build OWASP Foundation org.cyclonedx cyclonedx-maven-plugin 2.9.1 CycloneDX Maven plugin 9c7a565cf28cce58557d0c621c5ea4b1 be882d5a22050bfa9d19090b1420c188617d0e1c 698e0f37184a5b28c245c4065fd036dfce253b52f82fbb7113d81d36326cc249 c0f0b11026858166f872a2eb54719492e5cecaa0bc9cd6b30b3ecb4a174eed220f4a1b5829d18d6734128e778d3cb3db7ffed177c92866133129cb29081814a0 d80964707dfe5caca8c70521d5066f57589304c0a657e6fbc7c0614ea0fc7b3b3dbe7778361eee0f54ba111e9cb0ffcb 80bc3a275d9514bc457461ff52a72add8c7ecbbc01d8912efce57139016c544ee776981851be0a58fa977ab4221f703f 142317d6f245390f4fd2d0c100b16281b8dfc5c0c2cff86943bdcc97039cb699 af0fb9137c90b65d1a07f72e4d51ae509956cdb8800f35c961b037cdda1fe4a14ce3b496cef71ba85f1621affcfe29cd42704ae4191ff0b090a9602087c8997b Apache Software Foundation org.apache.spark spark-common-utils-java_2.13 4.1.2 The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users. Apache-2.0 https://www.apache.org/licenses/LICENSE-2.0 pkg:maven/org.apache.spark/spark-common-utils-java_2.13@4.1.2?type=jar https://spark.apache.org/ https://repository.apache.org/service/local/staging/deploy/maven2 https://issues.apache.org/jira/browse/SPARK dev-subscribe@spark.apache.org scm:git:git@github.com:apache/spark.git/common/spark-common-utils-java_2.13 makeBom compile,provided,runtime,system enabled Apache Software Foundation org.apache.spark spark-tags_2.13 4.1.2 The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users. required 7406afbee89c004197e24bb8c5484eb3 07acf3f501e67edc973a89ebbf2d88e0f748a814 9d6488817e15c0d339ee5019808357043d0821eeffddebe1569b978102c09a41 e24b930e169e7e79607110c956198996efae4b45c397ddcf26ca63596171a7e78ef228f97306e266a7e29c44c9debe9341ffdd12d99ffa8aa55c5b388417ecf3 5bc7b1d877f30a351e23fc557e37550a85c32c4b762863dc0aa7b923172af2bac89665996fd4b08ae97ab21108dd89b0 9be6f08df96e445405f471a552e992028c87448f7d7ab06f65479dba39e2f4cd44cd1f16ef891f8ec0b2f5a8d1d89d1f 4ac8affe8419366ddf695dd49140a280fef467638cb3b82366ba2f285ed8818d 81c0cbd781eebc2fc17a00712cf184b5e49914c33bebe09fcc8f014cdd22a04497186e883fbe570786366accfeeb996ed5513c8c1b94e7e784943e2bc32b9314 Apache-2.0 https://www.apache.org/licenses/LICENSE-2.0 pkg:maven/org.apache.spark/spark-tags_2.13@4.1.2?type=jar https://spark.apache.org/ https://repository.apache.org/service/local/staging/deploy/maven2 https://issues.apache.org/jira/browse/SPARK dev-subscribe@spark.apache.org scm:git:git@github.com:apache/spark.git/common/spark-tags_2.13 LAMP/EPFL org.scala-lang scala-library 2.13.17 Standard library for the Scala Programming Language required de703408ac5c03df228ae79ee67656cc 766aafc5e3c310bde92e405988bc7f6eb31d7cf9 b7822c4225243215f185925724a6edff92cf18777a136cc738276c4446fac76c 46261b135417e74a52eb9d2313cf1e0dcbd68498f45550110a94872f72c4e47e6220cd1c9d1b11ccc1569cc38f39b1b2045c8917a24a0d004b6786709882e9b4 d48cae2c43372823c3619bbc8a4fc2c1e7d01c0f4c1465f7d439856099fe3eb8d58d3a2b1df0164821fcb6d24f0a6962 af3ec98ab75ff8e242f6a1417ec9ac8bd3b270e3b9d814f977c72aac2e0fd260b85ad6baf5a597468611398dbca0f0bc