{
  "bomFormat" : "CycloneDX",
  "specVersion" : "1.6",
  "serialNumber" : "urn:uuid:eabdef4b-e079-3552-99cf-ef861a5492e4",
  "version" : 1,
  "metadata" : {
    "lifecycles" : [
      {
        "phase" : "build"
      }
    ],
    "tools" : {
      "components" : [
        {
          "type" : "library",
          "author" : "OWASP Foundation",
          "group" : "org.cyclonedx",
          "name" : "cyclonedx-maven-plugin",
          "version" : "2.9.1",
          "description" : "CycloneDX Maven plugin",
          "hashes" : [
            {
              "alg" : "MD5",
              "content" : "9c7a565cf28cce58557d0c621c5ea4b1"
            },
            {
              "alg" : "SHA-1",
              "content" : "be882d5a22050bfa9d19090b1420c188617d0e1c"
            },
            {
              "alg" : "SHA-256",
              "content" : "698e0f37184a5b28c245c4065fd036dfce253b52f82fbb7113d81d36326cc249"
            },
            {
              "alg" : "SHA-512",
              "content" : "c0f0b11026858166f872a2eb54719492e5cecaa0bc9cd6b30b3ecb4a174eed220f4a1b5829d18d6734128e778d3cb3db7ffed177c92866133129cb29081814a0"
            },
            {
              "alg" : "SHA-384",
              "content" : "d80964707dfe5caca8c70521d5066f57589304c0a657e6fbc7c0614ea0fc7b3b3dbe7778361eee0f54ba111e9cb0ffcb"
            },
            {
              "alg" : "SHA3-384",
              "content" : "80bc3a275d9514bc457461ff52a72add8c7ecbbc01d8912efce57139016c544ee776981851be0a58fa977ab4221f703f"
            },
            {
              "alg" : "SHA3-256",
              "content" : "142317d6f245390f4fd2d0c100b16281b8dfc5c0c2cff86943bdcc97039cb699"
            },
            {
              "alg" : "SHA3-512",
              "content" : "af0fb9137c90b65d1a07f72e4d51ae509956cdb8800f35c961b037cdda1fe4a14ce3b496cef71ba85f1621affcfe29cd42704ae4191ff0b090a9602087c8997b"
            }
          ]
        }
      ]
    },
    "component" : {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.spark/spark-common-utils-java_2.13@4.1.2?type=jar",
      "publisher" : "Apache Software Foundation",
      "group" : "org.apache.spark",
      "name" : "spark-common-utils-java_2.13",
      "version" : "4.1.2",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.spark/spark-common-utils-java_2.13@4.1.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://spark.apache.org/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/SPARK"
        },
        {
          "type" : "mailing-list",
          "url" : "dev-subscribe@spark.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "scm:git:git@github.com:apache/spark.git/common/spark-common-utils-java_2.13"
        }
      ]
    },
    "properties" : [
      {
        "name" : "maven.goal",
        "value" : "makeBom"
      },
      {
        "name" : "maven.scopes",
        "value" : "compile,provided,runtime,system"
      },
      {
        "name" : "cdx:reproducible",
        "value" : "enabled"
      }
    ]
  },
  "components" : [
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.spark/spark-tags_2.13@4.1.2?type=jar",
      "publisher" : "Apache Software Foundation",
      "group" : "org.apache.spark",
      "name" : "spark-tags_2.13",
      "version" : "4.1.2",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "7406afbee89c004197e24bb8c5484eb3"
        },
        {
          "alg" : "SHA-1",
          "content" : "07acf3f501e67edc973a89ebbf2d88e0f748a814"
        },
        {
          "alg" : "SHA-256",
          "content" : "9d6488817e15c0d339ee5019808357043d0821eeffddebe1569b978102c09a41"
        },
        {
          "alg" : "SHA-512",
          "content" : "e24b930e169e7e79607110c956198996efae4b45c397ddcf26ca63596171a7e78ef228f97306e266a7e29c44c9debe9341ffdd12d99ffa8aa55c5b388417ecf3"
        },
        {
          "alg" : "SHA-384",
          "content" : "5bc7b1d877f30a351e23fc557e37550a85c32c4b762863dc0aa7b923172af2bac89665996fd4b08ae97ab21108dd89b0"
        },
        {
          "alg" : "SHA3-384",
          "content" : "9be6f08df96e445405f471a552e992028c87448f7d7ab06f65479dba39e2f4cd44cd1f16ef891f8ec0b2f5a8d1d89d1f"
        },
        {
          "alg" : "SHA3-256",
