2023-12-12T11:17:51Z OWASP Foundation CycloneDX Maven plugin makeBom compile+provided+runtime+system 2.7.6 639c35c7f79c5514f3abe11247999b70 649239e622d8d454bb9ab6fafd6746c85cd11b7d 1e3bc10146c370fe8b8f0a2edcb64329907d61dbc2f445db6ac1034cd3221ce3 894a4b5762d32c88cc58ae1a35a3cc3d45a3c494accadb31b55b5832af65f60c0f8164623521a81de73e3ed6a4c994cca0f1951c8368b9d07fb41c82eaa84bbd 3c385acc773a41056fb58ea27096c8ec86d46d8bd74a2eee9cf0913051981611afc68cf13a88d31af16590a489a97c0e The Apache Software Foundation org.apache.arrow arrow-performance 14.0.2 JMH Performance benchmarks for other Arrow libraries. Apache-2.0 pkg:maven/org.apache.arrow/arrow-performance@14.0.2?type=jar https://arrow.apache.org/arrow-performance/https://repository.apache.org/service/local/staging/deploy/maven2https://issues.apache.org/jira/browse/arrowhttps://mail-archives.apache.org/mod_mbox/arrow-dev/https://github.com/apache/arrow/arrow-performance Oracle org.openjdk.jmh jmh-core 1.21 The jmh is a Java harness for building, running, and analysing nano/micro/macro benchmarks written in Java and other languages targeting the JVM. required 87fe00275cdaa76a31f73906fc8ee9d7 442447101f63074c61063858033fbfde8a076873 79aecd73ffb5d95d88b1ac36b505fa30ae3e83788e936838e2be9a51074fd2dd 81bca9388bdd0612fa65ca85ccaec5ba01738d7e45e76ea90f64dfb89539ad4dbfca064189dcc05a43f0f3f1bd0b6124676968a953ff7989b06232ff8d00574b 7c3c83cdd4163ac3fc0a8fc6b952e9c03d16cf0ff5503a14e102f72824a29d6dfa6616e9ab34ea09a48a864f43c2b921 GNU General Public License (GPL), version 2, with the Classpath exception http://openjdk.java.net/legal/gplv2+ce.html pkg:maven/org.openjdk.jmh/jmh-core@1.21?type=jar http://openjdk.java.net/projects/code-tools/jmh/jmh-core/http://hg.openjdk.java.net/code-tools/jmh/jmh-core/ net.sf.jopt-simple jopt-simple 4.6 A Java library for parsing command line options 13560a58a79b46b82057686543e8d727 306816fb57cf94f108a43c95731b08934dcae15c 3fcfbe3203c2ea521bf7640484fd35d6303186ea2e08e72f032d640ca067ffda 18bf59191d7a456e7675c841df8411ebe425da40532e103db95483be5d2a75510d8a38ad9755cdd4e0be27afe7cfd0b358599388a84fcec1ee27e89caa37f5af 501ae288afa2a2cafe2b01e8927d7a31b887c891dc1fb37eafbf525c675161b7af14dba1359db686a104881c3944736e MIT pkg:maven/net.sf.jopt-simple/jopt-simple@4.6?type=jar http://pholser.github.com/jopt-simplehttps://oss.sonatype.org/service/local/staging/deploy/maven2/http://github.com/pholser/jopt-simple/issueshttp://github.com/pholser/jopt-simple The Apache Software Foundation org.apache.commons commons-math3 3.2 The Math project is a library of lightweight, self-contained mathematics and statistics components addressing the most common practical problems not immediately available in the Java programming language or commons-lang. aaa32530c0f744813570ff73db018698 ec2544ab27e110d2d431bdad7d538ed509b21e62 6268a9a0ea3e769fc493a21446664c0ef668e48c93d126791f6f3f757978fee2 80fb66a51688c4247b957f9787921e5acb9144d71a4ab0b03b2c30f46427e50c53e6e31ca5ddb04dab2cf5e7c0eedae168103c719f8074be464918ab2e4d6e6d 3aea6a3c2bb79e64b96086bc6b7679780594ea1731f24ae7541e294595275150a12bd63bd4dfb3ddff29e1b672f68664 