a540b31a6bb9272b012fecca6d9c638fad5bb1d630d73a5f59827d6d9c2aa6f9 c607a4e4e22cb64869855c3df85371b572ce12872e87432a585606ebdcd9639d9a8dfb4fa658250974435a808935d200e02e6a52672c3b4532b9d56854c94fff Apache-2.0 https://www.apache.org/licenses/LICENSE-2.0 pkg:maven/org.scala-lang/scala-library@2.13.17?type=jar https://www.scala-lang.org/ https://github.com/scala/bug/issues https://github.com/scala/scala FasterXML com.fasterxml.jackson.core jackson-databind 2.21.2 General data-binding functionality for Jackson: works on core streaming API required add2fbe739574bfd1877c2cca25f46d1 71ab8ff75b4fd74afdee0004173fdd15de1d6a28 8c982f01f148d805f0aaac2339011244757e0df7c6ff8951f2fa3f433b8ed849 1a47b012447bc8c3d0bc603b95fce1640d7fe7ead08bc33c106c0de811f061a1eda871863e4e1411e9c0c9c716d47c69960f7e492f54e8610f3e40c99f5c3962 933e7dd454a933ff1fa451ff63d870708b9ca8cdf68b849594a08d9859468cc19b15836cef741f6c9ffb8cde31cc5c76 f2ef8662730bd798307c483f18f1bd54fc4fd5c9cacf4eba0715222cb4a3e46ea60dde95994764604f0621a05a1ce0c1 0bcf55950a1f2eb63569142af0d863b2496791cf9da864ff9b8b73796250c5f0 58132245b550d327faf1c8a2a0bccc85188a2abbab806ea646ce3b83340a750df534ed51db3de2a2fa167e4612371ea1ab84ab8d1badab5509f44d9c73958396 Apache-2.0 pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.21.2?type=jar https://github.com/FasterXML/jackson https://central.sonatype.com/api/v1/publisher https://github.com/FasterXML/jackson-databind/issues https://github.com/FasterXML/jackson-databind FasterXML com.fasterxml.jackson.core jackson-annotations 2.21 Core annotations used for value types, used by Jackson data binding package. required e0d0c3e7300954f73e43c67d933aaea4 b1bc1868bf02dc0bd6c7836257a036a331005309 53ca085f4a150f703f49e1aabd935bd03b43e1ea3d55d135438292af22cef56b d832a99867acc2d5afb2596da760c50e6a6b54c1bbc8e6c4186f267a16e1d55c7a916ef8b034ad6b277c41e3342b91dcdc2e3dcea8bdccfe89e7c147894591be 30b15d68f8da6f6c26aa9f6c95d09152b6c1a8092cd976cf600d63d1751509a73865f937e0ad97d8d55bf20f6a749b44 5205b51f6ed689cf31b58b98a61ca9e17a439c15d669dcb408ec4d430e77ac9ac57d39d5ca1f9973e8d184f6dd57ec4f d6782d188a72b2bb96e4b595343e783012b3f98c30f7b9950244c21739334509 b648f1e9ffe818227d53fbde409e61858ac22d3f78705eaf08065587ed512c9b33b0f5e2222356bfb33fb2973bb5a3184e31d2a7099f8fc8d2fd23eb4612a4bf Apache-2.0 pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.21?type=jar https://github.com/FasterXML/jackson https://central.sonatype.com/api/v1/publisher https://github.com/FasterXML/jackson-annotations/issues https://github.com/FasterXML/jackson-annotations FasterXML com.fasterxml.jackson.core jackson-core 2.21.2 Core Jackson processing abstractions (aka Streaming API), implementation for JSON required b62c1031b5f38fc58158fc0c559980cb 7d11eac823392f28d8ee7bda77eaadfccbab83e5 12e8655b100267b44d0f14d01b1f5082a5105e616174dc4307be1a761e92407b 31a16a40b2e1a1a9467a66c93884c034527fb5af641a79bd6a563d4c3aaa0cfc8d8250f930d13c7fd70c18db579940ec54a49538c5a2e0fb9780c575808000ff