{
  "bomFormat" : "CycloneDX",
  "specVersion" : "1.4",
  "serialNumber" : "urn:uuid:381cbf4c-3009-4a42-a4d0-7188e72fbfac",
  "version" : 1,
  "metadata" : {
    "timestamp" : "2022-10-25T19:46:32Z",
    "tools" : [
      {
        "vendor" : "OWASP Foundation",
        "name" : "CycloneDX Maven plugin",
        "version" : "2.7.1",
        "hashes" : [
          {
            "alg" : "MD5",
            "content" : "538c878ebf89b372876e247d056a3fc5"
          },
          {
            "alg" : "SHA-1",
            "content" : "4561e50edb47e12a03712b1afce9b20cba32fd28"
          },
          {
            "alg" : "SHA-256",
            "content" : "f0ea7b3bcf5c7ba649b8d9807e805385330501881677d47333aebce8305ef4d4"
          },
          {
            "alg" : "SHA-512",
            "content" : "a35400ca6411692ae8964fe7030eaba2a83a2fa50e2883def3054191283c3b48e2dcdd68bf80f5a0ede3898cc6b7cb7b998aacd2c1e969320053c43b6ab8d873"
          },
          {
            "alg" : "SHA-384",
            "content" : "75c0c03a03c69e82ad1f7b942d6d733da8261c4058174355d6b24ebd88cee34180f2e8484d2b0fedaf459078bdf6e927"
          },
          {
            "alg" : "SHA3-384",
            "content" : "98cd312d4dfc104a0a66d65023d0aade423f08951f2a9e0215e703f0c81c4f274d8e11a2db1abc30a558b820d65860c4"
          },
          {
            "alg" : "SHA3-256",
            "content" : "0c5fd65013128de457b049a824c4ad11212d668b503613ce19a54d545e5cf82d"
          },
          {
            "alg" : "SHA3-512",
            "content" : "72ea0ed8faa3cc4493db96d0223094842e7153890b091ff364040ad3ad89363157fc9d1bd852262124aec83134f0c19aa4fd0fa482031d38a76d74dfd36b7964"
          }
        ]
      }
    ],
    "component" : {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-compress",
      "version" : "1.22",
      "description" : "Apache Commons Compress software defines an API for working with compression and archive formats. These include: bzip2, gzip, pack200, lzma, xz, Snappy, traditional Unix Compress, DEFLATE, DEFLATE64, LZ4, Brotli, Zstandard and ar, cpio, jar, tar, zip, dump, 7z, arj.",
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-compress@1.22?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.apache.org/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-parent/actions"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/COMPRESS"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-compress.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-compress@1.22?type=jar"
    }
  },
  "components" : [
    {
      "publisher" : "com.github.luben",
      "group" : "com.github.luben",
      "name" : "zstd-jni",
      "version" : "1.5.2-5",
      "description" : "JNI bindings for Zstd native library that provides fast and high compression lossless algorithm for Java and all JVM languages.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "474f53d74d4f815120b88bf256328139"
        },
        {
          "alg" : "SHA-1",
          "content" : "ef34c3a855e144c03de5c0b0a8e80469915ebae6"
        },
        {
          "alg" : "SHA-256",
          "content" : "0f8e64feaa068b8a02de45e9343f9b2fc401235b81e7fe3f80b2aeba001691b2"
        },
        {
          "alg" : "SHA-512",
          "content" : "edbd6d1b6f2d75e55e1f879a41a6c2e020be620c5973283fa0c61cb8c0c8ee689021742df77ed41e2688b8bc8c33c39c77ac33c4e09036878ef2da50f2e73f9f"
        },
        {
          "alg" : "SHA-384",
          "content" : "e5e5050acabe56bffa5fb4fad8b24454158ee342f970059745ed0d66b048d602c6091745cc09d31314bbd510bd489d13"
        },
        {
          "alg" : "SHA3-384",
          "content" : "ef4c184ed4faa7437d418a6c5999fbd5eb753c485d41429522e7a3b64613df95f87a6a25a5e99ca3f7d547b019dbd79e"
        },
        {
          "alg" : "SHA3-256",
          "content" : "913a5aadbe2ec13234dbdf898e5ef169034971d4bda426906e23d7eec816aa39"
        },
        {
          "alg" : "SHA3-512",
