<?xml version="1.0" encoding="UTF-8"?>
<bom serialNumber="urn:uuid:e55ae658-e09b-44a8-b09d-8a1ece7dd461" version="1" xmlns="http://cyclonedx.org/schema/bom/1.4">
  <metadata>
    <timestamp>2023-06-07T16:02:09Z</timestamp>
    <tools>
      <tool>
        <vendor>OWASP Foundation</vendor>
        <name>CycloneDX Maven plugin makeBom compile+provided+runtime+system</name>
        <version>2.7.6</version>
        <hashes>
          <hash alg="MD5">639c35c7f79c5514f3abe11247999b70</hash>
          <hash alg="SHA-1">649239e622d8d454bb9ab6fafd6746c85cd11b7d</hash>
          <hash alg="SHA-256">1e3bc10146c370fe8b8f0a2edcb64329907d61dbc2f445db6ac1034cd3221ce3</hash>
          <hash alg="SHA-512">894a4b5762d32c88cc58ae1a35a3cc3d45a3c494accadb31b55b5832af65f60c0f8164623521a81de73e3ed6a4c994cca0f1951c8368b9d07fb41c82eaa84bbd</hash>
          <hash alg="SHA-384">3c385acc773a41056fb58ea27096c8ec86d46d8bd74a2eee9cf0913051981611afc68cf13a88d31af16590a489a97c0e</hash>
        </hashes>
      </tool>
    </tools>
    <component type="library" bom-ref="pkg:maven/org.apache.arrow/arrow-tools@12.0.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.arrow</group>
      <name>arrow-tools</name>
      <version>12.0.1</version>
      <description>Java applications for working with Arrow ValueVectors.</description>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.arrow/arrow-tools@12.0.1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://arrow.apache.org/arrow-tools/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/arrow</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/arrow-dev/</url></reference><reference type="vcs"><url>https://github.com/apache/arrow/arrow-tools</url></reference></externalReferences>
    </component>
  </metadata>
  <components>
    <component type="library" bom-ref="pkg:maven/org.apache.arrow/arrow-memory-core@12.0.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.arrow</group>
      <name>arrow-memory-core</name>
      <version>12.0.1</version>
      <description>Core off-heap memory management libraries for Arrow ValueVectors.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">59bdf36bbacafe58ce7a139d1f4daae4</hash>
        <hash alg="SHA-1">cd7f41f4ebbb7cdab55b7a3b935ab5bcb2108b8d</hash>
        <hash alg="SHA-256">25e23b9762ddce71fb9876a1794056a7dfc64f453c608763160fcc1852c62c3f</hash>
        <hash alg="SHA-512">14e3b7abcd24fa21fb478f290ffb5460c042d5d23392ac0e0fcad917c15b5fa92b686cc68e6a8f3faf308058b8dd9e873aeaef3530e4fc6d36756f31a84435de</hash>
        <hash alg="SHA-384">173d748c8d147e002412f843f0868e2992fb9d17a4d6c91dc3e4c515352e4b9f661c696d1f159dbbc6d35df259e3b9b6</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.arrow/arrow-memory-core@12.0.1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://arrow.apache.org/arrow-memory/arrow-memory-core/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/arrow</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/arrow-dev/</url></reference><reference type="vcs"><url>https://github.com/apache/arrow/arrow-memory/arrow-memory-core</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar">
      <group>com.google.code.findbugs</group>
      <name>jsr305</name>
      <version>3.0.2</version>
      <description>JSR305 Annotations for Findbugs</description>
      <hashes>
        <hash alg="MD5">dd83accb899363c32b07d7a1b2e4ce40</hash>
        <hash alg="SHA-1">25ea2e8b0c338a877313bd4672d3fe056ea78f0d</hash>
        <hash alg="SHA-256">766ad2a0783f2687962c8ad74ceecc38a28b9f72a2d085ee438b7813e928d0c7</hash>
        <hash alg="SHA-512">bb09db62919a50fa5b55906013be6ca4fc7acb2e87455fac5eaf9ede2e41ce8bbafc0e5a385a561264ea4cd71bbbd3ef5a45e02d63277a201d06a0ae1636f804</hash>
        <hash alg="SHA-384">ca0b169d3eb2d0922dc031133a021f861a043bb3e405a88728215fd6ff00fa52fdc7347842dcc2031472e3726164bdc4</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar</purl>
      <externalReferences><reference type="website"><url>http://findbugs.sourceforge.net/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://code.google.com/p/jsr-305/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.arrow/arrow-vector@12.0.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.arrow</group>
      <name>arrow-vector</name>
      <version>12.0.1</version>
      <description>An off-heap reference implementation for Arrow columnar data format.</description>
      <hashes>
        <hash alg="MD5">73bd1ca4d69182476d391e14260135c3</hash>
        <hash alg="SHA-1">809a112926070f912f12c151d5ab1fa810612ca5</hash>
        <hash alg="SHA-256">0ca927fb749772077d488a901ec977ff9428a6836a053b12b470adf822b1fd72</hash>
        <hash alg="SHA-512">51c4c13e1f642b6e07e6a0b93bf6fd953efd37dc235b9ce371fbd94c374cb3a42671e0fd1858c1cb3a7e8af4cb7acf22cac8ad1e051037fc3aa707ed7239bc1d</hash>
