{
  "bomFormat" : "CycloneDX",
  "specVersion" : "1.4",
  "serialNumber" : "urn:uuid:f617fc49-049e-3fc1-8296-56ab80aff439",
  "version" : 1,
  "metadata" : {
    "tools" : [
      {
        "vendor" : "OWASP Foundation",
        "name" : "CycloneDX Maven plugin",
        "version" : "2.9.1",
        "hashes" : [
          {
            "alg" : "MD5",
            "content" : "9c7a565cf28cce58557d0c621c5ea4b1"
          },
          {
            "alg" : "SHA-1",
            "content" : "be882d5a22050bfa9d19090b1420c188617d0e1c"
          },
          {
            "alg" : "SHA-256",
            "content" : "698e0f37184a5b28c245c4065fd036dfce253b52f82fbb7113d81d36326cc249"
          },
          {
            "alg" : "SHA-512",
            "content" : "c0f0b11026858166f872a2eb54719492e5cecaa0bc9cd6b30b3ecb4a174eed220f4a1b5829d18d6734128e778d3cb3db7ffed177c92866133129cb29081814a0"
          },
          {
            "alg" : "SHA-384",
            "content" : "d80964707dfe5caca8c70521d5066f57589304c0a657e6fbc7c0614ea0fc7b3b3dbe7778361eee0f54ba111e9cb0ffcb"
          },
          {
            "alg" : "SHA3-384",
            "content" : "80bc3a275d9514bc457461ff52a72add8c7ecbbc01d8912efce57139016c544ee776981851be0a58fa977ab4221f703f"
          },
          {
            "alg" : "SHA3-256",
            "content" : "142317d6f245390f4fd2d0c100b16281b8dfc5c0c2cff86943bdcc97039cb699"
          },
          {
            "alg" : "SHA3-512",
            "content" : "af0fb9137c90b65d1a07f72e4d51ae509956cdb8800f35c961b037cdda1fe4a14ce3b496cef71ba85f1621affcfe29cd42704ae4191ff0b090a9602087c8997b"
          }
        ]
      }
    ],
    "component" : {
      "type" : "library",
      "bom-ref" : "pkg:maven/jakarta.json.bind/jakarta.json.bind-api@3.0.2?type=jar",
      "publisher" : "Eclipse Foundation",
      "group" : "jakarta.json.bind",
      "name" : "jakarta.json.bind-api",
      "version" : "3.0.2",
      "description" : "Jakarta JSON Binding is a standard binding layer for converting Java objects to/from JSON documents.",
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0",
            "url" : "https://www.eclipse.org/legal/epl-2.0"
          }
        },
        {
          "license" : {
            "name" : "GNU General Public License, version 2 with the GNU Classpath Exception",
            "url" : "https://projects.eclipse.org/license/secondary-gpl-2.0-cp"
          }
        }
      ],
      "purl" : "pkg:maven/jakarta.json.bind/jakarta.json.bind-api@3.0.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://projects.eclipse.org/projects/ee4j.jsonb/jakarta.json.bind-api"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/jakartaee/jsonb-api/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://www.eclipse.org/lists/jsonb-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/jakartaee/jsonb-api/jakarta.json.bind-api"
        }
      ]
    },
    "properties" : [
      {
        "name" : "maven.goal",
        "value" : "makeBom"
      },
      {
        "name" : "maven.scopes",
        "value" : "compile,provided,runtime,system"
      },
      {
        "name" : "cdx:reproducible",
        "value" : "enabled"
      }
    ]
  },
  "components" : [
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/jakarta.json/jakarta.json-api@2.1.3?type=jar",
      "publisher" : "Eclipse Foundation",
      "group" : "jakarta.json",
      "name" : "jakarta.json-api",
      "version" : "2.1.3",
      "description" : "Jakarta JSON Processing defines a Java(R) based framework for parsing, generating, transforming, and querying JSON documents.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "596997520702889d4afef9cffbd4b71a"
        },
        {
          "alg" : "SHA-1",
          "content" : "4febd83e1d9d1561d078af460ecd19532383735c"
        },
        {
          "alg" : "SHA-256",
          "content" : "bc934142805ea1d794f1440563965a3861a2a9fb7414ecd3fe44f26500734414"
        },
        {
          "alg" : "SHA-512",
          "content" : "5a6566f0ceaa8b0ca40ae643942c0d46acd118a3b4d85af5f3a977e738465e8c8d4bc977f0c3e4b51f4471e408c28f66dbc0b19adf61237f6f6f7fa1d0dacc31"
        },
        {
          "alg" : "SHA-384",
          "content" : "1a17b8a416692ba0e485d7290782b2b5c4de8cb65c2043f221381deee668953655c221dc3efa29d3c65c8b2c1fab173f"
        },
        {
          "alg" : "SHA3-384",
          "content" : "4c009f9fec6b1e14b2c675ee7addb49ebd047d71d7aaf31601ccea3ffe4af1d82838a3452b0e5d7c2814e27861cd3ffd"
        },
        {
          "alg" : "SHA3-256",
          "content" : "5b839f4645dbac0d1bc76a91e168a52574c2bb6de0b7e92cd14aafd0ad6a28b0"
        },
        {
          "alg" : "SHA3-512",
          "content" : "fedcd8618f44ab0b771bef7d2fcb61d49021eb2e592d8d3058d3f57e7fe0ed1a9239cac859fe534dd0629aaf577fb8f77841412dbb3ae58b8d8cd0754da2ec48"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0",
            "url" : "https://www.eclipse.org/legal/epl-2.0"
          }
        },
        {
          "license" : {
            "name" : "GNU General Public License, version 2 with the GNU Classpath Exception",
            "url" : "https://projects.eclipse.org/license/secondary-gpl-2.0-cp"
          }
        }
      ],
      "purl" : "pkg:maven/jakarta.json/jakarta.json-api@2.1.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/eclipse-ee4j/jsonp"
        },
        {
          "type" : "distribution",
          "url" : "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-ee4j/ee4j/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse-ee4j/jsonp"
        }
      ]
    }
  ],
  "dependencies" : [
    {
      "ref" : "pkg:maven/jakarta.json.bind/jakarta.json.bind-api@3.0.2?type=jar",
      "dependsOn" : [
        "pkg:maven/jakarta.json/jakarta.json-api@2.1.3?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/jakarta.json/jakarta.json-api@2.1.3?type=jar",
      "dependsOn" : [ ]
    }
  ]
}