<?xml version="1.0" encoding="UTF-8"?>
<bom serialNumber="urn:uuid:13f9d4fc-dced-4733-8e7b-b83e1b8ab8dd" version="1" xmlns="http://cyclonedx.org/schema/bom/1.4">
  <metadata>
    <timestamp>2023-11-10T08:52:17Z</timestamp>
    <tools>
      <tool>
        <vendor>OWASP Foundation</vendor>
        <name>CycloneDX Maven plugin</name>
        <version>2.7.7</version>
        <hashes>
          <hash alg="MD5">436dfb24c63a322708e4a5143d8543af</hash>
          <hash alg="SHA-1">3ef2e8728dc9eff2f129c34057e46e9d2b10629a</hash>
          <hash alg="SHA-256">c185b79bf0f9264f43bc8c222c44db67bea275bb727e3327cf9aea6bf45292c9</hash>
          <hash alg="SHA-512">41488733e31e6c5315327dcc86187c2b9a6b96cd08f7e2157ce130688afde29c313fc6a73edb8a76333a930c78874aa2eac874448920030c0f7af0ac05e65ced</hash>
          <hash alg="SHA-384">f9462f86240fd9fc0942f34981e6d2371f252aa1a4e5e8c3c14e7f0f1a4e4de69ef972e51cf09a749afb6d97c13e67ed</hash>
        </hashes>
      </tool>
    </tools>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-metrics-prometheus@1.17.2?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-metrics-prometheus</name>
      <version>1.17.2</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-metrics-prometheus@1.17.2?type=jar</purl>
      <externalReferences><reference type="website"><url>https://flink.apache.org/flink-metrics/flink-metrics-prometheus</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink/flink-metrics/flink-metrics-prometheus</url></reference></externalReferences>
    </component>
    <properties>
      <property name="maven.goal">makeBom</property>
      <property name="maven.scopes">compile,provided,runtime,system</property>
    </properties>
  </metadata>
  <components>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-annotations@1.17.2?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-annotations</name>
      <version>1.17.2</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">f8ed0841f83ec588919bf00362c2ea6f</hash>
        <hash alg="SHA-1">69d5ff7db0fe43cd011a35e12916be33cac777a3</hash>
        <hash alg="SHA-256">18c8045bffe7a54de2bc69466df69189896f40077e54cb6d69be2de37d4b7535</hash>
        <hash alg="SHA-512">db2b390ff76e015523a0cb602b32eafe5cfd79dfa0dd1d24fca1e1e89bf71c1bf34632a1495d9f7c4e17eb92a54bef0942c64c37a69c79d8e9f6d05b1f9bd810</hash>
        <hash alg="SHA-384">db5e3ad9310ba8021c5d01cc615e0caaca79181a3ce6721de1877c42ec81d12b05255538dde678fd07bdef0f175e7086</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-annotations@1.17.2?type=jar</purl>
      <externalReferences><reference type="website"><url>https://flink.apache.org/flink-annotations</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink/flink-annotations</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-core@1.17.2?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-core</name>
      <version>1.17.2</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">c2bd0d02b5ad67bf41f5ef47b89f2d2b</hash>
        <hash alg="SHA-1">98396f91b4bedabdea77a704cd23b80acfdf2ab6</hash>
        <hash alg="SHA-256">b49188eaf4ee582834c0d0d6f6dd3f93a4de305f4d5a429e06268db4bc3b25d1</hash>
        <hash alg="SHA-512">6e2093d4cb9c4be55d69d0ee4d5306dd6de596e48cfa4b23092d73e82301da6011305b1d61db3d99dd3f527d76ec3f788ac6af798a301f0646ac9ebde132e417</hash>
        <hash alg="SHA-384">3b29c58c6688a7ca6a4f4809fb112675a7e2da47a0842cef4a17b1f2786e46fee36cb5bac56ead9868b31f032f1fd49d</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-core@1.17.2?type=jar</purl>
      <externalReferences><reference type="website"><url>https://flink.apache.org/flink-core</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink/flink-core</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-shaded-asm-9@9.3-16.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-shaded-asm-9</name>
