<?xml version="1.0" encoding="UTF-8"?>
<bom serialNumber="urn:uuid:4b5a6eb1-4f98-4522-819d-9a5f0670ff79" version="1" xmlns="http://cyclonedx.org/schema/bom/1.4">
  <metadata>
    <timestamp>2023-03-17T09:39:51Z</timestamp>
    <tools>
      <tool>
        <vendor>OWASP Foundation</vendor>
        <name>CycloneDX Maven plugin</name>
        <version>2.7.3</version>
        <hashes>
          <hash alg="MD5">ab886f1cb1a79b4244ac54dde22a0989</hash>
          <hash alg="SHA-1">9ed658496dfeef87fe6072b95c62ec37165cc741</hash>
          <hash alg="SHA-256">df9b43417bef6aeac86a393abcc1ac2ed0518239ba544aaeb595b9619c603503</hash>
          <hash alg="SHA-512">223da34bb51c5339e0f7285757608c1a56b1ea887f7ad835af9299fabacc693053163da74af352af86b16e18e04db730bd44214eda04291410c42b6ae657d85c</hash>
          <hash alg="SHA-384">3aaf057329ed0f90ec3a49a45b3cf4ec5ce637fd75d6202e9483fa4274cec3e7b74308016e146b6ba087df5fce9397bb</hash>
        </hashes>
      </tool>
    </tools>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-streaming-java@1.17.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-streaming-java</name>
      <version>1.17.0</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-streaming-java@1.17.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://www.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink/flink-streaming-java</url></reference></externalReferences>
    </component>
  </metadata>
  <components>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-core@1.17.0?type=jar">
      <group>org.apache.flink</group>
      <name>flink-core</name>
      <version>1.17.0</version>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">52790bc8580c0381f3722126f2672e92</hash>
        <hash alg="SHA-1">1211131371b252ba1b25715247c93d60a09839f2</hash>
        <hash alg="SHA-256">bc024437713d954fc88b238cf94f111c735afae5666b51d0eb3e0084aefce333</hash>
        <hash alg="SHA-512">d35a9acb6fd557ab3497d87666597c728bef60aab85242bddfb1436d6bd5477b5fbea4bc7f93cd5e06e522f542cc077c2d2ae2f88d2550080d07d0289792907a</hash>
        <hash alg="SHA-384">a0a606829c35e4ef90057af8f4612f7d9808e34fe546b3dcc531b43708bc1de7bb7b9a696bf8db15f532ef6595b0265e</hash>
      </hashes>
      <licenses/>
      <purl>pkg:maven/org.apache.flink/flink-core@1.17.0?type=jar</purl>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-annotations@1.17.0?type=jar">
      <group>org.apache.flink</group>
      <name>flink-annotations</name>
      <version>1.17.0</version>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">8722229171d763f57b027d0a2d2be7aa</hash>
        <hash alg="SHA-1">6a627ba30bf3e3be766f440695d4b5e5a5dcb4e9</hash>
        <hash alg="SHA-256">ca9f02d09d74d40196ffcd706030fde626e5aa4611e6dfaee1ff3d0ea343ebff</hash>
        <hash alg="SHA-512">5789077b29a903e3b879dc713388f9b0fb35ae0034bf53318f34c05302fbabc3a9fecbed67280aeb547cb8674650e71963909e596f073b13867418e00a37e33c</hash>
        <hash alg="SHA-384">197d6829888940ced6cbcfc8e7fdb822486fc60c5d393a7e278aad6ef42be3b9a050826e33e782d8cfbb1fc18a9db0b3</hash>
      </hashes>
      <licenses/>
      <purl>pkg:maven/org.apache.flink/flink-annotations@1.17.0?type=jar</purl>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-metrics-core@1.17.0?type=jar">
      <group>org.apache.flink</group>
      <name>flink-metrics-core</name>
      <version>1.17.0</version>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">1ed9920da68ac343424f40cf4a6b824f</hash>
        <hash alg="SHA-1">666fb09d3ad2098625aa4f2efc4ce24754abeed7</hash>
        <hash alg="SHA-256">ecb1164a32f0ff87db9c42f96aef8281b66a78a42e1f7ee2500a8255ebf4110f</hash>
        <hash alg="SHA-512">4fec1b5d13a7666f6ce73feaa7ea677c1ac110aeeb54ea2b0d39675098d920d8a8df8ecd253e38d9e1f24d09c6344a4cd3591433e4e06be861ba411f14c93529</hash>
        <hash alg="SHA-384">6233b45a5fddef0569b01ee891bec76d49ded5697d210d05a14c18e5c4166add2bf3b1d60f4fba0188cfa448c6e0333d</hash>
      </hashes>
      <licenses/>
      <purl>pkg:maven/org.apache.flink/flink-metrics-core@1.17.0?type=jar</purl>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-shaded-asm-9@9.3-16.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-shaded-asm-9</name>
      <version>9.3-16.1</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <hashes>
        <hash alg="MD5">8ab02de7e3964cac3f5f49c2b299aaf8</hash>
        <hash alg="SHA-1">252941e7a5e6772647ec1c222bebd92eddea79f2</hash>
        <hash alg="SHA-256">bca08c293e85b88a3ee5a4b4367af319c396047e03257a4787370f15f39dce6d</hash>
        <hash alg="SHA-512">d712544a0f1c3d0d4db88045de14b014f23b745b6f98dae78a3656cb3b3d7418f91fda32f87d16f8a69c45b47abec57f8632ed6e7735136a79873ee272cb5a50</hash>
        <hash alg="SHA-384">4982ca611821a37c4f5828d3859fceff2ae35846bf1a7d3e61b652cc6fefb3ca1f242886bf637000af35bbef4f78a276</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-shaded-asm-9@9.3-16.1?type=jar</purl>
      <externalReferences><reference type="vcs"><url>https://github.com/apache/flink-shaded</url></reference><reference type="website"><url>https://www.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-shaded-jackson@2.13.4-16.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-shaded-jackson</name>
