<?xml version="1.0" encoding="UTF-8"?>
<bom serialNumber="urn:uuid:0a22fc50-c6ce-4c62-96f7-93f42b61a924" version="1" xmlns="http://cyclonedx.org/schema/bom/1.4">
  <metadata>
    <timestamp>2023-03-18T17:46:20Z</timestamp>
    <tools>
      <tool>
        <vendor>OWASP Foundation</vendor>
        <name>CycloneDX Maven plugin</name>
        <version>2.7.3</version>
        <hashes>
          <hash alg="MD5">ab886f1cb1a79b4244ac54dde22a0989</hash>
          <hash alg="SHA-1">9ed658496dfeef87fe6072b95c62ec37165cc741</hash>
          <hash alg="SHA-256">df9b43417bef6aeac86a393abcc1ac2ed0518239ba544aaeb595b9619c603503</hash>
          <hash alg="SHA-512">223da34bb51c5339e0f7285757608c1a56b1ea887f7ad835af9299fabacc693053163da74af352af86b16e18e04db730bd44214eda04291410c42b6ae657d85c</hash>
          <hash alg="SHA-384">3aaf057329ed0f90ec3a49a45b3cf4ec5ce637fd75d6202e9483fa4274cec3e7b74308016e146b6ba087df5fce9397bb</hash>
        </hashes>
      </tool>
    </tools>
    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-compress@1.23.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.commons</group>
      <name>commons-compress</name>
      <version>1.23.0</version>
      <description>Apache Commons Compress software defines an API for working with
compression and archive formats.  These include: bzip2, gzip, pack200,
lzma, xz, Snappy, traditional Unix Compress, DEFLATE, DEFLATE64, LZ4,
Brotli, Zstandard and ar, cpio, jar, tar, zip, dump, 7z, arj.</description>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.commons/commons-compress@1.23.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://www.apache.org/</url></reference><reference type="build-system"><url>https://github.com/apache/commons-parent/actions</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/COMPRESS</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=commons-compress.git</url></reference></externalReferences>
    </component>
  </metadata>
  <components>
    <component type="library" bom-ref="pkg:maven/com.github.luben/zstd-jni@1.5.4-2?type=jar">
      <publisher>com.github.luben</publisher>
      <group>com.github.luben</group>
      <name>zstd-jni</name>
      <version>1.5.4-2</version>
      <description>JNI bindings for Zstd native library that provides fast and high compression lossless algorithm for Java and all JVM languages.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">889255a1eaac0b68961729cde3687ed4</hash>
        <hash alg="SHA-1">a4f8af58b52af2a3b6ff93c824ac1f7a58cb0b7a</hash>
        <hash alg="SHA-256">d697a4c06cc06b507123a113a3eb4d2b83e69e531c3ee40f3e2658785992fd1f</hash>
        <hash alg="SHA-512">a5b99695b50ea2b151e984eece6a23dd6f790b088a3cbc8e0bebee2f001182b032f8f0b9d44755a984c88a222fd09180db7e044160d253891f735271b9a34325</hash>
        <hash alg="SHA-384">0b78355abc6a5c7af9bc2e467bba97619b508687d8423b7b6ed96d7d903f6c5b778114b9cb3e9e11a2d49a865eb9fca0</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-2-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.github.luben/zstd-jni@1.5.4-2?type=jar</purl>
    </component>
    <component type="library" bom-ref="pkg:maven/org.brotli/dec@0.1.2?type=jar">
      <group>org.brotli</group>
      <name>dec</name>
      <version>0.1.2</version>
      <description>Brotli is a generic-purpose lossless compression algorithm.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">4b1cd14cf29733941cc536b27e6aedfa</hash>
        <hash alg="SHA-1">0c26a897ae0d524809eef1c786cc6183b4ddcc3b</hash>
        <hash alg="SHA-256">615c0c3efef990d77831104475fba6a1f7971388691d4bad1471ad84101f6d52</hash>
        <hash alg="SHA-512">d4cd2b33f7c358012ff01db6a13ebfe1e8051a580698bffcd942c47451012cf53ce49a400b1c8bf7502b01e631d79d7c6417202a145622572d79fd145ccde61a</hash>
        <hash alg="SHA-384">d6b8ad9d0ee6baf8c3a29c1dc2911eaf207352e2c7de893a0185e987e7eae87827890c1d4dbf31c46f25846fbcdc08bb</hash>
      </hashes>
      <licenses>
        <license>
          <id>MIT</id>
          <url>https://opensource.org/licenses/MIT</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.brotli/dec@0.1.2?type=jar</purl>
      <externalReferences><reference type="vcs"><url>https://github.com/google/brotli</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.tukaani/xz@1.9?type=jar">
