<?xml version="1.0" encoding="UTF-8"?>
<bom serialNumber="urn:uuid:d7437d78-069a-4810-9628-3cf022fe5f1d" version="1" xmlns="http://cyclonedx.org/schema/bom/1.4">
  <metadata>
    <timestamp>2023-05-12T13:09:53Z</timestamp>
    <tools>
      <tool>
        <vendor>OWASP Foundation</vendor>
        <name>CycloneDX Maven plugin</name>
        <version>2.7.3</version>
        <hashes>
          <hash alg="MD5">ab886f1cb1a79b4244ac54dde22a0989</hash>
          <hash alg="SHA-1">9ed658496dfeef87fe6072b95c62ec37165cc741</hash>
          <hash alg="SHA-256">df9b43417bef6aeac86a393abcc1ac2ed0518239ba544aaeb595b9619c603503</hash>
          <hash alg="SHA-512">223da34bb51c5339e0f7285757608c1a56b1ea887f7ad835af9299fabacc693053163da74af352af86b16e18e04db730bd44214eda04291410c42b6ae657d85c</hash>
          <hash alg="SHA-384">3aaf057329ed0f90ec3a49a45b3cf4ec5ce637fd75d6202e9483fa4274cec3e7b74308016e146b6ba087df5fce9397bb</hash>
          <hash alg="SHA3-384">0e2ce6d2a0e0ddea90f63d2e521e640e83aeac1230c201042e542186e9f32bceaf54ed9d26e6a9dec04c0f7895bbae19</hash>
          <hash alg="SHA3-256">dd3ba8325a1a759e5a8f159a3363213d4a34d51120c4e4c77097a6779964fb33</hash>
          <hash alg="SHA3-512">e5f87b2380e9785330fce113fedd5866a1498d5a9e365b7b00cb6fea50fd47166c471a6347d46d3edb7dd247a583874169624db5be2845c5c87dfdbcd58d9e89</hash>
        </hashes>
      </tool>
    </tools>
    <component type="library" bom-ref="pkg:maven/org.apache.parquet/parquet-format-structures@1.13.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.parquet</group>
      <name>parquet-format-structures</name>
      <version>1.13.1</version>
      <description>Parquet-mr related java classes to use the parquet-format thrift structures.</description>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.parquet/parquet-format-structures@1.13.1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://www.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/PARQUET</url></reference></externalReferences>
    </component>
  </metadata>
  <components>
    <component type="library" bom-ref="pkg:maven/org.apache.thrift/libthrift@0.16.0?type=jar">
      <group>org.apache.thrift</group>
      <name>libthrift</name>
      <version>0.16.0</version>
      <description>Thrift is a software framework for scalable cross-language services development.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">19226bcfae19557ec080e098f87a1340</hash>
        <hash alg="SHA-1">995b1788bf9d954a77a24db5619a065ed1a455e9</hash>
        <hash alg="SHA-256">b311ad08f7dc5ba90139910ec8619460914a4a2952f738603f1d7803ffdbe0a8</hash>
        <hash alg="SHA-512">25e69530ea2883d39c7bbcd01f374d679eec9d7a05007fa5304802f38089f7910e027c608166fe576057a77759f39f669759abf3089b8940296c502974c43e30</hash>
        <hash alg="SHA-384">e3061ff167d812f2bcb36d585c57fe0ff320e397fa40229ce7185b4f5eb2204ba2b53f65297da4bdfdacc2f5f7e05ffc</hash>
        <hash alg="SHA3-384">97176f98c4c564655dc23adaed7adf530957d11db3b4d0d51e7cbc9b2a449d49e8982630be1160bdc50ce49bc60e25ee</hash>
        <hash alg="SHA3-256">e3f9cf17b93543b625fb66f77aba86e61ff03549336315bd0db8a62651f65a9d</hash>
        <hash alg="SHA3-512">68cc31068454f6024cb60a3c36a4e36f10f47a25ab6d3ff79968c027a4fb2f9946399e9d4b00c89a113ce5a7ac7aefb673732bf85018228e240157df866e868b</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.thrift/libthrift@0.16.0?type=jar</purl>
      <externalReferences><reference type="vcs"><url>https://github.com/apache/thrift</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.slf4j/slf4j-api@1.7.35?type=jar">
      <publisher>QOS.ch</publisher>
      <group>org.slf4j</group>
      <name>slf4j-api</name>
      <version>1.7.35</version>
      <description>The slf4j API</description>
      <hashes>
        <hash alg="MD5">946d582fd9cd2791567d90e68414bff6</hash>
        <hash alg="SHA-1">517f3a0687490b72d0e56d815e05608a541af802</hash>
        <hash alg="SHA-256">84cbd60deaf9e18db8cb181e43db4e63f7de353cfcaf654a76d85b22da4d2762</hash>