Apache-2.0 pkg:maven/org.apache.commons/commons-math3@3.2?type=jar http://commons.apache.org/proper/commons-math/http://vmbuild.apache.org/continuum/https://repository.apache.org/service/local/staging/deploy/maven2http://issues.apache.org/jira/browse/MATHhttp://mail-archives.apache.org/mod_mbox/commons-user/http://svn.apache.org/viewvc/commons/proper/math/trunk org.openjdk.jmh jmh-generator-annprocess 1.21 JMH benchmark generator, based on annotation processors. optional 7293df37926cee46f93c5b7e6db94817 7aac374614a8a76cad16b91f1a4419d31a7dcda3 c5636ecbc617732f5acf41f94521cf6ae4f5bc6ad3512e82416fbbaabe805fe5 352deb5304ad54d8089485ce066e409c689012a0dee5af4fd8511402cd35624dd4cabd507b876115304c0c9824b837e96028500e279ba164480e1195a757b45c 0ea482b5d6a6ff4308b92586744c3c6de163fdb27b79c6aea85611365c60676c96f3261db67cbab5fa2ec68537d5f8dc GNU General Public License (GPL), version 2, with the Classpath exception http://openjdk.java.net/legal/gplv2+ce.html pkg:maven/org.openjdk.jmh/jmh-generator-annprocess@1.21?type=jar http://openjdk.java.net/projects/code-tools/jmh/jmh-generator-annprocess/http://hg.openjdk.java.net/code-tools/jmh/jmh-generator-annprocess/ The Apache Software Foundation org.apache.arrow arrow-vector 14.0.2 An off-heap reference implementation for Arrow columnar data format. optional ae35c96a4014c5c5ac94e7fa3cee4ce0 9a9731ae228547b05e01a8e004334dccc3250990 04d4791215aa26bdd1c2057c8749148ba8e5992ad907dc99d2c51fbcb7b41aa8 bed481a1ab1664a4c0b27a80033d15663f108612d34030ac56d805a888cc8058505dd25e545a2542fc231b886af8bca7a7479a050580a94986bcaa5e05e1af3a d1b4310898cbc9497e20176eaaa9562557808e04252faa25a4afee5dfe165be9ab9976b99e3fecc7461c8033091fd7d2 Apache-2.0 pkg:maven/org.apache.arrow/arrow-vector@14.0.2?type=jar https://arrow.apache.org/arrow-vector/https://repository.apache.org/service/local/staging/deploy/maven2https://issues.apache.org/jira/browse/arrowhttps://mail-archives.apache.org/mod_mbox/arrow-dev/https://github.com/apache/arrow/arrow-vector The Apache Software Foundation org.apache.arrow arrow-format 14.0.2 Generated Java files from the IPC Flatbuffer definitions. e2e7c5e7bd1f567c8fe1cb7826461e68 f394d3ff30158198cd08a74deaff23b1406d790b 486f6845d46f35a0aa048fbe4fc6017ddc03c35355d1af2a37bbbadba168485f c7782682c205215921ca8bda38e81b7ed3117da60b18bc0a6440e4ea7340227e4178676a7854cb4503d547c9edbe91ea50c3dce1da097c1339931d432f7b4875 dbe2ee8442bf2c9c82e0d7f5b15dc23208379229b7f74e7931bd2b8124520a540084f7a2f5c1cf0dd0552efa45877e09 Apache-2.0 pkg:maven/org.apache.arrow/arrow-format@14.0.2?type=jar https://arrow.apache.org/arrow-format/https://repository.apache.org/service/local/staging/deploy/maven2https://issues.apache.org/jira/browse/arrowhttps://mail-archives.apache.org/mod_mbox/arrow-dev/https://github.com/apache/arrow/arrow-format FasterXML com.fasterxml.jackson.core jackson-core 2.15.1 Core Jackson processing abstractions (aka Streaming API), implementation for JSON 48a8701b4f142e2fe3b8cae07a2af4d2 241c054ba8503de092a12acad9f083dd39935cc0 9d984319cc976e85c49f40da928021acd2d773e259a9ff9f832edcdac6920eed 