      <version>9.3-16.1</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <hashes>
        <hash alg="MD5">8ab02de7e3964cac3f5f49c2b299aaf8</hash>
        <hash alg="SHA-1">252941e7a5e6772647ec1c222bebd92eddea79f2</hash>
        <hash alg="SHA-256">bca08c293e85b88a3ee5a4b4367af319c396047e03257a4787370f15f39dce6d</hash>
        <hash alg="SHA-512">d712544a0f1c3d0d4db88045de14b014f23b745b6f98dae78a3656cb3b3d7418f91fda32f87d16f8a69c45b47abec57f8632ed6e7735136a79873ee272cb5a50</hash>
        <hash alg="SHA-384">4982ca611821a37c4f5828d3859fceff2ae35846bf1a7d3e61b652cc6fefb3ca1f242886bf637000af35bbef4f78a276</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-shaded-asm-9@9.3-16.1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://flink.apache.org/flink-shaded-asm-9</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink-shaded/flink-shaded-asm-9</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-shaded-jackson@2.13.4-16.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-shaded-jackson</name>
      <version>2.13.4-16.1</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <hashes>
        <hash alg="MD5">c26b24a1094f56a837610d5ea08ae0f6</hash>
        <hash alg="SHA-1">004e5fb57e10af9cd814258221c9f50c920e6c09</hash>
        <hash alg="SHA-256">601da81a8920228bfefc0a38229304340a6296a1f431522973bd2d7007f09d4e</hash>
        <hash alg="SHA-512">b2a66341cceb0dc75d1d1ccf4dcab69bef6289060b1688556443327b508b039d510298aea67dd1540122312db40d91dd86ad852f2afd0b087a479da340b580c2</hash>
        <hash alg="SHA-384">f9c750a59372ecbfd951b8ae5efef49110c060d43bde418bc723c5156bcf81b44f5a4c65fccbffa9642c978628dc9b00</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-shaded-jackson@2.13.4-16.1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://flink.apache.org/flink-shaded-jackson-parent/flink-shaded-jackson</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink-shaded/flink-shaded-jackson-parent/flink-shaded-jackson</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.commons</group>
      <name>commons-lang3</name>
      <version>3.12.0</version>
      <description>Apache Commons Lang, a package of Java utility classes for the
  classes that are in java.lang's hierarchy, or are considered to be so
  standard as to justify existence in java.lang.</description>
      <hashes>
        <hash alg="MD5">19fe50567358922bdad277959ea69545</hash>
        <hash alg="SHA-1">c6842c86792ff03b9f1d1fe2aab8dc23aa6c6f0e</hash>
        <hash alg="SHA-256">d919d904486c037f8d193412da0c92e22a9fa24230b9d67a57855c5c31c7e94e</hash>
        <hash alg="SHA-512">fbdbc0943cb3498b0148e86a39b773f97c8e6013740f72dbc727faeabea402073e2cc8c4d68198e5fc6b08a13b7700236292e99d4785f2c9989f2e5fac11fd81</hash>
        <hash alg="SHA-384">c34b8a0e0eba2168ad56fedeb7a1d710b6f1d3f1ce6aae99a4e0247bd120efbbadc8dcb2f731045b8a16e3efd30604dc</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://commons.apache.org/proper/commons-lang/</url></reference><reference type="build-system"><url>https://builds.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/LANG</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=commons-lang.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.commons</group>
      <name>commons-text</name>
      <version>1.10.0</version>
      <description>Apache Commons Text is a library focused on algorithms working on strings.</description>
      <hashes>
        <hash alg="MD5">4afc9bfa2d31dbf7330c98fcc954b892</hash>
        <hash alg="SHA-1">3363381aef8cef2dbc1023b3e3a9433b08b64e01</hash>
        <hash alg="SHA-256">770cd903fa7b604d1f7ef7ba17f84108667294b2b478be8ed1af3bffb4ae0018</hash>
        <hash alg="SHA-512">afd836a1094449e0a791fee67363666c47b6d24acff353a5089b837b332c0f4af89565c354682521e37062d20e6b52d70c77bb4f24cca9b9532c274fc708a831</hash>
