{
  "bomFormat" : "CycloneDX",
  "specVersion" : "1.4",
  "serialNumber" : "urn:uuid:60863b34-67ea-40cb-a983-a891eab0dc78",
  "version" : 1,
  "metadata" : {
    "timestamp" : "2023-03-17T17:51:13Z",
    "tools" : [
      {
        "vendor" : "OWASP Foundation",
        "name" : "CycloneDX Maven plugin makeBom",
        "version" : "2.7.5",
        "hashes" : [
          {
            "alg" : "MD5",
            "content" : "11cd12fd5f8b60a961c385ef2be00f52"
          },
          {
            "alg" : "SHA-1",
            "content" : "3576a6392958d12709ba803922ca8ee0c7a233ed"
          },
          {
            "alg" : "SHA-256",
            "content" : "802bf55759d1a44b12e01879614bae19c096302d881d1b52bf36e6051b9dc1ef"
          },
          {
            "alg" : "SHA-512",
            "content" : "779fc38723c9b02448a7cd16c432cb6504771ea5969eedb5ce72bcb96b58d0f52c3ee534f38f88e26967e2a18c93b307bbc98a65ad346df0859af89f7d963c2c"
          },
          {
            "alg" : "SHA-384",
            "content" : "4caddd8effbaa3379638798216c03a881e1eef799c0f179fde19dbfb038a2a12c261bfd28b18594052787f5460429584"
          },
          {
            "alg" : "SHA3-384",
            "content" : "490cc3412260a126b0cea502da5338e47b6e354338c128c588d7d0ab776e0ed15398d6f1042c8a5f3a98a152323a0c18"
          },
          {
            "alg" : "SHA3-256",
            "content" : "538aa1dfe3e87abb3b4608b2d53508eb13f9a3d2b735f6fd7287bb285c938d78"
          },
          {
            "alg" : "SHA3-512",
            "content" : "5a18cc565eb102ce88049b104fa283b1510866ac945286c9e5de1f7f8a098246c881289eda147c1a130c231b8092099faa7caa149d4651f68c215f40eab3425b"
          }
        ]
      }
    ],
    "component" : {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-jexl3",
      "version" : "3.3",
      "description" : "JEXL is a library intended to facilitate the implementation of scripting features in applications and frameworks written in Java.",
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-jexl3@3.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-jexl/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-parent/actions"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/JEXL"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf/commons-jexl.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-jexl3@3.3?type=jar"
    }
  },
  "components" : [
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-logging",
      "name" : "commons-logging",
      "version" : "1.2",
      "description" : "Apache Commons Logging is a thin adapter allowing configurable bridging to other, well known logging systems.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "040b4b4d8eac886f6b4a2a3bd2f31b00"
        },
        {
          "alg" : "SHA-1",
          "content" : "4bfc12adfe4842bf07b657f0369c4cb522955686"
        },
        {
          "alg" : "SHA-256",
          "content" : "daddea1ea0be0f56978ab3006b8ac92834afeefbd9b7e4e6316fca57df0fa636"
        },
        {
          "alg" : "SHA-512",
          "content" : "ed00dbfabd9ae00efa26dd400983601d076fe36408b7d6520084b447e5d1fa527ce65bd6afdcb58506c3a808323d28e88f26cb99c6f5db9ff64f6525ecdfa557"
        },
        {
          "alg" : "SHA-384",
          "content" : "ac20720d7156131478205f1b454395abf84cfc8da2f163301af32f63bd3c4764bd26cb54ed53800f33193ae591f3ce9c"
        },
        {
          "alg" : "SHA3-384",
          "content" : "628eb4407e95dca84da1a06b08a6d9b832a49de8472b1b217e8607f08efeeed18b996232d64dd07f03e78e0e3bb4b078"
        },
        {
          "alg" : "SHA3-256",
          "content" : "9aab62deccf156ee6e324c925dfc30ecb53e8465802863a551901a461424e807"
        },
        {
          "alg" : "SHA3-512",
          "content" : "3fd76857f6d20c03799537cc961c1c4ddf1c375c6c192fb982363e3b9397ba138b77f24ef38b4202f44e37586789c0320e4de18fdadd2772304fd14a9b26d552"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-logging/commons-logging@1.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://commons.apache.org/proper/commons-logging/"
        },
        {
          "type" : "build-system",
          "url" : "https://continuum-ci.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/LOGGING"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/repos/asf/commons/proper/logging/trunk"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-logging/commons-logging@1.2?type=jar"
    }
  ],
  "dependencies" : [
    {
      "ref" : "pkg:maven/org.apache.commons/commons-jexl3@3.3?type=jar",
      "dependsOn" : [
        "pkg:maven/commons-logging/commons-logging@1.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/commons-logging/commons-logging@1.2?type=jar",
      "dependsOn" : [ ]
    }
  ]
}