OWASP Foundation CycloneDX Maven plugin 2.7.9 8e595cdb67f17e4b41e046456970591d 69e8ca804520d09ce4657e7235bae84d01cbffa6 aa09074fe5aa403c008cd4fc7ef8ce41cd244489337f16b3e91a3914158a4db8 1488a8112da8e675813d7585f57c5efb178aed32901118186ee12d0e4ae3d19c53774c7f860bf70d17d70f050119b69443a2637cf641675b4b5d9cdcdd69b89b b097295dfbf10887abc6eec58d4d0822cde5a73d1f5c1cf183a57bf569016ad5ced9d34efae3e574d82bb62837540c6c The Apache Software Foundation org.apache.avro avro-thrift 1.11.3 Permit serialization of Thrift-generated classes as Avro data. Apache-2.0 https://www.apache.org/licenses/LICENSE-2.0 pkg:maven/org.apache.avro/avro-thrift@1.11.3?type=bundle https://avro.apache.org/avro-thrifthttps://repository.apache.org/service/local/staging/deploy/maven2https://issues.apache.org/jira/browse/AVROhttps://mail-archives.apache.org/mod_mbox/avro-dev/scm:git:https://github.com/apache/avro/lang/avro-parent/avro-thrift makeBom compile,provided,runtime,system enabled The Apache Software Foundation org.apache.avro avro 1.11.3 Avro core components required 0ce474e395d0aad56c11293fd68ccb52 02b463409b373bff9ece09f54a43d42da5cea55a 4554aa8f8175f999fc56e35d8d294d634480992ce02406a52c650f521997e436 06829cf06127621042d024668c1c4c7b68b19e9a54e51495c03ead0ce600291e675da6f081307b8a949be45a6f6e6fe55ee1af1a69990ae47dc300277ab3493d 991cab21cebff4d891c2d8f9c1c09761f06bc438f71ca811b482a35536e379da4e84d84645a9527330ff725dc2ff1da8 Apache-2.0 https://www.apache.org/licenses/LICENSE-2.0 pkg:maven/org.apache.avro/avro@1.11.3?type=jar https://avro.apache.orghttps://repository.apache.org/service/local/staging/deploy/maven2https://issues.apache.org/jira/browse/AVROhttps://mail-archives.apache.org/mod_mbox/avro-dev/scm:git:https://github.com/apache/avro/lang/avro-parent/avro FasterXML com.fasterxml.jackson.core jackson-core 2.14.2 Core Jackson processing abstractions (aka Streaming API), implementation for JSON required 6ee422ee4c481b2d5aacb2b5e36a7dc0 f804090e6399ce0cf78242db086017512dd71fcc b5d37a77c88277b97e3593c8740925216c06df8e4172bbde058528df04ad3e7a 208953cf72691b3bab1ca2f9a045cccd3d75c46c90099ba884fbf16bc3e45045e5cd014d2c68c96e8a8826f87a5f0e18cb34b35e7ef03348953869c21e197367 e806595862c5fcdae801d9845befc1d12c97e6036ee839d34590dbd785a422d5832cf4fc5c7ee6e1a5ee7a59f37740f0 Apache-2.0 pkg:maven/com.fasterxml.jackson.core/jackson-core@2.14.2?type=jar https://github.com/FasterXML/jackson-corehttps://oss.sonatype.org/service/local/staging/deploy/maven2/https://github.com/FasterXML/jackson-core/issueshttps://github.com/FasterXML/jackson-core FasterXML com.fasterxml.jackson.core jackson-databind 2.14.2 General data-binding functionality for Jackson: works on core streaming API required c1b12dd14734cd1986132bf55042dd7e 01e71fddbc80bb86f71a6345ac1e8ab8a00e7134 501d3abce4d18dcc381058ec593c5b94477906bba6efbac14dae40a642f77424 85473a29d23292f49092af9e7a7a63993206847c53b3e71f3c67245d68f7b19cc7c341e0ece409eb5e96602df98a848e957d8691fdd2c5fcddd807df9078255e 