          "content" : "4ac8affe8419366ddf695dd49140a280fef467638cb3b82366ba2f285ed8818d"
        },
        {
          "alg" : "SHA3-512",
          "content" : "81c0cbd781eebc2fc17a00712cf184b5e49914c33bebe09fcc8f014cdd22a04497186e883fbe570786366accfeeb996ed5513c8c1b94e7e784943e2bc32b9314"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.spark/spark-tags_2.13@4.1.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://spark.apache.org/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/SPARK"
        },
        {
          "type" : "mailing-list",
          "url" : "dev-subscribe@spark.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "scm:git:git@github.com:apache/spark.git/common/spark-tags_2.13"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.scala-lang/scala-library@2.13.17?type=jar",
      "publisher" : "LAMP/EPFL",
      "group" : "org.scala-lang",
      "name" : "scala-library",
      "version" : "2.13.17",
      "description" : "Standard library for the Scala Programming Language",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "de703408ac5c03df228ae79ee67656cc"
        },
        {
          "alg" : "SHA-1",
          "content" : "766aafc5e3c310bde92e405988bc7f6eb31d7cf9"
        },
        {
          "alg" : "SHA-256",
          "content" : "b7822c4225243215f185925724a6edff92cf18777a136cc738276c4446fac76c"
        },
        {
          "alg" : "SHA-512",
          "content" : "46261b135417e74a52eb9d2313cf1e0dcbd68498f45550110a94872f72c4e47e6220cd1c9d1b11ccc1569cc38f39b1b2045c8917a24a0d004b6786709882e9b4"
        },
        {
          "alg" : "SHA-384",
          "content" : "d48cae2c43372823c3619bbc8a4fc2c1e7d01c0f4c1465f7d439856099fe3eb8d58d3a2b1df0164821fcb6d24f0a6962"
        },
        {
          "alg" : "SHA3-384",
          "content" : "af3ec98ab75ff8e242f6a1417ec9ac8bd3b270e3b9d814f977c72aac2e0fd260b85ad6baf5a597468611398dbca0f0bc"
        },
        {
          "alg" : "SHA3-256",
          "content" : "a540b31a6bb9272b012fecca6d9c638fad5bb1d630d73a5f59827d6d9c2aa6f9"
        },
        {
          "alg" : "SHA3-512",
          "content" : "c607a4e4e22cb64869855c3df85371b572ce12872e87432a585606ebdcd9639d9a8dfb4fa658250974435a808935d200e02e6a52672c3b4532b9d56854c94fff"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.scala-lang/scala-library@2.13.17?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.scala-lang.org/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/scala/bug/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/scala/scala"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.21.2?type=jar",
      "publisher" : "FasterXML",
      "group" : "com.fasterxml.jackson.core",
      "name" : "jackson-databind",
      "version" : "2.21.2",
      "description" : "General data-binding functionality for Jackson: works on core streaming API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "add2fbe739574bfd1877c2cca25f46d1"
        },
        {
          "alg" : "SHA-1",
          "content" : "71ab8ff75b4fd74afdee0004173fdd15de1d6a28"
        },
        {
          "alg" : "SHA-256",
          "content" : "8c982f01f148d805f0aaac2339011244757e0df7c6ff8951f2fa3f433b8ed849"
        },
        {
          "alg" : "SHA-512",
          "content" : "1a47b012447bc8c3d0bc603b95fce1640d7fe7ead08bc33c106c0de811f061a1eda871863e4e1411e9c0c9c716d47c69960f7e492f54e8610f3e40c99f5c3962"
        },
        {
          "alg" : "SHA-384",
          "content" : "933e7dd454a933ff1fa451ff63d870708b9ca8cdf68b849594a08d9859468cc19b15836cef741f6c9ffb8cde31cc5c76"
        },
        {
          "alg" : "SHA3-384",
          "content" : "f2ef8662730bd798307c483f18f1bd54fc4fd5c9cacf4eba0715222cb4a3e46ea60dde95994764604f0621a05a1ce0c1"
        },
        {
          "alg" : "SHA3-256",
          "content" : "0bcf55950a1f2eb63569142af0d863b2496791cf9da864ff9b8b73796250c5f0"
        },
        {
          "alg" : "SHA3-512",
          "content" : "58132245b550d327faf1c8a2a0bccc85188a2abbab806ea646ce3b83340a750df534ed51db3de2a2fa167e4612371ea1ab84ab8d1badab5509f44d9c73958396"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.21.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/FasterXML/jackson"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://central.sonatype.com/api/v1/publisher"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/FasterXML/jackson-databind/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/FasterXML/jackson-databind"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.21?type=jar",
