<?xml version="1.0" encoding="UTF-8"?>
<bom version="1" xmlns="http://cyclonedx.org/schema/bom/1.4">
  <metadata>
    <tools>
      <tool>
        <vendor>OWASP Foundation</vendor>
        <name>CycloneDX Maven plugin</name>
        <version>2.7.9</version>
        <hashes>
          <hash alg="MD5">8e595cdb67f17e4b41e046456970591d</hash>
          <hash alg="SHA-1">69e8ca804520d09ce4657e7235bae84d01cbffa6</hash>
          <hash alg="SHA-256">aa09074fe5aa403c008cd4fc7ef8ce41cd244489337f16b3e91a3914158a4db8</hash>
          <hash alg="SHA-512">1488a8112da8e675813d7585f57c5efb178aed32901118186ee12d0e4ae3d19c53774c7f860bf70d17d70f050119b69443a2637cf641675b4b5d9cdcdd69b89b</hash>
          <hash alg="SHA-384">b097295dfbf10887abc6eec58d4d0822cde5a73d1f5c1cf183a57bf569016ad5ced9d34efae3e574d82bb62837540c6c</hash>
          <hash alg="SHA3-384">289f9520bd73a2031276248a6ef8f0891c691062c2d1ea86a2bc9ea8db2c52377d92a53be9957179e71aee3deda26a8c</hash>
          <hash alg="SHA3-256">32b50a7efe5d491a4039c0017eca3cf49d98b55fc66d06b3dd06209487323474</hash>
          <hash alg="SHA3-512">1daf813da53e5d5cda4d0302ff3a5e388aa45d96ebe6dcbe240f35d33f14b1e6390f6bbe7f21f3ed8cf96ebd9f5516a08b18487b7339715109c81cebfc1563df</hash>
        </hashes>
      </tool>
    </tools>
    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-jcs3-jcache-extras@3.2.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.commons</group>
      <name>commons-jcs3-jcache-extras</name>
      <version>3.2.1</version>
      <description>Apache Commons JCS is a distributed, versatile caching system.</description>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.commons/commons-jcs3-jcache-extras@3.2.1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://commons.apache.org/proper/commons-jcs/commons-jcs3-jcache-extras/</url></reference><reference type="build-system"><url>https://github.com/apache/commons-parent/actions</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/JCS</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/jakarta-jcs-users/</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=commons-jcs.git</url></reference></externalReferences>
    </component>
    <properties>
      <property name="maven.goal">makeBom</property>
      <property name="maven.scopes">compile,provided,runtime,system</property>
      <property name="maven.reproducible">enabled</property>
    </properties>
  </metadata>
  <components>
    <component type="library" bom-ref="pkg:maven/org.apache.geronimo.specs/geronimo-jcache_1.0_spec@1.0-alpha-1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.geronimo.specs</group>
      <name>geronimo-jcache_1.0_spec</name>
      <version>1.0-alpha-1</version>
      <description>Apache Geronimo implementation of the JSR-107</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">4bd6a8a41e2c31feda43e39604e514dd</hash>
        <hash alg="SHA-1">ef92fbbc3a3a7f45bf021bcb75df2c6e0660dfac</hash>
        <hash alg="SHA-256">0070a12e58f491b95719391325299a6294530ee6c3ce25e50bdc98b0b700966c</hash>
        <hash alg="SHA-512">81cdb68a32b3bb4ba6df21d8c30f4f08c06d22d7a64a624b99b11d690ad32f4c2cff3de04b333603f400c2b153b56442f68dfe232a833f9a44631cf2c540b740</hash>
        <hash alg="SHA-384">909f581df62db98426656cb9e601e025cc310cd9775ad0119dae60ea5fad6ecd2682bf30961796bfa48b329993f8b396</hash>
        <hash alg="SHA3-384">284a9c6a7dee77c564468cf6dbf51342c5ec2f41ce496e3e2fa41647f145550544e3a1c8fbc8d7aa711d6eb4fb5d4012</hash>
        <hash alg="SHA3-256">6c70e67a8255b1a596971bc932e4310baa2ba68ddf8dda3ac3b1efcb3f67ca73</hash>
