
        },
        {
          "alg" : "SHA-1",
          "content" : "f0a5e62fbd21285e9a5498a60dccb097e1ef793b"
        },
        {
          "alg" : "SHA-256",
          "content" : "a70e146a6bf2cba4f9cd367169787f50adcfbb57122bc2e9c8390cd0b397ac30"
        },
        {
          "alg" : "SHA-512",
          "content" : "a26054199811282897116632dc5175a05c1cdc30ab15cfc13325cb6074568de7b8fec08cb28f28835d31c522296b2460ce144972a2c952cfb8fc7467e1fa4a44"
        },
        {
          "alg" : "SHA-384",
          "content" : "e2ed967535db39c3da8a9842da1a1276522a171aaddf6d0f1861e642037e2951cacb1266535d1b08a3d451b19ec297d6"
        },
        {
          "alg" : "SHA3-384",
          "content" : "42d74c09c4bdc3d68429ae72b5a2c5131f1515e3360f7a73446611fcd3b6e4002fedf70bc8da119c4d0138168ea0f521"
        },
        {
          "alg" : "SHA3-256",
          "content" : "e5eff40214ecb55b9883b337ff84e69fbe69d318a87f120eb3fc79b82d55f9f7"
        },
        {
          "alg" : "SHA3-512",
          "content" : "eb39a4f74c29f43ce442df9d5ed3bdd56013cc9adb33839dc9f36b8d58a8f581d53b3949527fdbdf2bc6851374d01a4c325ce572f1933a6b001aef17e21071ec"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.20.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/FasterXML/jackson"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://central.sonatype.com/api/v1/publisher"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/FasterXML/jackson-databind/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/FasterXML/jackson-databind"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.20?type=jar",
      "publisher" : "FasterXML",
      "group" : "com.fasterxml.jackson.core",
      "name" : "jackson-annotations",
      "version" : "2.20",
      "description" : "Core annotations used for value types, used by Jackson data binding package.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "b901def3c20752817f27130e4b8d6640"
        },
        {
          "alg" : "SHA-1",
          "content" : "6a5e7291ea3f2b590a7ce400adb7b3aea4d7e12c"
        },
        {
          "alg" : "SHA-256",
          "content" : "959a2ffb2d591436f51f183c6a521fc89347912f711bf0cae008cdf045d95319"
        },
        {
          "alg" : "SHA-512",
          "content" : "8926d89bfe7f427c7793f6af619249540f23f82eae055dd03d4cb163ff603a43dd6a3ebe43528d00789aed3df0dd2f10e08552fdec53e2691849b9769f57f0c9"
        },
        {
          "alg" : "SHA-384",
          "content" : "40ee4c1438a5a190624dff9deca83377f7e60690b4535359b2a79924f736bff7c8d077e5b01c6c8972735dc152f2ccf4"
        },
        {
          "alg" : "SHA3-384",
          "content" : "0fc0f697d03692b63c2b11fcabac51c630278ed6df15420975263ea4ad19418b3b71b7889497ed20a150035f9bcba79d"
        },
        {
          "alg" : "SHA3-256",
          "content" : "6bf49e384735969af020f758b255ceed26af92d4cf456f6e7b83e8de53289f93"
        },
        {
          "alg" : "SHA3-512",
          "content" : "3372f6c456a7f6a33ebc3ecc65daaf36288be2a14b1f2cb9fcd7387c07acab1c69ae803a366e5d12adf4934970ffd2e34017917c5f16a6d563bc94810f228ab3"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.20?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/FasterXML/jackson"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://central.sonatype.com/api/v1/publisher"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/FasterXML/jackson-annotations/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/FasterXML/jackson-annotations"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.ant/ant@1.10.15?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.ant",
      "name" : "ant",
      "version" : "1.10.15",
      "description" : "master POM",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "688b6e5ca5900863c26af4fe4ee7e924"
        },
        {
          "alg" : "SHA-1",
          "content" : "da854f5503ee061a5a3b2cfcbe98ee27aa4a5ef9"
        },
        {
          "alg" : "SHA-256",
          "content" : "763acda4a69588c9ea8817a952851ff0c2fc4bffa1d081c2565dc407f29d5794"
        },
        {
          "alg" : "SHA-512",
          "content" : "d5109838090a4463098c4a82c171d07b92d42633010e045388fb8a68744fdcdd2b07a75a9fb56783e83ecbcc80664119ccc44537993125d6724956e114508316"
        },
        {
          "alg" : "SHA-384",
          "content" : "346e03bb241031fbb3941463cdbbe5a8bca2ca72e34a8ae01959891f963ca5c789cd9f5b4b743539b1fececebeb0d25a"
        },
        {
          "alg" : "SHA3-384",
          "content" : "9cdc37dce024e2ca15b5a6e47725964bfa6b20c1772969017a093d29e144135a75842a0716bf597acd12b4fbd5882e57"
        },
        {
          "alg" : "SHA3-256",
          "content" : "c3f3875aa7a96132ca860e8a297b33e7fe36b0c9ccbcc31ae931936f8687a3eb"
        },
        {
          "alg" : "SHA3-512",
          "content" : "beacff02db1fd51c1758511998e873d2c54e27d811fb51812bdc1f28b470f989a7adf762110900d0388864d10cc98cbc3c9e5fc9a6224b1137d55d00351c0c8e"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.ant/ant@1.10.15?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://ant.apache.org/"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/job/Ant-Build-from-POMs/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://nowhere.net/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/bugzilla/"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/ant-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf/ant.git/ant"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.ant/ant-launcher@1.10.15?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.ant",
