{ "bomFormat" : "CycloneDX", "specVersion" : "1.4", "serialNumber" : "urn:uuid:ae9be9cd-93b4-4e98-a007-c004ea185531", "version" : 1, "metadata" : { "timestamp" : "2023-05-19T09:02:48Z", "tools" : [ { "vendor" : "OWASP Foundation", "name" : "CycloneDX Maven plugin", "version" : "2.7.7", "hashes" : [ { "alg" : "MD5", "content" : "436dfb24c63a322708e4a5143d8543af" }, { "alg" : "SHA-1", "content" : "3ef2e8728dc9eff2f129c34057e46e9d2b10629a" }, { "alg" : "SHA-256", "content" : "c185b79bf0f9264f43bc8c222c44db67bea275bb727e3327cf9aea6bf45292c9" }, { "alg" : "SHA-512", "content" : "41488733e31e6c5315327dcc86187c2b9a6b96cd08f7e2157ce130688afde29c313fc6a73edb8a76333a930c78874aa2eac874448920030c0f7af0ac05e65ced" }, { "alg" : "SHA-384", "content" : "f9462f86240fd9fc0942f34981e6d2371f252aa1a4e5e8c3c14e7f0f1a4e4de69ef972e51cf09a749afb6d97c13e67ed" } ] } ], "component" : { "publisher" : "The Apache Software Foundation", "group" : "org.apache.flink", "name" : "flink-streaming-java", "version" : "1.17.1", "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.", "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/org.apache.flink/flink-streaming-java@1.17.1?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://flink.apache.org/flink-streaming-java" }, { "type" : "distribution", "url" : "https://repository.apache.org/service/local/staging/deploy/maven2" }, { "type" : "mailing-list", "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/" }, { "type" : "vcs", "url" : "https://github.com/apache/flink/flink-streaming-java" } ], "type" : "library", "bom-ref" : "pkg:maven/org.apache.flink/flink-streaming-java@1.17.1?type=jar" }, "properties" : [ { "name" : "maven.goal", "value" : "makeBom" }, { "name" : "maven.scopes", "value" : "compile,provided,runtime,system" } ] }, "components" : [ { "publisher" : "The Apache Software Foundation", "group" : "org.apache.flink", "name" : "flink-core", "version" : "1.17.1", "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "62384e653d69d3ad9c0364ef30bd67d1" }, { "alg" : "SHA-1", "content" : "66410efd8122c3a85d07215c19710b41f8d46fc5" }, { "alg" : "SHA-256", "content" : "53585d758f7ef9cd41aa9a1b633ab314064e3f8b705a932dd853db820ed5db64" }, { "alg" : "SHA-512", "content" : "80c2fe2150d5c928665846580cfe10aa84d98d6dd505f53b1578ea7f8534c19d4d991f2b6756dffce7f759bde3035e30b9a187b2554f6e89473f9e6a7a97df58" }, { "alg" : "SHA-384", "content" : "8fcd5b5beea52e83ace42ddfee41fdf4d0938a65288492029a9901414eabd2d2f1044835cf3ec4ee7893c79f8787b599" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/org.apache.flink/flink-core@1.17.1?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://flink.apache.org/flink-core" }, { "type" : "distribution", "url" : "https://repository.apache.org/service/local/staging/deploy/maven2" }, { "type" : "mailing-list", "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/" }, { "type" : "vcs", "url" : "https://github.com/apache/flink/flink-core" } ], "type" : "library", "bom-ref" : "pkg:maven/org.apache.flink/flink-core@1.17.1?type=jar" }, { "publisher" : "The Apache Software Foundation", "group" : "org.apache.flink", "name" : "flink-annotations", "version" : "1.17.1", "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "6a484f8e7db05dd32182c00339771910" }, { "alg" : "SHA-1", "content" : "9ac69eef4fa3002190f00a710add62f0bff2ac41" }, { "alg" : "SHA-256", "content" : "9855c1ddea53c95f841c9b8fd427bc5dca22ca48c49bb4cf763edb29d9e9f586" }, { "alg" : "SHA-512", "content" : "3cd3b79ca2ae2b940de04d6f3814dcfbfbb3375ac2a1ae64f2e554914e0053a277cecfba9f2fea0c4f7ed8506bbdc6ac83f1b19eae011b3f20a5c2cb6e1ea712" }, { "alg" : "SHA-384", "content" : "8b6662d183bc463860f8f81a1cb7225f02651f4bb844195dc13f25a03214fb6d921eda6eed88e46adc5ae28c13bf0819" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/org.apache.flink/flink-annotations@1.17.1?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://flink.apache.org/flink-annotations" }, { "type" : "distribution", "url" : "https://repository.apache.org/service/local/staging/deploy/maven2" }, { "type" : "mailing-list", "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/" }, { "type" : "vcs", "url" : "https://github.com/apache/flink/flink-annotations" } ], "type" : "library", "bom-ref" : "pkg:maven/org.apache.flink/flink-annotations@1.17.1?type=jar" }, { "publisher" : "The Apache Software Foundation", "group" : "org.apache.flink", "name" : "flink-metrics-core", "version" : "1.17.1", "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "fcd76c7d74b1d9e261cd6f37d6f399d1" }, { "alg" : "SHA-1", "content" : "0df12fb26ff59fda89607ccce425c11afcaa1bfb" }, { "alg" : "SHA-256", "content" : "3eb85859717c57699eb51ec4acbd45ea687d45565961db143a4efae4dbfc7188" }, { "alg" : "SHA-512", "content" : "9231e2702b8378b66408d758cf72b227b683a080ffbdd5e8991a4afa00acb87f7f7c8db3d288983fca6cad9184207f834dcaec76a40814b98ecf87e2902a7985" }, { "alg" : "SHA-384", "content" : "223f83fca18358ec250bf03405c903901900601877d7518dc96d96565dec7defc99443e0eb40879b91c02d2cfc80631b" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/org.apache.flink/flink-metrics-core@1.17.1?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://flink.apache.org/flink-metrics/flink-metrics-core" }, { "type" : "distribution", "url" : "https://repository.apache.org/service/local/staging/deploy/maven2" }, { "type" : "mailing-list", "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/" }, { "type" : "vcs", "url" : "https://github.com/apache/flink/flink-metrics/flink-metrics-core" } ], "type" : "library", "bom-ref" : "pkg:maven/org.apache.flink/flink-metrics-core@1.17.1?type=jar" }, { "publisher" : "The Apache Software Foundation", "group" : "org.apache.flink", "name" : "flink-shaded-asm-9", "version" : "9.3-16.1", "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.", "hashes" : [ { "alg" : "MD5", "content" : "8ab02de7e3964cac3f5f49c2b299aaf8" }, { "alg" : "SHA-1", "content" : "252941e7a5e6772647ec1c222bebd92eddea79f2" }, { "alg" : "SHA-256", "content" : "bca08c293e85b88a3ee5a4b4367af319c396047e03257a4787370f15f39dce6d" }, { "alg" : "SHA-512", "content" : "d712544a0f1c3d0d4db88045de14b014f23b745b6f98dae78a3656cb3b3d7418f91fda32f87d16f8a69c45b47abec57f8632ed6e7735136a79873ee272cb5a50" }, { "alg" : "SHA-384", "content" : "4982ca611821a37c4f5828d3859fceff2ae35846bf1a7d3e61b652cc6fefb3ca1f242886bf637000af35bbef4f78a276" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/org.apache.flink/flink-shaded-asm-9@9.3-16.1?type=jar", "externalReferences" : [ { "type" : "website", "url" : "http://flink.apache.org/flink-shaded-asm-9" }, { "type" : "distribution", "url" : "https://repository.apache.org/service/local/staging/deploy/maven2" }, { "type" : "mailing-list", "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/" }, { "type" : "vcs", "url" : "https://github.com/apache/flink-shaded/flink-shaded-asm-9" } ], "type" : "library", "bom-ref" : "pkg:maven/org.apache.flink/flink-shaded-asm-9@9.3-16.1?type=jar" }, { "publisher" : "The Apache Software Foundation", "group" : "org.apache.flink", "name" : "flink-shaded-jackson", "version" : "2.13.4-16.1", "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "c26b24a1094f56a837610d5ea08ae0f6" }, { "alg" : "SHA-1", "content" : "004e5fb57e10af9cd814258221c9f50c920e6c09" }, { "alg" : "SHA-256", "content" : "601da81a8920228bfefc0a38229304340a6296a1f431522973bd2d7007f09d4e" }, { "alg" : "SHA-512", "content" : "b2a66341cceb0dc75d1d1ccf4dcab69bef6289060b1688556443327b508b039d510298aea67dd1540122312db40d91dd86ad852f2afd0b087a479da340b580c2" }, { "alg" : "SHA-384", "content" : "f9c750a59372ecbfd951b8ae5efef49110c060d43bde418bc723c5156bcf81b44f5a4c65fccbffa9642c978628dc9b00" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/org.apache.flink/flink-shaded-jackson@2.13.4-16.1?type=jar", "externalReferences" : [ { "type" : "website", "url" : "http://flink.apache.org/flink-shaded-jackson-parent/flink-shaded-jackson" }, { "type" : "distribution", "url" : "https://repository.apache.org/service/local/staging/deploy/maven2" }, { "type" : "mailing-list", "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/" }, { "type" : "vcs", "url" : "https://github.com/apache/flink-shaded/flink-shaded-jackson-parent/flink-shaded-jackson" } ], "type" : "library", "bom-ref" : "pkg:maven/org.apache.flink/flink-shaded-jackson@2.13.4-16.1?type=jar" }, { "publisher" : "The Apache Software Foundation", "group" : "org.apache.commons", "name" : "commons-lang3", "version" : "3.12.0", "description" : "Apache Commons Lang, a package of Java utility classes for the classes that are in java.lang's hierarchy, or are considered to be so standard as to justify existence in java.lang.", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "19fe50567358922bdad277959ea69545" }, { "alg" : "SHA-1", "content" : "c6842c86792ff03b9f1d1fe2aab8dc23aa6c6f0e" }, { "alg" : "SHA-256", "content" : "d919d904486c037f8d193412da0c92e22a9fa24230b9d67a57855c5c31c7e94e" }, { "alg" : "SHA-512", "content" : "fbdbc0943cb3498b0148e86a39b773f97c8e6013740f72dbc727faeabea402073e2cc8c4d68198e5fc6b08a13b7700236292e99d4785f2c9989f2e5fac11fd81" }, { "alg" : "SHA-384", "content" : "c34b8a0e0eba2168ad56fedeb7a1d710b6f1d3f1ce6aae99a4e0247bd120efbbadc8dcb2f731045b8a16e3efd30604dc" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://commons.apache.org/proper/commons-lang/" }, { "type" : "build-system", "url" : "https://builds.apache.org/" }, { "type" : "distribution", "url" : "https://repository.apache.org/service/local/staging/deploy/maven2" }, { "type" : "issue-tracker", "url" : "https://issues.apache.org/jira/browse/LANG" }, { "type" : "mailing-list", "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/" }, { "type" : "vcs", "url" : "https://gitbox.apache.org/repos/asf?p=commons-lang.git" } ], "type" : "library", "bom-ref" : "pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar" }, { "publisher" : "The Apache Software Foundation", "group" : "org.apache.commons", "name" : "commons-text", "version" : "1.10.0", "description" : "Apache Commons Text is a library focused on algorithms working on strings.", "hashes" : [ { "alg" : "MD5", "content" : "4afc9bfa2d31dbf7330c98fcc954b892" }, { "alg" : "SHA-1", "content" : "3363381aef8cef2dbc1023b3e3a9433b08b64e01" }, { "alg" : "SHA-256", "content" : "770cd903fa7b604d1f7ef7ba17f84108667294b2b478be8ed1af3bffb4ae0018" }, { "alg" : "SHA-512", "content" : "afd836a1094449e0a791fee67363666c47b6d24acff353a5089b837b332c0f4af89565c354682521e37062d20e6b52d70c77bb4f24cca9b9532c274fc708a831" }, { "alg" : "SHA-384", "content" : "06c56e6e513dd77cf10d0da46cdea08c34e220e81fa024735b668c6650df4234e564fe865ff5cafea963f56b1e8ffd4a" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://commons.apache.org/proper/commons-text" }, { "type" : "build-system", "url" : "https://github.com/apache/commons-parent/actions" }, { "type" : "distribution", "url" : "https://repository.apache.org/service/local/staging/deploy/maven2" }, { "type" : "issue-tracker", "url" : "https://issues.apache.org/jira/browse/TEXT" }, { "type" : "mailing-list", "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/" }, { "type" : "vcs", "url" : "https://gitbox.apache.org/repos/asf?p=commons-text.git" } ], "type" : "library", "bom-ref" : "pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar" }, { "group" : "com.esotericsoftware.kryo", "name" : "kryo", "version" : "2.24.0", "description" : "Fast, efficient Java serialization", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "6cf0fa5b5d4f6b8226fd4a4bfb7532b8" }, { "alg" : "SHA-1", "content" : "0c6b206e80cfd97e66a1364003724491c757b92f" }, { "alg" : "SHA-256", "content" : "7e56b32c635058f9aa2820f88919ab702d029cbcd15285da9992e36cc0ae52f2" }, { "alg" : "SHA-512", "content" : "a4c6ce768528a03c219cc6a41b22293f78e433c849c90391b64dda3f2376fd79951a89c5f4e6701bcbcb6eee9abffe2390cfb12dba3b885e4a3d411a26b78f40" }, { "alg" : "SHA-384", "content" : "678ad1b7f4d99910b8ff44a6c8f78ccae91f823161ce23de39077397352919b7257e1e6e0dea90900be973291ea19282" } ], "licenses" : [ { "license" : { "id" : "BSD-3-Clause" } } ], "purl" : "pkg:maven/com.esotericsoftware.kryo/kryo@2.24.0?