OWASP Foundation CycloneDX Maven plugin 2.7.9 8e595cdb67f17e4b41e046456970591d 69e8ca804520d09ce4657e7235bae84d01cbffa6 aa09074fe5aa403c008cd4fc7ef8ce41cd244489337f16b3e91a3914158a4db8 1488a8112da8e675813d7585f57c5efb178aed32901118186ee12d0e4ae3d19c53774c7f860bf70d17d70f050119b69443a2637cf641675b4b5d9cdcdd69b89b b097295dfbf10887abc6eec58d4d0822cde5a73d1f5c1cf183a57bf569016ad5ced9d34efae3e574d82bb62837540c6c The Apache Software Foundation org.apache.avro avro-ipc 1.11.2 Avro inter-process communication components Apache-2.0 https://www.apache.org/licenses/LICENSE-2.0 pkg:maven/org.apache.avro/avro-ipc@1.11.2?type=bundle https://avro.apache.orghttps://repository.apache.org/service/local/staging/deploy/maven2https://issues.apache.org/jira/browse/AVROhttps://mail-archives.apache.org/mod_mbox/avro-dev/scm:git:https://github.com/apache/avro/lang/avro-parent/avro-ipc makeBom compile,provided,runtime,system enabled The Apache Software Foundation org.apache.avro avro 1.11.2 Avro core components required 31ec52433bce066f1b5698142e138e5d 97e62e8be2b37e849f1bdb5a4f08121d47cc9806 31fa41e47437b2a4168fd57a24a19c687b7347b4ed01388f4779362085b2f92a e313df5bb18791807899591c040e862803b122d8479b43f7c81cfa6e29ffb4a77a6e41a06cac1cafe1f30a7e36fc53e07934252fa99be17cac68a857173117ae 255fb78980edd0b0630a3f57126cd29d78d050db952b7715c863bf33715029eec29a03a5b3e9b4c80ab44f89c03629bb Apache-2.0 https://www.apache.org/licenses/LICENSE-2.0 pkg:maven/org.apache.avro/avro@1.11.2?type=jar https://avro.apache.orghttps://repository.apache.org/service/local/staging/deploy/maven2https://issues.apache.org/jira/browse/AVROhttps://mail-archives.apache.org/mod_mbox/avro-dev/scm:git:https://github.com/apache/avro/lang/avro-parent/avro The Apache Software Foundation org.apache.commons commons-compress 1.22 Apache Commons Compress software defines an API for working with compression and archive formats. These include: bzip2, gzip, pack200, lzma, xz, Snappy, traditional Unix Compress, DEFLATE, DEFLATE64, LZ4, Brotli, Zstandard and ar, cpio, jar, tar, zip, dump, 7z, arj. required f1e4db16fee4291212d91409313a8086 691a8b4e6cf4248c3bc72c8b719337d5cb7359fa 53d04a0efc7223baecaa303bd5d298eb0600e6b82b4076f9cecd558b97ba760b 2d64fa6cd081fff5d73ee662a82f6186991fc13b4bdaee18b5f1bdcab06d9acb70e3713d18b296337791448251fbd6768bd84afaa817a10547652d0cfa885563 295d7f69d151abbd784e1c4d021c77ce43e129bb5bda0c55762b32d77c8607863383297674ec8a212ea3dfe4007b0044 Apache-2.0 pkg:maven/org.apache.commons/commons-compress@1.22?type=jar https://commons.apache.org/proper/commons-compress/https://github.com/apache/commons-parent/actionshttps://repository.apache.org/service/local/staging/deploy/maven2https://issues.apache.org/jira/browse/COMPRESShttps://mail-archives.apache.org/mod_mbox/commons-user/https://gitbox.apache.org/repos/asf?p=commons-compress.git FasterXML com.fasterxml.jackson.core jackson-core 2.14.2 Core Jackson processing abstractions (aka Streaming API), implementation for JSON required 6ee422ee4c481b2d5aacb2b5e36a7dc0 f804090e6399ce0cf78242db086017512dd71fcc b5d37a77c88277b97e3593c8740925216c06df8e4172bbde058528df04ad3e7a 208953cf72691b3bab1ca2f9a045cccd3d75c46c90099ba884fbf16bc3e45045e5cd014d2c68c96e8a8826f87a5f0e18cb34b35e7ef03348953869c21e197367 e806595862c5fcdae801d9845befc1d12c97e6036ee839d34590dbd785a422d5832cf4fc5c7ee6e1a5ee7a59f37740f0 Apache-2.0 pkg:maven/com.fasterxml.jackson.core/jackson-core@2.14.2?type=jar https://github.com/FasterXML/jackson-corehttps://oss.sonatype.org/service/local/staging/deploy/maven2/https://github.com/FasterXML/jackson-core/issueshttps://github.com/FasterXML/jackson-core FasterXML com.fasterxml.jackson.core jackson-databind 2.14.2 General data-binding functionality for Jackson: works