{
  "bomFormat" : "CycloneDX",
  "specVersion" : "1.6",
  "serialNumber" : "urn:uuid:c8188d27-200f-3ded-9b11-1d61e225b688",
  "version" : 1,
  "metadata" : {
    "lifecycles" : [
      {
        "phase" : "build"
      }
    ],
    "tools" : {
      "components" : [
        {
          "type" : "library",
          "author" : "OWASP Foundation",
          "group" : "org.cyclonedx",
          "name" : "cyclonedx-maven-plugin",
          "version" : "2.9.1",
          "description" : "CycloneDX Maven plugin",
          "hashes" : [
            {
              "alg" : "MD5",
              "content" : "9c7a565cf28cce58557d0c621c5ea4b1"
            },
            {
              "alg" : "SHA-1",
              "content" : "be882d5a22050bfa9d19090b1420c188617d0e1c"
            },
            {
              "alg" : "SHA-256",
              "content" : "698e0f37184a5b28c245c4065fd036dfce253b52f82fbb7113d81d36326cc249"
            },
            {
              "alg" : "SHA-512",
              "content" : "c0f0b11026858166f872a2eb54719492e5cecaa0bc9cd6b30b3ecb4a174eed220f4a1b5829d18d6734128e778d3cb3db7ffed177c92866133129cb29081814a0"
            },
            {
              "alg" : "SHA-384",
              "content" : "d80964707dfe5caca8c70521d5066f57589304c0a657e6fbc7c0614ea0fc7b3b3dbe7778361eee0f54ba111e9cb0ffcb"
            },
            {
              "alg" : "SHA3-384",
              "content" : "80bc3a275d9514bc457461ff52a72add8c7ecbbc01d8912efce57139016c544ee776981851be0a58fa977ab4221f703f"
            },
            {
              "alg" : "SHA3-256",
              "content" : "142317d6f245390f4fd2d0c100b16281b8dfc5c0c2cff86943bdcc97039cb699"
            },
            {
              "alg" : "SHA3-512",
              "content" : "af0fb9137c90b65d1a07f72e4d51ae509956cdb8800f35c961b037cdda1fe4a14ce3b496cef71ba85f1621affcfe29cd42704ae4191ff0b090a9602087c8997b"
            }
          ]
        }
      ]
    },
    "component" : {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.arrow/arrow-memory-netty-buffer-patch@18.3.0?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.arrow",
      "name" : "arrow-memory-netty-buffer-patch",
      "version" : "18.3.0",
      "description" : "Netty Buffer needed to patch that is consumed by Arrow Memory Netty",
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.arrow/arrow-memory-netty-buffer-patch@18.3.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://arrow.apache.org/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/apache/arrow-java/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?dev@arrow.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/arrow-java/tree/v18.3.0"
        }
      ]
    },
    "properties" : [
      {
        "name" : "maven.goal",
        "value" : "makeBom"
      },
      {
        "name" : "maven.scopes",
        "value" : "compile,provided,runtime,system"
      },
      {
        "name" : "cdx:reproducible",
        "value" : "enabled"
      }
    ]
  },
  "components" : [
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.arrow/arrow-memory-core@18.3.0?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.arrow",
      "name" : "arrow-memory-core",
      "version" : "18.3.0",
      "description" : "Core off-heap memory management libraries for Arrow ValueVectors.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "bf6788fa833ce6bf56fc9cb221490a0c"
        },
        {
          "alg" : "SHA-1",
          "content" : "1f5bc66deb7d2120ac01341241cb859cf3f17751"
        },
        {
          "alg" : "SHA-256",
          "content" : "32ed0719bf2ba42becc3a88c95722851cf1bb88b37d06c95654a1152bed6ef2e"
        },
        {
          "alg" : "SHA-512",
          "content" : "b53815c8663f24629df68871139bcefa6887628e8a528d6bb4ab4148a9d5cff951701545ac7af0fc3ebd1b9381be3b9fa52d0be384a0125fc66944fb214da287"
        },
        {
          "alg" : "SHA-384",
          "content" : "0f62cec2b61944320b07e833c6cbaddbd7dd8dc2568bfccae7c55496c8702413ba2924d991129150b0fb49a8b140fc4b"
        },
        {
          "alg" : "SHA3-384",
          "content" : "5284a1e44d7e76bc6fe291e35bdfcb0882ce7fd4b5ed1abf32aeb6998be4d3e844b8e7d5d07a5f8dd272dc71fb995a77"
        },
        {
          "alg" : "SHA3-256",
          "content" : "efe242ba8ccdc2c8dfd2b318a7cadc5ea36d43476b25bc0b66e8c9ea4708271b"
        },
        {
          "alg" : "SHA3-512",
          "content" : "180d7786f4832924b49bf9ca21b72db70d2cd13d9abfe3469026b2277b367afc21f553e982ebdc5b2dc558969840c4674a8ce838b2fd7b56862cf5ef871c0b89"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.arrow/arrow-memory-core@18.3.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://arrow.apache.org/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/apache/arrow-java/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?dev@arrow.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/arrow-java/tree/v18.3.0"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-buffer@4.1.119.Final?type=jar",
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-buffer",
      "version" : "4.1.119.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "70baa5219dd5ccaade39eef0372a1ad2"
        },
        {
          "alg" : "SHA-1",
          "content" : "5864149b2e5a2af7b05fe9e9dc3e4b70d3060a7c"
        },
