<?xml version="1.0" encoding="UTF-8"?>
<bom serialNumber="urn:uuid:73773c73-66b2-48f7-a996-eff32b9606ee" version="1" xmlns="http://cyclonedx.org/schema/bom/1.4">
  <metadata>
    <timestamp>2023-06-26T08:52:16Z</timestamp>
    <tools>
      <tool>
        <vendor>OWASP Foundation</vendor>
        <name>CycloneDX Maven plugin</name>
        <version>2.7.3</version>
        <hashes>
          <hash alg="MD5">ab886f1cb1a79b4244ac54dde22a0989</hash>
          <hash alg="SHA-1">9ed658496dfeef87fe6072b95c62ec37165cc741</hash>
          <hash alg="SHA-256">df9b43417bef6aeac86a393abcc1ac2ed0518239ba544aaeb595b9619c603503</hash>
          <hash alg="SHA-512">223da34bb51c5339e0f7285757608c1a56b1ea887f7ad835af9299fabacc693053163da74af352af86b16e18e04db730bd44214eda04291410c42b6ae657d85c</hash>
          <hash alg="SHA-384">3aaf057329ed0f90ec3a49a45b3cf4ec5ce637fd75d6202e9483fa4274cec3e7b74308016e146b6ba087df5fce9397bb</hash>
          <hash alg="SHA3-384">0e2ce6d2a0e0ddea90f63d2e521e640e83aeac1230c201042e542186e9f32bceaf54ed9d26e6a9dec04c0f7895bbae19</hash>
          <hash alg="SHA3-256">dd3ba8325a1a759e5a8f159a3363213d4a34d51120c4e4c77097a6779964fb33</hash>
          <hash alg="SHA3-512">e5f87b2380e9785330fce113fedd5866a1498d5a9e365b7b00cb6fea50fd47166c471a6347d46d3edb7dd247a583874169624db5be2845c5c87dfdbcd58d9e89</hash>
        </hashes>
      </tool>
    </tools>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-ml-dist-1.15@2.3.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-ml-dist-1.15</name>
      <version>2.3.0</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-ml-dist-1.15@2.3.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://www.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink-ml/flink-ml-dist-1.15</url></reference></externalReferences>
    </component>
  </metadata>
  <components>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-ml-uber-1.15@2.3.0?type=jar">
      <group>org.apache.flink</group>
      <name>flink-ml-uber-1.15</name>
      <version>2.3.0</version>
      <description>This module contains the basic modules for writing Flink ML programs.</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">ad7e367d97ee08f85fcd9346d45cbfa5</hash>
        <hash alg="SHA-1">38835783d95a3011e25b296e1eb377a1b1186796</hash>
        <hash alg="SHA-256">4022aa4cc67a87358fb9fe179c59d883986f0d1a8bb48cc65f2ad2c9a4f83468</hash>
        <hash alg="SHA-512">ca6d250887d1ef272e7aeeacd8eb53f8ef759de5341964e403301c9a4cd98e530db24adec94fa92b8ac38082bc79bd2e87b63e3ede9d27149702463369ef80e7</hash>
        <hash alg="SHA-384">5d672a755ae75206d313f3eff0c5854fdd23e7b5f81709a0541116c730ce7be65cf6e25f776106d1d5cb612abd1a8397</hash>
        <hash alg="SHA3-384">7dca6f520e1a60f31ff19449efbb3c27d016ec19723e2900bb2c06a3cbde3e947bc5bca868fbc38df2a709c112c99ed9</hash>
        <hash alg="SHA3-256">03f95ea9aaa0745d21847c9a97ad91fc6e3c1c8c56565a4ebc341b38a432b013</hash>
        <hash alg="SHA3-512">7e0d1286f6b9625329dc684682d0c42dd6afad985a4a8e2dd5baf655bf391dd63456ce0691972c8414f00fbeaa77572cfb89c62a840aa6c666f03124e57d9942</hash>
      </hashes>
      <licenses/>
      <purl>pkg:maven/org.apache.flink/flink-ml-uber-1.15@2.3.0?type=jar</purl>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-ml-servable-core-1.15@2.3.0?type=jar">
      <group>org.apache.flink</group>
      <name>flink-ml-servable-core-1.15</name>
      <version>2.3.0</version>
      <hashes>
        <hash alg="MD5">daab64e88e68df674648c360bf7e6b9b</hash>
        <hash alg="SHA-1">606c87ee4bafa1174f9355080c847c1381d43ac6</hash>
        <hash alg="SHA-256">b18fceae51631f399f35073a4194b437d46db591f6d9640298666043ef5ab551</hash>
        <hash alg="SHA-512">eef30b6a16ebf59129e3c79c93eb41f3cf40624be089e2afec42373e85c0906c1f6ac839aeb25653586780ef7f39959438463c40b348f82c28fc539d3efee119</hash>
        <hash alg="SHA-384">00b665a1069cdd4932150ed57b807f8615ed2d4c4edade74e8a3630ed649104f6a2780368a82be429bfbe6089a76d628</hash>
        <hash alg="SHA3-384">f668d9d31d005bf20678264aab589c5a2770159026133bca84bacbee576d57f6fb36dc25806d26a6a1cc1359b5be0879</hash>
        <hash alg="SHA3-256">de9b3ca2a108742b00ff360bc11bfda81c0726cae6b5e5c2dd443cb071660f61</hash>
        <hash alg="SHA3-512">62eb1e4514f4aa3fd95979253089f33f140a54a4378e73611b90d88819ee88fca15fd79bd83ba525b34554824c480d15d7165e0faf3c0655a5307a5fc26be13e</hash>
      </hashes>
      <licenses/>
      <purl>pkg:maven/org.apache.flink/flink-ml-servable-core-1.15@2.3.0?type=jar</purl>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.commons</group>
      <name>commons-lang3</name>
      <version>3.12.0</version>
      <description>Apache Commons Lang, a package of Java utility classes for the
  classes that are in java.lang's hierarchy, or are considered to be so
  standard as to justify existence in java.lang.</description>
      <hashes>
        <hash alg="MD5">19fe50567358922bdad277959ea69545</hash>
        <hash alg="SHA-1">c6842c86792ff03b9f1d1fe2aab8dc23aa6c6f0e</hash>
        <hash alg="SHA-256">d919d904486c037f8d193412da0c92e22a9fa24230b9d67a57855c5c31c7e94e</hash>
        <hash alg="SHA-512">fbdbc0943cb3498b0148e86a39b773f97c8e6013740f72dbc727faeabea402073e2cc8c4d68198e5fc6b08a13b7700236292e99d4785f2c9989f2e5fac11fd81</hash>
        <hash alg="SHA-384">c34b8a0e0eba2168ad56fedeb7a1d710b6f1d3f1ce6aae99a4e0247bd120efbbadc8dcb2f731045b8a16e3efd30604dc</hash>
        <hash alg="SHA3-384">8ad6ebe7754bf0caa8cda7e59c0e95360d76e06a7ad6aeec5637985519dbd1dd06e7eed04711039f36ec4c49de280def</hash>
        <hash alg="SHA3-256">18ef639b2aeeb5aedffb18dbf20c79f33e300d99fb31b131689639cc470e6e4c</hash>
        <hash alg="SHA3-512">fbea96114dcf4f31cfaaa99987be756ddda3a6c74f8c835461997df794d54b92da1f60fe5c3f1f2a43cb8c5f5db7f4048bef77c70993673c7a93f3660fffc8da</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar</purl>
