OWASP Foundation CycloneDX Maven plugin 2.7.11 a70e8b649ab4a2bb7922d360173c8237 4c3c0878c15561639076e5be7a48ffcd6111c5ee 70997d52dbffd4e797c467b2062c6ba9b8b5a7380ff2884779f2743b6172ebb5 bc1ce91190c642f68fd3571939d7668def3b879ec8e5a87a213a9710a106e0290f60f9e0414593d19cca958c4fcb5d4450bd2793bcd609948419c8a2a6a7f5c8 3c8421bdafd1754fb424f16dccc83bfe0827648c1cadfffc98bdf1c7da65475dfe48d2f4b16d233bb8819e155ba6a4f3 ad88cf6a0e0a5d51df49a4dab5530a28de9df7eec8460c045dff3e1f9316b82a244a125d52b937fe9d4ee72e44f5d01a b4d9c3ef07c34517fd9f33178ba95ffc9618eb84a3671e71b0c82991ec3717e5 935b43aba8999dc7d95d93288a251c97b6b32852841b7bef31516c27c8d65c8de7f8411f1829f765ee760f25930c766db6a49df68e5994e18721c0a71f606f1e The Apache Software Foundation org.apache.avro avro-thrift 1.11.4 Permit serialization of Thrift-generated classes as Avro data. Apache-2.0 https://www.apache.org/licenses/LICENSE-2.0 pkg:maven/org.apache.avro/avro-thrift@1.11.4?type=bundle https://avro.apache.org/avro-thrifthttps://repository.apache.org/service/local/staging/deploy/maven2https://issues.apache.org/jira/browse/AVROhttps://mail-archives.apache.org/mod_mbox/avro-dev/scm:git:https://github.com/apache/avro/lang/avro-parent/avro-thrift makeBom compile,provided,runtime,system enabled The Apache Software Foundation org.apache.avro avro 1.11.4 Avro core components required 915002011d651686f94b4e20d25234a6 25d54640c4a17aa342490c4c63c172759361bf56 eeba11b77070b9aa6337d886fdf778f6695f6c4c3dcfd2a02389925c885079fa 2133473bcafb3997f70dd0dc44e76872beed30910dc88522d898e639df0c58f8fefec4c734e46bf0244cf2ca1b49e90b0fdf5c9d7ccd06b41f8f9ad98da1cca5 701113d1e68c4582aad203692567bff7538d6ac2707195b413e9f831215e0c8622e83383adcc822a353524c28aba5dda 017e0363dfdf0019a2e75785c1f7a8aebe1a61f2c96393bacea3238d8f010d3d82ddcf3466d474ebb113ef67e9ecf192 135d7a5a6e9723e77cee8ede0687f459f8fbb828f4111dc351f747b2b72eb0dd 04d0041f4d215b51a446ec9c2b2998042285f81d85dd316f046b46420b71d459e3f66530ddbc2b98772ee5ced0d8788cb21c46b09d2139d311930ce5424ac3b9 Apache-2.0 https://www.apache.org/licenses/LICENSE-2.0 pkg:maven/org.apache.avro/avro@1.11.4?type=jar https://avro.apache.orghttps://repository.apache.org/service/local/staging/deploy/maven2https://issues.apache.org/jira/browse/AVROhttps://mail-archives.apache.org/mod_mbox/avro-dev/scm:git:https://github.com/apache/avro/lang/avro-parent/avro FasterXML com.fasterxml.jackson.core jackson-core 2.14.3 Core Jackson processing abstractions (aka Streaming API), implementation for JSON required abb25b80cda20ddc2cd3bbd8fccd0d34 4fa101f81504ed6811bf1823270adb51a9b45ff3 7ee2debad3c002e97b28b84d5f1b2044a38e780abb673948238f5bc656e2fe44 7907fbde57f1ebd18d0935d34c5c9657e7dcff924c540b6ba732f87ed2e9e653ee499b21b464b3b74fa569d5865ffa717b8e2098d600a5f74cef4e97f39cc7d5 0d584c6b0ce820441e7e8f341d567924ab236de62f4ad8a40f1af37e983946ea07a9de3a4b607b76bf3c421a02720d0e 