<?xml version="1.0" encoding="UTF-8"?>
<bom version="1" xmlns="http://cyclonedx.org/schema/bom/1.4">
  <metadata>
    <tools>
      <tool>
        <vendor>OWASP Foundation</vendor>
        <name>CycloneDX Maven plugin</name>
        <version>2.7.9</version>
        <hashes>
          <hash alg="MD5">8e595cdb67f17e4b41e046456970591d</hash>
          <hash alg="SHA-1">69e8ca804520d09ce4657e7235bae84d01cbffa6</hash>
          <hash alg="SHA-256">aa09074fe5aa403c008cd4fc7ef8ce41cd244489337f16b3e91a3914158a4db8</hash>
          <hash alg="SHA-512">1488a8112da8e675813d7585f57c5efb178aed32901118186ee12d0e4ae3d19c53774c7f860bf70d17d70f050119b69443a2637cf641675b4b5d9cdcdd69b89b</hash>
          <hash alg="SHA-384">b097295dfbf10887abc6eec58d4d0822cde5a73d1f5c1cf183a57bf569016ad5ced9d34efae3e574d82bb62837540c6c</hash>
        </hashes>
      </tool>
    </tools>
    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-jcs3-jcache@3.2?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.commons</group>
      <name>commons-jcs3-jcache</name>
      <version>3.2</version>
      <description>Apache Commons JCS is a distributed, versatile caching system.</description>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.commons/commons-jcs3-jcache@3.2?type=jar</purl>
      <externalReferences><reference type="website"><url>http://commons.apache.org/proper/commons-jcs/commons-jcs3-jcache/</url></reference><reference type="build-system"><url>https://github.com/apache/commons-parent/actions</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/JCS</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/jakarta-jcs-users/</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=commons-jcs.git</url></reference></externalReferences>
    </component>
    <properties>
      <property name="maven.goal">makeBom</property>
      <property name="maven.scopes">compile,provided,runtime,system</property>
      <property name="maven.reproducible">enabled</property>
    </properties>
  </metadata>
  <components>
    <component type="library" bom-ref="pkg:maven/org.apache.geronimo.specs/geronimo-jcache_1.0_spec@1.0-alpha-1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.geronimo.specs</group>
      <name>geronimo-jcache_1.0_spec</name>
      <version>1.0-alpha-1</version>
      <description>Apache Geronimo implementation of the JSR-107</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">4bd6a8a41e2c31feda43e39604e514dd</hash>
        <hash alg="SHA-1">ef92fbbc3a3a7f45bf021bcb75df2c6e0660dfac</hash>
        <hash alg="SHA-256">0070a12e58f491b95719391325299a6294530ee6c3ce25e50bdc98b0b700966c</hash>
        <hash alg="SHA-512">81cdb68a32b3bb4ba6df21d8c30f4f08c06d22d7a64a624b99b11d690ad32f4c2cff3de04b333603f400c2b153b56442f68dfe232a833f9a44631cf2c540b740</hash>
        <hash alg="SHA-384">909f581df62db98426656cb9e601e025cc310cd9775ad0119dae60ea5fad6ecd2682bf30961796bfa48b329993f8b396</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.geronimo.specs/geronimo-jcache_1.0_spec@1.0-alpha-1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://geronimo.apache.org/maven/specs/geronimo-jcache_1.0_spec/1.0-alpha-1</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/GERONIMO</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/geronimo-user</url></reference><reference type="vcs"><url>http://svn.apache.org/viewcvs.cgi/geronimo/specs/tags/geronimo-jcache_1.0_spec-1.0-alpha-1</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.geronimo.specs/geronimo-atinject_1.0_spec@1.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.geronimo.specs</group>
      <name>geronimo-atinject_1.0_spec</name>
      <version>1.1</version>
      <description>Apache Geronimo implementation of the JSR-330 Dependency Injection Spec API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">9ae0cb33a7140770a04975abe8eafec6</hash>
        <hash alg="SHA-1">edfcdc6495e7680284134499abdd6e40f6a5af6d</hash>
        <hash alg="SHA-256">da19ec8b549ea358ddd2770f93ceaae41b734d5d5ba51067d70efeabdcc142e9</hash>
        <hash alg="SHA-512">24e2161c73e8c50e1e246696e58fc28e65d541b81ba1011dcd34c008b65c544496d2ddead432c3bf5759760d4cc8cca9a4932eac1197f686a45133be4bcd427a</hash>
        <hash alg="SHA-384">e57a885277006a9cb0d4d440fe9196766ca9d7c8954670bed4d21b5c5bf988ae0dc5efcf0ab6539408f48a77e1bd3e70</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.geronimo.specs/geronimo-atinject_1.0_spec@1.1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://geronimo.apache.org/maven/genesis/1.1</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/GERONIMO</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/geronimo-user</url></reference><reference type="vcs"><url>http://svn.apache.org/viewcvs.cgi/geronimo/specs/tags/geronimo-atinject_1.0_spec-1.1</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.geronimo.specs/geronimo-jcdi_1.1_spec@1.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.geronimo.specs</group>