          "content" : "0f70e8b6d01f9d7e4d70086db793f7f8293e0c7b6d8b89356100575434ebd8d641c89ad30fafb7117c08eb5b9aa8f0dbc89902d2ac46748a0017b99dd471aa87"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-2-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/com.github.luben/zstd-jni@1.5.2-5?type=jar",
      "type" : "library",
      "bom-ref" : "pkg:maven/com.github.luben/zstd-jni@1.5.2-5?type=jar"
    },
    {
      "group" : "org.brotli",
      "name" : "dec",
      "version" : "0.1.2",
      "description" : "Brotli is a generic-purpose lossless compression algorithm.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "4b1cd14cf29733941cc536b27e6aedfa"
        },
        {
          "alg" : "SHA-1",
          "content" : "0c26a897ae0d524809eef1c786cc6183b4ddcc3b"
        },
        {
          "alg" : "SHA-256",
          "content" : "615c0c3efef990d77831104475fba6a1f7971388691d4bad1471ad84101f6d52"
        },
        {
          "alg" : "SHA-512",
          "content" : "d4cd2b33f7c358012ff01db6a13ebfe1e8051a580698bffcd942c47451012cf53ce49a400b1c8bf7502b01e631d79d7c6417202a145622572d79fd145ccde61a"
        },
        {
          "alg" : "SHA-384",
          "content" : "d6b8ad9d0ee6baf8c3a29c1dc2911eaf207352e2c7de893a0185e987e7eae87827890c1d4dbf31c46f25846fbcdc08bb"
        },
        {
          "alg" : "SHA3-384",
          "content" : "d16c32130bf6b168ff4c8a3dedf1b17787f8d6f0eab9de21e51ed3ab1e7d85925dd02315972f6ca3a4493357aad545cb"
        },
        {
          "alg" : "SHA3-256",
          "content" : "962dc76a5c487de8d34308860ab65927bf91f50ccb12f37bffb036a7a05145a4"
        },
        {
          "alg" : "SHA3-512",
          "content" : "a82a3f79b57d30613606ca51dc432b097fa75aab5c87fb45eabec6d80ddeff1b329100b325bb07005aebaec166952c4599a863d4bfd5a684bad21103a2046311"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl" : "pkg:maven/org.brotli/dec@0.1.2?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "https://github.com/google/brotli"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.brotli/dec@0.1.2?type=jar"
    },
    {
      "group" : "org.tukaani",
      "name" : "xz",
      "version" : "1.9",
      "description" : "XZ data compression",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "57c2fbfeb55e307ccae52e5322082e02"
        },
        {
          "alg" : "SHA-1",
          "content" : "1ea4bec1a921180164852c65006d928617bd2caf"
        },
        {
          "alg" : "SHA-256",
          "content" : "211b306cfc44f8f96df3a0a3ddaf75ba8c5289eed77d60d72f889bb855f535e5"
        },
        {
          "alg" : "SHA-512",
          "content" : "a4362db234d4e83683e90f5baf90c82107450cc4404acab96e3fab14b8a3d4588a19722171d32f27d18463682a6994cad9af0b1065c954e3a77ea7bdcf586bac"
        },
        {
          "alg" : "SHA-384",
          "content" : "aa30349b094723369908369a18e2cb5beb5b7ca0b24b4d56c2f5725fae152220f6526466672b22bfec939e2e0622a01d"
        },
        {
          "alg" : "SHA3-384",
          "content" : "b3e1fee7784188df5e1931c9e8137ac0e20e63f66f93e7f938a448fc0b3adb4be5205c7a5f1835007e233fee2696fc2c"
        },
        {
          "alg" : "SHA3-256",
          "content" : "92eff603ed0aab557e1a45e17a74e80d8ec656b5f137197b23c429c903fa448f"
        },
        {
          "alg" : "SHA3-512",
          "content" : "b290f92958f8cd91705331d8411140c23957ab8b568fbe19a70f4f1dc97eddc13d3a200df28a02ab5911ce18f546c33f720878be0f727edac839a6e63ee66ece"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "Public Domain"
          }
        }
      ],
      "purl" : "pkg:maven/org.tukaani/xz@1.9?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "https://git.tukaani.org/?p=xz-java.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.tukaani/xz@1.9?type=jar"
    },
    {
      "publisher" : "OW2",
      "group" : "org.ow2.asm",
      "name" : "asm",
      "version" : "9.4",
      "description" : "ASM, a very small and fast Java bytecode manipulation framework",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "ffa64f03a23a4823d98703e6ce6ff397"
        },
        {
          "alg" : "SHA-1",
          "content" : "b4e0e2d2e023aa317b7cfcfc916377ea348e07d1"
        },
        {