      "publisher" : "FasterXML",
      "group" : "com.fasterxml.jackson.core",
      "name" : "jackson-annotations",
      "version" : "2.21",
      "description" : "Core annotations used for value types, used by Jackson data binding package.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "e0d0c3e7300954f73e43c67d933aaea4"
        },
        {
          "alg" : "SHA-1",
          "content" : "b1bc1868bf02dc0bd6c7836257a036a331005309"
        },
        {
          "alg" : "SHA-256",
          "content" : "53ca085f4a150f703f49e1aabd935bd03b43e1ea3d55d135438292af22cef56b"
        },
        {
          "alg" : "SHA-512",
          "content" : "d832a99867acc2d5afb2596da760c50e6a6b54c1bbc8e6c4186f267a16e1d55c7a916ef8b034ad6b277c41e3342b91dcdc2e3dcea8bdccfe89e7c147894591be"
        },
        {
          "alg" : "SHA-384",
          "content" : "30b15d68f8da6f6c26aa9f6c95d09152b6c1a8092cd976cf600d63d1751509a73865f937e0ad97d8d55bf20f6a749b44"
        },
        {
          "alg" : "SHA3-384",
          "content" : "5205b51f6ed689cf31b58b98a61ca9e17a439c15d669dcb408ec4d430e77ac9ac57d39d5ca1f9973e8d184f6dd57ec4f"
        },
        {
          "alg" : "SHA3-256",
          "content" : "d6782d188a72b2bb96e4b595343e783012b3f98c30f7b9950244c21739334509"
        },
        {
          "alg" : "SHA3-512",
          "content" : "b648f1e9ffe818227d53fbde409e61858ac22d3f78705eaf08065587ed512c9b33b0f5e2222356bfb33fb2973bb5a3184e31d2a7099f8fc8d2fd23eb4612a4bf"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.21?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/FasterXML/jackson"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://central.sonatype.com/api/v1/publisher"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/FasterXML/jackson-annotations/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/FasterXML/jackson-annotations"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.21.2?type=jar",
      "publisher" : "FasterXML",
      "group" : "com.fasterxml.jackson.core",
      "name" : "jackson-core",
      "version" : "2.21.2",
      "description" : "Core Jackson processing abstractions (aka Streaming API), implementation for JSON",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "b62c1031b5f38fc58158fc0c559980cb"
        },
        {
          "alg" : "SHA-1",
          "content" : "7d11eac823392f28d8ee7bda77eaadfccbab83e5"
        },
        {
          "alg" : "SHA-256",
          "content" : "12e8655b100267b44d0f14d01b1f5082a5105e616174dc4307be1a761e92407b"
        },
        {
          "alg" : "SHA-512",
          "content" : "31a16a40b2e1a1a9467a66c93884c034527fb5af641a79bd6a563d4c3aaa0cfc8d8250f930d13c7fd70c18db579940ec54a49538c5a2e0fb9780c575808000ff"
        },
        {
          "alg" : "SHA-384",
          "content" : "cff72535be10b86fac89af4fd8eb0a7d89b0385712bff36cca6b94ad014acd9c2480bc3bc87b25b8621ccdf17cf8ae1f"
        },
        {
          "alg" : "SHA3-384",
          "content" : "1a7cd7206198350f0810989bc1448bb262099b14f3fc746d70651a3cf20a35948cc545326c07852dec25871605c862a3"
        },
        {
          "alg" : "SHA3-256",
          "content" : "7550f1f3812a13530bcb61db040d8b57415447395a62503dad6664e7dc62acc7"
        },
        {
          "alg" : "SHA3-512",
          "content" : "94e8097f45134c4e30e84cba9a4bd10dcec3e69ac3a9e289278be8f4005befe6efe33dec7bf4c349c3cd65928c8a1aaa0ffdfa689e60ca240393634eb384ed6e"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.21.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/FasterXML/jackson-core"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://central.sonatype.com/api/v1/publisher"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/FasterXML/jackson-core/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/FasterXML/jackson-core"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar",
      "publisher" : "QOS.ch",
      "group" : "org.slf4j",
      "name" : "slf4j-api",
      "version" : "2.0.17",