        <hash alg="SHA-512">63adf03ce313beadf5801ce52fcd788b090fe9318c10b737a2a9db4c781145d4e1a35eacce837ea0c6014b0c47576f208a5be39e13ca0dda0b2b9ac8cacb7328</hash>
        <hash alg="SHA-384">263ddef8265756c5854757e95a47dc21b0a0e47dcdaac3aff613adfcfacc80b55d6236e054262e60652915ba627a8bc3</hash>
        <hash alg="SHA3-384">a71473140332178ad92f93042b2fe188502d13c20edc92fc0ccf2aba485ff17454dc37f8b7668715dbd3581a49aa418b</hash>
        <hash alg="SHA3-256">1ef54fa1753850536c88f81794ea2d0b102b421fa224e45646b4d5c6ba99bc2e</hash>
        <hash alg="SHA3-512">3e472def97e91f9c1b0ed3de60d9faa53c3bce57aedff6dd61ec09bfbac6a7771f81a10bbb6fae63f890ce6403ced9aab956b9a7b064217e9414601affa52b86</hash>
      </hashes>
      <licenses>
        <license>
          <id>MIT</id>
          <url>https://opensource.org/licenses/MIT</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.slf4j/slf4j-api@1.7.35?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.qos.ch</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/qos-ch/slf4j</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.httpcomponents/httpclient@4.5.13?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.httpcomponents</group>
      <name>httpclient</name>
      <version>4.5.13</version>
      <description>Apache HttpComponents Client</description>
      <hashes>
        <hash alg="MD5">40d6b9075fbd28fa10292a45a0db9457</hash>
        <hash alg="SHA-1">e5f6cae5ca7ecaac1ec2827a9e2d65ae2869cada</hash>
        <hash alg="SHA-256">6fe9026a566c6a5001608cf3fc32196641f6c1e5e1986d1037ccdbd5f31ef743</hash>
        <hash alg="SHA-512">3567739186e551f84cad3e4b6b270c5b8b19aba297675a96bcdff3663ff7d20d188611d21f675fe5ff1bfd7d8ca31362070910d7b92ab1b699872a120aa6f089</hash>
        <hash alg="SHA-384">093ac3e2dde58e34aa70309c7305eb3c9b5be2509a9293f1672494da55479a86bd112e83326746dc7a32855472952b99</hash>
        <hash alg="SHA3-384">cd6882e7868624164e460f2f3ea01466f863c0dcb902b031c656b57356f563be83b29530df41d88d634ed3d01fc9964d</hash>
        <hash alg="SHA3-256">710b1d8d7dae0b8e4270756694ca9c83d64965f42d3b4170c609b14d47c2762c</hash>
        <hash alg="SHA3-512">276fa6a6599dc89382d658115695cf4da6b0d39b34e9c349c17a5dbd64122eaee553bb9ed75c0378ec4a83be157c8aa39370662de3c9b8fd55ebc1dd608383e6</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.httpcomponents/httpclient@4.5.13?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.apache.org/</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/HTTPCLIENT</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/hc-httpclient-users/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-logging/commons-logging@1.2?type=jar">
      <group>commons-logging</group>
      <name>commons-logging</name>
      <version>1.2</version>
      <description>Apache Commons Logging is a thin adapter allowing configurable bridging to other,
    well known logging systems.</description>
      <hashes>
        <hash alg="MD5">040b4b4d8eac886f6b4a2a3bd2f31b00</hash>
        <hash alg="SHA-1">4bfc12adfe4842bf07b657f0369c4cb522955686</hash>
        <hash alg="SHA-256">daddea1ea0be0f56978ab3006b8ac92834afeefbd9b7e4e6316fca57df0fa636</hash>
        <hash alg="SHA-512">ed00dbfabd9ae00efa26dd400983601d076fe36408b7d6520084b447e5d1fa527ce65bd6afdcb58506c3a808323d28e88f26cb99c6f5db9ff64f6525ecdfa557</hash>
        <hash alg="SHA-384">ac20720d7156131478205f1b454395abf84cfc8da2f163301af32f63bd3c4764bd26cb54ed53800f33193ae591f3ce9c</hash>
        <hash alg="SHA3-384">628eb4407e95dca84da1a06b08a6d9b832a49de8472b1b217e8607f08efeeed18b996232d64dd07f03e78e0e3bb4b078</hash>
        <hash alg="SHA3-256">9aab62deccf156ee6e324c925dfc30ecb53e8465802863a551901a461424e807</hash>
        <hash alg="SHA3-512">3fd76857f6d20c03799537cc961c1c4ddf1c375c6c192fb982363e3b9397ba138b77f24ef38b4202f44e37586789c0320e4de18fdadd2772304fd14a9b26d552</hash>
      </hashes>
      <licenses/>
      <purl>pkg:maven/commons-logging/commons-logging@1.2?type=jar</purl>
      <externalReferences><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/LOGGING</url></reference><reference type="vcs"><url>http://svn.apache.org/repos/asf/commons/proper/logging/trunk</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-codec/commons-codec@1.11?type=jar">
