<?xml version="1.0" encoding="UTF-8"?>
<bom serialNumber="urn:uuid:e4a46ceb-dfbd-3bd7-837c-7f07b840553b" version="1" xmlns="http://cyclonedx.org/schema/bom/1.6">
  <metadata>
    <lifecycles>
      <lifecycle>
        <phase>build</phase>
      </lifecycle>
    </lifecycles>
    <tools>
      <components>
        <component type="library">
          <author>OWASP Foundation</author>
          <group>org.cyclonedx</group>
          <name>cyclonedx-maven-plugin</name>
          <version>2.9.1</version>
          <description>CycloneDX Maven plugin</description>
          <hashes>
            <hash alg="MD5">9c7a565cf28cce58557d0c621c5ea4b1</hash>
            <hash alg="SHA-1">be882d5a22050bfa9d19090b1420c188617d0e1c</hash>
            <hash alg="SHA-256">698e0f37184a5b28c245c4065fd036dfce253b52f82fbb7113d81d36326cc249</hash>
            <hash alg="SHA-512">c0f0b11026858166f872a2eb54719492e5cecaa0bc9cd6b30b3ecb4a174eed220f4a1b5829d18d6734128e778d3cb3db7ffed177c92866133129cb29081814a0</hash>
            <hash alg="SHA-384">d80964707dfe5caca8c70521d5066f57589304c0a657e6fbc7c0614ea0fc7b3b3dbe7778361eee0f54ba111e9cb0ffcb</hash>
            <hash alg="SHA3-384">80bc3a275d9514bc457461ff52a72add8c7ecbbc01d8912efce57139016c544ee776981851be0a58fa977ab4221f703f</hash>
            <hash alg="SHA3-256">142317d6f245390f4fd2d0c100b16281b8dfc5c0c2cff86943bdcc97039cb699</hash>
            <hash alg="SHA3-512">af0fb9137c90b65d1a07f72e4d51ae509956cdb8800f35c961b037cdda1fe4a14ce3b496cef71ba85f1621affcfe29cd42704ae4191ff0b090a9602087c8997b</hash>
          </hashes>
        </component>
      </components>
    </tools>
    <component type="library" bom-ref="pkg:maven/org.apache.maven/maven-plugin-api@3.9.14?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven</group>
      <name>maven-plugin-api</name>
      <version>3.9.14</version>
      <description>The API for plugins - Mojos - development.</description>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven/maven-plugin-api@3.9.14?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://maven.apache.org/ref/3.9.14/maven-plugin-api/</url>
        </reference>
        <reference type="build-system">
          <url>https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/</url>
        </reference>
        <reference type="distribution">
          <url>https://maven.apache.org/download.html</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/apache/maven/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://lists.apache.org/list.html?users@maven.apache.org</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/maven/tree/maven-3.9.14/maven-plugin-api</url>
        </reference>
      </externalReferences>
    </component>
    <properties>
      <property name="maven.goal">makeBom</property>
      <property name="maven.scopes">compile,provided,runtime,system</property>
      <property name="cdx:reproducible">enabled</property>
    </properties>
  </metadata>
  <components>
    <component type="library" bom-ref="pkg:maven/org.apache.maven/maven-model@3.9.14?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven</group>
      <name>maven-model</name>
      <version>3.9.14</version>
      <description>Model for Maven POM (Project Object Model)</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">c6f3bb5fdf95487ac8e66cdb7b0d8fb5</hash>
        <hash alg="SHA-1">623d1a652d2657577be0c8d3c249a4ab2830a843</hash>
        <hash alg="SHA-256">684f573b1b37933c5d62c1c21d5da4335b049fb8b3d9754281597a38dbbc4044</hash>
        <hash alg="SHA-512">b2a261437489fa43ab282407057643ea658a457bedaf4b21a02f1d0d1890775283dffc5e47d074e2149e8cc0f91b1858eb10ce1e794a729bf35c5ecabc9b48d7</hash>
        <hash alg="SHA-384">9d757ddf1d9d16b925ae2801b687c60f767fd32df6c47a7505103d479a93004fb185ea58b6524301bc938da4aac290d3</hash>
        <hash alg="SHA3-384">dc92c4b912ded35780c875f823934103b47b6b58a4ee017f382fc49641788ed698e81398002447854d92d01c48f469b5</hash>
        <hash alg="SHA3-256">78537489f11801a29c9534b7a0dcb4667ed70d8a58aa904fbc0bc07f5e85fbcd</hash>