      "name" : "ant-launcher",
      "version" : "1.10.15",
      "description" : "master POM",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "32e60fe28d324dc9cd7ffbc29f8f3730"
        },
        {
          "alg" : "SHA-1",
          "content" : "81431ce614ae38b187de683381f4a35a1db3b1c6"
        },
        {
          "alg" : "SHA-256",
          "content" : "5c8551990307a032336d98ddaed549a39a689f07d4d4c6b950601bf22b3d6a1b"
        },
        {
          "alg" : "SHA-512",
          "content" : "6fc2b33cde07493704c201b759e6813ba5f60ffd3925a52bb097a7fffedbc950bcc4fbc93fe0a86ec2a41872b16b92868b6be87632d3e8e0dc89a5b4143ccb9e"
        },
        {
          "alg" : "SHA-384",
          "content" : "d03acc5fc0bf3049a7a21bb27ebf6c457ce6907b73f2eeb7278b8a98fb41b87fb9f59e516572a73417ef15e58bdb4640"
        },
        {
          "alg" : "SHA3-384",
          "content" : "debecd815ae9b5b8ec22f401088c7178bda2fe835e4cf26147bdc90d0275b9b111907966140b3684e49c9ca3a576345a"
        },
        {
          "alg" : "SHA3-256",
          "content" : "1f7d41e186067ecb6160b8f72794c7befed5651b5d1cc673e05b136746fdd602"
        },
        {
          "alg" : "SHA3-512",
          "content" : "13fb946ae1f02b82c2cfb364e4ea27ad21ac3bb41c178865bc1aca6ee2ccbbbed7450811eab52fe647b6593e4b9b40264250ef79d2de19218c1fe90f6bbb9196"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.ant/ant-launcher@1.10.15?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://ant.apache.org/"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/job/Ant-Build-from-POMs/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://nowhere.net/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/bugzilla/"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/ant-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf/ant.git/ant-launcher"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar",
      "publisher" : "QOS.ch",
      "group" : "org.slf4j",
      "name" : "slf4j-api",
      "version" : "2.0.17",
      "description" : "The slf4j API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "b6480d114a23683498ac3f746f959d2f"
        },
        {
          "alg" : "SHA-1",
          "content" : "d9e58ac9c7779ba3bf8142aff6c830617a7fe60f"
        },
        {
          "alg" : "SHA-256",
          "content" : "7b751d952061954d5abfed7181c1f645d336091b679891591d63329c622eb832"
        },
        {
          "alg" : "SHA-512",
          "content" : "9a3e79db6666a6096a3021bb2e1d918f30f589d8de51d6b600f8ebd92515a510ae2d8f87919cc2dfa8365d64f10194cac8dfa0fb950160eef0e9da06f6caaeb9"
        },
        {
          "alg" : "SHA-384",
          "content" : "6ea24f814a9b6ece428cfd0535e2f3b8927005745ef61006b50fdb5a90126ee5ea05650155382b3b755c5bce38ef3944"
        },
        {
          "alg" : "SHA3-384",
          "content" : "9b1015052f0ec43f9be09764e131834157599611cb52f6fe591c4ac6a8ab4817518f2a4b8871e5e738c8678e93af5557"
        },
        {
          "alg" : "SHA3-256",
          "content" : "00559b4f4066b4917ba4fe2a6f23111eaeada321112d030910d218ced9084b5e"
        },
        {
          "alg" : "SHA3-512",
          "content" : "9579c2f7e7516e177c2d493ccc9eb8150978cf19f6f09b28d116f6935239fd56dc6af2b62b3336f79b0b462445550cd1fb5377a07001a6f44aaab6a32fa2fa47"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/license/mit/"
          }
        }
      ],
      "purl" : "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.slf4j.org"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/qos-ch/slf4j/slf4j-parent/slf4j-api"
        }
      ]
    }
  ],
  "dependencies" : [
    {
      "ref" : "pkg:maven/org.apache.avro/avro-compiler@1.12.1?type=bundle",
      "dependsOn" : [
        "pkg:maven/org.apache.avro/avro@1.12.1?type=jar",
        "pkg:maven/org.apache.commons/commons-text@1.14.0?type=jar",
        "pkg:maven/org.apache.velocity/velocity-engine-core@2.4.1?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.20.0?type=jar",
        "pkg:maven/org.apache.ant/ant@1.10.15?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.avro/avro@1.12.1?type=jar",
      "dependsOn" : [
        "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.20.0?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.20.0?type=jar",
        "pkg:maven/org.apache.commons/commons-compress@1.28.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.20.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.20.0?type=jar",
      "dependsOn" : [
        "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.20?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.20.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.20?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-compress@1.28.0?type=jar",
      "dependsOn" : [
        "pkg:maven/commons-codec/commons-codec@1.19.0?type=jar",
        "pkg:maven/commons-io/commons-io@2.20.0?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/commons-codec/commons-codec@1.19.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/commons-io/commons-io@2.20.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-text@1.14.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.velocity/velocity-engine-core@2.4.1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.ant/ant@1.10.15?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.ant/ant-launcher@1.10.15?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.ant/ant-launcher@1.10.15?type=jar",
      "dependsOn" : [ ]
    }
  ]
}