<?xml version="1.0" encoding="UTF-8"?>
<bom serialNumber="urn:uuid:e7ce677b-4feb-3c51-938c-985a31514934" version="1" xmlns="http://cyclonedx.org/schema/bom/1.6">
  <metadata>
    <lifecycles>
      <lifecycle>
        <phase>build</phase>
      </lifecycle>
    </lifecycles>
    <tools>
      <components>
        <component type="library">
          <author>OWASP Foundation</author>
          <group>org.cyclonedx</group>
          <name>cyclonedx-maven-plugin</name>
          <version>2.9.1</version>
          <description>CycloneDX Maven plugin</description>
          <hashes>
            <hash alg="MD5">9c7a565cf28cce58557d0c621c5ea4b1</hash>
            <hash alg="SHA-1">be882d5a22050bfa9d19090b1420c188617d0e1c</hash>
            <hash alg="SHA-256">698e0f37184a5b28c245c4065fd036dfce253b52f82fbb7113d81d36326cc249</hash>
            <hash alg="SHA-512">c0f0b11026858166f872a2eb54719492e5cecaa0bc9cd6b30b3ecb4a174eed220f4a1b5829d18d6734128e778d3cb3db7ffed177c92866133129cb29081814a0</hash>
            <hash alg="SHA-384">d80964707dfe5caca8c70521d5066f57589304c0a657e6fbc7c0614ea0fc7b3b3dbe7778361eee0f54ba111e9cb0ffcb</hash>
            <hash alg="SHA3-384">80bc3a275d9514bc457461ff52a72add8c7ecbbc01d8912efce57139016c544ee776981851be0a58fa977ab4221f703f</hash>
            <hash alg="SHA3-256">142317d6f245390f4fd2d0c100b16281b8dfc5c0c2cff86943bdcc97039cb699</hash>
            <hash alg="SHA3-512">af0fb9137c90b65d1a07f72e4d51ae509956cdb8800f35c961b037cdda1fe4a14ce3b496cef71ba85f1621affcfe29cd42704ae4191ff0b090a9602087c8997b</hash>
          </hashes>
        </component>
      </components>
    </tools>
    <component type="library" bom-ref="pkg:maven/org.apache.orc/orc-shims@2.3.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.orc</group>
      <name>orc-shims</name>
      <version>2.3.0</version>
      <description>A shim layer for supporting various versions of Hadoop dynamically.

    This module uses a higher version of Hadoop so that we can create shims
    that let us use new features of Hadoop without having a hard dependency
    on the latest version.</description>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.orc/orc-shims@2.3.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://orc.apache.org/orc-shims</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/orc-user/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/maven-apache-parent/tree/apache-34/orc/orc-shims</url>
        </reference>
      </externalReferences>
    </component>
    <properties>
      <property name="maven.goal">makeBom</property>
      <property name="maven.scopes">compile,provided,runtime,system</property>
      <property name="cdx:reproducible">enabled</property>
    </properties>
  </metadata>
  <components>
    <component type="library" bom-ref="pkg:maven/org.apache.hadoop/hadoop-client-api@3.4.3?type=jar">
      <publisher>Apache Software Foundation</publisher>
      <group>org.apache.hadoop</group>
      <name>hadoop-client-api</name>
      <version>3.4.3</version>
      <description>Apache Hadoop Client</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">f9bff075e9d83d745e38ed1040b11b7e</hash>
        <hash alg="SHA-1">d58e69f03804f4b0e48d80b911baea3fc4edf71d</hash>
        <hash alg="SHA-256">6443332781f26a7199009d9517cd1eb013fbf54ca1c9759a2a9e487542b1d52a</hash>
        <hash alg="SHA-512">60c55f5498c3285c306509be03ec41a08570bdf7698ae75db4cf6848810c7de09debf68495072914867b19ae7cc11853382417566ac9d5b25976750d02d614f1</hash>
        <hash alg="SHA-384">50fb722b06fad26dc561890de4d49b61dc45e96808bee6e03f26b3882a73ab5357a7de091bc55ffb2b0137d5d12507bc</hash>
        <hash alg="SHA3-384">daeb2e2c82b13e33d406d4ae11b0e10732f2f536b326356a51566e26792d84f2a238625d19e6167cefd2167b1fbe0084</hash>
        <hash alg="SHA3-256">676f01e2152738c9c7f4d761472b4a9b25965f34b0a08bc63c27ebc67a8192d5</hash>
