{ "bomFormat" : "CycloneDX", "specVersion" : "1.6", "serialNumber" : "urn:uuid:97d9d219-9716-3957-b859-1349b8c297e0", "version" : 1, "metadata" : { "lifecycles" : [ { "phase" : "build" } ], "tools" : { "components" : [ { "type" : "library", "author" : "OWASP Foundation", "group" : "org.cyclonedx", "name" : "cyclonedx-maven-plugin", "version" : "2.9.0", "description" : "CycloneDX Maven plugin", "hashes" : [ { "alg" : "MD5", "content" : "dfaeab7ec837ce07874e2ee66fdc57d3" }, { "alg" : "SHA-1", "content" : "8bab47bafc8183d0a5f37790ff55ed05ead1ae2d" }, { "alg" : "SHA-256", "content" : "67117e03eae4a03ca8bab3add044995f4899aa21798a2510b8265ef8101e90ac" }, { "alg" : "SHA-512", "content" : "ae6b706516bb76da806b7854aef9e348fa593f5159ae9d693ad38942165c0ebc0846d977a477f6029612d43468fd2cd73a5aa253c228a94fb8d184e0acefc3d2" }, { "alg" : "SHA-384", "content" : "ee872354d8b0dcd6f9835a913b3aaba70d9365a46043be78020183282a1e9fca812e969246cbe31d642541591b46648b" }, { "alg" : "SHA3-384", "content" : "e5167f9e7ceba3b7b4d1900c404543907868745334bedc69cdf79c271727148413033a3b1426b733b7549e612e44adee" }, { "alg" : "SHA3-256", "content" : "41fc0bc2275f354e2c7da01041ce73ce677364799cba53920a180aa5d4571c63" }, { "alg" : "SHA3-512", "content" : "ed7f97900b09b818dbc0b8a23c00a2843e1bc34e2e8eb5b6df52533af0a15b721de6f7d5c2fd9352b8d4fde768e080053b40a16f0f9f04c336fe9b44abe83fc0" } ] } ] }, "component" : { "type" : "library", "bom-ref" : "pkg:maven/org.apache.santuario/xmlsec@3.0.5?type=bundle", "publisher" : "The Apache Software Foundation", "group" : "org.apache.santuario", "name" : "xmlsec", "version" : "3.0.5", "description" : "Apache XML Security for Java supports XML-Signature Syntax and Processing, W3C Recommendation 12 February 2002, and XML Encryption Syntax and Processing, W3C Recommendation 10 December 2002. As of version 1.4, the library supports the standard Java API JSR-105: XML Digital Signature APIs.", "licenses" : [ { "license" : { "id" : "Apache-2.0", "url" : "https://www.apache.org/licenses/LICENSE-2.0" } } ], "purl" : "pkg:maven/org.apache.santuario/xmlsec@3.0.5?type=bundle", "externalReferences" : [ { "type" : "website", "url" : "https://santuario.apache.org/" }, { "type" : "distribution-intake", "url" : "https://repository.apache.org/service/local/staging/deploy/maven2" }, { "type" : "issue-tracker", "url" : "https://issues.apache.org/jira/browse/SANTUARIO" }, { "type" : "mailing-list", "url" : "http://news.gmane.org/gmane.text.xml.security.devel" }, { "type" : "vcs", "url" : "https://gitbox.apache.org/repos/asf?p=santuario-xml-security-java.git;a=summary" } ] }, "properties" : [ { "name" : "maven.goal", "value" : "makeAggregateBom" }, { "name" : "maven.scopes", "value" : "compile,provided,runtime,system" }, { "name" : "cdx:reproducible", "value" : "enabled" } ] }, "components" : [ { "type" : "library", "bom-ref" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar", "publisher" : "QOS.ch", "group" : "org.slf4j", "name" : "slf4j-api", "version" : "1.7.36", "description" : "The slf4j API", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "872da51f5de7f3923da4de871d57fd85" }, { "alg" : "SHA-1", "content" : "6c62681a2f655b49963a5983b8b0950a6120ae14" }, { "alg" : "SHA-256", "content" : "d3ef575e3e4979678dc01bf1dcce51021493b4d11fb7f1be8ad982877c16a1c0" }, { "alg" : "SHA-512", "content" : "f9b033fc019a44f98b16048da7e2b59edd4a6a527ba60e358f65ab88e0afae03a9340f1b3e8a543d49fa542290f499c5594259affa1ff3e6e7bf3b428d4c610b" }, { "alg" : "SHA-384", "content" : "2b14ad035877087157e379d3277dcdcd79e58d6bdb147c47d29e377d75ce53ad42cafbf22f5fb7827c7e946ff4876b9a" }, { "alg" : "SHA3-384", "content" : "3bc3110dafb8d5be16a39f3b2671a466463cd99eb39610c0e4719a7bf2d928f2ea213c734887c6926a07c4cca7769e4b" }, { "alg" : "SHA3-256", "content" : "ba2608179fcf46e2291a90b9cbb4aa30d718e481f59c350cc21c73b88d826881" }, { "alg" : "SHA3-512", "content" : "14c4edcd19702ef607d78826839d8a6d3a39157df54b89a801d3d3cbbe1307131a77671b041c761122730fb1387888c5ec2e46bdd80e1cb07f8f144676441824" } ], "licenses" : [ { "license" : { "id" : "MIT", "url" : "https://opensource.org/license/mit/" } } ], "purl" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar", "externalReferences" : [ { "type" : "website", "url" : "http://www.slf4j.org" }, { "type" : "distribution-intake", "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type" : "vcs", "url" : "https://github.com/qos-ch/slf4j/slf4j-api" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@3.0.1?type=jar", "publisher" : "Eclipse Foundation", "group" : "jakarta.xml.bind", "name" : "jakarta.xml.bind-api", "version" : "3.0.1", "description" : "Jakarta XML Binding API", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "ce443876615a903fdff9e0d5d13cb8d4" }, { "alg" : "SHA-1", "content" : "5257932df36ff3e4e6de50429dde946490a6a800" }, { "alg" : "SHA-256", "content" : "b8fb4bee3ff5b5c1ef77144d8411316018d7bbd41fcf1ede0646f7978546b867" }, { "alg" : "SHA-512", "content" : "7c74cedf7c0baaa5166311a4c4300a72eb09ae280ec3376553dd8651e6e3d5f100794421ba647b328195dfcf98a6cf7623169a0b87de3f13984dd7436c284807" }, { "alg" : "SHA-384", "content" : "9e3e8b7b86884751280e71e3888d1ff3f4f0c9d6446ed8e32cd61f030532b455b7401d1495dc0da72cd3f6300c68f482" }, { "alg" : "SHA3-384", "content" : "47bfcb7a14b57aaa6c813a54702af321dd488cd1697a52476bb46fb9e6162cd46b62faa876a77752b4a7271241924b38" }, { "alg" : "SHA3-256", "content" : "91d3e457af90b684e246e02808fb8ededfef65f602717e3815417cb63f22c6b6" }, { "alg" : "SHA3-512", "content" : "3c72bb852c244bfb7da0f382fda743c0f8522f56fa77337b203f5027ba8b32d12cd6d0d6ffadfea65552b508be9b40601d876b398a8fca8f4ae9ecd979154a93" } ], "licenses" : [ { "license" : { "id" : "BSD-3-Clause" } } ], "purl" : "pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@3.0.1?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://github.com/eclipse-ee4j/jaxb-api/jakarta.xml.bind-api" }, { "type" : "distribution-intake", "url" : "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type" : "issue-tracker", "url" : "https://github.com/eclipse-ee4j/jaxb-api/issues" }, { "type" : "mailing-list", "url" : "https://dev.eclipse.org/mhonarc/lists/jaxb-dev" }, { "type" : "vcs", "url" : "https://github.com/eclipse-ee4j/jaxb-api.git/jakarta.xml.bind-api" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/commons-codec/commons-codec@1.17.1?type=jar", "publisher" : "The Apache Software Foundation", "group" : "commons-codec", "name" : "commons-codec", "version" : "1.17.1", "description" : "The