      <version>2.13.4-16.1</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">c26b24a1094f56a837610d5ea08ae0f6</hash>
        <hash alg="SHA-1">004e5fb57e10af9cd814258221c9f50c920e6c09</hash>
        <hash alg="SHA-256">601da81a8920228bfefc0a38229304340a6296a1f431522973bd2d7007f09d4e</hash>
        <hash alg="SHA-512">b2a66341cceb0dc75d1d1ccf4dcab69bef6289060b1688556443327b508b039d510298aea67dd1540122312db40d91dd86ad852f2afd0b087a479da340b580c2</hash>
        <hash alg="SHA-384">f9c750a59372ecbfd951b8ae5efef49110c060d43bde418bc723c5156bcf81b44f5a4c65fccbffa9642c978628dc9b00</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-shaded-jackson@2.13.4-16.1?type=jar</purl>
      <externalReferences><reference type="vcs"><url>https://github.com/apache/flink-shaded</url></reference><reference type="website"><url>https://www.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.commons</group>
      <name>commons-lang3</name>
      <version>3.12.0</version>
      <description>Apache Commons Lang, a package of Java utility classes for the
  classes that are in java.lang's hierarchy, or are considered to be so
  standard as to justify existence in java.lang.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">19fe50567358922bdad277959ea69545</hash>
        <hash alg="SHA-1">c6842c86792ff03b9f1d1fe2aab8dc23aa6c6f0e</hash>
        <hash alg="SHA-256">d919d904486c037f8d193412da0c92e22a9fa24230b9d67a57855c5c31c7e94e</hash>
        <hash alg="SHA-512">fbdbc0943cb3498b0148e86a39b773f97c8e6013740f72dbc727faeabea402073e2cc8c4d68198e5fc6b08a13b7700236292e99d4785f2c9989f2e5fac11fd81</hash>
        <hash alg="SHA-384">c34b8a0e0eba2168ad56fedeb7a1d710b6f1d3f1ce6aae99a4e0247bd120efbbadc8dcb2f731045b8a16e3efd30604dc</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar</purl>
      <externalReferences><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/LANG</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=commons-lang.git</url></reference><reference type="build-system"><url>https://builds.apache.org/</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="website"><url>https://www.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.commons</group>
      <name>commons-text</name>
      <version>1.10.0</version>
      <description>Apache Commons Text is a library focused on algorithms working on strings.</description>
      <hashes>
        <hash alg="MD5">4afc9bfa2d31dbf7330c98fcc954b892</hash>
        <hash alg="SHA-1">3363381aef8cef2dbc1023b3e3a9433b08b64e01</hash>
        <hash alg="SHA-256">770cd903fa7b604d1f7ef7ba17f84108667294b2b478be8ed1af3bffb4ae0018</hash>
        <hash alg="SHA-512">afd836a1094449e0a791fee67363666c47b6d24acff353a5089b837b332c0f4af89565c354682521e37062d20e6b52d70c77bb4f24cca9b9532c274fc708a831</hash>
        <hash alg="SHA-384">06c56e6e513dd77cf10d0da46cdea08c34e220e81fa024735b668c6650df4234e564fe865ff5cafea963f56b1e8ffd4a</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar</purl>
      <externalReferences><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/TEXT</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=commons-text.git</url></reference><reference type="build-system"><url>https://github.com/apache/commons-parent/actions</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="website"><url>https://www.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.esotericsoftware.kryo/kryo@2.24.0?type=jar">
      <group>com.esotericsoftware.kryo</group>
      <name>kryo</name>
      <version>2.24.0</version>
      <description>Fast, efficient Java serialization</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">6cf0fa5b5d4f6b8226fd4a4bfb7532b8</hash>
        <hash alg="SHA-1">0c6b206e80cfd97e66a1364003724491c757b92f</hash>
        <hash alg="SHA-256">7e56b32c635058f9aa2820f88919ab702d029cbcd15285da9992e36cc0ae52f2</hash>
        <hash alg="SHA-512">a4c6ce768528a03c219cc6a41b22293f78e433c849c90391b64dda3f2376fd79951a89c5f4e6701bcbcb6eee9abffe2390cfb12dba3b885e4a3d411a26b78f40</hash>
        <hash alg="SHA-384">678ad1b7f4d99910b8ff44a6c8f78ccae91f823161ce23de39077397352919b7257e1e6e0dea90900be973291ea19282</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.esotericsoftware.kryo/kryo@2.24.0?type=jar</purl>
      <externalReferences><reference type="vcs"><url>https://github.com/EsotericSoftware/kryo</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.esotericsoftware.minlog/minlog@1.2?type=jar">
      <group>com.esotericsoftware.minlog</group>
      <name>minlog</name>
      <version>1.2</version>
      <description>Minimal overhead Java logging</description>
      <hashes>
        <hash alg="MD5">f7cfbdf63b67df0bbfa4c7cb260885bc</hash>
        <hash alg="SHA-1">59bfcd171d82f9981a5e242b9e840191f650e209</hash>
        <hash alg="SHA-256">a678cb1aa8f5d03d901c992c75741841d98a9bc3d55dad02e84d65315c4e60f2</hash>
        <hash alg="SHA-512">7b4082766ad740d86708783f3b08780ed72dd18062aa9ba422c4b9016b332d2334ae511f50ef7d89e4eedbdac5cebc51ab6ddaf4d1eea857a3250eb5962f0d08</hash>
        <hash alg="SHA-384">932a282a9c06864001f8212199e4be05543609adbd985c5f4517ee6eba734acd3fd8812213bc0c98af264637cbf9c78d</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.esotericsoftware.minlog/minlog@1.2?type=jar</purl>