cff72535be10b86fac89af4fd8eb0a7d89b0385712bff36cca6b94ad014acd9c2480bc3bc87b25b8621ccdf17cf8ae1f 1a7cd7206198350f0810989bc1448bb262099b14f3fc746d70651a3cf20a35948cc545326c07852dec25871605c862a3 7550f1f3812a13530bcb61db040d8b57415447395a62503dad6664e7dc62acc7 94e8097f45134c4e30e84cba9a4bd10dcec3e69ac3a9e289278be8f4005befe6efe33dec7bf4c349c3cd65928c8a1aaa0ffdfa689e60ca240393634eb384ed6e Apache-2.0 pkg:maven/com.fasterxml.jackson.core/jackson-core@2.21.2?type=jar https://github.com/FasterXML/jackson-core https://central.sonatype.com/api/v1/publisher https://github.com/FasterXML/jackson-core/issues https://github.com/FasterXML/jackson-core QOS.ch org.slf4j slf4j-api 2.0.17 The slf4j API required b6480d114a23683498ac3f746f959d2f d9e58ac9c7779ba3bf8142aff6c830617a7fe60f 7b751d952061954d5abfed7181c1f645d336091b679891591d63329c622eb832 9a3e79db6666a6096a3021bb2e1d918f30f589d8de51d6b600f8ebd92515a510ae2d8f87919cc2dfa8365d64f10194cac8dfa0fb950160eef0e9da06f6caaeb9 6ea24f814a9b6ece428cfd0535e2f3b8927005745ef61006b50fdb5a90126ee5ea05650155382b3b755c5bce38ef3944 9b1015052f0ec43f9be09764e131834157599611cb52f6fe591c4ac6a8ab4817518f2a4b8871e5e738c8678e93af5557 00559b4f4066b4917ba4fe2a6f23111eaeada321112d030910d218ced9084b5e 9579c2f7e7516e177c2d493ccc9eb8150978cf19f6f09b28d116f6935239fd56dc6af2b62b3336f79b0b462445550cd1fb5377a07001a6f44aaab6a32fa2fa47 MIT https://opensource.org/license/mit/ pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar http://www.slf4j.org https://oss.sonatype.org/service/local/staging/deploy/maven2/ https://github.com/qos-ch/slf4j/slf4j-parent/slf4j-api QOS.ch org.slf4j jul-to-slf4j 2.0.17 JUL to SLF4J bridge required a42936c56611e4794c42908fb3d3a647 524cb6ccc2b68a57604750e1ab8b13b5a786a6aa a7afcd23b9cfd1475e55c94f943b808c5922035e7e2c2a5c65a487a4106bc538 623426fb3a0a34c88b1fce686cbfaa8d17bf013f3583886dc94273bf2f767492044b48db6557988d764f0450129c9d496dd3c10ad548099879d80e3945f2f636 fe66fb82c6f9dca6f8fb1d61e1fc6f4d8bc9b616cf89aa5b54fab933e1a55506a2400e8e9b1c92cb2787ac69731103f4 6f537049a039795f0f4c0653d2ab959fe0bfeae53f629148773db1a819b2308e16ef6e3f9d49a5741e9adf0ce5c34eda f25e1333214a362f95ef31c8465f6d89b4bb7399638f4c4ad53a6d9f0ecbd649 a831c814c1064b39ead500e542de1decfe302688936b93c9aa781938bb0ae884907137ea34f18f99436f24fb9ddbbcecaf32df543c691d6311671f7e8b81dbc7 MIT https://opensource.org/license/mit/ pkg:maven/org.slf4j/jul-to-slf4j@2.0.17?type=jar http://www.slf4j.org https://oss.sonatype.org/service/local/staging/deploy/maven2/ https://github.com/qos-ch/slf4j/slf4j-parent/jul-to-slf4j QOS.ch org.slf4j jcl-over-slf4j 2.0.17 JCL 1.2 implemented over SLF4J required 4fcd46ca51e55b9fd9b0db34474927e0 76ea503eb688f06556a9ba69995d7eab63e34531 affd06771589ebfe454bb11315a4f466ecaa135b95f3e7939534cf1d2fd7064c 7efb2771bad2e643b0e814cd78ab4f9af3ea166643700776618c397e9755ca11f4b7c00030562a619932c9d2ec5114fd253ece3abbc3db2f1a064431d8990733 96fd8b2732de79c40e5e6613e324d2845dc6e19bf31bc7f3e9fa6730fa527cd16579ba9eb7915481faae1e9a32dc82fd 