        <hash alg="SHA-384">d3478c448f20c6b2fc8985981a636dfc08bd92ca52b763875a71840b80ecb0c4088072f537b3b91dc14a8783a05c6744</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.arrow/arrow-vector@12.0.1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://arrow.apache.org/arrow-vector/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/arrow</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/arrow-dev/</url></reference><reference type="vcs"><url>https://github.com/apache/arrow/arrow-vector</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.arrow/arrow-format@12.0.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.arrow</group>
      <name>arrow-format</name>
      <version>12.0.1</version>
      <description>Generated Java files from the IPC Flatbuffer definitions.</description>
      <hashes>
        <hash alg="MD5">d5f60e3a86c42f002c7b87baa8f26068</hash>
        <hash alg="SHA-1">b2dbacdcafb42e4fd7432468010d5d4d82380778</hash>
        <hash alg="SHA-256">ff08f69204e0a26b409a1c501197ba956f2fe044e53f1f4889025ec7622d7787</hash>
        <hash alg="SHA-512">e6b5d1318672142a2969c9921009ddb18ceec47c409bd206a0d3bff2dbb8ae06d763ce6244422b1b5dc0b658f5cdcd440d72197de1b9f1071da1485a59e560b9</hash>
        <hash alg="SHA-384">5a7ea6a9cb966e359d5d9319eff5be2c3b52b4871ae6466319f8eecb70e80697ba5396ebc0d3b15a96d2aa3ec3701d6e</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.arrow/arrow-format@12.0.1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://arrow.apache.org/arrow-format/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/arrow</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/arrow-dev/</url></reference><reference type="vcs"><url>https://github.com/apache/arrow/arrow-format</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.15.1?type=jar">
      <publisher>FasterXML</publisher>
      <group>com.fasterxml.jackson.core</group>
      <name>jackson-annotations</name>
      <version>2.15.1</version>
      <description>Core annotations used for value types, used by Jackson data binding package.</description>
      <hashes>
        <hash alg="MD5">69f90fc4e99a8d901be8cd872caebb72</hash>
        <hash alg="SHA-1">092a90d3739e970e03b5971839e4fe51f13c1fa3</hash>
        <hash alg="SHA-256">344c1b343d9819d5dd4395f2507977b91bb2463778cf2ef7b0d01724ec8ffab2</hash>
        <hash alg="SHA-512">d1164f3cf2a2bc6f6ab0904094216832760865ac6935d1f3e493c53d781cf4315e340a9c498bb798af323ce75820f03f984ce61b7e4d6fa8dd20925d52aa465a</hash>
        <hash alg="SHA-384">56c5a2e2da28152dde74d13b42cf13586f9e959d0069a1ab0be8902793847236bddccd1f5bc5bb9f2f6fd5ed633286b3</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.15.1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/FasterXML/jackson</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/FasterXML/jackson-annotations/issues</url></reference><reference type="vcs"><url>https://github.com/FasterXML/jackson-annotations</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310@2.15.1?type=jar">
      <publisher>FasterXML</publisher>
      <group>com.fasterxml.jackson.datatype</group>
      <name>jackson-datatype-jsr310</name>
      <version>2.15.1</version>
      <description>Add-on module to support JSR-310 (Java 8 Date &amp; Time API) data types.</description>
      <hashes>
        <hash alg="MD5">28de9301402db9aaa88d3437d6c9e41b</hash>
        <hash alg="SHA-1">21300ba63a6408bbd3505af4287d1b9a911a9718</hash>
        <hash alg="SHA-256">54b17558e5e7b6219403e79c8544fc7a8013c46609cb7e354d2d3c1f999eb99f</hash>
        <hash alg="SHA-512">a2054b5c594135e736f549e030e929b808c9c2f1e8b624c170cbd4f76d825ddde7fbd793b28d40c453294577851283e553273537dc48464633cf2cb93c67de2b</hash>
        <hash alg="SHA-384">ca59533ba67c4405878524724aa61a0572d1206ba6e883f91d503a3d91cfca6ed60646df44ec7038dac92bd75502b149</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310@2.15.1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/FasterXML/jackson-modules-java8/jackson-datatype-jsr310</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/FasterXML/jackson-modules-java8/issues</url></reference><reference type="vcs"><url>http://github.com/FasterXML/jackson-modules-java8/jackson-datatype-jsr310</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-codec/commons-codec@1.15?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>commons-codec</group>
      <name>commons-codec</name>
      <version>1.15</version>
      <description>The Apache Commons Codec package contains simple encoder and decoders for
     various formats such as Base64 and Hexadecimal.  In addition to these
     widely used encoders and decoders, the codec package also maintains a
     collection of phonetic encoding utilities.</description>
      <hashes>
        <hash alg="MD5">303baf002ce6d382198090aedd9d79a2</hash>
        <hash alg="SHA-1">49d94806b6e3dc933dacbd8acb0fdbab8ebd1e5d</hash>
        <hash alg="SHA-256">b3e9f6d63a790109bf0d056611fbed1cf69055826defeb9894a71369d246ed63</hash>
        <hash alg="SHA-512">da30a716770795fce390e4dd340a8b728f220c6572383ffef55bd5839655d5611fcc06128b2144f6cdcb36f53072a12ec80b04afee787665e7ad0b6e888a6787</hash>
        <hash alg="SHA-384">05d0506283716472175d44c2a4766523397bf8a007c18848f9c9a61718cc8aa437f9cb4b91771037ab29a960860b62a0</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/commons-codec/commons-codec@1.15?type=jar</purl>
