{
  "bomFormat" : "CycloneDX",
  "specVersion" : "1.4",
  "serialNumber" : "urn:uuid:d4407846-e499-397a-a993-3ad7b2c5027d",
  "version" : 1,
  "metadata" : {
    "tools" : [
      {
        "vendor" : "OWASP Foundation",
        "name" : "CycloneDX Maven plugin",
        "version" : "2.7.11",
        "hashes" : [
          {
            "alg" : "MD5",
            "content" : "a70e8b649ab4a2bb7922d360173c8237"
          },
          {
            "alg" : "SHA-1",
            "content" : "4c3c0878c15561639076e5be7a48ffcd6111c5ee"
          },
          {
            "alg" : "SHA-256",
            "content" : "70997d52dbffd4e797c467b2062c6ba9b8b5a7380ff2884779f2743b6172ebb5"
          },
          {
            "alg" : "SHA-512",
            "content" : "bc1ce91190c642f68fd3571939d7668def3b879ec8e5a87a213a9710a106e0290f60f9e0414593d19cca958c4fcb5d4450bd2793bcd609948419c8a2a6a7f5c8"
          },
          {
            "alg" : "SHA-384",
            "content" : "3c8421bdafd1754fb424f16dccc83bfe0827648c1cadfffc98bdf1c7da65475dfe48d2f4b16d233bb8819e155ba6a4f3"
          },
          {
            "alg" : "SHA3-384",
            "content" : "ad88cf6a0e0a5d51df49a4dab5530a28de9df7eec8460c045dff3e1f9316b82a244a125d52b937fe9d4ee72e44f5d01a"
          },
          {
            "alg" : "SHA3-256",
            "content" : "b4d9c3ef07c34517fd9f33178ba95ffc9618eb84a3671e71b0c82991ec3717e5"
          },
          {
            "alg" : "SHA3-512",
            "content" : "935b43aba8999dc7d95d93288a251c97b6b32852841b7bef31516c27c8d65c8de7f8411f1829f765ee760f25930c766db6a49df68e5994e18721c0a71f606f1e"
          }
        ]
      }
    ],
    "component" : {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.orc",
      "name" : "orc-shims",
      "version" : "2.1.2",
      "description" : "A shim layer for supporting various versions of Hadoop dynamically. This module uses a higher version of Hadoop so that we can create shims that let us use new features of Hadoop without having a hard dependency on the latest version.",
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.orc/orc-shims@2.1.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://orc.apache.org/orc-shims"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/orc-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven-apache-parent/tree/apache-27/orc/orc-shims"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.orc/orc-shims@2.1.2?type=jar"
    },
    "properties" : [
      {
        "name" : "maven.goal",
        "value" : "makeBom"
      },
      {
        "name" : "maven.scopes",
        "value" : "compile,provided,runtime,system"
      },
      {
        "name" : "cdx:reproducible",
        "value" : "enabled"
      }
    ]
  },
  "components" : [
    {
      "publisher" : "Apache Software Foundation",
      "group" : "org.apache.hadoop",
      "name" : "hadoop-client-api",
      "version" : "3.4.1",
      "description" : "Apache Hadoop Client",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "ca3ecadd54afd54a1620c9d87cc55ef1"
        },
        {
          "alg" : "SHA-1",
          "content" : "7e4cfae7f5c85cffdbc21fdf749262fc78d4463a"
        },
        {
          "alg" : "SHA-256",
          "content" : "a964d4daa054c9615bbafb4553efbb140fa7fb9ac6f358a24393f183a5703438"
        },
        {
          "alg" : "SHA-512",
          "content" : "d505c0f8cfffcfe0090c69de854c971c7d88646f1f9f31af43ad3934a686dc06ae39250c3c99998ea57a27fc226a0fa5fb4da39867cac3997577ad7ffb01b239"
        },
        {
          "alg" : "SHA-384",
          "content" : "d445f3faf75f0d8d8708c4d15ebe509267e03e1362e826e731cb9e30c911ab54d63c2b5e6328ea847e71a7f3e5ccd696"
        },
        {
          "alg" : "SHA3-384",
          "content" : "05836b3a60025f8e74b64db919b16ac3ae2d4015f0f22a61212516658b2d033fd12c9a653fae18c79f8a08f5eab67894"
        },
        {
          "alg" : "SHA3-256",
          "content" : "fa7f3eb51d296717e92fdcf97c314df909718a766bebd6156e284f247a254426"
        },
        {
          "alg" : "SHA3-512",
          "content" : "1650be915561e8d0119410db55913bd1ed0bf034e6683b4a3c4acaa71834c1acdffe1b4cb90719e421e8fdeecdd5a5f2c7dcf94c4e6a72220931a9f7db96c4aa"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.hadoop/hadoop-client-api@3.4.1?type=jar",