41e4550fccddf526d60dc17a639b20db1c33a004a67aeba2f515db0793e093713f661178d314c02236c56869977041af055e914b01ea32f5c6313ced77d95481 63694416d7eb55252683bbcf25d26669d93d271fbcfc57b55ad925fc229bccd873a596f3063e95b56de4491d38acb03b Apache-2.0 pkg:maven/com.fasterxml.jackson.core/jackson-core@2.15.1?type=jar https://github.com/FasterXML/jackson-corehttps://oss.sonatype.org/service/local/staging/deploy/maven2/https://github.com/FasterXML/jackson-core/issueshttps://github.com/FasterXML/jackson-core FasterXML com.fasterxml.jackson.core jackson-annotations 2.15.1 Core annotations used for value types, used by Jackson data binding package. 69f90fc4e99a8d901be8cd872caebb72 092a90d3739e970e03b5971839e4fe51f13c1fa3 344c1b343d9819d5dd4395f2507977b91bb2463778cf2ef7b0d01724ec8ffab2 d1164f3cf2a2bc6f6ab0904094216832760865ac6935d1f3e493c53d781cf4315e340a9c498bb798af323ce75820f03f984ce61b7e4d6fa8dd20925d52aa465a 56c5a2e2da28152dde74d13b42cf13586f9e959d0069a1ab0be8902793847236bddccd1f5bc5bb9f2f6fd5ed633286b3 Apache-2.0 pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.15.1?type=jar https://github.com/FasterXML/jacksonhttps://oss.sonatype.org/service/local/staging/deploy/maven2/https://github.com/FasterXML/jackson-annotations/issueshttps://github.com/FasterXML/jackson-annotations FasterXML com.fasterxml.jackson.core jackson-databind 2.15.1 General data-binding functionality for Jackson: works on core streaming API 02f4071cd666983bef73a25b9a1ad2d8 ac9ba74d208faf356e4719a49e59c6ea9237c01d c1f0347ce2696c94f531d095cd9ef22e648ec090e9b1c3dee17938b07a1df176 0a6750ced73427dd1a618501e8b0b08ab0799ea878e2317ecce3cd0dbf844d472e06fe5914d70ce34d54553e894f97fd09e6ce040cb9aef4b4b1a8d1e9198755 923a118ac4cb4b8bd155544fe7edc99d062962eae2414cb3e6d399f66fb7a9c3098357e869bfc827ef1a432876687310 Apache-2.0 pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.15.1?type=jar https://github.com/FasterXML/jacksonhttps://oss.sonatype.org/service/local/staging/deploy/maven2/https://github.com/FasterXML/jackson-databind/issueshttps://github.com/FasterXML/jackson-databind FasterXML com.fasterxml.jackson.datatype jackson-datatype-jsr310 2.15.1 Add-on module to support JSR-310 (Java 8 Date & Time API) data types. 28de9301402db9aaa88d3437d6c9e41b 21300ba63a6408bbd3505af4287d1b9a911a9718 54b17558e5e7b6219403e79c8544fc7a8013c46609cb7e354d2d3c1f999eb99f a2054b5c594135e736f549e030e929b808c9c2f1e8b624c170cbd4f76d825ddde7fbd793b28d40c453294577851283e553273537dc48464633cf2cb93c67de2b ca59533ba67c4405878524724aa61a0572d1206ba6e883f91d503a3d91cfca6ed60646df44ec7038dac92bd75502b149 Apache-2.0 pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310@2.15.1?type=jar https://github.com/FasterXML/jackson-modules-java8/jackson-datatype-jsr310https://oss.sonatype.org/service/local/staging/deploy/maven2/https://github.com/FasterXML/jackson-modules-java8/issueshttp://github.com/FasterXML/jackson-modules-java8/jackson-datatype-jsr310 The Apache Software Foundation commons-codec commons-codec 1.15 The Apache Commons Codec package contains simple encoder and decoders for various formats such as Base64 and Hexadecimal. In addition to these widely used encoders and decoders, the codec package also maintains a collection of phonetic encoding utilities. 