252a3e6847dafd84955a71724d71641b5c6508bcbbc1f2457fdb18994b61f6d78b08cbd40d5c430743950e351ec79835 4c066cec2c40de9b5743f43d99b629d60de937718f69ffd837bbe5902682ee92 3334a1fff0751378abe8e010ca9716a85a15a90450265699c32886d2e8f9ff63df89237667a262350d860dbfb2f20fffff14e9a094f0bd2acf990dd543c2b86f Apache-2.0 https://www.apache.org/licenses/LICENSE-2.0 pkg:maven/org.slf4j/jcl-over-slf4j@2.0.17?type=jar http://www.slf4j.org https://oss.sonatype.org/service/local/staging/deploy/maven2/ https://github.com/qos-ch/slf4j/slf4j-parent/jcl-over-slf4j The Apache Software Foundation org.apache.logging.log4j log4j-slf4j2-impl 2.24.3 SLF4J 2 provider (binding) for the Apache Log4j API. It forwards SLF4J 2 calls to the Log4j API. This effectively allows using Log4j as an implementation of SLF4J 2. (Refer to the `log4j-to-slf4j` artifact for forwarding the Log4j API to SLF4J.) required 0ec2df0e6ab3e63e2d7b043bd0478c3f c3bda2dc612bfc780ad06c5acf5e0ffd55b770e5 cdaac22e40ec30c4096e1ebe8c454c8826c0d1c378d7db5d7b3ad166354b0bd3 c837d1724dc85479ec0eabfd8adef32d5bc3e9ba94c058eac6904894c9d3dff4f85762287159b0ae9f1e314e64861414de36a0d6e314e2d3b7aef8bedbd37b2b 9c4eb0ae56d844b202546868a8eec8529647d7b38967234ed79a794cc4b8740bf3264a2958d5db7111de588efd2dfc37 246549536ddbbd348a1f37d497f9f7c684b53311008ee3cec2705e86e35afa274774be4f0da966923ed32f77a3e9f4e5 213a0e3d560934abdfa725581e5b7f49155e95328ad67be9f49afa6275592370 81706150cf1a117569e4bdd8061964be4bf3042cdabd7bc24b5f524d212d4fca69c6952a8bafa41f973858ba9161a6bc89bb46880243c727b5f70a44b6b77a51 Apache-2.0 https://www.apache.org/licenses/LICENSE-2.0 pkg:maven/org.apache.logging.log4j/log4j-slf4j2-impl@2.24.3?type=jar https://logging.apache.org/log4j/2.x/log4j/log4j-slf4j2-impl/ https://github.com/apache/logging-log4j2/actions https://logging.apache.org/download.html https://repository.apache.org/service/local/staging/deploy/maven2 https://github.com/apache/logging-log4j2/issues https://lists.apache.org/list.html?log4j-user@logging.apache.org https://github.com/apache/logging-log4j2 The Apache Software Foundation org.apache.logging.log4j log4j-api 2.24.3 The logging API of the Log4j project. Library and application code can log through this API. It contains a simple built-in implementation (`SimpleLogger`) for trivial use cases. Production applications are recommended to use Log4j API in combination with a fully-fledged implementation, such as Log4j Core. required d89516699543c5c21be87ee1760695f3 b02c125db8b6d295adf72ae6e71af5d83bce2370 5b4a0a0cd0e751ded431c162442bdbdd53328d1f8bb2bae5fc1bbeee0f66d80f d936ac37b3d7ca2e4370ef122629c5ceb0bef60a6c08a3bd8bb278204dbed84bb888aaa307c58e80e4e9d645b73792433f52adcccd30378fbac99b1d271042f7 d376ab3673186a1a39ea8b3d3c8359bb16dbb3f5d3782c182a112ab19b61d7730434c6d0f631d43d6daae66005d1df4e 7ee1b17a329d90bf648d05defced8d79f7bfbca66cc7e90aa2e1b2d7622697d535969e50d1a03460447eda2fa008f86c 5d2ad18a3352c3d7269ecb8d52d6a5ac8bf0d0d937e4809f5023a45d0f8f50f3 