      <externalReferences><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/LANG</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=commons-lang.git</url></reference><reference type="build-system"><url>https://builds.apache.org/</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="website"><url>https://www.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/dev.ludovic.netlib/blas@2.2.1?type=jar">
      <group>dev.ludovic.netlib</group>
      <name>blas</name>
      <version>2.2.1</version>
      <description>Implementation of the Netlib APIs in Java using hardware acceleration.</description>
      <hashes>
        <hash alg="MD5">f53f00b91c5ed18ea315f5f14a31d164</hash>
        <hash alg="SHA-1">5c6ccfe1220ef06b38f4bcd0fc34e95c9846d9a7</hash>
        <hash alg="SHA-256">3550832630de7ad6460164413cf14890ded7369998b3a4d1ef689a215560f212</hash>
        <hash alg="SHA-512">59277b2dedb370f01344ff1e5e6d114c33e9af638c8bd4d34edf47be6adac63af329eff01c84f0fa6dd04fb2e28ad84a9b3b91c807cd695b885662a64352117b</hash>
        <hash alg="SHA-384">06204a102b2816bffcd5936e883026121531ed8dd45aafd7126cde6ef71c4c2692994186ac6ac60937ff1cfde91c1261</hash>
        <hash alg="SHA3-384">ae2e2756636b62d61c461115fff6525aa7877b0168ad59e3c37495f1d7db58021e966fcabb33e6a00097fa8aa5e6511a</hash>
        <hash alg="SHA3-256">35bf68fda1228f62c86104d989914ede5df5d414c5c47fc46752e74b65731dba</hash>
        <hash alg="SHA3-512">0e3ee0d7d1db39901e91749d42e8db0e857853d14d0bc61624f23ee9667ce90a57e2eedf8fc413e67addf57f1921dbfe3c44dfe93b3ec732d8806498521a657b</hash>
      </hashes>
      <licenses>
        <license>
          <id>MIT</id>
          <url>https://opensource.org/licenses/MIT</url>
        </license>
      </licenses>
      <purl>pkg:maven/dev.ludovic.netlib/blas@2.2.1?type=jar</purl>
      <externalReferences><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>http://github.com/luhenry/netlib/tree/master</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/net.sourceforge.f2j/arpack_combined_all@0.1?type=jar">
      <group>net.sourceforge.f2j</group>
      <name>arpack_combined_all</name>
      <version>0.1</version>
      <description>Java APIs for the BLAS, LAPACK, and ARPACK Fortran libraries as translated through F2J.</description>
      <hashes>
        <hash alg="MD5">83d82dd480da2aeba6429e746453ec0b</hash>
        <hash alg="SHA-1">225619a060b42605b4d9fd4af11815664abf26eb</hash>
        <hash alg="SHA-256">9964fb948ef213548a79b23dd480af9d72f1450824fa006bbfea211ac1ffa6dc</hash>
        <hash alg="SHA-512">1ee91ab6a9b5d058e7580d42cf21af0d21f4ad3774689b56c275dedd72d2a0b49dc1af2e63834ac76e8ac6356380d1452377799633d8f71e922333ff7578e927</hash>
        <hash alg="SHA-384">44186a386ce96a108a0b46244c84640047ecb8ffa14d1c47040946dad936b91252cc4afc02a68736e2166817598a2f87</hash>
        <hash alg="SHA3-384">48d9bf716bc126daa772167068242b3e525bbcbf1f0d136407b5bf5a62e830c94f2c323cb2e2ca1cbff6c4a435725ef1</hash>
        <hash alg="SHA3-256">45e5d4bbff9fd3eaf734d2855f2d5b245a3cad53bbf76790d7aa3f75d8ea8532</hash>
        <hash alg="SHA3-512">ee391c458dbc6ff043f10abe6342bce827512c6e9a5c0ac0b32069fe3d73ef8ba4b2e39bda92976c980482ed455ede899d21f883ea1f2a88b4dbc4dfeb34d9f2</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-4-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/net.sourceforge.f2j/arpack_combined_all@0.1?type=jar</purl>
      <externalReferences><reference type="vcs"><url>http://f2j.cvs.sourceforge.net/viewvc/f2j/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.12.6.1?type=jar">
      <publisher>FasterXML</publisher>
      <group>com.fasterxml.jackson.core</group>
      <name>jackson-databind</name>
      <version>2.12.6.1</version>
      <description>General data-binding functionality for Jackson: works on core streaming API</description>
      <hashes>
        <hash alg="MD5">88088e2e9bbc93adb021ae8bf436e544</hash>
        <hash alg="SHA-1">df01cc0c2d4acb913d73d587274986a12e3dec8c</hash>
        <hash alg="SHA-256">eb60e494ba8c23e653da4db8e29af0342927fc7e1c60501bf99e93145738c696</hash>
        <hash alg="SHA-512">9fa25c2a2917a751a1d77ff5301627a1adf48fb8b9924acb47d176b142fe791e4b12b7a526327e93557d0052dc10ea210a87849f1d292ba4ec581357f1b21971</hash>
        <hash alg="SHA-384">48ec219d4a8692ce850d7eedaf7fadad2c1891887773d3b90767538a4174248c8b51ceb5360ba8fa3e69efa736c3abde</hash>
        <hash alg="SHA3-384">8ca6c47360018827f1593d66786ecea285851c502ac43f7f42e81eb4254d637df7d45f5e88318e386de3d6bece38fca3</hash>
        <hash alg="SHA3-256">40bdbd0d303793df14d3fa8c5d6266a208793e466c0fc7ba5b39d29c134dcf80</hash>
        <hash alg="SHA3-512">ff1a8f9259cb6ff708a5ccc2505815b7c6fefb8ca6995a33a821bbea6f8a6f253cd69d9651b087de9cd3b8345ec75f59760e064f5389e0976e09e73efee6faf9</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.12.6.1?type=jar</purl>
      <externalReferences><reference type="vcs"><url>http://github.com/FasterXML/jackson-databind</url></reference><reference type="website"><url>http://fasterxml.com/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.fasterxml.jackson.core/jackson-core@2.13.4?type=jar">
      <publisher>FasterXML</publisher>
      <group>com.fasterxml.jackson.core</group>
      <name>jackson-core</name>
      <version>2.13.4</version>
      <description>Core Jackson processing abstractions (aka Streaming API), implementation for JSON</description>
      <hashes>
        <hash alg="MD5">e8f064827ddb8deb06e45d20988bcaa5</hash>
        <hash alg="SHA-1">0cf934c681294b97ef6d80082faeefbe1edadf56</hash>
        <hash alg="SHA-256">4c2e043200edd9ee7ba6fc378bd5c17784a5bf2388e152d208068b51fd0839cf</hash>
        <hash alg="SHA-512">cf54bf5be3a5015a4b2c3ac986bf01f64517df224c8ba67197118d06f7fbe8ad64e39d002df326a72feb5aec8f0bc7f15338e90c4ba0668a167a0f03a81ce47f</hash>
        <hash alg="SHA-384">5fd2723a9f5bae811e71b596180c56355497f87cdd6c9bdc74716224ea1d133b6ed4e5df20b6ec169b3745066019ad94</hash>
        <hash alg="SHA3-384">47217ac4e35397ed519916b26ec780ecbff69de0069afcbf9329a84f52b0e8fc4700e0c7b6bce7b9ddf585df7d944f22</hash>