on core streaming API required c1b12dd14734cd1986132bf55042dd7e 01e71fddbc80bb86f71a6345ac1e8ab8a00e7134 501d3abce4d18dcc381058ec593c5b94477906bba6efbac14dae40a642f77424 85473a29d23292f49092af9e7a7a63993206847c53b3e71f3c67245d68f7b19cc7c341e0ece409eb5e96602df98a848e957d8691fdd2c5fcddd807df9078255e 5c54d6c497cb329c3424a30319bf657ea222349eadc5ae74c30e8dc1525d7b60b7785f4d20370267b03343dd738cc13e Apache-2.0 pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.14.2?type=jar https://github.com/FasterXML/jacksonhttps://oss.sonatype.org/service/local/staging/deploy/maven2/https://github.com/FasterXML/jackson-databind/issueshttps://github.com/FasterXML/jackson-databind FasterXML com.fasterxml.jackson.core jackson-annotations 2.14.2 Core annotations used for value types, used by Jackson data binding package. required 10d19982a8890f6eb37557af2f58e272 a7aae9525864930723e3453ab799521fdfd9d873 2c6869d505cf60dc066734b7d50339f975bd3adc635e26a78abb71acb4473c0d a978384791bdc074df8039ffc95bb93f0f60d14d476861ee2a0ce208b33a991c486a07345cb80559252c3ff1dea14d3efb818c19bdc18435946dc8754d8e6ee3 d5111c69020666689414921ae4a8950f9fbdf86dec1360f6827beeee9ebd3f78db74e69c76e0becaba47eb34fdaaeb5a Apache-2.0 pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.14.2?type=jar https://github.com/FasterXML/jacksonhttps://oss.sonatype.org/service/local/staging/deploy/maven2/https://github.com/FasterXML/jackson-annotations/issueshttps://github.com/FasterXML/jackson-annotations The Apache Software Foundation org.apache.velocity velocity-engine-core 2.3 Apache Velocity is a general purpose template engine. required e761e6088b946b42289c5d676a515581 e2133b723d0e42be74880d34de6bf6538ea7f915 b086cee8fd8183e240b4afcf54fe38ec33dd8eb0da414636e5bf7aa4d9856629 ec8ccd36d6cefd4325f39d6c215f4177900b7c0fb1e4e96b3c0d9391c033df4d5fb83b7899530f32738afa78c193d4dae700cd5c674954a34e7cf627a4fa1204 5aa3f60e17efb01e2bae1d1169da36a55d7b3ede1d90b1f3e1d3984d2b78fa4bbbba2772ac404e9dae7b37812df11f13 Apache-2.0 pkg:maven/org.apache.velocity/velocity-engine-core@2.3?type=jar http://velocity.apache.org/engine/devel/velocity-engine-core/https://repository.apache.org/service/local/staging/deploy/maven2https://issues.apache.org/jira/browse/VELOCITYhttps://lists.apache.org/list.html?general@velocity.apache.orghttps://gitbox.apache.org/repos/asf?p=velocity-engine.git/velocity-engine-core The Apache Software Foundation org.apache.commons commons-lang3 3.11 Apache Commons Lang, a package of Java utility classes for the classes that are in java.lang's hierarchy, or are considered to be so standard as to justify existence in java.lang. required c592f49f703f9b3ab25556559b1ff379 68e9a6adf7cf8eb7e9d31bbc554c7c75eeaac568 4ee380259c068d1dbe9e84ab52186f2acd65de067ec09beff731fca1697fdb16 c1f6b5cb9ac47cfb612423a71b347568f3697cf88018b5808678be5234c50b22888db23cb833b7d8d458d39707ab9e4d839107d1d3306de2e4e422010c95180f 80e7831b2b08150b5d05d53b29f1904b298e9194fd02c61989755da04fa2f20e44f6a0f29d13bfde33ce1dbefc7afc52 Apache-2.0 pkg:maven/org.apache.commons/commons-lang3@3.11?type=jar https://commons.apache.org/proper/commons-lang/https://builds.apache.org/https://repository.apache.org/service/local/staging/deploy/maven2https://issues.apache.org/jira/browse/LANGhttps://mail-archives.apache.org/mod_mbox/commons-user/https://gitbox.apache.org/repos/asf?p=commons-lang.git GlassFish Community javax.servlet javax.servlet-api 4.0.1 Java.net - The Source for Java Technology Collaboration required b80414033bf3397de334b95e892a2f44 a27082684a2ff0bf397666c3943496c44541d1ca 83a03dd877d3674576f0da7b90755c8524af099ccf0607fc61aa971535ad7c60 763dec9801f647b1a45e492eb2a67f6a60fc608bef4738eb7b1a92d93f1f6db02b32f4c6553d4557c320dfc25c0ea0b9854c59e793262b6ca453c71caf05ef38 