        <hash alg="SHA3-512">a6184e34f3d0648761a60e7b3cd386f61c8d51902964744857c425cc78eb0498e6b7d4130f31a88926cda4e0ed6bf20c574babf646f63d9a55124a2d35888260</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.geronimo.specs/geronimo-jcache_1.0_spec@1.0-alpha-1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://geronimo.apache.org/maven/specs/geronimo-jcache_1.0_spec/1.0-alpha-1</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/GERONIMO</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/geronimo-user</url></reference><reference type="vcs"><url>http://svn.apache.org/viewcvs.cgi/geronimo/specs/tags/geronimo-jcache_1.0_spec-1.0-alpha-1</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.geronimo.specs/geronimo-atinject_1.0_spec@1.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.geronimo.specs</group>
      <name>geronimo-atinject_1.0_spec</name>
      <version>1.1</version>
      <description>Apache Geronimo implementation of the JSR-330 Dependency Injection Spec API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">9ae0cb33a7140770a04975abe8eafec6</hash>
        <hash alg="SHA-1">edfcdc6495e7680284134499abdd6e40f6a5af6d</hash>
        <hash alg="SHA-256">da19ec8b549ea358ddd2770f93ceaae41b734d5d5ba51067d70efeabdcc142e9</hash>
        <hash alg="SHA-512">24e2161c73e8c50e1e246696e58fc28e65d541b81ba1011dcd34c008b65c544496d2ddead432c3bf5759760d4cc8cca9a4932eac1197f686a45133be4bcd427a</hash>
        <hash alg="SHA-384">e57a885277006a9cb0d4d440fe9196766ca9d7c8954670bed4d21b5c5bf988ae0dc5efcf0ab6539408f48a77e1bd3e70</hash>
        <hash alg="SHA3-384">94921c0e1b21f1c4d3bdc9ff19ec8b7d0334dfd1f59b2c6022ce72f086f52823dd8ce7095b561141440747cb463c39d6</hash>
        <hash alg="SHA3-256">c62619d0999e5f288b88374757d6f2c60031779399aedc94e4fc04e3b895b9ee</hash>
        <hash alg="SHA3-512">60b753d2baf4ecde1b7c9059e9ccf014f98e51f7616ccd991ba4a4a0dac1d12de3d1991d98f84915d8aebaa9ff29bcd414a9c532a4edccc4ee7ec59f0b60902b</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.geronimo.specs/geronimo-atinject_1.0_spec@1.1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://geronimo.apache.org/maven/genesis/1.1</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/GERONIMO</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/geronimo-user</url></reference><reference type="vcs"><url>http://svn.apache.org/viewcvs.cgi/geronimo/specs/tags/geronimo-atinject_1.0_spec-1.1</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.geronimo.specs/geronimo-jcdi_1.1_spec@1.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.geronimo.specs</group>
      <name>geronimo-jcdi_1.1_spec</name>
      <version>1.0</version>
      <description>Apache Geronimo implementation of the JSR-346 Context and Dependency Injection 1.1 &amp; 1.2 Specification</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">b917d0dd09c67d2af25e2c699b5a0352</hash>
        <hash alg="SHA-1">e6362b923c26fd3da32f725821b9d64134b220d6</hash>
        <hash alg="SHA-256">229fe3fdb567b2b0a6816e204d385cd313e75fd5fa52587b50c60928b11e4bd5</hash>
        <hash alg="SHA-512">0fbf7cb6b91078bf72ac4b3026b530ff457e23838dbe1253863c604045bce21481ed00cb53565e06764f8d93d7f058419a3b001de5a2b33fa966b7f33434404e</hash>
        <hash alg="SHA-384">118c7f69d01feb801ab94abebf714aa9a5871a84f135b15eeb36f627a817b8112297657eda5cf11220ee68b9a2e2428f</hash>
        <hash alg="SHA3-384">96dae285d8134fc3e9b13106de2b4b0ec760f31c1a725b8c95f18942d7b260de5fc3b35767170cb61fce037bac62e18d</hash>
        <hash alg="SHA3-256">d0753b08d1fec101a78bfadcfc81252ebc3cfd53d7a55198a0872007d7e269c3</hash>