      <externalReferences><reference type="vcs"><url>http://minlog.googlecode.com/svn/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-collections/commons-collections@3.2.2?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>commons-collections</group>
      <name>commons-collections</name>
      <version>3.2.2</version>
      <description>Types that extend and augment the Java Collections Framework.</description>
      <hashes>
        <hash alg="MD5">f54a8510f834a1a57166970bfc982e94</hash>
        <hash alg="SHA-1">8ad72fe39fa8c91eaaf12aadb21e0c3661fe26d5</hash>
        <hash alg="SHA-256">eeeae917917144a68a741d4c0dff66aa5c5c5fd85593ff217bced3fc8ca783b8</hash>
        <hash alg="SHA-512">51c72f9aca7726f3c387095e66be85a6df97c74b00a25434b89188c1b8eab6e2b55accf7b9bd412430d22bd09324dec076e300b3d1fa39fccad471f0f2a3da16</hash>
        <hash alg="SHA-384">dd4e99b3314bd3c1a1ee26296615d9e44dadf7a1f8a7bbba44fb95121803d331e36d4cca4260e7609af78a47ba3e4073</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/commons-collections/commons-collections@3.2.2?type=jar</purl>
      <externalReferences><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/COLLECTIONS</url></reference><reference type="vcs"><url>http://svn.apache.org/viewvc/commons/proper/collections/trunk</url></reference><reference type="build-system"><url>https://continuum-ci.apache.org/</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="website"><url>http://www.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-compress@1.21?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.commons</group>
      <name>commons-compress</name>
      <version>1.21</version>
      <description>Apache Commons Compress software defines an API for working with
compression and archive formats.  These include: bzip2, gzip, pack200,
lzma, xz, Snappy, traditional Unix Compress, DEFLATE, DEFLATE64, LZ4,
Brotli, Zstandard and ar, cpio, jar, tar, zip, dump, 7z, arj.</description>
      <hashes>
        <hash alg="MD5">2a713d10331bc4e13459a3dc0463f16f</hash>
        <hash alg="SHA-1">4ec95b60d4e86b5c95a0e919cb172a0af98011ef</hash>
        <hash alg="SHA-256">6aecfd5459728a595601cfa07258d131972ffc39b492eb48bdd596577a2f244a</hash>
        <hash alg="SHA-512">c92d9a12547aab475e057955ad815fdfe92ff44c78383fa5af54b089f1bff5525126ef6aef93334f3bfc22e2fef4ad0d969f69384e978a83a55f011a53e7e471</hash>
        <hash alg="SHA-384">da56f95d420cd7278cee646f4cd0e7a5ee12b6a2894efaec12f0ff7b56c3d43e5db736fe1ed66ff91118b16f2d64ebef</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.commons/commons-compress@1.21?type=jar</purl>
      <externalReferences><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/COMPRESS</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=commons-compress.git</url></reference><reference type="build-system"><url>https://builds.apache.org/</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="website"><url>https://www.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-file-sink-common@1.17.0?type=jar">
      <group>org.apache.flink</group>
      <name>flink-file-sink-common</name>
      <version>1.17.0</version>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">f3063ed34431cfb1962af3f6844b76ed</hash>
        <hash alg="SHA-1">1db9a694889e4591efa1194baa1acebd7371030b</hash>
        <hash alg="SHA-256">ccde948f931459e551cb7a0005742309af3213e1023d5409670586d5e03509e4</hash>
        <hash alg="SHA-512">4176158968f0a7065a020d73956f9dccc901aa549a8a8e1b7335ede9dee89998dc28f770138c20620ee9b718f9b7dcd8892f76e663003787b609755e2151ebbd</hash>
        <hash alg="SHA-384">8039451dae28d9481172b7a5104d7e3296db761cec57a3ffde7c103b3d9f7a76aa68fa206b348b204a85b8f2388302dc</hash>
      </hashes>
      <licenses/>
      <purl>pkg:maven/org.apache.flink/flink-file-sink-common@1.17.0?type=jar</purl>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-runtime@1.17.0?type=jar">
      <group>org.apache.flink</group>
      <name>flink-runtime</name>
      <version>1.17.0</version>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">f5f0f23d1b3db23f050e7d949370ee82</hash>
        <hash alg="SHA-1">a9c9821762932ce8fd25a0c783de697108e95759</hash>
        <hash alg="SHA-256">8f1536770468c5f008891cc94043fd842c58dd5f61f15a341fd21b3e8f154cb0</hash>
        <hash alg="SHA-512">6d2e83508ade4b373eeb1421f44b5cf06455e9be75ad5bf92d478eefe8c130c0ca08fb8e179b1012a46bed65a8272010e8c7ae5aec195b4875fa49301387236d</hash>
        <hash alg="SHA-384">5ad66f1e93443fb12ed1ce04401d1333de0f1d139d211f4f2f2b0cb0821df0af6fdae87513bbfb0cae6f010ba00f71d0</hash>
      </hashes>
      <licenses/>
      <purl>pkg:maven/org.apache.flink/flink-runtime@1.17.0?type=jar</purl>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-rpc-core@1.17.0?type=jar">
      <group>org.apache.flink</group>
      <name>flink-rpc-core</name>
      <version>1.17.0</version>
      <hashes>
        <hash alg="MD5">619be6316bd04bf13b29acdc26084491</hash>
        <hash alg="SHA-1">b09f05d32173634231838a63a2bc52ccd1e8e751</hash>
        <hash alg="SHA-256">ee5338ad324a9cc995a09119a5596d2fd077f3da24c281f30be0db2fd1011b4e</hash>
        <hash alg="SHA-512">f5a8933289be162896b33af2b4b30130b730c66283c3c32523ff7c1e76a9a1fc080ccdea99682acc2b5e0e3be4fe0fda150e2c7cbffa6f654d1a3761e119ad11</hash>