        <hash alg="SHA3-256">2be4b3203664ef4249d40af8d3ea9516805a573515a8ece27c5e625c0969ed0f</hash>
        <hash alg="SHA3-512">75b4fa4464de9e5efbed460b940ef79b34fc7c477cb61540960f6e56039915a520176d6bf42077453cb049ec184d3b6d88006a4016a02b5de87da907d8c0791a</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.fasterxml.jackson.core/jackson-core@2.13.4?type=jar</purl>
      <externalReferences><reference type="vcs"><url>http://github.com/FasterXML/jackson-core</url></reference><reference type="website"><url>http://fasterxml.com/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.13.4?type=jar">
      <publisher>FasterXML</publisher>
      <group>com.fasterxml.jackson.core</group>
      <name>jackson-annotations</name>
      <version>2.13.4</version>
      <description>Core annotations used for value types, used by Jackson data binding package.</description>
      <hashes>
        <hash alg="MD5">7e982dafcf25c24b365b5088eaf8a0a6</hash>
        <hash alg="SHA-1">858c6cc78e1f08a885b1613e1d817c829df70a6e</hash>
        <hash alg="SHA-256">ac5b27a634942391ca113850ee7db01df1499a240174021263501c05fc653b44</hash>
        <hash alg="SHA-512">788a836b1631dabed472a0387de2ccdf86ab9091b04246d58e257780bb382e6ae068b6df862407c1256b0b83d1f9366813e54e98982f881c3d222a9f4a8e9ebb</hash>
        <hash alg="SHA-384">7ae717dc399ccfe7c2a4831fae5c410d896e0a5afdff710003fa306ae2663a3c21ca000edfec9cdba30b0997c4c66757</hash>
        <hash alg="SHA3-384">fd2b435781f0870b572ce493a7c2e8cbc0cdfec80a24ae9a3d0874c27f84fb527a80afdc30a4f641a8f5389865603f4c</hash>
        <hash alg="SHA3-256">d6a55b712e499803461575b89eb8e2114307c88ba0e7fa56a65eab995b155f3d</hash>
        <hash alg="SHA3-512">295881324b5331e3e9530b26f719020f01f2ffd33ed96cdfad7983c3e4578e1eea0cce9d8ed622a1ec6b7b1b1e60af858b6813d08e4f31a38d1422d9c70a6a5f</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.13.4?type=jar</purl>
      <externalReferences><reference type="vcs"><url>http://github.com/FasterXML/jackson-annotations</url></reference><reference type="website"><url>http://fasterxml.com/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-ml-core-1.15@2.3.0?type=jar">
      <group>org.apache.flink</group>
      <name>flink-ml-core-1.15</name>
      <version>2.3.0</version>
      <hashes>
        <hash alg="MD5">a42f12158b822219acbaac3acc4475ee</hash>
        <hash alg="SHA-1">054085548b12396300d8da53a745ab36b7ea11d0</hash>
        <hash alg="SHA-256">a56cda34393df3ebbdcf60d3c7418ffb4347754d3147d2fd76976cc7f507a52f</hash>
        <hash alg="SHA-512">55ae2c8acb132a368d62ab6be44fd5b39b584e966d0c04d0e5e7af57651298f03dd5950fc89e080926bb0d24b8b5f892abb316b6b8bd9f97e5e2e619f61cce1e</hash>
        <hash alg="SHA-384">18c68f3fdda927cd0f850e1777334544c708955a7ee292f353517f63da1badbc413105a40ccb3274d4dacf3f0935ed22</hash>
        <hash alg="SHA3-384">f1bb295b0ed46747f8374b1989058842e18ee65d55260577799c5397701cc6531e009a6952a15434261cbb1d57365dae</hash>
        <hash alg="SHA3-256">d0e8661787dec2f3c2928ca3e668bc7469ed9a7930121a6a0e85cc0f5a28adff</hash>
        <hash alg="SHA3-512">59b0d7ecf07dc1d8cdaa925076c0bd25f0c201a9dd2325fe46bf68a1b8d5cf31b6d6908880e8d7a5fbfdb6b6a5e8a953ff1f565e1c7db36fd7bee51283eddb4e</hash>
      </hashes>
      <licenses/>
      <purl>pkg:maven/org.apache.flink/flink-ml-core-1.15@2.3.0?type=jar</purl>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-connector-files@1.15.3?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-connector-files</name>
      <version>1.15.3</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <hashes>
        <hash alg="MD5">76b4a33dc91c317a5272655f1eb80a53</hash>
        <hash alg="SHA-1">1f246779525bf32bc173747d6b41bc69292f3ac0</hash>
        <hash alg="SHA-256">6f6fc5f3bbd45f8a236917f0ad6aa4e5e6a30ebde30ea727f79849104535dfd0</hash>
        <hash alg="SHA-512">b0067a4892bcab3d9e1b4cd7c916c7a09e5db5f18f85cf47bf1ff16b9362c51b182fb2650f443a296e6e28824b6882774c202ea53e6fd901e2bfcdd3cae31665</hash>
        <hash alg="SHA-384">f2fb8f5d1b437a7187a1eaf2c02db509be5a7c74f6cfbb77e78e88ee01bcb12fbd36d24f45351d9e547ddc2e1ab648bb</hash>
        <hash alg="SHA3-384">ea3dced47f44e5873576abe3ec3d5251308a5d32a2c96c4e7307d6a00313d4c5c40eb97dac7bbe7f04030e0ca448ec4a</hash>
        <hash alg="SHA3-256">6cce987e7b6dc2b7a95a35f9e4ccb800edf3b84f65aa4ba306730cb4e8d237b8</hash>
        <hash alg="SHA3-512">e36eb5d9b3d129b4f7d7a641ebb66a7db503388819695cb0649bdbdf7137519275ce10846346f82489ebbf5c390de2d4cf46a818a8c762dfc0375794116a3638</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-connector-files@1.15.3?type=jar</purl>
      <externalReferences><reference type="vcs"><url>https://github.com/apache/flink</url></reference><reference type="website"><url>https://www.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-file-sink-common@1.15.3?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-file-sink-common</name>
      <version>1.15.3</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <hashes>
        <hash alg="MD5">f3167e7cfe8a2a92962a7398a4318471</hash>
        <hash alg="SHA-1">3dbe0616e64122ac1532f692225c74c7fe0270cc</hash>
        <hash alg="SHA-256">3c57d6ff4cd5dd3c08fe7cc999560c7fee0407355deb0af85cd78cf7b0c914f7</hash>
        <hash alg="SHA-512">dc349a927cb15fe7a2b59c8e734fe4a967d002d881df808defbde04d78f58409235244133fc294206646fd79020c3b9b1e1ab710f3db4a0bb597733937f68abb</hash>
        <hash alg="SHA-384">d713dd1d40e999607deffc0cd4c676af482acd35158ab292f12171e3b99f9618c62540c79f8346f266823fa2ec91fc2c</hash>
        <hash alg="SHA3-384">a47110c1b6a4d5fe863ce3bef196db73756777bbbcc0e8804bfe2f2fec1b8017ff901d7d82ea5ec6e4e23ab69fb7e0b6</hash>
        <hash alg="SHA3-256">2d2fab955c5acdc3bce12213c9ef29925f02bc91f3c98a295e85277badbe32b3</hash>
        <hash alg="SHA3-512">d126da1306d5915414ab82f01e0076ed07196fc5a42c21f20b29a0876b15eb8fb323c37c7008b24d2b1036b853fb3c28f791c4704cbde5fd6c3f425a6fa12f0e</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-file-sink-common@1.15.3?type=jar</purl>