      <name>geronimo-jcdi_1.1_spec</name>
      <version>1.0</version>
      <description>Apache Geronimo implementation of the JSR-346 Context and Dependency Injection 1.1 &amp; 1.2 Specification</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">b917d0dd09c67d2af25e2c699b5a0352</hash>
        <hash alg="SHA-1">e6362b923c26fd3da32f725821b9d64134b220d6</hash>
        <hash alg="SHA-256">229fe3fdb567b2b0a6816e204d385cd313e75fd5fa52587b50c60928b11e4bd5</hash>
        <hash alg="SHA-512">0fbf7cb6b91078bf72ac4b3026b530ff457e23838dbe1253863c604045bce21481ed00cb53565e06764f8d93d7f058419a3b001de5a2b33fa966b7f33434404e</hash>
        <hash alg="SHA-384">118c7f69d01feb801ab94abebf714aa9a5871a84f135b15eeb36f627a817b8112297657eda5cf11220ee68b9a2e2428f</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.geronimo.specs/geronimo-jcdi_1.1_spec@1.0?type=jar</purl>
      <externalReferences><reference type="website"><url>http://geronimo.apache.org/maven/specs/geronimo-jcdi_1.1_spec/1.0</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/GERONIMO</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/geronimo-user</url></reference><reference type="vcs"><url>http://svn.apache.org/viewcvs.cgi/geronimo/specs/tags/geronimo-jcdi_1.1_spec-1.0</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.geronimo.specs/geronimo-interceptor_1.2_spec@1.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.geronimo.specs</group>
      <name>geronimo-interceptor_1.2_spec</name>
      <version>1.1</version>
      <description>Interceptor API 1.2</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">c8abbf4bd9950885790511e886200e59</hash>
        <hash alg="SHA-1">c27b5f3d64787e287a495880a2fedd7b8eb6774f</hash>
        <hash alg="SHA-256">b8d95759c6faa1edc1c21fe00c8602d1c92299c5ca689011bbe576d8c72cc889</hash>
        <hash alg="SHA-512">c93713c22c3055562b12aca3e956eaba7cb26e27042d6d9706fbe03280abf5537cf9f035cda579ff532d4ec7cd02f63f89dc3175c42046b313951dbf386e458a</hash>
        <hash alg="SHA-384">12af40c1383ffd504d7e761a524a490fc7360cb851da925e9d4ea9920ee58c7e4220c5f084baff88f41b15f4abfe50d1</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.geronimo.specs/geronimo-interceptor_1.2_spec@1.1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://geronimo.apache.org/maven/specs/geronimo-interceptor_1.2_spec/1.1</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/GERONIMO</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/geronimo-user</url></reference><reference type="vcs"><url>http://svn.apache.org/viewcvs.cgi/geronimo/specs/tags/geronimo-interceptor_1.2_spec-1.1</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.geronimo.specs/geronimo-annotation_1.2_spec@1.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.geronimo.specs</group>
      <name>geronimo-annotation_1.2_spec</name>
      <version>1.0</version>
      <description>Annotation spec 1.2 API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">b2f9dc0810cd957672f88857b45a54d4</hash>
        <hash alg="SHA-1">25aaae4a0ec554b70d6d88110b23e49972193fc9</hash>
        <hash alg="SHA-256">7c38526e957023f57c740f4ccd1d5662a00fc0cb9e17982d4b15bf3f0b29813f</hash>
        <hash alg="SHA-512">bc8a89304db84fffedd00797e22c2d2a52fa74d17449f83443101868d094e3d75ea28abf310c6f527502b9a450474a306df3dc969cdbbe091602b560f40982be</hash>
        <hash alg="SHA-384">5e9ca4c1db0a79de3d3a6385180c291138cec90bd63504ff14b61d153b8cd2a53c48a2869dac13138b9c47b44869049f</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.geronimo.specs/geronimo-annotation_1.2_spec@1.0?type=jar</purl>
      <externalReferences><reference type="website"><url>http://geronimo.apache.org/maven/specs/geronimo-annotation_1.2_spec/1.0</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/GERONIMO</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/geronimo-user</url></reference><reference type="vcs"><url>http://svn.apache.org/viewcvs.cgi/geronimo/specs/tags/geronimo-annotation_1.2_spec-1.0</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-jcs3-core@3.2?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.commons</group>
      <name>commons-jcs3-core</name>
      <version>3.2</version>
      <description>Apache Commons JCS is a distributed, versatile caching system.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">7724af7d1a5a85336ec10841962faebb</hash>
        <hash alg="SHA-1">b0fb7d549ab353e14fb20afb699e0b544b40ea2d</hash>