5c54d6c497cb329c3424a30319bf657ea222349eadc5ae74c30e8dc1525d7b60b7785f4d20370267b03343dd738cc13e Apache-2.0 pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.14.2?type=jar https://github.com/FasterXML/jacksonhttps://oss.sonatype.org/service/local/staging/deploy/maven2/https://github.com/FasterXML/jackson-databind/issueshttps://github.com/FasterXML/jackson-databind FasterXML com.fasterxml.jackson.core jackson-annotations 2.14.2 Core annotations used for value types, used by Jackson data binding package. required 10d19982a8890f6eb37557af2f58e272 a7aae9525864930723e3453ab799521fdfd9d873 2c6869d505cf60dc066734b7d50339f975bd3adc635e26a78abb71acb4473c0d a978384791bdc074df8039ffc95bb93f0f60d14d476861ee2a0ce208b33a991c486a07345cb80559252c3ff1dea14d3efb818c19bdc18435946dc8754d8e6ee3 d5111c69020666689414921ae4a8950f9fbdf86dec1360f6827beeee9ebd3f78db74e69c76e0becaba47eb34fdaaeb5a Apache-2.0 pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.14.2?type=jar https://github.com/FasterXML/jacksonhttps://oss.sonatype.org/service/local/staging/deploy/maven2/https://github.com/FasterXML/jackson-annotations/issueshttps://github.com/FasterXML/jackson-annotations The Apache Software Foundation org.apache.commons commons-compress 1.22 Apache Commons Compress software defines an API for working with compression and archive formats. These include: bzip2, gzip, pack200, lzma, xz, Snappy, traditional Unix Compress, DEFLATE, DEFLATE64, LZ4, Brotli, Zstandard and ar, cpio, jar, tar, zip, dump, 7z, arj. required f1e4db16fee4291212d91409313a8086 691a8b4e6cf4248c3bc72c8b719337d5cb7359fa 53d04a0efc7223baecaa303bd5d298eb0600e6b82b4076f9cecd558b97ba760b 2d64fa6cd081fff5d73ee662a82f6186991fc13b4bdaee18b5f1bdcab06d9acb70e3713d18b296337791448251fbd6768bd84afaa817a10547652d0cfa885563 295d7f69d151abbd784e1c4d021c77ce43e129bb5bda0c55762b32d77c8607863383297674ec8a212ea3dfe4007b0044 Apache-2.0 pkg:maven/org.apache.commons/commons-compress@1.22?type=jar https://commons.apache.org/proper/commons-compress/https://github.com/apache/commons-parent/actionshttps://repository.apache.org/service/local/staging/deploy/maven2https://issues.apache.org/jira/browse/COMPRESShttps://mail-archives.apache.org/mod_mbox/commons-user/https://gitbox.apache.org/repos/asf?p=commons-compress.git org.apache.thrift libthrift 0.16.0 Thrift is a software framework for scalable cross-language services development. required 19226bcfae19557ec080e098f87a1340 995b1788bf9d954a77a24db5619a065ed1a455e9 b311ad08f7dc5ba90139910ec8619460914a4a2952f738603f1d7803ffdbe0a8 25e69530ea2883d39c7bbcd01f374d679eec9d7a05007fa5304802f38089f7910e027c608166fe576057a77759f39f669759abf3089b8940296c502974c43e30 e3061ff167d812f2bcb36d585c57fe0ff320e397fa40229ce7185b4f5eb2204ba2b53f65297da4bdfdacc2f5f7e05ffc Apache-2.0 pkg:maven/org.apache.thrift/libthrift@0.16.0?type=jar http://thrift.apache.orghttps://github.com/apache/thrift The Apache Software Foundation org.apache.httpcomponents httpclient 4.5.13 Apache HttpComponents Client required 