        <hash alg="SHA-384">dba9e000012609d4e5ba0c0f015fa2ce490a53f69c61a3bb6fefa2d88a2c3dcd0369c4111d814a2f21bae471de26dfac</hash>
      </hashes>
      <licenses/>
      <purl>pkg:maven/org.apache.flink/flink-rpc-core@1.17.0?type=jar</purl>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-rpc-akka-loader@1.17.0?type=jar">
      <group>org.apache.flink</group>
      <name>flink-rpc-akka-loader</name>
      <version>1.17.0</version>
      <description>This module contains the mechanism for loading flink-rpc-akka through a separate classloader.</description>
      <hashes>
        <hash alg="MD5">38868ff03f249de8b1401da71a059caf</hash>
        <hash alg="SHA-1">9ce887a6bc365cb5fcc53c6350de9b3b43242f53</hash>
        <hash alg="SHA-256">634b50506ff04d8a65551e4ed96cefd0f1711637f87eea8bffe739ffc79510b7</hash>
        <hash alg="SHA-512">6d4da0720068f7d074348ac6e99eced9bd635e8ba1097c29fe4420e96b305af0d238ef0df3f57e452e45b04c4b6ae7ef6bed45d3424d71da2e06bb4bab948043</hash>
        <hash alg="SHA-384">5ffe5de895af29bb3f7597c2bce8ba3934fe4f3d0af54f2e64f8621a8b48059aa6f1c4bcc87ba950fd86d6db025a5166</hash>
      </hashes>
      <licenses/>
      <purl>pkg:maven/org.apache.flink/flink-rpc-akka-loader@1.17.0?type=jar</purl>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-queryable-state-client-java@1.17.0?type=jar">
      <group>org.apache.flink</group>
      <name>flink-queryable-state-client-java</name>
      <version>1.17.0</version>
      <hashes>
        <hash alg="MD5">608a5046fcd31b4cb3f53d7490171eca</hash>
        <hash alg="SHA-1">0d2a584736c010680cb80c0937f3fd26410f2235</hash>
        <hash alg="SHA-256">1e0cdb22b341aa379fc9f9400f4452fb5ab8af57181ec60598300290bdaac87d</hash>
        <hash alg="SHA-512">495c03c978e3035fa88d0e558f27aca64fdfd45ea6580fc3787b5c59cf8c62dc9ac8972805704ec369f08607a236cf8fe0ec6295124134707525c97994dad915</hash>
        <hash alg="SHA-384">a292a62469b7718c380dc09ac022df915cf7607dadcaeb8191a1f0c6f45d0ac74f8ee7d287d24b5f7af5d70dfbc78e56</hash>
      </hashes>
      <licenses/>
      <purl>pkg:maven/org.apache.flink/flink-queryable-state-client-java@1.17.0?type=jar</purl>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-hadoop-fs@1.17.0?type=jar">
      <group>org.apache.flink</group>
      <name>flink-hadoop-fs</name>
      <version>1.17.0</version>
      <hashes>
        <hash alg="MD5">307e994baf9df4aa23320816e422dcb8</hash>
        <hash alg="SHA-1">44a8cf8172031f81dc165543ec67f2fc11f618ba</hash>
        <hash alg="SHA-256">a98f585fb1f621f215ea562dc248d898faaae0a59a7bfae3b78aaf8872204802</hash>
        <hash alg="SHA-512">e638e5d6d8872119532625d622516d7e19e82405f32946f45a6c302903464a6e86239610904bbbd47e572560d1ea81b3b11ad3b1179ad7637c12009cd6ab06b9</hash>
        <hash alg="SHA-384">3867ace16bb040384b0bd9dec1656c9964a5785ae31c17d322538f3e2c9735fa10bbb73ad7fc40c3582f310b785683b3</hash>
      </hashes>
      <licenses/>
      <purl>pkg:maven/org.apache.flink/flink-hadoop-fs@1.17.0?type=jar</purl>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-io/commons-io@2.11.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>commons-io</group>
      <name>commons-io</name>
      <version>2.11.0</version>
      <description>The Apache Commons IO library contains utility classes, stream implementations, file filters,
file comparators, endian transformation classes, and much more.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">3b4b7ccfaeceeac240b804839ee1a1ca</hash>
        <hash alg="SHA-1">a2503f302b11ebde7ebc3df41daebe0e4eea3689</hash>
        <hash alg="SHA-256">961b2f6d87dbacc5d54abf45ab7a6e2495f89b75598962d8c723cea9bc210908</hash>
        <hash alg="SHA-512">5bd78eed456ede30119319c5bed8e3e4c443b6fd7bdb3a7a5686647bd83094d0c3e2832a7575cfb60e4ef25f08106b93476939d3adcfecf5533cc030b3039e10</hash>
        <hash alg="SHA-384">114f1e324d90ad887c177876d410f5787a8e8da6c48d4b2862d365802c0efded3a88cb24046976bf6276cadad3712f0f</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/commons-io/commons-io@2.11.0?type=jar</purl>
      <externalReferences><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/IO</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=commons-io.git</url></reference><reference type="build-system"><url>https://builds.apache.org/</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="website"><url>https://www.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-shaded-netty@4.1.82.Final-16.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-shaded-netty</name>
      <version>4.1.82.Final-16.1</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <hashes>
        <hash alg="MD5">587a1560d64c8e3016f2a6fa05434839</hash>
        <hash alg="SHA-1">cfe139947f5cefe7429993b68d60498d2eb59965</hash>
        <hash alg="SHA-256">fc5c3f267ab9a160ad075a1d8168100e6190aae4eb57861023e47356eabe2306</hash>
        <hash alg="SHA-512">c6c54ea5b34f45622291c8a080fb566a4a795b0a07c941840fe767d5b0a9de84dde78270c96c0a9ffd06b56e630710b767ac5991f77c031e3e40aa41a8f15a02</hash>
        <hash alg="SHA-384">93633a19903a4807f49ce87f141f6e0148d2bec7344f3c019c37f98861f2893efe0a29fb5da9152363459c2ed458e1de</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-shaded-netty@4.1.82.Final-16.1?type=jar</purl>