      "description" : "The slf4j API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "b6480d114a23683498ac3f746f959d2f"
        },
        {
          "alg" : "SHA-1",
          "content" : "d9e58ac9c7779ba3bf8142aff6c830617a7fe60f"
        },
        {
          "alg" : "SHA-256",
          "content" : "7b751d952061954d5abfed7181c1f645d336091b679891591d63329c622eb832"
        },
        {
          "alg" : "SHA-512",
          "content" : "9a3e79db6666a6096a3021bb2e1d918f30f589d8de51d6b600f8ebd92515a510ae2d8f87919cc2dfa8365d64f10194cac8dfa0fb950160eef0e9da06f6caaeb9"
        },
        {
          "alg" : "SHA-384",
          "content" : "6ea24f814a9b6ece428cfd0535e2f3b8927005745ef61006b50fdb5a90126ee5ea05650155382b3b755c5bce38ef3944"
        },
        {
          "alg" : "SHA3-384",
          "content" : "9b1015052f0ec43f9be09764e131834157599611cb52f6fe591c4ac6a8ab4817518f2a4b8871e5e738c8678e93af5557"
        },
        {
          "alg" : "SHA3-256",
          "content" : "00559b4f4066b4917ba4fe2a6f23111eaeada321112d030910d218ced9084b5e"
        },
        {
          "alg" : "SHA3-512",
          "content" : "9579c2f7e7516e177c2d493ccc9eb8150978cf19f6f09b28d116f6935239fd56dc6af2b62b3336f79b0b462445550cd1fb5377a07001a6f44aaab6a32fa2fa47"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/license/mit/"
          }
        }
      ],
      "purl" : "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.slf4j.org"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/qos-ch/slf4j/slf4j-parent/slf4j-api"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.slf4j/jul-to-slf4j@2.0.17?type=jar",
      "publisher" : "QOS.ch",
      "group" : "org.slf4j",
      "name" : "jul-to-slf4j",
      "version" : "2.0.17",
      "description" : "JUL to SLF4J bridge",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "a42936c56611e4794c42908fb3d3a647"
        },
        {
          "alg" : "SHA-1",
          "content" : "524cb6ccc2b68a57604750e1ab8b13b5a786a6aa"
        },
        {
          "alg" : "SHA-256",
          "content" : "a7afcd23b9cfd1475e55c94f943b808c5922035e7e2c2a5c65a487a4106bc538"
        },
        {
          "alg" : "SHA-512",
          "content" : "623426fb3a0a34c88b1fce686cbfaa8d17bf013f3583886dc94273bf2f767492044b48db6557988d764f0450129c9d496dd3c10ad548099879d80e3945f2f636"
        },
        {
          "alg" : "SHA-384",
          "content" : "fe66fb82c6f9dca6f8fb1d61e1fc6f4d8bc9b616cf89aa5b54fab933e1a55506a2400e8e9b1c92cb2787ac69731103f4"
        },
        {
          "alg" : "SHA3-384",
          "content" : "6f537049a039795f0f4c0653d2ab959fe0bfeae53f629148773db1a819b2308e16ef6e3f9d49a5741e9adf0ce5c34eda"
        },
        {
          "alg" : "SHA3-256",
          "content" : "f25e1333214a362f95ef31c8465f6d89b4bb7399638f4c4ad53a6d9f0ecbd649"
        },
        {
          "alg" : "SHA3-512",
          "content" : "a831c814c1064b39ead500e542de1decfe302688936b93c9aa781938bb0ae884907137ea34f18f99436f24fb9ddbbcecaf32df543c691d6311671f7e8b81dbc7"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/license/mit/"
          }
        }
      ],
      "purl" : "pkg:maven/org.slf4j/jul-to-slf4j@2.0.17?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.slf4j.org"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/qos-ch/slf4j/slf4j-parent/jul-to-slf4j"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.slf4j/jcl-over-slf4j@2.0.17?type=jar",
      "publisher" : "QOS.ch",
      "group" : "org.slf4j",
      "name" : "jcl-over-slf4j",
      "version" : "2.0.17",
      "description" : "JCL 1.2 implemented over SLF4J",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "4fcd46ca51e55b9fd9b0db34474927e0"
        },
        {
          "alg" : "SHA-1",
          "content" : "76ea503eb688f06556a9ba69995d7eab63e34531"
        },
        {
          "alg" : "SHA-256",
          "content" : "affd06771589ebfe454bb11315a4f466ecaa135b95f3e7939534cf1d2fd7064c"
        },
        {
          "alg" : "SHA-512",
          "content" : "7efb2771bad2e643b0e814cd78ab4f9af3ea166643700776618c397e9755ca11f4b7c00030562a619932c9d2ec5114fd253ece3abbc3db2f1a064431d8990733"
        },
        {
          "alg" : "SHA-384",
