build OWASP Foundation org.cyclonedx cyclonedx-maven-plugin 2.9.1 CycloneDX Maven plugin 9c7a565cf28cce58557d0c621c5ea4b1 be882d5a22050bfa9d19090b1420c188617d0e1c 698e0f37184a5b28c245c4065fd036dfce253b52f82fbb7113d81d36326cc249 c0f0b11026858166f872a2eb54719492e5cecaa0bc9cd6b30b3ecb4a174eed220f4a1b5829d18d6734128e778d3cb3db7ffed177c92866133129cb29081814a0 d80964707dfe5caca8c70521d5066f57589304c0a657e6fbc7c0614ea0fc7b3b3dbe7778361eee0f54ba111e9cb0ffcb 80bc3a275d9514bc457461ff52a72add8c7ecbbc01d8912efce57139016c544ee776981851be0a58fa977ab4221f703f 142317d6f245390f4fd2d0c100b16281b8dfc5c0c2cff86943bdcc97039cb699 af0fb9137c90b65d1a07f72e4d51ae509956cdb8800f35c961b037cdda1fe4a14ce3b496cef71ba85f1621affcfe29cd42704ae4191ff0b090a9602087c8997b The Apache Software Foundation org.apache.jena jena-base 5.3.0 This module contains non-RDF library code and the common system runtime. Apache-2.0 pkg:maven/org.apache.jena/jena-base@5.3.0?type=jar https://jena.apache.org/jena-base/ https://repository.apache.org/service/local/staging/deploy/maven2 https://issues.apache.org/jira/browse/JENA https://lists.apache.org/list.html?users@jena.apache.org https://gitbox.apache.org/repos/asf/jena.git/jena-base makeBom compile,provided,runtime,system enabled QOS.ch org.slf4j slf4j-api 2.0.16 The slf4j API required c8de8f5d740584cb24b5652cfba8b3c4 0172931663a09a1fa515567af5fbef00897d3c04 a12578dde1ba00bd9b816d388a0b879928d00bab3c83c240f7013bf4196c579a 91c2e7b30f24649bb3edfc7f138c2b7dc715ad36963af159defb80a71205eb7e4c5bcc80d779ef993b567a56724064f190c93985f32665a8df85198a03a2f1bb ed0cc7ad67343b9fe4df03ea534025bf9d90c112b33cd8920f29890d923c349b69820c9c42b9e8882047af848b74f99d 331ac707cfa4b2bda44deffce7d2a640abb9ae12968cb1ac4879ba1b45542e3d3ce1016c812ff1f2449336bc7ea6bebb 3f68204951bb4baedc34fdd7194d0801042268aba0c58ac5d760779510743fbb d7a2f7359e7b2cd6ae3650d28352bf8789acf5855a3596a3be2a236a94931abf8bacf0d6a457afa43164be53abb19cc223ef4f030822a3295c036c078527e361 MIT https://opensource.org/license/mit/ pkg:maven/org.slf4j/slf4j-api@2.0.16?type=jar http://www.slf4j.org https://oss.sonatype.org/service/local/staging/deploy/maven2/ https://github.com/qos-ch/slf4j/slf4j-parent/slf4j-api The Apache Software Foundation org.apache.logging.log4j log4j-api 2.24.3 The logging API of the Log4j project. Library and application code can log through this API. It contains a simple built-in implementation (`SimpleLogger`) for trivial use cases. Production applications are recommended to use Log4j API in combination with a fully-fledged implementation, such as Log4j Core. optional d89516699543c5c21be87ee1760695f3 b02c125db8b6d295adf72ae6e71af5d83bce2370 5b4a0a0cd0e751ded431c162442bdbdd53328d1f8bb2bae5fc1bbeee0f66d80f d936ac37b3d7ca2e4370ef122629c5ceb0bef60a6c08a3bd8bb278204dbed84bb888aaa307c58e80e4e9d645b73792433f52adcccd30378fbac99b1d271042f7 d376ab3673186a1a39ea8b3d3c8359bb16dbb3f5d3782c182a112ab19b61d7730434c6d0f631d43d6daae66005d1df4e 7ee1b17a329d90bf648d05defced8d79f7bfbca66cc7e90aa2e1b2d7622697d535969e50d1a03460447eda2fa008f86c 5d2ad18a3352c3d7269ecb8d52d6a5ac8bf0d0d937e4809f5023a45d0f8f50f3 7e964e6425a1198e2568a9e8c326f730b7d139f71e8d3b1b440aa90860f136f443e5ebd62aa022c1c7834e23995ed0992f68dfb1760140d469b85fed84815ae1 Apache-2.0 https://www.apache.org/licenses/LICENSE-2.0 