<?xml version="1.0" encoding="UTF-8"?>
<bom serialNumber="urn:uuid:c8188d27-200f-3ded-9b11-1d61e225b688" version="1" xmlns="http://cyclonedx.org/schema/bom/1.6">
  <metadata>
    <lifecycles>
      <lifecycle>
        <phase>build</phase>
      </lifecycle>
    </lifecycles>
    <tools>
      <components>
        <component type="library">
          <author>OWASP Foundation</author>
          <group>org.cyclonedx</group>
          <name>cyclonedx-maven-plugin</name>
          <version>2.9.1</version>
          <description>CycloneDX Maven plugin</description>
          <hashes>
            <hash alg="MD5">9c7a565cf28cce58557d0c621c5ea4b1</hash>
            <hash alg="SHA-1">be882d5a22050bfa9d19090b1420c188617d0e1c</hash>
            <hash alg="SHA-256">698e0f37184a5b28c245c4065fd036dfce253b52f82fbb7113d81d36326cc249</hash>
            <hash alg="SHA-512">c0f0b11026858166f872a2eb54719492e5cecaa0bc9cd6b30b3ecb4a174eed220f4a1b5829d18d6734128e778d3cb3db7ffed177c92866133129cb29081814a0</hash>
            <hash alg="SHA-384">d80964707dfe5caca8c70521d5066f57589304c0a657e6fbc7c0614ea0fc7b3b3dbe7778361eee0f54ba111e9cb0ffcb</hash>
            <hash alg="SHA3-384">80bc3a275d9514bc457461ff52a72add8c7ecbbc01d8912efce57139016c544ee776981851be0a58fa977ab4221f703f</hash>
            <hash alg="SHA3-256">142317d6f245390f4fd2d0c100b16281b8dfc5c0c2cff86943bdcc97039cb699</hash>
            <hash alg="SHA3-512">af0fb9137c90b65d1a07f72e4d51ae509956cdb8800f35c961b037cdda1fe4a14ce3b496cef71ba85f1621affcfe29cd42704ae4191ff0b090a9602087c8997b</hash>
          </hashes>
        </component>
      </components>
    </tools>
    <component type="library" bom-ref="pkg:maven/org.apache.arrow/arrow-memory-netty-buffer-patch@18.3.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.arrow</group>
      <name>arrow-memory-netty-buffer-patch</name>
      <version>18.3.0</version>
      <description>Netty Buffer needed to patch that is consumed by Arrow Memory Netty</description>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.arrow/arrow-memory-netty-buffer-patch@18.3.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://arrow.apache.org/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/apache/arrow-java/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://lists.apache.org/list.html?dev@arrow.apache.org</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/arrow-java/tree/v18.3.0</url>
        </reference>
      </externalReferences>
    </component>
    <properties>
      <property name="maven.goal">makeBom</property>
      <property name="maven.scopes">compile,provided,runtime,system</property>
      <property name="cdx:reproducible">enabled</property>
    </properties>
  </metadata>
  <components>
    <component type="library" bom-ref="pkg:maven/org.apache.arrow/arrow-memory-core@18.3.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.arrow</group>
      <name>arrow-memory-core</name>
      <version>18.3.0</version>
      <description>Core off-heap memory management libraries for Arrow ValueVectors.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">bf6788fa833ce6bf56fc9cb221490a0c</hash>
        <hash alg="SHA-1">1f5bc66deb7d2120ac01341241cb859cf3f17751</hash>
        <hash alg="SHA-256">32ed0719bf2ba42becc3a88c95722851cf1bb88b37d06c95654a1152bed6ef2e</hash>
        <hash alg="SHA-512">b53815c8663f24629df68871139bcefa6887628e8a528d6bb4ab4148a9d5cff951701545ac7af0fc3ebd1b9381be3b9fa52d0be384a0125fc66944fb214da287</hash>
        <hash alg="SHA-384">0f62cec2b61944320b07e833c6cbaddbd7dd8dc2568bfccae7c55496c8702413ba2924d991129150b0fb49a8b140fc4b</hash>
        <hash alg="SHA3-384">5284a1e44d7e76bc6fe291e35bdfcb0882ce7fd4b5ed1abf32aeb6998be4d3e844b8e7d5d07a5f8dd272dc71fb995a77</hash>
        <hash alg="SHA3-256">efe242ba8ccdc2c8dfd2b318a7cadc5ea36d43476b25bc0b66e8c9ea4708271b</hash>
        <hash alg="SHA3-512">180d7786f4832924b49bf9ca21b72db70d2cd13d9abfe3469026b2277b367afc21f553e982ebdc5b2dc558969840c4674a8ce838b2fd7b56862cf5ef871c0b89</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.arrow/arrow-memory-core@18.3.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://arrow.apache.org/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/apache/arrow-java/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://lists.apache.org/list.html?dev@arrow.apache.org</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/arrow-java/tree/v18.3.0</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.netty/netty-buffer@4.1.119.Final?type=jar">
      <publisher>The Netty Project</publisher>
      <group>io.netty</group>
      <name>netty-buffer</name>
      <version>4.1.119.Final</version>
      <description>Netty is an asynchronous event-driven network application framework for
    rapid development of maintainable high performance protocol servers and
    clients.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">70baa5219dd5ccaade39eef0372a1ad2</hash>
        <hash alg="SHA-1">5864149b2e5a2af7b05fe9e9dc3e4b70d3060a7c</hash>