      "externalReferences" : [
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.hadoop/hadoop-client-api@3.4.1?type=jar"
    },
    {
      "publisher" : "xerial.org",
      "group" : "org.xerial.snappy",
      "name" : "snappy-java",
      "version" : "1.1.10.4",
      "description" : "snappy-java: A fast compression/decompression library",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "d1d3b91e925c46a1a0f68b87298bafe8"
        },
        {
          "alg" : "SHA-1",
          "content" : "50d0390056017158bdc75c063efd5c2a898d5f0c"
        },
        {
          "alg" : "SHA-256",
          "content" : "55b30c94e5c4cc2d4b6976916098d0678a8a6cc7427fa8c875621bd94e731ac8"
        },
        {
          "alg" : "SHA-512",
          "content" : "9e52bad4eaa0d0a2e0083cdd3433d84c4bb44c4d3f0314a48c3d6eacbb64d0f4fb2d71197944115618a598eb4a4941c13af2a9ec676b003fb3462ddac58bbe41"
        },
        {
          "alg" : "SHA-384",
          "content" : "9539e8eb2dea244f07a7216db38970e3f336b5dc9d132cbe54e201c818dba3e02a1fc467b4529a18eca7127f86d742dd"
        },
        {
          "alg" : "SHA3-384",
          "content" : "d5d5ef5d8b050f200ae29855a4b6f5e278215d0a97a69d3653dc1aa716f9847b3c305312a3c994d46721615ba02fc7c8"
        },
        {
          "alg" : "SHA3-256",
          "content" : "bbbb3ff43a24094bf2c77dd8c8f94b06d62d158da0d2c3399de3a2993df9986e"
        },
        {
          "alg" : "SHA3-512",
          "content" : "de2aa7e7fada466f24ccda07123e2877446733dd48e4b914d25b0d296f677e17a24f182a0e9216e77b261143b774ccaadcfd2854dde1bf36cb2c6db6cdf78b3c"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.xerial.snappy/snappy-java@1.1.10.4?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/xerial/snappy-java"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/xerial/snappy-java"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.xerial.snappy/snappy-java@1.1.10.4?type=jar"
    },
    {
      "publisher" : "QOS.ch",
      "group" : "org.slf4j",
      "name" : "slf4j-api",
      "version" : "2.0.16",
      "description" : "The slf4j API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "c8de8f5d740584cb24b5652cfba8b3c4"
        },
        {
          "alg" : "SHA-1",
          "content" : "0172931663a09a1fa515567af5fbef00897d3c04"
        },
        {
          "alg" : "SHA-256",
          "content" : "a12578dde1ba00bd9b816d388a0b879928d00bab3c83c240f7013bf4196c579a"
        },
        {
          "alg" : "SHA-512",
          "content" : "91c2e7b30f24649bb3edfc7f138c2b7dc715ad36963af159defb80a71205eb7e4c5bcc80d779ef993b567a56724064f190c93985f32665a8df85198a03a2f1bb"
        },
        {
          "alg" : "SHA-384",
          "content" : "ed0cc7ad67343b9fe4df03ea534025bf9d90c112b33cd8920f29890d923c349b69820c9c42b9e8882047af848b74f99d"
        },
        {
          "alg" : "SHA3-384",
          "content" : "331ac707cfa4b2bda44deffce7d2a640abb9ae12968cb1ac4879ba1b45542e3d3ce1016c812ff1f2449336bc7ea6bebb"
        },
        {
          "alg" : "SHA3-256",
          "content" : "3f68204951bb4baedc34fdd7194d0801042268aba0c58ac5d760779510743fbb"
        },
        {
          "alg" : "SHA3-512",
          "content" : "d7a2f7359e7b2cd6ae3650d28352bf8789acf5855a3596a3be2a236a94931abf8bacf0d6a457afa43164be53abb19cc223ef4f030822a3295c036c078527e361"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl" : "pkg:maven/org.slf4j/slf4j-api@2.0.16?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.slf4j.org"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/qos-ch/slf4j/slf4j-parent/slf4j-api"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.slf4j/slf4j-api@2.0.16?type=jar"
    }
  ],
  "dependencies" : [
    {
      "ref" : "pkg:maven/org.apache.orc/orc-shims@2.1.2?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.hadoop/hadoop-client-api@3.4.1?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.16?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.hadoop/hadoop-client-api@3.4.1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.xerial.snappy/snappy-java@1.1.10.4?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.xerial.snappy/snappy-java@1.1.10.4?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.slf4j/slf4j-api@2.0.16?type=jar",
      "dependsOn" : [ ]
    }
  ]
}