Apache Commons Codec component contains encoders and decoders for various formats such as Base16, Base32, Base64, digest, and Hexadecimal. In addition to these widely used encoders and decoders, the codec package also maintains a collection of phonetic encoding utilities.", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "7b3438ab4c6d91e0066d410947e43f3e" }, { "alg" : "SHA-1", "content" : "973638b7149d333563584137ebf13a691bb60579" }, { "alg" : "SHA-256", "content" : "f9f6cb103f2ddc3c99a9d80ada2ae7bf0685111fd6bffccb72033d1da4e6ff23" }, { "alg" : "SHA-512", "content" : "a7db98db470e6ad338266ff442fbdfbc277ba1d07a591336f7d15dc49fdac884da7dac04d806628b12437f993d8b5e6a4b800a66590ff11936dbf8bedcd8e860" }, { "alg" : "SHA-384", "content" : "ef0b8e0fbea5ee057b2c39114ff862a057d207d4dd6b4fd2f5ca96bfc039e76274f1dd02ddf985f1fa965736a522f5c5" }, { "alg" : "SHA3-384", "content" : "ac30c88a6c4bbdfa79cb697cd179627d2addae842e48e2ab167c4f9c5475d05ef4743f58fbed254dd7abc6f3877644fe" }, { "alg" : "SHA3-256", "content" : "f3fe1daf04e63f556d72f4f59f149327b65d899d6afe1de770b42faae2e323df" }, { "alg" : "SHA3-512", "content" : "29901c3e6394dd87f13a91b5432c678ac144cb6c86271b06c57c73c0480b23a4688d0266e2dd04abf5e1d148a2e80e1215dd87d2cb5ffbf2c023409f4f5f8f86" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0", "url" : "https://www.apache.org/licenses/LICENSE-2.0" } } ], "purl" : "pkg:maven/commons-codec/commons-codec@1.17.1?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://commons.apache.org/proper/commons-codec/" }, { "type" : "build-system", "url" : "https://github.com/apache/commons-parent/actions" }, { "type" : "distribution-intake", "url" : "https://repository.apache.org/service/local/staging/deploy/maven2" }, { "type" : "issue-tracker", "url" : "https://issues.apache.org/jira/browse/CODEC" }, { "type" : "mailing-list", "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/" }, { "type" : "vcs", "url" : "https://github.com/apache/commons-codec" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/com.fasterxml.woodstox/woodstox-core@6.5.1?type=jar", "publisher" : "FasterXML", "group" : "com.fasterxml.woodstox", "name" : "woodstox-core", "version" : "6.5.1", "description" : "Woodstox is a high-performance XML processor that implements Stax (JSR-173), SAX2 and Stax2 APIs", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "961dd4b2afedf95293dfdd8adfc8f211" }, { "alg" : "SHA-1", "content" : "c6e52e84fe959e69a243c83ec7d24cd889444ddf" }, { "alg" : "SHA-256", "content" : "c928d60665c6415fb1c39775cf95cfc44f7f4580cf5ab01b1c380ebffd76887f" }, { "alg" : "SHA-512", "content" : "d9b3cf6aaac85d8c349e7a24ad30f7e23b7765f1b7ce2fdf301bf2240b9c7ee184bdd938e58be6df9ac90e97e3b8c7b34f8fa9da27d1ed8de78765a8345b18f2" }, { "alg" : "SHA-384", "content" : "d51e67aae26449a2cdffa90a08b09cc805b85da3e758011a0945fc8b0ee8c18e98c6f94f0c0cf46b7a49e7370073068c" }, { "alg" : "SHA3-384", "content" : "2e731b74e4814647b1a320cd2f1b9f9914db1cb07510e69fb4dda33c6b1586fb2ee9e3f5af027c98dd0d33e2ed4b19de" }, { "alg" : "SHA3-256", "content" : "f84ca4c9bb77abb6e61930c7debee48497b2febc30d48329c6b15546dd00371b" }, { "alg" : "SHA3-512", "content" : "257aea7a23c4631eaaa942763e639d239660f29cfb7190f0b112abf6301a214fcc8e84b118ba73d92861a5f441bee479908a4831352ce2278d3d40ef51067894" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/com.fasterxml.woodstox/woodstox-core@6.5.1?