<?xml version="1.0" encoding="UTF-8"?>
<bom serialNumber="urn:uuid:8973a3ad-8053-4307-9e4b-eade006b8541" version="1" xmlns="http://cyclonedx.org/schema/bom/1.4">
  <metadata>
    <timestamp>2023-06-26T09:09:34Z</timestamp>
    <tools>
      <tool>
        <vendor>OWASP Foundation</vendor>
        <name>CycloneDX Maven plugin</name>
        <version>2.7.3</version>
        <hashes>
          <hash alg="MD5">ab886f1cb1a79b4244ac54dde22a0989</hash>
          <hash alg="SHA-1">9ed658496dfeef87fe6072b95c62ec37165cc741</hash>
          <hash alg="SHA-256">df9b43417bef6aeac86a393abcc1ac2ed0518239ba544aaeb595b9619c603503</hash>
          <hash alg="SHA-512">223da34bb51c5339e0f7285757608c1a56b1ea887f7ad835af9299fabacc693053163da74af352af86b16e18e04db730bd44214eda04291410c42b6ae657d85c</hash>
          <hash alg="SHA-384">3aaf057329ed0f90ec3a49a45b3cf4ec5ce637fd75d6202e9483fa4274cec3e7b74308016e146b6ba087df5fce9397bb</hash>
          <hash alg="SHA3-384">0e2ce6d2a0e0ddea90f63d2e521e640e83aeac1230c201042e542186e9f32bceaf54ed9d26e6a9dec04c0f7895bbae19</hash>
          <hash alg="SHA3-256">dd3ba8325a1a759e5a8f159a3363213d4a34d51120c4e4c77097a6779964fb33</hash>
          <hash alg="SHA3-512">e5f87b2380e9785330fce113fedd5866a1498d5a9e365b7b00cb6fea50fd47166c471a6347d46d3edb7dd247a583874169624db5be2845c5c87dfdbcd58d9e89</hash>
        </hashes>
      </tool>
    </tools>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-ml-benchmark-1.17@2.3.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-ml-benchmark-1.17</name>
      <version>2.3.0</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-ml-benchmark-1.17@2.3.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://www.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink-ml/flink-ml-benchmark-1.17</url></reference></externalReferences>
    </component>
  </metadata>
  <components>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-ml-iteration-1.17@2.3.0?type=jar">
      <group>org.apache.flink</group>
      <name>flink-ml-iteration-1.17</name>
      <version>2.3.0</version>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">e0c78df5c30d6afe409fe23ae313e92f</hash>
        <hash alg="SHA-1">e69826d0dec97e3cb6ab9fecdba87f70c568c9fe</hash>
        <hash alg="SHA-256">6396e314353097b91470ee70c17168e61eb7ec27c1f57391f2a44b9f2b525a59</hash>
        <hash alg="SHA-512">f44e2b1c25921185aad89c00b3ae2c1c3ddb46096b2c1aaf4536a54a8e17ca3d3fd36f98c84e8cba67ad34eaf1353f231650b1a5995c11601d434c3cf35c5e17</hash>
        <hash alg="SHA-384">11943eda60e56a0d3061cda0de79c1eebd7d69be6c3bbf77a5fbea719e40c7e0859847613d5407691dc6fe36745902d8</hash>
        <hash alg="SHA3-384">7e703dd333b2a311161baa324ef7fe41aef615bf8c83bee9c5319d383fcbb818752f601f68ed625d26628054578b637f</hash>
        <hash alg="SHA3-256">798f3e50ad8f326147c311de54785d6a1703e87411eda5a6a606f564f41168b5</hash>
        <hash alg="SHA3-512">2c915b03138396d4d4cb2798d6d88a7ccc3e34388aa58e5faf5ed6f56c17c8a9eeb167d876ddf2174db772828bf2bdf95d7e75c2de337703e4dfd4e4475a0696</hash>
      </hashes>
      <licenses/>
      <purl>pkg:maven/org.apache.flink/flink-ml-iteration-1.17@2.3.0?type=jar</purl>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-ml-iteration-common@2.3.0?type=jar">
      <group>org.apache.flink</group>
      <name>flink-ml-iteration-common</name>
      <version>2.3.0</version>
      <hashes>
        <hash alg="MD5">455658939cc5345f64dfbbc6fe1ec9cd</hash>
        <hash alg="SHA-1">16dd7e183614a07ebc6411dc7b396156cddfe1d3</hash>
        <hash alg="SHA-256">1fb86c385c5706452bacf01b14dd017753bea178f690c3237657c12a183f7ed9</hash>
        <hash alg="SHA-512">2c6531676854b3920b58c916a90d30a85b00fcb38353ed7101c7a7e73d6461dd58f12c84d8b45d3bd7fdb77f77ca3b5dfc083eacf81b6fb4da0f34dbca8f0829</hash>
        <hash alg="SHA-384">24b31e30dd82ee1ea7090386d38219a88063903210bd6ba010ba3d4b8c7cb1ce370c3e435677c8a3ebeb395db976af06</hash>
        <hash alg="SHA3-384">cab385914a4d09eb2721cc4d426331e5a557f5ab1c7ac04d511f870e57abc8a13ff3a1b661b9fc4b882fca1d8227934b</hash>
        <hash alg="SHA3-256">d3831f902edebee3ab366ff67c740e1a507fdebafd14e6a998a2e121ab9f6b2d</hash>
        <hash alg="SHA3-512">4f79bce4df4fd9cf884dcd6cfde55af2bf0957785fe9f327654b8d7bfcc6123d6982674d0c4c089943c100fbb898171ff5f79842eb496bccf9f80c18ffb6c8fd</hash>
      </hashes>
      <licenses/>
      <purl>pkg:maven/org.apache.flink/flink-ml-iteration-common@2.3.0?type=jar</purl>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/statefun-flink-core@3.2.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>statefun-flink-core</name>
      <version>3.2.0</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <hashes>
        <hash alg="MD5">cd04168286d9d12bccefc77e9562dc03</hash>
        <hash alg="SHA-1">8004aa4848b2454c901d8807b65cf2622d847eb2</hash>
        <hash alg="SHA-256">24a560fb9ffab88542fce194b073d1f11168d06cda74e2e98a4dac65609d3e21</hash>
        <hash alg="SHA-512">432d285910ac2dbfcc34f50aeb45fc2ce334fa8fc41fb88f298fa8d57f14819b084e2dfb34b2012c7b196529c4c782e1bbe0d08747907068cc048ee1a1a2607b</hash>
        <hash alg="SHA-384">99142f66f302b289ab94ee75fb0b13bc7458449c68866eb65d5454d480c8bcaf0f3ac738044e19653d8d66245afd9f48</hash>
        <hash alg="SHA3-384">3793f7d38f70cf7ef3b5b96f115b9d4fa75e795525ff00f734780e8374ce56db8d43671bc61711c3f6a972e5ffdb2ace</hash>
        <hash alg="SHA3-256">12c7f538cb55a8525b5dd9522122abdf0a20fe51435607b6afb3ed519e7068e6</hash>
        <hash alg="SHA3-512">3ce7a2b06862898bbe6cd7fb74d696b1e7103217d03d646063a0d2b517d32514a5390103b0656be1437e1de44c0445f793c9accdd3185c0fbde55483289743ea</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/statefun-flink-core@3.2.0?type=jar</purl>
      <externalReferences><reference type="vcs"><url>https://github.com/apache/flink-statefun</url></reference><reference type="website"><url>https://www.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/statefun-sdk-embedded@3.2.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>statefun-sdk-embedded</name>
      <version>3.2.0</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <hashes>
        <hash alg="MD5">1ac360c52b0bd442adfd7728f7ba8fc1</hash>
        <hash alg="SHA-1">84e4fb49c20706249a5a3dc48288658de8028d0d</hash>
        <hash alg="SHA-256">24799b9b20aea701b8acc135d5db570fbb68e74b2f73510dfc28977d596cdfc2</hash>
        <hash alg="SHA-512">9d5b33b9899908cf8b3246a7132dac6b468acb864cabf0d7c872e830cabc883fd24525869dce9818ba2fc23531206aaa57a2cc588a023ca91f4095812899358f</hash>
        <hash alg="SHA-384">e50cf1cb4d5a26cf2b948ecfde4f9adc33018166220a5ea1b38e07b2f714e59b294038a801f1f1694f115def531b8963</hash>
        <hash alg="SHA3-384">9f099c65b9761c29e6c82f2e3db2672072c47eabb47794be8951d549f86a82313a6bb33b477bfdb7c4992bc36a129a67</hash>
        <hash alg="SHA3-256">fe17282cd2bf47764fdea738df251a6320d2900bc1c8f8c0b2a15a3a2c8852ce</hash>
        <hash alg="SHA3-512">433e86a5ab9d054b87557ee1a25bc899e93aeca58cd7a32089ff5332364a70fc84783cac05da000745eac8ce60e2b2465c9cd9065291723ffefb77791033169c</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/statefun-sdk-embedded@3.2.0?type=jar</purl>
      <externalReferences><reference type="vcs"><url>https://github.com/apache/flink-statefun</url></reference><reference type="website"><url>https://www.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/statefun-sdk-protos@3.2.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>statefun-sdk-protos</name>
      <version>3.2.0</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <hashes>
        <hash alg="MD5">d879814ca8e18f4ca915931e7c5f0b62</hash>
        <hash alg="SHA-1">b25a7dce37e10d2ddffbb754fdc87a997d73b83d</hash>
        <hash alg="SHA-256">26606c616dbad915aeb08c96c8db80bdbfdd3fd716fe099eeee3094a73bf846d</hash>
        <hash alg="SHA-512">c0267bb6c96ce71db5390c2c77647f4a696ef0cd3c3a0b829e8c29bd7fa5e096d3ef14e7a06fa94b3f3ae111d4e67f2e3d4dcaa62eebd954e74a9b97f3171ea2</hash>
        <hash alg="SHA-384">25b37e8a148a0acd67ce0e6d1c348373e377c5dcaace44e78ea58f9e88d65f133df2b1426bdeb283b2ac7822318946db</hash>
        <hash alg="SHA3-384">51e1bd15d65be1f6b05e454b1727a093be4eaef483de539163aba638a2bfa75726b3ae740aa0ed7e8a8f426fe6911d17</hash>
        <hash alg="SHA3-256">2aa64b4aec83bad6886a80fdb6d44568e73544fb500da5ddb4e4ce5106cb4ec8</hash>
        <hash alg="SHA3-512">b53394cacda2424669af92ff4b02ecb4b31255c52f980523b4cb6239fdac3f8cf45e15a1a3664e307c5874de895484838abeb80c3e5d881352298fb70612495a</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/statefun-sdk-protos@3.2.0?type=jar</purl>
      <externalReferences><reference type="vcs"><url>https://github.com/apache/flink-statefun</url></reference><reference type="website"><url>https://www.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/statefun-flink-io@3.2.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>statefun-flink-io</name>
      <version>3.2.0</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <hashes>
        <hash alg="MD5">5a42caf327e3aaf9efdd30176554b548</hash>
        <hash alg="SHA-1">ebd72da6144236bae53286316e0d09a7d55050da</hash>
        <hash alg="SHA-256">0c2b8b49d193efe46c58cac9dc4a18edb625df0012ba3930fa4e05686ceb3d77</hash>
        <hash alg="SHA-512">b7eeb0ca0142ec7d6595599587355ee4a159b3d012cc69216cbddc9b47d2a160e79fade796801d3e3bf5151d5901083f32984b229b37621152b057b80f01f63a</hash>
        <hash alg="SHA-384">45b27dfb347ad912386ae8615a8a01926f916fad1dfcb15c5e66501fd7491ed91256d960f1210981448139146c5f876c</hash>
        <hash alg="SHA3-384">481f0df4f39430fcdd9a4eaafc0191b0ff8f84d4ea431e89f2b8822a64e04eee4d8a914d034ef162152d23e8104c48d0</hash>
        <hash alg="SHA3-256">ea46e98501d21514f92ed9230c21624e055b5cfec25425a459f5775906740974</hash>
        <hash alg="SHA3-512">dea066f66241825b214ff1f61d29981e43864f4853e59ad890f04b0310e94f814ec01f46d07ac16c1ff6d05fa2e79b0bb0c9756cbe7a3d2bfea2fe40a38b2594</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/statefun-flink-io@3.2.0?type=jar</purl>
      <externalReferences><reference type="vcs"><url>https://github.com/apache/flink-statefun</url></reference><reference type="website"><url>https://www.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/statefun-flink-common@3.2.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>statefun-flink-common</name>
      <version>3.2.0</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <hashes>
        <hash alg="MD5">546b282076298b92fb8113fd04a80c0d</hash>
        <hash alg="SHA-1">cec6423ab076b5e1f5d1031d9fc7262162f5f833</hash>
        <hash alg="SHA-256">fc48d9d74e48fc3b73acfabf3c8df016de4f18ed94ea57aa330802c05c0330d9</hash>
        <hash alg="SHA-512">775c391afc1293eed94b120c1c42d19fad116b7b85ae02fa3d4aea579cecb688fc616d8a6a154586cf785712b14956632586689cde139f75c525aa3cf48b86fe</hash>
        <hash alg="SHA-384">a07bf43a0924c3bafc3b96991003397dd31881a78f5cf99cf5f63497c65d4c2d93ed2438ceccb973d525d05c10dbc20a</hash>
        <hash alg="SHA3-384">c8e23f23cabc15b3276cc24538da9780dc8901415621aea0b57635d113650394a0e757494d5737397ed9d74e91fd5bf9</hash>
        <hash alg="SHA3-256">7d2b47836baa175d66a2d0aec44fd4c4791b0aaae1a2d851a330677c5b698105</hash>
        <hash alg="SHA3-512">2eaee2633ebef171b9f35a3a04a0c0110ef52f9de63834939a0058b3b85867d90f5f7e14cbb4d9d37cc7abab206849101f5954624d2cb2484d534dc8862b7014</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/statefun-flink-common@3.2.0?type=jar</purl>
      <externalReferences><reference type="vcs"><url>https://github.com/apache/flink-statefun</url></reference><reference type="website"><url>https://www.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/statefun-flink-extensions@3.2.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>statefun-flink-extensions</name>
      <version>3.2.0</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <hashes>
        <hash alg="MD5">b4a40f3466a242c291b04ed67be5a727</hash>
        <hash alg="SHA-1">bece19935eae82febc24d5e260e4d75ca14a6665</hash>
        <hash alg="SHA-256">18a4a6da320fbdbb52e343ad4b396353ef978befb37b035734c3caeb3ccd1536</hash>
        <hash alg="SHA-512">abf481001e06b8794220b4380b6341878e943d34316754dad6275150f03277a496ef26d92e2bbda23c47140cd999244bf31fb8d258cb129e39f6f12dad5847d8</hash>
        <hash alg="SHA-384">466a1112f0407a753891d7b37b85e318d98bd45029a7494b9cd6854466fe69d63a2b22e9aeba37a2084ae9796a0f5d9e</hash>
        <hash alg="SHA3-384">3ae2f4f6b7968f74e276fa266e8dbd599c1c53ec69e6a217637966c3a8cbb715d0e4341dbc9c48f4fc9f359c4988323a</hash>
        <hash alg="SHA3-256">a4e1c6a10a80cc2bcd42e3b3eaeaa66fccae4c2198e1f6fa3841f6adc1cf29be</hash>
        <hash alg="SHA3-512">40dc9aad0b12dc3a7b4d31ef5855f64070c74fef8c45a6da1c9efd0bd29e2bbc0082df9fa2b3be81c9419d5cbc18f303ec8a66e07899b442da076b1049c833da</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/statefun-flink-extensions@3.2.0?type=jar</purl>
      <externalReferences><reference type="vcs"><url>https://github.com/apache/flink-statefun</url></reference><reference type="website"><url>https://www.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.protobuf/protobuf-java@3.7.1?type=jar">
      <group>com.google.protobuf</group>
      <name>protobuf-java</name>
      <version>3.7.1</version>
      <description>Core Protocol Buffers library. Protocol Buffers are a way of encoding structured data in an
    efficient yet extensible format.</description>
      <hashes>
        <hash alg="MD5">c8f2dd7f0854bbe04c9acc61a929dbd0</hash>
        <hash alg="SHA-1">0bce1b6dc9e4531169542ab37a1c8641bcaa8afb</hash>
        <hash alg="SHA-256">22779eacfe0f33b9e8ceffa3cdef5935cae4e53f736e027d912b707522fea645</hash>
        <hash alg="SHA-512">b7d24e9bb5c9dc1b2d60393008e5cc20f5e4e2769e3fde542130b61d63b1ec1b8d76afdd8b3a5e0692cb8e4dd104ef7312de3423dc51a7979f6dbdd770e9bed2</hash>
        <hash alg="SHA-384">e8db149046c4fdf5c50f5ad504f694b432a2399a8e8062c5ab5103f3ef8cbc77dd49f1d8e5691adb8c673384325bb140</hash>
        <hash alg="SHA3-384">909b44dfb30b4cba102c91d5548278dbe19a903838bf954530e0bb99a625e0ac79599c030b5c006b6afdb789ab75a5e3</hash>
        <hash alg="SHA3-256">feb836fc25b2026b09ebe6bc17ab98fd4856bcbeaae028a9718cd3ab545eb0a6</hash>
        <hash alg="SHA3-512">e6ef9e8f0d873dd729e6868e083b35edd365557a16d6679be0f7b77a9ad0e095c932f96b42e2518220ec68feb79cc7a5ec6e5b2de74ff302b999ba3669b4efce</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.protobuf/protobuf-java@3.7.1?type=jar</purl>
      <externalReferences><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/protocolbuffers/protobuf</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.squareup.okhttp3/okhttp@3.14.6?type=jar">