pkg:maven/org.apache.logging.log4j/log4j-api@2.24.3?type=jar https://logging.apache.org/log4j/2.x/log4j/log4j-api/ https://github.com/apache/logging-log4j2/actions https://logging.apache.org/download.html https://repository.apache.org/service/local/staging/deploy/maven2 https://github.com/apache/logging-log4j2/issues https://lists.apache.org/list.html?log4j-user@logging.apache.org https://github.com/apache/logging-log4j2 The Apache Software Foundation org.apache.logging.log4j log4j-core 2.24.3 A versatile, industrial-grade, and reference implementation of the Log4j API. It bundles a rich set of components to assist various use cases: Appenders targeting files, network sockets, databases, SMTP servers; Layouts that can render CSV, HTML, JSON, Syslog, etc. formatted outputs; Filters that can be configured using log event rates, regular expressions, scripts, time, etc. It contains several extension points to introduce custom components, if needed. optional 3f52ab7782fdd1349bd872b5dcf48bed 7f6a261243ca767c7f38fd4b542bcde626c8894e 7eb4084596ae25bd3c61698e48e8d0ab65a9260758884ed5cbb9c6e55c44a56a 61332e92ea6ef6656994105a675eb8de85ec859f07cde9da5ef16a22cbf2e0d7695348e04e066dd1a1ff0146ec03a8884974319d4f71155db9c9ab0d073197ef fd3cd2ea5cdc84698b46833cbcdb10e3c1e507a2cba0293b487f45efa7f12f52bce9e2c0a96b0f1632e2ff2549ac2eb2 852c87ea21b50676f338fa423d203fa52845bb201b994afd963bbc8100ecc0f987136a21bf6a6bbd9ab13ee008de9822 fc5b8e9367369772309a23b9ba1c2384be7ace8f6dd6ce6a9c37c322b86e4f1b c1de50e5cfa5a415ad97cff532d3d3df825ff97ee2c41ac11e50cbca86e37577b9d929e6675c2336008893686db1cdebe878234f15d0e4afc1309eea3f32020b Apache-2.0 https://www.apache.org/licenses/LICENSE-2.0 pkg:maven/org.apache.logging.log4j/log4j-core@2.24.3?type=jar https://logging.apache.org/log4j/2.x/log4j/log4j-core/ https://github.com/apache/logging-log4j2/actions https://logging.apache.org/download.html https://repository.apache.org/service/local/staging/deploy/maven2 https://github.com/apache/logging-log4j2/issues https://lists.apache.org/list.html?log4j-user@logging.apache.org https://github.com/apache/logging-log4j2 The Apache Software Foundation org.apache.commons commons-csv 1.13.0 The Apache Commons CSV library provides a simple interface for reading and writing CSV files of various types. required 35f98b40a9c6b81cb09792b944587ff5 3ed1c07b3470d986f584196cfdca45587f06d8ad 648035ab973875787f3a12313cf239e86b51b4d209f91106ba90eba2fbd561cc c155d65f0df1fa0de256b4ab7df8d46886807bc877c5116d4bfb444f6afff760f189699bcd349669ed7620673a38ea65cd325bb6423df20da69d200136a67b97 a08c79d9b64af58f09d10eb16970f5c004b9f13d44a092c2fc33c9a58c09f8cc2ef5f2762772f33485c1c5d0254f0d87 46d68d896d5f7b71a9c6d4ef4f80211d89d4a3ae1f7f03b8ae11d5d2158767539f260f1d1a04db65e9dda2729219762f c12d6c684174089da25cace8422601b2de91a2b49a586d2d7b2716046a395211 b269db10896cb902f7887841f0e8fedaa1b94c4447e28a091ba8d1667a9d1d15148bdff568fec2f3a25eabaec3ee95ee3b3789833d84b1a26746470a95951bf7 Apache-2.0 https://www.apache.org/licenses/LICENSE-2.0 pkg:maven/org.apache.commons/commons-csv@1.13.0?type=jar https://commons.apache.org/proper/commons-csv/ https://github.com/apache/commons-csv/actions https://repository.apache.org/service/local/staging/deploy/maven2 https://issues.apache.org/jira/browse/CSV https://mail-archives.apache.org/mod_mbox/commons-user/ https://gitbox.apache.org/repos/asf?p=commons-csv.git The Apache Software Foundation commons-io commons-io 2.18.0 The Apache Commons IO library contains utility classes, stream implementations, file filters, file comparators, endian transformation classes, and much more. required 8cce74ccf461cd6502ae04c908eca917 44084ef756763795b31c578403dd028ff4a22950 f3ca0f8d63c40e23a56d54101c60d5edee136b42d84bfb85bc7963093109cf8b 786778529435d8a14ab6ce2176cdf2b9ee6585a71893b785f26257122166dcefc7c4af3f612eda3974b06c16d06fc357178bf28b9b74010e9bc04c33221adc2f 4be7ad9b352412ddad3eb00f2e44f1236216d3e713546d34d71f3aa8e589b06636abf22dad0c28e11a0cd7b54ea0496a d003d33c2cd37806d9d8f0576b65fd51fc1f02bfed7716279474556ef98abfaaddb5b5622762b64458bec6b57f77ceca 89019fd824ce65aa33554a848dce2ca47f09c3a261fd22c699342d99579e91d9 6edaba8f76bd3e96421ae3611fb32414b064c5ef2fdefd7402f3052c5849e06aa6dfdd218a6df97b25cdd7997df0c9d643af960c4294f2e89dffb052b4b9d8cd Apache-2.0 https://www.apache.org/licenses/LICENSE-2.0 pkg:maven/commons-io/commons-io@2.18.0?type=jar https://commons.apache.org/proper/commons-io/ https://github.com/apache/commons-parent/actions https://repository.apache.org/service/local/staging/deploy/maven2 https://issues.apache.org/jira/browse/IO https://mail-archives.apache.org/mod_mbox/commons-user/ https://gitbox.apache.org/repos/asf?p=commons-io.git The Apache Software Foundation org.apache.commons commons-lang3 3.17.0 Apache Commons Lang, a package of Java utility classes for the classes that are in java.lang's hierarchy, or are considered to be so standard as to justify existence in java.lang. The code is tested using the latest revision of the JDK for supported LTS releases: 8, 11, 17 and 21 currently. See https://github.com/apache/commons-lang/blob/master/.github/workflows/maven.yml Please ensure your build environment is up-to-date and kindly report any build issues. required 7730df72b7fdff4a3a32d89a314f826a b17d2136f0460dcc0d2016ceefca8723bdf4ee70 6ee731df5c8e5a2976a1ca023b6bb320ea8d3539fbe64c8a1d5cb765127c33b4 dfd5ff7fe7f852b9caabc81e5a00e20616f98405085f059b64dc2121feb5fa6cb327e11a3d2f954c079811c31f6fd484e90f932d45078796fbfa7dbf1f1eb5aa c6ed55a5c2b05332890a43a3ea73b30f42dc23c92ebd054a8b0d29ca8f49fb9361f7325cfa90715be457804b087221b5 bb9e148a87928c3053bcccee361d5d8d81b3c6ea41a390d96c615afd242409f909361c945f3b4238a297e4ebb2ed413b f28f34565f25dd65fd1a47916e917df9e3ff2c6721897ea57391a238227c96a2 4c8e7a5f10d091bb240e7eb59287d0e4e4420e7a2d2be2b8060111e479540ffae89040377c99ec7f458cd54e1ac0ed0778951cd1f34d5d90571b8a303fbb9baf Apache-2.0 https://www.apache.org/licenses/LICENSE-2.0 pkg:maven/org.apache.commons/commons-lang3@3.17.0?type=jar https://commons.apache.org/proper/commons-lang/ https://github.com/apache/commons-parent/actions https://repository.apache.org/service/local/staging/deploy/maven2 https://issues.apache.org/jira/browse/LANG https://mail-archives.apache.org/mod_mbox/commons-user/ https://gitbox.apache.org/repos/asf?p=commons-lang.git The Apache Software Foundation commons-codec commons-codec 1.17.2 The Apache Commons Codec component contains encoders and decoders for formats such as Base16, Base32, Base64, digest, and Hexadecimal. In addition to these widely used encoders and decoders, the codec package also