        <hash alg="SHA-384">06c56e6e513dd77cf10d0da46cdea08c34e220e81fa024735b668c6650df4234e564fe865ff5cafea963f56b1e8ffd4a</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://commons.apache.org/proper/commons-text</url></reference><reference type="build-system"><url>https://github.com/apache/commons-parent/actions</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/TEXT</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=commons-text.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.esotericsoftware.kryo/kryo@2.24.0?type=jar">
      <group>com.esotericsoftware.kryo</group>
      <name>kryo</name>
      <version>2.24.0</version>
      <description>Fast, efficient Java serialization</description>
      <hashes>
        <hash alg="MD5">6cf0fa5b5d4f6b8226fd4a4bfb7532b8</hash>
        <hash alg="SHA-1">0c6b206e80cfd97e66a1364003724491c757b92f</hash>
        <hash alg="SHA-256">7e56b32c635058f9aa2820f88919ab702d029cbcd15285da9992e36cc0ae52f2</hash>
        <hash alg="SHA-512">a4c6ce768528a03c219cc6a41b22293f78e433c849c90391b64dda3f2376fd79951a89c5f4e6701bcbcb6eee9abffe2390cfb12dba3b885e4a3d411a26b78f40</hash>
        <hash alg="SHA-384">678ad1b7f4d99910b8ff44a6c8f78ccae91f823161ce23de39077397352919b7257e1e6e0dea90900be973291ea19282</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.esotericsoftware.kryo/kryo@2.24.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/EsotericSoftware/kryo</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/EsotericSoftware/kryo</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.esotericsoftware.minlog/minlog@1.2?type=jar">
      <group>com.esotericsoftware.minlog</group>
      <name>minlog</name>
      <version>1.2</version>
      <description>Minimal overhead Java logging</description>
      <hashes>
        <hash alg="MD5">f7cfbdf63b67df0bbfa4c7cb260885bc</hash>
        <hash alg="SHA-1">59bfcd171d82f9981a5e242b9e840191f650e209</hash>
        <hash alg="SHA-256">a678cb1aa8f5d03d901c992c75741841d98a9bc3d55dad02e84d65315c4e60f2</hash>
        <hash alg="SHA-512">7b4082766ad740d86708783f3b08780ed72dd18062aa9ba422c4b9016b332d2334ae511f50ef7d89e4eedbdac5cebc51ab6ddaf4d1eea857a3250eb5962f0d08</hash>
        <hash alg="SHA-384">932a282a9c06864001f8212199e4be05543609adbd985c5f4517ee6eba734acd3fd8812213bc0c98af264637cbf9c78d</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.esotericsoftware.minlog/minlog@1.2?type=jar</purl>
      <externalReferences><reference type="website"><url>http://code.google.com/p/minlog/</url></reference><reference type="vcs"><url>http://minlog.googlecode.com/svn/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-collections/commons-collections@3.2.2?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>commons-collections</group>
      <name>commons-collections</name>
      <version>3.2.2</version>
      <description>Types that extend and augment the Java Collections Framework.</description>
      <hashes>
        <hash alg="MD5">f54a8510f834a1a57166970bfc982e94</hash>
        <hash alg="SHA-1">8ad72fe39fa8c91eaaf12aadb21e0c3661fe26d5</hash>
        <hash alg="SHA-256">eeeae917917144a68a741d4c0dff66aa5c5c5fd85593ff217bced3fc8ca783b8</hash>
        <hash alg="SHA-512">51c72f9aca7726f3c387095e66be85a6df97c74b00a25434b89188c1b8eab6e2b55accf7b9bd412430d22bd09324dec076e300b3d1fa39fccad471f0f2a3da16</hash>
        <hash alg="SHA-384">dd4e99b3314bd3c1a1ee26296615d9e44dadf7a1f8a7bbba44fb95121803d331e36d4cca4260e7609af78a47ba3e4073</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/commons-collections/commons-collections@3.2.2?type=jar</purl>
      <externalReferences><reference type="website"><url>http://commons.apache.org/collections/</url></reference><reference type="build-system"><url>https://continuum-ci.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/COLLECTIONS</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>http://svn.apache.org/viewvc/commons/proper/collections/trunk</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-compress@1.21?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.commons</group>