      <externalReferences><reference type="vcs"><url>https://github.com/apache/flink</url></reference><reference type="website"><url>https://www.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-ml-iteration-1.15@2.3.0?type=jar">
      <group>org.apache.flink</group>
      <name>flink-ml-iteration-1.15</name>
      <version>2.3.0</version>
      <hashes>
        <hash alg="MD5">c0e8b5b4362e45b5fadee62c44509c42</hash>
        <hash alg="SHA-1">160dd3f2e308e799a8cf392709cbe9cf32e1d539</hash>
        <hash alg="SHA-256">e3bcbd8f40f79e9d891e70dc13b0132706959c4778a55cd55b5b991685138d2e</hash>
        <hash alg="SHA-512">2b8fe0cbc1a7de2fd97839597482897ad82ef9c952333961f67cf79234133ee448d8ab89aecf85aeed3a07c22e1e20295caad663a95a79888271fc056aaf7bab</hash>
        <hash alg="SHA-384">28fac36092a38314e60bf926648e75298ca54f75557072d74d58db2257d796baeee1db31e8383277da0407e11f0c5998</hash>
        <hash alg="SHA3-384">76a80e63d7adc2dfcadf1da8cd7d7dc89050f5a86d3bca195ab882047d0e67224b1268727f40a6f10ff3c92b75a35001</hash>
        <hash alg="SHA3-256">7bd843be0573c9bcde1dde31f806cb504a790c68817e3c915b93e9b9a67deba2</hash>
        <hash alg="SHA3-512">9af83f759cc29f520e6b95315a8d7ec45c67e6afd492e3eb7c6c7016302d37877442b7790d9912b12c2a8442d0c6e9c6c670db4e647664935ee25ce4471d2edb</hash>
      </hashes>
      <licenses/>
      <purl>pkg:maven/org.apache.flink/flink-ml-iteration-1.15@2.3.0?type=jar</purl>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-ml-iteration-common@2.3.0?type=jar">
      <group>org.apache.flink</group>
      <name>flink-ml-iteration-common</name>
      <version>2.3.0</version>
      <hashes>
        <hash alg="MD5">52ce5e10c12059e15439189eee61b059</hash>
        <hash alg="SHA-1">7833005e988ce0afef607e923fd4930a6f8901f9</hash>
        <hash alg="SHA-256">a02ee854b6a3c2f06c8356a55fe3b7e1e5aaa0839831691ab444c234502beb46</hash>
        <hash alg="SHA-512">3226d4bb617202b9fca0f4f4e6ed7718263e2129132ef802089903ed6d3445f3f87eaba7244e5bb4498679a768e246e18ccaba9c591b988693e045a89b12b8b9</hash>
        <hash alg="SHA-384">4dfb5317236a3b40bb4ada449cdcfcc85dce54fbacd5e4f8877247b27da4ac18d70a9db146310b2f588cf471ae557e0d</hash>
        <hash alg="SHA3-384">1af8cf828c3e54789019bf4f375e15337be06e0e1ef38039fc6080fb2f536703e60101f28bf549525af39d2857ce7dd9</hash>
        <hash alg="SHA3-256">a8d39d2dcb902b7876cbb74d046b04a9a36578a0bb60fd6f1224819f2a7cdc3f</hash>
        <hash alg="SHA3-512">81568688230c908592e94282a51f84482696ea69a5ef3ffbc0a50a71198ca18b2fbbd8cb4abbe7a556f72e13a1664432aec47be5a7b3b300e92ce504609e8a40</hash>
      </hashes>
      <licenses/>
      <purl>pkg:maven/org.apache.flink/flink-ml-iteration-common@2.3.0?type=jar</purl>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-hadoop-fs@1.15.3?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-hadoop-fs</name>
      <version>1.15.3</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <hashes>
        <hash alg="MD5">250e90aa099ace36e1eaf049a0b8f726</hash>
        <hash alg="SHA-1">d2cc932b13bb198e05aa3d6e21de5a9d722656e1</hash>
        <hash alg="SHA-256">e1ed06e861aa5399d4745ec95a1eae2353fcf4d94eba1255dd964c1baa5f613b</hash>
        <hash alg="SHA-512">56f68ae665779332768ea63fb8cd48c0bec19aadca84f52ffa26fc877115657d676572b610841280759d37194f80febba9e79d7158f8076f1165f230ffa9bca7</hash>
        <hash alg="SHA-384">521cf4b8f6dd8a715433a3f1454d0fa62726946f53154462e375df2100d3b5c5abf6aeebe166d8a0231950e838453d55</hash>
        <hash alg="SHA3-384">28caab613629d02359fe3f500a7ec05cbeff1e982c11b4c26a8edabf35df5e263eff33970a99f410a960f77a91d16e0e</hash>
        <hash alg="SHA3-256">535ec13ed9f066b4821446033bd0c4f2b2bd87e0f76748d30a50952bbe25d767</hash>
        <hash alg="SHA3-512">23077472c6545a1af78752079d86e4995f852f1e10f886b6abeb161f8a37823662e1bc8e587ed49aa76e0489bc5434f9072b6f629afc9e8d0942994c4d543414</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-hadoop-fs@1.15.3?type=jar</purl>
      <externalReferences><reference type="vcs"><url>https://github.com/apache/flink</url></reference><reference type="website"><url>https://www.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-table-runtime@1.15.3?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-table-runtime</name>
      <version>1.15.3</version>
      <description>This module contains classes that are required by a task manager for
		execution of table programs.</description>
      <hashes>
        <hash alg="MD5">2d07901946033ccc611285914eb3ce7d</hash>
        <hash alg="SHA-1">87f28b33df20b23d12b0418aa51d9609798b9f9f</hash>
        <hash alg="SHA-256">a1990fe8f05f78638f53fcebf6bdef4360cf01487a7f59a2a9581dc236418189</hash>
        <hash alg="SHA-512">8f0977a70231579ae107680341844c228042989392a16a3fb090bc418be7eeae1923c168425c4b3349673479edace20413aa277c8272f2d4b81fef9fe1c2a01b</hash>
        <hash alg="SHA-384">4f4c96d76ca20fc8131b0a7d19218a18d8db9c463c11a7ad6ea716c5aa1a6f5e5358f392faebf101505f0cd6fc8c7713</hash>
        <hash alg="SHA3-384">24f41654d2d4d725320ee3ce4bf2f7951c5a4dfffe57080ef27f035da2236c564b736b20b16fc1f384aec6c14d18afcd</hash>
        <hash alg="SHA3-256">c5aaa4f5d80c60c1cba8a47958dcc8b41a4b37c692442799546975f453cbbe31</hash>
        <hash alg="SHA3-512">1f573001af4c761c2ebcc22af379b1dc5059c4dfb562b5c2a41e5d87feb5d7f4fdce74aae59a1a1feeb3b94b2d52d15862cd9499cf578c2801f6c233c4482612</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-table-runtime@1.15.3?type=jar</purl>
      <externalReferences><reference type="vcs"><url>https://github.com/apache/flink</url></reference><reference type="website"><url>https://www.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-table-common@1.15.3?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-table-common</name>
      <version>1.15.3</version>
      <description>This module contains extension points of the Table/SQL API.