      <externalReferences><reference type="vcs"><url>https://github.com/apache/flink-shaded</url></reference><reference type="website"><url>https://www.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-shaded-zookeeper-3@3.7.1-16.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-shaded-zookeeper-3</name>
      <version>3.7.1-16.1</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">af578f2f1293b405fb145a35375ed7fe</hash>
        <hash alg="SHA-1">99500524021365e7b33a873e4102dbed99c2b8fb</hash>
        <hash alg="SHA-256">c5475aa90a9fe2d5b898129386030994777f4e0906b4e983b4969415e315e1e2</hash>
        <hash alg="SHA-512">54d46d83fc7cf8c816758988a50b64366f21e121148ca348b1b98f5a293e4f91dac273d7e848a92b2a21f2a0eeb130b87246ec47c7d1ba77991ebbbc297c7fb3</hash>
        <hash alg="SHA-384">df2f43f9e7837296ae7913041b3f9611b409cdce3ce03f04db3df84f0150dd3534467481d2b5c7853d590b840d5b084c</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-shaded-zookeeper-3@3.7.1-16.1?type=jar</purl>
      <externalReferences><reference type="vcs"><url>https://github.com/apache/flink-shaded</url></reference><reference type="website"><url>https://www.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-cli/commons-cli@1.5.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>commons-cli</group>
      <name>commons-cli</name>
      <version>1.5.0</version>
      <description>Apache Commons CLI provides a simple API for presenting, processing and validating a Command Line Interface.</description>
      <hashes>
        <hash alg="MD5">6c3b2052160144196118b1f019504388</hash>
        <hash alg="SHA-1">dc98be5d5390230684a092589d70ea76a147925c</hash>
        <hash alg="SHA-256">bc8bb01fc0fad250385706e20f927ddcff6173f6339b387dc879237752567ac6</hash>
        <hash alg="SHA-512">b78ac2b418e9e9e7d0bc866664577199d320408a6f03151b3789bac365c986dd526df853599e633d7e50fe136cbf3eb9ce50c9cfa0ad38c3cc8d8ee416f61c40</hash>
        <hash alg="SHA-384">a7a2daa807c4007c506b5100f0a9b526c0052c4e1f6b699904ef9d2aba8195b6003dc4d47ca133b15e2f3e830bdbe6c4</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/commons-cli/commons-cli@1.5.0?type=jar</purl>
      <externalReferences><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/CLI</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=commons-cli.git</url></reference><reference type="build-system"><url>https://builds.apache.org/</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="website"><url>https://www.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.javassist/javassist@3.24.0-GA?type=jar">
      <publisher>Shigeru Chiba, www.javassist.org</publisher>
      <group>org.javassist</group>
      <name>javassist</name>
      <version>3.24.0-GA</version>
      <description>Javassist (JAVA programming ASSISTant) makes Java bytecode manipulation
    simple.  It is a class library for editing bytecodes in Java.</description>
      <hashes>
        <hash alg="MD5">23fd22d0d089ddfac567a39ce0cb1a91</hash>
        <hash alg="SHA-1">d7466fc2e3af7c023e95c510f06448ad29b225b3</hash>
        <hash alg="SHA-256">aba81efa678b621203fb89aeff81d6f126f7a9dd709401e5609c42976684ae23</hash>
        <hash alg="SHA-512">e57dad74a3edef837ece841d06e4a7c96ffecab8fbcba56fe5f7eccd662f0c0d757880a6073793a8c75ad7a0a1d146346b75cdbfe4fd8a271048a54446e5d1a2</hash>
        <hash alg="SHA-384">4867afdb7522b3dbfa10a51264ac6c15a2a8083d16c8dbef318275d24687768f35130b1c17d8407ca8ecf855abd83dff</hash>
      </hashes>
      <licenses>
        <license>
          <id>MPL-1.1</id>
        </license>
        <license>
          <id>LGPL-2.1-only</id>
        </license>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.javassist/javassist@3.24.0-GA?type=jar</purl>
      <externalReferences><reference type="distribution"><url>https://repository.jboss.org/nexus/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://jira.jboss.org/jira/browse/JASSIST/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.xerial.snappy/snappy-java@1.1.8.3?type=jar">
      <publisher>xerial.org</publisher>
      <group>org.xerial.snappy</group>
      <name>snappy-java</name>
      <version>1.1.8.3</version>
      <description>snappy-java: A fast compression/decompression library</description>
      <hashes>
        <hash alg="MD5">fdacc9d6d764fe918daca743a67ce24f</hash>
        <hash alg="SHA-1">2c58fa5745831afa3a4290c2ce15553ff13ad0ab</hash>
        <hash alg="SHA-256">d371202c03bd165f6fd660f63ae597fbb4c91b81bfc6e12cf6b2a93ace93a800</hash>
        <hash alg="SHA-512">5f3f9a391a70c1898610892bca07bb87b867caf4e6d959800a3abdd45435b4af52a9fdd82d7aefe0bd47af169203f83c92450e327c3b8bf47373e8030004344b</hash>
        <hash alg="SHA-384">bc9e1d3ad7dfbd35fc1e7e9287f254eca5fc1f20234558bd963e1f504b55c4d2aacf424f05b211e24846d4d158fb3c91</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.xerial.snappy/snappy-java@1.1.8.3?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/xerial/snappy-java</url></reference><reference type="vcs"><url>https://github.com/xerial/snappy-java</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.lz4/lz4-java@1.8.0?type=jar">
      <group>org.lz4</group>
      <name>lz4-java</name>
      <version>1.8.0</version>
      <description>Java ports and bindings of the LZ4 compression algorithm and the xxHash hashing algorithm</description>