7e964e6425a1198e2568a9e8c326f730b7d139f71e8d3b1b440aa90860f136f443e5ebd62aa022c1c7834e23995ed0992f68dfb1760140d469b85fed84815ae1 Apache-2.0 https://www.apache.org/licenses/LICENSE-2.0 pkg:maven/org.apache.logging.log4j/log4j-api@2.24.3?type=jar https://logging.apache.org/log4j/2.x/log4j/log4j-api/ https://github.com/apache/logging-log4j2/actions https://logging.apache.org/download.html https://repository.apache.org/service/local/staging/deploy/maven2 https://github.com/apache/logging-log4j2/issues https://lists.apache.org/list.html?log4j-user@logging.apache.org https://github.com/apache/logging-log4j2 The Apache Software Foundation org.apache.logging.log4j log4j-core 2.24.3 A versatile, industrial-grade, and reference implementation of the Log4j API. It bundles a rich set of components to assist various use cases: Appenders targeting files, network sockets, databases, SMTP servers; Layouts that can render CSV, HTML, JSON, Syslog, etc. formatted outputs; Filters that can be configured using log event rates, regular expressions, scripts, time, etc. It contains several extension points to introduce custom components, if needed. required 3f52ab7782fdd1349bd872b5dcf48bed 7f6a261243ca767c7f38fd4b542bcde626c8894e 7eb4084596ae25bd3c61698e48e8d0ab65a9260758884ed5cbb9c6e55c44a56a 61332e92ea6ef6656994105a675eb8de85ec859f07cde9da5ef16a22cbf2e0d7695348e04e066dd1a1ff0146ec03a8884974319d4f71155db9c9ab0d073197ef fd3cd2ea5cdc84698b46833cbcdb10e3c1e507a2cba0293b487f45efa7f12f52bce9e2c0a96b0f1632e2ff2549ac2eb2 852c87ea21b50676f338fa423d203fa52845bb201b994afd963bbc8100ecc0f987136a21bf6a6bbd9ab13ee008de9822 fc5b8e9367369772309a23b9ba1c2384be7ace8f6dd6ce6a9c37c322b86e4f1b c1de50e5cfa5a415ad97cff532d3d3df825ff97ee2c41ac11e50cbca86e37577b9d929e6675c2336008893686db1cdebe878234f15d0e4afc1309eea3f32020b Apache-2.0 https://www.apache.org/licenses/LICENSE-2.0 pkg:maven/org.apache.logging.log4j/log4j-core@2.24.3?type=jar https://logging.apache.org/log4j/2.x/log4j/log4j-core/ https://github.com/apache/logging-log4j2/actions https://logging.apache.org/download.html https://repository.apache.org/service/local/staging/deploy/maven2 https://github.com/apache/logging-log4j2/issues https://lists.apache.org/list.html?log4j-user@logging.apache.org https://github.com/apache/logging-log4j2 The Apache Software Foundation org.apache.logging.log4j log4j-1.2-api 2.24.3 The Apache Log4j 1.x Compatibility API required b2486768ef6049ed7c015622702bf99c 880d64cfe147369dae43e7816b608fae2096abd0 d541ebd1316f53374991e836ad52f32c11bf465cb6672d397f0444814528ef8b e486a46291842cf60410aa79b7051cd7ea9b14003ca06e8f9fb480729275d0c5b031d917c7a5716d3f80c0fb86a1d77123363200e11c4a330ba30b3479d2d780 ce99785db26b5ef2bfdcd95e3c2a513a7b6901cb28bf8bdcbadba0642d941f57ffeacbf536954b0a81c9cfa28246611b 2e156eaaa832f43eb49fa2ae52d99599dafc1d51dd433ae3a004b9b48506fbb6f5a131b2e9ea05ef39160d29d0e6a830 638588e9577734a335e9cac2db690b54854fdf91717b12a5925cff07f9069321 