      <name>commons-compress</name>
      <version>1.21</version>
      <description>Apache Commons Compress software defines an API for working with
compression and archive formats.  These include: bzip2, gzip, pack200,
lzma, xz, Snappy, traditional Unix Compress, DEFLATE, DEFLATE64, LZ4,
Brotli, Zstandard and ar, cpio, jar, tar, zip, dump, 7z, arj.</description>
      <hashes>
        <hash alg="MD5">2a713d10331bc4e13459a3dc0463f16f</hash>
        <hash alg="SHA-1">4ec95b60d4e86b5c95a0e919cb172a0af98011ef</hash>
        <hash alg="SHA-256">6aecfd5459728a595601cfa07258d131972ffc39b492eb48bdd596577a2f244a</hash>
        <hash alg="SHA-512">c92d9a12547aab475e057955ad815fdfe92ff44c78383fa5af54b089f1bff5525126ef6aef93334f3bfc22e2fef4ad0d969f69384e978a83a55f011a53e7e471</hash>
        <hash alg="SHA-384">da56f95d420cd7278cee646f4cd0e7a5ee12b6a2894efaec12f0ff7b56c3d43e5db736fe1ed66ff91118b16f2d64ebef</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.commons/commons-compress@1.21?type=jar</purl>
      <externalReferences><reference type="website"><url>https://commons.apache.org/proper/commons-compress/</url></reference><reference type="build-system"><url>https://builds.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/COMPRESS</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=commons-compress.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-shaded-guava@30.1.1-jre-16.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-shaded-guava</name>
      <version>30.1.1-jre-16.1</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <hashes>
        <hash alg="MD5">74bc641198b30c213cd9a2754297100d</hash>
        <hash alg="SHA-1">ad8725e964b6c2c0df16877f4132ad348c4ff09c</hash>
        <hash alg="SHA-256">d5ea841b0a51c7db4ecc48c96c0f334da40a9980645cf6d9e6e2b04b2441315c</hash>
        <hash alg="SHA-512">801c9fae8aaf7cec12f82e9d84b2e93648b4f7e58a4f240029db17b922c394ade14082e2022e3036bd33edaf1eb1bb0881570345270bb8820ab827efc9e42aea</hash>
        <hash alg="SHA-384">0b3aca631b15d8e5617952c2c18bed624e0f24b24ca7fb129c4ceb28c416e6e59d0acec3d7f624a7534fb2e9edfb83b6</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-shaded-guava@30.1.1-jre-16.1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://flink.apache.org/flink-shaded-guava</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink-shaded/flink-shaded-guava</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-metrics-core@1.17.2?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-metrics-core</name>
      <version>1.17.2</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">f90ba401c8eb49eecef636e50119727e</hash>
        <hash alg="SHA-1">3d7c4d258d2b1de143b133330cb766d34ebeceae</hash>
        <hash alg="SHA-256">c4ba9597415e204b162dd305f3ed71380fcea122f249eb724b90564db3db0854</hash>
        <hash alg="SHA-512">22e92b265f0523df4cc5b1cb3a5fb8187e6c8ca336f0306dfd40fee0ed3ce1c613b83c4e1a1b16e53992355d7f8d6cfc89486f3e5c50f335ec8dff0dd80ea7cb</hash>
        <hash alg="SHA-384">5ac27c9399ee7c4b08848112d08d2bcdea040af00dfa6ab48e49bfaa65ea11907a763ca68bb28274d99a2d0346b806d8</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-metrics-core@1.17.2?type=jar</purl>
      <externalReferences><reference type="website"><url>https://flink.apache.org/flink-metrics/flink-metrics-core</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink/flink-metrics/flink-metrics-core</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.prometheus/simpleclient@0.8.1?type=jar">
      <group>io.prometheus</group>
      <name>simpleclient</name>
      <version>0.8.1</version>
