<?xml version="1.0" encoding="UTF-8"?>
<bom serialNumber="urn:uuid:101ebb1d-0f9d-40cf-ac19-26e120868d9c" version="1" xmlns="http://cyclonedx.org/schema/bom/1.4">
  <metadata>
    <timestamp>2023-03-17T10:16:10Z</timestamp>
    <tools>
      <tool>
        <vendor>OWASP Foundation</vendor>
        <name>CycloneDX Maven plugin</name>
        <version>2.7.3</version>
        <hashes>
          <hash alg="MD5">ab886f1cb1a79b4244ac54dde22a0989</hash>
          <hash alg="SHA-1">9ed658496dfeef87fe6072b95c62ec37165cc741</hash>
          <hash alg="SHA-256">df9b43417bef6aeac86a393abcc1ac2ed0518239ba544aaeb595b9619c603503</hash>
          <hash alg="SHA-512">223da34bb51c5339e0f7285757608c1a56b1ea887f7ad835af9299fabacc693053163da74af352af86b16e18e04db730bd44214eda04291410c42b6ae657d85c</hash>
          <hash alg="SHA-384">3aaf057329ed0f90ec3a49a45b3cf4ec5ce637fd75d6202e9483fa4274cec3e7b74308016e146b6ba087df5fce9397bb</hash>
        </hashes>
      </tool>
    </tools>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-metrics-statsd@1.17.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-metrics-statsd</name>
      <version>1.17.0</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-metrics-statsd@1.17.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://www.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink/flink-metrics/flink-metrics-statsd</url></reference></externalReferences>
    </component>
  </metadata>
  <components>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-annotations@1.17.0?type=jar">
      <group>org.apache.flink</group>
      <name>flink-annotations</name>
      <version>1.17.0</version>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">8722229171d763f57b027d0a2d2be7aa</hash>
        <hash alg="SHA-1">6a627ba30bf3e3be766f440695d4b5e5a5dcb4e9</hash>
        <hash alg="SHA-256">ca9f02d09d74d40196ffcd706030fde626e5aa4611e6dfaee1ff3d0ea343ebff</hash>
        <hash alg="SHA-512">5789077b29a903e3b879dc713388f9b0fb35ae0034bf53318f34c05302fbabc3a9fecbed67280aeb547cb8674650e71963909e596f073b13867418e00a37e33c</hash>
        <hash alg="SHA-384">197d6829888940ced6cbcfc8e7fdb822486fc60c5d393a7e278aad6ef42be3b9a050826e33e782d8cfbb1fc18a9db0b3</hash>
      </hashes>
      <licenses/>
      <purl>pkg:maven/org.apache.flink/flink-annotations@1.17.0?type=jar</purl>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-metrics-core@1.17.0?type=jar">
      <group>org.apache.flink</group>
      <name>flink-metrics-core</name>
      <version>1.17.0</version>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">1ed9920da68ac343424f40cf4a6b824f</hash>
        <hash alg="SHA-1">666fb09d3ad2098625aa4f2efc4ce24754abeed7</hash>
        <hash alg="SHA-256">ecb1164a32f0ff87db9c42f96aef8281b66a78a42e1f7ee2500a8255ebf4110f</hash>
        <hash alg="SHA-512">4fec1b5d13a7666f6ce73feaa7ea677c1ac110aeeb54ea2b0d39675098d920d8a8df8ecd253e38d9e1f24d09c6344a4cd3591433e4e06be861ba411f14c93529</hash>
        <hash alg="SHA-384">6233b45a5fddef0569b01ee891bec76d49ded5697d210d05a14c18e5c4166add2bf3b1d60f4fba0188cfa448c6e0333d</hash>
      </hashes>
      <licenses/>
      <purl>pkg:maven/org.apache.flink/flink-metrics-core@1.17.0?type=jar</purl>
    </component>
    <component type="library" bom-ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar">
      <publisher>QOS.ch</publisher>
      <group>org.slf4j</group>
      <name>slf4j-api</name>
      <version>1.7.36</version>
      <description>The slf4j API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">872da51f5de7f3923da4de871d57fd85</hash>
        <hash alg="SHA-1">6c62681a2f655b49963a5983b8b0950a6120ae14</hash>