		It allows for implementing user-defined functions, custom
		formats, etc. with minimal dependencies.</description>
      <hashes>
        <hash alg="MD5">fba972f90cd4a266aa4dd7bd514578dc</hash>
        <hash alg="SHA-1">5833ec6d1e23a8b4f3f5dba3fbf30449f2327eec</hash>
        <hash alg="SHA-256">b563604964357537af776c82eedd545af43fed921356422ead9e24a10892a10f</hash>
        <hash alg="SHA-512">d362954262ff75c5f4402ac253b008c0b47739ad82a62ff99da3662ee96e0e47aff03c0ceee07f07f15f7acbb2ab6da30ee0e14557c09f756ae941aacad1b890</hash>
        <hash alg="SHA-384">bc8e8647b4322c4d59d0a165143b1e0d6acb376555bad8d078d705b30941aef0005b23e4d03ba09e24e20e65d5c12354</hash>
        <hash alg="SHA3-384">194ad37aeeaee6f8d805bbda8004cabe560fb9100af8f143a9654e6a4f2a8f72a329bf1b50d227c555a349711647445c</hash>
        <hash alg="SHA3-256">d961ec323ebd72fa664f12e715df5bdd763ff5fe6f59a994facb0525e9f64536</hash>
        <hash alg="SHA3-512">f76577e67f90e97be955e17086c3fbed8e032b4382f7cd9c885a787d0f91ba0e3120a8aeebe1f596656056f2376c2ed2237b4e01f4df94b616ea5b64e0c299b2</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-table-common@1.15.3?type=jar</purl>
      <externalReferences><reference type="vcs"><url>https://github.com/apache/flink</url></reference><reference type="website"><url>https://www.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-shaded-asm-9@9.2-15.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-shaded-asm-9</name>
      <version>9.2-15.0</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <hashes>
        <hash alg="MD5">4b57b7ead9578721e3135394fa69ae29</hash>
        <hash alg="SHA-1">f89d00906d3ffcf97b049cdc6d6e70dcb101a4cd</hash>
        <hash alg="SHA-256">9692cd3f8953c74920bbbf17002bf874953871564768b2f0a97199bfed475e3f</hash>
        <hash alg="SHA-512">f8e86733ae3e52482bf8ed74370827a4405d362a5bbd63bc1a2652db75845eef9c43d687d3f3663e2bfcb030acfaee2b5fbdce9eee873cb4887c66c9ccebf8ef</hash>
        <hash alg="SHA-384">6542af42f033dce80d803348694a998d7b5e02dd49a15378696a0e57f7377192ae1f5c17744629145dba5e14d8110c96</hash>
        <hash alg="SHA3-384">ea6d6901d3c4a7d731de82d91fc1791ece8a86be02ecdcb948f211abc58ad61cb0fa199345c9163abdfd6b41dc238dd9</hash>
        <hash alg="SHA3-256">2e5ef369755a9302ad55865e3027e76f48b9c8ad53e2b7e290c07d4395ad9421</hash>
        <hash alg="SHA3-512">51acf643099af357dbbe5720c6f1e54b1ff9f36007f2f3c2a6b14221f750d7201ee2c2ef90c0cd654ddcc083ed8dfafcaf13dbc1be55460ff9edd731a09511e3</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-shaded-asm-9@9.2-15.0?type=jar</purl>
      <externalReferences><reference type="vcs"><url>https://github.com/apache/flink-shaded</url></reference><reference type="website"><url>https://www.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.ibm.icu/icu4j@67.1?type=jar">
      <group>com.ibm.icu</group>
      <name>icu4j</name>
      <version>67.1</version>
      <description>International Component for Unicode for Java (ICU4J) is a mature, widely used Java library
    providing Unicode and Globalization support</description>
      <hashes>
        <hash alg="MD5">046a5f59abf6b67a464dea584d11e59d</hash>
        <hash alg="SHA-1">2e159807158095566726600534034030dddab6d0</hash>
        <hash alg="SHA-256">c4eb904caf5fba968a2f1a3b8aef14df801e9329b21697209ca30bfcf153867d</hash>
        <hash alg="SHA-512">b3036b162356a0a5dad39eee611dae27c6fbe53f9e5ec1f3529ab02d49d97093b58602f43dd855433a0bbe02f6253e46a9d1899911c8e2e73001ab2c9a79d68d</hash>
        <hash alg="SHA-384">c2b28649d0ef9bf68f258a9f432c627a553ead79670f0a7ada3d986091a0001c5ab9eca372f792734bff733370a61fb1</hash>
        <hash alg="SHA3-384">3726bfa8b77bd0cdd66564944044d82dca3ee1fcf2594ebf1a7acc6752faf4c11892a1744af27e5528dc4b991e4cd0c0</hash>
        <hash alg="SHA3-256">cb19cec2baad1dc610267b2c98325f5c742230caf2247ef6297dfe8d9be9f11d</hash>
        <hash alg="SHA3-512">f46e4ead1cc1c05c3825716485ce79c890500a5356f8e7ca578f3080c09fb2460fb1aed81d65d345c402706906ea4e96afc0ff03c50fb0ac5bbacd351a8f11ec</hash>
      </hashes>
      <licenses>
        <license>
          <name>Unicode/ICU License</name>
          <url>https://raw.githubusercontent.com/unicode-org/icu/master/icu4c/LICENSE</url>
        </license>
      </licenses>
      <purl>pkg:maven/com.ibm.icu/icu4j@67.1?type=jar</purl>
      <externalReferences><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://unicode-org.atlassian.net/projects/ICU</url></reference><reference type="mailing-list"><url>http://sourceforge.net/mailarchive/forum.php?forum_name=icu-support</url></reference><reference type="vcs"><url>https://github.com/unicode-org/icu</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-table-api-java@1.15.3?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-table-api-java</name>
      <version>1.15.3</version>
      <description>This module contains the Table/SQL API for writing table programs
		within the table ecosystem using the Java programming language.</description>
      <hashes>
        <hash alg="MD5">357b2fcb3dc6861365845dec0d13cf05</hash>
        <hash alg="SHA-1">02335b676c1f83869261fac541b151793aae3d5a</hash>
        <hash alg="SHA-256">750c46f007aea6b2be4ed5b21f0c79b3cccad0048fa818860a55b0740770883f</hash>
        <hash alg="SHA-512">ef17b8f880f234701786b82b71e02cd820925269ec5c20d0d9fad894c13368c5471915d4635cfd3dbcbb5a0bfecd2d2d9013280d28b41e2cae17bddd61618d51</hash>
        <hash alg="SHA-384">f7e62a183ec7758cc30e437777ee81fd7325e618aea5e5b58ff559cc0c45cf6037ee541612cab50c2d792aa735eb905c</hash>