      <group>com.squareup.okhttp3</group>
      <name>okhttp</name>
      <version>3.14.6</version>
      <description>An HTTP+HTTP/2 client for Android and Java applications</description>
      <hashes>
        <hash alg="MD5">b7edf93ad1b7c12e6957815add15d39f</hash>
        <hash alg="SHA-1">3922cd2edd3df7616aa85a170398e5010989f212</hash>
        <hash alg="SHA-256">0af938f02fed609776cdbcea3c118aee5f368fb483fa0b91aab23a94fdc7c9de</hash>
        <hash alg="SHA-512">aa97e3a9e8c55a754e822e0cbaaa1324d39b150bc36207bb31f77b34917e537c337eae4dcb85d215c73ee8890afb986932095d356e13994ad886d979c2fd8e0d</hash>
        <hash alg="SHA-384">783f88a27ae5f1b5d6d24f4fb2f9bc5ef0be0d8a1030916fc59cbc975417bbd8e773960e4e66db2ecd444f5b3eb3dda5</hash>
        <hash alg="SHA3-384">aa663a10e7e2c025e8b4dd5c9780dff60257f31265f292c1de770e5bcbc239548f297c586431d62d37c2d9834f35a53b</hash>
        <hash alg="SHA3-256">a35a95ab88a4698f08d44e9605f96c9e62323b933adb7f704a24add387223354</hash>
        <hash alg="SHA3-512">5254d3d721882b2f702368bdb5878ac5b0bc5d2ef09a9e1671c82fb8e929cda0d4b6f6579a82de4fb71a1daf8ad1f2963292f0080d5135215b219aa20274decb</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.squareup.okhttp3/okhttp@3.14.6?type=jar</purl>
      <externalReferences><reference type="issue-tracker"><url>https://github.com/square/okhttp/issues</url></reference><reference type="vcs"><url>https://github.com/square/okhttp/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.squareup.okio/okio@1.17.2?type=jar">
      <group>com.squareup.okio</group>
      <name>okio</name>
      <version>1.17.2</version>
      <description>A modern I/O API for Java</description>
      <hashes>
        <hash alg="MD5">54a6a8979bd8e64e1fbf21d511654737</hash>
        <hash alg="SHA-1">78c7820b205002da4d2d137f6f312bd64b3d6049</hash>
        <hash alg="SHA-256">f80ce42d2ffac47ad4c47e1d6f980d604d247ceb1a886705cf4581ab0c9fe2b8</hash>
        <hash alg="SHA-512">3ad9127705ad00962b96a10d134a06378a3ef5558b0c5955ace54e15a771027a11503981a8dcf0959fb806d35ba8da9b12282a5a2f3d6dd7c71266120a4e0b4d</hash>
        <hash alg="SHA-384">98a16e221860faf4ae809743fbc956614aa32b0d78b35703d8ceb78c42a42e9afe7f1b3c8c9df5c63b9ee6e0fcfcd98c</hash>
        <hash alg="SHA3-384">1118bb002f8389c4fb0829b8a7151aab2b2f99197f5987cb6b760afc7503be39e544e92e272fddbbaf6dd292fe2cb54d</hash>
        <hash alg="SHA3-256">6fb3af2f7a46a6897f4ebe343cc6aa5ad97a3c74d943129c393671ffb686f7ed</hash>
        <hash alg="SHA3-512">121da9911e31293293aac0012fe2fcd665971a62f633df4dbb0ac5e5e87ee384827e5d440cb7e6d9817ad0a0730d25934ab00dd7b97a04ea013f68565797fc60</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.squareup.okio/okio@1.17.2?type=jar</purl>
      <externalReferences><reference type="issue-tracker"><url>https://github.com/square/okio/issues</url></reference><reference type="vcs"><url>https://github.com/square/okio/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.kohlschutter.junixsocket/junixsocket-core@2.3.2?type=jar">
      <publisher>Kohlschütter Search Intelligence</publisher>
      <group>com.kohlschutter.junixsocket</group>
      <name>junixsocket-core</name>
      <version>2.3.2</version>
      <description>The core system dependency; the one you want to add to your project</description>
      <hashes>
        <hash alg="MD5">cd1f3ae9506801f2ef452f4018d063b5</hash>
        <hash alg="SHA-1">72fd4f265f1b697328fb31141c91154febd1a775</hash>
        <hash alg="SHA-256">535e729eb03a438ebf3f9cd17bf56286173bf768cb4beab9beba1fce9fea9f58</hash>
        <hash alg="SHA-512">15a31c3935da201c98890a0afc02ab45fc9eaa3b1ae4f11f933f91613380cbbd354bee931148b386882e60a9c627d22de57236bfe6d31b374e642f4e11282c8c</hash>
        <hash alg="SHA-384">8ff4fe8a84936d310a0e93cabcf0a5a20d1fca937ce843cbeb82716854a4abd289f71d25e0eccef3d3850657af7de793</hash>
        <hash alg="SHA3-384">5769a4dbd431663c5c9c2ede19daac89fff7c0fd1796b031338a0efaf54aab62971abfbab906ea5464845555dc8de0fe</hash>
        <hash alg="SHA3-256">83f0c900f85bef1f3fef42db624f167bc730fa39b026a34e20999134c099f7a0</hash>
        <hash alg="SHA3-512">00680b4fe13b7dc461e09db06b6d421deefeee88c640d6d9054c50416a5d49eb19d9ca85f5635814ddb4804dbba92842361a126aefa014b3e3a9a682451a3795</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.kohlschutter.junixsocket/junixsocket-core@2.3.2?type=jar</purl>
      <externalReferences><reference type="website"><url>https://www.kohlschutter.com/</url></reference><reference type="issue-tracker"><url>https://github.com/kohlschutter/junixsocket/issues</url></reference><reference type="vcs"><url>https://github.com/kohlschutter/junixsocket</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.kohlschutter.junixsocket/junixsocket-native-common@2.3.2?type=jar">
      <publisher>Kohlschütter Search Intelligence</publisher>
      <group>com.kohlschutter.junixsocket</group>
      <name>junixsocket-native-common</name>
      <version>2.3.2</version>
      <description>Binaries of the native JNI library for common platforms</description>
      <hashes>
        <hash alg="MD5">adabc36ff3ec95a0be424c46d80e6427</hash>
        <hash alg="SHA-1">e5f7711c06fb5bc83a8931c1b72dc5fd645aafce</hash>
        <hash alg="SHA-256">6a090697071ae30a29c263ffd5999778dd560779974ee15b9586a0aa3dc3e0d2</hash>
        <hash alg="SHA-512">52fd20e59d35b8eac2207f6c8a107074d46fa9ec56a6b2bd09db94f6f26a33bc98695f0ac9e648651e496a47a747e576e8f7ce896cfea8da9cd365be694824c4</hash>
        <hash alg="SHA-384">27e3251386edaf6e5ab22853b62868793e31310c12a3f28deeb394b358af61a2a1c05d2384978f454699f74915fcda98</hash>
        <hash alg="SHA3-384">e90b3d5e3b26937578db769f97ec1c4568551d43fc2f7f73ce66eb2816105197aee9d8c37ed56c7ecd51e83377200ae1</hash>
        <hash alg="SHA3-256">4f0c88946f5d1c9b05d2e6f15dc3a854a72ca4737d1f77457c87b4ae07a1c8fd</hash>
        <hash alg="SHA3-512">fe36d00c488548b73bb02f2f7f0eae71f566597b8fb040b243a3f9697bb68b0074b5cdbadae62daf33bddc09c9232515cb100eeb6ca9addabe0223820965015c</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.kohlschutter.junixsocket/junixsocket-native-common@2.3.2?type=jar</purl>
      <externalReferences><reference type="website"><url>https://www.kohlschutter.com/</url></reference><reference type="issue-tracker"><url>https://github.com/kohlschutter/junixsocket/issues</url></reference><reference type="vcs"><url>https://github.com/kohlschutter/junixsocket</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.kohlschutter.junixsocket/junixsocket-common@2.3.2?type=jar">
      <publisher>Kohlschütter Search Intelligence</publisher>
      <group>com.kohlschutter.junixsocket</group>
      <name>junixsocket-common</name>
      <version>2.3.2</version>
      <description>The public, core API</description>
      <hashes>
        <hash alg="MD5">4e6e9996f86ff408e43e60e22bd95a5e</hash>
        <hash alg="SHA-1">17b89da8995a595eb017a55d0262fed62e113e46</hash>
        <hash alg="SHA-256">2b501ae7e230b8dbcae0991a10b99bb22b752c583919d6db8e017de53415db0e</hash>
        <hash alg="SHA-512">a935a1bc84c08cd20fc64be6212ab7634f921a991e261e8a143e46915723337a4ef0d607e77edc201650948766182e25828cecf070ac00681d1c9afa369efa1e</hash>
        <hash alg="SHA-384">e7076b60e6eb96f43863fbf978f64f329a67a5f4213ef68ac3ce1b6d9f3b097db845c5f0bf790764749491eb86dcb06d</hash>
        <hash alg="SHA3-384">6ba4a26d77601044549b79802c13d47dbd5b73e887c0c69ee34e66378ed0ebc1aed24ead9e63c4a7ae8c98bec8cdb608</hash>
        <hash alg="SHA3-256">2f3007e7b187ce41a6f8a60c7219e7fc4a74f85c566a6bb3a24a0b4f3cc1659b</hash>
        <hash alg="SHA3-512">3da5067909de8b314363a422f6092c3ee218d16292262d4ae40d7a5ba1b43ab69bab67e0f94381dd2dcc29f8dc280ca95f18dff89c8ddd186314de8e65a4e24e</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.kohlschutter.junixsocket/junixsocket-common@2.3.2?type=jar</purl>
      <externalReferences><reference type="website"><url>https://www.kohlschutter.com/</url></reference><reference type="issue-tracker"><url>https://github.com/kohlschutter/junixsocket/issues</url></reference><reference type="vcs"><url>https://github.com/kohlschutter/junixsocket</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-shaded-netty@4.1.65.Final-14.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-shaded-netty</name>
      <version>4.1.65.Final-14.0</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <hashes>
        <hash alg="MD5">372faa03c506b7e5dc4acac933a77f83</hash>
        <hash alg="SHA-1">e1b2434e2aef7d00918bf0f9bdc8ef395b2136dd</hash>
        <hash alg="SHA-256">c821d36d0663f75dc0f3e1de2e4b88584f79900473f209a9eddf5f87d8fdf9eb</hash>
        <hash alg="SHA-512">8293ffb6f519f1b0287aed9d4c07300686410127362ce35439d362630c9ce033c5309c0b90e8c7c667aa70bb1da1357aab640353674c398e99f81c25317d2cf9</hash>
        <hash alg="SHA-384">9f4d35fdead79cb334a0f14b2dc049f9c4e8831889a1d2bdc45d97c432a41a60fd2d364fec627acfebeee2ee8b9b59ca</hash>
        <hash alg="SHA3-384">eb3d7e78f47e35a46960a94cbd5c3df78a0cad218af8d0353a0c8530fbe241e2ab6ee3b727b33289b28f6ca4a6a87f6c</hash>
        <hash alg="SHA3-256">77295bacdcaaceefe9c168f900aa75c671c76f119e81c9138b91e7d6ef36c99b</hash>
        <hash alg="SHA3-512">9710a3127be1ffbe304c2370a3b44082e5153d6aa933de60fcc265d5e3b776fdd79e1a234372ca577374aa88a7a2d123a4ed12b8bc68c375f2a447b259827e65</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-shaded-netty@4.1.65.Final-14.0?type=jar</purl>
      <externalReferences><reference type="vcs"><url>https://github.com/apache/flink-shaded</url></reference><reference type="website"><url>https://www.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.auto.service/auto-service-annotations@1.0-rc6?type=jar">
      <publisher>Google LLC</publisher>
      <group>com.google.auto.service</group>
      <name>auto-service-annotations</name>
      <version>1.0-rc6</version>
      <description>Provider-configuration files for ServiceLoader.</description>
      <hashes>
        <hash alg="MD5">09521774af3bde8e3f39cc6bd8dec2dd</hash>
        <hash alg="SHA-1">32c6a6313217c949396376d9caddb6b8c8f4e7c3</hash>
        <hash alg="SHA-256">f55aee753b45bb49464d3aaa998ff0c48e4bf99240ab381842fa490d1d644e48</hash>
        <hash alg="SHA-512">363db1aac4d18a51cebebbeb79c4031ff659564480dd740a4a69ef6185ba2e39b4dd736b0685221aa206e0eb8fd193d8419486ca27ba23ecd6ba8ade64be480e</hash>
        <hash alg="SHA-384">063ea90cef58b4c9f5d9914c03d4a7d4772a69630dcc245c1d981b695d0210c61f0a04c53f5b6022b6468f8fb9d9d834</hash>
        <hash alg="SHA3-384">cd3cdf15bd863163c716b2e5822e1dd774a62b55517aa48408a9d2474faa7287fc91a629f6244096fbb39fb73f142ee3</hash>
        <hash alg="SHA3-256">a056e942cd75ca4288d903c80376e7baf78ca907d7d2c3e8f8573fd65543ce89</hash>
        <hash alg="SHA3-512">fed05b6b7b8e8ca423145cc0e9365dc4c039b419ba6314c47322654b0803db50ea1be27cb96d16c47ea01e701df279eea72e92ab2dcefe1ce961230a3643ef3e</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.auto.service/auto-service-annotations@1.0-rc6?type=jar</purl>
      <externalReferences><reference type="vcs"><url>http://github.com/google/auto</url></reference><reference type="website"><url>http://www.google.com</url></reference><reference type="issue-tracker"><url>http://github.com/google/auto/issues</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-hadoop-fs@1.17.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-hadoop-fs</name>
      <version>1.17.1</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <hashes>
        <hash alg="MD5">d1a774985ca599218891fd0fa1a6ec67</hash>
        <hash alg="SHA-1">240904d97031a8c64871f857d90e679ebcae6121</hash>
        <hash alg="SHA-256">e5625ce3b98d4dfbce2a2ca128f6eed0b764839ab96bf0336d4da88b17ad4b67</hash>
        <hash alg="SHA-512">b9819c51908e99c2bd1905a21c48032e34fb6970b5a1964f9762c7bfec57d522af422ebbfef4f7bd6e3e99a9a1f3a98933aadde2d28b8491e37dc7db851bda73</hash>
        <hash alg="SHA-384">62ef23e01eccde331a16aadf533ea7e77ce0fc76228fea01c0da46b73196208998180ed2deb1909c860a5f8f7dab48b8</hash>
        <hash alg="SHA3-384">c00382c09257224a9d3403a3425a7625a08c277cad5effb1b74510529e86b20f8ac258fd3a45e27e72d95b7fe7d6830f</hash>
        <hash alg="SHA3-256">2a5c8f25c0779a6c47b1f4ee80af8eefa6d6fa37f1cc1f4b56a3b94e6dc1fb16</hash>
        <hash alg="SHA3-512">384050a2b7687836dbcb48a742f0de459ecf673f2a899acc07d2b49fd6a32c2dc6620e6b002d37c3cb4af6309c9e34c83968b93b8cc36c492da11215b90ebcf5</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-hadoop-fs@1.17.1?type=jar</purl>
      <externalReferences><reference type="vcs"><url>https://github.com/apache/flink</url></reference><reference type="website"><url>https://www.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-ml-servable-core-1.17@2.3.0?type=jar">
      <group>org.apache.flink</group>
      <name>flink-ml-servable-core-1.17</name>
      <version>2.3.0</version>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">cf4f9b8ac25147ff95285a2db9f88296</hash>
        <hash alg="SHA-1">e2717cde17eeff7bf9e09dc18913b034868fc3ef</hash>
        <hash alg="SHA-256">351aa73bd0abff555aadcb64be39b746d8e8a0551c3c5f72f3eabd22b92ad49e</hash>
        <hash alg="SHA-512">29c412dbeaf288e27c86d2c9f8ba2262e12aee5cce7a4ea9c52ad39c070d093f870ae8257324f135a437cac4310df8483b7818836b1bdd2fa932ff7ac65eb0c3</hash>
        <hash alg="SHA-384">7617dd63893df87c05a0f0c45bf232be59fe1ea596224143756d468e1f7b6af8340dc13c86f67a0954612d725174d237</hash>
        <hash alg="SHA3-384">dbbcc50b9ea99419631afa94c5ef925788aa593e958e9e24ac7b67f788eb47ad3c9c5eda14b1117f7c84f218f5cd5ee4</hash>
        <hash alg="SHA3-256">0852c33eee99eadc78276bb166b2e4037870612c8e9eb6d24a7def1449c988ae</hash>
        <hash alg="SHA3-512">acc80df5b3f1079cd0b01edb09744bb3bc880e56679fe4cfb2afc69ab7e9ece9f60bfdcd6e21a4f2387527c7a78e34cc24a4d7d32460fdb110544e695712b3f6</hash>
      </hashes>
      <licenses/>
      <purl>pkg:maven/org.apache.flink/flink-ml-servable-core-1.17@2.3.0?type=jar</purl>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.commons</group>
      <name>commons-lang3</name>
      <version>3.12.0</version>
      <description>Apache Commons Lang, a package of Java utility classes for the
  classes that are in java.lang's hierarchy, or are considered to be so
  standard as to justify existence in java.lang.</description>
      <hashes>
        <hash alg="MD5">19fe50567358922bdad277959ea69545</hash>
        <hash alg="SHA-1">c6842c86792ff03b9f1d1fe2aab8dc23aa6c6f0e</hash>
        <hash alg="SHA-256">d919d904486c037f8d193412da0c92e22a9fa24230b9d67a57855c5c31c7e94e</hash>
        <hash alg="SHA-512">fbdbc0943cb3498b0148e86a39b773f97c8e6013740f72dbc727faeabea402073e2cc8c4d68198e5fc6b08a13b7700236292e99d4785f2c9989f2e5fac11fd81</hash>