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://github.com/EsotericSoftware/kryo" }, { "type" : "distribution", "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type" : "vcs", "url" : "https://github.com/EsotericSoftware/kryo" } ], "type" : "library", "bom-ref" : "pkg:maven/com.esotericsoftware.kryo/kryo@2.24.0?type=jar" }, { "group" : "com.esotericsoftware.minlog", "name" : "minlog", "version" : "1.2", "description" : "Minimal overhead Java logging", "hashes" : [ { "alg" : "MD5", "content" : "f7cfbdf63b67df0bbfa4c7cb260885bc" }, { "alg" : "SHA-1", "content" : "59bfcd171d82f9981a5e242b9e840191f650e209" }, { "alg" : "SHA-256", "content" : "a678cb1aa8f5d03d901c992c75741841d98a9bc3d55dad02e84d65315c4e60f2" }, { "alg" : "SHA-512", "content" : "7b4082766ad740d86708783f3b08780ed72dd18062aa9ba422c4b9016b332d2334ae511f50ef7d89e4eedbdac5cebc51ab6ddaf4d1eea857a3250eb5962f0d08" }, { "alg" : "SHA-384", "content" : "932a282a9c06864001f8212199e4be05543609adbd985c5f4517ee6eba734acd3fd8812213bc0c98af264637cbf9c78d" } ], "licenses" : [ { "license" : { "id" : "BSD-3-Clause" } } ], "purl" : "pkg:maven/com.esotericsoftware.minlog/minlog@1.2?type=jar", "externalReferences" : [ { "type" : "website", "url" : "http://code.google.com/p/minlog/" }, { "type" : "vcs", "url" : "http://minlog.googlecode.com/svn/" } ], "type" : "library", "bom-ref" : "pkg:maven/com.esotericsoftware.minlog/minlog@1.2?type=jar" }, { "publisher" : "The Apache Software Foundation", "group" : "commons-collections", "name" : "commons-collections", "version" : "3.2.2", "description" : "Types that extend and augment the Java Collections Framework.", "hashes" : [ { "alg" : "MD5", "content" : "f54a8510f834a1a57166970bfc982e94" }, { "alg" : "SHA-1", "content" : "8ad72fe39fa8c91eaaf12aadb21e0c3661fe26d5" }, { "alg" : "SHA-256", "content" : "eeeae917917144a68a741d4c0dff66aa5c5c5fd85593ff217bced3fc8ca783b8" }, { "alg" : "SHA-512", "content" : "51c72f9aca7726f3c387095e66be85a6df97c74b00a25434b89188c1b8eab6e2b55accf7b9bd412430d22bd09324dec076e300b3d1fa39fccad471f0f2a3da16" }, { "alg" : "SHA-384", "content" : "dd4e99b3314bd3c1a1ee26296615d9e44dadf7a1f8a7bbba44fb95121803d331e36d4cca4260e7609af78a47ba3e4073" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/commons-collections/commons-collections@3.2.2?type=jar", "externalReferences" : [ { "type" : "website", "url" : "http://commons.apache.org/collections/" }, { "type" : "build-system", "url" : "https://continuum-ci.apache.org/" }, { "type" : "distribution", "url" : "https://repository.apache.org/service/local/staging/deploy/maven2" }, { "type" : "issue-tracker", "url" : "http://issues.apache.org/jira/browse/COLLECTIONS" }, { "type" : "mailing-list", "url" : "http://mail-archives.apache.org/mod_mbox/commons-user/" }, { "type" : "vcs", "url" : "http://svn.apache.org/viewvc/commons/proper/collections/trunk" } ], "type" : "library", "bom-ref" : "pkg:maven/commons-collections/commons-collections@3.2.2?type=jar" }, { "publisher" : "The Apache Software Foundation", "group" : "org.apache.commons", "name" : "commons-compress", "version" : "1.21", "description" : "Apache Commons Compress software defines an API for working with compression and archive formats. These include: bzip2, gzip, pack200, lzma, xz, Snappy, traditional Unix Compress, DEFLATE, DEFLATE64, LZ4, Brotli, Zstandard and ar, cpio, jar, tar, zip, dump, 7z, arj.", "hashes" : [ { "alg" : "MD5", "content" : "2a713d10331bc4e13459a3dc0463f16f" }, { "alg" : "SHA-1", "content" : "4ec95b60d4e86b5c95a0e919cb172a0af98011ef" }, { "alg" : "SHA-256", "content" : "6aecfd5459728a595601cfa07258d131972ffc39b492eb48bdd596577a2f244a" }, { "alg" : "SHA-512", "content" : "c92d9a12547aab475e057955ad815fdfe92ff44c78383fa5af54b089f1bff5525126ef6aef93334f3bfc22e2fef4ad0d969f69384e978a83a55f011a53e7e471" }, { "alg" : "SHA-384", "content" : "da56f95d420cd7278cee646f4cd0e7a5ee12b6a2894efaec12f0ff7b56c3d43e5db736fe1ed66ff91118b16f2d64ebef" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/org.apache.commons/commons-compress@1.21?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://commons.apache.org/proper/commons-compress/" }, { "type" : "build-system", "url" : "https://builds.apache.org/" }, { "type" : "distribution", "url" : "https://repository.apache.org/service/local/staging/deploy/maven2" }, { "type" : "issue-tracker", "url" : "https://issues.apache.org/jira/browse/COMPRESS" }, { "type" : "mailing-list", "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/" }, { "type" : "vcs", "url" : "https://gitbox.apache.org/repos/asf?p=commons-compress.git" } ], "type" : "library", "bom-ref" : "pkg:maven/org.apache.commons/commons-compress@1.21?type=jar" }, { "publisher" : "The Apache Software Foundation", "group" : "org.apache.flink", "name" : "flink-file-sink-common", "version" : "1.17.1", "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "4e67fdad4b9e882c50b45dd86c040478" }, { "alg" : "SHA-1", "content" : "7bec20512431525c6136ade98ff0165426ec348a" }, { "alg" : "SHA-256", "content" : "c10facb5755b79f4d37c374ccf3e12b5f8d4bc071eff0ee4aa8719a8f18850ea" }, { "alg" : "SHA-512", "content" : "732dfa76f1819b13b721bf165caab4fb4d6155035620ca9650abc776bfbfd34e89d26c8210f54fb250a78849021246c06d2244cec70a074d65fb417617335098" }, { "alg" : "SHA-384", "content" : "413cb0369338fd02f2d9ebd18032fcdce3a5381df1e3285747153e62e0dca20e41f6a9730bb492c2dae87c0bb672d6f1" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/org.apache.flink/flink-file-sink-common@1.17.1?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://flink.apache.org/flink-connectors/flink-file-sink-common" }, { "type" : "distribution", "url" : "https://repository.apache.org/service/local/staging/deploy/maven2" }, { "type" : "mailing-list", "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/" }, { "type" : "vcs", "url" : "https://github.com/apache/flink/flink-connectors/flink-file-sink-common" } ], "type" : "library", "bom-ref" : "pkg:maven/org.apache.flink/flink-file-sink-common@1.17.1?type=jar" }, { "publisher" : "The Apache Software Foundation", "group" : "org.apache.flink", "name" : "flink-runtime", "version" : "1.17.1", "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "fa52d2d4421a6cdb8a53a60525dcf045" }, { "alg" : "SHA-1", "content" : "74b3855531f178ef5a07a4deb3cb331c76ff81c2" }, { "alg" : "SHA-256", "content" : "50e27589bf961b555c174bde69fbb7526c4fd128c9e258125c8e488727ba8a0d" }, { "alg" : "SHA-512", "content" : "78586647b29f028c0ccc94094ac8f55550ae1ef82fece963f7583dd82ae13e67927bff8d4185676f59ede34bd3ab7d7d7fcb9dfb4145228d183541d13fadd1ca" }, { "alg" : "SHA-384", "content" : "9549f357ae5b36cd874b0fa84e44084da5e1c9f96ac87837d913cc8ea6ab7adb4e47aaf709906fec23bbb8b043d9bb4b" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/org.apache.flink/flink-runtime@1.17.1?