          "content" : "96fd8b2732de79c40e5e6613e324d2845dc6e19bf31bc7f3e9fa6730fa527cd16579ba9eb7915481faae1e9a32dc82fd"
        },
        {
          "alg" : "SHA3-384",
          "content" : "252a3e6847dafd84955a71724d71641b5c6508bcbbc1f2457fdb18994b61f6d78b08cbd40d5c430743950e351ec79835"
        },
        {
          "alg" : "SHA3-256",
          "content" : "4c066cec2c40de9b5743f43d99b629d60de937718f69ffd837bbe5902682ee92"
        },
        {
          "alg" : "SHA3-512",
          "content" : "3334a1fff0751378abe8e010ca9716a85a15a90450265699c32886d2e8f9ff63df89237667a262350d860dbfb2f20fffff14e9a094f0bd2acf990dd543c2b86f"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.slf4j/jcl-over-slf4j@2.0.17?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.slf4j.org"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/qos-ch/slf4j/slf4j-parent/jcl-over-slf4j"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.logging.log4j/log4j-slf4j2-impl@2.24.3?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.logging.log4j",
      "name" : "log4j-slf4j2-impl",
      "version" : "2.24.3",
      "description" : "SLF4J 2 provider (binding) for the Apache Log4j API. It forwards SLF4J 2 calls to the Log4j API. This effectively allows using Log4j as an implementation of SLF4J 2. (Refer to the `log4j-to-slf4j` artifact for forwarding the Log4j API to SLF4J.)",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "0ec2df0e6ab3e63e2d7b043bd0478c3f"
        },
        {
          "alg" : "SHA-1",
          "content" : "c3bda2dc612bfc780ad06c5acf5e0ffd55b770e5"
        },
        {
          "alg" : "SHA-256",
          "content" : "cdaac22e40ec30c4096e1ebe8c454c8826c0d1c378d7db5d7b3ad166354b0bd3"
        },
        {
          "alg" : "SHA-512",
          "content" : "c837d1724dc85479ec0eabfd8adef32d5bc3e9ba94c058eac6904894c9d3dff4f85762287159b0ae9f1e314e64861414de36a0d6e314e2d3b7aef8bedbd37b2b"
        },
        {
          "alg" : "SHA-384",
          "content" : "9c4eb0ae56d844b202546868a8eec8529647d7b38967234ed79a794cc4b8740bf3264a2958d5db7111de588efd2dfc37"
        },
        {
          "alg" : "SHA3-384",
          "content" : "246549536ddbbd348a1f37d497f9f7c684b53311008ee3cec2705e86e35afa274774be4f0da966923ed32f77a3e9f4e5"
        },
        {
          "alg" : "SHA3-256",
          "content" : "213a0e3d560934abdfa725581e5b7f49155e95328ad67be9f49afa6275592370"
        },
        {
          "alg" : "SHA3-512",
          "content" : "81706150cf1a117569e4bdd8061964be4bf3042cdabd7bc24b5f524d212d4fca69c6952a8bafa41f973858ba9161a6bc89bb46880243c727b5f70a44b6b77a51"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.logging.log4j/log4j-slf4j2-impl@2.24.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://logging.apache.org/log4j/2.x/log4j/log4j-slf4j2-impl/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/logging-log4j2/actions"
        },
        {
          "type" : "distribution",
          "url" : "https://logging.apache.org/download.html"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/apache/logging-log4j2/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?log4j-user@logging.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/logging-log4j2"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.logging.log4j/log4j-api@2.24.3?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.logging.log4j",
      "name" : "log4j-api",
      "version" : "2.24.3",
      "description" : "The logging API of the Log4j project. Library and application code can log through this API. It contains a simple built-in implementation (`SimpleLogger`) for trivial use cases. Production applications are recommended to use Log4j API in combination with a fully-fledged implementation, such as Log4j Core.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "d89516699543c5c21be87ee1760695f3"
        },
        {
          "alg" : "SHA-1",
          "content" : "b02c125db8b6d295adf72ae6e71af5d83bce2370"
        },
        {
          "alg" : "SHA-256",
          "content" : "5b4a0a0cd0e751ded431c162442bdbdd53328d1f8bb2bae5fc1bbeee0f66d80f"
        },
        {
          "alg" : "SHA-512",
          "content" : "d936ac37b3d7ca2e4370ef122629c5ceb0bef60a6c08a3bd8bb278204dbed84bb888aaa307c58e80e4e9d645b73792433f52adcccd30378fbac99b1d271042f7"