        <hash alg="SHA-384">c34b8a0e0eba2168ad56fedeb7a1d710b6f1d3f1ce6aae99a4e0247bd120efbbadc8dcb2f731045b8a16e3efd30604dc</hash>
        <hash alg="SHA3-384">8ad6ebe7754bf0caa8cda7e59c0e95360d76e06a7ad6aeec5637985519dbd1dd06e7eed04711039f36ec4c49de280def</hash>
        <hash alg="SHA3-256">18ef639b2aeeb5aedffb18dbf20c79f33e300d99fb31b131689639cc470e6e4c</hash>
        <hash alg="SHA3-512">fbea96114dcf4f31cfaaa99987be756ddda3a6c74f8c835461997df794d54b92da1f60fe5c3f1f2a43cb8c5f5db7f4048bef77c70993673c7a93f3660fffc8da</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar</purl>
      <externalReferences><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/LANG</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=commons-lang.git</url></reference><reference type="build-system"><url>https://builds.apache.org/</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="website"><url>https://www.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/dev.ludovic.netlib/blas@2.2.1?type=jar">
      <group>dev.ludovic.netlib</group>
      <name>blas</name>
      <version>2.2.1</version>
      <description>Implementation of the Netlib APIs in Java using hardware acceleration.</description>
      <hashes>
        <hash alg="MD5">f53f00b91c5ed18ea315f5f14a31d164</hash>
        <hash alg="SHA-1">5c6ccfe1220ef06b38f4bcd0fc34e95c9846d9a7</hash>
        <hash alg="SHA-256">3550832630de7ad6460164413cf14890ded7369998b3a4d1ef689a215560f212</hash>
        <hash alg="SHA-512">59277b2dedb370f01344ff1e5e6d114c33e9af638c8bd4d34edf47be6adac63af329eff01c84f0fa6dd04fb2e28ad84a9b3b91c807cd695b885662a64352117b</hash>
        <hash alg="SHA-384">06204a102b2816bffcd5936e883026121531ed8dd45aafd7126cde6ef71c4c2692994186ac6ac60937ff1cfde91c1261</hash>
        <hash alg="SHA3-384">ae2e2756636b62d61c461115fff6525aa7877b0168ad59e3c37495f1d7db58021e966fcabb33e6a00097fa8aa5e6511a</hash>
        <hash alg="SHA3-256">35bf68fda1228f62c86104d989914ede5df5d414c5c47fc46752e74b65731dba</hash>
        <hash alg="SHA3-512">0e3ee0d7d1db39901e91749d42e8db0e857853d14d0bc61624f23ee9667ce90a57e2eedf8fc413e67addf57f1921dbfe3c44dfe93b3ec732d8806498521a657b</hash>
      </hashes>
      <licenses>
        <license>
          <id>MIT</id>
          <url>https://opensource.org/licenses/MIT</url>
        </license>
      </licenses>
      <purl>pkg:maven/dev.ludovic.netlib/blas@2.2.1?type=jar</purl>
      <externalReferences><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>http://github.com/luhenry/netlib/tree/master</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/net.sourceforge.f2j/arpack_combined_all@0.1?type=jar">
      <group>net.sourceforge.f2j</group>
      <name>arpack_combined_all</name>
      <version>0.1</version>
      <description>Java APIs for the BLAS, LAPACK, and ARPACK Fortran libraries as translated through F2J.</description>
      <hashes>
        <hash alg="MD5">83d82dd480da2aeba6429e746453ec0b</hash>
        <hash alg="SHA-1">225619a060b42605b4d9fd4af11815664abf26eb</hash>
        <hash alg="SHA-256">9964fb948ef213548a79b23dd480af9d72f1450824fa006bbfea211ac1ffa6dc</hash>
        <hash alg="SHA-512">1ee91ab6a9b5d058e7580d42cf21af0d21f4ad3774689b56c275dedd72d2a0b49dc1af2e63834ac76e8ac6356380d1452377799633d8f71e922333ff7578e927</hash>
        <hash alg="SHA-384">44186a386ce96a108a0b46244c84640047ecb8ffa14d1c47040946dad936b91252cc4afc02a68736e2166817598a2f87</hash>
        <hash alg="SHA3-384">48d9bf716bc126daa772167068242b3e525bbcbf1f0d136407b5bf5a62e830c94f2c323cb2e2ca1cbff6c4a435725ef1</hash>
        <hash alg="SHA3-256">45e5d4bbff9fd3eaf734d2855f2d5b245a3cad53bbf76790d7aa3f75d8ea8532</hash>
        <hash alg="SHA3-512">ee391c458dbc6ff043f10abe6342bce827512c6e9a5c0ac0b32069fe3d73ef8ba4b2e39bda92976c980482ed455ede899d21f883ea1f2a88b4dbc4dfeb34d9f2</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-4-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/net.sourceforge.f2j/arpack_combined_all@0.1?type=jar</purl>
      <externalReferences><reference type="vcs"><url>http://f2j.cvs.sourceforge.net/viewvc/f2j/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.12.6.1?type=jar">
      <publisher>FasterXML</publisher>
      <group>com.fasterxml.jackson.core</group>
      <name>jackson-databind</name>
      <version>2.12.6.1</version>
      <description>General data-binding functionality for Jackson: works on core streaming API</description>
      <hashes>
        <hash alg="MD5">88088e2e9bbc93adb021ae8bf436e544</hash>
        <hash alg="SHA-1">df01cc0c2d4acb913d73d587274986a12e3dec8c</hash>
        <hash alg="SHA-256">eb60e494ba8c23e653da4db8e29af0342927fc7e1c60501bf99e93145738c696</hash>
        <hash alg="SHA-512">9fa25c2a2917a751a1d77ff5301627a1adf48fb8b9924acb47d176b142fe791e4b12b7a526327e93557d0052dc10ea210a87849f1d292ba4ec581357f1b21971</hash>
        <hash alg="SHA-384">48ec219d4a8692ce850d7eedaf7fadad2c1891887773d3b90767538a4174248c8b51ceb5360ba8fa3e69efa736c3abde</hash>
        <hash alg="SHA3-384">8ca6c47360018827f1593d66786ecea285851c502ac43f7f42e81eb4254d637df7d45f5e88318e386de3d6bece38fca3</hash>
        <hash alg="SHA3-256">40bdbd0d303793df14d3fa8c5d6266a208793e466c0fc7ba5b39d29c134dcf80</hash>
        <hash alg="SHA3-512">ff1a8f9259cb6ff708a5ccc2505815b7c6fefb8ca6995a33a821bbea6f8a6f253cd69d9651b087de9cd3b8345ec75f59760e064f5389e0976e09e73efee6faf9</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.12.6.1?type=jar</purl>
      <externalReferences><reference type="vcs"><url>http://github.com/FasterXML/jackson-databind</url></reference><reference type="website"><url>http://fasterxml.com/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.fasterxml.jackson.core/jackson-core@2.13.4?type=jar">
      <publisher>FasterXML</publisher>
      <group>com.fasterxml.jackson.core</group>
      <name>jackson-core</name>
      <version>2.13.4</version>
      <description>Core Jackson processing abstractions (aka Streaming API), implementation for JSON</description>
      <hashes>
        <hash alg="MD5">e8f064827ddb8deb06e45d20988bcaa5</hash>
        <hash alg="SHA-1">0cf934c681294b97ef6d80082faeefbe1edadf56</hash>
        <hash alg="SHA-256">4c2e043200edd9ee7ba6fc378bd5c17784a5bf2388e152d208068b51fd0839cf</hash>
        <hash alg="SHA-512">cf54bf5be3a5015a4b2c3ac986bf01f64517df224c8ba67197118d06f7fbe8ad64e39d002df326a72feb5aec8f0bc7f15338e90c4ba0668a167a0f03a81ce47f</hash>
        <hash alg="SHA-384">5fd2723a9f5bae811e71b596180c56355497f87cdd6c9bdc74716224ea1d133b6ed4e5df20b6ec169b3745066019ad94</hash>
        <hash alg="SHA3-384">47217ac4e35397ed519916b26ec780ecbff69de0069afcbf9329a84f52b0e8fc4700e0c7b6bce7b9ddf585df7d944f22</hash>
        <hash alg="SHA3-256">2be4b3203664ef4249d40af8d3ea9516805a573515a8ece27c5e625c0969ed0f</hash>
        <hash alg="SHA3-512">75b4fa4464de9e5efbed460b940ef79b34fc7c477cb61540960f6e56039915a520176d6bf42077453cb049ec184d3b6d88006a4016a02b5de87da907d8c0791a</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.fasterxml.jackson.core/jackson-core@2.13.4?type=jar</purl>
      <externalReferences><reference type="vcs"><url>http://github.com/FasterXML/jackson-core</url></reference><reference type="website"><url>http://fasterxml.com/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.13.4?type=jar">
      <publisher>FasterXML</publisher>
      <group>com.fasterxml.jackson.core</group>
      <name>jackson-annotations</name>
      <version>2.13.4</version>
      <description>Core annotations used for value types, used by Jackson data binding package.</description>
      <hashes>
        <hash alg="MD5">7e982dafcf25c24b365b5088eaf8a0a6</hash>
        <hash alg="SHA-1">858c6cc78e1f08a885b1613e1d817c829df70a6e</hash>
        <hash alg="SHA-256">ac5b27a634942391ca113850ee7db01df1499a240174021263501c05fc653b44</hash>
        <hash alg="SHA-512">788a836b1631dabed472a0387de2ccdf86ab9091b04246d58e257780bb382e6ae068b6df862407c1256b0b83d1f9366813e54e98982f881c3d222a9f4a8e9ebb</hash>
        <hash alg="SHA-384">7ae717dc399ccfe7c2a4831fae5c410d896e0a5afdff710003fa306ae2663a3c21ca000edfec9cdba30b0997c4c66757</hash>
        <hash alg="SHA3-384">fd2b435781f0870b572ce493a7c2e8cbc0cdfec80a24ae9a3d0874c27f84fb527a80afdc30a4f641a8f5389865603f4c</hash>
        <hash alg="SHA3-256">d6a55b712e499803461575b89eb8e2114307c88ba0e7fa56a65eab995b155f3d</hash>
        <hash alg="SHA3-512">295881324b5331e3e9530b26f719020f01f2ffd33ed96cdfad7983c3e4578e1eea0cce9d8ed622a1ec6b7b1b1e60af858b6813d08e4f31a38d1422d9c70a6a5f</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.13.4?type=jar</purl>
      <externalReferences><reference type="vcs"><url>http://github.com/FasterXML/jackson-annotations</url></reference><reference type="website"><url>http://fasterxml.com/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-ml-servable-lib-1.17@2.3.0?type=jar">
      <group>org.apache.flink</group>
      <name>flink-ml-servable-lib-1.17</name>
      <version>2.3.0</version>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">0a5b476109153b5561acabcc8197c435</hash>
        <hash alg="SHA-1">7229dde1efd5aaca9a42df294899510a024a84a9</hash>
        <hash alg="SHA-256">1610475685444b6d6451d4867935d41e693d93236abcf42e7ea0767a4177b103</hash>
        <hash alg="SHA-512">45cd804ced56ecfab3c1a82cc851dd5a81f3881154dc939fbb5f3f3c5965e199f6aa48dba508c76d6739ea9453e7bc6cf821866cc130534076c35b000dcd6ea0</hash>
        <hash alg="SHA-384">d05410535490fed0c8bdac1505b06790b02955bcebadae923ebe4952b8bf8453a0bda6d03d4a19bd671d6a9de35a088a</hash>
        <hash alg="SHA3-384">6aed8f955a28fa1843e4f88c834805d2b7703d0afefb001d10f924452d06fc8e9ed365181a29be7971970beea4e55db9</hash>
        <hash alg="SHA3-256">9bb590710b71346ba2064938790e2134bd48fe8e516aa1c9b9e35dfd17df7ec9</hash>
        <hash alg="SHA3-512">29ea00ee6663071390964050390bb0e66c381febeb734726e7741a797e98da2d5ecaffd822e2974d23ffd1950fb3547eeda63403818d19f58f9823ea5d2a50ac</hash>
      </hashes>
      <licenses/>
      <purl>pkg:maven/org.apache.flink/flink-ml-servable-lib-1.17@2.3.0?type=jar</purl>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-ml-core-1.17@2.3.0?type=jar">
      <group>org.apache.flink</group>
      <name>flink-ml-core-1.17</name>
      <version>2.3.0</version>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">cc347c0ecbfe4c65eeb1fa5e83e9d354</hash>
        <hash alg="SHA-1">73ff3fda527f0e1831290e4f588cb517bbf7ef83</hash>
        <hash alg="SHA-256">76f0fd39eb6ce971ee3a82f6804202c709fbc191376346b25f5ae25a86ac0112</hash>
        <hash alg="SHA-512">013178ede635f6b8030ebbabd788e0c77cd543681a334e616c830f885515400041a01d3cb4dd7358eb82011a7542836faa29ca169f3723524cfcd495c4074391</hash>
        <hash alg="SHA-384">517542e5a7f7f169fdae0023b750b0ac721da7c2f7b067b40c218136e21fabc0338fb229ee77d907ae56f09bac89f65a</hash>
        <hash alg="SHA3-384">5cffc1810384a27f966489ed237d101dc705adf3d276c44dec74ec05483df4555b662773893349abff64b2310cddef98</hash>
        <hash alg="SHA3-256">6330940eb143ca9bb0c6246ee53cc7971ed807e7255c9fd3aea4ab6d0477e810</hash>
        <hash alg="SHA3-512">23abcff5d0be1e6ed11d0a302b4947b9bbe84095422bacf64e8058f247878ff4463bd65fb61212ac9247b05f4b47436b54896ff234c6ea397a3e2611b8f4d305</hash>
      </hashes>
      <licenses/>
      <purl>pkg:maven/org.apache.flink/flink-ml-core-1.17@2.3.0?type=jar</purl>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-connector-files@1.17.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-connector-files</name>
      <version>1.17.1</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <hashes>
        <hash alg="MD5">65a5c96c35007164f69cadba70f56108</hash>
        <hash alg="SHA-1">fba1bd4dd3432a22e6d4813629f43bd96d487842</hash>
        <hash alg="SHA-256">56f0bcec7f88e893963bbbe1192b0196214d97b87178df83cfc0d7f3ef2614ce</hash>
        <hash alg="SHA-512">0959202e2cdfc76b4c1d2ec1923d19a8b0689ee03db25dcfa00832b44aae15cc50cbbfda1fb3026bbb3f278a44d7144ded48bd94a89da618338131edcdca3266</hash>
        <hash alg="SHA-384">426818c4ef2bc6fa40ae01f1786c1c3145ab865d3ba633290019d5e792680080815cfd93a6a521aae9a6f48383c5a6e6</hash>
        <hash alg="SHA3-384">4230da5b04ff3d58f959846e41fa92d427c2d7fb3404f64f623281e3940fc09b9388a8b501f85a624c071f7ab92834c4</hash>
        <hash alg="SHA3-256">5190920d29d528e968c44766d62462a57666aa226f706405e800799f7ae2f68e</hash>
        <hash alg="SHA3-512">ba3da5d2ab6e4201ba7fb1b91f0fc6ab38794d564d49c71be29e16968c085222515ff166c21ad13f98cb50ecf336a82731232cfc3eb38c1024b337d48cbc12ce</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-connector-files@1.17.1?type=jar</purl>
      <externalReferences><reference type="vcs"><url>https://github.com/apache/flink</url></reference><reference type="website"><url>https://www.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-ml-lib-1.17@2.3.0?type=jar">
      <group>org.apache.flink</group>
      <name>flink-ml-lib-1.17</name>
      <version>2.3.0</version>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">8b568873c3ad8db7cf6ff9d74133dd86</hash>
        <hash alg="SHA-1">a1a0f8dac755ec00eaad984dd831f7a07c271f57</hash>
        <hash alg="SHA-256">7e3e5a7b68a4963a124131c6a170ad7ddef53c5363f0202400eb150c356a26c8</hash>
        <hash alg="SHA-512">dd49c25f9fcba96fa3bc1f6f5cf78d9499137fb080ba394bb6edaf274d8449eb806abda2df6ee41a8834e30addeb68e1941061f06e655b1f5ecbf80983f7bf47</hash>
        <hash alg="SHA-384">94c188f061fd7d44cbe56ea4e4b1d5655f2ef33344088a4dbe163c7445b9d7d7a580b4329553be696ad5d7f81ef73981</hash>
        <hash alg="SHA3-384">d53dff0bf9d3da4cb6bbee0ad132e56efe6c1336d689f2b3d0fc6fcd5675119cdc1eb80bb05fd3e30868aa60e48b86ef</hash>
        <hash alg="SHA3-256">b85738aac0ceaaa90280ab74f4986cf021b1794aeaff0ff07484cf7393316336</hash>
        <hash alg="SHA3-512">4adc3e11cbce521b7e1c1d1a923e34002fd37675ac89059a68cb248da59b280f581099991100e07893d12a2a365abc7b3c08429c270a3f17b3fc20354597402f</hash>
      </hashes>
      <licenses/>
      <purl>pkg:maven/org.apache.flink/flink-ml-lib-1.17@2.3.0?type=jar</purl>
    </component>
    <component type="library" bom-ref="pkg:maven/com.github.wendykierp/JTransforms@3.1?type=jar">
      <group>com.github.wendykierp</group>
      <name>JTransforms</name>
      <version>3.1</version>
      <description>Sonatype helps open source projects to set up Maven repositories on https://oss.sonatype.org/</description>
      <hashes>
        <hash alg="MD5">2d8ae6ebfdefa987a7edfa718e8f7815</hash>
        <hash alg="SHA-1">f1f6d3c9c9bc04f848e38bdb77dea01e8764a01f</hash>
        <hash alg="SHA-256">d9dffa3e27793040dccb97b054d95267df46e669c396bf1ca4f3b085069bc2d5</hash>