      <externalReferences><reference type="website"><url>https://commons.apache.org/proper/commons-codec/</url></reference><reference type="build-system"><url>https://builds.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/CODEC</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>https://github.com/apache/commons-codec</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.netty/netty-common@4.1.82.Final?type=jar">
      <publisher>The Netty Project</publisher>
      <group>io.netty</group>
      <name>netty-common</name>
      <version>4.1.82.Final</version>
      <description>Netty is an asynchronous event-driven network application framework for
    rapid development of maintainable high performance protocol servers and
    clients.</description>
      <hashes>
        <hash alg="MD5">7ae14b5005c3cac74a82977245e957c3</hash>
        <hash alg="SHA-1">022d148e85c3f5ebdacc0ce1f5aabb1d420f73f3</hash>
        <hash alg="SHA-256">d5923db1cc68b26baf5368f1f76ec2c6100d12db8406c6de00eb6dbc08052550</hash>
        <hash alg="SHA-512">dd3bf3d7481b9047cef0b11eb38be925623d2322ebfdd5bb74e5d69818301280d65848fd78d114f9f9f49bd9ea765f5ff840eab11ec9d6885699838f1017429d</hash>
        <hash alg="SHA-384">0c6b173a398edbd29a777e4a2dbaac46c67fae2af86a4261cee737adbf8dac9edcd8408b5568ccb9216ce742b1e1ad80</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.netty/netty-common@4.1.82.Final?type=jar</purl>
      <externalReferences><reference type="website"><url>https://netty.io/netty-common/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/netty/netty/netty-common</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.flatbuffers/flatbuffers-java@1.12.0?type=jar">
      <group>com.google.flatbuffers</group>
      <name>flatbuffers-java</name>
      <version>1.12.0</version>
      <description>Memory Efficient Serialization Library</description>
      <hashes>
        <hash alg="MD5">26ecc1a330e441f909226a338d4bef65</hash>
        <hash alg="SHA-1">8201cc7b511177a37071249e891f2f2fea4b32e9</hash>
        <hash alg="SHA-256">3f8c088b4dd04a9858721f2e162508c94db0dd86f961e306ee63ef2eda871bf7</hash>
        <hash alg="SHA-512">20750e91441c074ca28f72b0b6494e8f0bfbc94caff04eb49727efc6b28e453c84732f24acc52cf36b36ba66b57a145d003e87f749c5c4518ddc6f9247b8ab47</hash>
        <hash alg="SHA-384">7af7d2e03ae71bea1ebac6cc9c2926b9f952c48a124db160ee2327f2f7e6b2e3ba153e5924971788392fc278b0e04ee9</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.flatbuffers/flatbuffers-java@1.12.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/google/flatbuffers</url></reference><reference type="vcs"><url>https://github.com/google/flatbuffers</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.arrow/arrow-compression@12.0.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.arrow</group>
      <name>arrow-compression</name>
      <version>12.0.1</version>
      <description>(Experimental/Contrib) A library for working with the compression/decompression of Arrow data.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">d48b7431e5ec9d3fd636a3a6cd98a490</hash>
        <hash alg="SHA-1">c50770713ce1571259e04d08b9055b1cbebd0c86</hash>
        <hash alg="SHA-256">60e6434417851a225d4a54e1099b90fe4b551fea29939463d4f09e26c39932f8</hash>
        <hash alg="SHA-512">03c59bab71d23c808a8b1e409d727bb05fb58624b98c54b2a24964d4b1a454179142da09b20e91eb275fa7a12f41a4b8f19af6ebdd01aff2404c9f7af60ed329</hash>
        <hash alg="SHA-384">843ce7818abacbc033c09c1e96515a1138165da75887fbf540f028adc2c2d56251eedab85163fb1054868c24be99b961</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.arrow/arrow-compression@12.0.1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://arrow.apache.org/arrow-compression/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/arrow</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/arrow-dev/</url></reference><reference type="vcs"><url>https://github.com/apache/arrow/arrow-compression</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-compress@1.21?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.commons</group>
      <name>commons-compress</name>
      <version>1.21</version>
      <description>Apache Commons Compress software defines an API for working with
compression and archive formats.  These include: bzip2, gzip, pack200,
lzma, xz, Snappy, traditional Unix Compress, DEFLATE, DEFLATE64, LZ4,
Brotli, Zstandard and ar, cpio, jar, tar, zip, dump, 7z, arj.</description>
      <hashes>
        <hash alg="MD5">2a713d10331bc4e13459a3dc0463f16f</hash>
        <hash alg="SHA-1">4ec95b60d4e86b5c95a0e919cb172a0af98011ef</hash>
        <hash alg="SHA-256">6aecfd5459728a595601cfa07258d131972ffc39b492eb48bdd596577a2f244a</hash>
        <hash alg="SHA-512">c92d9a12547aab475e057955ad815fdfe92ff44c78383fa5af54b089f1bff5525126ef6aef93334f3bfc22e2fef4ad0d969f69384e978a83a55f011a53e7e471</hash>
