<?xml version="1.0" encoding="UTF-8"?>
<bom serialNumber="urn:uuid:5372de25-f608-35c2-876d-bfe1474c0dc1" version="1" xmlns="http://cyclonedx.org/schema/bom/1.6">
  <metadata>
    <lifecycles>
      <lifecycle>
        <phase>build</phase>
      </lifecycle>
    </lifecycles>
    <tools>
      <components>
        <component type="library">
          <author>OWASP Foundation</author>
          <group>org.cyclonedx</group>
          <name>cyclonedx-maven-plugin</name>
          <version>2.9.1</version>
          <description>CycloneDX Maven plugin</description>
          <hashes>
            <hash alg="MD5">9c7a565cf28cce58557d0c621c5ea4b1</hash>
            <hash alg="SHA-1">be882d5a22050bfa9d19090b1420c188617d0e1c</hash>
            <hash alg="SHA-256">698e0f37184a5b28c245c4065fd036dfce253b52f82fbb7113d81d36326cc249</hash>
            <hash alg="SHA-512">c0f0b11026858166f872a2eb54719492e5cecaa0bc9cd6b30b3ecb4a174eed220f4a1b5829d18d6734128e778d3cb3db7ffed177c92866133129cb29081814a0</hash>
            <hash alg="SHA-384">d80964707dfe5caca8c70521d5066f57589304c0a657e6fbc7c0614ea0fc7b3b3dbe7778361eee0f54ba111e9cb0ffcb</hash>
            <hash alg="SHA3-384">80bc3a275d9514bc457461ff52a72add8c7ecbbc01d8912efce57139016c544ee776981851be0a58fa977ab4221f703f</hash>
            <hash alg="SHA3-256">142317d6f245390f4fd2d0c100b16281b8dfc5c0c2cff86943bdcc97039cb699</hash>
            <hash alg="SHA3-512">af0fb9137c90b65d1a07f72e4d51ae509956cdb8800f35c961b037cdda1fe4a14ce3b496cef71ba85f1621affcfe29cd42704ae4191ff0b090a9602087c8997b</hash>
          </hashes>
        </component>
      </components>
    </tools>
    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-jexl3@3.5.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.commons</group>
      <name>commons-jexl3</name>
      <version>3.5.0</version>
      <description>Apache Commons JEXL is a library that facilitates the implementation of scripting features in
        applications and frameworks written in Java.</description>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.commons/commons-jexl3@3.5.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://commons.apache.org/proper/commons-jexl/</url>
        </reference>
        <reference type="build-system">
          <url>https://github.com/apache/commons-parent/actions</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/JEXL</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/commons-user/</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf/commons-jexl.git</url>
        </reference>
      </externalReferences>
    </component>
    <properties>
      <property name="maven.goal">makeAggregateBom</property>
      <property name="maven.scopes">compile,provided,runtime,system</property>
      <property name="cdx:reproducible">enabled</property>
    </properties>
  </metadata>
  <components>
    <component type="library" bom-ref="pkg:maven/commons-logging/commons-logging@1.3.5?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>commons-logging</group>
      <name>commons-logging</name>
      <version>1.3.5</version>
      <description>Apache Commons Logging is a thin adapter allowing configurable bridging to other,
    well-known logging systems.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">1adb70dfe93f7fa729aaa860c34e6c8f</hash>
        <hash alg="SHA-1">1c58a717f104600600acdf18323fee967ba57dc2</hash>
        <hash alg="SHA-256">4d980dca8a8d7ef2964f63f2d72c358fd6a66aee536f6939b5cfa26f3470c0a5</hash>
        <hash alg="SHA-512">b67d1ce3fd4fe635eea6814ae6c6dc85d6f1a9d3f30aeca8ab4822535ff48119a15ab3e493e23679686b803bfcbec85a0b1939f4d87c855969ab449ab7ddc550</hash>
        <hash alg="SHA-384">034923850acf7e0f36e6a16d2927b4148f6ab979a5c506daa0ccfabb90bf8664e897decc4f537bc25eb5fb947da34faf</hash>
        <hash alg="SHA3-384">9e8bc8a71b21faae8d6ab89f97277300e2019eb179b9e813eff945b7468959e2c351ba949ee915cac7edd99dcd185732</hash>
        <hash alg="SHA3-256">c67da04dce8b0532d949e0798df41acc1b168045c5c0e1a5a02cde1a4605a7df</hash>
        <hash alg="SHA3-512">37050364c6127e7cea9df469d95f946d6f211387d5710928370f6b2b0977963f13a408a43147fc15b0117f7df7fcb215509d80d9ef32f0991b9ede2f7f362a19</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/commons-logging/commons-logging@1.3.5?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://commons.apache.org/proper/commons-logging/</url>
        </reference>
        <reference type="build-system">
          <url>https://github.com/apache/commons-parent/actions</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/LOGGING</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/commons-user/</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf/commons-logging</url>
        </reference>
      </externalReferences>
    </component>
  </components>
  <dependencies>
    <dependency ref="pkg:maven/org.apache.commons/commons-jexl3@3.5.0?type=jar">
      <dependency ref="pkg:maven/commons-logging/commons-logging@1.3.5?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/commons-logging/commons-logging@1.3.5?type=jar"/>
  </dependencies>
</bom>