4163ac7d8f4fe59319c2fb76bfadcca883bc5fb92b9525d2d930284063cb384b4a7faac49829c4195aaffe64f4054447 52215985453eacefd6659967b51b684d7ebcc30a26163f31b8b7b0f5864fb7b4 e15a4a70c5bf68f77f535931c9d4ab4907efc80ce9d60a49d02fbd259511284e307f0fbbdbf60dcd2930c017a2f9a39c25541a528b6947d1d2388a28db299022 Apache-2.0 pkg:maven/com.fasterxml.jackson.core/jackson-core@2.14.3?type=jar https://github.com/FasterXML/jackson-corehttps://oss.sonatype.org/service/local/staging/deploy/maven2/https://github.com/FasterXML/jackson-core/issueshttps://github.com/FasterXML/jackson-core FasterXML com.fasterxml.jackson.core jackson-databind 2.14.3 General data-binding functionality for Jackson: works on core streaming API required d9aed5b42f6769cb06d6802250aed19b ba0373b04bf0f03b0cd268cd2e5e8444aaaf9208 ef0694046dc86e8a601e69efef24cda88a85773aaf012f5b9b1167d6f2e7de45 54f4842e09b4166bc0c0851407bdf988a0f88d5f68d58134eb0d393c80e20b337545fffa96c3563b79b71b105d9e55713815749af48cab752633d98c0dbfcf99 624b07a0b597c07a2c82cd6fbbb31d796c69a189931b73b7ce9c35dd0aca6dfca378d08c05e943b10c7f12e06904bb04 4f4a4e2f2c75e03a48d163ece5d9902cdec5959cfb23079b68559fa5ef481bc2582c77c428a2380b87470819d4c4d706 0882e9419fc6aaf3bbab0be8e78cd915336e1f4d3806dcaf9cdc17117e37c9ea a62a293254cc190f1ef40eec99ef95e7342b3c2858673e4f881144084d28393009f19a49137ace8c4f44f551d5e99b163f8d8e73d9d4b951e133d08b106af7b1 Apache-2.0 pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.14.3?type=jar https://github.com/FasterXML/jacksonhttps://oss.sonatype.org/service/local/staging/deploy/maven2/https://github.com/FasterXML/jackson-databind/issueshttps://github.com/FasterXML/jackson-databind FasterXML com.fasterxml.jackson.core jackson-annotations 2.14.3 Core annotations used for value types, used by Jackson data binding package. required f6ee414687751fbadc55998ec49b3ea6 b49701acb02b8e95ae1967821cfbafc220cf5795 ea1b3a9ec60a353f4d7e78559c7140abb9bcf71b31456e9d57c8289f7cf397f1 d265ba6cc1d20721ba7803416005f25d70036cd659bf6071f4d3250d7dab272a2522d7db282e50aeae994907556ef63155d2c0bcc0bd1c96c6460143ff5a8d53 551a607644bcb3f3c06ac9c94861858a0d8f2b62b9120d34f5c2aad94a3a0e75478a94dca7eb290d9814c8dec739905e 79bef0386d15bd152d94ba9e67849eb25c7c4eafd3e8a50c504304dad4653423d78cb8cb54d3853370334519219b5c80 6ed193820d6577652884528ce3d0378516483d51a87652aa7209f3f7ef8326f2 bc5748486a715352e318d809fb3483de615e15422c3264cc52806f4a367035cfbfdaf5258ba460b13e55d25adfc38ee39444f4b7460dfd2cf927817c4c6776ac Apache-2.0 pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.14.3?type=jar https://github.com/FasterXML/jacksonhttps://oss.sonatype.org/service/local/staging/deploy/maven2/https://github.com/FasterXML/jackson-annotations/issueshttps://github.com/FasterXML/jackson-annotations The Apache Software Foundation org.apache.commons commons-compress 1.26.2 Apache Commons Compress defines an API for working with compression and archive formats. These include bzip2, gzip, pack200, LZMA, XZ, Snappy, traditional