        <hash alg="SHA-384">da56f95d420cd7278cee646f4cd0e7a5ee12b6a2894efaec12f0ff7b56c3d43e5db736fe1ed66ff91118b16f2d64ebef</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.commons/commons-compress@1.21?type=jar</purl>
      <externalReferences><reference type="website"><url>https://commons.apache.org/proper/commons-compress/</url></reference><reference type="build-system"><url>https://builds.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/COMPRESS</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=commons-compress.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.github.luben/zstd-jni@1.4.9-1?type=jar">
      <publisher>com.github.luben</publisher>
      <group>com.github.luben</group>
      <name>zstd-jni</name>
      <version>1.4.9-1</version>
      <description>JNI bindings for Zstd native library that provides fast and high compression lossless algorithm for Java and all JVM languages.</description>
      <hashes>
        <hash alg="MD5">6b7db5f26dd478fd1fc17d122f417f02</hash>
        <hash alg="SHA-1">7dc25611870925d32752c5b45d7d23ae01702f43</hash>
        <hash alg="SHA-256">16bb6f70b6577db165bda521a30349fcdc698055893833a993c4553eba71a61b</hash>
        <hash alg="SHA-512">bbcfdd43c9cbb2a0fa34fb22bca63caf99435b196d77088857be499636aa07f9b55d0663759ab27520777135798856175e541d56ed625cef5fd2218de9083a95</hash>
        <hash alg="SHA-384">2a435a5d681f0fe2ffd29131d57e1226ff9c318fb4afc17ed67085b52b83506c6f9a8c3b3a9a3d3f8a1ff4b2de92459c</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-2-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.github.luben/zstd-jni@1.4.9-1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/luben/zstd-jni</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.guava/guava@31.1-jre?type=jar">
      <group>com.google.guava</group>
      <name>guava</name>
      <version>31.1-jre</version>
      <description>Guava is a suite of core and expanded libraries that include
    utility classes, Google's collections, I/O classes, and
    much more.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">e37782d974104aa3b0a7bee9927c8042</hash>
        <hash alg="SHA-1">60458f877d055d0c9114d9e1a2efb737b4bc282c</hash>
        <hash alg="SHA-256">a42edc9cab792e39fe39bb94f3fca655ed157ff87a8af78e1d6ba5b07c4a00ab</hash>
        <hash alg="SHA-512">532664e3dd33699bdfb296e355bc58fde77edc019c10f464ae49fe2494a68fd25d1623a9c86bc72830ca9f1354226366ac6f3c09d77be952641e971386a4ebbb</hash>
        <hash alg="SHA-384">829ba1c473782158d43a0e56c932b45139f121a504613b27eacf6b0774354e52c5eccaab5c2da3753b5686b93f0169b4</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.guava/guava@31.1-jre?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/google/guava</url></reference><reference type="build-system"><url>https://github.com/google/guava/actions</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/google/guava/issues</url></reference><reference type="vcs"><url>https://github.com/google/guava/guava</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.guava/failureaccess@1.0.1?type=jar">
      <group>com.google.guava</group>
      <name>failureaccess</name>
      <version>1.0.1</version>
      <description>Contains
    com.google.common.util.concurrent.internal.InternalFutureFailureAccess and
    InternalFutures. Most users will never need to use this artifact. Its
    classes is conceptually a part of Guava, but they're in this separate
    artifact so that Android libraries can use them without pulling in all of
    Guava (just as they can use ListenableFuture by depending on the
    listenablefuture artifact).</description>
      <hashes>
        <hash alg="MD5">091883993ef5bfa91da01dcc8fc52236</hash>
        <hash alg="SHA-1">1dcf1de382a0bf95a3d8b0849546c88bac1292c9</hash>
        <hash alg="SHA-256">a171ee4c734dd2da837e4b16be9df4661afab72a41adaf31eb84dfdaf936ca26</hash>
        <hash alg="SHA-512">f8d59b808d6ba617252305b66d5590937da9b2b843d492d06b8d0b1b1f397e39f360d5817707797b979a5bf20bf21987b35333e7a15c44ed7401fea2d2119cae</hash>
        <hash alg="SHA-384">67659dbd9647ec303d7f15128dc9dba19b98fd8d74758ee3b602451e32c855e236ccaafe08edf4bbfa245f981268440f</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.guava/failureaccess@1.0.1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/google/guava/failureaccess</url></reference><reference type="build-system"><url>https://travis-ci.org/google/guava</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/google/guava/issues</url></reference><reference type="vcs"><url>https://github.com/google/guava/failureaccess</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar">
      <group>com.google.guava</group>
      <name>listenablefuture</name>
      <version>9999.0-empty-to-avoid-conflict-with-guava</version>
      <description>An empty artifact that Guava depends on to signal that it is providing
    ListenableFuture -- but is also available in a second "version" that
    contains com.google.common.util.concurrent.ListenableFuture class, without
    any other Guava classes. The idea is:

    - If users want only ListenableFuture, they depend on listenablefuture-1.0.