      <description>Core instrumentation library for the simpleclient.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">2b64368632d2b646056354c934da01df</hash>
        <hash alg="SHA-1">1c63c919896a6055507e87d9742f9158d6ecccf1</hash>
        <hash alg="SHA-256">83e82a52219ccce3946449bdfdcfa3556e172d542a6b4940ea36015afd6f8b33</hash>
        <hash alg="SHA-512">83c30d0626668404a68c89a4f2d38131d506f3cded6036e0974178f963528291c5802215295be7cfdc8dd54487926c1a66f876d49c9295ea4b1b993f20d80b40</hash>
        <hash alg="SHA-384">3c3ece026e740c9850070245a626fbbc78f6bdb5d66d57642f75f4ea7224dd26a869292bb17e07167ade4a13d82ae86b</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.prometheus/simpleclient@0.8.1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://github.com/prometheus/client_java/simpleclient</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.prometheus/simpleclient_httpserver@0.8.1?type=jar">
      <group>io.prometheus</group>
      <name>simpleclient_httpserver</name>
      <version>0.8.1</version>
      <description>Httpserver exposition for the simpleclient.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">655654dfb3b867c5b29b6dc5b523bb1b</hash>
        <hash alg="SHA-1">8ab8dc19291e14751db33654c0891935a2ad08b9</hash>
        <hash alg="SHA-256">bbc9cfe33e1b89d40590f9be8f5c1ad619a4970ad4c1ef54e886e293c505f567</hash>
        <hash alg="SHA-512">c36989bc923403f6db739420c421dbbcc68c84ad0c80cc0171dcc6552c97dde76deb7c2c269920211a949db2c9bd79d3a1ee068ddc48e462af273c9804430357</hash>
        <hash alg="SHA-384">9f580cdd14bdd4c354d145f02676f2fea8dd2faf701f6dd2a53c941f03e5a3a3a5ed2deec3782bed9dc804be84d98d8d</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.prometheus/simpleclient_httpserver@0.8.1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://github.com/prometheus/client_java/simpleclient_httpserver</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.prometheus/simpleclient_common@0.8.1?type=jar">
      <group>io.prometheus</group>
      <name>simpleclient_common</name>
      <version>0.8.1</version>
      <description>Common code used by various modules of the Simpleclient.</description>
      <hashes>
        <hash alg="MD5">3ee1a73e56df123a4c30552cc9e3177e</hash>
        <hash alg="SHA-1">51a4b2d2cb44e08ed4e79fbac80baa4bf65ab7fa</hash>
        <hash alg="SHA-256">40da12fbb8cd6db164b536a9ae48131956782bdca13fb1f6126580aad494345d</hash>
        <hash alg="SHA-512">a127afea318a9d49e9fc610ab57b7060ca31ab644a8abdde82a4d8fcef04e24959421f2bff2892ee27c9be179959e0f37d44315e07af4fceb156555bba7485be</hash>
        <hash alg="SHA-384">3494f06cb45810ecd559fa797de9d4c817ef09d15f5fef73f554d773c10beb717f26312800abd2a818a2edc27d61121c</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.prometheus/simpleclient_common@0.8.1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://github.com/prometheus/client_java/simpleclient_common</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.prometheus/simpleclient_pushgateway@0.8.1?type=jar">
      <group>io.prometheus</group>
      <name>simpleclient_pushgateway</name>
      <version>0.8.1</version>
      <description>Pushgateway exporter for the simpleclient.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">73efb745f60869e2a50f450866b8227a</hash>
        <hash alg="SHA-1">a8d82d960f0c43b17117fbea99f7a78ccefb7693</hash>
        <hash alg="SHA-256">356e37581ed96f3cd74764673b0fcbae5de98d47d3d781e00c76012c536a9c37</hash>
        <hash alg="SHA-512">de2831a8414fcfb8b0675c06a60b0ed6ba319c9e2201eff07100672e8769f9fd07988174fd2bc87c386c5bad550d2a0149f098ad40d59a1857970ed3b350ca9c</hash>