        <hash alg="SHA-512">aa4756d0d3caac5603f97ed210be2a1eb6b38922c25257b8889dfa210fae21a879b2d3874260280881ad1ca4a51a240708226835e42bc37573ed08be290d47af</hash>
        <hash alg="SHA-384">9a76b2de4905d7ccb2be855dbdd272b53a64da36ae043f6c534c3076c477b0df748ee86b0925365384ce5b35fddc3734</hash>
        <hash alg="SHA3-384">8c666a53902fee896d5780da16353ebb749fd7e1aeb4eb9ad2d7d20875a9787718c5d1372be8fe43af3d702a9faa86c4</hash>
        <hash alg="SHA3-256">12a0118517503595fb3086dbaf4b17a1e20f1e4c35bce61e7c6a970c5aa78bde</hash>
        <hash alg="SHA3-512">d0b57b74d8db1e6f2aedc798aec0a1b6c78f00d5cea1817a1f95f53c342bce7b52da9d64d9624d4dbf3baf47eeeadd01aeb1e14c99c24f88268fa594c367679e</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-2-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.github.wendykierp/JTransforms@3.1?type=jar</purl>
      <externalReferences><reference type="vcs"><url>https://github.com/wendykierp/JTransforms</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/pl.edu.icm/JLargeArrays@1.5?type=jar">
      <group>pl.edu.icm</group>
      <name>JLargeArrays</name>
      <version>1.5</version>
      <description>Library of one-dimensional arrays that can store up to 2^63 elements.</description>
      <hashes>
        <hash alg="MD5">9e9af6183a8ad44b01b4b76a34a56821</hash>
        <hash alg="SHA-1">0fe1350c7b5537c144fb0af39206e212ad1bbbe2</hash>
        <hash alg="SHA-256">6dca5ab23e1fdb9190a257c04687a9ea19111c36b6ec9478bce6b2a128ca1aeb</hash>
        <hash alg="SHA-512">fb38fc149a338239d13abfa2992082eaf0e945c05e8e2f0493cb3aa0504525a8cfb3cece7dd002e875e1520b7c28ad8cc44804919a1ab4651b8e8a063ca7e689</hash>
        <hash alg="SHA-384">930666603becd3bb6c92fc1fb30b19b50c015297b64f193b3c1510a0752a54e0f88e3cfbb2c99da49b40a829afe8de7b</hash>
        <hash alg="SHA3-384">387982cb4bddc4db47d9d98ce67552816230e198dac3e9b68a80f9e4aa78011b137e022f873eb2b931d1ae81d4a78b25</hash>
        <hash alg="SHA3-256">246865aa199467eb55f50f9b22bbca69209ecd62014c2c24e61827a9f42e72cb</hash>
        <hash alg="SHA3-512">fa805a4053b81ef7574de8567a2e9de42c318aa6389420e0c57ce02af4bed6ed52c3970595c5fdd18cb2b3fb3252a08dd47c67baf20d396c86a68b050b849664</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-2-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/pl.edu.icm/JLargeArrays@1.5?type=jar</purl>
      <externalReferences><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-table-api-java@1.17.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-table-api-java</name>
      <version>1.17.1</version>
      <description>This module contains the Table/SQL API for writing table programs
		within the table ecosystem using the Java programming language.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">ee175a04913bc7d17fd94b22164f17a0</hash>
        <hash alg="SHA-1">256f20fee3dfef051b6b3e5fcec6bbbd03e19bd9</hash>
        <hash alg="SHA-256">401be836813f1dc1b2da560935798a439e6cc4d51c939d25d86e184c98664ee7</hash>
        <hash alg="SHA-512">9712ba166ca113057cba69dbc9e3b97ffe991d6e6e0edadc63956463e5f68e8da599ef4edaa0a5492a0703d9bf99d8c7ab57936be0faa822e54b0277f4fa4935</hash>
        <hash alg="SHA-384">671cbc1d0b8675f65d76b5428f88f7ea53d40dc2951a7341663432d7fdc62db19dcf803e88a96434775457dd83991b0c</hash>
        <hash alg="SHA3-384">8e0d736e4407a56353d6e513cce7c4a376bd6b4215c7b0951b77e9084f35459a4bc69ef13fd51f434f8be4d3b0d1a11a</hash>
        <hash alg="SHA3-256">34061554084fb183aa7c54073e3d0a00127823fd73bb87657070fbe6df35feea</hash>
        <hash alg="SHA3-512">8a250eede8d7b4425176ff82a403ef9a9a2fb5cdd14733fe972bb4f38fb219a7d2dcc31b7767f4a2b5d4e0f40f3c6b67652d664c4de8653c13d0516da570b06b</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-table-api-java@1.17.1?type=jar</purl>
      <externalReferences><reference type="vcs"><url>https://github.com/apache/flink</url></reference><reference type="website"><url>https://www.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-table-common@1.17.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-table-common</name>
      <version>1.17.1</version>
      <description>This module contains extension points of the Table/SQL API.
		It allows for implementing user-defined functions, custom
		formats, etc. with minimal dependencies.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">2e6ff023915b940088eb411d8200084c</hash>
        <hash alg="SHA-1">82b9739dca5e7319c1eb84d24e95dc544da7a52b</hash>
        <hash alg="SHA-256">a44a406f9852e2b3ffbe44946e1d68d2e59bd0ea67e08be2f83d2d8c8ec0aa2b</hash>
        <hash alg="SHA-512">a93baca80e27994aeede7a9d3986a16fc7b707cdf73363ff00024dc002ce945be3d55d0cbdce5d8365dda73a4bad046d63d091d22e33c3a1556a6df2b2068ac9</hash>
        <hash alg="SHA-384">799a21414eef7ca1bc1e915059181a199663debb07a74ee9d7417f683f08d06a0d861fe094a957a90fd618882ec69f77</hash>
        <hash alg="SHA3-384">2e87638d2daae5333055124a8f0b396a6b0351f8e877982b6a0632a9b1a66d262070c4dfcedeafd0872fb3abe1455f6f</hash>
        <hash alg="SHA3-256">a0b03516f4a655ea3cf620035e9156d45d4d28306f42be7e01ad761a516a702c</hash>
        <hash alg="SHA3-512">f4a916a1e22010ca29b35c88a0ceaf001763ca2b22f3064a383ddd84041e288b9eb3d9a39a11994674243e0f6f0d4b06d5ad0ee032a6a6ca18429020445b9992</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-table-common@1.17.1?type=jar</purl>
      <externalReferences><reference type="vcs"><url>https://github.com/apache/flink</url></reference><reference type="website"><url>https://www.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-shaded-asm-9@9.3-16.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-shaded-asm-9</name>
      <version>9.3-16.1</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <hashes>
        <hash alg="MD5">8ab02de7e3964cac3f5f49c2b299aaf8</hash>
        <hash alg="SHA-1">252941e7a5e6772647ec1c222bebd92eddea79f2</hash>
        <hash alg="SHA-256">bca08c293e85b88a3ee5a4b4367af319c396047e03257a4787370f15f39dce6d</hash>
        <hash alg="SHA-512">d712544a0f1c3d0d4db88045de14b014f23b745b6f98dae78a3656cb3b3d7418f91fda32f87d16f8a69c45b47abec57f8632ed6e7735136a79873ee272cb5a50</hash>
        <hash alg="SHA-384">4982ca611821a37c4f5828d3859fceff2ae35846bf1a7d3e61b652cc6fefb3ca1f242886bf637000af35bbef4f78a276</hash>
        <hash alg="SHA3-384">999d8fc55a945dd3f1dc3afe39c11cea410b4dcb276add05c5208065fa831dd5becfc3bca5b5190cc0c95c4c40bbf799</hash>
        <hash alg="SHA3-256">79ab56b5730adbb1846839c0979bbacfa43ed50d091937bc8dd430f4cd4c0530</hash>
        <hash alg="SHA3-512">6b9ef575a614b746404437ce3e0ec1eb30071bc53404aeb3c0a2b6da231b533285146b82a5bac11e77ed86b5c49b0c6fc77cc89739ec0f01eef956275f15801e</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-shaded-asm-9@9.3-16.1?type=jar</purl>
      <externalReferences><reference type="vcs"><url>https://github.com/apache/flink-shaded</url></reference><reference type="website"><url>https://www.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.ibm.icu/icu4j@67.1?type=jar">
      <group>com.ibm.icu</group>
      <name>icu4j</name>
      <version>67.1</version>
      <description>International Component for Unicode for Java (ICU4J) is a mature, widely used Java library
    providing Unicode and Globalization support</description>
      <hashes>
        <hash alg="MD5">046a5f59abf6b67a464dea584d11e59d</hash>
        <hash alg="SHA-1">2e159807158095566726600534034030dddab6d0</hash>
        <hash alg="SHA-256">c4eb904caf5fba968a2f1a3b8aef14df801e9329b21697209ca30bfcf153867d</hash>
        <hash alg="SHA-512">b3036b162356a0a5dad39eee611dae27c6fbe53f9e5ec1f3529ab02d49d97093b58602f43dd855433a0bbe02f6253e46a9d1899911c8e2e73001ab2c9a79d68d</hash>
        <hash alg="SHA-384">c2b28649d0ef9bf68f258a9f432c627a553ead79670f0a7ada3d986091a0001c5ab9eca372f792734bff733370a61fb1</hash>
        <hash alg="SHA3-384">3726bfa8b77bd0cdd66564944044d82dca3ee1fcf2594ebf1a7acc6752faf4c11892a1744af27e5528dc4b991e4cd0c0</hash>
        <hash alg="SHA3-256">cb19cec2baad1dc610267b2c98325f5c742230caf2247ef6297dfe8d9be9f11d</hash>
        <hash alg="SHA3-512">f46e4ead1cc1c05c3825716485ce79c890500a5356f8e7ca578f3080c09fb2460fb1aed81d65d345c402706906ea4e96afc0ff03c50fb0ac5bbacd351a8f11ec</hash>
      </hashes>
      <licenses>
        <license>
          <name>Unicode/ICU License</name>
          <url>https://raw.githubusercontent.com/unicode-org/icu/master/icu4c/LICENSE</url>
        </license>
      </licenses>
      <purl>pkg:maven/com.ibm.icu/icu4j@67.1?type=jar</purl>
      <externalReferences><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://unicode-org.atlassian.net/projects/ICU</url></reference><reference type="mailing-list"><url>http://sourceforge.net/mailarchive/forum.php?forum_name=icu-support</url></reference><reference type="vcs"><url>https://github.com/unicode-org/icu</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar">
      <group>com.google.code.findbugs</group>
      <name>jsr305</name>
      <version>1.3.9</version>
      <description>JSR305 Annotations for Findbugs</description>
      <hashes>
        <hash alg="MD5">1d5a772e400b04bb67a7ef4a0e0996d8</hash>
        <hash alg="SHA-1">40719ea6961c0cb6afaeb6a921eaa1f6afd4cfdf</hash>
        <hash alg="SHA-256">905721a0eea90a81534abb7ee6ef4ea2e5e645fa1def0a5cd88402df1b46c9ed</hash>
        <hash alg="SHA-512">06da282cfd8e30d9f8cf17702b8709172b00e22b75a627a1d85f8989615b8a1a401bc25d9aee7b14aed1d9b5df73bf2ea8d66f9c8468d9577c29f0ccfa2cc70a</hash>
        <hash alg="SHA-384">56e6b41ef62eb5edfed0203802cefae9c2df86388148e420bb0c687abb2b80e14d5c2a82d5b35dce4badaf148f94eada</hash>
        <hash alg="SHA3-384">58c3bf89fa1afa75c2c5078159fd28e27b2273d437f26aaaa7391310b6f0823f3cf476a24f5631c0881f3f7e946d99be</hash>
        <hash alg="SHA3-256">c333ea5faedfa78e0614a2620438d5724eab093df4e960918391b6a44c2915b0</hash>
        <hash alg="SHA3-512">67ec31448e156cc72dd036060b460bb2667a13b1cbe500b6b7eed3235b1994b44c39f440ebd07b21ec9595b166ad61121d4f6a132b5b313c558ab21b72599425</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar</purl>
      <externalReferences><reference type="vcs"><url>http://findbugs.googlecode.com/svn/trunk/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-table-api-java-bridge@1.17.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-table-api-java-bridge</name>
      <version>1.17.1</version>
      <description>This module contains the Table/SQL API for writing table programs
		that interact with other Flink APIs using the Java programming language.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">2e6afb8376769cb4fa3cd4088a61f546</hash>
        <hash alg="SHA-1">a5df303aba24896b040dd3ee0aca3f4d5a652c8b</hash>
        <hash alg="SHA-256">0cbda191f3af29909caa408b4b9d472967c89e99d3946a275e5461f6a6f87c0d</hash>
        <hash alg="SHA-512">5f28c6e1913e7863d2164f1a3174e684beadd04fd0da3f789c33abd8de85de85f30f0b5151e713b061be3e1105e155e2d7f663219738111243a184607f8e234d</hash>
        <hash alg="SHA-384">fafa549a018ff4ea6d448121d189060142d01e389e1a458ea1772d0547a3fc4b158656bf71648a8a870049c40b446044</hash>
        <hash alg="SHA3-384">4bb55740669d5c8d8eae72f59e6f10dc64b6e12e19d4b02671dddab3261bc9ac19808aa296c215699a669fafa6d39b35</hash>
        <hash alg="SHA3-256">745b5a0bd2cecc8a8cc370c9f59225723bb102182dce80909366b823db79c4a9</hash>
        <hash alg="SHA3-512">9abd5705b81728ffa2ee2d64fb3eee07f37c908793f68c9bc8ed3fd991ac1254ce467de2ec00c36234a885b2bc7c5893b764d6345e7352425cd05b08bd40c988</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-table-api-java-bridge@1.17.1?type=jar</purl>
      <externalReferences><reference type="vcs"><url>https://github.com/apache/flink</url></reference><reference type="website"><url>https://www.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-table-api-bridge-base@1.17.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-table-api-bridge-base</name>
      <version>1.17.1</version>
      <description>This module contains the base code for bridging between Table API and DataStream API for
		both Java and Scala.</description>
      <hashes>
        <hash alg="MD5">3a6a7373cbbf88b33181434c7f97b4b2</hash>
        <hash alg="SHA-1">b632e158c1d4e851f33c6669a8e383bd00987b89</hash>
        <hash alg="SHA-256">ef0b12cb37d10aeb40973eac6953c86db10564d811ea63c1785f4e57dbd2b7d9</hash>
        <hash alg="SHA-512">a165c5a154501b5d113dbf42628e19ad2832fac94e97053f43702ccd695eed7572f0432eff9554d8ba405271a9d393cd737ad0d243c1b78e010ca08a542fceb1</hash>
        <hash alg="SHA-384">858f8dfd269207784d9f2c4830e4765b4c0e1508e0cb5421f88173b1e80b50331830f67b87d04a2820f7cc2279420871</hash>
        <hash alg="SHA3-384">249aa61c386e1e0af7f32b89e2266e5c5cdf133c98fada397682eafe15d95b6981063170c86f985aaebab0d0bc6f1855</hash>
        <hash alg="SHA3-256">69bcc5cc70f7838a471d3f5c090350e68cbcb24e82304f1061a1f9c9945fb9cd</hash>
        <hash alg="SHA3-512">7bc2638aab2101f08c64f011a99d19015f9b1ebbea0f70efcee0117bd2dcb58acac3cfa5c680dc8c314b32400d3f5616696c7732cc6327ef35d6fe5cc18fad42</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-table-api-bridge-base@1.17.1?type=jar</purl>
      <externalReferences><reference type="vcs"><url>https://github.com/apache/flink</url></reference><reference type="website"><url>https://www.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-java@1.17.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-java</name>
      <version>1.17.1</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <hashes>
        <hash alg="MD5">387ac7efbd3ba10a609e411d25cf1636</hash>
        <hash alg="SHA-1">dd0a38bcaad30ab2c04831fc6fdaa85e29dd2fb1</hash>
        <hash alg="SHA-256">f357c30275677e9b18236661c67068babf5ba9e39f638b289071ac232192e3f6</hash>
        <hash alg="SHA-512">eaa47135a00cd02f5e0d140edace72430cafe6430c28f4f26d59371ce02ae2970e609173f3a3993320ca5d611e2523ef5131ba3f915b1586b7d40414538e4e9b</hash>
        <hash alg="SHA-384">d584988d5789b0b24d7403715d4cb16e31c165a0efec0b498e23bba26713758c410308ec875d3d70df5c647873d5de2f</hash>
        <hash alg="SHA3-384">ffbe1e4968763aa484d11c07eb7d60f570312734e5e9958f9270945949d7e56cf9e40930fd94b0df2db73f132c6e4708</hash>
        <hash alg="SHA3-256">b64c9253bf33c3f6f4e272f237b3457b294f2578782745044ce0da6e8df32e70</hash>
        <hash alg="SHA3-512">e4c8cd76ad4e698090ee6769bfcf467fa9b15df965cf6fcf6c0eeb75b13bfbd60b967f1465802e2af06ea5111968fe5cd40d50460f1fc4e164c58a7cff0180cb</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-java@1.17.1?type=jar</purl>
      <externalReferences><reference type="vcs"><url>https://github.com/apache/flink</url></reference><reference type="website"><url>https://www.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.twitter/chill-java@0.7.6?type=jar">