        <hash alg="SHA3-512">71357566a2b3c4283479ae37cdfb3a866b86df99e57b1d2721760ea0bf58c63bcee644f68464cfc18bc00f26d548ac7cf844e0bea1227e46d81f57a206cf3607</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven/maven-model@3.9.14?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://maven.apache.org/ref/3.9.14/maven-model/</url>
        </reference>
        <reference type="build-system">
          <url>https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/</url>
        </reference>
        <reference type="distribution">
          <url>https://maven.apache.org/download.html</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/apache/maven/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://lists.apache.org/list.html?users@maven.apache.org</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/maven/tree/maven-3.9.14/maven-model</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.maven/maven-artifact@3.9.14?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven</group>
      <name>maven-artifact</name>
      <version>3.9.14</version>
      <description>Maven is a software build management and
    comprehension tool. Based on the concept of a project object model:
    builds, dependency management, documentation creation, site
    publication, and distribution publication are all controlled from
    the declarative file. Maven can be extended by plugins to utilise a
    number of other development tools for reporting or the build
    process.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">0782702122cfd171170c7e6b9ab9837b</hash>
        <hash alg="SHA-1">921c4f90ec434e29b399796077a08459571d048a</hash>
        <hash alg="SHA-256">1effa70eacbf0aa4d94ad9c7b225be031ce4317fa07da59e23b02b3e4e1231a3</hash>
        <hash alg="SHA-512">77d8ae972b794631744062ab2ada293b362d5e4d678bc2b859dd9356db3a58eb6d477349ffd2d3f1e9c88117666beeae659cbbeb9f7fcd190f75a67685c6ba37</hash>
        <hash alg="SHA-384">84b1f920592769758c486694fc53b05bc99518f310eae9effe1bd9c2d21bb2984aa2554af77d8dc07e1e499ecdbe2726</hash>
        <hash alg="SHA3-384">eff1c24b4b66fb794ea257754ccddeec0e9bebd7689089268770611688ff41ef977c6674e449214cf572bdc9e547a1b7</hash>
        <hash alg="SHA3-256">f73ca1e0474ff36f31751e99b2f8f7a0c2e4a9a5edd98e72f12a50491457d7c2</hash>
        <hash alg="SHA3-512">2fcfd8fbe196adbd85ef415c0a0c980c8f2d424037e556fc2bd85f725f502edef43ecdceffe54db16159e313753c00914a97d34030dea2ad5ae4f50aa4c5b80c</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven/maven-artifact@3.9.14?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://maven.apache.org/ref/3.9.14/maven-artifact/</url>
        </reference>
        <reference type="build-system">
          <url>https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/</url>
        </reference>
        <reference type="distribution">
          <url>https://maven.apache.org/download.html</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/apache/maven/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://lists.apache.org/list.html?users@maven.apache.org</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/maven/tree/maven-3.9.14/maven-artifact</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@1.0.0?type=jar">
      <publisher>The Eclipse Foundation</publisher>
      <group>org.eclipse.sisu</group>
      <name>org.eclipse.sisu.plexus</name>
      <version>1.0.0</version>
      <description>Plexus-JSR330 adapter; adds Plexus support to the Sisu-Inject container</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">fb07aece41f034fea46b022e2756cd7c</hash>
        <hash alg="SHA-1">873767e95597c9e31749123a408bd4949c29a46c</hash>
        <hash alg="SHA-256">865b5300034fc08c790215d7d97f141914c932191bef9338a7dcef589f7536e9</hash>
        <hash alg="SHA-512">d7236718e1ede4f34d6f2ebaaa0b772370bf3c857a477cf80a7f6a08aa69312c3c53d2e4e3625d3d71906ae995921854b3687267cb52028f5528a3491bf1ceb2</hash>
        <hash alg="SHA-384">92cba3eb0d3b86940d7e0aa07667e57344e4121219464cb8edbeecf79e7fd74567c071e24001ed847a125b5e6741335e</hash>