      <hashes>
        <hash alg="MD5">936a927700aa8fc3b75d21d7571171f6</hash>
        <hash alg="SHA-1">4b986a99445e49ea5fbf5d149c4b63f6ed6c6780</hash>
        <hash alg="SHA-256">d74a3334fb35195009b338a951f918203d6bbca3d1d359033dc33edd1cadc9ef</hash>
        <hash alg="SHA-512">98d59086a6021ca571d9c1d64b715e43044c730e1ac563f514c40cf44302615d30378b6d5cc69990446522de6260dc8e7b303e3990a3139dc326d058dfb6dbd9</hash>
        <hash alg="SHA-384">8e3f2acdbb41a00c4d9cc5f328e63fb626ac7c6c84e1bf9502e2fcc76a591b2b819b2d27b29925ff986b95c297b30e2c</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.lz4/lz4-java@1.8.0?type=jar</purl>
      <externalReferences/>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-java@1.17.0?type=jar">
      <group>org.apache.flink</group>
      <name>flink-java</name>
      <version>1.17.0</version>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">f926a00f3e57ac3843bad16f8ec68772</hash>
        <hash alg="SHA-1">d8c66cce8f16f120761173666140e2b7d11ce1f6</hash>
        <hash alg="SHA-256">8ffd2444336ff9f66a144662cfc35c5ed96d4a605f7092717444ef435953d44f</hash>
        <hash alg="SHA-512">d5570c313e9a30a7741ef057ea1e5e2196ff635ab0374afd11b8e3e015e4655b83d9ac74a10048c3c46ca952c4627cf148d8dbf0bf6060927b7ad10a304b623c</hash>
        <hash alg="SHA-384">194d150baf67450f28f4e148f5d4c5d1f4ab1e6f2533eaea49eb6e50fde77fc0acc91dbe7142b343c1229e2f746cd448</hash>
      </hashes>
      <licenses/>
      <purl>pkg:maven/org.apache.flink/flink-java@1.17.0?type=jar</purl>
    </component>
    <component type="library" bom-ref="pkg:maven/com.twitter/chill-java@0.7.6?type=jar">
      <publisher>com.twitter</publisher>
      <group>com.twitter</group>
      <name>chill-java</name>
      <version>0.7.6</version>
      <description>chill-java</description>
      <hashes>
        <hash alg="MD5">886eb8ef6db3880433f4a8e10ef37300</hash>
        <hash alg="SHA-1">a74b8d019d6941d82ff86d1612e382f4a0ae8259</hash>
        <hash alg="SHA-256">f7c41a2257be11e6c9bca97095c8f4b0299626941a3508469f90622eb8f8368e</hash>
        <hash alg="SHA-512">dc9973909b87cfb85ee45c90662612dd2bc137b7510172221eb47020f76b23eb3ea76c6b4fba4cee5d81e910f87aba71359136d33ae0f6424e3ce7123bf77dbf</hash>
        <hash alg="SHA-384">41e7faed7c2c22987868fba7cd6dac0d59d174d82d841ba4e5aa8675cc9265bf9d9df021553a781cfa24c4c9c7a35c5c</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.twitter/chill-java@0.7.6?type=jar</purl>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-shaded-guava@30.1.1-jre-16.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-shaded-guava</name>
      <version>30.1.1-jre-16.1</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">74bc641198b30c213cd9a2754297100d</hash>
        <hash alg="SHA-1">ad8725e964b6c2c0df16877f4132ad348c4ff09c</hash>
        <hash alg="SHA-256">d5ea841b0a51c7db4ecc48c96c0f334da40a9980645cf6d9e6e2b04b2441315c</hash>
        <hash alg="SHA-512">801c9fae8aaf7cec12f82e9d84b2e93648b4f7e58a4f240029db17b922c394ade14082e2022e3036bd33edaf1eb1bb0881570345270bb8820ab827efc9e42aea</hash>
        <hash alg="SHA-384">0b3aca631b15d8e5617952c2c18bed624e0f24b24ca7fb129c4ceb28c416e6e59d0acec3d7f624a7534fb2e9edfb83b6</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-shaded-guava@30.1.1-jre-16.1?type=jar</purl>
      <externalReferences><reference type="vcs"><url>https://github.com/apache/flink-shaded</url></reference><reference type="website"><url>https://www.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-math3@3.6.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.commons</group>
      <name>commons-math3</name>
      <version>3.6.1</version>
      <description>The Apache Commons Math project is a library of lightweight, self-contained mathematics and statistics components addressing the most common practical problems not immediately available in the Java programming language or commons-lang.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">5b730d97e4e6368069de1983937c508e</hash>
        <hash alg="SHA-1">e4ba98f1d4b3c80ec46392f25e094a6a2e58fcbf</hash>
        <hash alg="SHA-256">1e56d7b058d28b65abd256b8458e3885b674c1d588fa43cd7d1cbb9c7ef2b308</hash>
        <hash alg="SHA-512">8bc2438b3b4d9a6be4a47a58410b2d4d0e56e05787ab24badab8cbc9075d61857e8d2f0bffedad33f18f8a356541d00f80a8597b5dedb995be8480d693d03226</hash>
        <hash alg="SHA-384">95d1186d9ca06a3ea2e6437ddec3a55698e2493d3e72f6f554746b74fa929892bd71a2ab501a4e7b1ce56b7cd64e7ab4</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.commons/commons-math3@3.6.1?type=jar</purl>
      <externalReferences><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/MATH</url></reference><reference type="vcs"><url>https://git-wip-us.apache.org/repos/asf?p=commons-math.git</url></reference><reference type="build-system"><url>https://continuum-ci.apache.org/</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="website"><url>http://www.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-shaded-force-shading@16.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-shaded-force-shading</name>
      <version>16.1</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">0f703324b629fbc0d0cbf22375515477</hash>
        <hash alg="SHA-1">5040816ebca54b5bb4d5bb98b741ff77da59505b</hash>