      <publisher>com.twitter</publisher>
      <group>com.twitter</group>
      <name>chill-java</name>
      <version>0.7.6</version>
      <description>chill-java</description>
      <hashes>
        <hash alg="MD5">886eb8ef6db3880433f4a8e10ef37300</hash>
        <hash alg="SHA-1">a74b8d019d6941d82ff86d1612e382f4a0ae8259</hash>
        <hash alg="SHA-256">f7c41a2257be11e6c9bca97095c8f4b0299626941a3508469f90622eb8f8368e</hash>
        <hash alg="SHA-512">dc9973909b87cfb85ee45c90662612dd2bc137b7510172221eb47020f76b23eb3ea76c6b4fba4cee5d81e910f87aba71359136d33ae0f6424e3ce7123bf77dbf</hash>
        <hash alg="SHA-384">41e7faed7c2c22987868fba7cd6dac0d59d174d82d841ba4e5aa8675cc9265bf9d9df021553a781cfa24c4c9c7a35c5c</hash>
        <hash alg="SHA3-384">32751d6ecd77676ffa11a109dead8c8d19a6d1d78576b19ac5a8323d9446ba51fba87e0d60820dd2bac69fb705aa2061</hash>
        <hash alg="SHA3-256">6bdf2ed042c5b7f4f4d11bb52e448ce740e18563364f66730ca2b6b4eadf0401</hash>
        <hash alg="SHA3-512">0ab14bee65d85803d5080f3b0ad86183daafb61e3ca3a610e199bc04a11421b45436e405dc3c227b5d80a64178ca82739eccb5ad8ee157efa925d484d9daae28</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.twitter/chill-java@0.7.6?type=jar</purl>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-streaming-java@1.17.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-streaming-java</name>
      <version>1.17.1</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">7d1520e7cd350bf747f1a450b09a141c</hash>
        <hash alg="SHA-1">b581e491791fd83c0a40fcad49ca4faa14fe2430</hash>
        <hash alg="SHA-256">d8b4f8d5cbb1fa2df7d6923f49ea6ace2f495d58295fbfbdb9f61c9410397bb3</hash>
        <hash alg="SHA-512">02f29959a7d6b372ee203b72943fe6f2dbbcce6c66af0e5451b1ec9b4a1b66edb0d28001567ad9c76547c2953a2a24b3221eb38e83a6ec290783baba2f778ce2</hash>
        <hash alg="SHA-384">1826940cad88948ab42d52b7b66d285061fabf5127c6734fbca47d4d4904c6fde38b2905dc4fe6b7c8a3380040492815</hash>
        <hash alg="SHA3-384">4a03eef68af9a0933881d8000c471c79e9e1217a375e2fd2e1bac611f737e781585632dc4d63368c5f5e8d8a6d87beaa</hash>
        <hash alg="SHA3-256">7b0dd86d93e255464ef6fa51a4b4f5b9d0c768b15c7283d2c8627c3e5b9d90a0</hash>
        <hash alg="SHA3-512">138e9729d3bfae5a7c86a4e1a507a7f1698659be00141c20c547e1619ae9fbdfab0f72583281b43c3f0897c437a1874c61bbbb8b3335427c401c924facf8e4d4</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-streaming-java@1.17.1?type=jar</purl>
      <externalReferences><reference type="vcs"><url>https://github.com/apache/flink</url></reference><reference type="website"><url>https://www.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-clients@1.17.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-clients</name>
      <version>1.17.1</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">e0a63445ef54a563b05edf3a2b5c6c9a</hash>
        <hash alg="SHA-1">91cef1047ab10a09d452000d10302f42f6d9a5bc</hash>
        <hash alg="SHA-256">de59b2fac92e8bb0d46b64bfbc084ba171343f3500877c5476b595955a02088f</hash>
        <hash alg="SHA-512">215031b1ef2ac548e22c1b23520271b07aff1daca1f247b79bbac1cbd5a34df3e3670980a8ed9bd7318be061ab509f7b99496b106ea710efdc42605a806da022</hash>
        <hash alg="SHA-384">674e5cdb834b40ac6cb134bc2c9e73efdb5775f6cf651b9b0539ba81a33e3c094574418006a6298909a57477b0eda04a</hash>
        <hash alg="SHA3-384">e799b7829c5a99087c636740c8c471c04c26d4db1b3e9dd82ccf38cfab11817fac086be56991f817e40f6c9e45ce48df</hash>
        <hash alg="SHA3-256">8feb1a8dd7917767d3a15d2e1d2c7441482baa45e19498e30fc7ba9d96a77a06</hash>
        <hash alg="SHA3-512">3724cfa94d21fe156e10cd7027d88fcb7c7fe43139c39408d0c049dfec8702c4fc958b3232c135e96f370043735b9f1f1a4eeb6aceb0e0109385490f2950bd23</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-clients@1.17.1?type=jar</purl>
      <externalReferences><reference type="vcs"><url>https://github.com/apache/flink</url></reference><reference type="website"><url>https://www.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-core@1.17.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-core</name>
      <version>1.17.1</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">62384e653d69d3ad9c0364ef30bd67d1</hash>
        <hash alg="SHA-1">66410efd8122c3a85d07215c19710b41f8d46fc5</hash>
        <hash alg="SHA-256">53585d758f7ef9cd41aa9a1b633ab314064e3f8b705a932dd853db820ed5db64</hash>
        <hash alg="SHA-512">80c2fe2150d5c928665846580cfe10aa84d98d6dd505f53b1578ea7f8534c19d4d991f2b6756dffce7f759bde3035e30b9a187b2554f6e89473f9e6a7a97df58</hash>
        <hash alg="SHA-384">8fcd5b5beea52e83ace42ddfee41fdf4d0938a65288492029a9901414eabd2d2f1044835cf3ec4ee7893c79f8787b599</hash>
        <hash alg="SHA3-384">49723e3134d0698df9b6c5af42e579bdcc2fcd5b6aa731f0ff59ef4601a1d9d48b6b275889104604a9110266f66a6c0e</hash>
        <hash alg="SHA3-256">e488d4246b17a02d8ab0e3b15d2782242aca64a50d7ad796ff2861b0d7e99af7</hash>
        <hash alg="SHA3-512">dc3ed6688be8b50c8b6ed6f12b84a9a0f572bb1edb7ec1b086a4b4dd387801659fb6c37732a5bd0e73201ae3f50962377b34103a91178a24b19a5a4346af1d0d</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-core@1.17.1?type=jar</purl>
      <externalReferences><reference type="vcs"><url>https://github.com/apache/flink</url></reference><reference type="website"><url>https://www.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-annotations@1.17.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-annotations</name>
      <version>1.17.1</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <hashes>
        <hash alg="MD5">6a484f8e7db05dd32182c00339771910</hash>
        <hash alg="SHA-1">9ac69eef4fa3002190f00a710add62f0bff2ac41</hash>
        <hash alg="SHA-256">9855c1ddea53c95f841c9b8fd427bc5dca22ca48c49bb4cf763edb29d9e9f586</hash>
        <hash alg="SHA-512">3cd3b79ca2ae2b940de04d6f3814dcfbfbb3375ac2a1ae64f2e554914e0053a277cecfba9f2fea0c4f7ed8506bbdc6ac83f1b19eae011b3f20a5c2cb6e1ea712</hash>
        <hash alg="SHA-384">8b6662d183bc463860f8f81a1cb7225f02651f4bb844195dc13f25a03214fb6d921eda6eed88e46adc5ae28c13bf0819</hash>
        <hash alg="SHA3-384">948c9b5368264611bd2be95b2818f9afd29379fa6e3e8ae24a4fb6b159b2fc814da17e873e346e530a0a8876d245d413</hash>
        <hash alg="SHA3-256">0dd3ec129aa15153f112d3e23e3513fdd18c0c75b7530a34c9cf1fc6eca581ab</hash>
        <hash alg="SHA3-512">461977991c6a47e2b018099aa893cf36cca7a340120d4b6a610c6d608ede2951f154d62706e3d2d7bca7c3e04a5f1ee9b1dd187680ce2ac120b981e8c86a04fb</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-annotations@1.17.1?type=jar</purl>
      <externalReferences><reference type="vcs"><url>https://github.com/apache/flink</url></reference><reference type="website"><url>https://www.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-metrics-core@1.17.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-metrics-core</name>
      <version>1.17.1</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <hashes>
        <hash alg="MD5">fcd76c7d74b1d9e261cd6f37d6f399d1</hash>
        <hash alg="SHA-1">0df12fb26ff59fda89607ccce425c11afcaa1bfb</hash>
        <hash alg="SHA-256">3eb85859717c57699eb51ec4acbd45ea687d45565961db143a4efae4dbfc7188</hash>
        <hash alg="SHA-512">9231e2702b8378b66408d758cf72b227b683a080ffbdd5e8991a4afa00acb87f7f7c8db3d288983fca6cad9184207f834dcaec76a40814b98ecf87e2902a7985</hash>
        <hash alg="SHA-384">223f83fca18358ec250bf03405c903901900601877d7518dc96d96565dec7defc99443e0eb40879b91c02d2cfc80631b</hash>
        <hash alg="SHA3-384">abff51c1b02974ff9678d71bd08979846e9d820f22651f04d31dba98274b4bc1735868551b727cc8bac9081a53feac1c</hash>
        <hash alg="SHA3-256">e95a13975b115845ef8963e29b2923036d074c5cea2a46c579756ed446de1e2d</hash>
        <hash alg="SHA3-512">97f632cf9c98e6246343766db440610cff5846a67104a7e8b4573d921ece7da2d2918364ae8b8e347cdafbea65de714408aca3c6312af979e0710e9ff44ed9c2</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-metrics-core@1.17.1?type=jar</purl>
      <externalReferences><reference type="vcs"><url>https://github.com/apache/flink</url></reference><reference type="website"><url>https://www.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-shaded-jackson@2.13.4-16.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-shaded-jackson</name>
      <version>2.13.4-16.1</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">c26b24a1094f56a837610d5ea08ae0f6</hash>
        <hash alg="SHA-1">004e5fb57e10af9cd814258221c9f50c920e6c09</hash>
        <hash alg="SHA-256">601da81a8920228bfefc0a38229304340a6296a1f431522973bd2d7007f09d4e</hash>
        <hash alg="SHA-512">b2a66341cceb0dc75d1d1ccf4dcab69bef6289060b1688556443327b508b039d510298aea67dd1540122312db40d91dd86ad852f2afd0b087a479da340b580c2</hash>
        <hash alg="SHA-384">f9c750a59372ecbfd951b8ae5efef49110c060d43bde418bc723c5156bcf81b44f5a4c65fccbffa9642c978628dc9b00</hash>
        <hash alg="SHA3-384">47b7b04c995c96ca7bea2652c49001067c7350775557b73c1fd3d27214931f11ec0860580d8afdecdcb0944463ec790d</hash>
        <hash alg="SHA3-256">898aa072867959648b4fb6991967dacd1fbdccbc14c6f96548b138476203056c</hash>
        <hash alg="SHA3-512">e33b87d36aee6333bfe16771a06bbfbe8633d5d772f3ba4b036fd9130f6ad4a18d15b74be7a84f6d4c6eedb404b2b2f985912dce147744338b525d9594964bc2</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-shaded-jackson@2.13.4-16.1?type=jar</purl>
      <externalReferences><reference type="vcs"><url>https://github.com/apache/flink-shaded</url></reference><reference type="website"><url>https://www.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.commons</group>
      <name>commons-text</name>
      <version>1.10.0</version>
      <description>Apache Commons Text is a library focused on algorithms working on strings.</description>
      <hashes>
        <hash alg="MD5">4afc9bfa2d31dbf7330c98fcc954b892</hash>
        <hash alg="SHA-1">3363381aef8cef2dbc1023b3e3a9433b08b64e01</hash>
        <hash alg="SHA-256">770cd903fa7b604d1f7ef7ba17f84108667294b2b478be8ed1af3bffb4ae0018</hash>
        <hash alg="SHA-512">afd836a1094449e0a791fee67363666c47b6d24acff353a5089b837b332c0f4af89565c354682521e37062d20e6b52d70c77bb4f24cca9b9532c274fc708a831</hash>
        <hash alg="SHA-384">06c56e6e513dd77cf10d0da46cdea08c34e220e81fa024735b668c6650df4234e564fe865ff5cafea963f56b1e8ffd4a</hash>
        <hash alg="SHA3-384">f09065ed066c25debf8c78cbb0bcc738e1ea283302ec992dcfb649acb90091cff879465c65a162e94534d454e3b4e9bb</hash>
        <hash alg="SHA3-256">0b59c567164bb755f2353b78ba66744000a8c4b35e1df05255b080a21c3a3dd5</hash>
        <hash alg="SHA3-512">f0fbce02a862b70f472a27d0722c54ac111ca2eb94584b8b0b73d1926aec26047cd92542ad0b3cf980a6825077587f41b194aa93d6f6350d1b87e59e8df1be7c</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar</purl>
      <externalReferences><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/TEXT</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=commons-text.git</url></reference><reference type="build-system"><url>https://github.com/apache/commons-parent/actions</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="website"><url>https://www.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.esotericsoftware.kryo/kryo@2.24.0?type=jar">
      <group>com.esotericsoftware.kryo</group>
      <name>kryo</name>
      <version>2.24.0</version>
      <description>Fast, efficient Java serialization</description>
      <hashes>
        <hash alg="MD5">6cf0fa5b5d4f6b8226fd4a4bfb7532b8</hash>
        <hash alg="SHA-1">0c6b206e80cfd97e66a1364003724491c757b92f</hash>
        <hash alg="SHA-256">7e56b32c635058f9aa2820f88919ab702d029cbcd15285da9992e36cc0ae52f2</hash>
        <hash alg="SHA-512">a4c6ce768528a03c219cc6a41b22293f78e433c849c90391b64dda3f2376fd79951a89c5f4e6701bcbcb6eee9abffe2390cfb12dba3b885e4a3d411a26b78f40</hash>
        <hash alg="SHA-384">678ad1b7f4d99910b8ff44a6c8f78ccae91f823161ce23de39077397352919b7257e1e6e0dea90900be973291ea19282</hash>
        <hash alg="SHA3-384">671fc6aa9905f8131482e1d0f3fe26126562b13777893d51a66d0f84fc6f2aa3f13947e488ffba8f09c31a2cc0e9758a</hash>
        <hash alg="SHA3-256">46e89d8f12cbead0fe29ad707d5dba96e880dacce2a6b374ac4bf1ced9f36a79</hash>
        <hash alg="SHA3-512">c7cde437eef8343eccd4c5ecb8de5683529e3d4d8262e8cd1f7b7d0df9c632253b979737fd1b486314ec2728aee3a3782dee5d2032621485db4aa3b2a8262741</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.esotericsoftware.kryo/kryo@2.24.0?type=jar</purl>
      <externalReferences><reference type="vcs"><url>https://github.com/EsotericSoftware/kryo</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.esotericsoftware.minlog/minlog@1.2?type=jar">
      <group>com.esotericsoftware.minlog</group>
      <name>minlog</name>
      <version>1.2</version>
      <description>Minimal overhead Java logging</description>
      <hashes>
        <hash alg="MD5">f7cfbdf63b67df0bbfa4c7cb260885bc</hash>
        <hash alg="SHA-1">59bfcd171d82f9981a5e242b9e840191f650e209</hash>
        <hash alg="SHA-256">a678cb1aa8f5d03d901c992c75741841d98a9bc3d55dad02e84d65315c4e60f2</hash>
        <hash alg="SHA-512">7b4082766ad740d86708783f3b08780ed72dd18062aa9ba422c4b9016b332d2334ae511f50ef7d89e4eedbdac5cebc51ab6ddaf4d1eea857a3250eb5962f0d08</hash>
        <hash alg="SHA-384">932a282a9c06864001f8212199e4be05543609adbd985c5f4517ee6eba734acd3fd8812213bc0c98af264637cbf9c78d</hash>
        <hash alg="SHA3-384">f36e9f494611c85f59febfef9ce93fc68f1f17db881400456204c1f099e623e334d2f10b41018392877c8af13de7f59a</hash>
        <hash alg="SHA3-256">37422ef85dce86abd8b14b4c9f7ad77261d728a472126c8eca38f356c98da395</hash>
        <hash alg="SHA3-512">74ba47271899706a284e942482ff41649ffd93e57a29320732e57864c47f3f0431377130ca7afb5e64cc6b68d4e5a5cdfc38027966cda4b5e512e3ce02bd8a99</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.esotericsoftware.minlog/minlog@1.2?type=jar</purl>
      <externalReferences><reference type="vcs"><url>http://minlog.googlecode.com/svn/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.objenesis/objenesis@2.1?type=jar">
      <publisher>Joe Walnes, Henri Tremblay, Leonardo Mesquita</publisher>
      <group>org.objenesis</group>
      <name>objenesis</name>
      <version>2.1</version>
      <description>A library for instantiating Java objects</description>
      <hashes>
        <hash alg="MD5">32ccb1d20a42b5aaaceb90c9082a2efa</hash>
        <hash alg="SHA-1">87c0ea803b69252868d09308b4618f766f135a96</hash>
        <hash alg="SHA-256">c74330cc6b806c804fd37e74487b4fe5d7c2750c5e15fbc6efa13bdee1bdef80</hash>
        <hash alg="SHA-512">1dec9ee30812b8006e536a2749c5781ccdc4b446539efb6fa534f22e70562033876bf2eb22c6946d617695729bd65f0f65b984f15f05ac63db5bed215e74427c</hash>