        <hash alg="SHA3-384">f2f9a2b585b19c570ce361be33297dae993cc0c5833b476fc37b8833972785fa4aeae9f3b08996d30a7544bc14ac5c76</hash>
        <hash alg="SHA3-256">fbef4b943b506e8cc54132db1e99a2042edf8301eaf45bce5a19e010aa5967ce</hash>
        <hash alg="SHA3-512">db62ca9dc4591c8713c500f4854c0d34080739113d799aeb4f1a51323901aaf610d0c150be26ed6a35c840da2504a577847ddf7c9f7ca696e16a666951d146ba</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-table-api-java@1.15.3?type=jar</purl>
      <externalReferences><reference type="vcs"><url>https://github.com/apache/flink</url></reference><reference type="website"><url>https://www.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-table-api-java-bridge@1.15.3?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-table-api-java-bridge</name>
      <version>1.15.3</version>
      <description>This module contains the Table/SQL API for writing table programs
		that interact with other Flink APIs using the Java programming language.</description>
      <hashes>
        <hash alg="MD5">1e47e1ecd717730fb520f5ef825afc0f</hash>
        <hash alg="SHA-1">1bbf436be6bf7ef65f5550d575dffd19499bd04e</hash>
        <hash alg="SHA-256">9ba371039bd0b619202a2b6353d9c8876f54436859d9c4d7b73191b70f5e843c</hash>
        <hash alg="SHA-512">cf86c8f6f1e4703e6738706b385025404a38bef5144ae60dfb851291a5175b4036073c94d07224f68740396a8b596f637ae17a455f95577027c983d1b2208b74</hash>
        <hash alg="SHA-384">752c41b9c9ba399430475504bf9055f6c178b932ff91c38a7c3bf787bd90a496a246a29fe6509d1aab814665309a10fe</hash>
        <hash alg="SHA3-384">1aa5ed6be2aa167798cbe18f01733d311cf1c89bac848d9336cc9edc4aa5d87f5de2cb643b50447c4813e4c31b621dd8</hash>
        <hash alg="SHA3-256">614a2be7eff126c89994687d6d62c7782dfe6beb5cf7d4ee8795cd79cba23120</hash>
        <hash alg="SHA3-512">69b4140ea7dfbf47c90afe2acb8369f3b3d58204d58a3c67b44c3f12aff7e98c1d0473e2320ff1d6fdb8d6676d1fcddb8e50c2c0ad9c670c67c442b94e0e40d2</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-table-api-java-bridge@1.15.3?type=jar</purl>
      <externalReferences><reference type="vcs"><url>https://github.com/apache/flink</url></reference><reference type="website"><url>https://www.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-table-api-bridge-base@1.15.3?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-table-api-bridge-base</name>
      <version>1.15.3</version>
      <description>This module contains the base code for bridging between Table API and DataStream API for
		both Java and Scala.</description>
      <hashes>
        <hash alg="MD5">83282472d5cb4b28ce058c6054e78c0f</hash>
        <hash alg="SHA-1">a6a7b5a728fae573013a11327038f4bb97cc4fa2</hash>
        <hash alg="SHA-256">58f6bbb21f0d7fa39e97a3c6e8ea553f2d1ac0361bc09abe642b3f780972c910</hash>
        <hash alg="SHA-512">49848a54369ff14ba312d040622c795b9a021a22ef4ebda548e854a3553069930e28cbe092c053f0d3922405ef0422e538f97a39d1c519da8fca25c1b9a19066</hash>
        <hash alg="SHA-384">50b02315ff9518a11c62eac891784b0fd19b7501514f090c1765acd49234083a3475ee128665c8279c50284f1bd619fd</hash>
        <hash alg="SHA3-384">7efd8b7dae6fda4462de9ddedb84a5950f7567ee7b380ac308d372eafd397f1d1a2abdee18dad485a2853d02ad0bb161</hash>
        <hash alg="SHA3-256">7d9fd91439a04df6064da7b87d1d0a4cb9bc9978c91024e8a933d036b9a0d5bb</hash>
        <hash alg="SHA3-512">ccd05bc1b8b3b64f6cbef7fc296e7216cf54246229904554651ae22b7edcfa6d58ce9e1af27ecc2a74a06a8040df5fc66cb3168b31705fedb67814e47cdc3225</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-table-api-bridge-base@1.15.3?type=jar</purl>
      <externalReferences><reference type="vcs"><url>https://github.com/apache/flink</url></reference><reference type="website"><url>https://www.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-streaming-java@1.15.3?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-streaming-java</name>
      <version>1.15.3</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <hashes>
        <hash alg="MD5">93704ccc0ec288b337ac9461d3560698</hash>
        <hash alg="SHA-1">67a8d77e0c1bc38060e24764c386cd531c96c5c2</hash>
        <hash alg="SHA-256">d49691235ca475fd37df3f0a8c44dcb5dc3db4ea79b3cb1bbf3698514bf32528</hash>
        <hash alg="SHA-512">078b2a5c70a5579f0ec093cecf4dbd256eea19dff56d03b43f1f19ee83991ebe8d300d769d27707c36f8a1a026b3270892b557043db5401acf983ab1ec9617dc</hash>
        <hash alg="SHA-384">5a0944fef4b89daa103faf1527215a2d229382a5c9b64a61e6221d34c57067da73e46bdc21f6e6fc4219576fe5d6d181</hash>
        <hash alg="SHA3-384">f2b656ce8208fac0b3b3bd206995c317babd287e538875fdc02f865cb920cccfbf5fb8b203ce36b532da83e9c586b066</hash>
        <hash alg="SHA3-256">646bf468809d7c111b44f4f210579defd827b7c40c96be3e12da448b2f9d72f5</hash>
        <hash alg="SHA3-512">f216786e2cb8942c0743e83a5c8616982fddabbba5750978ada60ca604be8f11d522392903640f91b94b4f4b30cb98a45dae2366d978e8e550b3d6281d65ceb0</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-streaming-java@1.15.3?type=jar</purl>
      <externalReferences><reference type="vcs"><url>https://github.com/apache/flink</url></reference><reference type="website"><url>https://www.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-cep@1.15.3?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-cep</name>
      <version>1.15.3</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <hashes>
        <hash alg="MD5">326916db80ce8ac3174cf59a14a2b85b</hash>
