{
  "bomFormat" : "CycloneDX",
  "specVersion" : "1.4",
  "serialNumber" : "urn:uuid:ed5b8aa2-0de2-44d0-aa43-cc6338917cae",
  "version" : 1,
  "metadata" : {
    "timestamp" : "2024-05-10T17:55:17Z",
    "tools" : [
      {
        "vendor" : "OWASP Foundation",
        "name" : "CycloneDX Maven plugin makeBom compile+provided+runtime+system",
        "version" : "2.7.6",
        "hashes" : [
          {
            "alg" : "MD5",
            "content" : "639c35c7f79c5514f3abe11247999b70"
          },
          {
            "alg" : "SHA-1",
            "content" : "649239e622d8d454bb9ab6fafd6746c85cd11b7d"
          },
          {
            "alg" : "SHA-256",
            "content" : "1e3bc10146c370fe8b8f0a2edcb64329907d61dbc2f445db6ac1034cd3221ce3"
          },
          {
            "alg" : "SHA-512",
            "content" : "894a4b5762d32c88cc58ae1a35a3cc3d45a3c494accadb31b55b5832af65f60c0f8164623521a81de73e3ed6a4c994cca0f1951c8368b9d07fb41c82eaa84bbd"
          },
          {
            "alg" : "SHA-384",
            "content" : "3c385acc773a41056fb58ea27096c8ec86d46d8bd74a2eee9cf0913051981611afc68cf13a88d31af16590a489a97c0e"
          },
          {
            "alg" : "SHA3-384",
            "content" : "93695160055039f4791ecebd61c7aa6130f074f50a823de6e5aff7217c35548062829ec2b930658c2702cd47ea3118a1"
          },
          {
            "alg" : "SHA3-256",
            "content" : "4c9f5d3ab2b6ab9b4b4a8968a7ee2373b85a496bec34eefd96ed7c8260d2a45b"
          },
          {
            "alg" : "SHA3-512",
            "content" : "c2af46fe07c4be746fdc0b54e9eb3285231055c5401bcfb34c2d9392efe27fe9c16a0edd91615970bfae3f4a59846e89c3d88a6a36d4ba110a6d140a04fe184d"
          }
        ]
      }
    ],
    "component" : {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.orc",
      "name" : "orc-shims",
      "version" : "2.0.1",
      "description" : "A shim layer for supporting various versions of Hadoop dynamically. This module uses a higher version of Hadoop so that we can create shims that let us use new features of Hadoop without having a hard dependency on the latest version.",
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.orc/orc-shims@2.0.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://orc.apache.org/orc-shims"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/orc-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven-apache-parent/tree/apache-27/orc/orc-shims"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.orc/orc-shims@2.0.1?type=jar"
    }
  },
  "components" : [
    {
      "publisher" : "Apache Software Foundation",
      "group" : "org.apache.hadoop",
      "name" : "hadoop-client-api",
      "version" : "3.3.6",
      "description" : "Apache Hadoop Client",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "cf99245887eb5152e1771e1867a516fe"
        },
        {
          "alg" : "SHA-1",
          "content" : "12ac6f103a0ff29fce17a078c7c64d25320b6165"
        },
        {
          "alg" : "SHA-256",
          "content" : "f3d2347a6e1c6885d5bcfd4f60c3ac3810ec11068fc161e04329baabf412d963"
        },
        {
          "alg" : "SHA-512",
          "content" : "27de8c11698e9d4cc393c5854112a9e277b3e75b1e58ef3b559adbdcc33f29bcf37a23357c3d60efa402f5f2843e2130b83f8f14f0c80b450dadfdc4138788a7"
        },
        {
          "alg" : "SHA-384",
          "content" : "1b97124085ab158aaec32d4b50c365eaa2e03b3dc264db8f5dcb58cf24c36e208579dfd463a092bd42b1b5799ca4ad94"
        },
        {
          "alg" : "SHA3-384",
          "content" : "31108e7a8245c59997efd906c54adfbd71c3048c2252608dc4ae034b1da09be8a7570e28f8c25446fd8f0dcb747551f4"
        },
        {
          "alg" : "SHA3-256",
          "content" : "8a39ce3148e26d61e6fbb020d8c78472fd4c0abf228b39a0f00c43f0d3c787ed"
        },
        {
          "alg" : "SHA3-512",
          "content" : "9ec6cd00f82f575628532a1e8cc3da18da246ff95e2ce587823d625fb117df73482887db05128e290c746034e168b1cc48f3c285f879eaed1e3e962ec1d9b081"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.hadoop/hadoop-client-api@3.3.6?type=jar",
      "externalReferences" : [
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.hadoop/hadoop-client-api@3.3.6?type=jar"