        <hash alg="SHA-384">6e068a758a4f7ad465a4c68af1a75a88a1a1e603dac5b4c2f87baefc2feea1c9cbbb9eac54cf214bcd4af530bda64eae</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.prometheus/simpleclient_pushgateway@0.8.1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://github.com/prometheus/client_java/simpleclient_pushgateway</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/javax.xml.bind/jaxb-api@2.3.1?type=jar">
      <publisher>Oracle Corporation</publisher>
      <group>javax.xml.bind</group>
      <name>jaxb-api</name>
      <version>2.3.1</version>
      <description>JAXB (JSR 222) API</description>
      <hashes>
        <hash alg="MD5">bcf270d320f645ad19f5edb60091e87f</hash>
        <hash alg="SHA-1">8531ad5ac454cc2deb9d4d32c40c4d7451939b5d</hash>
        <hash alg="SHA-256">88b955a0df57880a26a74708bc34f74dcaf8ebf4e78843a28b50eae945732b06</hash>
        <hash alg="SHA-512">93a47b245ab830d664a48c9d14e86198a38809ce94f72ca66b3d68746ae1d7b902f6fef2d1ac1a92c01701549ae80a07db69bd822ffd831a95d8dbffad435790</hash>
        <hash alg="SHA-384">1eb2d7f307bda8cbf6a4ab5b2b97d830d33ca48ad94eb4bb1cbce860c54fca96285dbcb1ce9b164dbf37d4475f9a198f</hash>
      </hashes>
      <licenses>
        <license>
          <id>CDDL-1.1</id>
        </license>
        <license>
          <id>GPL-2.0-with-classpath-exception</id>
        </license>
      </licenses>
      <purl>pkg:maven/javax.xml.bind/jaxb-api@2.3.1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/javaee/jaxb-spec/jaxb-api</url></reference><reference type="distribution"><url>https://maven.java.net/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/javaee/jaxb-spec/issues</url></reference><reference type="vcs"><url>https://github.com/javaee/jaxb-spec.git/jaxb-api</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/javax.activation/javax.activation-api@1.2.0?type=jar">
      <publisher>Oracle</publisher>
      <group>javax.activation</group>
      <name>javax.activation-api</name>
      <version>1.2.0</version>
      <description>JavaBeans Activation Framework API jar</description>
      <hashes>
        <hash alg="MD5">5e50e56bcf4a3ef3bc758f69f7643c3b</hash>
        <hash alg="SHA-1">85262acf3ca9816f9537ca47d5adeabaead7cb16</hash>
        <hash alg="SHA-256">43fdef0b5b6ceb31b0424b208b930c74ab58fac2ceeb7b3f6fd3aeb8b5ca4393</hash>
        <hash alg="SHA-512">8ee0db43ae402f0079a836ef2bff5d15160e3ff9d585c3283f4cf474be4edd2fcc8714d8f032efd72cae77ec5f6d304fc24fa094d9cdba5cf72966cc964af6c9</hash>
        <hash alg="SHA-384">d38a6af7ed00f13de8b46d49b9592af9b67adf3df47ddae5e4672f989f3f39101d446a77d1c11319acf8ff0a5b4feedf</hash>
      </hashes>
      <licenses>
        <expression>(CDDL-1.0 OR GPL-2.0-with-classpath-exception)</expression>
      </licenses>
      <purl>pkg:maven/javax.activation/javax.activation-api@1.2.0?type=jar</purl>
      <externalReferences><reference type="website"><url>http://java.net/all/javax.activation-api/</url></reference><reference type="distribution"><url>https://maven.java.net/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/javaee/activation/issues</url></reference><reference type="vcs"><url>https://github.com/javaee/activation/javax.activation-api</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar">
      <publisher>QOS.ch</publisher>
      <group>org.slf4j</group>
      <name>slf4j-api</name>
      <version>1.7.36</version>
      <description>The slf4j API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">872da51f5de7f3923da4de871d57fd85</hash>
        <hash alg="SHA-1">6c62681a2f655b49963a5983b8b0950a6120ae14</hash>
        <hash alg="SHA-256">d3ef575e3e4979678dc01bf1dcce51021493b4d11fb7f1be8ad982877c16a1c0</hash>
        <hash alg="SHA-512">f9b033fc019a44f98b16048da7e2b59edd4a6a527ba60e358f65ab88e0afae03a9340f1b3e8a543d49fa542290f499c5594259affa1ff3e6e7bf3b428d4c610b</hash>
        <hash alg="SHA-384">2b14ad035877087157e379d3277dcdcd79e58d6bdb147c47d29e377d75ce53ad42cafbf22f5fb7827c7e946ff4876b9a</hash>
      </hashes>
      <licenses>
