<?xml version="1.0" encoding="UTF-8"?>
<bom serialNumber="urn:uuid:d9f3aea8-b37b-4518-aeb4-aa19fab71a34" version="1" xmlns="http://cyclonedx.org/schema/bom/1.4">
  <metadata>
    <timestamp>2023-03-17T10:15:37Z</timestamp>
    <tools>
      <tool>
        <vendor>OWASP Foundation</vendor>
        <name>CycloneDX Maven plugin</name>
        <version>2.7.3</version>
        <hashes>
          <hash alg="MD5">ab886f1cb1a79b4244ac54dde22a0989</hash>
          <hash alg="SHA-1">9ed658496dfeef87fe6072b95c62ec37165cc741</hash>
          <hash alg="SHA-256">df9b43417bef6aeac86a393abcc1ac2ed0518239ba544aaeb595b9619c603503</hash>
          <hash alg="SHA-512">223da34bb51c5339e0f7285757608c1a56b1ea887f7ad835af9299fabacc693053163da74af352af86b16e18e04db730bd44214eda04291410c42b6ae657d85c</hash>
          <hash alg="SHA-384">3aaf057329ed0f90ec3a49a45b3cf4ec5ce637fd75d6202e9483fa4274cec3e7b74308016e146b6ba087df5fce9397bb</hash>
        </hashes>
      </tool>
    </tools>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-metrics-graphite@1.17.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-metrics-graphite</name>
      <version>1.17.0</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-metrics-graphite@1.17.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://www.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink/flink-metrics/flink-metrics-graphite</url></reference></externalReferences>
    </component>
  </metadata>
  <components>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-annotations@1.17.0?type=jar">
      <group>org.apache.flink</group>
      <name>flink-annotations</name>
      <version>1.17.0</version>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">8722229171d763f57b027d0a2d2be7aa</hash>
        <hash alg="SHA-1">6a627ba30bf3e3be766f440695d4b5e5a5dcb4e9</hash>
        <hash alg="SHA-256">ca9f02d09d74d40196ffcd706030fde626e5aa4611e6dfaee1ff3d0ea343ebff</hash>
        <hash alg="SHA-512">5789077b29a903e3b879dc713388f9b0fb35ae0034bf53318f34c05302fbabc3a9fecbed67280aeb547cb8674650e71963909e596f073b13867418e00a37e33c</hash>
        <hash alg="SHA-384">197d6829888940ced6cbcfc8e7fdb822486fc60c5d393a7e278aad6ef42be3b9a050826e33e782d8cfbb1fc18a9db0b3</hash>
      </hashes>
      <licenses/>
      <purl>pkg:maven/org.apache.flink/flink-annotations@1.17.0?type=jar</purl>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-metrics-core@1.17.0?type=jar">
      <group>org.apache.flink</group>
      <name>flink-metrics-core</name>
      <version>1.17.0</version>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">1ed9920da68ac343424f40cf4a6b824f</hash>
        <hash alg="SHA-1">666fb09d3ad2098625aa4f2efc4ce24754abeed7</hash>
        <hash alg="SHA-256">ecb1164a32f0ff87db9c42f96aef8281b66a78a42e1f7ee2500a8255ebf4110f</hash>
        <hash alg="SHA-512">4fec1b5d13a7666f6ce73feaa7ea677c1ac110aeeb54ea2b0d39675098d920d8a8df8ecd253e38d9e1f24d09c6344a4cd3591433e4e06be861ba411f14c93529</hash>
        <hash alg="SHA-384">6233b45a5fddef0569b01ee891bec76d49ded5697d210d05a14c18e5c4166add2bf3b1d60f4fba0188cfa448c6e0333d</hash>
      </hashes>
      <licenses/>
      <purl>pkg:maven/org.apache.flink/flink-metrics-core@1.17.0?type=jar</purl>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-metrics-dropwizard@1.17.0?type=jar">
      <group>org.apache.flink</group>
      <name>flink-metrics-dropwizard</name>
      <version>1.17.0</version>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">1650845d4fcaa47e03521db16029b071</hash>
        <hash alg="SHA-1">8fd00acd38185e015ac3c309cb82ec6cf8d9eb23</hash>
        <hash alg="SHA-256">8121a7087fb6e5930c0d0720982f6d804a9b3faed07cbe18618e27602c5fc40b</hash>
        <hash alg="SHA-512">221d599a4e532bba8cea729f2cecee518036201ed651d52d38621da4ab74ba7e6e67d1b91dcbc8d52dd498c72835a0faf4020989503a4d46191ad02036ac7722</hash>