    - If users want all of Guava, they depend on guava, which, as of Guava
    27.0, depends on
    listenablefuture-9999.0-empty-to-avoid-conflict-with-guava. The 9999.0-...
    version number is enough for some build systems (notably, Gradle) to select
    that empty artifact over the "real" listenablefuture-1.0 -- avoiding a
    conflict with the copy of ListenableFuture in guava itself. If users are
    using an older version of Guava or a build system other than Gradle, they
    may see class conflicts. If so, they can solve them by manually excluding
    the listenablefuture artifact or manually forcing their build systems to
    use 9999.0-....</description>
      <hashes>
        <hash alg="MD5">d094c22570d65e132c19cea5d352e381</hash>
        <hash alg="SHA-1">b421526c5f297295adef1c886e5246c39d4ac629</hash>
        <hash alg="SHA-256">b372a037d4230aa57fbeffdef30fd6123f9c0c2db85d0aced00c91b974f33f99</hash>
        <hash alg="SHA-512">c5987a979174cbacae2e78b319f080420cc71bcdbcf7893745731eeb93c23ed13bff8d4599441f373f3a246023d33df03e882de3015ee932a74a774afdd0782f</hash>
        <hash alg="SHA-384">caff9b74079f95832ca7f6029346b34b606051cc8c5a4389fac263511d277ada0c55f28b0d43011055b268c6eb7184d5</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/google/guava/listenablefuture</url></reference><reference type="build-system"><url>https://travis-ci.org/google/guava</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/google/guava/issues</url></reference><reference type="vcs"><url>https://github.com/google/guava/listenablefuture</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.checkerframework/checker-qual@3.12.0?type=jar">
      <group>org.checkerframework</group>
      <name>checker-qual</name>
      <version>3.12.0</version>
      <description>checker-qual contains annotations (type qualifiers) that a programmer
writes to specify Java code for type-checking by the Checker Framework.</description>
      <hashes>
        <hash alg="MD5">ab1ae0e2f2f63601597a5a96fca8a54f</hash>
        <hash alg="SHA-1">d5692f0526415fcc6de94bb5bfbd3afd9dd3b3e5</hash>
        <hash alg="SHA-256">ff10785ac2a357ec5de9c293cb982a2cbb605c0309ea4cc1cb9b9bc6dbe7f3cb</hash>
        <hash alg="SHA-512">ff20c424e130c31c30b4f4f5b4374f8f98f94ddae2b123f3c213f147be6b3de57854ee5651b02dd97d352c1c1df2a8bfeef73d5307a71372f46a6002eab24d78</hash>
        <hash alg="SHA-384">60641d5967c60154359437cf49d8b0c14e7c1d876ab1fff4932590b19edcad0e65975299004ac896fb190f45b69ef1a1</hash>
      </hashes>
      <licenses>
        <license>
          <id>MIT</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.checkerframework/checker-qual@3.12.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://checkerframework.org</url></reference><reference type="vcs"><url>https://github.com/typetools/checker-framework.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.errorprone/error_prone_annotations@2.11.0?type=jar">
      <publisher>Google LLC</publisher>
      <group>com.google.errorprone</group>
      <name>error_prone_annotations</name>
      <version>2.11.0</version>
      <description>Error Prone is a static analysis tool for Java that catches common programming mistakes at compile-time.</description>
      <hashes>
        <hash alg="MD5">656ad66261b7e7ea472ed0ffeea773ea</hash>
        <hash alg="SHA-1">c5a0ace696d3f8b1c1d8cc036d8c03cc0cbe6b69</hash>
        <hash alg="SHA-256">721cb91842b46fa056847d104d5225c8b8e1e8b62263b993051e1e5a0137b7ec</hash>
        <hash alg="SHA-512">defcaf30b7def5071243f3982d0d81c47c05b1a95c4d6143b3af86451e97c212c8d620d7220784e541fe8ee95f7fc59452fa6392fa37dac2d5705bfaf06105ba</hash>
        <hash alg="SHA-384">92221cb62c44dc982a8e9c54b99a1c75e0e4c48cd2f03b3272badcd03ab1b8bfc8bcbbe426a8d08074edba69b09a2b79</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.errorprone/error_prone_annotations@2.11.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://errorprone.info/error_prone_annotations</url></reference><reference type="vcs"><url>https://github.com/google/error-prone/error_prone_annotations</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.j2objc/j2objc-annotations@1.3?type=jar">
      <group>com.google.j2objc</group>
      <name>j2objc-annotations</name>
      <version>1.3</version>
      <description>A set of annotations that provide additional information to the J2ObjC
    translator to modify the result of translation.</description>
      <hashes>
        <hash alg="MD5">5fa4ec4ec0c5aa70af8a7d4922df1931</hash>
        <hash alg="SHA-1">ba035118bc8bac37d7eff77700720999acd9986d</hash>
        <hash alg="SHA-256">21af30c92267bd6122c0e0b4d20cccb6641a37eaf956c6540ec471d584e64a7b</hash>
        <hash alg="SHA-512">51ea975179f809cb260751d11a513881b643bf016d15949bcb63b57d3c8868a2197e0620ccbaa5739e032797ec6faa3aa6d64606e999fce32930314780ca4115</hash>
        <hash alg="SHA-384">d2a54e4bb17793a98f85fb8f91138cd3b3d311385b7fb2c09d05c3112d42218a6da29154ba184f00031919548022aa71</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.j2objc/j2objc-annotations@1.3?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/google/j2objc/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>http://svn.sonatype.org/spice/tags/oss-parent-7/j2objc-annotations</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-cli/commons-cli@1.4?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>commons-cli</group>