        <license>
          <id>MIT</id>
          <url>https://opensource.org/licenses/MIT</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.slf4j.org</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/qos-ch/slf4j/slf4j-api</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar">
      <group>com.google.code.findbugs</group>
      <name>jsr305</name>
      <version>1.3.9</version>
      <description>JSR305 Annotations for Findbugs</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">1d5a772e400b04bb67a7ef4a0e0996d8</hash>
        <hash alg="SHA-1">40719ea6961c0cb6afaeb6a921eaa1f6afd4cfdf</hash>
        <hash alg="SHA-256">905721a0eea90a81534abb7ee6ef4ea2e5e645fa1def0a5cd88402df1b46c9ed</hash>
        <hash alg="SHA-512">06da282cfd8e30d9f8cf17702b8709172b00e22b75a627a1d85f8989615b8a1a401bc25d9aee7b14aed1d9b5df73bf2ea8d66f9c8468d9577c29f0ccfa2cc70a</hash>
        <hash alg="SHA-384">56e6b41ef62eb5edfed0203802cefae9c2df86388148e420bb0c687abb2b80e14d5c2a82d5b35dce4badaf148f94eada</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar</purl>
      <externalReferences><reference type="website"><url>http://findbugs.sourceforge.net/</url></reference><reference type="vcs"><url>http://findbugs.googlecode.com/svn/trunk/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-shaded-force-shading@16.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-shaded-force-shading</name>
      <version>16.1</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">0f703324b629fbc0d0cbf22375515477</hash>
        <hash alg="SHA-1">5040816ebca54b5bb4d5bb98b741ff77da59505b</hash>
        <hash alg="SHA-256">44ab80c42c380bc813bbf477256a4f4334e44088c8fb1b34d3c867733e54c664</hash>
        <hash alg="SHA-512">bf56dc058175101f58f2abfb3307349e9e911743f118c9309e0b8d3860f164c2c88b5fa1113e2270c1533bf37dc8102f1482099f11bdaa5acf316b7a9808093b</hash>
        <hash alg="SHA-384">3b7c079f14bfeb02219e4430fa2bbe66e9000596116c5247f98e0b0852bd59877559358704c8be7d18c0fbed1fff0880</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-shaded-force-shading@16.1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://flink.apache.org/flink-shaded-force-shading</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink-shaded/flink-shaded-force-shading</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.objenesis/objenesis@2.1?type=jar">
      <publisher>Joe Walnes, Henri Tremblay, Leonardo Mesquita</publisher>
      <group>org.objenesis</group>
      <name>objenesis</name>
      <version>2.1</version>
      <description>A library for instantiating Java objects</description>
      <hashes>
        <hash alg="MD5">32ccb1d20a42b5aaaceb90c9082a2efa</hash>
        <hash alg="SHA-1">87c0ea803b69252868d09308b4618f766f135a96</hash>
        <hash alg="SHA-256">c74330cc6b806c804fd37e74487b4fe5d7c2750c5e15fbc6efa13bdee1bdef80</hash>
        <hash alg="SHA-512">1dec9ee30812b8006e536a2749c5781ccdc4b446539efb6fa534f22e70562033876bf2eb22c6946d617695729bd65f0f65b984f15f05ac63db5bed215e74427c</hash>
        <hash alg="SHA-384">657b8a3b80a5475f198425396f7264301f9e0f3ad5dc336ef0c7b46874f5544861a8a2fd48cdb5f672e199a6935c19d1</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.objenesis/objenesis@2.1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://objenesis.org</url></reference><reference type="distribution"><url>http://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/easymock/easymock/objenesis</url></reference></externalReferences>
    </component>
  </components>
  <dependencies>
    <dependency ref="pkg:maven/org.apache.flink/flink-metrics-prometheus@1.17.2?type=jar">
      <dependency ref="pkg:maven/org.apache.flink/flink-annotations@1.17.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-core@1.17.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-metrics-core@1.17.2?type=jar"/>