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://flink.apache.org/flink-runtime" }, { "type" : "distribution", "url" : "https://repository.apache.org/service/local/staging/deploy/maven2" }, { "type" : "mailing-list", "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/" }, { "type" : "vcs", "url" : "https://github.com/apache/flink/flink-runtime" } ], "type" : "library", "bom-ref" : "pkg:maven/org.apache.flink/flink-runtime@1.17.1?type=jar" }, { "publisher" : "The Apache Software Foundation", "group" : "org.apache.flink", "name" : "flink-rpc-core", "version" : "1.17.1", "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.", "hashes" : [ { "alg" : "MD5", "content" : "d4538c5224525ec978e500d3e91b280f" }, { "alg" : "SHA-1", "content" : "ccf88d09540c2827f2543289ab7accdedbeb2e43" }, { "alg" : "SHA-256", "content" : "967e8cc4748880bf4a56109ffab1ef3d8abddb855d067eac1fd9b89789669d22" }, { "alg" : "SHA-512", "content" : "61e6287430d4cbf13fd445615288a1c6ac8ecc451e5977297b9604dee9940c5c327e6c522a4698daec58847ecf3e0e865941773e13b4a8a701e38a1364639515" }, { "alg" : "SHA-384", "content" : "68f082e0d561d4b3cbe20d1fdbdd3482f20ecff186e54ec1046430f82e802b50e061cbac451fb4823f34aa9aa96d9669" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/org.apache.flink/flink-rpc-core@1.17.1?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://flink.apache.org/flink-rpc/flink-rpc-core" }, { "type" : "distribution", "url" : "https://repository.apache.org/service/local/staging/deploy/maven2" }, { "type" : "mailing-list", "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/" }, { "type" : "vcs", "url" : "https://github.com/apache/flink/flink-rpc/flink-rpc-core" } ], "type" : "library", "bom-ref" : "pkg:maven/org.apache.flink/flink-rpc-core@1.17.1?type=jar" }, { "publisher" : "The Apache Software Foundation", "group" : "org.apache.flink", "name" : "flink-rpc-akka-loader", "version" : "1.17.1", "description" : "This module contains the mechanism for loading flink-rpc-akka through a separate classloader.", "hashes" : [ { "alg" : "MD5", "content" : "4a43432aa3c87194920c7d83458e4577" }, { "alg" : "SHA-1", "content" : "92619b7b4c8fb53125dfd07301021a6bbe5b3eb8" }, { "alg" : "SHA-256", "content" : "a1c5ce8e2c5534f50073a5b589f45778fc9b4c4623db5b06bd4737b2fab6c8cc" }, { "alg" : "SHA-512", "content" : "7ed9ef63779f280646a0acf50fab820152c137a01c16c46b069f45537b114ef05c3b0259908a0d07631e72e0640474ed9b2aa093895f45f6292dee4bf4109e17" }, { "alg" : "SHA-384", "content" : "156f6510816e0f34daa5f6c67b251b014bcff864f328d211e72e5ef799eacd05944d0fc74b7c6bbb572d6cb696ab81a5" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/org.apache.flink/flink-rpc-akka-loader@1.17.1?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://flink.apache.org/flink-rpc/flink-rpc-akka-loader" }, { "type" : "distribution", "url" : "https://repository.apache.org/service/local/staging/deploy/maven2" }, { "type" : "mailing-list", "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/" }, { "type" : "vcs", "url" : "https://github.com/apache/flink/flink-rpc/flink-rpc-akka-loader" } ], "type" : "library", "bom-ref" : "pkg:maven/org.apache.flink/flink-rpc-akka-loader@1.17.1?type=jar" }, { "publisher" : "The Apache Software Foundation", "group" : "org.apache.flink", "name" : "flink-queryable-state-client-java", "version" : "1.17.1", "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.", "hashes" : [ { "alg" : "MD5", "content" : "9ecbb0f4eb6abbcc14e0da3c12ae3d46" }, { "alg" : "SHA-1", "content" : "a38524fb2cabd64a30bc50754fd7ef27dc9a2ed0" }, { "alg" : "SHA-256", "content" : "94476cb6118331c60ee498e85b997a13ca70ef54fa7d6852e844825be5cbb14c" }, { "alg" : "SHA-512", "content" : "bf3474ae52f5ca18164d769f62c38bb4796fae8550492e73cf4139565bf28407a6b79c5d1d8876a065198dfca8f2467f851f167d429836bfaa1f58ae035d3f47" }, { "alg" : "SHA-384", "content" : "22062f88849f4ac6a57560a1dd908a8e7769765c4d59c2ce8d23e89e6b88029ea8280c4a3f5202c95711cfcf870850c2" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/org.apache.flink/flink-queryable-state-client-java@1.17.1?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://flink.apache.org/flink-queryable-state/flink-queryable-state-client-java" }, { "type" : "distribution", "url" : "https://repository.apache.org/service/local/staging/deploy/maven2" }, { "type" : "mailing-list", "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/" }, { "type" : "vcs", "url" : "https://github.com/apache/flink/flink-queryable-state/flink-queryable-state-client-java" } ], "type" : "library", "bom-ref" : "pkg:maven/org.apache.flink/flink-queryable-state-client-java@1.17.1?type=jar" }, { "publisher" : "The Apache Software Foundation", "group" : "org.apache.flink", "name" : "flink-hadoop-fs", "version" : "1.17.1", "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.", "hashes" : [ { "alg" : "MD5", "content" : "d1a774985ca599218891fd0fa1a6ec67" }, { "alg" : "SHA-1", "content" : "240904d97031a8c64871f857d90e679ebcae6121" }, { "alg" : "SHA-256", "content" : "e5625ce3b98d4dfbce2a2ca128f6eed0b764839ab96bf0336d4da88b17ad4b67" }, { "alg" : "SHA-512", "content" : "b9819c51908e99c2bd1905a21c48032e34fb6970b5a1964f9762c7bfec57d522af422ebbfef4f7bd6e3e99a9a1f3a98933aadde2d28b8491e37dc7db851bda73" }, { "alg" : "SHA-384", "content" : "62ef23e01eccde331a16aadf533ea7e77ce0fc76228fea01c0da46b73196208998180ed2deb1909c860a5f8f7dab48b8" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/org.apache.flink/flink-hadoop-fs@1.17.1?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://flink.apache.org/flink-filesystems/flink-hadoop-fs" }, { "type" : "distribution", "url" : "https://repository.apache.org/service/local/staging/deploy/maven2" }, { "type" : "mailing-list", "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/" }, { "type" : "vcs", "url" : "https://github.com/apache/flink/flink-filesystems/flink-hadoop-fs" } ], "type" : "library", "bom-ref" : "pkg:maven/org.apache.flink/flink-hadoop-fs@1.17.1?type=jar" }, { "publisher" : "The Apache Software Foundation", "group" : "commons-io", "name" : "commons-io", "version" : "2.11.0", "description" : "The Apache Commons IO library contains utility classes, stream implementations, file filters, file comparators, endian transformation classes, and much more.", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "3b4b7ccfaeceeac240b804839ee1a1ca" }, { "alg" : "SHA-1", "content" : "a2503f302b11ebde7ebc3df41daebe0e4eea3689" }, { "alg" : "SHA-256", "content" : "961b2f6d87dbacc5d54abf45ab7a6e2495f89b75598962d8c723cea9bc210908" }, { "alg" : "SHA-512", "content" : "5bd78eed456ede30119319c5bed8e3e4c443b6fd7bdb3a7a5686647bd83094d0c3e2832a7575cfb60e4ef25f08106b93476939d3adcfecf5533cc030b3039e10" }, { "alg" : "SHA-384", "content" : "114f1e324d90ad887c177876d410f5787a8e8da6c48d4b2862d365802c0efded3a88cb24046976bf6276cadad3712f0f" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/commons-io/commons-io@2.11.0?