        {
          "alg" : "SHA-256",
          "content" : "32226218d854c2e51d4935a7ebe4663b72ecb9af4da881b86bf518e61aed48d3"
        },
        {
          "alg" : "SHA-512",
          "content" : "1cc5ea25d0cd5c1194c25ebfad34c1deb4aec25042513014cb7f0eb252ea8c76e487cc241336ffe66ed944fbce11dbe6f94030f5456b6921dcf963a25a38ec27"
        },
        {
          "alg" : "SHA-384",
          "content" : "34c07b31ceea325fc13bb8b88ee62ee7001051cd92734e88f4b6986411fd915e5d8deebaed3f3b90aba6a00c4ab24fd6"
        },
        {
          "alg" : "SHA3-384",
          "content" : "491d49a3a38168ee50516cac70244832e5d93cca83f4cf7507f2aba8c16a374d311967892ee7e8f6f098a0684f23f15b"
        },
        {
          "alg" : "SHA3-256",
          "content" : "949a7201d6e3119e2ec024ec0c6ef8827dac5267369074d32424f42f940e346a"
        },
        {
          "alg" : "SHA3-512",
          "content" : "5e791e1347f12cd173b886194b2943f79e174fe494c0f7105c0ee069002ceb9f907a5b1035c2f4157a963bd0eefebb7689da49cacf1b01b566d9c8aaf398dcd7"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-buffer@4.1.119.Final?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/netty-buffer/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty/netty-buffer"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-common@4.1.119.Final?type=jar",
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-common",
      "version" : "4.1.119.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "4deda706c948c11e2b80308a467fb3c5"
        },
        {
          "alg" : "SHA-1",
          "content" : "2f7c360b03c0aceab7efc1f7c2b75274f0f35909"
        },
        {
          "alg" : "SHA-256",
          "content" : "991a69b1594dcad9926e268e7e94530cfdaa89feef42af26922a302d3e2e9212"
        },
        {
          "alg" : "SHA-512",
          "content" : "a8f48f8e79c14d7ebfe74f24def1e1ec2b70314897cfa32a676b6d745ee7a4600fea347b2a87f9cf4801a6ed08dd1f3c6cec212265d791c903cf65df275de9f7"
        },
        {
          "alg" : "SHA-384",
          "content" : "f913396bd3e225bc38838adb99b05140bf8f7f5bf43605f331c215349b32bfe051b5a6c403455b76ac23b714cc326c73"
        },
        {
          "alg" : "SHA3-384",
          "content" : "8e3c6be38597d187461d2382f3a36817c2c024696362dc30261842ca6e9cb62fa10ddcd9d9f0f94dc53f66e55abe5603"
        },
        {
          "alg" : "SHA3-256",
          "content" : "c7c076733ba8f35257b221d4e20db436c75a16b2544c6390efe3859f7d951876"
        },
        {
          "alg" : "SHA3-512",
          "content" : "8fb773e819b449bd63cc5b9854ae88ad10c359c58bf541051e3e90ef3d2600239a1153de998b5eade43c290f8f22af951acd170cdc6c2a57ba3f818a5d00f1c6"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-common@4.1.119.Final?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/netty-common/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty/netty-common"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar",
      "publisher" : "QOS.ch",
      "group" : "org.slf4j",
      "name" : "slf4j-api",
      "version" : "2.0.17",
      "description" : "The slf4j API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "b6480d114a23683498ac3f746f959d2f"
        },
        {
          "alg" : "SHA-1",
          "content" : "d9e58ac9c7779ba3bf8142aff6c830617a7fe60f"
        },
        {
          "alg" : "SHA-256",
          "content" : "7b751d952061954d5abfed7181c1f645d336091b679891591d63329c622eb832"
        },
        {
          "alg" : "SHA-512",
          "content" : "9a3e79db6666a6096a3021bb2e1d918f30f589d8de51d6b600f8ebd92515a510ae2d8f87919cc2dfa8365d64f10194cac8dfa0fb950160eef0e9da06f6caaeb9"
        },
        {
          "alg" : "SHA-384",
          "content" : "6ea24f814a9b6ece428cfd0535e2f3b8927005745ef61006b50fdb5a90126ee5ea05650155382b3b755c5bce38ef3944"
        },
        {
          "alg" : "SHA3-384",
          "content" : "9b1015052f0ec43f9be09764e131834157599611cb52f6fe591c4ac6a8ab4817518f2a4b8871e5e738c8678e93af5557"
        },
        {
          "alg" : "SHA3-256",
          "content" : "00559b4f4066b4917ba4fe2a6f23111eaeada321112d030910d218ced9084b5e"
        },
        {
          "alg" : "SHA3-512",
          "content" : "9579c2f7e7516e177c2d493ccc9eb8150978cf19f6f09b28d116f6935239fd56dc6af2b62b3336f79b0b462445550cd1fb5377a07001a6f44aaab6a32fa2fa47"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/license/mit/"
          }
        }
      ],
      "purl" : "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.slf4j.org"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/qos-ch/slf4j/slf4j-parent/slf4j-api"
        }
      ]
    }
  ],
  "dependencies" : [
    {
      "ref" : "pkg:maven/org.apache.arrow/arrow-memory-netty-buffer-patch@18.3.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.arrow/arrow-memory-core@18.3.0?type=jar",
        "pkg:maven/io.netty/netty-buffer@4.1.119.Final?type=jar",
        "pkg:maven/io.netty/netty-common@4.1.119.Final?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.arrow/arrow-memory-core@18.3.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.netty/netty-buffer@4.1.119.Final?type=jar",
      "dependsOn" : [
        "pkg:maven/io.netty/netty-common@4.1.119.Final?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.netty/netty-common@4.1.119.Final?type=jar",
      "dependsOn" : [ ]
    }
  ]
}