183ab2706cfa270ceff91d58c2cc0f6d09051ffe06a867feddd5e7aca26341c63ce6f5334153ac80dc09f0721ed5ce623206101b3147f32d988afe7a00d46838 Apache-2.0 https://www.apache.org/licenses/LICENSE-2.0 pkg:maven/org.apache.logging.log4j/log4j-1.2-api@2.24.3?type=jar https://logging.apache.org/log4j/2.x/log4j/log4j-1.2-api/ https://github.com/apache/logging-log4j2/actions https://logging.apache.org/download.html https://repository.apache.org/service/local/staging/deploy/maven2 https://github.com/apache/logging-log4j2/issues https://lists.apache.org/list.html?log4j-user@logging.apache.org https://github.com/apache/logging-log4j2 The Apache Software Foundation org.apache.logging.log4j log4j-layout-template-json 2.24.3 Apache Log4j Layout for producing JSON output that is structured according to a user-provided template. required 0e751dbc1813c14097e6f1ecdc77f14d bc0573ca981a2a243cd7a8c9b0562df8bf809d39 53e89d35be783d0d47de319dcfeed5b2ea16b0b39929a302f2b7e681efaf18ec 165adeb26a6b70219d3ff42cc8aaed77b1a530ebc9a9bdecea8f8cd6d22249963949b9b944449204c1e484360a121d9bfe3d729a570eb87618b1105fba13f7eb 22fabb0d4892463b59980a23b60789ad0628eeb6147adbef73ff0d6ffe2db2d458b50c87b5f779cdb298c31465120f58 c0ba5cd02e215f474c621412ceb612413ccb7ce0d232a1a3c99970391dc4ad8cc232070a2a1ba52d33cead1ccfe44591 afddbd8630c9bb75daf8b7655b657c38189cf6b791845dd1962822961356ee06 6f2d8ff863e70e8e048c371d024dda31f86be10497f0d56bb0b16f5aaff5207284bbb6b609a1109a8a27f33c6ca6b5d7b6ce7c836a5a2ba0099f57a9a77022ca Apache-2.0 https://www.apache.org/licenses/LICENSE-2.0 pkg:maven/org.apache.logging.log4j/log4j-layout-template-json@2.24.3?type=jar https://logging.apache.org/log4j/2.x/log4j/log4j-layout-template-json/ https://github.com/apache/logging-log4j2/actions https://logging.apache.org/download.html https://repository.apache.org/service/local/staging/deploy/maven2 https://github.com/apache/logging-log4j2/issues https://lists.apache.org/list.html?log4j-user@logging.apache.org https://github.com/apache/logging-log4j2 org.spark-project.spark unused 1.0.0 Sonatype helps open source projects to set up Maven repositories on https://oss.sonatype.org/ required 763373ce9fe48581d4f2b8ffca35bb82 205fe37a2fade6ce6dfcf8eff57ed21a4a1c22af 00fd27fc9bde701581e7dcf5b95981d9e749a1c176bb8bfcd49f675768ff6bf0 08a6ac8d2dc9d89ff557c7e96096c76e687efe3ce166aa6dbb76865bbef64dc8b6ecb5561ef03c2451a688ccdb3876b8f16b9137d02c290a698e917a5656b6fa c8c51d0d851835107db273d7ce522f026587d922c9d1d34739c3dedf9b7737c1c491e961dc7931f46c476d28acbc91f6 49f87e8e11e7a4d9da068d33185a89bb8e7eef339a0e2932246acbaa8ad90a30ec353e9e71147a78a8b74dfe4bdd3a3b a943ae35f4d584810323330b6ef241a869b0187e4d3dfd79f8e504ebb0882cf2 1e7845ca316f39bc5ffc75afe0dcb437fe13b8c2133a396824dec8f3a5bd56243086989264f8f40df4cb2ba749709e3a90cdceb39c05727cbd82d86570e4f57d Apache-2.0 pkg:maven/org.spark-project.spark/unused@1.0.0?type=jar http://nexus.sonatype.org/oss-repository-hosting.html/unused https://oss.sonatype.org/service/local/staging/deploy/maven2/