maintains a collection of phonetic encoding utilities. required 52e5f2054151cf878744451e6a46b8f0 cd6bb9d856db5f61871a94d5801efd0b93b7fcb2 4148332728490cef12b29dac4c385f46982f04285132c6fa51ad7267d7dc7a8b a7f9cb90a37bb1e2c80958f6de1baa5a8c82b7f96e5900dba13d7679019a0c2b1cc7b551b338e24b9a782c961112675e02f439498b96f389b1f899945f08071b 0f8b3761bac50af319f81e51f077c97958cb4a571f1a78a6e660b97d3b25979a51495f578e643e0145a3c02ebbec2693 2db277092499618e6f621cea68f368167a45415260b36731662b8b9d3bbd28b2b99683cfb93b70b3a427ddb4493221f4 4f3e278f3525050144ca4fe27f097a5c8f9514d47f0e4deb2817f2964fda3130 760e46f5d41a57bf0576ca89c467e8c0f664e09954b16c25d63a9db26a0226f4f15737a2ad776f82e0fe39ff33e9da0729e329e4782f12d8d69be1e1ead60c5d Apache-2.0 https://www.apache.org/licenses/LICENSE-2.0 pkg:maven/commons-codec/commons-codec@1.17.2?type=jar https://commons.apache.org/proper/commons-codec/ https://github.com/apache/commons-parent/actions https://repository.apache.org/service/local/staging/deploy/maven2 https://issues.apache.org/jira/browse/CODEC https://mail-archives.apache.org/mod_mbox/commons-user/ https://github.com/apache/commons-codec The Apache Software Foundation org.apache.commons commons-compress 1.27.1 Apache Commons Compress defines an API for working with compression and archive formats. These include bzip2, gzip, pack200, LZMA, XZ, Snappy, traditional Unix Compress, DEFLATE, DEFLATE64, LZ4, Brotli, Zstandard and ar, cpio, jar, tar, zip, dump, 7z, arj. required 1db4bd87b0082044c6e7a6af0b977a3e a19151084758e2fbb6b41eddaa88e7b8ff4e6599 293d80f54b536b74095dcd7ea3cf0a29bbfc3402519281332495f4420d370d16 5e1fcf9f552ab86beceef6743609e97d700dcbaa5b5ee58858e765c1238cd4dbca2852e1eb415bc2a09dad478d31197ddf09b2ba148dd30be8c9ecd565775226 307707c885a45c1725e940b9e42d75871d47442fcc31ec9d8fa56af2e1a2372eed178ebf86c61b5a577465a2674c0f1f b87d7b7f6f0db51fcfb4bf0adf31795dc0083564dcc524df345fbbe3546c8357b61ebef793654003a5bcc2e7368bc3a4 39b8fb032df8934793dddf257ec49d0d7cd16a75e45bea716a21aa0278901621 40f6d1a9074546b05b42b3841c95b23e21df6f3e2bbe8bbe2905e9676ae51da768df315819cdffaa4f703ea3aec7aeb89f8f3b07c82ea2df3a936d425d606634 Apache-2.0 https://www.apache.org/licenses/LICENSE-2.0 pkg:maven/org.apache.commons/commons-compress@1.27.1?type=jar https://commons.apache.org/proper/commons-compress/ https://github.com/apache/commons-parent/actions https://repository.apache.org/service/local/staging/deploy/maven2 https://issues.apache.org/jira/browse/COMPRESS https://mail-archives.apache.org/mod_mbox/commons-user/ https://gitbox.apache.org/repos/asf?p=commons-compress.git The Apache Software Foundation org.apache.commons commons-collections4 4.4 The Apache Commons Collections package contains types that extend and augment the Java Collections Framework. required 4a37023740719b391f10030362c86be6 62ebe7544cb7164d87e0637a2a6a2bdc981395e8 1df8b9430b5c8ed143d7815e403e33ef5371b2400aadbe9bda0883762e0846d1 5939c9931eb9557caee3b45fe1dd9ce54cabdc4e6182ed7faac77e1a866dd0cb602bfa4ece2f3316d769913366106bd2b61bf3bb5faad1fa7d808124c06dec0f 74059fd8f61c366ed448e102256fdbd1db0d690501c2c296c80f3657a2c0d8ade3dd9533b1431cc29786bbb624195f46 15034fb39842620bf3b152cd90bce252644ebc6a29fafd6dcf5e1f3925f09ccea2ae4e195817450f996b25a7081a9a3f 1716630a207a8f4a83bf9ef19245f46c87d62bfebbcfa1227101e6dd51da8fa5 