        <hash alg="SHA-1">dfce5dd505da28457b4da7f863324ae2b5860beb</hash>
        <hash alg="SHA-256">669de9713a89b79b263411611b7374b5ed08f54ab34f89f57cdcab0d5fa8a535</hash>
        <hash alg="SHA-512">3ac477c0ab16ab8f5eafc4cef8ec3ee51d0e897398ca9bc4deafe68af58882d4f1acc511263511aa58e8ba855d2a976dac200f403ff99c86c40647525d3210fb</hash>
        <hash alg="SHA-384">57a01df0ed3b75a77cd98613d90074e01ca2e40d72c53d6da7ea6e500a69a065cd763100180b8487d9736bb480a4f14f</hash>
        <hash alg="SHA3-384">e1974f620b58f8bf356c82072c8a9cb0f6eb9eec4699ab9aa5a49ab08b0e501141a3de65af4a4114ef85c35e6e7839fd</hash>
        <hash alg="SHA3-256">d1cbd257c6d613ef830044fe73c17cdadeca8b9db289a78194777ee93d7e4cef</hash>
        <hash alg="SHA3-512">f3ce389edd8fd9cb8aa156ebb20a23a8415f16b644f655cafc6501c6da504f4d644608ca414272bfa157788c0523c705c13e9d6c3bf5e385b387ebddff75f09c</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-cep@1.15.3?type=jar</purl>
      <externalReferences><reference type="vcs"><url>https://github.com/apache/flink</url></reference><reference type="website"><url>https://www.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-ml-servable-lib-1.15@2.3.0?type=jar">
      <group>org.apache.flink</group>
      <name>flink-ml-servable-lib-1.15</name>
      <version>2.3.0</version>
      <hashes>
        <hash alg="MD5">c610c604b58f7b55db3ffe7504ccae30</hash>
        <hash alg="SHA-1">e4216c65954261c44579c9604de8ed44ac2fd758</hash>
        <hash alg="SHA-256">1d7bc2000285bbb199cfe944562181a7f85648fd8caef1dbc34aaf347ac3e199</hash>
        <hash alg="SHA-512">b185f00720028c90961e2c8326b103f02a3c2837c9e644b28b47a9d49850e65c1779238666e01dbb9af21fe5d1f4f32dffb4e12326305c2051b7ad76c0643756</hash>
        <hash alg="SHA-384">c3ea61e6387de7cffce3ac28684c4d23d2494b15eb8452330901a27aa5c2bcad063b4959195508fc0e40af0981048c8a</hash>
        <hash alg="SHA3-384">c1a7f097af87b5cc0807c4290ad1c87a162a7a7d4fe169a83a3639b28a90842861d89f717d6c0db89b0a98ed9913fa09</hash>
        <hash alg="SHA3-256">cd85f6b53ac559eba459daa5c8099682d62fbd6d572507d3f029f0467f1ade42</hash>
        <hash alg="SHA3-512">7b0acf446623ce8a90f8a266ca1352bcb7d1e14225db056a3684700f41870ca0d888a458087e774357f40d4d46cf3f8db60459eb99e48cf35a69c5e480b57c20</hash>
      </hashes>
      <licenses/>
      <purl>pkg:maven/org.apache.flink/flink-ml-servable-lib-1.15@2.3.0?type=jar</purl>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-ml-lib-1.15@2.3.0?type=jar">
      <group>org.apache.flink</group>
      <name>flink-ml-lib-1.15</name>
      <version>2.3.0</version>
      <hashes>
        <hash alg="MD5">55dab04f7c4e84d62793b78b6e407495</hash>
        <hash alg="SHA-1">7351c64394e27eff3a9cb98ef9417e8bc26f6267</hash>
        <hash alg="SHA-256">6b134fab3cda0b93303c436f16aedc410e905250731d661047e17feb8b72f346</hash>
        <hash alg="SHA-512">b64bb0fa37cbede0c448dc9933b3be7c3fbaa461f2a91da94b23b8d9cedfa209ae853ac4333ad236773ca60800b92d2bd9d7899caae025f609c7ba9aa3fc7bb5</hash>
        <hash alg="SHA-384">268a7d19213204b3dcc7bfb20431182d79a646f19430ce54a9217b095c2b065c7741e5d9915a796098506d7644b185d8</hash>
        <hash alg="SHA3-384">285faca3fff0faed0b1860741312bfd6262acf5f9352fbf8ecd4b3ff57385f5f3a1a5bcb88628456675846a6f129ce1b</hash>
        <hash alg="SHA3-256">0aacdd6ab1ddadfeca7057f5ab92693a9f1308f5caa693ac968b35839ac86ec6</hash>
        <hash alg="SHA3-512">1581c47dc74eb5c571353c9f95510196848b4e2902a3cddcd7c7d6d09abb1e42236bb8c9b630e1c18ee691ed99b4efd51683f73a38aa9ef308a93620f9399230</hash>
      </hashes>
      <licenses/>
      <purl>pkg:maven/org.apache.flink/flink-ml-lib-1.15@2.3.0?type=jar</purl>
    </component>
    <component type="library" bom-ref="pkg:maven/com.github.wendykierp/JTransforms@3.1?type=jar">
      <group>com.github.wendykierp</group>
      <name>JTransforms</name>
      <version>3.1</version>
      <description>Sonatype helps open source projects to set up Maven repositories on https://oss.sonatype.org/</description>
      <hashes>
        <hash alg="MD5">2d8ae6ebfdefa987a7edfa718e8f7815</hash>
        <hash alg="SHA-1">f1f6d3c9c9bc04f848e38bdb77dea01e8764a01f</hash>
        <hash alg="SHA-256">d9dffa3e27793040dccb97b054d95267df46e669c396bf1ca4f3b085069bc2d5</hash>
        <hash alg="SHA-512">aa4756d0d3caac5603f97ed210be2a1eb6b38922c25257b8889dfa210fae21a879b2d3874260280881ad1ca4a51a240708226835e42bc37573ed08be290d47af</hash>
        <hash alg="SHA-384">9a76b2de4905d7ccb2be855dbdd272b53a64da36ae043f6c534c3076c477b0df748ee86b0925365384ce5b35fddc3734</hash>
        <hash alg="SHA3-384">8c666a53902fee896d5780da16353ebb749fd7e1aeb4eb9ad2d7d20875a9787718c5d1372be8fe43af3d702a9faa86c4</hash>
        <hash alg="SHA3-256">12a0118517503595fb3086dbaf4b17a1e20f1e4c35bce61e7c6a970c5aa78bde</hash>
        <hash alg="SHA3-512">d0b57b74d8db1e6f2aedc798aec0a1b6c78f00d5cea1817a1f95f53c342bce7b52da9d64d9624d4dbf3baf47eeeadd01aeb1e14c99c24f88268fa594c367679e</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-2-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.github.wendykierp/JTransforms@3.1?type=jar</purl>
      <externalReferences><reference type="vcs"><url>https://github.com/wendykierp/JTransforms</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-math3@3.5?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.commons</group>
      <name>commons-math3</name>
      <version>3.5</version>