        <hash alg="SHA3-512">8ada0dcde46eab3d4f6a57699b1137ce196f0f0eb8b1f0aeba8271b1c398eda2f905786582a31d5a86af3c476a6989f1b35192280c2cab5659cf163b955db074</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.geronimo.specs/geronimo-jcdi_1.1_spec@1.0?type=jar</purl>
      <externalReferences><reference type="website"><url>http://geronimo.apache.org/maven/specs/geronimo-jcdi_1.1_spec/1.0</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/GERONIMO</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/geronimo-user</url></reference><reference type="vcs"><url>http://svn.apache.org/viewcvs.cgi/geronimo/specs/tags/geronimo-jcdi_1.1_spec-1.0</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.geronimo.specs/geronimo-interceptor_1.2_spec@1.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.geronimo.specs</group>
      <name>geronimo-interceptor_1.2_spec</name>
      <version>1.1</version>
      <description>Interceptor API 1.2</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">c8abbf4bd9950885790511e886200e59</hash>
        <hash alg="SHA-1">c27b5f3d64787e287a495880a2fedd7b8eb6774f</hash>
        <hash alg="SHA-256">b8d95759c6faa1edc1c21fe00c8602d1c92299c5ca689011bbe576d8c72cc889</hash>
        <hash alg="SHA-512">c93713c22c3055562b12aca3e956eaba7cb26e27042d6d9706fbe03280abf5537cf9f035cda579ff532d4ec7cd02f63f89dc3175c42046b313951dbf386e458a</hash>
        <hash alg="SHA-384">12af40c1383ffd504d7e761a524a490fc7360cb851da925e9d4ea9920ee58c7e4220c5f084baff88f41b15f4abfe50d1</hash>
        <hash alg="SHA3-384">b239aaa2f01dcb72fcecfe0c7235c5ade2534d651ba40016e041b2a6f4938ab99c2d32371566f31e4fcd7424d16da421</hash>
        <hash alg="SHA3-256">d38e2752b208d46c4967100d918138fc55bb4da90a1c00e8fd8d64e2f97b5f72</hash>
        <hash alg="SHA3-512">ff134f67f6aa9b76feb1aade8e7bb893ad39eb6e7e25b12cd51f0e6e8966dc7f3f693602cb990aaf4af1b8c1403baf412f199b853fb55e18e4b4f90861269331</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.geronimo.specs/geronimo-interceptor_1.2_spec@1.1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://geronimo.apache.org/maven/specs/geronimo-interceptor_1.2_spec/1.1</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/GERONIMO</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/geronimo-user</url></reference><reference type="vcs"><url>http://svn.apache.org/viewcvs.cgi/geronimo/specs/tags/geronimo-interceptor_1.2_spec-1.1</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.geronimo.specs/geronimo-annotation_1.2_spec@1.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.geronimo.specs</group>
      <name>geronimo-annotation_1.2_spec</name>
      <version>1.0</version>
      <description>Annotation spec 1.2 API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">b2f9dc0810cd957672f88857b45a54d4</hash>
        <hash alg="SHA-1">25aaae4a0ec554b70d6d88110b23e49972193fc9</hash>
        <hash alg="SHA-256">7c38526e957023f57c740f4ccd1d5662a00fc0cb9e17982d4b15bf3f0b29813f</hash>
        <hash alg="SHA-512">bc8a89304db84fffedd00797e22c2d2a52fa74d17449f83443101868d094e3d75ea28abf310c6f527502b9a450474a306df3dc969cdbbe091602b560f40982be</hash>
        <hash alg="SHA-384">5e9ca4c1db0a79de3d3a6385180c291138cec90bd63504ff14b61d153b8cd2a53c48a2869dac13138b9c47b44869049f</hash>
        <hash alg="SHA3-384">cdb337f04eb63d3b70cf7cbf4a1293ff38532910c66f4945ee6a1bdbf51f22000650316e95431165d43ec998f4581804</hash>
        <hash alg="SHA3-256">648c043f1f913b4e8befc849d9c33b0283e6e8007427785f636ceaed69a487bf</hash>
        <hash alg="SHA3-512">28983cd0ffef3d11aae7c04357422b90ced444a0d5a165d22ec376a8ecd6bbc3048da0f5a11503e84683c3253c6df62d63487f59589c2826b1d7316e07a176e6</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.geronimo.specs/geronimo-annotation_1.2_spec@1.0?type=jar</purl>