Unix Compress, DEFLATE, DEFLATE64, LZ4, Brotli, Zstandard and ar, cpio, jar, tar, zip, dump, 7z, arj. required d2c5abbd0a822c0b79cf4f03ead483ee eb1f823447af685208e684fce84783b43517960c 9168a03141d8fc7eda21a2360d83cc0412bcbb1d6204d992bd48c2573cb3c6b8 7106a722d26da945f6d6eea6f0c61b420bff45749bf60c572d992c545b10ccd926dc4b9a9f366ff29d5940c99f26dfeca98f6c1c4b630632a65f04c2d7b94b26 8422ef0d5e9ca419a8b3a33a4c330348f4495b9edded4fde38636d11e99fc3f725df11769d310edc233beed2401daf53 b32406c91771cfc12e61722add9ab2ef8efa32bf16bdcf80b415f5604bb9b61977c08e6f87f2ef59705c761caca4ffb8 26c54771c66adc967a167306982bded1fc36a6a2d590401fc435303c9e6256a7 3f4054fd56ae8d4f012f2cae5469215010123c1ada8931bdcd634551027816afefd8bd871b2ee99f168e2d5a347e0e28c31427dd79e3f42cefcff2662a5603ff Apache-2.0 https://www.apache.org/licenses/LICENSE-2.0 pkg:maven/org.apache.commons/commons-compress@1.26.2?type=jar https://commons.apache.org/proper/commons-compress/https://github.com/apache/commons-parent/actionshttps://repository.apache.org/service/local/staging/deploy/maven2https://issues.apache.org/jira/browse/COMPRESShttps://mail-archives.apache.org/mod_mbox/commons-user/https://gitbox.apache.org/repos/asf?p=commons-compress.git The Apache Software Foundation commons-codec commons-codec 1.17.0 The Apache Commons Codec component contains encoder and decoders for various formats such as Base16, Base32, Base64, digest, and Hexadecimal. In addition to these widely used encoders and decoders, the codec package also maintains a collection of phonetic encoding utilities. required ca1f080782f7e77cb3aec451e7a7f02d 0dbe8eef6e14460e73da07f7b11bf994d6626355 f700de80ac270d0344fdea7468201d8b9c805e5c648331c3619f2ee067ccfc59 cb9c3b2055d0b31d106293f0bc3696f90a11a30953e5b05a1a3c453e98a563475c93d7c6d1707e75f59d0806fba5fd8e4486b8bd72e58bb6ae995bdbbeeb7e17 a0fd174b2f8a21b43828371a7ee03c915b79e69d7b0e16cfe6367f794e2f8e6bbebc261e8a4ba35a79779b2338a774a4 803fb227bd6770cc21c701b9529606f95ba05c30ea3d807b18b3681fde0c7cabd0e2f40ab36567832f63e0c42b77d0f2 41b9b86fd0b19ff44d19d108302d7b0111ed86d07a65a90efe1023537fad8748 eaacc9eafccf4bda0c72c5151dbd7e99954842782c91b501af8c7ca462a04b6c59d7ab8e1ef43b3ebc1b12ca62f4574544bc31df10f33f4a15cd3c3399bd808b Apache-2.0 https://www.apache.org/licenses/LICENSE-2.0 pkg:maven/commons-codec/commons-codec@1.17.0?type=jar https://commons.apache.org/proper/commons-codec/https://github.com/apache/commons-parent/actionshttps://repository.apache.org/service/local/staging/deploy/maven2https://issues.apache.org/jira/browse/CODEChttps://mail-archives.apache.org/mod_mbox/commons-user/https://github.com/apache/commons-codec The Apache Software Foundation commons-io commons-io 2.16.1 The Apache Commons IO library contains utility classes, stream implementations, file filters, file comparators, endian transformation classes, and much more. required ed8191a5a217940140001b0acfed18d9 