        },
        {
          "alg" : "SHA-384",
          "content" : "d376ab3673186a1a39ea8b3d3c8359bb16dbb3f5d3782c182a112ab19b61d7730434c6d0f631d43d6daae66005d1df4e"
        },
        {
          "alg" : "SHA3-384",
          "content" : "7ee1b17a329d90bf648d05defced8d79f7bfbca66cc7e90aa2e1b2d7622697d535969e50d1a03460447eda2fa008f86c"
        },
        {
          "alg" : "SHA3-256",
          "content" : "5d2ad18a3352c3d7269ecb8d52d6a5ac8bf0d0d937e4809f5023a45d0f8f50f3"
        },
        {
          "alg" : "SHA3-512",
          "content" : "7e964e6425a1198e2568a9e8c326f730b7d139f71e8d3b1b440aa90860f136f443e5ebd62aa022c1c7834e23995ed0992f68dfb1760140d469b85fed84815ae1"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.logging.log4j/log4j-api@2.24.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://logging.apache.org/log4j/2.x/log4j/log4j-api/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/logging-log4j2/actions"
        },
        {
          "type" : "distribution",
          "url" : "https://logging.apache.org/download.html"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/apache/logging-log4j2/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?log4j-user@logging.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/logging-log4j2"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.logging.log4j/log4j-core@2.24.3?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.logging.log4j",
      "name" : "log4j-core",
      "version" : "2.24.3",
      "description" : "A versatile, industrial-grade, and reference implementation of the Log4j API. It bundles a rich set of components to assist various use cases: Appenders targeting files, network sockets, databases, SMTP servers; Layouts that can render CSV, HTML, JSON, Syslog, etc. formatted outputs; Filters that can be configured using log event rates, regular expressions, scripts, time, etc. It contains several extension points to introduce custom components, if needed.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "3f52ab7782fdd1349bd872b5dcf48bed"
        },
        {
          "alg" : "SHA-1",
          "content" : "7f6a261243ca767c7f38fd4b542bcde626c8894e"
        },
        {
          "alg" : "SHA-256",
          "content" : "7eb4084596ae25bd3c61698e48e8d0ab65a9260758884ed5cbb9c6e55c44a56a"
        },
        {
          "alg" : "SHA-512",
          "content" : "61332e92ea6ef6656994105a675eb8de85ec859f07cde9da5ef16a22cbf2e0d7695348e04e066dd1a1ff0146ec03a8884974319d4f71155db9c9ab0d073197ef"
        },
        {
          "alg" : "SHA-384",
          "content" : "fd3cd2ea5cdc84698b46833cbcdb10e3c1e507a2cba0293b487f45efa7f12f52bce9e2c0a96b0f1632e2ff2549ac2eb2"
        },
        {
          "alg" : "SHA3-384",
          "content" : "852c87ea21b50676f338fa423d203fa52845bb201b994afd963bbc8100ecc0f987136a21bf6a6bbd9ab13ee008de9822"
        },
        {
          "alg" : "SHA3-256",
          "content" : "fc5b8e9367369772309a23b9ba1c2384be7ace8f6dd6ce6a9c37c322b86e4f1b"
        },
        {
          "alg" : "SHA3-512",
          "content" : "c1de50e5cfa5a415ad97cff532d3d3df825ff97ee2c41ac11e50cbca86e37577b9d929e6675c2336008893686db1cdebe878234f15d0e4afc1309eea3f32020b"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.logging.log4j/log4j-core@2.24.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://logging.apache.org/log4j/2.x/log4j/log4j-core/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/logging-log4j2/actions"
        },
        {
          "type" : "distribution",
          "url" : "https://logging.apache.org/download.html"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/apache/logging-log4j2/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?log4j-user@logging.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/logging-log4j2"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.logging.log4j/log4j-1.2-api@2.24.3?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.logging.log4j",
      "name" : "log4j-1.2-api",
      "version" : "2.24.3",
      "description" : "The Apache Log4j 1.x Compatibility API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "b2486768ef6049ed7c015622702bf99c"
        },
        {