        <hash alg="SHA-384">dac4409aa263b1dd4098d598a21d8d0977eabf220b4f8fe1d1c8e69cc6616e6d4075d19da4b33d0ad4395bc8ad771193</hash>
      </hashes>
      <licenses/>
      <purl>pkg:maven/org.apache.flink/flink-metrics-dropwizard@1.17.0?type=jar</purl>
    </component>
    <component type="library" bom-ref="pkg:maven/io.dropwizard.metrics/metrics-core@3.2.6?type=jar">
      <group>io.dropwizard.metrics</group>
      <name>metrics-core</name>
      <version>3.2.6</version>
      <description>Metrics is a Java library which gives you unparalleled insight into what your code does in
        production. Metrics provides a powerful toolkit of ways to measure the behavior of critical
        components in your production environment.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">641716ee081aeaa016415019c74fb447</hash>
        <hash alg="SHA-1">62fe170cffeded1cef60e9e3402a93b45ce14327</hash>
        <hash alg="SHA-256">891174c5230476e1950a286169672002978562ebdf5c85f0199ecae1bd030f9f</hash>
        <hash alg="SHA-512">91b170d541e2da3cf2482e795422b8c0c2890e87823feed2d9e16ea22ccf61ec1cc759d974f66e987f884f699551997574fb6c26f377c1136d930bc10778e74c</hash>
        <hash alg="SHA-384">47d7ba837dccb5596cbbce45c4514dc53c74ee9e0751954524bd437350574d375cb96a66a1175aae52296f58c401b142</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/io.dropwizard.metrics/metrics-core@3.2.6?type=jar</purl>
      <externalReferences><reference type="distribution"><url>http://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>http://github.com/dropwizard/metrics/issues#issue/</url></reference><reference type="vcs"><url>http://github.com/dropwizard/metrics/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.dropwizard.metrics/metrics-graphite@3.2.6?type=jar">
      <group>io.dropwizard.metrics</group>
      <name>metrics-graphite</name>
      <version>3.2.6</version>
      <description>A reporter for Metrics which announces measurements to a Graphite server.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">b11ba36a127846789cce9d847bba4094</hash>
        <hash alg="SHA-1">ecbc470e9097bb3d7ff0232cca47f3badde2e20b</hash>
        <hash alg="SHA-256">8c16d0546e8fc5ee7c149ce4e75bf6080d846d869d13130d9ade3b9b0df547ac</hash>
        <hash alg="SHA-512">2e4445b97fc6cd7cc6b0cd0974e80c857faa8556c53de6727778e6c5037585e0e7d459248e78927a6bd14ed3acc2f965419a1519dca777e8bbe8d71aa7375d6b</hash>
        <hash alg="SHA-384">8ec3a5866ef2ee679320ceda36d9b9a4f0a0442a0f51c25c92e36544f61c435d918c373a9c22ac0a8e21f48cf526f482</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/io.dropwizard.metrics/metrics-graphite@3.2.6?type=jar</purl>
      <externalReferences><reference type="distribution"><url>http://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>http://github.com/dropwizard/metrics/issues#issue/</url></reference><reference type="vcs"><url>http://github.com/dropwizard/metrics/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar">
      <publisher>QOS.ch</publisher>
      <group>org.slf4j</group>
      <name>slf4j-api</name>
      <version>1.7.36</version>
      <description>The slf4j API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">872da51f5de7f3923da4de871d57fd85</hash>
        <hash alg="SHA-1">6c62681a2f655b49963a5983b8b0950a6120ae14</hash>
        <hash alg="SHA-256">d3ef575e3e4979678dc01bf1dcce51021493b4d11fb7f1be8ad982877c16a1c0</hash>
        <hash alg="SHA-512">f9b033fc019a44f98b16048da7e2b59edd4a6a527ba60e358f65ab88e0afae03a9340f1b3e8a543d49fa542290f499c5594259affa1ff3e6e7bf3b428d4c610b</hash>
        <hash alg="SHA-384">2b14ad035877087157e379d3277dcdcd79e58d6bdb147c47d29e377d75ce53ad42cafbf22f5fb7827c7e946ff4876b9a</hash>
      </hashes>
      <licenses>
        <license>
          <id>MIT</id>