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://commons.apache.org/proper/commons-io/" }, { "type" : "build-system", "url" : "https://builds.apache.org/" }, { "type" : "distribution", "url" : "https://repository.apache.org/service/local/staging/deploy/maven2" }, { "type" : "issue-tracker", "url" : "https://issues.apache.org/jira/browse/IO" }, { "type" : "mailing-list", "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/" }, { "type" : "vcs", "url" : "https://gitbox.apache.org/repos/asf?p=commons-io.git" } ], "type" : "library", "bom-ref" : "pkg:maven/commons-io/commons-io@2.11.0?type=jar" }, { "publisher" : "The Apache Software Foundation", "group" : "org.apache.flink", "name" : "flink-shaded-netty", "version" : "4.1.82.Final-16.1", "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.", "hashes" : [ { "alg" : "MD5", "content" : "587a1560d64c8e3016f2a6fa05434839" }, { "alg" : "SHA-1", "content" : "cfe139947f5cefe7429993b68d60498d2eb59965" }, { "alg" : "SHA-256", "content" : "fc5c3f267ab9a160ad075a1d8168100e6190aae4eb57861023e47356eabe2306" }, { "alg" : "SHA-512", "content" : "c6c54ea5b34f45622291c8a080fb566a4a795b0a07c941840fe767d5b0a9de84dde78270c96c0a9ffd06b56e630710b767ac5991f77c031e3e40aa41a8f15a02" }, { "alg" : "SHA-384", "content" : "93633a19903a4807f49ce87f141f6e0148d2bec7344f3c019c37f98861f2893efe0a29fb5da9152363459c2ed458e1de" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/org.apache.flink/flink-shaded-netty@4.1.82.Final-16.1?type=jar", "externalReferences" : [ { "type" : "website", "url" : "http://flink.apache.org/flink-shaded-netty" }, { "type" : "distribution", "url" : "https://repository.apache.org/service/local/staging/deploy/maven2" }, { "type" : "mailing-list", "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/" }, { "type" : "vcs", "url" : "https://github.com/apache/flink-shaded/flink-shaded-netty" } ], "type" : "library", "bom-ref" : "pkg:maven/org.apache.flink/flink-shaded-netty@4.1.82.Final-16.1?type=jar" }, { "publisher" : "The Apache Software Foundation", "group" : "org.apache.flink", "name" : "flink-shaded-zookeeper-3", "version" : "3.7.1-16.1", "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "af578f2f1293b405fb145a35375ed7fe" }, { "alg" : "SHA-1", "content" : "99500524021365e7b33a873e4102dbed99c2b8fb" }, { "alg" : "SHA-256", "content" : "c5475aa90a9fe2d5b898129386030994777f4e0906b4e983b4969415e315e1e2" }, { "alg" : "SHA-512", "content" : "54d46d83fc7cf8c816758988a50b64366f21e121148ca348b1b98f5a293e4f91dac273d7e848a92b2a21f2a0eeb130b87246ec47c7d1ba77991ebbbc297c7fb3" }, { "alg" : "SHA-384", "content" : "df2f43f9e7837296ae7913041b3f9611b409cdce3ce03f04db3df84f0150dd3534467481d2b5c7853d590b840d5b084c" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/org.apache.flink/flink-shaded-zookeeper-3@3.7.1-16.1?type=jar", "externalReferences" : [ { "type" : "website", "url" : "http://flink.apache.org/flink-shaded-zookeeper-parent/flink-shaded-zookeeper-3" }, { "type" : "distribution", "url" : "https://repository.apache.org/service/local/staging/deploy/maven2" }, { "type" : "mailing-list", "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/" }, { "type" : "vcs", "url" : "https://github.com/apache/flink-shaded/flink-shaded-zookeeper-parent/flink-shaded-zookeeper-3" } ], "type" : "library", "bom-ref" : "pkg:maven/org.apache.flink/flink-shaded-zookeeper-3@3.7.1-16.1?type=jar" }, { "publisher" : "The Apache Software Foundation", "group" : "commons-cli", "name" : "commons-cli", "version" : "1.5.0", "description" : "Apache Commons CLI provides a simple API for presenting, processing and validating a Command Line Interface.", "hashes" : [ { "alg" : "MD5", "content" : "6c3b2052160144196118b1f019504388" }, { "alg" : "SHA-1", "content" : "dc98be5d5390230684a092589d70ea76a147925c" }, { "alg" : "SHA-256", "content" : "bc8bb01fc0fad250385706e20f927ddcff6173f6339b387dc879237752567ac6" }, { "alg" : "SHA-512", "content" : "b78ac2b418e9e9e7d0bc866664577199d320408a6f03151b3789bac365c986dd526df853599e633d7e50fe136cbf3eb9ce50c9cfa0ad38c3cc8d8ee416f61c40" }, { "alg" : "SHA-384", "content" : "a7a2daa807c4007c506b5100f0a9b526c0052c4e1f6b699904ef9d2aba8195b6003dc4d47ca133b15e2f3e830bdbe6c4" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/commons-cli/commons-cli@1.5.0?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://commons.apache.org/proper/commons-cli/" }, { "type" : "build-system", "url" : "https://builds.apache.org/" }, { "type" : "distribution", "url" : "https://repository.apache.org/service/local/staging/deploy/maven2" }, { "type" : "issue-tracker", "url" : "https://issues.apache.org/jira/browse/CLI" }, { "type" : "mailing-list", "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/" }, { "type" : "vcs", "url" : "https://gitbox.apache.org/repos/asf?p=commons-cli.git" } ], "type" : "library", "bom-ref" : "pkg:maven/commons-cli/commons-cli@1.5.0?type=jar" }, { "publisher" : "Shigeru Chiba, www.javassist.org", "group" : "org.javassist", "name" : "javassist", "version" : "3.24.0-GA", "description" : "Javassist (JAVA programming ASSISTant) makes Java bytecode manipulation simple. It is a class library for editing bytecodes in Java.", "hashes" : [ { "alg" : "MD5", "content" : "23fd22d0d089ddfac567a39ce0cb1a91" }, { "alg" : "SHA-1", "content" : "d7466fc2e3af7c023e95c510f06448ad29b225b3" }, { "alg" : "SHA-256", "content" : "aba81efa678b621203fb89aeff81d6f126f7a9dd709401e5609c42976684ae23" }, { "alg" : "SHA-512", "content" : "e57dad74a3edef837ece841d06e4a7c96ffecab8fbcba56fe5f7eccd662f0c0d757880a6073793a8c75ad7a0a1d146346b75cdbfe4fd8a271048a54446e5d1a2" }, { "alg" : "SHA-384", "content" : "4867afdb7522b3dbfa10a51264ac6c15a2a8083d16c8dbef318275d24687768f35130b1c17d8407ca8ecf855abd83dff" } ], "licenses" : [ { "license" : { "id" : "MPL-1.1" } }, { "license" : { "id" : "LGPL-2.1-only" } }, { "license" : { "id" : "Apache-2.0", "url" : "https://www.apache.org/licenses/LICENSE-2.0" } } ], "purl" : "pkg:maven/org.javassist/javassist@3.24.0-GA?type=jar", "externalReferences" : [ { "type" : "website", "url" : "http://www.javassist.org/" }, { "type" : "distribution", "url" : "https://repository.jboss.org/nexus/service/local/staging/deploy/maven2/" }, { "type" : "issue-tracker", "url" : "https://jira.jboss.org/jira/browse/JASSIST/" }, { "type" : "vcs", "url" : "scm:git:git@github.com:jboss-javassist/javassist.git" } ], "type" : "library", "bom-ref" : "pkg:maven/org.javassist/javassist@3.24.0-GA?type=jar" }, { "publisher" : "xerial.org", "group" : "org.xerial.snappy", "name" : "snappy-java", "version" : "1.1.8.3", "description" : "snappy-java: A fast compression/decompression library", "hashes" : [ { "alg" : "MD5", "content" : "fdacc9d6d764fe918daca743a67ce24f" }, { "alg" : "SHA-1", "content" : "2c58fa5745831afa3a4290c2ce15553ff13ad0ab" }, { "alg" : "SHA-256", "content" : "d371202c03bd165f6fd660f63ae597fbb4c91b81bfc6e12cf6b2a93ace93a800" }, { "alg" : "SHA-512", "content" : "5f3f9a391a70c1898610892bca07bb87b867caf4e6d959800a3abdd45435b4af52a9fdd82d7aefe0bd47af169203f83c92450e327c3b8bf47373e8030004344b" }, { "alg" : "SHA-384", "content" : "bc9e1d3ad7dfbd35fc1e7e9287f254eca5fc1f20234558bd963e1f504b55c4d2aacf424f05b211e24846d4d158fb3c91" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0", "url" : "https://www.apache.org/licenses/LICENSE-2.0" } } ], "purl" : "pkg:maven/org.xerial.snappy/snappy-java@1.1.8.3?