9f4522458bdb1c7cbc0e88271d1e4326193c8e4d422ef8b75c3dcadf0bf86a91389890ab2d25a8cc6cf276f625475cd3 (CDDL-1.0 OR GPL-2.0-with-classpath-exception) pkg:maven/javax.servlet/javax.servlet-api@4.0.1?type=jar https://javaee.github.io/servlet-spec/https://maven.java.net/service/local/staging/deploy/maven2/https://github.com/javaee/servlet-spec/issuesservlet-spec@javaee.groups.iohttps://github.com/javaee/servlet-spec GlassFish Community javax.annotation javax.annotation-api 1.3.2 Common Annotations for the JavaTM Platform API required 2ab1973eefffaa2aeec47d50b9e40b9d 934c04d3cfef185a8008e7bf34331b79730a9d43 e04ba5195bcd555dc95650f7cc614d151e4bcd52d29a10b8aa2197f3ab89ab9b 679cf44c3b9d635b43ed122a555d570292c3f0937c33871c40438a1a53e2058c80578694ec9466eac9e280e19bfb7a95b261594cc4c1161c85dc97df6235e553 fc0058495e54efb6e05a34e3ff422e7c8347bcc77d6d9b87e9253424968dee6ef6a215c318d7e54f8705276be81f0682 (CDDL-1.0 OR GPL-2.0-with-classpath-exception) pkg:maven/javax.annotation/javax.annotation-api@1.3.2?type=jar http://jcp.org/en/jsr/detail?id=250https://maven.java.net/service/local/staging/deploy/maven2/https://github.com/javaee/javax.annotation/issuesjavaee-spec@javaee.groups.iohttps://github.com/javaee/javax.annotation xerial.org org.xerial.snappy snappy-java 1.1.10.1 snappy-java: A fast compression/decompression library required 8c279ac12dc8872fed3ecafce26a2299 4a1e1a22cba39145dfa20f2fef4e1ca38c8e02a1 5a6224cb7f946f5a7db9c77e86af6ccd43ba5ae38b1a15bea23113cc83f8fabd e3da2a7f423eaa442960422e95567ca4f06bf8c0be1a6f52c52d715eab76b539bbf244854fb918866fa08c6fac18147f5d30abf79ab210a7a0ed14d23d9c81ae 9b7b366fa9dbeacba10db4761b77bb4f6b4ca7503f3f51357b26532ffd0981d6dd955e738468a07b530dcec715ef3a2d Apache-2.0 https://www.apache.org/licenses/LICENSE-2.0 pkg:maven/org.xerial.snappy/snappy-java@1.1.10.1?type=jar https://github.com/xerial/snappy-javahttps://github.com/xerial/snappy-java org.tukaani xz 1.9 XZ data compression required 57c2fbfeb55e307ccae52e5322082e02 1ea4bec1a921180164852c65006d928617bd2caf 211b306cfc44f8f96df3a0a3ddaf75ba8c5289eed77d60d72f889bb855f535e5 a4362db234d4e83683e90f5baf90c82107450cc4404acab96e3fab14b8a3d4588a19722171d32f27d18463682a6994cad9af0b1065c954e3a77ea7bdcf586bac aa30349b094723369908369a18e2cb5beb5b7ca0b24b4d56c2f5725fae152220f6526466672b22bfec939e2e0622a01d Public Domain pkg:maven/org.tukaani/xz@1.9?type=jar https://tukaani.org/xz/java.htmlhttps://git.tukaani.org/?p=xz-java.git com.github.luben com.github.luben zstd-jni 1.5.5-4 JNI bindings for Zstd native library that provides fast and high compression lossless algorithm for Java and all JVM languages. required fddac848b1d75ccd361f1183f19ee1e0 d724d95eb8423d185e2efb8ba15f7f3fdf200cfb e234c9ccbe9e36e19cc36c633d15f4a461f1bdc985d66662a2abbaa89859e522 d99732d7649e3b91b31c617a6811a0a9f1bf1cb6c89fcb275e5f27de9a50d34e939b50b2987c90147bdc52ffc82b794ccc62cca5523e9439a33e259e824b3f2a 33ab16fe8848f0ad7a708c5cf3572d3f05d6c9fbf996a0121f86d0516978ea52a0941331caefdbbe164990f31978a449 BSD-2-Clause pkg:maven/com.github.luben/zstd-jni@1.5.5-4?type=jar https://github.com/luben/zstd-jni QOS.ch org.slf4j slf4j-api 1.7.36 The slf4j API required 872da51f5de7f3923da4de871d57fd85 6c62681a2f655b49963a5983b8b0950a6120ae14 d3ef575e3e4979678dc01bf1dcce51021493b4d11fb7f1be8ad982877c16a1c0 f9b033fc019a44f98b16048da7e2b59edd4a6a527ba60e358f65ab88e0afae03a9340f1b3e8a543d49fa542290f499c5594259affa1ff3e6e7bf3b428d4c610b 2b14ad035877087157e379d3277dcdcd79e58d6bdb147c47d29e377d75ce53ad42cafbf22f5fb7827c7e946ff4876b9a MIT https://opensource.org/licenses/MIT pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar http://www.slf4j.orghttps://oss.sonatype.org/service/local/staging/deploy/maven2/https://github.com/qos-ch/slf4j/slf4j-api