        <hash alg="SHA-384">657b8a3b80a5475f198425396f7264301f9e0f3ad5dc336ef0c7b46874f5544861a8a2fd48cdb5f672e199a6935c19d1</hash>
        <hash alg="SHA3-384">e526937d722aad1857869b2d2a0ba5c88815609308c00b776b51614e501de5d93d54978f5bb9cf496bdcc28b1dbd5775</hash>
        <hash alg="SHA3-256">436cfbb9c208dd03c951708fa4ba6525e2a0b26a873d594a6fbe93ab49082c97</hash>
        <hash alg="SHA3-512">1e7ee9411df7cfbf0669c38e4ef029155dd718b91db1d182841c740caf8c1057ed273a77f8e32d724c48aaf96815a26ab099c776511ffc5ef351d70ebfa70344</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.objenesis/objenesis@2.1?type=jar</purl>
      <externalReferences><reference type="distribution"><url>http://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/easymock/easymock</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-collections/commons-collections@3.2.2?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>commons-collections</group>
      <name>commons-collections</name>
      <version>3.2.2</version>
      <description>Types that extend and augment the Java Collections Framework.</description>
      <hashes>
        <hash alg="MD5">f54a8510f834a1a57166970bfc982e94</hash>
        <hash alg="SHA-1">8ad72fe39fa8c91eaaf12aadb21e0c3661fe26d5</hash>
        <hash alg="SHA-256">eeeae917917144a68a741d4c0dff66aa5c5c5fd85593ff217bced3fc8ca783b8</hash>
        <hash alg="SHA-512">51c72f9aca7726f3c387095e66be85a6df97c74b00a25434b89188c1b8eab6e2b55accf7b9bd412430d22bd09324dec076e300b3d1fa39fccad471f0f2a3da16</hash>
        <hash alg="SHA-384">dd4e99b3314bd3c1a1ee26296615d9e44dadf7a1f8a7bbba44fb95121803d331e36d4cca4260e7609af78a47ba3e4073</hash>
        <hash alg="SHA3-384">8ce03528e4a6e95c44283b56eca87e6a6d3bf1363411a55b538f4f9110cf7470581ea5c73925e877ddab08dba0603f40</hash>
        <hash alg="SHA3-256">fd3d6134b5f07077b82ccf93d148dacf7c4ce5c971209510edd0e77e3e38c19e</hash>
        <hash alg="SHA3-512">c2a523916fb7c7d55a05d5e3d9e9b33000733f4b20a71be174e4e093e3f06ea78ad831edd1505527da7388105f8647efb7d5666ba852c90b4e2d5bb74256efbc</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/commons-collections/commons-collections@3.2.2?type=jar</purl>
      <externalReferences><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/COLLECTIONS</url></reference><reference type="vcs"><url>http://svn.apache.org/viewvc/commons/proper/collections/trunk</url></reference><reference type="build-system"><url>https://continuum-ci.apache.org/</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="website"><url>http://www.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-compress@1.21?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.commons</group>
      <name>commons-compress</name>
      <version>1.21</version>
      <description>Apache Commons Compress software defines an API for working with
compression and archive formats.  These include: bzip2, gzip, pack200,
lzma, xz, Snappy, traditional Unix Compress, DEFLATE, DEFLATE64, LZ4,
Brotli, Zstandard and ar, cpio, jar, tar, zip, dump, 7z, arj.</description>
      <hashes>
        <hash alg="MD5">2a713d10331bc4e13459a3dc0463f16f</hash>
        <hash alg="SHA-1">4ec95b60d4e86b5c95a0e919cb172a0af98011ef</hash>
        <hash alg="SHA-256">6aecfd5459728a595601cfa07258d131972ffc39b492eb48bdd596577a2f244a</hash>
        <hash alg="SHA-512">c92d9a12547aab475e057955ad815fdfe92ff44c78383fa5af54b089f1bff5525126ef6aef93334f3bfc22e2fef4ad0d969f69384e978a83a55f011a53e7e471</hash>
        <hash alg="SHA-384">da56f95d420cd7278cee646f4cd0e7a5ee12b6a2894efaec12f0ff7b56c3d43e5db736fe1ed66ff91118b16f2d64ebef</hash>
        <hash alg="SHA3-384">6d3dc0198dd523a49fa94e054841aece853577b5c3ea1029fc288ad9ff580ab1b65ea99ddbe58c42125054e8c43be461</hash>
        <hash alg="SHA3-256">37d4a014b50393793d35c70431bd8a1842c197d854c6f174dfa946b9edc2b841</hash>
        <hash alg="SHA3-512">61609f60746406a7cb1ef3f979488beca6674fde208c9025d3fdee115de4767e8a4a1ee38f5bf79ac0104505ddb3558f1feeba5e318d6545647120ac60db6b89</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.commons/commons-compress@1.21?type=jar</purl>
      <externalReferences><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/COMPRESS</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=commons-compress.git</url></reference><reference type="build-system"><url>https://builds.apache.org/</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="website"><url>https://www.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-runtime@1.17.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-runtime</name>
      <version>1.17.1</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <hashes>
        <hash alg="MD5">fa52d2d4421a6cdb8a53a60525dcf045</hash>
        <hash alg="SHA-1">74b3855531f178ef5a07a4deb3cb331c76ff81c2</hash>
        <hash alg="SHA-256">50e27589bf961b555c174bde69fbb7526c4fd128c9e258125c8e488727ba8a0d</hash>
        <hash alg="SHA-512">78586647b29f028c0ccc94094ac8f55550ae1ef82fece963f7583dd82ae13e67927bff8d4185676f59ede34bd3ab7d7d7fcb9dfb4145228d183541d13fadd1ca</hash>
        <hash alg="SHA-384">9549f357ae5b36cd874b0fa84e44084da5e1c9f96ac87837d913cc8ea6ab7adb4e47aaf709906fec23bbb8b043d9bb4b</hash>
        <hash alg="SHA3-384">24dc11263e8cd45b8ee991425261a30ea2c4d8012aca34f307c02b210afad131a04429af348e134e11c5d317def4fc62</hash>
        <hash alg="SHA3-256">f56db660960d0f174cea37c8e9cd9a01c3f764dcff36b015d0005379005ed58a</hash>
        <hash alg="SHA3-512">abc619921ad1fb2e077bcee351283a8009dd56848f39b02338c7bb88c74f977a87c84a1a03c7cdb4e8c39c4936059aaa49bff1881b7821883e6a0d514fc22b80</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-runtime@1.17.1?type=jar</purl>
      <externalReferences><reference type="vcs"><url>https://github.com/apache/flink</url></reference><reference type="website"><url>https://www.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-rpc-core@1.17.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-rpc-core</name>
      <version>1.17.1</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <hashes>
        <hash alg="MD5">d4538c5224525ec978e500d3e91b280f</hash>
        <hash alg="SHA-1">ccf88d09540c2827f2543289ab7accdedbeb2e43</hash>
        <hash alg="SHA-256">967e8cc4748880bf4a56109ffab1ef3d8abddb855d067eac1fd9b89789669d22</hash>
        <hash alg="SHA-512">61e6287430d4cbf13fd445615288a1c6ac8ecc451e5977297b9604dee9940c5c327e6c522a4698daec58847ecf3e0e865941773e13b4a8a701e38a1364639515</hash>
        <hash alg="SHA-384">68f082e0d561d4b3cbe20d1fdbdd3482f20ecff186e54ec1046430f82e802b50e061cbac451fb4823f34aa9aa96d9669</hash>
        <hash alg="SHA3-384">3dcb5a74b87f5b421f0a15fe8fb1ba84f8c1f687515e243e86f492d7bc0f004b97c8595e16acf28cf7a4aff5feccc463</hash>
        <hash alg="SHA3-256">b353c64298453ec1eb89089b0da21cfef4bb35851ef2fbb6c70fba512579788f</hash>
        <hash alg="SHA3-512">a625e22c4942a1a1fd7edc4c59dfc7d2b225d168d068f0fa9b9b814e34483cae5aa293800e115031ab2d74978f9d5659f744ccad73a76415595e223d19914828</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-rpc-core@1.17.1?type=jar</purl>
      <externalReferences><reference type="vcs"><url>https://github.com/apache/flink</url></reference><reference type="website"><url>https://www.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-rpc-akka-loader@1.17.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-rpc-akka-loader</name>
      <version>1.17.1</version>
      <description>This module contains the mechanism for loading flink-rpc-akka through a separate classloader.</description>
      <hashes>
        <hash alg="MD5">4a43432aa3c87194920c7d83458e4577</hash>
        <hash alg="SHA-1">92619b7b4c8fb53125dfd07301021a6bbe5b3eb8</hash>
        <hash alg="SHA-256">a1c5ce8e2c5534f50073a5b589f45778fc9b4c4623db5b06bd4737b2fab6c8cc</hash>
        <hash alg="SHA-512">7ed9ef63779f280646a0acf50fab820152c137a01c16c46b069f45537b114ef05c3b0259908a0d07631e72e0640474ed9b2aa093895f45f6292dee4bf4109e17</hash>
        <hash alg="SHA-384">156f6510816e0f34daa5f6c67b251b014bcff864f328d211e72e5ef799eacd05944d0fc74b7c6bbb572d6cb696ab81a5</hash>
        <hash alg="SHA3-384">4fc4c38da98124537aaa443874d1084eb8375523fcee1f7cb536614c3bb39e3d747772b7de6426bd2633eadac4250e6b</hash>
        <hash alg="SHA3-256">7bd91f33e7008985f03ae4ff7cbaccf5be3f867f72de6a2544329d5281612201</hash>
        <hash alg="SHA3-512">1cba7fe7ec177f2bb460b2a21d3e76b0bf8c60a56881e2a30a2fc228ba2f05ed6073c01a77932ccd24a911399e103073252a1f71147f825bdaf24c811125da0e</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-rpc-akka-loader@1.17.1?type=jar</purl>
      <externalReferences><reference type="vcs"><url>https://github.com/apache/flink</url></reference><reference type="website"><url>https://www.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-queryable-state-client-java@1.17.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-queryable-state-client-java</name>
      <version>1.17.1</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <hashes>
        <hash alg="MD5">9ecbb0f4eb6abbcc14e0da3c12ae3d46</hash>
        <hash alg="SHA-1">a38524fb2cabd64a30bc50754fd7ef27dc9a2ed0</hash>
        <hash alg="SHA-256">94476cb6118331c60ee498e85b997a13ca70ef54fa7d6852e844825be5cbb14c</hash>
        <hash alg="SHA-512">bf3474ae52f5ca18164d769f62c38bb4796fae8550492e73cf4139565bf28407a6b79c5d1d8876a065198dfca8f2467f851f167d429836bfaa1f58ae035d3f47</hash>
        <hash alg="SHA-384">22062f88849f4ac6a57560a1dd908a8e7769765c4d59c2ce8d23e89e6b88029ea8280c4a3f5202c95711cfcf870850c2</hash>
        <hash alg="SHA3-384">15ac07f29f393f46fb7d3f1c3c08676538977f4849ea78e111281102ac3df792cbc3d956c30721598b03b42050242840</hash>
        <hash alg="SHA3-256">a563eb4590452422c852746b75bf973bbdda2cf6874b111cf5b73d559f18428d</hash>
        <hash alg="SHA3-512">6ad33eed334af519c5ac1eb852426f3d1ccb602206fe0c0404241df517494cf6ae4bd3c527f01719779cd08c0b3c69c9659245187e8a213a9e2a5a95ca238143</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-queryable-state-client-java@1.17.1?type=jar</purl>
      <externalReferences><reference type="vcs"><url>https://github.com/apache/flink</url></reference><reference type="website"><url>https://www.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-io/commons-io@2.11.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>commons-io</group>
      <name>commons-io</name>
      <version>2.11.0</version>
      <description>The Apache Commons IO library contains utility classes, stream implementations, file filters,
file comparators, endian transformation classes, and much more.</description>
      <hashes>
        <hash alg="MD5">3b4b7ccfaeceeac240b804839ee1a1ca</hash>
        <hash alg="SHA-1">a2503f302b11ebde7ebc3df41daebe0e4eea3689</hash>
        <hash alg="SHA-256">961b2f6d87dbacc5d54abf45ab7a6e2495f89b75598962d8c723cea9bc210908</hash>
        <hash alg="SHA-512">5bd78eed456ede30119319c5bed8e3e4c443b6fd7bdb3a7a5686647bd83094d0c3e2832a7575cfb60e4ef25f08106b93476939d3adcfecf5533cc030b3039e10</hash>
        <hash alg="SHA-384">114f1e324d90ad887c177876d410f5787a8e8da6c48d4b2862d365802c0efded3a88cb24046976bf6276cadad3712f0f</hash>
        <hash alg="SHA3-384">80288c03ad4d80d69f91d056ffc5570d49a9c76bf54ad2dff0121ecde26a560df76d05156f281f5c6db2a38ff07a873d</hash>
        <hash alg="SHA3-256">5adfb5ccaf5f21a549422f426118a9542673926fcd18c68390cf813e791dcf6c</hash>
        <hash alg="SHA3-512">7573f47f0babb53cefdc7c2309a0b982d800139064537b0797da442853d081010ad7c3c74a500598a0f800639a5d540eca21963ea652c68613907059bd4278c2</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/commons-io/commons-io@2.11.0?type=jar</purl>
      <externalReferences><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/IO</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=commons-io.git</url></reference><reference type="build-system"><url>https://builds.apache.org/</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="website"><url>https://www.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-shaded-zookeeper-3@3.6.3-16.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-shaded-zookeeper-3</name>
      <version>3.6.3-16.1</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <hashes>
        <hash alg="MD5">5dc535e45a8c2080a677c6632d5b2e49</hash>
        <hash alg="SHA-1">0f63ba1384765c4f5a1f30b5ce9d88d68f37d403</hash>
        <hash alg="SHA-256">e74a7e724dd0d6566055541127c0acaea5d042e74f07c46ea1ce26ffdd1171e8</hash>
        <hash alg="SHA-512">e7565e246a802598f50434bda9e23f1d5834b39e07cac6adcafd37c87befe4b64310928fc4af5bddf28418f1017a7c0eadbdebeccb6521b53fbbd9f7dd0aaeef</hash>
        <hash alg="SHA-384">592cf9cb9d2b441f379bac86ad9febf71d99c66668297c528018a535999d04f8aa98280c6f1b4c50ddf1ffaa0cc1a379</hash>
        <hash alg="SHA3-384">c633e96d1decf0fb15bbe5c6d98ad1805dc5e6565c860bd9d299a8003c823f0557eb96dc8ec47e4640b58a791e6aebf3</hash>
        <hash alg="SHA3-256">8f94e982ad9a5684c60fc3e2c6d56d30b843528f8330b0604e9a2e65ce76f359</hash>
        <hash alg="SHA3-512">502ae7635054ce4efa8136fad6fc55c6c4b3cf3d6aac36bb79f04a2d4f52dcb3c62f43b8cb5f655c7523ca3df72c6a1f81890276604e04e51ae6715b8ccd7a4b</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-shaded-zookeeper-3@3.6.3-16.1?type=jar</purl>
      <externalReferences><reference type="vcs"><url>https://github.com/apache/flink-shaded</url></reference><reference type="website"><url>https://www.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.javassist/javassist@3.24.0-GA?type=jar">
      <publisher>Shigeru Chiba, www.javassist.org</publisher>
      <group>org.javassist</group>
      <name>javassist</name>
      <version>3.24.0-GA</version>
      <description>Javassist (JAVA programming ASSISTant) makes Java bytecode manipulation
    simple.  It is a class library for editing bytecodes in Java.</description>
      <hashes>
        <hash alg="MD5">23fd22d0d089ddfac567a39ce0cb1a91</hash>
        <hash alg="SHA-1">d7466fc2e3af7c023e95c510f06448ad29b225b3</hash>
        <hash alg="SHA-256">aba81efa678b621203fb89aeff81d6f126f7a9dd709401e5609c42976684ae23</hash>
        <hash alg="SHA-512">e57dad74a3edef837ece841d06e4a7c96ffecab8fbcba56fe5f7eccd662f0c0d757880a6073793a8c75ad7a0a1d146346b75cdbfe4fd8a271048a54446e5d1a2</hash>
        <hash alg="SHA-384">4867afdb7522b3dbfa10a51264ac6c15a2a8083d16c8dbef318275d24687768f35130b1c17d8407ca8ecf855abd83dff</hash>
        <hash alg="SHA3-384">a52be891987d4fc7d319e6417e0cd9a28f189d8623b803d72b5429e118da73b9937899231825e793d37b434d7522d283</hash>
        <hash alg="SHA3-256">0cf8db7d2a5f7e1a70827538cb4b0b446fcc239f05ca55d9bf8f2a50f1e08af3</hash>