      <dependency ref="pkg:maven/io.prometheus/simpleclient@0.8.1?type=jar"/>
      <dependency ref="pkg:maven/io.prometheus/simpleclient_httpserver@0.8.1?type=jar"/>
      <dependency ref="pkg:maven/io.prometheus/simpleclient_pushgateway@0.8.1?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-force-shading@16.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.flink/flink-annotations@1.17.2?type=jar">
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-force-shading@16.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"/>
    <dependency ref="pkg:maven/org.apache.flink/flink-shaded-force-shading@16.1?type=jar"/>
    <dependency ref="pkg:maven/org.apache.flink/flink-core@1.17.2?type=jar">
      <dependency ref="pkg:maven/org.apache.flink/flink-annotations@1.17.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-metrics-core@1.17.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-asm-9@9.3-16.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-jackson@2.13.4-16.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar"/>
      <dependency ref="pkg:maven/com.esotericsoftware.kryo/kryo@2.24.0?type=jar"/>
      <dependency ref="pkg:maven/commons-collections/commons-collections@3.2.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-compress@1.21?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-guava@30.1.1-jre-16.1?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-force-shading@16.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.flink/flink-metrics-core@1.17.2?type=jar">
      <dependency ref="pkg:maven/org.apache.flink/flink-annotations@1.17.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-force-shading@16.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.flink/flink-shaded-asm-9@9.3-16.1?type=jar"/>
    <dependency ref="pkg:maven/org.apache.flink/flink-shaded-jackson@2.13.4-16.1?type=jar"/>
    <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar"/>
    <dependency ref="pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar">
      <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.esotericsoftware.kryo/kryo@2.24.0?type=jar">
      <dependency ref="pkg:maven/com.esotericsoftware.minlog/minlog@1.2?type=jar"/>
      <dependency ref="pkg:maven/org.objenesis/objenesis@2.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.esotericsoftware.minlog/minlog@1.2?type=jar"/>
    <dependency ref="pkg:maven/org.objenesis/objenesis@2.1?type=jar"/>
    <dependency ref="pkg:maven/commons-collections/commons-collections@3.2.2?type=jar"/>
    <dependency ref="pkg:maven/org.apache.commons/commons-compress@1.21?type=jar"/>
    <dependency ref="pkg:maven/org.apache.flink/flink-shaded-guava@30.1.1-jre-16.1?type=jar"/>
    <dependency ref="pkg:maven/io.prometheus/simpleclient@0.8.1?type=jar"/>
    <dependency ref="pkg:maven/io.prometheus/simpleclient_httpserver@0.8.1?type=jar">
      <dependency ref="pkg:maven/io.prometheus/simpleclient@0.8.1?type=jar"/>
      <dependency ref="pkg:maven/io.prometheus/simpleclient_common@0.8.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/io.prometheus/simpleclient_common@0.8.1?type=jar">
      <dependency ref="pkg:maven/io.prometheus/simpleclient@0.8.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/io.prometheus/simpleclient_pushgateway@0.8.1?type=jar">
      <dependency ref="pkg:maven/io.prometheus/simpleclient@0.8.1?type=jar"/>
      <dependency ref="pkg:maven/io.prometheus/simpleclient_common@0.8.1?type=jar"/>
      <dependency ref="pkg:maven/javax.xml.bind/jaxb-api@2.3.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/javax.xml.bind/jaxb-api@2.3.1?type=jar">
      <dependency ref="pkg:maven/javax.activation/javax.activation-api@1.2.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/javax.activation/javax.activation-api@1.2.0?type=jar"/>
  </dependencies>
</bom>
