<?xml version="1.0" encoding="UTF-8"?>
<bom serialNumber="urn:uuid:f617fc49-049e-3fc1-8296-56ab80aff439" version="1" xmlns="http://cyclonedx.org/schema/bom/1.4">
  <metadata>
    <tools>
      <tool>
        <vendor>OWASP Foundation</vendor>
        <name>CycloneDX Maven plugin</name>
        <version>2.9.1</version>
        <hashes>
          <hash alg="MD5">9c7a565cf28cce58557d0c621c5ea4b1</hash>
          <hash alg="SHA-1">be882d5a22050bfa9d19090b1420c188617d0e1c</hash>
          <hash alg="SHA-256">698e0f37184a5b28c245c4065fd036dfce253b52f82fbb7113d81d36326cc249</hash>
          <hash alg="SHA-512">c0f0b11026858166f872a2eb54719492e5cecaa0bc9cd6b30b3ecb4a174eed220f4a1b5829d18d6734128e778d3cb3db7ffed177c92866133129cb29081814a0</hash>
          <hash alg="SHA-384">d80964707dfe5caca8c70521d5066f57589304c0a657e6fbc7c0614ea0fc7b3b3dbe7778361eee0f54ba111e9cb0ffcb</hash>
          <hash alg="SHA3-384">80bc3a275d9514bc457461ff52a72add8c7ecbbc01d8912efce57139016c544ee776981851be0a58fa977ab4221f703f</hash>
          <hash alg="SHA3-256">142317d6f245390f4fd2d0c100b16281b8dfc5c0c2cff86943bdcc97039cb699</hash>
          <hash alg="SHA3-512">af0fb9137c90b65d1a07f72e4d51ae509956cdb8800f35c961b037cdda1fe4a14ce3b496cef71ba85f1621affcfe29cd42704ae4191ff0b090a9602087c8997b</hash>
        </hashes>
      </tool>
    </tools>
    <component type="library" bom-ref="pkg:maven/jakarta.json.bind/jakarta.json.bind-api@3.0.2?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>jakarta.json.bind</group>
      <name>jakarta.json.bind-api</name>
      <version>3.0.2</version>
      <description>Jakarta JSON Binding is a standard binding layer for converting Java objects to/from JSON documents.</description>
      <licenses>
        <license>
          <id>EPL-2.0</id>
          <url>https://www.eclipse.org/legal/epl-2.0</url>
        </license>
        <license>
          <name>GNU General Public License, version 2 with the GNU Classpath Exception</name>
          <url>https://projects.eclipse.org/license/secondary-gpl-2.0-cp</url>
        </license>
      </licenses>
      <purl>pkg:maven/jakarta.json.bind/jakarta.json.bind-api@3.0.2?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://projects.eclipse.org/projects/ee4j.jsonb/jakarta.json.bind-api</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/jakartaee/jsonb-api/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://www.eclipse.org/lists/jsonb-dev</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/jakartaee/jsonb-api/jakarta.json.bind-api</url>
        </reference>
      </externalReferences>
    </component>
    <properties>
      <property name="maven.goal">makeBom</property>
      <property name="maven.scopes">compile,provided,runtime,system</property>
      <property name="cdx:reproducible">enabled</property>
    </properties>
  </metadata>
  <components>
    <component type="library" bom-ref="pkg:maven/jakarta.json/jakarta.json-api@2.1.3?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>jakarta.json</group>
      <name>jakarta.json-api</name>
      <version>2.1.3</version>
      <description>Jakarta JSON Processing defines a Java(R) based framework for parsing, generating, transforming, and querying JSON documents.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">596997520702889d4afef9cffbd4b71a</hash>
        <hash alg="SHA-1">4febd83e1d9d1561d078af460ecd19532383735c</hash>
        <hash alg="SHA-256">bc934142805ea1d794f1440563965a3861a2a9fb7414ecd3fe44f26500734414</hash>
        <hash alg="SHA-512">5a6566f0ceaa8b0ca40ae643942c0d46acd118a3b4d85af5f3a977e738465e8c8d4bc977f0c3e4b51f4471e408c28f66dbc0b19adf61237f6f6f7fa1d0dacc31</hash>
        <hash alg="SHA-384">1a17b8a416692ba0e485d7290782b2b5c4de8cb65c2043f221381deee668953655c221dc3efa29d3c65c8b2c1fab173f</hash>
        <hash alg="SHA3-384">4c009f9fec6b1e14b2c675ee7addb49ebd047d71d7aaf31601ccea3ffe4af1d82838a3452b0e5d7c2814e27861cd3ffd</hash>
        <hash alg="SHA3-256">5b839f4645dbac0d1bc76a91e168a52574c2bb6de0b7e92cd14aafd0ad6a28b0</hash>
        <hash alg="SHA3-512">fedcd8618f44ab0b771bef7d2fcb61d49021eb2e592d8d3058d3f57e7fe0ed1a9239cac859fe534dd0629aaf577fb8f77841412dbb3ae58b8d8cd0754da2ec48</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
          <url>https://www.eclipse.org/legal/epl-2.0</url>
        </license>
        <license>
          <name>GNU General Public License, version 2 with the GNU Classpath Exception</name>
          <url>https://projects.eclipse.org/license/secondary-gpl-2.0-cp</url>
        </license>
      </licenses>
      <purl>pkg:maven/jakarta.json/jakarta.json-api@2.1.3?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/eclipse-ee4j/jsonp</url>
        </reference>
        <reference type="distribution">
          <url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/eclipse-ee4j/ee4j/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/eclipse-ee4j/jsonp</url>
        </reference>
      </externalReferences>
    </component>
  </components>
  <dependencies>
    <dependency ref="pkg:maven/jakarta.json.bind/jakarta.json.bind-api@3.0.2?type=jar">
      <dependency ref="pkg:maven/jakarta.json/jakarta.json-api@2.1.3?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/jakarta.json/jakarta.json-api@2.1.3?type=jar"/>
  </dependencies>
</bom>