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://github.com/FasterXML/woodstox" }, { "type" : "distribution-intake", "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type" : "issue-tracker", "url" : "https://github.com/FasterXML/woodstox/issues" }, { "type" : "vcs", "url" : "https://github.com/FasterXML/woodstox" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/org.codehaus.woodstox/stax2-api@4.2.1?type=jar", "publisher" : "fasterxml.com", "group" : "org.codehaus.woodstox", "name" : "stax2-api", "version" : "4.2.1", "description" : "tax2 API is an extension to basic Stax 1.0 API that adds significant new functionality, such as full-featured bi-direction validation interface and high-performance Typed Access API.", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "af8377bc7882332e22456616a9f164f6" }, { "alg" : "SHA-1", "content" : "a3f7325c52240418c2ba257b103c3c550e140c83" }, { "alg" : "SHA-256", "content" : "678567e48b51a42c65c699f266539ad3d676d4b1a5b0ad7d89ece8b9d5772579" }, { "alg" : "SHA-512", "content" : "00efc5d4d17540fb180c5b20d456630a8b3262dff46676689ae916ba16f0fbd9b1a71c7badfb254faad6597f94fed1edb96f77c15f40178eaf4d8cd35cea5e8d" }, { "alg" : "SHA-384", "content" : "97a6a9f0cc666776e4a4f08729c303d2a602ce5c25ee633cd6c54c72f12d11e9d43634ca6ca4ef7da5973a52030384da" }, { "alg" : "SHA3-384", "content" : "683a1f110ab84333e7517dabe175b91d7ea2fbead2f9d02acf798c588a7508bc67580642afa8d57441bc56ce610d5b0f" }, { "alg" : "SHA3-256", "content" : "5e8e54209fb6b580e928e703ef11645aff1a21dfd47cca2dc0e53d0befaef09c" }, { "alg" : "SHA3-512", "content" : "d79338a481605c94e144c967cb7adbc6cfd06ee6a1182b5ebc8cd8ad3deedd707931e404aa197bc94d3b5a5d82a2e6dd6a2f6cc9dafc42ce3ad5061076b05199" } ], "licenses" : [ { "license" : { "id" : "BSD-4-Clause" } } ], "purl" : "pkg:maven/org.codehaus.woodstox/stax2-api@4.2.1?type=jar", "externalReferences" : [ { "type" : "website", "url" : "http://github.com/FasterXML/stax2-api" }, { "type" : "distribution-intake", "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type" : "issue-tracker", "url" : "https://github.com/FasterXML/stax2-api/issues" }, { "type" : "vcs", "url" : "http://github.com/FasterXML/stax2-api" } ] } ], "dependencies" : [ { "ref" : "pkg:maven/org.apache.santuario/xmlsec@3.0.5?type=bundle", "dependsOn" : [ "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar", "pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@3.0.1?type=jar", "pkg:maven/commons-codec/commons-codec@1.17.1?type=jar", "pkg:maven/com.fasterxml.woodstox/woodstox-core@6.5.1?type=jar" ] }, { "ref" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@3.0.1?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/commons-codec/commons-codec@1.17.1?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/com.fasterxml.woodstox/woodstox-core@6.5.1?type=jar", "dependsOn" : [ "pkg:maven/org.codehaus.woodstox/stax2-api@4.2.1?type=jar" ] }, { "ref" : "pkg:maven/org.codehaus.woodstox/stax2-api@4.2.1?type=jar", "dependsOn" : [ ] } ] }