    },
    {
      "publisher" : "xerial.org",
      "group" : "org.xerial.snappy",
      "name" : "snappy-java",
      "version" : "1.1.8.2",
      "description" : "snappy-java: A fast compression/decompression library",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "942d60b1e87f37b5d616611fda015605"
        },
        {
          "alg" : "SHA-1",
          "content" : "4205e3cf9c44264731ad002fcd2520eb1b2bb801"
        },
        {
          "alg" : "SHA-256",
          "content" : "b2961229ff4ef452681ff99a9a964a86e304290fd2f507d16fcd970970478bac"
        },
        {
          "alg" : "SHA-512",
          "content" : "6251d826a117bcb6986db1e3c99529faf4a4a76eec32edc4c6dfac4d46a143d170e8e924a93b37a41939741269c7744e596bb77054e43aac0768015e5c379071"
        },
        {
          "alg" : "SHA-384",
          "content" : "fea0abc4dd303d1ed27141a9b733be6659b395b210794c070fd94632c7f7d240e8cac05f151a7b5164bfbb5429a8e7d0"
        },
        {
          "alg" : "SHA3-384",
          "content" : "d0228d5509d0258706c3222b8bffa771d6a45fc0d02576fa159914f04999a6563f629f55c5adf0770a9843b6dc74fe21"
        },
        {
          "alg" : "SHA3-256",
          "content" : "3063267b0bff6ccab98205048563c2172372572e8bca2f39aee0e4336b75f080"
        },
        {
          "alg" : "SHA3-512",
          "content" : "e1f45597e07ceaeddc1b40d69cd7eaba78da7f5c5dffe9051fd498b2677d0a246da6fa41c52a5325e02565a77337c31e9393c3a707ef853c7414f9d414358fec"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.xerial.snappy/snappy-java@1.1.8.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/xerial/snappy-java"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/xerial/snappy-java"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.xerial.snappy/snappy-java@1.1.8.2?type=jar"
    },
    {
      "publisher" : "QOS.ch",
      "group" : "org.slf4j",
      "name" : "slf4j-api",
      "version" : "2.0.11",
      "description" : "The slf4j API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "90c46a2d4613049843c804867321e6a7"
        },
        {
          "alg" : "SHA-1",
          "content" : "ad96c3f8cf895e696dd35c2bc8e8ebe710be9e6d"
        },
        {
          "alg" : "SHA-256",
          "content" : "ce0e71d673acb9036bb55d0244b261cf033f8e4c1245f14f931dfb1937dd4c95"
        },
        {
          "alg" : "SHA-512",
          "content" : "a7fff0928a5f27a5bd45f9bfde7d24e4fc64b678d2f972b80162b42d7fddda5eb309aaf5d8780d0d018425b8c01c1859b0c925e26690cd8f0af41212fd035920"
        },
        {
          "alg" : "SHA-384",
          "content" : "b8618ec12f84fef03e566a909a149f3ac2b72f7ea4b2bc8b45c6d604b5a7e1f628b781a7e177041467f0919cf3195da7"
        },
        {
          "alg" : "SHA3-384",
          "content" : "bed3dfc5d1215f8a8143495614912d9beca7642c2ba863985c7e4e515c30a6f78ffbb18fbe4a5886dcff637f6c0fa2fc"
        },
        {
          "alg" : "SHA3-256",
          "content" : "b4b4f48729e7f5dc4dfb9b813fdee6b9045dec0f4957cc42bce9ed145a02816d"
        },
        {
          "alg" : "SHA3-512",
          "content" : "4eee9b9e5db7c5f8ec9c554eb7c2160472ed7eb4404c44eafd314c126830af6d53f76b3c6f4a53872f2d23369dd56b0a4cd56fa69e3489c9ed69b993cad30e05"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl" : "pkg:maven/org.slf4j/slf4j-api@2.0.11?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.slf4j.org"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/qos-ch/slf4j/slf4j-parent/slf4j-api"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.slf4j/slf4j-api@2.0.11?type=jar"
    }
  ],
  "dependencies" : [
    {
      "ref" : "pkg:maven/org.apache.orc/orc-shims@2.0.1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.hadoop/hadoop-client-api@3.3.6?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.11?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.hadoop/hadoop-client-api@3.3.6?type=jar",
      "dependsOn" : [
        "pkg:maven/org.xerial.snappy/snappy-java@1.1.8.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.xerial.snappy/snappy-java@1.1.8.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.slf4j/slf4j-api@2.0.11?type=jar",
      "dependsOn" : [ ]
    }
  ]
}