          "alg" : "SHA-256",
          "content" : "39d0e2b3dc45af65a09b097945750a94a126e052e124f93468443a1d0e15f381"
        },
        {
          "alg" : "SHA-512",
          "content" : "41e6d8f67faa63e3993692d6606cbc68ec43d140e0232c5aee2ef7dbeea289ad5711ce04407c771e8baef844ead5f838d8b248e20a06e3fd5c41c52d3340a459"
        },
        {
          "alg" : "SHA-384",
          "content" : "b4be5348020e602444066609b95162c1037e85bff5670db6a22330dbd556eecb9e9270a4ddcda17d352717c6803d7109"
        },
        {
          "alg" : "SHA3-384",
          "content" : "bca491acf7ad4834c25ea75e3267d9a47de90897d99613f6c9ef91f715e63a660c7dd4f6f2c4aa0c8ee0d9f012968409"
        },
        {
          "alg" : "SHA3-256",
          "content" : "5e7bdbd620fc5d3b5acc82867a38638d004c9476f25ba9de342778b098f57829"
        },
        {
          "alg" : "SHA3-512",
          "content" : "55e16a86d5b9a7a7e145e8c327d6456a6d4a73be49e35f78e14691e11453da63d86c956ea3f55feeede39e62292af9eb2ff21ebce62293a99ee115a9d862f91a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause",
            "url" : "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.ow2.asm/asm@9.4?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.ow2.org/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://gitlab.ow2.org/asm/asm/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail.ow2.org/wws/arc/asm/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitlab.ow2.org/asm/asm/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.ow2.asm/asm@9.4?type=jar"
    },
    {
      "publisher" : "OSGi Alliance",
      "group" : "org.osgi",
      "name" : "org.osgi.core",
      "version" : "6.0.0",
      "description" : "OSGi Core Release 6, Interfaces and Classes for use in compiling bundles.",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "cae291c61fe8b7a4476d713550c7ff49"
        },
        {
          "alg" : "SHA-1",
          "content" : "0c49acdc9ac62cf69ee49cb6f1905b4fdb79ea5c"
        },
        {
          "alg" : "SHA-256",
          "content" : "1c1bb435eb34cbf1f743653da38f604d45d53fbc95979053768cd3fc293cb931"
        },
        {
          "alg" : "SHA-512",
          "content" : "a6d5388804982ab2cb0ba82b4291e73f006577c54e5dcb0675a2c4922594ddb0265810a4e7c748c88eba76ee350340376b7a9bd25d2de3afb954cf89117cd470"
        },
        {
          "alg" : "SHA-384",
          "content" : "8daff91fc229b2874c1ff7a214fdee65b1824fbac76eb7feec609c5b70ab2fd24fc5cf017b339788a5c7aec041ec1a1c"
        },
        {
          "alg" : "SHA3-384",
          "content" : "b921d8bea5dab6e7d827ce49a43e6edb4a15c1402e1d70498faf867bd7e9ea61f47b9cbdbf008ed517b71499c02b9e4c"
        },
        {
          "alg" : "SHA3-256",
          "content" : "5836efac64dd3757498bc6648cf02e46f136c6b0b39d5f1641218459d6b68ca0"
        },
        {
          "alg" : "SHA3-512",
          "content" : "9056edfc04943cdc81041db1851cade670415457221617babeb3d3c5136c3dcc303862e55b545f40584477e0654d11d84db6ede072015b08744241202d79ee63"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.osgi/org.osgi.core@6.0.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.osgi.org"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.osgi/org.osgi.core@6.0.0?type=jar"
    }
  ],
  "dependencies" : [
    {
      "ref" : "pkg:maven/org.apache.commons/commons-compress@1.22?type=jar",
      "dependsOn" : [
        "pkg:maven/com.github.luben/zstd-jni@1.5.2-5?type=jar",
        "pkg:maven/org.brotli/dec@0.1.2?type=jar",
        "pkg:maven/org.tukaani/xz@1.9?type=jar",
        "pkg:maven/org.ow2.asm/asm@9.4?type=jar",
        "pkg:maven/org.osgi/org.osgi.core@6.0.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.github.luben/zstd-jni@1.5.2-5?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.brotli/dec@0.1.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.tukaani/xz@1.9?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.ow2.asm/asm@9.4?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.osgi/org.osgi.core@6.0.0?type=jar",
      "dependsOn" : [ ]
    }
  ]
}