      <externalReferences><reference type="website"><url>http://geronimo.apache.org/maven/specs/geronimo-annotation_1.2_spec/1.0</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/GERONIMO</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/geronimo-user</url></reference><reference type="vcs"><url>http://svn.apache.org/viewcvs.cgi/geronimo/specs/tags/geronimo-annotation_1.2_spec-1.0</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.geronimo.specs/geronimo-servlet_3.0_spec@1.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.geronimo.specs</group>
      <name>geronimo-servlet_3.0_spec</name>
      <version>1.0</version>
      <description>Servlet 3.0 API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">10d92f2ddb23703f0f48d046016e3e9d</hash>
        <hash alg="SHA-1">0d45e479fd200236c71182c5f6b6077a5fb53f89</hash>
        <hash alg="SHA-256">70dc82f7e36bdbdb7719e6d8798ecbdfa2d61e0b2617cf7a05b72fe3e12fd9bf</hash>
        <hash alg="SHA-512">4d8bfde7b3b60f8ec977ac81f419eb3ff2b6379f4f8a336b6da048003c740f46c59fb2ff89fd1341be62fd9f445114640b586808c2ddf1422a66318e301a05dd</hash>
        <hash alg="SHA-384">22187a972c7185b1d856776ef128f103941d114547bdc2b826c6ddde7811d036edeaa67c3d2892de4968458b978416c6</hash>
        <hash alg="SHA3-384">73a30eb124ba7a0c0a004917033e54429fc642282d2f2b9f564c5f2ba209a64ef328b1cdabae7f64a91e3e9085d71d76</hash>
        <hash alg="SHA3-256">894a3500d1274affecb48dca665fbf86a6e8b3134ddfa530eb0aa79c44e2c8ff</hash>
        <hash alg="SHA3-512">6959824cb995dea0f894413cd046574cc15f69e4598a886d7527d22198fdabc67206f6bfe562ad0c8a786e621839f5a9dc1d04ca91d5d50501b6f660fea802bd</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.geronimo.specs/geronimo-servlet_3.0_spec@1.0?type=jar</purl>
      <externalReferences><reference type="website"><url>http://geronimo.apache.org/maven/specs/geronimo-servlet_3.0_spec/1.0</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/GERONIMO</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/geronimo-user</url></reference><reference type="vcs"><url>http://svn.apache.org/viewcvs.cgi/geronimo/specs/tags/geronimo-servlet_3.0_spec-1.0</url></reference></externalReferences>
    </component>
  </components>
  <dependencies>
    <dependency ref="pkg:maven/org.apache.commons/commons-jcs3-jcache-extras@3.2.1?type=jar">
      <dependency ref="pkg:maven/org.apache.geronimo.specs/geronimo-jcache_1.0_spec@1.0-alpha-1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.geronimo.specs/geronimo-atinject_1.0_spec@1.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.geronimo.specs/geronimo-jcdi_1.1_spec@1.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.geronimo.specs/geronimo-interceptor_1.2_spec@1.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.geronimo.specs/geronimo-annotation_1.2_spec@1.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.geronimo.specs/geronimo-servlet_3.0_spec@1.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.geronimo.specs/geronimo-jcache_1.0_spec@1.0-alpha-1?type=jar"/>
    <dependency ref="pkg:maven/org.apache.geronimo.specs/geronimo-atinject_1.0_spec@1.1?type=jar"/>
    <dependency ref="pkg:maven/org.apache.geronimo.specs/geronimo-jcdi_1.1_spec@1.0?type=jar"/>
    <dependency ref="pkg:maven/org.apache.geronimo.specs/geronimo-interceptor_1.2_spec@1.1?type=jar"/>
    <dependency ref="pkg:maven/org.apache.geronimo.specs/geronimo-annotation_1.2_spec@1.0?type=jar"/>
    <dependency ref="pkg:maven/org.apache.geronimo.specs/geronimo-servlet_3.0_spec@1.0?type=jar"/>
  </dependencies>
</bom>