      <name>commons-cli</name>
      <version>1.4</version>
      <description>Apache Commons CLI provides a simple API for presenting, processing and validating a command line interface.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">c966d7e03507c834d5b09b848560174e</hash>
        <hash alg="SHA-1">c51c00206bb913cd8612b24abd9fa98ae89719b1</hash>
        <hash alg="SHA-256">fd3c7c9545a9cdb2051d1f9155c4f76b1e4ac5a57304404a6eedb578ffba7328</hash>
        <hash alg="SHA-512">fa769a08a118141831cd4eaf2ce4f3f65855b8aeee86fbf3e07b4c619facf801f8b55c14c5e56a154cd14f438a8f120bb59a20c1b6be04979501e362f252ca48</hash>
        <hash alg="SHA-384">aa516a360ed41568a618c45df5288daa75c2d2ddb9a9af61324962f2cf534834bb0fb51bf13710709a771f09992febc5</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/commons-cli/commons-cli@1.4?type=jar</purl>
      <externalReferences><reference type="website"><url>http://commons.apache.org/proper/commons-cli/</url></reference><reference type="build-system"><url>https://builds.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/CLI</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>http://svn.apache.org/viewvc/commons/proper/cli/trunk/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/ch.qos.logback/logback-classic@1.2.3?type=jar">
      <publisher>QOS.ch</publisher>
      <group>ch.qos.logback</group>
      <name>logback-classic</name>
      <version>1.2.3</version>
      <description>logback-classic module</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">64f7a68f931aed8e5ad8243470440f0b</hash>
        <hash alg="SHA-1">7c4f3c474fb2c041d8028740440937705ebb473a</hash>
        <hash alg="SHA-256">fb53f8539e7fcb8f093a56e138112056ec1dc809ebb020b59d8a36a5ebac37e0</hash>
        <hash alg="SHA-512">9ad5df9055e74c1db67e10422774e740903477c821591702d2709a4c1f73e3fc3fa6b1a871b6985901817bc2bdeba916849035dc2bbf518f308637b0586e36f1</hash>
        <hash alg="SHA-384">42a5975c9db68045fd2d662f5168df6b19e5e8b715401fd5786325a02f531b44f1cf4e64f69f5ef5bbef70929e1d6fd3</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-1.0</id>
        </license>
        <license>
          <name>GNU Lesser General Public License</name>
          <url>http://www.gnu.org/licenses/old-licenses/lgpl-2.1.html</url>
        </license>
      </licenses>
      <purl>pkg:maven/ch.qos.logback/logback-classic@1.2.3?type=jar</purl>
      <externalReferences><reference type="website"><url>http://logback.qos.ch/logback-classic</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/ceki/logback/logback-classic</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/ch.qos.logback/logback-core@1.2.3?type=jar">
      <publisher>QOS.ch</publisher>
      <group>ch.qos.logback</group>
      <name>logback-core</name>
      <version>1.2.3</version>
      <description>logback-core module</description>
      <hashes>
        <hash alg="MD5">841fc80c6edff60d947a3872a2db4d45</hash>
        <hash alg="SHA-1">864344400c3d4d92dfeb0a305dc87d953677c03c</hash>
        <hash alg="SHA-256">5946d837fe6f960c02a53eda7a6926ecc3c758bbdd69aa453ee429f858217f22</hash>
        <hash alg="SHA-512">bd1a7512647fe61b90cfd18bedf2a33f3f16f334f8f8ce947cdd353c0b0b7a7cce203070f0d2183f6583e0f2b2fe6e0b12eb93bd5b2dc29076e7b466447f6dc5</hash>
        <hash alg="SHA-384">2c34d2bc4c85beee3d82b7aff9f351615a1de9a4f1e262c6e891136a621a3ea27296fbac399398aa8c1fd857fa38393d</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-1.0</id>
        </license>
        <license>
          <name>GNU Lesser General Public License</name>
          <url>http://www.gnu.org/licenses/old-licenses/lgpl-2.1.html</url>
        </license>
      </licenses>
      <purl>pkg:maven/ch.qos.logback/logback-core@1.2.3?type=jar</purl>
      <externalReferences><reference type="website"><url>http://logback.qos.ch/logback-core</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/ceki/logback/logback-core</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.fasterxml.jackson.core/jackson-core@2.15.1?type=jar">
      <publisher>FasterXML</publisher>
      <group>com.fasterxml.jackson.core</group>
      <name>jackson-core</name>
      <version>2.15.1</version>
      <description>Core Jackson processing abstractions (aka Streaming API), implementation for JSON</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">48a8701b4f142e2fe3b8cae07a2af4d2</hash>
        <hash alg="SHA-1">241c054ba8503de092a12acad9f083dd39935cc0</hash>
        <hash alg="SHA-256">9d984319cc976e85c49f40da928021acd2d773e259a9ff9f832edcdac6920eed</hash>
        <hash alg="SHA-512">41e4550fccddf526d60dc17a639b20db1c33a004a67aeba2f515db0793e093713f661178d314c02236c56869977041af055e914b01ea32f5c6313ced77d95481</hash>
        <hash alg="SHA-384">63694416d7eb55252683bbcf25d26669d93d271fbcfc57b55ad925fc229bccd873a596f3063e95b56de4491d38acb03b</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.fasterxml.jackson.core/jackson-core@2.15.1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/FasterXML/jackson-core</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/FasterXML/jackson-core/issues</url></reference><reference type="vcs"><url>https://github.com/FasterXML/jackson-core</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.15.1?type=jar">