c290c98c7b5825d024644ec1162804a1f9ad4da3bb5324d147ddffee6cc79e3c0ecc3825d6116502f2ca292ec80c4e7f8d49a03542dda8f4d58b0dc8228923c5 Apache-2.0 pkg:maven/org.apache.commons/commons-collections4@4.4?type=jar https://commons.apache.org/proper/commons-collections/ https://builds.apache.org/ https://repository.apache.org/service/local/staging/deploy/maven2 http://issues.apache.org/jira/browse/COLLECTIONS https://mail-archives.apache.org/mod_mbox/commons-user/ https://git-wip-us.apache.org/repos/asf?p=commons-collections.git com.github.ben-manes.caffeine caffeine 3.1.8 A high performance caching library required b19301179903e8781776397d9923f7c8 24795585df8afaf70a2cd534786904ea5889c047 7dd15f9df1be238ffaa367ce6f556737a88031de4294dad18eef57c474ddf1d3 66195ac8ec62e5425344a51ab671a136618b8658a1e91bb1d1cd1aea5a51fdc12eb7fe5131a00e18ee330d6b0cad14f6743937c23baa50fb21e40eb76d82a777 bb1447801069938c709220002e2489c589f3a12e411a902983d1120785265b5b2716614b0612b6ab732978fdfe492399 e0455cea493f7d299cc9cb4dafa42b184ddc35927985537ad8119057621f988c3165f1bec62715054bd9de802d91e1eb a197fd5b92f9d15ee3a9efac322eb201b47bd8dc20304a0c6d85986199ec03ca 4fb700794e520bb3bc81ef156bedf696894ebf2d2bf0f25efdfd56dde4cd89b76c45b4a80d7eacb2ed0a6220718f1f9552547fecfb7d3fd319fa5145b4f20cab Apache-2.0 pkg:maven/com.github.ben-manes.caffeine/caffeine@3.1.8?type=jar https://github.com/ben-manes/caffeine https://github.com/ben-manes/caffeine com.github.andrewoma.dexx collection 0.7 Persistent (immutable) collection library required 6e1baaccf9e57842c7e944cef39bc680 264efc08bdcd22126bd429aaea9efaf5158b2b90 e50cbc8379325ee17e8127eed7eb88fb70b94ba16e5e3d97e12401a1fc248fb8 0708323a51db1dd3b4768ee844be5c83523ebc61c4e2ff07e6f952d8891dbc0f8e499f5d9bfb09bf48c99e492dc1804807a2e518b464d1a986407522e9dfea0d 19f9b9011d7f94d975b14b97aef8df35fb1a5cd215c35f3b3283d5cf0effdd8de3315907bce35bc9c12e006b6fcf8990 38954676b168659dd560568f62cdd8fedd3a8ef7d54bb430d64311b7b3b21cfb481fb7a16ad1efabc5c586b66b20eed7 3545d1a0d3d9dee1bcfb2c4aac44e013910fd117e6cd6417e26217bad8014a7a cc5998ac73b9d795c70690a6a83c633143ca1bb997091fb332134d94f095f89f7e581d20a89afb21455a143f824304c7eeb206d34ce8b8edd43e76606058b71b MIT https://opensource.org/license/mit/ pkg:maven/com.github.andrewoma.dexx/collection@0.7?type=jar https://github.com/andrewoma/dexx https://github.com/andrewoma/dexx QOS.ch org.slf4j jul-to-slf4j 2.0.16 JUL to SLF4J bridge optional 410ad2f2230e0150216d86e12a4af995 6d57da3e961daac65bcca0dd3def6cd11e48a24a 0f2ec396ea29c9a440890d1f09fdb82fdd574b47b298435764235451c193861d 0c4c1f62bdaa29e7b6fb41fdd62e398fb92e74e64ab36788be930468947ec94821e97cbc820159ec792f9be4cd3840ce60731be2c7437a734a458cbd2e412184 3216d143cb8efa77b87e54dc4f9e77f256b21d1c9525f45a26177a7ad264c32d229cf65bf67cf4bcab546663f41e95f4 8c551dfa80d6dc591b6376024362884625f259c8ddc4258190386e90a7b2141b40e2ed42b4ab6be93cbb1d81bbf0ffc9 ec1e9fbe3de9345a41059a3f45486a24948fc041d86e5455106b06501a6a254e e5912c03ec7a44feae7aff8d56221572be431a1c1b08407090d4187d64c4c8c2fd25f6d4d441005f95410637377f3c0fdee683c86d83a3c78918b3b84267caaf MIT https://opensource.org/license/mit/ pkg:maven/org.slf4j/jul-to-slf4j@2.0.16?type=jar http://www.slf4j.org https://oss.sonatype.org/service/local/staging/deploy/maven2/ https://github.com/qos-ch/slf4j/slf4j-parent/jul-to-slf4j