{
  "bomFormat" : "CycloneDX",
  "specVersion" : "1.4",
  "version" : 1,
  "metadata" : {
    "tools" : [
      {
        "vendor" : "OWASP Foundation",
        "name" : "CycloneDX Maven plugin",
        "version" : "2.7.10",
        "hashes" : [
          {
            "alg" : "MD5",
            "content" : "1cc7f6a0382f8bb2f758d6a6ea401d1b"
          },
          {
            "alg" : "SHA-1",
            "content" : "a4297947a1f2d7d453105db542651614bbd37f38"
          },
          {
            "alg" : "SHA-256",
            "content" : "bd0fdd8f2f2116eee5e715aeac1580f19eb7a10ec2b6f805b53567067658e872"
          },
          {
            "alg" : "SHA-512",
            "content" : "9cde8352a427e10b96cae01348fc7cfe5d4aa9cd0a5e5dd93b414ce3bb7d112993c3b3004e53af52567fbfa16de0704ec59a5556a635ad70571fd124ae389f39"
          },
          {
            "alg" : "SHA-384",
            "content" : "93d7bf5b5c735347edfbfbd66810273ca840f9a322b816d22d44c3d8e8255c09e86570bb23712aeb0cade0f478be5aeb"
          }
        ]
      }
    ],
    "component" : {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven.scm",
      "name" : "maven-scm-api",
      "version" : "2.1.0",
      "description" : "The SCM API provides mechanisms to manage all SCM tools.",
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven.scm/maven-scm-api@2.1.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/scm/maven-scm-api/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-scm/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/SCM"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/maven-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven-scm/tree/maven-scm-2.1.0/maven-scm-api"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven.scm/maven-scm-api@2.1.0?type=jar"
    },
    "properties" : [
      {
        "name" : "maven.goal",
        "value" : "makeBom"
      },
      {
        "name" : "maven.scopes",
        "value" : "compile,provided,runtime,system"
      },
      {
        "name" : "cdx:reproducible",
        "value" : "enabled"
      }
    ]
  },
  "components" : [
    {
      "publisher" : "QOS.ch",
      "group" : "org.slf4j",
      "name" : "slf4j-api",
      "version" : "1.7.36",
      "description" : "The slf4j API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "872da51f5de7f3923da4de871d57fd85"
        },
        {
          "alg" : "SHA-1",
          "content" : "6c62681a2f655b49963a5983b8b0950a6120ae14"
        },
        {
          "alg" : "SHA-256",
          "content" : "d3ef575e3e4979678dc01bf1dcce51021493b4d11fb7f1be8ad982877c16a1c0"
        },
        {
          "alg" : "SHA-512",
          "content" : "f9b033fc019a44f98b16048da7e2b59edd4a6a527ba60e358f65ab88e0afae03a9340f1b3e8a543d49fa542290f499c5594259affa1ff3e6e7bf3b428d4c610b"
        },
        {
          "alg" : "SHA-384",
          "content" : "2b14ad035877087157e379d3277dcdcd79e58d6bdb147c47d29e377d75ce53ad42cafbf22f5fb7827c7e946ff4876b9a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.slf4j.org"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/qos-ch/slf4j/slf4j-api"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
    },
    {
      "publisher" : "Codehaus Plexus",
      "group" : "org.codehaus.plexus",
      "name" : "plexus-utils",
      "version" : "4.0.0",
      "description" : "A collection of various utility classes to ease working with strings, files, command lines and more.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "16481d9d3af602d73a6355e79d2de889"
        },
        {
          "alg" : "SHA-1",
          "content" : "ff00a04ba971655ed10e9fb93bce0ed3014e9477"
        },
        {
          "alg" : "SHA-256",
          "content" : "270cd703b48c6e5c8c691f1875f22d62d22cfe072c73ae2f5814d83d68c1da0b"
        },
        {
          "alg" : "SHA-512",
          "content" : "1c4dde3e36c37c4b3b3860b54848fc5fbb80f536d2efe095a06629aa782044aeb693adeda3106ac8c773069e766f3def616990c0444597d20c0bc9f1d7348bd1"
        },
        {
          "alg" : "SHA-384",
          "content" : "5f855b2f6b40c05d9ed6b7b7a0c79d808c69f0fae0bb5d2ce5840c74775831a7def6f5309c484988e73474e255823b20"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.codehaus.plexus/plexus-utils@4.0.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://codehaus-plexus.github.io/plexus-pom/plexus-utils/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://github.com/codehaus-plexus/plexus-utils/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://groups.google.com/forum/#!forum/mojohaus-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/codehaus-plexus/plexus-utils/tree/master/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.codehaus.plexus/plexus-utils@4.0.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-lang3",
      "version" : "3.14.0",
      "description" : "Apache Commons Lang, a package of Java utility classes for the classes that are in java.lang's hierarchy, or are considered to be so standard as to justify existence in java.lang.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "4e5c3f5e6b0b965ef241d7d72ac8971f"
        },
        {
          "alg" : "SHA-1",
          "content" : "1ed471194b02f2c6cb734a0cd6f6f107c673afae"
        },
        {
          "alg" : "SHA-256",
          "content" : "7b96bf3ee68949abb5bc465559ac270e0551596fa34523fddf890ec418dde13c"
        },
        {
          "alg" : "SHA-512",
          "content" : "0338b50767166e5746ada6d6aa2e071e7221d699323bfb629f7f204b294c1dc4cad140610a129ed751798443b43e74e0818989c7df7d33c5915aa29742be9ba8"
        },
        {
          "alg" : "SHA-384",
          "content" : "908d0a22dc17aaa04caa5104cff7cad5b88b77eecb78dd5b3b3fefa22ff71ac50a4fb9e31c897ac243f9d841e4b3453d"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-lang/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-parent/actions"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/LANG"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-lang.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar"
    }
  ],
  "dependencies" : [
    {
      "ref" : "pkg:maven/org.apache.maven.scm/maven-scm-api@2.1.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-utils@4.0.0?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.codehaus.plexus/plexus-utils@4.0.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar",
      "dependsOn" : [ ]
    }
  ]
}