      <publisher>FasterXML</publisher>
      <group>com.fasterxml.jackson.core</group>
      <name>jackson-databind</name>
      <version>2.15.1</version>
      <description>General data-binding functionality for Jackson: works on core streaming API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">02f4071cd666983bef73a25b9a1ad2d8</hash>
        <hash alg="SHA-1">ac9ba74d208faf356e4719a49e59c6ea9237c01d</hash>
        <hash alg="SHA-256">c1f0347ce2696c94f531d095cd9ef22e648ec090e9b1c3dee17938b07a1df176</hash>
        <hash alg="SHA-512">0a6750ced73427dd1a618501e8b0b08ab0799ea878e2317ecce3cd0dbf844d472e06fe5914d70ce34d54553e894f97fd09e6ce040cb9aef4b4b1a8d1e9198755</hash>
        <hash alg="SHA-384">923a118ac4cb4b8bd155544fe7edc99d062962eae2414cb3e6d399f66fb7a9c3098357e869bfc827ef1a432876687310</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.15.1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/FasterXML/jackson</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/FasterXML/jackson-databind/issues</url></reference><reference type="vcs"><url>https://github.com/FasterXML/jackson-databind</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.slf4j/slf4j-api@1.7.25?type=jar">
      <publisher>QOS.ch</publisher>
      <group>org.slf4j</group>
      <name>slf4j-api</name>
      <version>1.7.25</version>
      <description>The slf4j API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">caafe376afb7086dcbee79f780394ca3</hash>
        <hash alg="SHA-1">da76ca59f6a57ee3102f8f9bd9cee742973efa8a</hash>
        <hash alg="SHA-256">18c4a0095d5c1da6b817592e767bb23d29dd2f560ad74df75ff3961dbde25b79</hash>
        <hash alg="SHA-512">5dd6271fd5b34579d8e66271bab75c89baca8b2ebeaa9966de391284bd08f2d720083c6e0e1edda106ecf8a04e9a32116de6873f0f88c19c049c0fe27e5d820b</hash>
        <hash alg="SHA-384">f2791380e87fccb18519efd016c03be11206984f4765586d348e57e2f33756b21ed51a95fa09679e1473a5bf5d2d76e1</hash>
      </hashes>
      <licenses>
        <license>
          <id>MIT</id>
          <url>https://opensource.org/licenses/MIT</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.slf4j/slf4j-api@1.7.25?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.slf4j.org</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/qos-ch/slf4j/slf4j-api</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.arrow/arrow-memory-netty@12.0.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.arrow</group>
      <name>arrow-memory-netty</name>
      <version>12.0.1</version>
      <description>Netty allocator and utils for allocating memory in Arrow</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">bbeaa3dfe98fbed40b47f005e21a75fc</hash>
        <hash alg="SHA-1">f0e6801aa116b75775272dcac6ad49584382bf8c</hash>
        <hash alg="SHA-256">f3d45c3ca7ef7f9b3bbf6d8b68126d630fe3f538614fda00f95ec66f7d3aa051</hash>
        <hash alg="SHA-512">e023c562eab62a885c940530ccdd7495dce5a7f015b6cab963220981eca30d0daceccc297c0085b88007ad3bdcd0e81a2de9ab3c78b7c6aa6dce13bcfb1c3909</hash>
        <hash alg="SHA-384">f22815f86b1c4be39ab95db5059caf95ba62326f4ed5710520ccad6a90d827491178655d5f5a45211a712d0cbe32d573</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.arrow/arrow-memory-netty@12.0.1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://arrow.apache.org/arrow-memory/arrow-memory-netty/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/arrow</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/arrow-dev/</url></reference><reference type="vcs"><url>https://github.com/apache/arrow/arrow-memory/arrow-memory-netty</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.netty/netty-buffer@4.1.82.Final?type=jar">
      <publisher>The Netty Project</publisher>
      <group>io.netty</group>
      <name>netty-buffer</name>
      <version>4.1.82.Final</version>
      <description>Netty is an asynchronous event-driven network application framework for
    rapid development of maintainable high performance protocol servers and
    clients.</description>
      <hashes>
        <hash alg="MD5">47b1a2d86a0b211d971fc4156560f793</hash>
        <hash alg="SHA-1">a544270cf1ae8b8077082f5036436a9a9971ea71</hash>
        <hash alg="SHA-256">a7ce7f6d8c1e82b044cd56765dab4338251596416de03b1f9a05d7402429c29d</hash>
        <hash alg="SHA-512">5e04ffbe47398028fff4c92974973a950283fb243a81d117b8b93705a31d18c62fd29937a7c95a9f77d5caa7ba73b3f8be0226a89e83c09dd0a2b11e3c8f3782</hash>
        <hash alg="SHA-384">0fdba4b8b39ecf9b306eb6eb8be0b917d608deb8312ce8f685d4b7303ffe552b1911a878083d83ff78542a0b461d6616</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.netty/netty-buffer@4.1.82.Final?type=jar</purl>
      <externalReferences><reference type="website"><url>https://netty.io/netty-buffer/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/netty/netty/netty-buffer</url></reference></externalReferences>
    </component>
  </components>
  <dependencies>
    <dependency ref="pkg:maven/org.apache.arrow/arrow-tools@12.0.1?type=jar">