        <hash alg="SHA-256">44ab80c42c380bc813bbf477256a4f4334e44088c8fb1b34d3c867733e54c664</hash>
        <hash alg="SHA-512">bf56dc058175101f58f2abfb3307349e9e911743f118c9309e0b8d3860f164c2c88b5fa1113e2270c1533bf37dc8102f1482099f11bdaa5acf316b7a9808093b</hash>
        <hash alg="SHA-384">3b7c079f14bfeb02219e4430fa2bbe66e9000596116c5247f98e0b0852bd59877559358704c8be7d18c0fbed1fff0880</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-shaded-force-shading@16.1?type=jar</purl>
      <externalReferences><reference type="vcs"><url>https://github.com/apache/flink-shaded</url></reference><reference type="website"><url>https://www.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar">
      <publisher>QOS.ch</publisher>
      <group>org.slf4j</group>
      <name>slf4j-api</name>
      <version>1.7.36</version>
      <description>The slf4j API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">872da51f5de7f3923da4de871d57fd85</hash>
        <hash alg="SHA-1">6c62681a2f655b49963a5983b8b0950a6120ae14</hash>
        <hash alg="SHA-256">d3ef575e3e4979678dc01bf1dcce51021493b4d11fb7f1be8ad982877c16a1c0</hash>
        <hash alg="SHA-512">f9b033fc019a44f98b16048da7e2b59edd4a6a527ba60e358f65ab88e0afae03a9340f1b3e8a543d49fa542290f499c5594259affa1ff3e6e7bf3b428d4c610b</hash>
        <hash alg="SHA-384">2b14ad035877087157e379d3277dcdcd79e58d6bdb147c47d29e377d75ce53ad42cafbf22f5fb7827c7e946ff4876b9a</hash>
      </hashes>
      <licenses>
        <license>
          <id>MIT</id>
          <url>https://opensource.org/licenses/MIT</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.qos.ch</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/qos-ch/slf4j</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar">
      <group>com.google.code.findbugs</group>
      <name>jsr305</name>
      <version>1.3.9</version>
      <description>JSR305 Annotations for Findbugs</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">1d5a772e400b04bb67a7ef4a0e0996d8</hash>
        <hash alg="SHA-1">40719ea6961c0cb6afaeb6a921eaa1f6afd4cfdf</hash>
        <hash alg="SHA-256">905721a0eea90a81534abb7ee6ef4ea2e5e645fa1def0a5cd88402df1b46c9ed</hash>
        <hash alg="SHA-512">06da282cfd8e30d9f8cf17702b8709172b00e22b75a627a1d85f8989615b8a1a401bc25d9aee7b14aed1d9b5df73bf2ea8d66f9c8468d9577c29f0ccfa2cc70a</hash>
        <hash alg="SHA-384">56e6b41ef62eb5edfed0203802cefae9c2df86388148e420bb0c687abb2b80e14d5c2a82d5b35dce4badaf148f94eada</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar</purl>
      <externalReferences><reference type="vcs"><url>http://findbugs.googlecode.com/svn/trunk/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.objenesis/objenesis@2.1?type=jar">
      <publisher>Joe Walnes, Henri Tremblay, Leonardo Mesquita</publisher>
      <group>org.objenesis</group>
      <name>objenesis</name>
      <version>2.1</version>
      <description>A library for instantiating Java objects</description>
      <hashes>
        <hash alg="MD5">32ccb1d20a42b5aaaceb90c9082a2efa</hash>
        <hash alg="SHA-1">87c0ea803b69252868d09308b4618f766f135a96</hash>
        <hash alg="SHA-256">c74330cc6b806c804fd37e74487b4fe5d7c2750c5e15fbc6efa13bdee1bdef80</hash>
        <hash alg="SHA-512">1dec9ee30812b8006e536a2749c5781ccdc4b446539efb6fa534f22e70562033876bf2eb22c6946d617695729bd65f0f65b984f15f05ac63db5bed215e74427c</hash>
        <hash alg="SHA-384">657b8a3b80a5475f198425396f7264301f9e0f3ad5dc336ef0c7b46874f5544861a8a2fd48cdb5f672e199a6935c19d1</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.objenesis/objenesis@2.1?type=jar</purl>
      <externalReferences><reference type="distribution"><url>http://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/easymock/easymock</url></reference></externalReferences>
    </component>
  </components>
  <dependencies>
    <dependency ref="pkg:maven/org.apache.flink/flink-streaming-java@1.17.0?type=jar">
      <dependency ref="pkg:maven/org.apache.flink/flink-core@1.17.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-file-sink-common@1.17.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-runtime@1.17.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-java@1.17.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-guava@30.1.1-jre-16.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-math3@3.6.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-force-shading@16.1?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.flink/flink-core@1.17.0?type=jar">
      <dependency ref="pkg:maven/org.apache.flink/flink-annotations@1.17.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-metrics-core@1.17.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-asm-9@9.3-16.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-jackson@2.13.4-16.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar"/>
      <dependency ref="pkg:maven/com.esotericsoftware.kryo/kryo@2.24.0?type=jar"/>
      <dependency ref="pkg:maven/commons-collections/commons-collections@3.2.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-compress@1.21?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-guava@30.1.1-jre-16.1?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-force-shading@16.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.flink/flink-annotations@1.17.0?type=jar">