      <group>commons-codec</group>
      <name>commons-codec</name>
      <version>1.11</version>
      <description>The Apache Commons Codec package contains simple encoder and decoders for
     various formats such as Base64 and Hexadecimal.  In addition to these
     widely used encoders and decoders, the codec package also maintains a
     collection of phonetic encoding utilities.</description>
      <hashes>
        <hash alg="MD5">567159b1ae257a43e1391a8f59d24cfe</hash>
        <hash alg="SHA-1">3acb4705652e16236558f0f4f2192cc33c3bd189</hash>
        <hash alg="SHA-256">e599d5318e97aa48f42136a2927e6dfa4e8881dff0e6c8e3109ddbbff51d7b7d</hash>
        <hash alg="SHA-512">d9586162b257386b5871e7e9ae255a38014a9efaeef5148de5e40a3b0200364dad8516bddd554352aa2e5337bec2cc11df88c76c4fdde96a40f3421aa60650d7</hash>
        <hash alg="SHA-384">9ae3d8fd4c38f3af52c76c5f98039109901cb0f70700e6d9999b27cc4b30b188e2688aa4adcf6b846376bc3ca125907a</hash>
        <hash alg="SHA3-384">bd272e22540371e7d834cd897bce9be657293ba9c5584e0d47a4073711dacb524cc59e294e942ffc01613d17ac7d6ac1</hash>
        <hash alg="SHA3-256">90ec34f9701a8b212c65e6167c505ea6417289f910deedcac8517075b8349728</hash>
        <hash alg="SHA3-512">101bc04efae2bd16d7923e61bca922c4a006b0e4b34909e0f8865196cb4df4f4f6269737c17880b4dfd0309cb487b806e88d09c6e1a7dc70237563b3f4312f7f</hash>
      </hashes>
      <licenses/>
      <purl>pkg:maven/commons-codec/commons-codec@1.11?type=jar</purl>
      <externalReferences><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/CODEC</url></reference><reference type="vcs"><url>http://svn.apache.org/viewvc/commons/proper/codec/trunk</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.httpcomponents/httpcore@4.4.15?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.httpcomponents</group>
      <name>httpcore</name>
      <version>4.4.15</version>
      <description>Apache HttpComponents Core (blocking I/O)</description>
      <hashes>
        <hash alg="MD5">be7c67929df007fcac6c8eff5322d3a0</hash>
        <hash alg="SHA-1">7f2e0c573eaa7a74bac2e89b359e1f73d92a0a1d</hash>
        <hash alg="SHA-256">3cbaed088c499a10f96dde58f39dc0e7985171abd88138ca1655a872011bb142</hash>
        <hash alg="SHA-512">f0605e4d521c6e9c7e645905687c519239fa9e2128403a515e6118b0406b503b0865a8ead197f8532186b0c9aaa4189ff5bb301d5b0cf84bd54fa2258d17551d</hash>
        <hash alg="SHA-384">fffa9cd7434271990e20230ef9c3754f4b198958437573cdec2d4e7063147a765cb0cdf0b79a9688e81ff85dc704c25b</hash>
        <hash alg="SHA3-384">0b72d65d0c3a7d74d1baf1a2fc4e9510e64bd34f7b23f52d436621d2043d81b5395c9b05803e7471537964ac42e2fe94</hash>
        <hash alg="SHA3-256">3290e3547fd3ea688f30ba6a554c779c784bb209642ec4d48b284ca8374191b3</hash>
        <hash alg="SHA3-512">230b7196270183aaaf5e89e8d7598a3c65ac6bbede816e222e6d457fe5fca50fbe8ca2cb30ecf161bf4ddf34a08ee3a95d2f559e0aa513e9e730eeb5624b296b</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.httpcomponents/httpcore@4.4.15?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.apache.org/</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/HTTPCORE</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/hc-httpclient-users/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/javax.annotation/javax.annotation-api@1.3.2?type=jar">
      <publisher>GlassFish Community</publisher>
      <group>javax.annotation</group>
      <name>javax.annotation-api</name>
      <version>1.3.2</version>
      <description>Common Annotations for the JavaTM Platform API</description>
      <hashes>
        <hash alg="MD5">2ab1973eefffaa2aeec47d50b9e40b9d</hash>
        <hash alg="SHA-1">934c04d3cfef185a8008e7bf34331b79730a9d43</hash>
        <hash alg="SHA-256">e04ba5195bcd555dc95650f7cc614d151e4bcd52d29a10b8aa2197f3ab89ab9b</hash>
        <hash alg="SHA-512">679cf44c3b9d635b43ed122a555d570292c3f0937c33871c40438a1a53e2058c80578694ec9466eac9e280e19bfb7a95b261594cc4c1161c85dc97df6235e553</hash>