377d592e740dc77124e0901291dbfaa6810a200e f41f7baacd716896447ace9758621f62c1c6b0a91d89acee488da26fc477c84f 97eab31b073c5c57c8bcfaa2fec7b481a15a9a1f9ed864dfdc63b57f062b230557caa734c3133aca1165facb588c58db0185c07832241d70159e87a4bcf48008 bd78e2eb3d005046d1329557d3a77529e98384d4d87940374eef432d73d5a06ef20fb7b0c44389de64496fe134dcf199 f9acc2f04f076328d17e2d0615da4367470b45b15f828008d8df57033401ae6b3b83b21cf9bc1745ff3cfe5a102bc48e 5d4bbe43356c92e3970b69892b44a10cc736ef8cb1bedfc753cc8df050520161 29440ccf2551b383c7e6cbdf78ef7784a421322e418da1be3fcd3251c8a826ffd5c6d1bea32b9c80e74744c035cc9cd8483e629e407110ff3133a05cb34bef93 Apache-2.0 https://www.apache.org/licenses/LICENSE-2.0 pkg:maven/commons-io/commons-io@2.16.1?type=jar https://commons.apache.org/proper/commons-io/https://github.com/apache/commons-parent/actionshttps://repository.apache.org/service/local/staging/deploy/maven2https://issues.apache.org/jira/browse/IOhttps://mail-archives.apache.org/mod_mbox/commons-user/https://gitbox.apache.org/repos/asf?p=commons-io.git org.apache.thrift libthrift 0.16.0 Thrift is a software framework for scalable cross-language services development. required 19226bcfae19557ec080e098f87a1340 995b1788bf9d954a77a24db5619a065ed1a455e9 b311ad08f7dc5ba90139910ec8619460914a4a2952f738603f1d7803ffdbe0a8 25e69530ea2883d39c7bbcd01f374d679eec9d7a05007fa5304802f38089f7910e027c608166fe576057a77759f39f669759abf3089b8940296c502974c43e30 e3061ff167d812f2bcb36d585c57fe0ff320e397fa40229ce7185b4f5eb2204ba2b53f65297da4bdfdacc2f5f7e05ffc 97176f98c4c564655dc23adaed7adf530957d11db3b4d0d51e7cbc9b2a449d49e8982630be1160bdc50ce49bc60e25ee e3f9cf17b93543b625fb66f77aba86e61ff03549336315bd0db8a62651f65a9d 68cc31068454f6024cb60a3c36a4e36f10f47a25ab6d3ff79968c027a4fb2f9946399e9d4b00c89a113ce5a7ac7aefb673732bf85018228e240157df866e868b Apache-2.0 pkg:maven/org.apache.thrift/libthrift@0.16.0?type=jar http://thrift.apache.orghttps://github.com/apache/thrift The Apache Software Foundation org.apache.httpcomponents httpclient 4.5.13 Apache HttpComponents Client required 40d6b9075fbd28fa10292a45a0db9457 e5f6cae5ca7ecaac1ec2827a9e2d65ae2869cada 6fe9026a566c6a5001608cf3fc32196641f6c1e5e1986d1037ccdbd5f31ef743 3567739186e551f84cad3e4b6b270c5b8b19aba297675a96bcdff3663ff7d20d188611d21f675fe5ff1bfd7d8ca31362070910d7b92ab1b699872a120aa6f089 093ac3e2dde58e34aa70309c7305eb3c9b5be2509a9293f1672494da55479a86bd112e83326746dc7a32855472952b99 cd6882e7868624164e460f2f3ea01466f863c0dcb902b031c656b57356f563be83b29530df41d88d634ed3d01fc9964d 710b1d8d7dae0b8e4270756694ca9c83d64965f42d3b4170c609b14d47c2762c 276fa6a6599dc89382d658115695cf4da6b0d39b34e9c349c17a5dbd64122eaee553bb9ed75c0378ec4a83be157c8aa39370662de3c9b8fd55ebc1dd608383e6 Apache-2.0 pkg:maven/org.apache.httpcomponents/httpclient@4.5.13?type=jar