          <url>https://opensource.org/licenses/MIT</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.qos.ch</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/qos-ch/slf4j</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar">
      <group>com.google.code.findbugs</group>
      <name>jsr305</name>
      <version>1.3.9</version>
      <description>JSR305 Annotations for Findbugs</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">1d5a772e400b04bb67a7ef4a0e0996d8</hash>
        <hash alg="SHA-1">40719ea6961c0cb6afaeb6a921eaa1f6afd4cfdf</hash>
        <hash alg="SHA-256">905721a0eea90a81534abb7ee6ef4ea2e5e645fa1def0a5cd88402df1b46c9ed</hash>
        <hash alg="SHA-512">06da282cfd8e30d9f8cf17702b8709172b00e22b75a627a1d85f8989615b8a1a401bc25d9aee7b14aed1d9b5df73bf2ea8d66f9c8468d9577c29f0ccfa2cc70a</hash>
        <hash alg="SHA-384">56e6b41ef62eb5edfed0203802cefae9c2df86388148e420bb0c687abb2b80e14d5c2a82d5b35dce4badaf148f94eada</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar</purl>
      <externalReferences><reference type="vcs"><url>http://findbugs.googlecode.com/svn/trunk/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-shaded-force-shading@16.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-shaded-force-shading</name>
      <version>16.1</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">0f703324b629fbc0d0cbf22375515477</hash>
        <hash alg="SHA-1">5040816ebca54b5bb4d5bb98b741ff77da59505b</hash>
        <hash alg="SHA-256">44ab80c42c380bc813bbf477256a4f4334e44088c8fb1b34d3c867733e54c664</hash>
        <hash alg="SHA-512">bf56dc058175101f58f2abfb3307349e9e911743f118c9309e0b8d3860f164c2c88b5fa1113e2270c1533bf37dc8102f1482099f11bdaa5acf316b7a9808093b</hash>
        <hash alg="SHA-384">3b7c079f14bfeb02219e4430fa2bbe66e9000596116c5247f98e0b0852bd59877559358704c8be7d18c0fbed1fff0880</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-shaded-force-shading@16.1?type=jar</purl>
      <externalReferences><reference type="vcs"><url>https://github.com/apache/flink-shaded</url></reference><reference type="website"><url>https://www.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference></externalReferences>
    </component>
  </components>
  <dependencies>
    <dependency ref="pkg:maven/org.apache.flink/flink-metrics-graphite@1.17.0?type=jar">
      <dependency ref="pkg:maven/org.apache.flink/flink-annotations@1.17.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-metrics-core@1.17.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-metrics-dropwizard@1.17.0?type=jar"/>
      <dependency ref="pkg:maven/io.dropwizard.metrics/metrics-core@3.2.6?type=jar"/>
      <dependency ref="pkg:maven/io.dropwizard.metrics/metrics-graphite@3.2.6?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-force-shading@16.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.flink/flink-annotations@1.17.0?type=jar">
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-force-shading@16.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"/>
    <dependency ref="pkg:maven/org.apache.flink/flink-shaded-force-shading@16.1?type=jar"/>
    <dependency ref="pkg:maven/org.apache.flink/flink-metrics-core@1.17.0?type=jar">
      <dependency ref="pkg:maven/org.apache.flink/flink-annotations@1.17.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-force-shading@16.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.flink/flink-metrics-dropwizard@1.17.0?type=jar">
      <dependency ref="pkg:maven/io.dropwizard.metrics/metrics-core@3.2.6?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-force-shading@16.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/io.dropwizard.metrics/metrics-core@3.2.6?type=jar">
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/io.dropwizard.metrics/metrics-graphite@3.2.6?type=jar">
      <dependency ref="pkg:maven/io.dropwizard.metrics/metrics-core@3.2.6?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
  </dependencies>
</bom>