        <hash alg="SHA-384">fc0058495e54efb6e05a34e3ff422e7c8347bcc77d6d9b87e9253424968dee6ef6a215c318d7e54f8705276be81f0682</hash>
        <hash alg="SHA3-384">ed6464b715de6ced0d9981a3f28140824946a4b7a02ffaff6116c833bb36e8f77a6282ce63c0d82cfe841d4fd6916891</hash>
        <hash alg="SHA3-256">ecfc9bef24ae28cf94c6775ecf6e2086d90a25d8d5476a4f6bb24001601b6cd0</hash>
        <hash alg="SHA3-512">f2b333527faedf504f60aa70a3d491972fa76f7e61e6351027f74613f41001157656824fe312b6e1df6dc4979704fe2a745b618d5368a97fe0bf8749739de9e2</hash>
      </hashes>
      <licenses/>
      <purl>pkg:maven/javax.annotation/javax.annotation-api@1.3.2?type=jar</purl>
      <externalReferences><reference type="website"><url>https://javaee.github.io/glassfish</url></reference><reference type="issue-tracker"><url>https://github.com/javaee/javax.annotation/issues</url></reference><reference type="vcs"><url>https://github.com/javaee/javax.annotation</url></reference><reference type="distribution"><url>https://maven.java.net/service/local/staging/deploy/maven2/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar">
      <group>org.apache.commons</group>
      <name>commons-lang3</name>
      <version>3.12.0</version>
      <description>Apache Commons Lang, a package of Java utility classes for the
  classes that are in java.lang's hierarchy, or are considered to be so
  standard as to justify existence in java.lang.</description>
      <hashes>
        <hash alg="MD5">19fe50567358922bdad277959ea69545</hash>
        <hash alg="SHA-1">c6842c86792ff03b9f1d1fe2aab8dc23aa6c6f0e</hash>
        <hash alg="SHA-256">d919d904486c037f8d193412da0c92e22a9fa24230b9d67a57855c5c31c7e94e</hash>
        <hash alg="SHA-512">fbdbc0943cb3498b0148e86a39b773f97c8e6013740f72dbc727faeabea402073e2cc8c4d68198e5fc6b08a13b7700236292e99d4785f2c9989f2e5fac11fd81</hash>
        <hash alg="SHA-384">c34b8a0e0eba2168ad56fedeb7a1d710b6f1d3f1ce6aae99a4e0247bd120efbbadc8dcb2f731045b8a16e3efd30604dc</hash>
        <hash alg="SHA3-384">8ad6ebe7754bf0caa8cda7e59c0e95360d76e06a7ad6aeec5637985519dbd1dd06e7eed04711039f36ec4c49de280def</hash>
        <hash alg="SHA3-256">18ef639b2aeeb5aedffb18dbf20c79f33e300d99fb31b131689639cc470e6e4c</hash>
        <hash alg="SHA3-512">fbea96114dcf4f31cfaaa99987be756ddda3a6c74f8c835461997df794d54b92da1f60fe5c3f1f2a43cb8c5f5db7f4048bef77c70993673c7a93f3660fffc8da</hash>
      </hashes>
      <licenses/>
      <purl>pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar</purl>
      <externalReferences><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/LANG</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=commons-lang.git</url></reference></externalReferences>
    </component>
  </components>
  <dependencies>
    <dependency ref="pkg:maven/org.apache.parquet/parquet-format-structures@1.13.1?type=jar">
      <dependency ref="pkg:maven/org.apache.thrift/libthrift@0.16.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.thrift/libthrift@0.16.0?type=jar">
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.35?type=jar"/>
      <dependency ref="pkg:maven/org.apache.httpcomponents/httpclient@4.5.13?type=jar"/>
      <dependency ref="pkg:maven/org.apache.httpcomponents/httpcore@4.4.15?type=jar"/>
      <dependency ref="pkg:maven/javax.annotation/javax.annotation-api@1.3.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.35?type=jar"/>
    <dependency ref="pkg:maven/org.apache.httpcomponents/httpclient@4.5.13?type=jar">
      <dependency ref="pkg:maven/commons-logging/commons-logging@1.2?type=jar"/>
      <dependency ref="pkg:maven/commons-codec/commons-codec@1.11?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/commons-logging/commons-logging@1.2?type=jar"/>
    <dependency ref="pkg:maven/commons-codec/commons-codec@1.11?type=jar"/>
    <dependency ref="pkg:maven/org.apache.httpcomponents/httpcore@4.4.15?type=jar"/>
    <dependency ref="pkg:maven/javax.annotation/javax.annotation-api@1.3.2?type=jar"/>
    <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar"/>
  </dependencies>
</bom>