303baf002ce6d382198090aedd9d79a2 49d94806b6e3dc933dacbd8acb0fdbab8ebd1e5d b3e9f6d63a790109bf0d056611fbed1cf69055826defeb9894a71369d246ed63 da30a716770795fce390e4dd340a8b728f220c6572383ffef55bd5839655d5611fcc06128b2144f6cdcb36f53072a12ec80b04afee787665e7ad0b6e888a6787 05d0506283716472175d44c2a4766523397bf8a007c18848f9c9a61718cc8aa437f9cb4b91771037ab29a960860b62a0 Apache-2.0 pkg:maven/commons-codec/commons-codec@1.15?type=jar https://commons.apache.org/proper/commons-codec/https://builds.apache.org/https://repository.apache.org/service/local/staging/deploy/maven2https://issues.apache.org/jira/browse/CODEChttps://mail-archives.apache.org/mod_mbox/commons-user/https://github.com/apache/commons-codec The Netty Project io.netty netty-common 4.1.96.Final Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients. f4160d8db7ea478573d81d9ed0d7b131 d10c167623cbc471753f950846df241d1021655c da104e80db830922eaf860eb1c5e957cd1d124068253d02e9c7a7843bc66427a 88cd84d3bb7e285d572b63dfefd6f41ac99e226317b13e28d15e99f62532ee03f3782e282513dd66fb4fa85a1f1007c4e3a08dbdf6af3701d39c9ee8b6d47854 149eadec0b9d14d5ba0f6c07a44ff3a4dcf099357ca14f45d5570b4bf2d5f0ef77ac500b49b5a9fad38229a4ba54563a Apache-2.0 pkg:maven/io.netty/netty-common@4.1.96.Final?type=jar https://netty.io/netty-common/https://oss.sonatype.org/service/local/staging/deploy/maven2/https://github.com/netty/netty/netty-common com.google.flatbuffers flatbuffers-java 1.12.0 Memory Efficient Serialization Library 26ecc1a330e441f909226a338d4bef65 8201cc7b511177a37071249e891f2f2fea4b32e9 3f8c088b4dd04a9858721f2e162508c94db0dd86f961e306ee63ef2eda871bf7 20750e91441c074ca28f72b0b6494e8f0bfbc94caff04eb49727efc6b28e453c84732f24acc52cf36b36ba66b57a145d003e87f749c5c4518ddc6f9247b8ab47 7af7d2e03ae71bea1ebac6cc9c2926b9f952c48a124db160ee2327f2f7e6b2e3ba153e5924971788392fc278b0e04ee9 Apache-2.0 pkg:maven/com.google.flatbuffers/flatbuffers-java@1.12.0?type=jar https://github.com/google/flatbuffershttps://github.com/google/flatbuffers QOS.ch org.slf4j slf4j-api 1.7.25 The slf4j API caafe376afb7086dcbee79f780394ca3 da76ca59f6a57ee3102f8f9bd9cee742973efa8a 18c4a0095d5c1da6b817592e767bb23d29dd2f560ad74df75ff3961dbde25b79 5dd6271fd5b34579d8e66271bab75c89baca8b2ebeaa9966de391284bd08f2d720083c6e0e1edda106ecf8a04e9a32116de6873f0f88c19c049c0fe27e5d820b f2791380e87fccb18519efd016c03be11206984f4765586d348e57e2f33756b21ed51a95fa09679e1473a5bf5d2d76e1 MIT https://opensource.org/licenses/MIT pkg:maven/org.slf4j/slf4j-api@1.7.25?type=jar http://www.slf4j.orghttps://oss.sonatype.org/service/local/staging/deploy/maven2/https://github.com/qos-ch/slf4j/slf4j-api The Apache Software Foundation org.apache.arrow arrow-memory-core 14.0.2 Core off-heap memory management libraries for Arrow ValueVectors. required 007a070794889f5ef0ef0f3d9765d924 0e04a21e37866f1fc9b8fde60b9abe659700dd85 802d9761e077ff2b0c58e008dec1b90b1b6ac4350534659ac2c2f6ebf56ee1eb 