      <dependency ref="pkg:maven/org.apache.arrow/arrow-memory-core@12.0.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.arrow/arrow-vector@12.0.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.arrow/arrow-compression@12.0.1?type=jar"/>
      <dependency ref="pkg:maven/com.google.guava/guava@31.1-jre?type=jar"/>
      <dependency ref="pkg:maven/commons-cli/commons-cli@1.4?type=jar"/>
      <dependency ref="pkg:maven/ch.qos.logback/logback-classic@1.2.3?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-core@2.15.1?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.15.1?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.25?type=jar"/>
      <dependency ref="pkg:maven/org.apache.arrow/arrow-memory-netty@12.0.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.arrow/arrow-memory-core@12.0.1?type=jar">
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.25?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar"/>
    <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.25?type=jar"/>
    <dependency ref="pkg:maven/org.apache.arrow/arrow-vector@12.0.1?type=jar">
      <dependency ref="pkg:maven/org.apache.arrow/arrow-format@12.0.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.arrow/arrow-memory-core@12.0.1?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-core@2.15.1?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.15.1?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.15.1?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310@2.15.1?type=jar"/>
      <dependency ref="pkg:maven/commons-codec/commons-codec@1.15?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-common@4.1.82.Final?type=jar"/>
      <dependency ref="pkg:maven/com.google.flatbuffers/flatbuffers-java@1.12.0?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.25?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.arrow/arrow-format@12.0.1?type=jar">
      <dependency ref="pkg:maven/com.google.flatbuffers/flatbuffers-java@1.12.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.google.flatbuffers/flatbuffers-java@1.12.0?type=jar"/>
    <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-core@2.15.1?type=jar"/>
    <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.15.1?type=jar"/>
    <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.15.1?type=jar">
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.15.1?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-core@2.15.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310@2.15.1?type=jar">
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.15.1?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-core@2.15.1?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.15.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/commons-codec/commons-codec@1.15?type=jar"/>
    <dependency ref="pkg:maven/io.netty/netty-common@4.1.82.Final?type=jar"/>
    <dependency ref="pkg:maven/org.apache.arrow/arrow-compression@12.0.1?type=jar">
      <dependency ref="pkg:maven/org.apache.arrow/arrow-vector@12.0.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.arrow/arrow-memory-core@12.0.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-compress@1.21?type=jar"/>
      <dependency ref="pkg:maven/com.github.luben/zstd-jni@1.4.9-1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.commons/commons-compress@1.21?type=jar"/>
    <dependency ref="pkg:maven/com.github.luben/zstd-jni@1.4.9-1?type=jar"/>
    <dependency ref="pkg:maven/com.google.guava/guava@31.1-jre?type=jar">
      <dependency ref="pkg:maven/com.google.guava/failureaccess@1.0.1?type=jar"/>
      <dependency ref="pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar"/>
      <dependency ref="pkg:maven/org.checkerframework/checker-qual@3.12.0?type=jar"/>
      <dependency ref="pkg:maven/com.google.errorprone/error_prone_annotations@2.11.0?type=jar"/>
      <dependency ref="pkg:maven/com.google.j2objc/j2objc-annotations@1.3?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.google.guava/failureaccess@1.0.1?type=jar"/>
    <dependency ref="pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar"/>
    <dependency ref="pkg:maven/org.checkerframework/checker-qual@3.12.0?type=jar"/>
    <dependency ref="pkg:maven/com.google.errorprone/error_prone_annotations@2.11.0?type=jar"/>
    <dependency ref="pkg:maven/com.google.j2objc/j2objc-annotations@1.3?type=jar"/>
    <dependency ref="pkg:maven/commons-cli/commons-cli@1.4?type=jar"/>
    <dependency ref="pkg:maven/ch.qos.logback/logback-classic@1.2.3?type=jar">
      <dependency ref="pkg:maven/ch.qos.logback/logback-core@1.2.3?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.25?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/ch.qos.logback/logback-core@1.2.3?type=jar"/>
    <dependency ref="pkg:maven/org.apache.arrow/arrow-memory-netty@12.0.1?type=jar">
      <dependency ref="pkg:maven/org.apache.arrow/arrow-memory-core@12.0.1?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-buffer@4.1.82.Final?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-common@4.1.82.Final?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.25?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/io.netty/netty-buffer@4.1.82.Final?type=jar">
      <dependency ref="pkg:maven/io.netty/netty-common@4.1.82.Final?type=jar"/>
    </dependency>
  </dependencies>
</bom>