        <hash alg="SHA3-384">15d0d03f5679fba496d3d72bd0f72fe8d0fcfdc789291b19447e3aa032d6587e248ca0eb0a3bfd997b25bc5b3ca77c72</hash>
        <hash alg="SHA3-256">c5f376d190b14539e533f43dda8b0c9798dfee296575e25407a3b070d1d1ee7a</hash>
        <hash alg="SHA3-512">1c54f25d582039f5c7887562ac233766d10c9a9f2dc1b0fcc5978d831a26a368709005a37585c8215bbdaddbc4c6319101b6fc61f9f5b6982988937750f0209d</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@1.0.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://eclipse.dev/sisu/org.eclipse.sisu.plexus/</url>
        </reference>
        <reference type="build-system">
          <url>https://github.com/eclipse-sisu/sisu-project/actions/workflows/build.yml?query=branch%3Amain</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repo.maven.apache.org/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/eclipse-sisu/sisu-project/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://www.eclipse.org/lists/sisu-dev</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/eclipse-sisu/sisu-project/tree/main/org.eclipse.sisu.plexus</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.codehaus.plexus/plexus-component-annotations@2.2.0?type=jar">
      <publisher>Codehaus Plexus</publisher>
      <group>org.codehaus.plexus</group>
      <name>plexus-component-annotations</name>
      <version>2.2.0</version>
      <description>Plexus Component Java Annotations, to describe plexus components properties in java sources with
    standard annotations instead of javadoc annotations.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">a2397189a5ce25e7d2d44effa9f5176c</hash>
        <hash alg="SHA-1">a506f84636ea7ae370d04167dd155c103e616f68</hash>
        <hash alg="SHA-256">50edb93c73786e62822b4fe1336e22880fdf147191373cf5c911370e16748fcf</hash>
        <hash alg="SHA-512">33595f37df5b5f11a863082e2ef90d871f52bc6c83fb593b0747a4c7eb91c3b5ab9bfe804a54b7d82ee6f289e2d47c443c8dafe4159d07b6c80394a5666db2f6</hash>
        <hash alg="SHA-384">4850c234dfc3c37bc7f50b8ad5f86abc42927e0135582461a0d2d8cd0649ed304352cd0e91ccd006c55c6d06f7940104</hash>
        <hash alg="SHA3-384">2aabf9ba2fedcfd79345316c2b8f7b9abfe5519f3f5e1d2bc45187febf5bcab84ad8c505f7e99857dcee2c2cd7d2b0de</hash>
        <hash alg="SHA3-256">2a20286e40c517a66525f26a6ef13becfb6eec3ba792d9708e14896d288ae9df</hash>
        <hash alg="SHA3-512">bd372902e65123fcc0ac13721868e604bb54fdb52a7e0de412c46aca9aa5ca7f1a9c59cdc9f2bb7016a5cdaa0e8f43a8cf0ef2250ccd0b291bcc4468e5f4a4b5</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.codehaus.plexus/plexus-component-annotations@2.2.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://codehaus-plexus.github.io/plexus-containers/plexus-component-annotations/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/codehaus-plexus/plexus-containers/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://groups.google.com/forum/#!forum/mojohaus-dev</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/codehaus-plexus/plexus-containers/tree/plexus-containers-2.2.0/plexus-component-annotations/</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.codehaus.plexus/plexus-utils@3.6.0?type=jar">
      <publisher>Codehaus Plexus</publisher>
      <group>org.codehaus.plexus</group>
      <name>plexus-utils</name>
      <version>3.6.0</version>
      <description>A collection of various utility classes to ease working with strings, files, command lines, XML and
    more.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">1d5893fecbc7ec13f205a1c5893e90ce</hash>
        <hash alg="SHA-1">e8bc129728f22671a36fff3b604edcd39073a7b1</hash>
        <hash alg="SHA-256">27ef130e32c236090e408fb5498d94cb9ea26d14070fb1c8985d607b62d098d1</hash>
        <hash alg="SHA-512">ff2baf6b717bbd6f64b7f82e6e499a6c38e7b55b63fd363894dc08fbc0edfd7d9d05ed7341f391c24ac90f90e6e8fe6469906f9074a01a98a1b0cc65f4a280ee</hash>
        <hash alg="SHA-384">c2080dc3c99c8ad7cb94eaa8ab9d2bb1c2a1404ae76e08de066be1c587a2ea8f9b4d6b1fe13a202e708f0f74e0a246de</hash>