2ec4cc5eddc6c4f69e3aa0a203d725da9206993a449f923c5227546702288435937c345c3d0e9ed69daf6652504cd8650955b94b2a5e7c1ee5cb9618ecda28d4 9c866f3836c1b6786ea6d088d126564575da7031c740f5b0435c1b91e40c314c2516f39c249cc89ae0205e9c339872b1 Apache-2.0 pkg:maven/org.apache.arrow/arrow-memory-core@14.0.2?type=jar https://arrow.apache.org/arrow-memory/arrow-memory-core/https://repository.apache.org/service/local/staging/deploy/maven2https://issues.apache.org/jira/browse/arrowhttps://mail-archives.apache.org/mod_mbox/arrow-dev/https://github.com/apache/arrow/arrow-memory/arrow-memory-core com.google.code.findbugs jsr305 3.0.2 JSR305 Annotations for Findbugs dd83accb899363c32b07d7a1b2e4ce40 25ea2e8b0c338a877313bd4672d3fe056ea78f0d 766ad2a0783f2687962c8ad74ceecc38a28b9f72a2d085ee438b7813e928d0c7 bb09db62919a50fa5b55906013be6ca4fc7acb2e87455fac5eaf9ede2e41ce8bbafc0e5a385a561264ea4cd71bbbd3ef5a45e02d63277a201d06a0ae1636f804 ca0b169d3eb2d0922dc031133a021f861a043bb3e405a88728215fd6ff00fa52fdc7347842dcc2031472e3726164bdc4 Apache-2.0 pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar http://findbugs.sourceforge.net/https://oss.sonatype.org/service/local/staging/deploy/maven2/https://code.google.com/p/jsr-305/ The Apache Software Foundation org.apache.arrow arrow-memory-netty 14.0.2 Netty allocator and utils for allocating memory in Arrow optional 7bf867319dedcf616bc4fc775a6c914d 8907331ce3c169a2c1284cda85195230fd872e6c 3c563bd193bcba2943eb4a1404d7cbc3e6a98b284c4bea1ad0e965a88756c977 574e58313c56741bfc5700bea902502c5e734d68a286799c3fd56582743b27a17c7e11cab99e24290585d0b82a99c5c2fd5594ed057d4e5563002e7d0ff81b02 f61511cf62e8c82954d68b9878ee7fe9b03656c80cbcc7d2e92f2413a6f9f98cea979e6082c216b873a964dc22798711 Apache-2.0 pkg:maven/org.apache.arrow/arrow-memory-netty@14.0.2?type=jar https://arrow.apache.org/arrow-memory/arrow-memory-netty/https://repository.apache.org/service/local/staging/deploy/maven2https://issues.apache.org/jira/browse/arrowhttps://mail-archives.apache.org/mod_mbox/arrow-dev/https://github.com/apache/arrow/arrow-memory/arrow-memory-netty The Netty Project io.netty netty-buffer 4.1.96.Final Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients. c3f08e639d22f2748a5660498761e92b 4b80fffbe77485b457bf844289bf1801f61b9e91 1dee6f5b4aa485339d49525ec3689463f724785fc35e7db02f9e46cbdecbe335 2f6e0d7f1a9237c596b595487ac98c92e50426a18bc78d52e6463cf9f5d6c7872a4c6e32f5e0b55499419e8bdf6f5037be1b5f0e4909b1482abc536fc6fd946f ad976a4ceb755a6d7f4eae0d2f7337048b52d4e90b53d452ac9037f55a45ddd7c25bb7e0422ec34379f715dd29008fb9 Apache-2.0 pkg:maven/io.netty/netty-buffer@4.1.96.Final?type=jar https://netty.io/netty-buffer/https://oss.sonatype.org/service/local/staging/deploy/maven2/https://github.com/netty/netty/netty-buffer The Apache Software Foundation org.apache.avro avro 1.10.0 Avro core components required c7f4eda5aa5c17c6e85e4aa5a10dddeb 430d0db9643a590a91c995d37650418afd5dc010 51f91407456e1aeab0ac70008c13cfa84b7262c4bb16656f9897e57e2b1057f3 1788729b50521361a5cf6234f5b1f167031f39bc8e7d0652786f6a1cf0466c9b88af5e9d0f9215279bf38fec843870165347b6842f6e3a75381ddb02cc349190 