          "alg" : "SHA-1",
          "content" : "880d64cfe147369dae43e7816b608fae2096abd0"
        },
        {
          "alg" : "SHA-256",
          "content" : "d541ebd1316f53374991e836ad52f32c11bf465cb6672d397f0444814528ef8b"
        },
        {
          "alg" : "SHA-512",
          "content" : "e486a46291842cf60410aa79b7051cd7ea9b14003ca06e8f9fb480729275d0c5b031d917c7a5716d3f80c0fb86a1d77123363200e11c4a330ba30b3479d2d780"
        },
        {
          "alg" : "SHA-384",
          "content" : "ce99785db26b5ef2bfdcd95e3c2a513a7b6901cb28bf8bdcbadba0642d941f57ffeacbf536954b0a81c9cfa28246611b"
        },
        {
          "alg" : "SHA3-384",
          "content" : "2e156eaaa832f43eb49fa2ae52d99599dafc1d51dd433ae3a004b9b48506fbb6f5a131b2e9ea05ef39160d29d0e6a830"
        },
        {
          "alg" : "SHA3-256",
          "content" : "638588e9577734a335e9cac2db690b54854fdf91717b12a5925cff07f9069321"
        },
        {
          "alg" : "SHA3-512",
          "content" : "183ab2706cfa270ceff91d58c2cc0f6d09051ffe06a867feddd5e7aca26341c63ce6f5334153ac80dc09f0721ed5ce623206101b3147f32d988afe7a00d46838"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.logging.log4j/log4j-1.2-api@2.24.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://logging.apache.org/log4j/2.x/log4j/log4j-1.2-api/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/logging-log4j2/actions"
        },
        {
          "type" : "distribution",
          "url" : "https://logging.apache.org/download.html"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/apache/logging-log4j2/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?log4j-user@logging.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/logging-log4j2"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.logging.log4j/log4j-layout-template-json@2.24.3?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.logging.log4j",
      "name" : "log4j-layout-template-json",
      "version" : "2.24.3",
      "description" : "Apache Log4j Layout for producing JSON output that is structured according to a user-provided template.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "0e751dbc1813c14097e6f1ecdc77f14d"
        },
        {
          "alg" : "SHA-1",
          "content" : "bc0573ca981a2a243cd7a8c9b0562df8bf809d39"
        },
        {
          "alg" : "SHA-256",
          "content" : "53e89d35be783d0d47de319dcfeed5b2ea16b0b39929a302f2b7e681efaf18ec"
        },
        {
          "alg" : "SHA-512",
          "content" : "165adeb26a6b70219d3ff42cc8aaed77b1a530ebc9a9bdecea8f8cd6d22249963949b9b944449204c1e484360a121d9bfe3d729a570eb87618b1105fba13f7eb"
        },
        {
          "alg" : "SHA-384",
          "content" : "22fabb0d4892463b59980a23b60789ad0628eeb6147adbef73ff0d6ffe2db2d458b50c87b5f779cdb298c31465120f58"
        },
        {
          "alg" : "SHA3-384",
          "content" : "c0ba5cd02e215f474c621412ceb612413ccb7ce0d232a1a3c99970391dc4ad8cc232070a2a1ba52d33cead1ccfe44591"
        },
        {
          "alg" : "SHA3-256",
          "content" : "afddbd8630c9bb75daf8b7655b657c38189cf6b791845dd1962822961356ee06"
        },
        {
          "alg" : "SHA3-512",
          "content" : "6f2d8ff863e70e8e048c371d024dda31f86be10497f0d56bb0b16f5aaff5207284bbb6b609a1109a8a27f33c6ca6b5d7b6ce7c836a5a2ba0099f57a9a77022ca"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.logging.log4j/log4j-layout-template-json@2.24.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://logging.apache.org/log4j/2.x/log4j/log4j-layout-template-json/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/logging-log4j2/actions"
        },
        {
          "type" : "distribution",
          "url" : "https://logging.apache.org/download.html"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/apache/logging-log4j2/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?log4j-user@logging.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/logging-log4j2"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.spark-project.spark/unused@1.0.0?type=jar",
      "group" : "org.spark-project.spark",
      "name" : "unused",
      "version" : "1.0.0",