        <hash alg="SHA3-512">4a259a3a1437f4eb88c61c81999f5e1f14e12a3703b60aac67d4f549676690e292f4870eba3e6131f733260176d9f31640238e2f702c863f9cd7a32cd010156b</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.hadoop/hadoop-client-api@3.4.3?type=jar</purl>
      <externalReferences>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.xerial.snappy/snappy-java@1.1.10.8?type=jar">
      <publisher>xerial.org</publisher>
      <group>org.xerial.snappy</group>
      <name>snappy-java</name>
      <version>1.1.10.8</version>
      <description>snappy-java: A fast compression/decompression library</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">a25bd213d1ca2f3c605c5f03050db070</hash>
        <hash alg="SHA-1">ccbaa2b5ea6a023a27c44daf2d6cdec0e138592d</hash>
        <hash alg="SHA-256">50485d06037fea3d6e40c968386feeca6338cc9872e25549593ff3eb352cefcc</hash>
        <hash alg="SHA-512">c7133f726f366b9f06df98d94b4dd7c91c7702c543e1a318055a886af5e625d8231b0a6728250596181bc20a6c4147855eeb02ed55c447fe13ff2156e29985a9</hash>
        <hash alg="SHA-384">aeb78b3f4c56ce769f5fda9cfabe00be77d21b93637f70601c28b16eef41405e1291001c3a6e45001b356543e33b664b</hash>
        <hash alg="SHA3-384">6137f6354b574d8decb579ad9147dd9463e3a9f62d1e929266bee1adc020f57382973d0a1abf9daeb2007bb32671fed8</hash>
        <hash alg="SHA3-256">f44a4a8cffe82ce6c99b401e9d822e71cdfc63c1b279b278282eda07243b2a94</hash>
        <hash alg="SHA3-512">655731ef3b20a2cec213138c170f7dc7182c2a09536d74c1d8a13224bb204dd706a35749bf99b51c4b945b75784a0a26c60931a158d27e1378ccd1c8ac7a0783</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.xerial.snappy/snappy-java@1.1.10.8?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/xerial/snappy-java</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/xerial/snappy-java</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar">
      <publisher>QOS.ch</publisher>
      <group>org.slf4j</group>
      <name>slf4j-api</name>
      <version>2.0.17</version>
      <description>The slf4j API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">b6480d114a23683498ac3f746f959d2f</hash>
        <hash alg="SHA-1">d9e58ac9c7779ba3bf8142aff6c830617a7fe60f</hash>
        <hash alg="SHA-256">7b751d952061954d5abfed7181c1f645d336091b679891591d63329c622eb832</hash>
        <hash alg="SHA-512">9a3e79db6666a6096a3021bb2e1d918f30f589d8de51d6b600f8ebd92515a510ae2d8f87919cc2dfa8365d64f10194cac8dfa0fb950160eef0e9da06f6caaeb9</hash>
        <hash alg="SHA-384">6ea24f814a9b6ece428cfd0535e2f3b8927005745ef61006b50fdb5a90126ee5ea05650155382b3b755c5bce38ef3944</hash>
        <hash alg="SHA3-384">9b1015052f0ec43f9be09764e131834157599611cb52f6fe591c4ac6a8ab4817518f2a4b8871e5e738c8678e93af5557</hash>
        <hash alg="SHA3-256">00559b4f4066b4917ba4fe2a6f23111eaeada321112d030910d218ced9084b5e</hash>
        <hash alg="SHA3-512">9579c2f7e7516e177c2d493ccc9eb8150978cf19f6f09b28d116f6935239fd56dc6af2b62b3336f79b0b462445550cd1fb5377a07001a6f44aaab6a32fa2fa47</hash>
      </hashes>
      <licenses>
        <license>
          <id>MIT</id>
          <url>https://opensource.org/license/mit/</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://www.slf4j.org</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/qos-ch/slf4j/slf4j-parent/slf4j-api</url>
        </reference>
      </externalReferences>
    </component>
  </components>
  <dependencies>
    <dependency ref="pkg:maven/org.apache.orc/orc-shims@2.3.0?type=jar">
      <dependency ref="pkg:maven/org.apache.hadoop/hadoop-client-api@3.4.3?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.hadoop/hadoop-client-api@3.4.3?type=jar">
      <dependency ref="pkg:maven/org.xerial.snappy/snappy-java@1.1.10.8?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.xerial.snappy/snappy-java@1.1.10.8?type=jar"/>
    <dependency ref="pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar"/>
  </dependencies>
</bom>