        <hash alg="SHA-256">d3ef575e3e4979678dc01bf1dcce51021493b4d11fb7f1be8ad982877c16a1c0</hash>
        <hash alg="SHA-512">f9b033fc019a44f98b16048da7e2b59edd4a6a527ba60e358f65ab88e0afae03a9340f1b3e8a543d49fa542290f499c5594259affa1ff3e6e7bf3b428d4c610b</hash>
        <hash alg="SHA-384">2b14ad035877087157e379d3277dcdcd79e58d6bdb147c47d29e377d75ce53ad42cafbf22f5fb7827c7e946ff4876b9a</hash>
      </hashes>
      <licenses>
        <license>
          <id>MIT</id>
          <url>https://opensource.org/licenses/MIT</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.qos.ch</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/qos-ch/slf4j</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar">
      <group>com.google.code.findbugs</group>
      <name>jsr305</name>
      <version>1.3.9</version>
      <description>JSR305 Annotations for Findbugs</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">1d5a772e400b04bb67a7ef4a0e0996d8</hash>
        <hash alg="SHA-1">40719ea6961c0cb6afaeb6a921eaa1f6afd4cfdf</hash>
        <hash alg="SHA-256">905721a0eea90a81534abb7ee6ef4ea2e5e645fa1def0a5cd88402df1b46c9ed</hash>
        <hash alg="SHA-512">06da282cfd8e30d9f8cf17702b8709172b00e22b75a627a1d85f8989615b8a1a401bc25d9aee7b14aed1d9b5df73bf2ea8d66f9c8468d9577c29f0ccfa2cc70a</hash>
        <hash alg="SHA-384">56e6b41ef62eb5edfed0203802cefae9c2df86388148e420bb0c687abb2b80e14d5c2a82d5b35dce4badaf148f94eada</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar</purl>
      <externalReferences><reference type="vcs"><url>http://findbugs.googlecode.com/svn/trunk/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-shaded-force-shading@16.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-shaded-force-shading</name>
      <version>16.1</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">0f703324b629fbc0d0cbf22375515477</hash>
        <hash alg="SHA-1">5040816ebca54b5bb4d5bb98b741ff77da59505b</hash>
        <hash alg="SHA-256">44ab80c42c380bc813bbf477256a4f4334e44088c8fb1b34d3c867733e54c664</hash>
        <hash alg="SHA-512">bf56dc058175101f58f2abfb3307349e9e911743f118c9309e0b8d3860f164c2c88b5fa1113e2270c1533bf37dc8102f1482099f11bdaa5acf316b7a9808093b</hash>
        <hash alg="SHA-384">3b7c079f14bfeb02219e4430fa2bbe66e9000596116c5247f98e0b0852bd59877559358704c8be7d18c0fbed1fff0880</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-shaded-force-shading@16.1?type=jar</purl>
      <externalReferences><reference type="vcs"><url>https://github.com/apache/flink-shaded</url></reference><reference type="website"><url>https://www.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference></externalReferences>
    </component>
  </components>
  <dependencies>
    <dependency ref="pkg:maven/org.apache.flink/flink-metrics-statsd@1.17.0?type=jar">
      <dependency ref="pkg:maven/org.apache.flink/flink-annotations@1.17.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-metrics-core@1.17.0?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-force-shading@16.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.flink/flink-annotations@1.17.0?type=jar">
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-force-shading@16.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"/>
    <dependency ref="pkg:maven/org.apache.flink/flink-shaded-force-shading@16.1?type=jar"/>
    <dependency ref="pkg:maven/org.apache.flink/flink-metrics-core@1.17.0?type=jar">
      <dependency ref="pkg:maven/org.apache.flink/flink-annotations@1.17.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-force-shading@16.1?type=jar"/>
    </dependency>
  </dependencies>
</bom>