        <hash alg="SHA-256">747f3df6d92c45d6409dd9d54f4f2898ecaf1a48295c38f876c75429ab11c730</hash>
        <hash alg="SHA-512">d0cb062661dd869a6ccb3ca74c48bfbae6004a8441d34fd0fba5db751e6366851a181f7c332332141d247edabef66b0ae347070037db2ef4b4ffadc2abb5ea4f</hash>
        <hash alg="SHA-384">531abaa0a0abdc71983eff75b63778855d9e0a24effdeb682b9f7acf789c558fa6ab0a72a3b4828f0e35a9f39ac1ac33</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.commons/commons-jcs3-core@3.2?type=jar</purl>
      <externalReferences><reference type="website"><url>http://commons.apache.org/proper/commons-jcs/commons-jcs3-core/</url></reference><reference type="build-system"><url>https://github.com/apache/commons-parent/actions</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/JCS</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/jakarta-jcs-users/</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=commons-jcs.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.commons</group>
      <name>commons-text</name>
      <version>1.10.0</version>
      <description>Apache Commons Text is a library focused on algorithms working on strings.</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">4afc9bfa2d31dbf7330c98fcc954b892</hash>
        <hash alg="SHA-1">3363381aef8cef2dbc1023b3e3a9433b08b64e01</hash>
        <hash alg="SHA-256">770cd903fa7b604d1f7ef7ba17f84108667294b2b478be8ed1af3bffb4ae0018</hash>
        <hash alg="SHA-512">afd836a1094449e0a791fee67363666c47b6d24acff353a5089b837b332c0f4af89565c354682521e37062d20e6b52d70c77bb4f24cca9b9532c274fc708a831</hash>
        <hash alg="SHA-384">06c56e6e513dd77cf10d0da46cdea08c34e220e81fa024735b668c6650df4234e564fe865ff5cafea963f56b1e8ffd4a</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://commons.apache.org/proper/commons-text</url></reference><reference type="build-system"><url>https://github.com/apache/commons-parent/actions</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/TEXT</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=commons-text.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.commons</group>
      <name>commons-lang3</name>
      <version>3.12.0</version>
      <description>Apache Commons Lang, a package of Java utility classes for the
  classes that are in java.lang's hierarchy, or are considered to be so
  standard as to justify existence in java.lang.</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">19fe50567358922bdad277959ea69545</hash>
        <hash alg="SHA-1">c6842c86792ff03b9f1d1fe2aab8dc23aa6c6f0e</hash>
        <hash alg="SHA-256">d919d904486c037f8d193412da0c92e22a9fa24230b9d67a57855c5c31c7e94e</hash>
        <hash alg="SHA-512">fbdbc0943cb3498b0148e86a39b773f97c8e6013740f72dbc727faeabea402073e2cc8c4d68198e5fc6b08a13b7700236292e99d4785f2c9989f2e5fac11fd81</hash>
        <hash alg="SHA-384">c34b8a0e0eba2168ad56fedeb7a1d710b6f1d3f1ce6aae99a4e0247bd120efbbadc8dcb2f731045b8a16e3efd30604dc</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://commons.apache.org/proper/commons-lang/</url></reference><reference type="build-system"><url>https://builds.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/LANG</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=commons-lang.git</url></reference></externalReferences>
    </component>
  </components>
  <dependencies>
    <dependency ref="pkg:maven/org.apache.commons/commons-jcs3-jcache@3.2?type=jar">
      <dependency ref="pkg:maven/org.apache.geronimo.specs/geronimo-jcache_1.0_spec@1.0-alpha-1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.geronimo.specs/geronimo-atinject_1.0_spec@1.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.geronimo.specs/geronimo-jcdi_1.1_spec@1.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.geronimo.specs/geronimo-interceptor_1.2_spec@1.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.geronimo.specs/geronimo-annotation_1.2_spec@1.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-jcs3-core@3.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.geronimo.specs/geronimo-jcache_1.0_spec@1.0-alpha-1?type=jar"/>
    <dependency ref="pkg:maven/org.apache.geronimo.specs/geronimo-atinject_1.0_spec@1.1?type=jar"/>
    <dependency ref="pkg:maven/org.apache.geronimo.specs/geronimo-jcdi_1.1_spec@1.0?type=jar"/>
    <dependency ref="pkg:maven/org.apache.geronimo.specs/geronimo-interceptor_1.2_spec@1.1?type=jar"/>
    <dependency ref="pkg:maven/org.apache.geronimo.specs/geronimo-annotation_1.2_spec@1.0?type=jar"/>
    <dependency ref="pkg:maven/org.apache.commons/commons-jcs3-core@3.2?type=jar"/>
    <dependency ref="pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar">
      <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar"/>
  </dependencies>
</bom>