http://hc.apache.org/httpcomponents-clienthttps://repository.apache.org/service/local/staging/deploy/maven2http://issues.apache.org/jira/browse/HTTPCLIENThttp://mail-archives.apache.org/mod_mbox/hc-httpclient-users/https://github.com/apache/httpcomponents-client/tree/4.5.13/httpclient The Apache Software Foundation commons-logging commons-logging 1.2 Apache Commons Logging is a thin adapter allowing configurable bridging to other, well known logging systems. required 040b4b4d8eac886f6b4a2a3bd2f31b00 4bfc12adfe4842bf07b657f0369c4cb522955686 daddea1ea0be0f56978ab3006b8ac92834afeefbd9b7e4e6316fca57df0fa636 ed00dbfabd9ae00efa26dd400983601d076fe36408b7d6520084b447e5d1fa527ce65bd6afdcb58506c3a808323d28e88f26cb99c6f5db9ff64f6525ecdfa557 ac20720d7156131478205f1b454395abf84cfc8da2f163301af32f63bd3c4764bd26cb54ed53800f33193ae591f3ce9c 628eb4407e95dca84da1a06b08a6d9b832a49de8472b1b217e8607f08efeeed18b996232d64dd07f03e78e0e3bb4b078 9aab62deccf156ee6e324c925dfc30ecb53e8465802863a551901a461424e807 3fd76857f6d20c03799537cc961c1c4ddf1c375c6c192fb982363e3b9397ba138b77f24ef38b4202f44e37586789c0320e4de18fdadd2772304fd14a9b26d552 Apache-2.0 pkg:maven/commons-logging/commons-logging@1.2?type=jar http://commons.apache.org/proper/commons-logging/https://continuum-ci.apache.org/https://repository.apache.org/service/local/staging/deploy/maven2http://issues.apache.org/jira/browse/LOGGINGhttp://mail-archives.apache.org/mod_mbox/commons-user/http://svn.apache.org/repos/asf/commons/proper/logging/trunk The Apache Software Foundation org.apache.httpcomponents httpcore 4.4.15 Apache HttpComponents Core (blocking I/O) required be7c67929df007fcac6c8eff5322d3a0 7f2e0c573eaa7a74bac2e89b359e1f73d92a0a1d 3cbaed088c499a10f96dde58f39dc0e7985171abd88138ca1655a872011bb142 f0605e4d521c6e9c7e645905687c519239fa9e2128403a515e6118b0406b503b0865a8ead197f8532186b0c9aaa4189ff5bb301d5b0cf84bd54fa2258d17551d fffa9cd7434271990e20230ef9c3754f4b198958437573cdec2d4e7063147a765cb0cdf0b79a9688e81ff85dc704c25b 0b72d65d0c3a7d74d1baf1a2fc4e9510e64bd34f7b23f52d436621d2043d81b5395c9b05803e7471537964ac42e2fe94 3290e3547fd3ea688f30ba6a554c779c784bb209642ec4d48b284ca8374191b3 230b7196270183aaaf5e89e8d7598a3c65ac6bbede816e222e6d457fe5fca50fbe8ca2cb30ecf161bf4ddf34a08ee3a95d2f559e0aa513e9e730eeb5624b296b Apache-2.0 pkg:maven/org.apache.httpcomponents/httpcore@4.4.15?type=jar http://hc.apache.org/httpcomponents-core-gahttps://repository.apache.org/service/local/staging/deploy/maven2http://issues.apache.org/jira/browse/HTTPCOREhttp://mail-archives.apache.org/mod_mbox/hc-httpclient-users/https://github.com/apache/httpcomponents-core/tree/4.4.15/httpcore GlassFish Community javax.annotation javax.annotation-api 1.3.2 Common Annotations for the JavaTM Platform API required 2ab1973eefffaa2aeec47d50b9e40b9d 934c04d3cfef185a8008e7bf34331b79730a9d43 e04ba5195bcd555dc95650f7cc614d151e4bcd52d29a10b8aa2197f3ab89ab9b 679cf44c3b9d635b43ed122a555d570292c3f0937c33871c40438a1a53e2058c80578694ec9466eac9e280e19bfb7a95b261594cc4c1161c85dc97df6235e553 