        <hash alg="SHA-256">32226218d854c2e51d4935a7ebe4663b72ecb9af4da881b86bf518e61aed48d3</hash>
        <hash alg="SHA-512">1cc5ea25d0cd5c1194c25ebfad34c1deb4aec25042513014cb7f0eb252ea8c76e487cc241336ffe66ed944fbce11dbe6f94030f5456b6921dcf963a25a38ec27</hash>
        <hash alg="SHA-384">34c07b31ceea325fc13bb8b88ee62ee7001051cd92734e88f4b6986411fd915e5d8deebaed3f3b90aba6a00c4ab24fd6</hash>
        <hash alg="SHA3-384">491d49a3a38168ee50516cac70244832e5d93cca83f4cf7507f2aba8c16a374d311967892ee7e8f6f098a0684f23f15b</hash>
        <hash alg="SHA3-256">949a7201d6e3119e2ec024ec0c6ef8827dac5267369074d32424f42f940e346a</hash>
        <hash alg="SHA3-512">5e791e1347f12cd173b886194b2943f79e174fe494c0f7105c0ee069002ceb9f907a5b1035c2f4157a963bd0eefebb7689da49cacf1b01b566d9c8aaf398dcd7</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.netty/netty-buffer@4.1.119.Final?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://netty.io/netty-buffer/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/netty/netty/netty-buffer</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.netty/netty-common@4.1.119.Final?type=jar">
      <publisher>The Netty Project</publisher>
      <group>io.netty</group>
      <name>netty-common</name>
      <version>4.1.119.Final</version>
      <description>Netty is an asynchronous event-driven network application framework for
    rapid development of maintainable high performance protocol servers and
    clients.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">4deda706c948c11e2b80308a467fb3c5</hash>
        <hash alg="SHA-1">2f7c360b03c0aceab7efc1f7c2b75274f0f35909</hash>
        <hash alg="SHA-256">991a69b1594dcad9926e268e7e94530cfdaa89feef42af26922a302d3e2e9212</hash>
        <hash alg="SHA-512">a8f48f8e79c14d7ebfe74f24def1e1ec2b70314897cfa32a676b6d745ee7a4600fea347b2a87f9cf4801a6ed08dd1f3c6cec212265d791c903cf65df275de9f7</hash>
        <hash alg="SHA-384">f913396bd3e225bc38838adb99b05140bf8f7f5bf43605f331c215349b32bfe051b5a6c403455b76ac23b714cc326c73</hash>
        <hash alg="SHA3-384">8e3c6be38597d187461d2382f3a36817c2c024696362dc30261842ca6e9cb62fa10ddcd9d9f0f94dc53f66e55abe5603</hash>
        <hash alg="SHA3-256">c7c076733ba8f35257b221d4e20db436c75a16b2544c6390efe3859f7d951876</hash>
        <hash alg="SHA3-512">8fb773e819b449bd63cc5b9854ae88ad10c359c58bf541051e3e90ef3d2600239a1153de998b5eade43c290f8f22af951acd170cdc6c2a57ba3f818a5d00f1c6</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.netty/netty-common@4.1.119.Final?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://netty.io/netty-common/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/netty/netty/netty-common</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar">
      <publisher>QOS.ch</publisher>
      <group>org.slf4j</group>
      <name>slf4j-api</name>
      <version>2.0.17</version>
      <description>The slf4j API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">b6480d114a23683498ac3f746f959d2f</hash>
        <hash alg="SHA-1">d9e58ac9c7779ba3bf8142aff6c830617a7fe60f</hash>
        <hash alg="SHA-256">7b751d952061954d5abfed7181c1f645d336091b679891591d63329c622eb832</hash>
        <hash alg="SHA-512">9a3e79db6666a6096a3021bb2e1d918f30f589d8de51d6b600f8ebd92515a510ae2d8f87919cc2dfa8365d64f10194cac8dfa0fb950160eef0e9da06f6caaeb9</hash>
        <hash alg="SHA-384">6ea24f814a9b6ece428cfd0535e2f3b8927005745ef61006b50fdb5a90126ee5ea05650155382b3b755c5bce38ef3944</hash>
        <hash alg="SHA3-384">9b1015052f0ec43f9be09764e131834157599611cb52f6fe591c4ac6a8ab4817518f2a4b8871e5e738c8678e93af5557</hash>
        <hash alg="SHA3-256">00559b4f4066b4917ba4fe2a6f23111eaeada321112d030910d218ced9084b5e</hash>
        <hash alg="SHA3-512">9579c2f7e7516e177c2d493ccc9eb8150978cf19f6f09b28d116f6935239fd56dc6af2b62b3336f79b0b462445550cd1fb5377a07001a6f44aaab6a32fa2fa47</hash>
      </hashes>
      <licenses>
        <license>
          <id>MIT</id>
          <url>https://opensource.org/license/mit/</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://www.slf4j.org</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/qos-ch/slf4j/slf4j-parent/slf4j-api</url>
        </reference>
      </externalReferences>
    </component>
  </components>
  <dependencies>
    <dependency ref="pkg:maven/org.apache.arrow/arrow-memory-netty-buffer-patch@18.3.0?type=jar">
      <dependency ref="pkg:maven/org.apache.arrow/arrow-memory-core@18.3.0?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-buffer@4.1.119.Final?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-common@4.1.119.Final?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.arrow/arrow-memory-core@18.3.0?type=jar">
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar"/>
    <dependency ref="pkg:maven/io.netty/netty-buffer@4.1.119.Final?type=jar">
      <dependency ref="pkg:maven/io.netty/netty-common@4.1.119.Final?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/io.netty/netty-common@4.1.119.Final?type=jar"/>
  </dependencies>
</bom>