        <hash alg="SHA3-512">ed9675f9f070203801eb762092ac99636d376b7ef563f99508283006a65a0d2dfce38e1ba7ff2ccfebcede0376ba0724b76b459ca112477234aed8208807f785</hash>
      </hashes>
      <licenses>
        <license>
          <id>MPL-1.1</id>
        </license>
        <license>
          <id>LGPL-2.1-only</id>
        </license>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.javassist/javassist@3.24.0-GA?type=jar</purl>
      <externalReferences><reference type="distribution"><url>https://repository.jboss.org/nexus/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://jira.jboss.org/jira/browse/JASSIST/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.xerial.snappy/snappy-java@1.1.8.3?type=jar">
      <publisher>xerial.org</publisher>
      <group>org.xerial.snappy</group>
      <name>snappy-java</name>
      <version>1.1.8.3</version>
      <description>snappy-java: A fast compression/decompression library</description>
      <hashes>
        <hash alg="MD5">fdacc9d6d764fe918daca743a67ce24f</hash>
        <hash alg="SHA-1">2c58fa5745831afa3a4290c2ce15553ff13ad0ab</hash>
        <hash alg="SHA-256">d371202c03bd165f6fd660f63ae597fbb4c91b81bfc6e12cf6b2a93ace93a800</hash>
        <hash alg="SHA-512">5f3f9a391a70c1898610892bca07bb87b867caf4e6d959800a3abdd45435b4af52a9fdd82d7aefe0bd47af169203f83c92450e327c3b8bf47373e8030004344b</hash>
        <hash alg="SHA-384">bc9e1d3ad7dfbd35fc1e7e9287f254eca5fc1f20234558bd963e1f504b55c4d2aacf424f05b211e24846d4d158fb3c91</hash>
        <hash alg="SHA3-384">8481ad7e2cdfdcd38bad657f9f04addedd7c3cc486ee2abd6c8aff82fe6d8dbc11b9c19e9e024a28fdeabf09b937c8db</hash>
        <hash alg="SHA3-256">cadeeae860e97960d0a32a2211de5f4cb42dce9849df32788f5a238c1d9fb791</hash>
        <hash alg="SHA3-512">60f155286eb2b97e505a997e21245a80800e1292ef31f8656d2f538286cfab2cfbd96826db29f340c2cb20356011e3452796949b9e60a0dad0d198c4ea3b35df</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.xerial.snappy/snappy-java@1.1.8.3?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/xerial/snappy-java</url></reference><reference type="vcs"><url>https://github.com/xerial/snappy-java</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.lz4/lz4-java@1.8.0?type=jar">
      <group>org.lz4</group>
      <name>lz4-java</name>
      <version>1.8.0</version>
      <description>Java ports and bindings of the LZ4 compression algorithm and the xxHash hashing algorithm</description>
      <hashes>
        <hash alg="MD5">936a927700aa8fc3b75d21d7571171f6</hash>
        <hash alg="SHA-1">4b986a99445e49ea5fbf5d149c4b63f6ed6c6780</hash>
        <hash alg="SHA-256">d74a3334fb35195009b338a951f918203d6bbca3d1d359033dc33edd1cadc9ef</hash>
        <hash alg="SHA-512">98d59086a6021ca571d9c1d64b715e43044c730e1ac563f514c40cf44302615d30378b6d5cc69990446522de6260dc8e7b303e3990a3139dc326d058dfb6dbd9</hash>
        <hash alg="SHA-384">8e3f2acdbb41a00c4d9cc5f328e63fb626ac7c6c84e1bf9502e2fcc76a591b2b819b2d27b29925ff986b95c297b30e2c</hash>
        <hash alg="SHA3-384">ec0d6a00760d0a4ecba13a41785d6ae57a64552b1687eaa3e292b3054bb1348e49ab8a938197ff126f9218c6cb96ee1c</hash>
        <hash alg="SHA3-256">7be684c102891105f66d378b61ea1297a392c1618b5aebf7e0b281f55217c206</hash>
        <hash alg="SHA3-512">0b2294570ea2bfbb50ced21dfa4bad956467ca447e9ab2dd602a3478371bcd0e9f13d2dff74d06827a28882409612cdde00bd91267be05bd3510c68268bf3166</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.lz4/lz4-java@1.8.0?type=jar</purl>
      <externalReferences/>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-optimizer@1.17.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-optimizer</name>
      <version>1.17.1</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <hashes>
        <hash alg="MD5">6695b432bb9250a7722b6700e3d2f080</hash>
        <hash alg="SHA-1">306af9d5461c51cb1a19bedea6b57a8ac1edaf4c</hash>
        <hash alg="SHA-256">2ee31d3a85de191ddb53503e3aeced0084838441f63cb66bfcf335c72714232e</hash>
        <hash alg="SHA-512">4deb0ed8648fbf20397c62f47d322f5f697bbcd0a3faf99d7f1add79e15492de11ae57e0c492bee85e3775d37b081d022d8806475f20eb16650478892e59fe3c</hash>
        <hash alg="SHA-384">c523699a29b7ed12bd0860cd739eed7e8eabb369f00e61eeed6de7ff08e54bfa7cffab2bd4119270e112c18e5a677475</hash>
        <hash alg="SHA3-384">0f42cc1511bc0f327f820c99025082a1b842534c58e8ad6f0242b93dfd36cde82cad9533d0a9d37052d0516f28a12a01</hash>
        <hash alg="SHA3-256">ca3c0f76df1255e67e79bf0b3f7654502c9ae20a6eeb81450f4ab2e440a6dc00</hash>
        <hash alg="SHA3-512">9a7e7a59aff222e3c451c3ed2af0fcb75941496f97811b0258d6e87463aadf26995901cd5bb50943db7af46063ac25e5558ac18132da76e955d007099d8eeef0</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-optimizer@1.17.1?type=jar</purl>
      <externalReferences><reference type="vcs"><url>https://github.com/apache/flink</url></reference><reference type="website"><url>https://www.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-cli/commons-cli@1.5.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>commons-cli</group>
      <name>commons-cli</name>
      <version>1.5.0</version>
      <description>Apache Commons CLI provides a simple API for presenting, processing and validating a Command Line Interface.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">6c3b2052160144196118b1f019504388</hash>
        <hash alg="SHA-1">dc98be5d5390230684a092589d70ea76a147925c</hash>
        <hash alg="SHA-256">bc8bb01fc0fad250385706e20f927ddcff6173f6339b387dc879237752567ac6</hash>
        <hash alg="SHA-512">b78ac2b418e9e9e7d0bc866664577199d320408a6f03151b3789bac365c986dd526df853599e633d7e50fe136cbf3eb9ce50c9cfa0ad38c3cc8d8ee416f61c40</hash>
        <hash alg="SHA-384">a7a2daa807c4007c506b5100f0a9b526c0052c4e1f6b699904ef9d2aba8195b6003dc4d47ca133b15e2f3e830bdbe6c4</hash>
        <hash alg="SHA3-384">44ca97514a2e34b5bf3de9b5d45c8e871f6eee517db7f3c4b4476eb3e8dfe9a9d8760f3181114708288c373727b42475</hash>
        <hash alg="SHA3-256">a0a47001d3a293f129ffc21f17f575a9d23ce5b88b440e651e4cd01edd0cc421</hash>
        <hash alg="SHA3-512">483dae23d6827a105d17847c8c813527f19042b65c4d09635dfc4bfd25990fe3ba2a997540460fd5b1d72ca3add9a38ca8b32004680764db972a9bb62f7f68d8</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/commons-cli/commons-cli@1.5.0?type=jar</purl>
      <externalReferences><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/CLI</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=commons-cli.git</url></reference><reference type="build-system"><url>https://builds.apache.org/</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="website"><url>https://www.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-file-sink-common@1.17.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-file-sink-common</name>
      <version>1.17.1</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <hashes>
        <hash alg="MD5">4e67fdad4b9e882c50b45dd86c040478</hash>
        <hash alg="SHA-1">7bec20512431525c6136ade98ff0165426ec348a</hash>
        <hash alg="SHA-256">c10facb5755b79f4d37c374ccf3e12b5f8d4bc071eff0ee4aa8719a8f18850ea</hash>
        <hash alg="SHA-512">732dfa76f1819b13b721bf165caab4fb4d6155035620ca9650abc776bfbfd34e89d26c8210f54fb250a78849021246c06d2244cec70a074d65fb417617335098</hash>
        <hash alg="SHA-384">413cb0369338fd02f2d9ebd18032fcdce3a5381df1e3285747153e62e0dca20e41f6a9730bb492c2dae87c0bb672d6f1</hash>
        <hash alg="SHA3-384">d9b90f316e0071a5a87c68cb3e81ba36644211f074656f6c0e39fccc971446b6865cfd2fb97876092045e52fc6fe3a70</hash>
        <hash alg="SHA3-256">1a8053e99337292c90b6a7cc06206b04ce747618fac0fec14d5dcf512fae4eb4</hash>
        <hash alg="SHA3-512">4382ea7068645791602699e085f5608752ef71260860190aae32a3cc1b2608312c69b646b61abc0aa2efe766cd60a2580dec27b89ba95e29cd214369db63563f</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-file-sink-common@1.17.1?type=jar</purl>
      <externalReferences><reference type="vcs"><url>https://github.com/apache/flink</url></reference><reference type="website"><url>https://www.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-shaded-guava@30.1.1-jre-16.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-shaded-guava</name>
      <version>30.1.1-jre-16.1</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <hashes>
        <hash alg="MD5">74bc641198b30c213cd9a2754297100d</hash>
        <hash alg="SHA-1">ad8725e964b6c2c0df16877f4132ad348c4ff09c</hash>
        <hash alg="SHA-256">d5ea841b0a51c7db4ecc48c96c0f334da40a9980645cf6d9e6e2b04b2441315c</hash>
        <hash alg="SHA-512">801c9fae8aaf7cec12f82e9d84b2e93648b4f7e58a4f240029db17b922c394ade14082e2022e3036bd33edaf1eb1bb0881570345270bb8820ab827efc9e42aea</hash>
        <hash alg="SHA-384">0b3aca631b15d8e5617952c2c18bed624e0f24b24ca7fb129c4ceb28c416e6e59d0acec3d7f624a7534fb2e9edfb83b6</hash>
        <hash alg="SHA3-384">a69c4e645798daeae7b05873704b39d134103a5a5230b61580aed36401f2ff7ba1e99557035f7a92addab518a3500484</hash>
        <hash alg="SHA3-256">d516aef2d94769bf73beaac218924a791cde715344d59a246f70348a2d9d4c29</hash>
        <hash alg="SHA3-512">31f78ac8d8743167e14f6406585a56e1f587b6cfcbb12cc562389207906afcb3c968da08d126351f529420008169f4a820a7afc37f8527e469f02a6b66d324a1</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-shaded-guava@30.1.1-jre-16.1?type=jar</purl>
      <externalReferences><reference type="vcs"><url>https://github.com/apache/flink-shaded</url></reference><reference type="website"><url>https://www.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-math3@3.6.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.commons</group>
      <name>commons-math3</name>
      <version>3.6.1</version>
      <description>The Apache Commons Math project is a library of lightweight, self-contained mathematics and statistics components addressing the most common practical problems not immediately available in the Java programming language or commons-lang.</description>
      <hashes>
        <hash alg="MD5">5b730d97e4e6368069de1983937c508e</hash>
        <hash alg="SHA-1">e4ba98f1d4b3c80ec46392f25e094a6a2e58fcbf</hash>
        <hash alg="SHA-256">1e56d7b058d28b65abd256b8458e3885b674c1d588fa43cd7d1cbb9c7ef2b308</hash>
        <hash alg="SHA-512">8bc2438b3b4d9a6be4a47a58410b2d4d0e56e05787ab24badab8cbc9075d61857e8d2f0bffedad33f18f8a356541d00f80a8597b5dedb995be8480d693d03226</hash>
        <hash alg="SHA-384">95d1186d9ca06a3ea2e6437ddec3a55698e2493d3e72f6f554746b74fa929892bd71a2ab501a4e7b1ce56b7cd64e7ab4</hash>
        <hash alg="SHA3-384">f85bb3e46a00fc4940a3be1331301302b0eb728e2d1fe2c1842d4761e5a0bc7a420c0c705ae60250ca1c7b03d3694b9e</hash>
        <hash alg="SHA3-256">919c15ae4b1aef2a58aa6ea4b700bc5562e78dbc382f3393169425ca91ad368c</hash>
        <hash alg="SHA3-512">dbe54d586c898cdbd7df6c31c131ca3525db17fcea5c7f5da8cbfe617e2afc667289290c76771ec5c9567a56fb2b177b0a31d67abcc656410c90287da4d88999</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.commons/commons-math3@3.6.1?type=jar</purl>
      <externalReferences><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/MATH</url></reference><reference type="vcs"><url>https://git-wip-us.apache.org/repos/asf?p=commons-math.git</url></reference><reference type="build-system"><url>https://continuum-ci.apache.org/</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="website"><url>http://www.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-shaded-force-shading@16.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-shaded-force-shading</name>
      <version>16.1</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <hashes>
        <hash alg="MD5">0f703324b629fbc0d0cbf22375515477</hash>
        <hash alg="SHA-1">5040816ebca54b5bb4d5bb98b741ff77da59505b</hash>
        <hash alg="SHA-256">44ab80c42c380bc813bbf477256a4f4334e44088c8fb1b34d3c867733e54c664</hash>
        <hash alg="SHA-512">bf56dc058175101f58f2abfb3307349e9e911743f118c9309e0b8d3860f164c2c88b5fa1113e2270c1533bf37dc8102f1482099f11bdaa5acf316b7a9808093b</hash>
        <hash alg="SHA-384">3b7c079f14bfeb02219e4430fa2bbe66e9000596116c5247f98e0b0852bd59877559358704c8be7d18c0fbed1fff0880</hash>
        <hash alg="SHA3-384">25becad57164d21e44eca936d5d5e77c8fde48761ca2e6ff39e296a194f00579b3b7f4d8d06e8642aab900ba5e719c57</hash>
        <hash alg="SHA3-256">804333e9e9a9f31cbff1f5032783aa1635ef656c771ef0fbd86eb895dfeb9467</hash>
        <hash alg="SHA3-512">0a5ce5db656f74112792167c394ee7e6f83e1567f3c116e558ed80a7d946e2fbf7986cb733bfbe09cdb8b432f00cfe5782d4512c15655972ddbf5a73c664d057</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-shaded-force-shading@16.1?type=jar</purl>
      <externalReferences><reference type="vcs"><url>https://github.com/apache/flink-shaded</url></reference><reference type="website"><url>https://www.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar">
      <publisher>QOS.ch</publisher>
      <group>org.slf4j</group>
      <name>slf4j-api</name>
      <version>1.7.36</version>
      <description>The slf4j API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">872da51f5de7f3923da4de871d57fd85</hash>
        <hash alg="SHA-1">6c62681a2f655b49963a5983b8b0950a6120ae14</hash>
        <hash alg="SHA-256">d3ef575e3e4979678dc01bf1dcce51021493b4d11fb7f1be8ad982877c16a1c0</hash>
        <hash alg="SHA-512">f9b033fc019a44f98b16048da7e2b59edd4a6a527ba60e358f65ab88e0afae03a9340f1b3e8a543d49fa542290f499c5594259affa1ff3e6e7bf3b428d4c610b</hash>
        <hash alg="SHA-384">2b14ad035877087157e379d3277dcdcd79e58d6bdb147c47d29e377d75ce53ad42cafbf22f5fb7827c7e946ff4876b9a</hash>
        <hash alg="SHA3-384">3bc3110dafb8d5be16a39f3b2671a466463cd99eb39610c0e4719a7bf2d928f2ea213c734887c6926a07c4cca7769e4b</hash>
        <hash alg="SHA3-256">ba2608179fcf46e2291a90b9cbb4aa30d718e481f59c350cc21c73b88d826881</hash>
        <hash alg="SHA3-512">14c4edcd19702ef607d78826839d8a6d3a39157df54b89a801d3d3cbbe1307131a77671b041c761122730fb1387888c5ec2e46bdd80e1cb07f8f144676441824</hash>
      </hashes>
      <licenses>
        <license>
          <id>MIT</id>
          <url>https://opensource.org/licenses/MIT</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.qos.ch</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/qos-ch/slf4j</url></reference></externalReferences>
    </component>
  </components>
  <dependencies>
    <dependency ref="pkg:maven/org.apache.flink/flink-ml-benchmark-1.17@2.3.0?type=jar">