40d6b9075fbd28fa10292a45a0db9457 e5f6cae5ca7ecaac1ec2827a9e2d65ae2869cada 6fe9026a566c6a5001608cf3fc32196641f6c1e5e1986d1037ccdbd5f31ef743 3567739186e551f84cad3e4b6b270c5b8b19aba297675a96bcdff3663ff7d20d188611d21f675fe5ff1bfd7d8ca31362070910d7b92ab1b699872a120aa6f089 093ac3e2dde58e34aa70309c7305eb3c9b5be2509a9293f1672494da55479a86bd112e83326746dc7a32855472952b99 Apache-2.0 pkg:maven/org.apache.httpcomponents/httpclient@4.5.13?type=jar http://hc.apache.org/httpcomponents-clienthttps://repository.apache.org/service/local/staging/deploy/maven2http://issues.apache.org/jira/browse/HTTPCLIENThttp://mail-archives.apache.org/mod_mbox/hc-httpclient-users/https://github.com/apache/httpcomponents-client/tree/4.5.13/httpclient The Apache Software Foundation commons-logging commons-logging 1.2 Apache Commons Logging is a thin adapter allowing configurable bridging to other, well known logging systems. required 040b4b4d8eac886f6b4a2a3bd2f31b00 4bfc12adfe4842bf07b657f0369c4cb522955686 daddea1ea0be0f56978ab3006b8ac92834afeefbd9b7e4e6316fca57df0fa636 ed00dbfabd9ae00efa26dd400983601d076fe36408b7d6520084b447e5d1fa527ce65bd6afdcb58506c3a808323d28e88f26cb99c6f5db9ff64f6525ecdfa557 ac20720d7156131478205f1b454395abf84cfc8da2f163301af32f63bd3c4764bd26cb54ed53800f33193ae591f3ce9c Apache-2.0 pkg:maven/commons-logging/commons-logging@1.2?type=jar http://commons.apache.org/proper/commons-logging/https://continuum-ci.apache.org/https://repository.apache.org/service/local/staging/deploy/maven2http://issues.apache.org/jira/browse/LOGGINGhttp://mail-archives.apache.org/mod_mbox/commons-user/http://svn.apache.org/repos/asf/commons/proper/logging/trunk The Apache Software Foundation commons-codec commons-codec 1.11 The Apache Commons Codec package contains simple encoder and decoders for various formats such as Base64 and Hexadecimal. In addition to these widely used encoders and decoders, the codec package also maintains a collection of phonetic encoding utilities. required 567159b1ae257a43e1391a8f59d24cfe 3acb4705652e16236558f0f4f2192cc33c3bd189 e599d5318e97aa48f42136a2927e6dfa4e8881dff0e6c8e3109ddbbff51d7b7d d9586162b257386b5871e7e9ae255a38014a9efaeef5148de5e40a3b0200364dad8516bddd554352aa2e5337bec2cc11df88c76c4fdde96a40f3421aa60650d7 9ae3d8fd4c38f3af52c76c5f98039109901cb0f70700e6d9999b27cc4b30b188e2688aa4adcf6b846376bc3ca125907a Apache-2.0 pkg:maven/commons-codec/commons-codec@1.11?type=jar http://commons.apache.org/proper/commons-codec/https://builds.apache.org/https://repository.apache.org/service/local/staging/deploy/maven2http://issues.apache.org/jira/browse/CODEChttp://mail-archives.apache.org/mod_mbox/commons-user/http://svn.apache.org/viewvc/commons/proper/codec/trunk The Apache Software Foundation org.apache.httpcomponents httpcore 4.4.15 Apache HttpComponents Core (blocking I/O) required be7c67929df007fcac6c8eff5322d3a0 7f2e0c573eaa7a74bac2e89b359e1f73d92a0a1d 3cbaed088c499a10f96dde58f39dc0e7985171abd88138ca1655a872011bb142 