      "description" : "Sonatype helps open source projects to set up Maven repositories on https://oss.sonatype.org/",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "763373ce9fe48581d4f2b8ffca35bb82"
        },
        {
          "alg" : "SHA-1",
          "content" : "205fe37a2fade6ce6dfcf8eff57ed21a4a1c22af"
        },
        {
          "alg" : "SHA-256",
          "content" : "00fd27fc9bde701581e7dcf5b95981d9e749a1c176bb8bfcd49f675768ff6bf0"
        },
        {
          "alg" : "SHA-512",
          "content" : "08a6ac8d2dc9d89ff557c7e96096c76e687efe3ce166aa6dbb76865bbef64dc8b6ecb5561ef03c2451a688ccdb3876b8f16b9137d02c290a698e917a5656b6fa"
        },
        {
          "alg" : "SHA-384",
          "content" : "c8c51d0d851835107db273d7ce522f026587d922c9d1d34739c3dedf9b7737c1c491e961dc7931f46c476d28acbc91f6"
        },
        {
          "alg" : "SHA3-384",
          "content" : "49f87e8e11e7a4d9da068d33185a89bb8e7eef339a0e2932246acbaa8ad90a30ec353e9e71147a78a8b74dfe4bdd3a3b"
        },
        {
          "alg" : "SHA3-256",
          "content" : "a943ae35f4d584810323330b6ef241a869b0187e4d3dfd79f8e504ebb0882cf2"
        },
        {
          "alg" : "SHA3-512",
          "content" : "1e7845ca316f39bc5ffc75afe0dcb437fe13b8c2133a396824dec8f3a5bd56243086989264f8f40df4cb2ba749709e3a90cdceb39c05727cbd82d86570e4f57d"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.spark-project.spark/unused@1.0.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://nexus.sonatype.org/oss-repository-hosting.html/unused"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ]
    }
  ],
  "dependencies" : [
    {
      "ref" : "pkg:maven/org.apache.spark/spark-common-utils-java_2.13@4.1.2?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.spark/spark-tags_2.13@4.1.2?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.21.2?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar",
        "pkg:maven/org.slf4j/jul-to-slf4j@2.0.17?type=jar",
        "pkg:maven/org.slf4j/jcl-over-slf4j@2.0.17?type=jar",
        "pkg:maven/org.apache.logging.log4j/log4j-slf4j2-impl@2.24.3?type=jar",
        "pkg:maven/org.apache.logging.log4j/log4j-api@2.24.3?type=jar",
        "pkg:maven/org.apache.logging.log4j/log4j-core@2.24.3?type=jar",
        "pkg:maven/org.apache.logging.log4j/log4j-1.2-api@2.24.3?type=jar",
        "pkg:maven/org.apache.logging.log4j/log4j-layout-template-json@2.24.3?type=jar",
        "pkg:maven/org.spark-project.spark/unused@1.0.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.spark/spark-tags_2.13@4.1.2?type=jar",
      "dependsOn" : [
        "pkg:maven/org.scala-lang/scala-library@2.13.17?type=jar",
        "pkg:maven/org.spark-project.spark/unused@1.0.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.scala-lang/scala-library@2.13.17?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.spark-project.spark/unused@1.0.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.21.2?type=jar",
      "dependsOn" : [
        "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.21?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.21.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.21?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.21.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.slf4j/jul-to-slf4j@2.0.17?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.slf4j/jcl-over-slf4j@2.0.17?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.logging.log4j/log4j-slf4j2-impl@2.24.3?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.logging.log4j/log4j-api@2.24.3?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar",
        "pkg:maven/org.apache.logging.log4j/log4j-core@2.24.3?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.logging.log4j/log4j-api@2.24.3?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.logging.log4j/log4j-core@2.24.3?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.logging.log4j/log4j-api@2.24.3?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.logging.log4j/log4j-1.2-api@2.24.3?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.logging.log4j/log4j-api@2.24.3?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.logging.log4j/log4j-layout-template-json@2.24.3?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.logging.log4j/log4j-core@2.24.3?type=jar"
      ]
    }
  ]
}