fc0058495e54efb6e05a34e3ff422e7c8347bcc77d6d9b87e9253424968dee6ef6a215c318d7e54f8705276be81f0682 ed6464b715de6ced0d9981a3f28140824946a4b7a02ffaff6116c833bb36e8f77a6282ce63c0d82cfe841d4fd6916891 ecfc9bef24ae28cf94c6775ecf6e2086d90a25d8d5476a4f6bb24001601b6cd0 f2b333527faedf504f60aa70a3d491972fa76f7e61e6351027f74613f41001157656824fe312b6e1df6dc4979704fe2a745b618d5368a97fe0bf8749739de9e2 (CDDL-1.0 OR GPL-2.0-with-classpath-exception) pkg:maven/javax.annotation/javax.annotation-api@1.3.2?type=jar http://jcp.org/en/jsr/detail?id=250https://maven.java.net/service/local/staging/deploy/maven2/https://github.com/javaee/javax.annotation/issuesjavaee-spec@javaee.groups.iohttps://github.com/javaee/javax.annotation The Apache Software Foundation org.apache.commons commons-lang3 3.12.0 Apache Commons Lang, a package of Java utility classes for the classes that are in java.lang's hierarchy, or are considered to be so standard as to justify existence in java.lang. required 19fe50567358922bdad277959ea69545 c6842c86792ff03b9f1d1fe2aab8dc23aa6c6f0e d919d904486c037f8d193412da0c92e22a9fa24230b9d67a57855c5c31c7e94e fbdbc0943cb3498b0148e86a39b773f97c8e6013740f72dbc727faeabea402073e2cc8c4d68198e5fc6b08a13b7700236292e99d4785f2c9989f2e5fac11fd81 c34b8a0e0eba2168ad56fedeb7a1d710b6f1d3f1ce6aae99a4e0247bd120efbbadc8dcb2f731045b8a16e3efd30604dc 8ad6ebe7754bf0caa8cda7e59c0e95360d76e06a7ad6aeec5637985519dbd1dd06e7eed04711039f36ec4c49de280def 18ef639b2aeeb5aedffb18dbf20c79f33e300d99fb31b131689639cc470e6e4c fbea96114dcf4f31cfaaa99987be756ddda3a6c74f8c835461997df794d54b92da1f60fe5c3f1f2a43cb8c5f5db7f4048bef77c70993673c7a93f3660fffc8da Apache-2.0 pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar https://commons.apache.org/proper/commons-lang/https://builds.apache.org/https://repository.apache.org/service/local/staging/deploy/maven2https://issues.apache.org/jira/browse/LANGhttps://mail-archives.apache.org/mod_mbox/commons-user/https://gitbox.apache.org/repos/asf?p=commons-lang.git QOS.ch org.slf4j slf4j-api 1.7.36 The slf4j API required 872da51f5de7f3923da4de871d57fd85 6c62681a2f655b49963a5983b8b0950a6120ae14 d3ef575e3e4979678dc01bf1dcce51021493b4d11fb7f1be8ad982877c16a1c0 f9b033fc019a44f98b16048da7e2b59edd4a6a527ba60e358f65ab88e0afae03a9340f1b3e8a543d49fa542290f499c5594259affa1ff3e6e7bf3b428d4c610b 2b14ad035877087157e379d3277dcdcd79e58d6bdb147c47d29e377d75ce53ad42cafbf22f5fb7827c7e946ff4876b9a 3bc3110dafb8d5be16a39f3b2671a466463cd99eb39610c0e4719a7bf2d928f2ea213c734887c6926a07c4cca7769e4b ba2608179fcf46e2291a90b9cbb4aa30d718e481f59c350cc21c73b88d826881 14c4edcd19702ef607d78826839d8a6d3a39157df54b89a801d3d3cbbe1307131a77671b041c761122730fb1387888c5ec2e46bdd80e1cb07f8f144676441824 MIT https://opensource.org/licenses/MIT pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar http://www.slf4j.orghttps://oss.sonatype.org/service/local/staging/deploy/maven2/https://github.com/qos-ch/slf4j/slf4j-api