baef19a0dbd0c7fb0157eb4ce77079db388010ab958420eacb5c0d1e3c0c8e851bc44d2d8a183c3c2805c09725ecf74a Apache-2.0 pkg:maven/org.apache.avro/avro@1.10.0?type=jar https://avro.apache.orghttps://repository.apache.org/service/local/staging/deploy/maven2https://issues.apache.org/jira/browse/AVROhttps://mail-archives.apache.org/mod_mbox/avro-dev/scm:git:https://github.com/apache/avro/avro-parent/avro The Apache Software Foundation org.apache.commons commons-compress 1.20 Apache Commons Compress software defines an API for working with compression and archive formats. These include: bzip2, gzip, pack200, lzma, xz, Snappy, traditional Unix Compress, DEFLATE, DEFLATE64, LZ4, Brotli, Zstandard and ar, cpio, jar, tar, zip, dump, 7z, arj. 3f7237fb56029591b5bdd2698c196220 b8df472b31e1f17c232d2ad78ceb1c84e00c641b 0aeb625c948c697ea7b205156e112363b59ed5e2551212cd4e460bdb72c7c06e 5d3ce7ae4518c0fe5094b512c5c4825cc213ebc388e1e1e7692475406d5876c893140e5bbaaecb1676262a6b73c7250d40b83653cd03600815693474f92f0fa7 934fcbb21929aadb952c0c48b6d1bb89b34b0279d48546896f81b26759edba0e1cbc45dc821f55d6239c34160b507ade Apache-2.0 pkg:maven/org.apache.commons/commons-compress@1.20?type=jar https://commons.apache.org/proper/commons-compress/https://builds.apache.org/https://repository.apache.org/service/local/staging/deploy/maven2https://issues.apache.org/jira/browse/COMPRESShttps://mail-archives.apache.org/mod_mbox/commons-user/https://gitbox.apache.org/repos/asf?p=commons-compress.git The Apache Software Foundation org.apache.arrow arrow-avro 14.0.2 (Contrib/Experimental) A library for converting Avro data to Arrow data. required a8cd66d7a03700c12396b782bcf0f25d 31f1e44b7309512ee1e829e8b94a40c3ff8199a8 6ca28e34faf3bc0b1a4e9b1eee9701d2aa3bc8de44f20d3bf969f3fe935151a3 c394b1447a26aec2f38f68feca99970858d13f633afb4fc9ac9df4a6baede1226ebb44a472d6ba875d3e527992157b0ded1b847db4b7013de4584a137aaf9fd1 1ee56c9ae748585e8b149bef532e1d9a5c2a6b6588c88fff9a6b9e2aa78ecce863f87b1a99fec0b1c1a469f4c7d25c03 Apache-2.0 pkg:maven/org.apache.arrow/arrow-avro@14.0.2?type=jar http://maven.apache.orghttps://repository.apache.org/service/local/staging/deploy/maven2https://issues.apache.org/jira/browse/arrowhttps://mail-archives.apache.org/mod_mbox/arrow-dev/https://github.com/apache/arrow/adapter/arrow-avro The Apache Software Foundation org.apache.arrow arrow-jdbc 14.0.2 (Contrib/Experimental)A library for converting JDBC data to Arrow data. required 894e45c404de3af2d0fb5336aed386be f61c25c552d12418902f576f3c0ddca6c71f76c9 031c62237dc76731e1c35c9fa1229eac6996c29b308bdb2faea06ada40735389 36a555e15292fec91b1fc2271adaf261f22b91b4911c9d143b09b632dee0cb189cb334828b110d4f5ffa413d9e9f020b6cd393c59df6cc3bcc91d1cd491b26fd ccb99bb0089bd329943ddeb3d9f6302fa6475eceed666479e91198b28c89422b2e431ec9acb4c1228b59ed39c5074e9d Apache-2.0 pkg:maven/org.apache.arrow/arrow-jdbc@14.0.2?type=jar http://maven.apache.orghttps://repository.apache.org/service/local/staging/deploy/maven2https://issues.apache.org/jira/browse/arrowhttps://mail-archives.apache.org/mod_mbox/arrow-dev/https://github.com/apache/arrow/adapter/arrow-jdbc