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-force-shading@16.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"/>
    <dependency ref="pkg:maven/org.apache.flink/flink-shaded-force-shading@16.1?type=jar"/>
    <dependency ref="pkg:maven/org.apache.flink/flink-metrics-core@1.17.0?type=jar">
      <dependency ref="pkg:maven/org.apache.flink/flink-annotations@1.17.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-force-shading@16.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.flink/flink-shaded-asm-9@9.3-16.1?type=jar"/>
    <dependency ref="pkg:maven/org.apache.flink/flink-shaded-jackson@2.13.4-16.1?type=jar"/>
    <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar"/>
    <dependency ref="pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar">
      <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.esotericsoftware.kryo/kryo@2.24.0?type=jar">
      <dependency ref="pkg:maven/com.esotericsoftware.minlog/minlog@1.2?type=jar"/>
      <dependency ref="pkg:maven/org.objenesis/objenesis@2.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.esotericsoftware.minlog/minlog@1.2?type=jar"/>
    <dependency ref="pkg:maven/org.objenesis/objenesis@2.1?type=jar"/>
    <dependency ref="pkg:maven/commons-collections/commons-collections@3.2.2?type=jar"/>
    <dependency ref="pkg:maven/org.apache.commons/commons-compress@1.21?type=jar"/>
    <dependency ref="pkg:maven/org.apache.flink/flink-shaded-guava@30.1.1-jre-16.1?type=jar"/>
    <dependency ref="pkg:maven/org.apache.flink/flink-file-sink-common@1.17.0?type=jar">
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-force-shading@16.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.flink/flink-runtime@1.17.0?type=jar">
      <dependency ref="pkg:maven/org.apache.flink/flink-core@1.17.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-rpc-core@1.17.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-rpc-akka-loader@1.17.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-java@1.17.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-queryable-state-client-java@1.17.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-hadoop-fs@1.17.0?type=jar"/>
      <dependency ref="pkg:maven/commons-io/commons-io@2.11.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-netty@4.1.82.Final-16.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-guava@30.1.1-jre-16.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-jackson@2.13.4-16.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-zookeeper-3@3.7.1-16.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar"/>
      <dependency ref="pkg:maven/commons-cli/commons-cli@1.5.0?type=jar"/>
      <dependency ref="pkg:maven/org.javassist/javassist@3.24.0-GA?type=jar"/>
      <dependency ref="pkg:maven/org.xerial.snappy/snappy-java@1.1.8.3?type=jar"/>
      <dependency ref="pkg:maven/org.lz4/lz4-java@1.8.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-force-shading@16.1?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.flink/flink-rpc-core@1.17.0?type=jar">
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-force-shading@16.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.flink/flink-rpc-akka-loader@1.17.0?type=jar">
      <dependency ref="pkg:maven/org.apache.flink/flink-core@1.17.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-rpc-core@1.17.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-force-shading@16.1?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.flink/flink-java@1.17.0?type=jar">
      <dependency ref="pkg:maven/org.apache.flink/flink-core@1.17.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-math3@3.6.1?type=jar"/>
      <dependency ref="pkg:maven/com.twitter/chill-java@0.7.6?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-force-shading@16.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.flink/flink-queryable-state-client-java@1.17.0?type=jar">
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-netty@4.1.82.Final-16.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-guava@30.1.1-jre-16.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-force-shading@16.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.flink/flink-shaded-netty@4.1.82.Final-16.1?type=jar"/>
    <dependency ref="pkg:maven/org.apache.flink/flink-hadoop-fs@1.17.0?type=jar">
      <dependency ref="pkg:maven/org.apache.flink/flink-core@1.17.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-force-shading@16.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/commons-io/commons-io@2.11.0?type=jar"/>
    <dependency ref="pkg:maven/org.apache.flink/flink-shaded-zookeeper-3@3.7.1-16.1?type=jar"/>
    <dependency ref="pkg:maven/commons-cli/commons-cli@1.5.0?type=jar"/>
    <dependency ref="pkg:maven/org.javassist/javassist@3.24.0-GA?type=jar"/>
    <dependency ref="pkg:maven/org.xerial.snappy/snappy-java@1.1.8.3?type=jar"/>
    <dependency ref="pkg:maven/org.lz4/lz4-java@1.8.0?type=jar"/>
    <dependency ref="pkg:maven/org.apache.commons/commons-math3@3.6.1?type=jar"/>
    <dependency ref="pkg:maven/com.twitter/chill-java@0.7.6?type=jar">
      <dependency ref="pkg:maven/com.esotericsoftware.kryo/kryo@2.24.0?type=jar"/>
    </dependency>
  </dependencies>
</bom>