      <group>org.tukaani</group>
      <name>xz</name>
      <version>1.9</version>
      <description>XZ data compression</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">57c2fbfeb55e307ccae52e5322082e02</hash>
        <hash alg="SHA-1">1ea4bec1a921180164852c65006d928617bd2caf</hash>
        <hash alg="SHA-256">211b306cfc44f8f96df3a0a3ddaf75ba8c5289eed77d60d72f889bb855f535e5</hash>
        <hash alg="SHA-512">a4362db234d4e83683e90f5baf90c82107450cc4404acab96e3fab14b8a3d4588a19722171d32f27d18463682a6994cad9af0b1065c954e3a77ea7bdcf586bac</hash>
        <hash alg="SHA-384">aa30349b094723369908369a18e2cb5beb5b7ca0b24b4d56c2f5725fae152220f6526466672b22bfec939e2e0622a01d</hash>
      </hashes>
      <licenses>
        <license>
          <name>Public Domain</name>
        </license>
      </licenses>
      <purl>pkg:maven/org.tukaani/xz@1.9?type=jar</purl>
      <externalReferences><reference type="vcs"><url>https://git.tukaani.org/?p=xz-java.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.ow2.asm/asm@9.4?type=jar">
      <publisher>OW2</publisher>
      <group>org.ow2.asm</group>
      <name>asm</name>
      <version>9.4</version>
      <description>ASM, a very small and fast Java bytecode manipulation framework</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">ffa64f03a23a4823d98703e6ce6ff397</hash>
        <hash alg="SHA-1">b4e0e2d2e023aa317b7cfcfc916377ea348e07d1</hash>
        <hash alg="SHA-256">39d0e2b3dc45af65a09b097945750a94a126e052e124f93468443a1d0e15f381</hash>
        <hash alg="SHA-512">41e6d8f67faa63e3993692d6606cbc68ec43d140e0232c5aee2ef7dbeea289ad5711ce04407c771e8baef844ead5f838d8b248e20a06e3fd5c41c52d3340a459</hash>
        <hash alg="SHA-384">b4be5348020e602444066609b95162c1037e85bff5670db6a22330dbd556eecb9e9270a4ddcda17d352717c6803d7109</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
          <url>https://opensource.org/licenses/BSD-3-Clause</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.ow2.asm/asm@9.4?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.ow2.org/</url></reference><reference type="issue-tracker"><url>https://gitlab.ow2.org/asm/asm/issues</url></reference><reference type="mailing-list"><url>https://mail.ow2.org/wws/arc/asm/</url></reference><reference type="vcs"><url>https://gitlab.ow2.org/asm/asm/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.osgi/org.osgi.core@6.0.0?type=jar">
      <publisher>OSGi Alliance</publisher>
      <group>org.osgi</group>
      <name>org.osgi.core</name>
      <version>6.0.0</version>
      <description>OSGi Core Release 6, Interfaces and Classes for use in compiling bundles.</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">cae291c61fe8b7a4476d713550c7ff49</hash>
        <hash alg="SHA-1">0c49acdc9ac62cf69ee49cb6f1905b4fdb79ea5c</hash>
        <hash alg="SHA-256">1c1bb435eb34cbf1f743653da38f604d45d53fbc95979053768cd3fc293cb931</hash>
        <hash alg="SHA-512">a6d5388804982ab2cb0ba82b4291e73f006577c54e5dcb0675a2c4922594ddb0265810a4e7c748c88eba76ee350340376b7a9bd25d2de3afb954cf89117cd470</hash>
        <hash alg="SHA-384">8daff91fc229b2874c1ff7a214fdee65b1824fbac76eb7feec609c5b70ab2fd24fc5cf017b339788a5c7aec041ec1a1c</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.osgi/org.osgi.core@6.0.0?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.osgi.org</url></reference></externalReferences>
    </component>
  </components>
  <dependencies>
    <dependency ref="pkg:maven/org.apache.commons/commons-compress@1.23.0?type=jar">
      <dependency ref="pkg:maven/com.github.luben/zstd-jni@1.5.4-2?type=jar"/>
      <dependency ref="pkg:maven/org.brotli/dec@0.1.2?type=jar"/>
      <dependency ref="pkg:maven/org.tukaani/xz@1.9?type=jar"/>
      <dependency ref="pkg:maven/org.ow2.asm/asm@9.4?type=jar"/>
      <dependency ref="pkg:maven/org.osgi/org.osgi.core@6.0.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.github.luben/zstd-jni@1.5.4-2?type=jar"/>
    <dependency ref="pkg:maven/org.brotli/dec@0.1.2?type=jar"/>
    <dependency ref="pkg:maven/org.tukaani/xz@1.9?type=jar"/>
    <dependency ref="pkg:maven/org.ow2.asm/asm@9.4?type=jar"/>
    <dependency ref="pkg:maven/org.osgi/org.osgi.core@6.0.0?type=jar"/>
  </dependencies>
</bom>