f0605e4d521c6e9c7e645905687c519239fa9e2128403a515e6118b0406b503b0865a8ead197f8532186b0c9aaa4189ff5bb301d5b0cf84bd54fa2258d17551d fffa9cd7434271990e20230ef9c3754f4b198958437573cdec2d4e7063147a765cb0cdf0b79a9688e81ff85dc704c25b Apache-2.0 pkg:maven/org.apache.httpcomponents/httpcore@4.4.15?type=jar http://hc.apache.org/httpcomponents-core-gahttps://repository.apache.org/service/local/staging/deploy/maven2http://issues.apache.org/jira/browse/HTTPCOREhttp://mail-archives.apache.org/mod_mbox/hc-httpclient-users/https://github.com/apache/httpcomponents-core/tree/4.4.15/httpcore GlassFish Community javax.annotation javax.annotation-api 1.3.2 Common Annotations for the JavaTM Platform API required 2ab1973eefffaa2aeec47d50b9e40b9d 934c04d3cfef185a8008e7bf34331b79730a9d43 e04ba5195bcd555dc95650f7cc614d151e4bcd52d29a10b8aa2197f3ab89ab9b 679cf44c3b9d635b43ed122a555d570292c3f0937c33871c40438a1a53e2058c80578694ec9466eac9e280e19bfb7a95b261594cc4c1161c85dc97df6235e553 fc0058495e54efb6e05a34e3ff422e7c8347bcc77d6d9b87e9253424968dee6ef6a215c318d7e54f8705276be81f0682 (CDDL-1.0 OR GPL-2.0-with-classpath-exception) pkg:maven/javax.annotation/javax.annotation-api@1.3.2?type=jar http://jcp.org/en/jsr/detail?id=250https://maven.java.net/service/local/staging/deploy/maven2/https://github.com/javaee/javax.annotation/issuesjavaee-spec@javaee.groups.iohttps://github.com/javaee/javax.annotation The Apache Software Foundation org.apache.commons commons-lang3 3.12.0 Apache Commons Lang, a package of Java utility classes for the classes that are in java.lang's hierarchy, or are considered to be so standard as to justify existence in java.lang. required 19fe50567358922bdad277959ea69545 c6842c86792ff03b9f1d1fe2aab8dc23aa6c6f0e d919d904486c037f8d193412da0c92e22a9fa24230b9d67a57855c5c31c7e94e fbdbc0943cb3498b0148e86a39b773f97c8e6013740f72dbc727faeabea402073e2cc8c4d68198e5fc6b08a13b7700236292e99d4785f2c9989f2e5fac11fd81 c34b8a0e0eba2168ad56fedeb7a1d710b6f1d3f1ce6aae99a4e0247bd120efbbadc8dcb2f731045b8a16e3efd30604dc Apache-2.0 pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar https://commons.apache.org/proper/commons-lang/https://builds.apache.org/https://repository.apache.org/service/local/staging/deploy/maven2https://issues.apache.org/jira/browse/LANGhttps://mail-archives.apache.org/mod_mbox/commons-user/https://gitbox.apache.org/repos/asf?p=commons-lang.git QOS.ch org.slf4j slf4j-api 1.7.36 The slf4j API required 872da51f5de7f3923da4de871d57fd85 6c62681a2f655b49963a5983b8b0950a6120ae14 d3ef575e3e4979678dc01bf1dcce51021493b4d11fb7f1be8ad982877c16a1c0 f9b033fc019a44f98b16048da7e2b59edd4a6a527ba60e358f65ab88e0afae03a9340f1b3e8a543d49fa542290f499c5594259affa1ff3e6e7bf3b428d4c610b 2b14ad035877087157e379d3277dcdcd79e58d6bdb147c47d29e377d75ce53ad42cafbf22f5fb7827c7e946ff4876b9a MIT https://opensource.org/licenses/MIT pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar http://www.slf4j.orghttps://oss.sonatype.org/service/local/staging/deploy/maven2/https://github.com/qos-ch/slf4j/slf4j-api