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://github.com/xerial/snappy-java" }, { "type" : "vcs", "url" : "https://github.com/xerial/snappy-java" } ], "type" : "library", "bom-ref" : "pkg:maven/org.xerial.snappy/snappy-java@1.1.8.3?type=jar" }, { "group" : "org.lz4", "name" : "lz4-java", "version" : "1.8.0", "description" : "Java ports and bindings of the LZ4 compression algorithm and the xxHash hashing algorithm", "hashes" : [ { "alg" : "MD5", "content" : "936a927700aa8fc3b75d21d7571171f6" }, { "alg" : "SHA-1", "content" : "4b986a99445e49ea5fbf5d149c4b63f6ed6c6780" }, { "alg" : "SHA-256", "content" : "d74a3334fb35195009b338a951f918203d6bbca3d1d359033dc33edd1cadc9ef" }, { "alg" : "SHA-512", "content" : "98d59086a6021ca571d9c1d64b715e43044c730e1ac563f514c40cf44302615d30378b6d5cc69990446522de6260dc8e7b303e3990a3139dc326d058dfb6dbd9" }, { "alg" : "SHA-384", "content" : "8e3f2acdbb41a00c4d9cc5f328e63fb626ac7c6c84e1bf9502e2fcc76a591b2b819b2d27b29925ff986b95c297b30e2c" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/org.lz4/lz4-java@1.8.0?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://github.com/lz4/lz4-java" }, { "type" : "vcs", "url" : "git://github.com/lz4/lz4-java.git" } ], "type" : "library", "bom-ref" : "pkg:maven/org.lz4/lz4-java@1.8.0?type=jar" }, { "publisher" : "The Apache Software Foundation", "group" : "org.apache.flink", "name" : "flink-java", "version" : "1.17.1", "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "387ac7efbd3ba10a609e411d25cf1636" }, { "alg" : "SHA-1", "content" : "dd0a38bcaad30ab2c04831fc6fdaa85e29dd2fb1" }, { "alg" : "SHA-256", "content" : "f357c30275677e9b18236661c67068babf5ba9e39f638b289071ac232192e3f6" }, { "alg" : "SHA-512", "content" : "eaa47135a00cd02f5e0d140edace72430cafe6430c28f4f26d59371ce02ae2970e609173f3a3993320ca5d611e2523ef5131ba3f915b1586b7d40414538e4e9b" }, { "alg" : "SHA-384", "content" : "d584988d5789b0b24d7403715d4cb16e31c165a0efec0b498e23bba26713758c410308ec875d3d70df5c647873d5de2f" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/org.apache.flink/flink-java@1.17.1?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://flink.apache.org/flink-java" }, { "type" : "distribution", "url" : "https://repository.apache.org/service/local/staging/deploy/maven2" }, { "type" : "mailing-list", "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/" }, { "type" : "vcs", "url" : "https://github.com/apache/flink/flink-java" } ], "type" : "library", "bom-ref" : "pkg:maven/org.apache.flink/flink-java@1.17.1?type=jar" }, { "publisher" : "com.twitter", "group" : "com.twitter", "name" : "chill-java", "version" : "0.7.6", "description" : "chill-java", "hashes" : [ { "alg" : "MD5", "content" : "886eb8ef6db3880433f4a8e10ef37300" }, { "alg" : "SHA-1", "content" : "a74b8d019d6941d82ff86d1612e382f4a0ae8259" }, { "alg" : "SHA-256", "content" : "f7c41a2257be11e6c9bca97095c8f4b0299626941a3508469f90622eb8f8368e" }, { "alg" : "SHA-512", "content" : "dc9973909b87cfb85ee45c90662612dd2bc137b7510172221eb47020f76b23eb3ea76c6b4fba4cee5d81e910f87aba71359136d33ae0f6424e3ce7123bf77dbf" }, { "alg" : "SHA-384", "content" : "41e7faed7c2c22987868fba7cd6dac0d59d174d82d841ba4e5aa8675cc9265bf9d9df021553a781cfa24c4c9c7a35c5c" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/com.twitter/chill-java@0.7.6?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://github.com/twitter/chill" } ], "type" : "library", "bom-ref" : "pkg:maven/com.twitter/chill-java@0.7.6?type=jar" }, { "publisher" : "The Apache Software Foundation", "group" : "org.apache.flink", "name" : "flink-shaded-guava", "version" : "30.1.1-jre-16.1", "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "74bc641198b30c213cd9a2754297100d" }, { "alg" : "SHA-1", "content" : "ad8725e964b6c2c0df16877f4132ad348c4ff09c" }, { "alg" : "SHA-256", "content" : "d5ea841b0a51c7db4ecc48c96c0f334da40a9980645cf6d9e6e2b04b2441315c" }, { "alg" : "SHA-512", "content" : "801c9fae8aaf7cec12f82e9d84b2e93648b4f7e58a4f240029db17b922c394ade14082e2022e3036bd33edaf1eb1bb0881570345270bb8820ab827efc9e42aea" }, { "alg" : "SHA-384", "content" : "0b3aca631b15d8e5617952c2c18bed624e0f24b24ca7fb129c4ceb28c416e6e59d0acec3d7f624a7534fb2e9edfb83b6" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/org.apache.flink/flink-shaded-guava@30.1.1-jre-16.1?type=jar", "externalReferences" : [ { "type" : "website", "url" : "http://flink.apache.org/flink-shaded-guava" }, { "type" : "distribution", "url" : "https://repository.apache.org/service/local/staging/deploy/maven2" }, { "type" : "mailing-list", "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/" }, { "type" : "vcs", "url" : "https://github.com/apache/flink-shaded/flink-shaded-guava" } ], "type" : "library", "bom-ref" : "pkg:maven/org.apache.flink/flink-shaded-guava@30.1.1-jre-16.1?type=jar" }, { "publisher" : "The Apache Software Foundation", "group" : "org.apache.commons", "name" : "commons-math3", "version" : "3.6.1", "description" : "The Apache Commons Math project is a library of lightweight, self-contained mathematics and statistics components addressing the most common practical problems not immediately available in the Java programming language or commons-lang.", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "5b730d97e4e6368069de1983937c508e" }, { "alg" : "SHA-1", "content" : "e4ba98f1d4b3c80ec46392f25e094a6a2e58fcbf" }, { "alg" : "SHA-256", "content" : "1e56d7b058d28b65abd256b8458e3885b674c1d588fa43cd7d1cbb9c7ef2b308" }, { "alg" : "SHA-512", "content" : "8bc2438b3b4d9a6be4a47a58410b2d4d0e56e05787ab24badab8cbc9075d61857e8d2f0bffedad33f18f8a356541d00f80a8597b5dedb995be8480d693d03226" }, { "alg" : "SHA-384", "content" : "95d1186d9ca06a3ea2e6437ddec3a55698e2493d3e72f6f554746b74fa929892bd71a2ab501a4e7b1ce56b7cd64e7ab4" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/org.apache.commons/commons-math3@3.6.1?type=jar", "externalReferences" : [ { "type" : "website", "url" : "http://commons.apache.org/proper/commons-math/" }, { "type" : "build-system", "url" : "https://continuum-ci.apache.org/" }, { "type" : "distribution", "url" : "https://repository.apache.org/service/local/staging/deploy/maven2" }, { "type" : "issue-tracker", "url" : "http://issues.apache.org/jira/browse/MATH" }, { "type" : "mailing-list", "url" : "http://mail-archives.apache.org/mod_mbox/commons-user/" }, { "type" : "vcs", "url" : "https://git-wip-us.apache.org/repos/asf?p=commons-math.git" } ], "type" : "library", "bom-ref" : "pkg:maven/org.apache.commons/commons-math3@3.6.1?type=jar" }, { "publisher" : "The Apache Software Foundation", "group" : "org.apache.flink", "name" : "flink-shaded-force-shading", "version" : "16.1", "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.", "scope" : "optional", "hashes" : [ { "alg" : "MD5", "content" : "0f703324b629fbc0d0cbf22375515477" }, { "alg" : "SHA-1", "content" : "5040816ebca54b5bb4d5bb98b741ff77da59505b" }, { "alg" : "SHA-256", "content" : "44ab80c42c380bc813bbf477256a4f4334e44088c8fb1b34d3c867733e54c664" }, { "alg" : "SHA-512", "content" : "bf56dc058175101f58f2abfb3307349e9e911743f118c9309e0b8d3860f164c2c88b5fa1113e2270c1533bf37dc8102f1482099f11bdaa5acf316b7a9808093b" }, { "alg" : "SHA-384", "content" : "3b7c079f14bfeb02219e4430fa2bbe66e9000596116c5247f98e0b0852bd59877559358704c8be7d18c0fbed1fff0880" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/org.apache.flink/flink-shaded-force-shading@16.1?type=jar", "externalReferences" : [ { "type" : "website", "url" : "http://flink.apache.org/flink-shaded-force-shading" }, { "type" : "distribution", "url" : "https://repository.apache.org/service/local/staging/deploy/maven2" }, { "type" : "mailing-list", "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/" }, { "type" : "vcs", "url" : "https://github.com/apache/flink-shaded/flink-shaded-force-shading" } ], "type" : "library", "bom-ref" : "pkg:maven/org.apache.flink/flink-shaded-force-shading@16.1?type=jar" }, { "publisher" : "QOS.ch", "group" : "org.slf4j", "name" : "slf4j-api", "version" : "1.7.36", "description" : "The slf4j API", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "872da51f5de7f3923da4de871d57fd85" }, { "alg" : "SHA-1", "content" : "6c62681a2f655b49963a5983b8b0950a6120ae14" }, { "alg" : "SHA-256", "content" : "d3ef575e3e4979678dc01bf1dcce51021493b4d11fb7f1be8ad982877c16a1c0" }, { "alg" : "SHA-512", "content" : "f9b033fc019a44f98b16048da7e2b59edd4a6a527ba60e358f65ab88e0afae03a9340f1b3e8a543d49fa542290f499c5594259affa1ff3e6e7bf3b428d4c610b" }, { "alg" : "SHA-384", "content" : "2b14ad035877087157e379d3277dcdcd79e58d6bdb147c47d29e377d75ce53ad42cafbf22f5fb7827c7e946ff4876b9a" } ], "licenses" : [ { "license" : { "id" : "MIT", "url" : "https://opensource.org/licenses/MIT" } } ], "purl" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar", "externalReferences" : [ { "type" : "website", "url" : "http://www.slf4j.org" }, { "type" : "distribution", "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type" : "vcs", "url" : "https://github.com/qos-ch/slf4j/slf4j-api" } ], "type" : "library", "bom-ref" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar" }, { "group" : "com.google.code.findbugs", "name" : "jsr305", "version" : "1.3.9", "description" : "JSR305 Annotations for Findbugs", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "1d5a772e400b04bb67a7ef4a0e0996d8" }, { "alg" : "SHA-1", "content" : "40719ea6961c0cb6afaeb6a921eaa1f6afd4cfdf" }, { "alg" : "SHA-256", "content" : "905721a0eea90a81534abb7ee6ef4ea2e5e645fa1def0a5cd88402df1b46c9ed" }, { "alg" : "SHA-512", "content" : "06da282cfd8e30d9f8cf17702b8709172b00e22b75a627a1d85f8989615b8a1a401bc25d9aee7b14aed1d9b5df73bf2ea8d66f9c8468d9577c29f0ccfa2cc70a" }, { "alg" : "SHA-384", "content" : "56e6b41ef62eb5edfed0203802cefae9c2df86388148e420bb0c687abb2b80e14d5c2a82d5b35dce4badaf148f94eada" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar", "externalReferences" : [ { "type" : "website", "url" : "http://findbugs.sourceforge.net/" }, { "type" : "vcs", "url" : "http://findbugs.googlecode.com/svn/trunk/" } ], "type" : "library", "bom-ref" : "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar" }, { "publisher" : "Joe Walnes, Henri Tremblay, Leonardo Mesquita", "group" : "org.objenesis", "name" : "objenesis", "version" : "2.1", "description" : "A library for instantiating Java objects", "hashes" : [ { "alg" : "MD5", "content" : "32ccb1d20a42b5aaaceb90c9082a2efa" }, { "alg" : "SHA-1", "content" : "87c0ea803b69252868d09308b4618f766f135a96" }, { "alg" : "SHA-256", "content" : "c74330cc6b806c804fd37e74487b4fe5d7c2750c5e15fbc6efa13bdee1bdef80" }, { "alg" : "SHA-512", "content" : "1dec9ee30812b8006e536a2749c5781ccdc4b446539efb6fa534f22e70562033876bf2eb22c6946d617695729bd65f0f65b984f15f05ac63db5bed215e74427c" }, { "alg" : "SHA-384", "content" : "657b8a3b80a5475f198425396f7264301f9e0f3ad5dc336ef0c7b46874f5544861a8a2fd48cdb5f672e199a6935c19d1" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/org.objenesis/objenesis@2.1?type=jar", "externalReferences" : [ { "type" : "website", "url" : "http://objenesis.org" }, { "type" : "distribution", "url" : "http://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type" : "vcs", "url" : "https://github.com/easymock/easymock/objenesis" } ], "type" : "library", "bom-ref" : "pkg:maven/org.objenesis/objenesis@2.1?type=jar" } ], "dependencies" : [ { "ref" : "pkg:maven/org.apache.flink/flink-streaming-java@1.17.1?type=jar", "dependsOn" : [ "pkg:maven/org.apache.flink/flink-core@1.17.1?type=jar", "pkg:maven/org.apache.flink/flink-file-sink-common@1.17.1?type=jar", "pkg:maven/org.apache.flink/flink-runtime@1.17.1?type=jar", "pkg:maven/org.apache.flink/flink-java@1.17.1?type=jar", "pkg:maven/org.apache.flink/flink-shaded-guava@30.1.1-jre-16.1?type=jar", "pkg:maven/org.apache.commons/commons-math3@3.6.1?type=jar", "pkg:maven/org.apache.flink/flink-shaded-force-shading@16.1?type=jar", "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar", "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar" ] }, { "ref" : "pkg:maven/org.apache.flink/flink-core@1.17.1?type=jar", "dependsOn" : [ "pkg:maven/org.apache.flink/flink-annotations@1.17.1?type=jar", "pkg:maven/org.apache.flink/flink-metrics-core@1.17.1?type=jar", "pkg:maven/org.apache.flink/flink-shaded-asm-9@9.3-16.1?type=jar", "pkg:maven/org.apache.flink/flink-shaded-jackson@2.13.4-16.1?type=jar", "pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar", "pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar", "pkg:maven/com.esotericsoftware.kryo/kryo@2.24.0?type=jar", "pkg:maven/commons-collections/commons-collections@3.2.2?type=jar", "pkg:maven/org.apache.commons/commons-compress@1.21?type=jar", "pkg:maven/org.apache.flink/flink-shaded-guava@30.1.1-jre-16.1?type=jar", "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar", "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar", "pkg:maven/org.apache.flink/flink-shaded-force-shading@16.1?type=jar" ] }, { "ref" : "pkg:maven/org.apache.flink/flink-annotations@1.17.1?type=jar", "dependsOn" : [ "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar", "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar", "pkg:maven/org.apache.flink/flink-shaded-force-shading@16.1?type=jar" ] }, { "ref" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/org.apache.flink/flink-shaded-force-shading@16.1?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/org.apache.flink/flink-metrics-core@1.17.1?type=jar", "dependsOn" : [ "pkg:maven/org.apache.flink/flink-annotations@1.17.1?type=jar", "pkg:maven/org.apache.flink/flink-shaded-force-shading@16.1?type=jar" ] }, { "ref" : "pkg:maven/org.apache.flink/flink-shaded-asm-9@9.3-16.1?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/org.apache.flink/flink-shaded-jackson@2.13.4-16.1?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar", "dependsOn" : [ "pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar" ] }, { "ref" : "pkg:maven/com.esotericsoftware.kryo/kryo@2.24.0?type=jar", "dependsOn" : [ "pkg:maven/com.esotericsoftware.minlog/minlog@1.2?type=jar", "pkg:maven/org.objenesis/objenesis@2.1?type=jar" ] }, { "ref" : "pkg:maven/com.esotericsoftware.minlog/minlog@1.2?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/org.objenesis/objenesis@2.1?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/commons-collections/commons-collections@3.2.2?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/org.apache.commons/commons-compress@1.21?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/org.apache.flink/flink-shaded-guava@30.1.1-jre-16.1?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/org.apache.flink/flink-file-sink-common@1.17.1?type=jar", "dependsOn" : [ "pkg:maven/org.apache.flink/flink-shaded-force-shading@16.1?type=jar" ] }, { "ref" : "pkg:maven/org.apache.flink/flink-runtime@1.17.1?type=jar", "dependsOn" : [ "pkg:maven/org.apache.flink/flink-core@1.17.1?type=jar", "pkg:maven/org.apache.flink/flink-rpc-core@1.17.1?type=jar", "pkg:maven/org.apache.flink/flink-rpc-akka-loader@1.17.1?type=jar", "pkg:maven/org.apache.flink/flink-java@1.17.1?type=jar", "pkg:maven/org.apache.flink/flink-queryable-state-client-java@1.17.1?type=jar", "pkg:maven/org.apache.flink/flink-hadoop-fs@1.17.1?type=jar", "pkg:maven/commons-io/commons-io@2.11.0?type=jar", "pkg:maven/org.apache.flink/flink-shaded-netty@4.1.82.Final-16.1?type=jar", "pkg:maven/org.apache.flink/flink-shaded-guava@30.1.1-jre-16.1?type=jar", "pkg:maven/org.apache.flink/flink-shaded-jackson@2.13.4-16.1?type=jar", "pkg:maven/org.apache.flink/flink-shaded-zookeeper-3@3.7.1-16.1?type=jar", "pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar", "pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar", "pkg:maven/commons-cli/commons-cli@1.5.0?type=jar", "pkg:maven/org.javassist/javassist@3.24.0-GA?type=jar", "pkg:maven/org.xerial.snappy/snappy-java@1.1.8.3?type=jar", "pkg:maven/org.lz4/lz4-java@1.8.0?type=jar", "pkg:maven/org.apache.flink/flink-shaded-force-shading@16.1?type=jar", "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar", "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar" ] }, { "ref" : "pkg:maven/org.apache.flink/flink-rpc-core@1.17.1?type=jar", "dependsOn" : [ "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar", "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar", "pkg:maven/org.apache.flink/flink-shaded-force-shading@16.1?type=jar" ] }, { "ref" : "pkg:maven/org.apache.flink/flink-rpc-akka-loader@1.17.1?type=jar", "dependsOn" : [ "pkg:maven/org.apache.flink/flink-core@1.17.1?type=jar", "pkg:maven/org.apache.flink/flink-rpc-core@1.17.1?type=jar", "pkg:maven/org.apache.flink/flink-shaded-force-shading@16.1?type=jar", "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar", "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar" ] }, { "ref" : "pkg:maven/org.apache.flink/flink-java@1.17.1?type=jar", "dependsOn" : [ "pkg:maven/org.apache.flink/flink-core@1.17.1?type=jar", "pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar", "pkg:maven/org.apache.commons/commons-math3@3.6.1?type=jar", "pkg:maven/com.twitter/chill-java@0.7.6?type=jar", "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar", "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar", "pkg:maven/org.apache.flink/flink-shaded-force-shading@16.1?type=jar" ] }, { "ref" : "pkg:maven/org.apache.commons/commons-math3@3.6.1?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/com.twitter/chill-java@0.7.6?type=jar", "dependsOn" : [ "pkg:maven/com.esotericsoftware.kryo/kryo@2.24.0?type=jar" ] }, { "ref" : "pkg:maven/org.apache.flink/flink-queryable-state-client-java@1.17.1?type=jar", "dependsOn" : [ "pkg:maven/org.apache.flink/flink-shaded-netty@4.1.82.Final-16.1?type=jar", "pkg:maven/org.apache.flink/flink-shaded-guava@30.1.1-jre-16.1?type=jar", "pkg:maven/org.apache.flink/flink-shaded-force-shading@16.1?type=jar" ] }, { "ref" : "pkg:maven/org.apache.flink/flink-shaded-netty@4.1.82.Final-16.1?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/org.apache.flink/flink-hadoop-fs@1.17.1?type=jar", "dependsOn" : [ "pkg:maven/org.apache.flink/flink-core@1.17.1?type=jar", "pkg:maven/org.apache.flink/flink-shaded-force-shading@16.1?type=jar" ] }, { "ref" : "pkg:maven/commons-io/commons-io@2.11.0?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/org.apache.flink/flink-shaded-zookeeper-3@3.7.1-16.1?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/commons-cli/commons-cli@1.5.0?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/org.javassist/javassist@3.24.0-GA?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/org.xerial.snappy/snappy-java@1.1.8.3?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/org.lz4/lz4-java@1.8.0?type=jar", "dependsOn" : [ ] } ] }