      <dependency ref="pkg:maven/org.apache.flink/flink-ml-iteration-1.17@2.3.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-ml-servable-core-1.17@2.3.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-ml-servable-lib-1.17@2.3.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-ml-core-1.17@2.3.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-ml-lib-1.17@2.3.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-table-api-java@1.17.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-table-api-java-bridge@1.17.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-clients@1.17.1?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.flink/flink-ml-iteration-1.17@2.3.0?type=jar">
      <dependency ref="pkg:maven/org.apache.flink/flink-ml-iteration-common@2.3.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/statefun-flink-core@3.2.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-hadoop-fs@1.17.1?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.flink/flink-ml-iteration-common@2.3.0?type=jar"/>
    <dependency ref="pkg:maven/org.apache.flink/statefun-flink-core@3.2.0?type=jar">
      <dependency ref="pkg:maven/org.apache.flink/statefun-sdk-embedded@3.2.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/statefun-sdk-protos@3.2.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/statefun-flink-io@3.2.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/statefun-flink-common@3.2.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/statefun-flink-extensions@3.2.0?type=jar"/>
      <dependency ref="pkg:maven/com.google.protobuf/protobuf-java@3.7.1?type=jar"/>
      <dependency ref="pkg:maven/com.squareup.okhttp3/okhttp@3.14.6?type=jar"/>
      <dependency ref="pkg:maven/com.kohlschutter.junixsocket/junixsocket-core@2.3.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-netty@4.1.65.Final-14.0?type=jar"/>
      <dependency ref="pkg:maven/com.google.auto.service/auto-service-annotations@1.0-rc6?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.flink/statefun-sdk-embedded@3.2.0?type=jar">
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"/>
      <dependency ref="pkg:maven/com.google.auto.service/auto-service-annotations@1.0-rc6?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"/>
    <dependency ref="pkg:maven/com.google.auto.service/auto-service-annotations@1.0-rc6?type=jar"/>
    <dependency ref="pkg:maven/org.apache.flink/statefun-sdk-protos@3.2.0?type=jar">
      <dependency ref="pkg:maven/com.google.auto.service/auto-service-annotations@1.0-rc6?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.flink/statefun-flink-io@3.2.0?type=jar">
      <dependency ref="pkg:maven/org.apache.flink/statefun-sdk-embedded@3.2.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/statefun-flink-extensions@3.2.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/statefun-sdk-protos@3.2.0?type=jar"/>
      <dependency ref="pkg:maven/com.google.protobuf/protobuf-java@3.7.1?type=jar"/>
      <dependency ref="pkg:maven/com.google.auto.service/auto-service-annotations@1.0-rc6?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.flink/statefun-flink-extensions@3.2.0?type=jar">
      <dependency ref="pkg:maven/org.apache.flink/statefun-sdk-embedded@3.2.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-jackson@2.13.4-16.1?type=jar"/>
      <dependency ref="pkg:maven/com.google.auto.service/auto-service-annotations@1.0-rc6?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.google.protobuf/protobuf-java@3.7.1?type=jar"/>
    <dependency ref="pkg:maven/org.apache.flink/statefun-flink-common@3.2.0?type=jar">
      <dependency ref="pkg:maven/org.apache.flink/statefun-sdk-embedded@3.2.0?type=jar"/>
      <dependency ref="pkg:maven/com.google.protobuf/protobuf-java@3.7.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-jackson@2.13.4-16.1?type=jar"/>
      <dependency ref="pkg:maven/com.google.auto.service/auto-service-annotations@1.0-rc6?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.flink/flink-shaded-jackson@2.13.4-16.1?type=jar"/>
    <dependency ref="pkg:maven/com.squareup.okhttp3/okhttp@3.14.6?type=jar">
      <dependency ref="pkg:maven/com.squareup.okio/okio@1.17.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.squareup.okio/okio@1.17.2?type=jar"/>
    <dependency ref="pkg:maven/com.kohlschutter.junixsocket/junixsocket-core@2.3.2?type=jar">
      <dependency ref="pkg:maven/com.kohlschutter.junixsocket/junixsocket-native-common@2.3.2?type=jar"/>
      <dependency ref="pkg:maven/com.kohlschutter.junixsocket/junixsocket-common@2.3.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.kohlschutter.junixsocket/junixsocket-native-common@2.3.2?type=jar"/>
    <dependency ref="pkg:maven/com.kohlschutter.junixsocket/junixsocket-common@2.3.2?type=jar"/>
    <dependency ref="pkg:maven/org.apache.flink/flink-shaded-netty@4.1.65.Final-14.0?type=jar"/>
    <dependency ref="pkg:maven/org.apache.flink/flink-hadoop-fs@1.17.1?type=jar">
      <dependency ref="pkg:maven/org.apache.flink/flink-core@1.17.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.flink/flink-core@1.17.1?type=jar">
      <dependency ref="pkg:maven/org.apache.flink/flink-annotations@1.17.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-metrics-core@1.17.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-asm-9@9.3-16.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-jackson@2.13.4-16.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar"/>
      <dependency ref="pkg:maven/com.esotericsoftware.kryo/kryo@2.24.0?type=jar"/>
      <dependency ref="pkg:maven/commons-collections/commons-collections@3.2.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-compress@1.21?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-guava@30.1.1-jre-16.1?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    <dependency ref="pkg:maven/org.apache.flink/flink-ml-servable-core-1.17@2.3.0?type=jar">
      <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar"/>
      <dependency ref="pkg:maven/dev.ludovic.netlib/blas@2.2.1?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.12.6.1?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-core@2.13.4?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.13.4?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar"/>
    <dependency ref="pkg:maven/dev.ludovic.netlib/blas@2.2.1?type=jar">
      <dependency ref="pkg:maven/net.sourceforge.f2j/arpack_combined_all@0.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/net.sourceforge.f2j/arpack_combined_all@0.1?type=jar"/>
    <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.12.6.1?type=jar">
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.13.4?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-core@2.13.4?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.13.4?type=jar"/>
    <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-core@2.13.4?type=jar"/>
    <dependency ref="pkg:maven/org.apache.flink/flink-ml-servable-lib-1.17@2.3.0?type=jar">
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.flink/flink-ml-core-1.17@2.3.0?type=jar">
      <dependency ref="pkg:maven/dev.ludovic.netlib/blas@2.2.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-connector-files@1.17.1?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.12.6.1?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-core@2.13.4?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.13.4?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.flink/flink-connector-files@1.17.1?type=jar">
      <dependency ref="pkg:maven/org.apache.flink/flink-file-sink-common@1.17.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-force-shading@16.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.flink/flink-file-sink-common@1.17.1?type=jar"/>
    <dependency ref="pkg:maven/org.apache.flink/flink-shaded-force-shading@16.1?type=jar"/>
    <dependency ref="pkg:maven/org.apache.flink/flink-ml-lib-1.17@2.3.0?type=jar">
      <dependency ref="pkg:maven/com.github.wendykierp/JTransforms@3.1?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.github.wendykierp/JTransforms@3.1?type=jar">
      <dependency ref="pkg:maven/pl.edu.icm/JLargeArrays@1.5?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/pl.edu.icm/JLargeArrays@1.5?type=jar"/>
    <dependency ref="pkg:maven/org.apache.flink/flink-table-api-java@1.17.1?type=jar">
      <dependency ref="pkg:maven/org.apache.flink/flink-table-common@1.17.1?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.flink/flink-table-common@1.17.1?type=jar">
      <dependency ref="pkg:maven/org.apache.flink/flink-core@1.17.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-asm-9@9.3-16.1?type=jar"/>
      <dependency ref="pkg:maven/com.ibm.icu/icu4j@67.1?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.flink/flink-shaded-asm-9@9.3-16.1?type=jar"/>
    <dependency ref="pkg:maven/com.ibm.icu/icu4j@67.1?type=jar"/>
    <dependency ref="pkg:maven/org.apache.flink/flink-table-api-java-bridge@1.17.1?type=jar">
      <dependency ref="pkg:maven/org.apache.flink/flink-table-api-java@1.17.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-table-api-bridge-base@1.17.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-java@1.17.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-streaming-java@1.17.1?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.flink/flink-table-api-bridge-base@1.17.1?type=jar">
      <dependency ref="pkg:maven/org.apache.flink/flink-java@1.17.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-streaming-java@1.17.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-table-api-java@1.17.1?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.flink/flink-java@1.17.1?type=jar">
      <dependency ref="pkg:maven/org.apache.flink/flink-core@1.17.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-math3@3.6.1?type=jar"/>
      <dependency ref="pkg:maven/com.twitter/chill-java@0.7.6?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.flink/flink-streaming-java@1.17.1?type=jar">
      <dependency ref="pkg:maven/org.apache.flink/flink-core@1.17.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-file-sink-common@1.17.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-runtime@1.17.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-java@1.17.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-guava@30.1.1-jre-16.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-math3@3.6.1?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.commons/commons-math3@3.6.1?type=jar"/>
    <dependency ref="pkg:maven/com.twitter/chill-java@0.7.6?type=jar"/>
    <dependency ref="pkg:maven/org.apache.flink/flink-runtime@1.17.1?type=jar">
      <dependency ref="pkg:maven/org.apache.flink/flink-core@1.17.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-rpc-core@1.17.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-rpc-akka-loader@1.17.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-java@1.17.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-queryable-state-client-java@1.17.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-hadoop-fs@1.17.1?type=jar"/>
      <dependency ref="pkg:maven/commons-io/commons-io@2.11.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-guava@30.1.1-jre-16.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-jackson@2.13.4-16.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-zookeeper-3@3.6.3-16.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar"/>
      <dependency ref="pkg:maven/commons-cli/commons-cli@1.5.0?type=jar"/>
      <dependency ref="pkg:maven/org.javassist/javassist@3.24.0-GA?type=jar"/>
      <dependency ref="pkg:maven/org.xerial.snappy/snappy-java@1.1.8.3?type=jar"/>
      <dependency ref="pkg:maven/org.lz4/lz4-java@1.8.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-force-shading@16.1?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.flink/flink-shaded-guava@30.1.1-jre-16.1?type=jar"/>
    <dependency ref="pkg:maven/org.apache.flink/flink-clients@1.17.1?type=jar">
      <dependency ref="pkg:maven/org.apache.flink/flink-core@1.17.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-runtime@1.17.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-optimizer@1.17.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-java@1.17.1?type=jar"/>
      <dependency ref="pkg:maven/commons-cli/commons-cli@1.5.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-streaming-java@1.17.1?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.flink/flink-annotations@1.17.1?type=jar">
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.flink/flink-metrics-core@1.17.1?type=jar">
      <dependency ref="pkg:maven/org.apache.flink/flink-annotations@1.17.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar">
      <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.esotericsoftware.kryo/kryo@2.24.0?type=jar">
      <dependency ref="pkg:maven/com.esotericsoftware.minlog/minlog@1.2?type=jar"/>
      <dependency ref="pkg:maven/org.objenesis/objenesis@2.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.esotericsoftware.minlog/minlog@1.2?type=jar"/>
    <dependency ref="pkg:maven/org.objenesis/objenesis@2.1?type=jar"/>
    <dependency ref="pkg:maven/commons-collections/commons-collections@3.2.2?type=jar"/>
    <dependency ref="pkg:maven/org.apache.commons/commons-compress@1.21?type=jar"/>
    <dependency ref="pkg:maven/org.apache.flink/flink-rpc-core@1.17.1?type=jar">
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.flink/flink-rpc-akka-loader@1.17.1?type=jar">
      <dependency ref="pkg:maven/org.apache.flink/flink-core@1.17.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-rpc-core@1.17.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-force-shading@16.1?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.flink/flink-queryable-state-client-java@1.17.1?type=jar">
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-guava@30.1.1-jre-16.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/commons-io/commons-io@2.11.0?type=jar"/>
    <dependency ref="pkg:maven/org.apache.flink/flink-shaded-zookeeper-3@3.6.3-16.1?type=jar"/>
    <dependency ref="pkg:maven/commons-cli/commons-cli@1.5.0?type=jar"/>
    <dependency ref="pkg:maven/org.javassist/javassist@3.24.0-GA?type=jar"/>
    <dependency ref="pkg:maven/org.xerial.snappy/snappy-java@1.1.8.3?type=jar"/>
    <dependency ref="pkg:maven/org.lz4/lz4-java@1.8.0?type=jar"/>
    <dependency ref="pkg:maven/org.apache.flink/flink-optimizer@1.17.1?type=jar">
      <dependency ref="pkg:maven/org.apache.flink/flink-core@1.17.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-runtime@1.17.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-java@1.17.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-guava@30.1.1-jre-16.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-jackson@2.13.4-16.1?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"/>
    </dependency>
  </dependencies>
</bom>
