{
  "bomFormat" : "CycloneDX",
  "specVersion" : "1.5",
  "serialNumber" : "urn:uuid:6ef49daf-7e1b-303d-b9e9-16307e035f20",
  "version" : 1,
  "metadata" : {
    "lifecycles" : [
      {
        "phase" : "build"
      }
    ],
    "tools" : [
      {
        "vendor" : "OWASP Foundation",
        "name" : "CycloneDX Maven plugin",
        "version" : "2.8.0",
        "hashes" : [
          {
            "alg" : "MD5",
            "content" : "76ffec6a7ddd46b2b24517411874eb99"
          },
          {
            "alg" : "SHA-1",
            "content" : "5b0d5b41975b53be4799b9621b4af0cfc41d44b6"
          },
          {
            "alg" : "SHA-256",
            "content" : "6852aa0f4e42a2db745bab80e384951a6a65b9215d041081d675780999027e81"
          },
          {
            "alg" : "SHA-512",
            "content" : "417de20fcdcb11c9713bacbd57290d8e68037fdb4553fd31b8cb08bd760ad52dc65ea88ad4be15844ad3fd5a4d3e440d2f70326f2fe1e63ec78e059c9a883f8d"
          },
          {
            "alg" : "SHA-384",
            "content" : "5eb755c6492e7a7385fa9a1e1f4517875bcb834b2df437808a37a2d6f5285df428741762305980315a63fcef1406597d"
          },
          {
            "alg" : "SHA3-384",
            "content" : "0fe16a47cf7aab0b22251dafcc39939b68e8f1778093309d8d2060b51a08df445a8b8ed5a9561669faf2e55f907c76d8"
          },
          {
            "alg" : "SHA3-256",
            "content" : "3e5a1eb5ab7d0797498862794709ff8eaaa071fe4cc9ec77f52db7e2f97ef487"
          },
          {
            "alg" : "SHA3-512",
            "content" : "59281a3e29e76270d7f44b40b5b9f05e55f1ae3ec716d80add806f360940809e3813998ac7c5758043b8e248aed73b86e37dc506cdb4cde03c16bb617d8e5a3a"
          }
        ]
      }
    ],
    "component" : {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-rng-simple",
      "version" : "1.6",
      "description" : "Simple API for instantiating random numbers generators.",
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-rng-simple@1.6?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-rng/commons-rng-simple/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-rng/actions"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/RNG"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-rng.git/commons-rng-simple"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-rng-simple@1.6?type=jar"
    },
    "properties" : [
      {
        "name" : "maven.goal",
        "value" : "makeBom"
      },
      {
        "name" : "maven.scopes",
        "value" : "compile,provided,runtime,system"
      },
      {
        "name" : "cdx:reproducible",
        "value" : "enabled"
      }
    ]
  },
  "components" : [
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-rng-client-api",
      "version" : "1.6",
      "description" : "API for client code that uses random numbers generators.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "3fdb9660525d4dca3d5cd31f11dc19ed"
        },
        {
          "alg" : "SHA-1",
          "content" : "f464671c301c7801d40d6edf04d4093e06ff723a"
        },
        {
          "alg" : "SHA-256",
          "content" : "9b9cc84858789046b03636216aff2cf8062711a1d68478746e2a8cfc202be429"
        },
        {
          "alg" : "SHA-512",
          "content" : "2bdbf54b28cba8fff6817321d413f37e4fd964809d4f390ee5293f6d7e7cb0b9f930b2652ed02eddbbef270c34cef9e16537405e3fbf7137ce01ba49ca24bbb7"
        },
        {
          "alg" : "SHA-384",
          "content" : "2038d2320c2eaf51833a4ace200e0291187f1a932de686bc7c8dce37f10b234639b7e1dd90ee8984cf518c171550b852"
        },
        {
          "alg" : "SHA3-384",
          "content" : "4ec42729d0dec9018fe6ed88c8f37c434f8a36bca86c09fe73179b9672ec88c664f410a3cd5cada3cbbc4c743f0603ba"
        },
        {
          "alg" : "SHA3-256",
          "content" : "eb17300c3fe3ffec41f29a360929c870c9857e7f17f6e037641b25b546f51eef"
        },
        {
          "alg" : "SHA3-512",
          "content" : "2cf41ada681fbc456e2f3559fd0cfc55384adebabf794f161dd62a0ead58607a3307b3b19c48fa634d90549cf553d8103003fbbf4efe377f981a090751e6186b"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-rng-client-api@1.6?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-rng/commons-rng-client-api/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-rng/actions"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/RNG"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-rng.git/commons-rng-client-api"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-rng-client-api@1.6?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-rng-core",
      "version" : "1.6",
      "description" : "Pure Java implementations of random numbers generator algorithms. Code in this module should not be used directly by applications; please use the client interface defined in module \"commons-rng-client-api\" and the factory methods defined in module \"commons-rng-simple\". In a future release, modularization may be enforced through JPMS access restrictions.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "5968c2499a51cefaaf1eeb0bbcb1b64a"
        },
        {
          "alg" : "SHA-1",
          "content" : "7799d86e23d3d454a76d1469159b5b485b4f65a3"
        },
        {
          "alg" : "SHA-256",
          "content" : "52653f3032c49a2b2b77872a9e2ad1f570127933824b84d0bb8cd8c0e18a1520"
        },
        {
          "alg" : "SHA-512",
          "content" : "b5ebf5b532dd48efaaa1fe73f2a9e1337408af5d58fd2bba1dc6b76afdc14e685d03a0027037b9b459612ba0cbceb12effa52606b930b80d9e43e5c3a27563f4"
        },
        {
          "alg" : "SHA-384",
          "content" : "32cd30503586ae6ae44a21a5b520d304f440939e8021d4def9c35663a705cadf072412ba63bc17f9a3c03244267a2986"
        },
        {
          "alg" : "SHA3-384",
          "content" : "49f02de685b09cbe33ca514ecb52ef53ad053769695289a9b3e80376b54f1c5e710c1f907f9654542588fdad30f4d894"
        },
        {
          "alg" : "SHA3-256",
          "content" : "d405902c28583583f7e3bc29e2bf2e76281dbab56762071da995897d1c8352ee"
        },
        {
          "alg" : "SHA3-512",
          "content" : "40fb3ebe9bac4290ee762d2d7efb2cff0f1e66638c7fad13261d830923b5ba82c80c49e415648cf320dd7589a62878537b061eedceebe7710ccfdbfa5846e283"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-rng-core@1.6?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-rng/commons-rng-core/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-rng/actions"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/RNG"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-rng.git/commons-rng-core"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-rng-core@1.6?type=jar"
    }
  ],
  "dependencies" : [
    {
      "ref" : "pkg:maven/org.apache.commons/commons-rng-simple@1.6?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.commons/commons-rng-client-api@1.6?type=jar",
        "pkg:maven/org.apache.commons/commons-rng-core@1.6?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-rng-client-api@1.6?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-rng-core@1.6?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.commons/commons-rng-client-api@1.6?type=jar"
      ]
    }
  ]
}