        <hash alg="SHA3-384">4f433a3ff4467b8cf8ef2905cd615b68f437dac7a46d64435a778ae5e69c1401f0d4cdd9be389d4d76efd8a9edd696ef</hash>
        <hash alg="SHA3-256">d22be143fd169673efaeb9b21c884803803585f26494fff7d51d6da4effcfac4</hash>
        <hash alg="SHA3-512">eac2553fde2d6a0ad1a11c7487f5762870b666d619f52970b6baf1fd23ffca356d6584d02295db7bc472654b2909d3e2220a05a54f720f0f99553da7c0256a9e</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.codehaus.plexus/plexus-utils@3.6.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://codehaus-plexus.github.io/plexus-utils/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/codehaus-plexus/plexus-utils/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://groups.google.com/forum/#!forum/mojohaus-dev</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/codehaus-plexus/plexus-utils/tree/plexus-utils-3.6.0/</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.codehaus.plexus/plexus-classworlds@2.9.0?type=jar">
      <publisher>Codehaus Plexus</publisher>
      <group>org.codehaus.plexus</group>
      <name>plexus-classworlds</name>
      <version>2.9.0</version>
      <description>A class loader framework</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">64e4ee5a1298f866d00f705e02058200</hash>
        <hash alg="SHA-1">ace0820f34de49f69511f5263bcebb09fac9731a</hash>
        <hash alg="SHA-256">1ad3292cd563381e3fd632f3fded1988f9e9b2be7a9f3db63ff4c4cedba13fa5</hash>
        <hash alg="SHA-512">a99e92782658ed20e1d01b0ae426882d481a4ba91de3f6c058a24aa54ebded654f4b16dc26adccafd61f27ce22329a1ae1db935c4b49ee31734bcb775e6c7fd7</hash>
        <hash alg="SHA-384">6f790e5bd8bbb3efcd45507c827f14a552e729a3f04eff1208642a91e36e4c9b62b34d6b1efc1102f2f063b0e31f9b74</hash>
        <hash alg="SHA3-384">58f1e4bb64c7200cc4fde92bd48e499931dc561e07980fdf770fbf0913c2c070d778dc7dac0f947198038247c0d70128</hash>
        <hash alg="SHA3-256">5ba1a6cb4b44510a193e765e1130edf3e5e0b09405b99aaee4ed0970d46bca70</hash>
        <hash alg="SHA3-512">f2723468e861e0d3201bdd63c250a06d852092be67817cd117cf7ddab599e6bc806d8e303b9291a070e87d748676ce113682718b83dfd86767f896422bb1734c</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.codehaus.plexus/plexus-classworlds@2.9.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://codehaus-plexus.github.io/plexus-classworlds/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/codehaus-plexus/plexus-classworlds/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://groups.google.com/forum/#!forum/mojohaus-dev</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/codehaus-plexus/plexus-classworlds/tree/plexus-classworlds-2.9.0/</url>
        </reference>
      </externalReferences>
    </component>
  </components>
  <dependencies>
    <dependency ref="pkg:maven/org.apache.maven/maven-plugin-api@3.9.14?type=jar">
      <dependency ref="pkg:maven/org.apache.maven/maven-model@3.9.14?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven/maven-artifact@3.9.14?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@1.0.0?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-utils@3.6.0?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-classworlds@2.9.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.maven/maven-model@3.9.14?type=jar">
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-utils@3.6.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.codehaus.plexus/plexus-utils@3.6.0?type=jar"/>
    <dependency ref="pkg:maven/org.apache.maven/maven-artifact@3.9.14?type=jar">
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-utils@3.6.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@1.0.0?type=jar">
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-component-annotations@2.2.0?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-classworlds@2.9.0?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-utils@3.6.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.codehaus.plexus/plexus-component-annotations@2.2.0?type=jar"/>
    <dependency ref="pkg:maven/org.codehaus.plexus/plexus-classworlds@2.9.0?type=jar"/>
  </dependencies>
</bom>