      <description>The Apache Commons Math project is a library of lightweight, self-contained mathematics and statistics components addressing the most common practical problems not immediately available in the Java programming language or commons-lang.</description>
      <hashes>
        <hash alg="MD5">096ce126e481ebf22fbf8b96fa7243f9</hash>
        <hash alg="SHA-1">13af68e9a11576953f5c4b09436f8207be9d3a27</hash>
        <hash alg="SHA-256">dcf9768726b82e8d7b8a928447b08bca7cfe2773d5120a63a41ec224207c1a29</hash>
        <hash alg="SHA-512">6500c17b1785ac1e696d47bb6f849f81c0c55c2a9114fd4faeaad4c06265824c06349906482f8dd96a79d2aea2b4dfac1d313545dce96f5e2c35b5232b25aaa3</hash>
        <hash alg="SHA-384">a5e27070cf3b7d1c36815cf4dae418fb2ea3ad61f097ccb9a3e3c265599f541e399342170fb878b841129b32bcff83f2</hash>
        <hash alg="SHA3-384">a38f421d82af684dd23bcfedf39b06514e1826c10d59802aa20537cdd19002805fac38923ad19c2448c3f110f731bccf</hash>
        <hash alg="SHA3-256">1ebede25a5f37552f4b81d67a5d5b6ae90804e9dfcbe797071ae6a1ab92f43e6</hash>
        <hash alg="SHA3-512">ad7f447d81e8cbc5fe7caa7c4febc6d967210b93afd20c5e433f480a04ab2845407de93de04e3b8331df97bbbd9ebb00ff822a5b527fce35b1effcaa889bbaa7</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.commons/commons-math3@3.5?type=jar</purl>
      <externalReferences><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/MATH</url></reference><reference type="vcs"><url>https://git-wip-us.apache.org/repos/asf?p=commons-math.git</url></reference><reference type="build-system"><url>https://continuum-ci.apache.org/</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="website"><url>http://www.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/pl.edu.icm/JLargeArrays@1.5?type=jar">
      <group>pl.edu.icm</group>
      <name>JLargeArrays</name>
      <version>1.5</version>
      <description>Library of one-dimensional arrays that can store up to 2^63 elements.</description>
      <hashes>
        <hash alg="MD5">9e9af6183a8ad44b01b4b76a34a56821</hash>
        <hash alg="SHA-1">0fe1350c7b5537c144fb0af39206e212ad1bbbe2</hash>
        <hash alg="SHA-256">6dca5ab23e1fdb9190a257c04687a9ea19111c36b6ec9478bce6b2a128ca1aeb</hash>
        <hash alg="SHA-512">fb38fc149a338239d13abfa2992082eaf0e945c05e8e2f0493cb3aa0504525a8cfb3cece7dd002e875e1520b7c28ad8cc44804919a1ab4651b8e8a063ca7e689</hash>
        <hash alg="SHA-384">930666603becd3bb6c92fc1fb30b19b50c015297b64f193b3c1510a0752a54e0f88e3cfbb2c99da49b40a829afe8de7b</hash>
        <hash alg="SHA3-384">387982cb4bddc4db47d9d98ce67552816230e198dac3e9b68a80f9e4aa78011b137e022f873eb2b931d1ae81d4a78b25</hash>
        <hash alg="SHA3-256">246865aa199467eb55f50f9b22bbca69209ecd62014c2c24e61827a9f42e72cb</hash>
        <hash alg="SHA3-512">fa805a4053b81ef7574de8567a2e9de42c318aa6389420e0c57ce02af4bed6ed52c3970595c5fdd18cb2b3fb3252a08dd47c67baf20d396c86a68b050b849664</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-2-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/pl.edu.icm/JLargeArrays@1.5?type=jar</purl>
      <externalReferences><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-ml-benchmark-1.15@2.3.0?type=jar">
      <group>org.apache.flink</group>
      <name>flink-ml-benchmark-1.15</name>
      <version>2.3.0</version>
      <hashes>
        <hash alg="MD5">adaf89d39a5f46085ed3234980bef437</hash>
        <hash alg="SHA-1">13175c6360340505244c9f2bb800b5b6e418861d</hash>
        <hash alg="SHA-256">0fd61ac09a71a6fc30cd03977cd38ed6dfc7bd49ecb9e09c5d34b185886b6fae</hash>
        <hash alg="SHA-512">8916bcca2412531b81b7ad35753b27348850ff5bd4e5ab8b13d39f138230a7d75589148a964dedeba06954fcb97ec83db1c3f11f8c5bb8cacd0d86797883ac79</hash>
        <hash alg="SHA-384">3670e26471d1f53520b7fce5c58f06c193f473c941dfd7f85f6adffd1b8a707fad363580ba4d2aaf586103deeca664dc</hash>
        <hash alg="SHA3-384">ce085bd15d3e837bac3c7a72b65a5b6a21eb75d792839498a9b2b3f8cb4de9f497cfaf1c1c7961362b56c7d67e667af8</hash>
        <hash alg="SHA3-256">bb9ab58af9b2d4b3a6408e7017245f0da78a02f88a4011d176c33ac4a056a3c7</hash>
        <hash alg="SHA3-512">8e4753cf3efdd011c47b71e90baf1a196294ee2120de78e328cb3b0b214be51dcb1111bc987081310c9fd99833acb5bb517ff74648d45afc76592eeb904531b2</hash>
      </hashes>
      <licenses/>
      <purl>pkg:maven/org.apache.flink/flink-ml-benchmark-1.15@2.3.0?type=jar</purl>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-ml-examples-1.15@2.3.0?type=jar">
      <group>org.apache.flink</group>
      <name>flink-ml-examples-1.15</name>
      <version>2.3.0</version>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">1748dbeee57b0762735b988c5c5f273c</hash>
        <hash alg="SHA-1">3de6c6039e33c4260682445af528b22d55635865</hash>
        <hash alg="SHA-256">f62e49a1e46ef4890c6c93a9818201712655195bef25785913a4d3540c41c3b8</hash>
        <hash alg="SHA-512">048ed09ba995ef4017f8f5452c74721532dc50527d433689db4e93aee2d284e34d33d47c734d7db48be802b9debeee9aa601e65c5d5955ea06d88f3510aad6ea</hash>
        <hash alg="SHA-384">55433553f6c06f8705ef32a36d1d653600ea98d9c76bc6d722f292f6b4291bdcb1914f1c1cc214951f6423361541966a</hash>
        <hash alg="SHA3-384">2c26086119de1f329347ed92d37a7ea035a9a3c47c367f388c3ac0ec87cf89677edddc781dba17aa55bbf54f5eb96adb</hash>
        <hash alg="SHA3-256">4a08854a4cebbbb7f00dd5a94a2497c875a47c80cde790fddee090fb2802fbba</hash>
        <hash alg="SHA3-512">9cabd6177f0f9cb44e0d87651b24eae0aa33247d1d97a5061c267de2f0367e234eb05e55b4150f756cbb1bef7b1c2f8a6cdf24f2d28b6272b68fca4f7a9f290f</hash>
      </hashes>
      <licenses/>
      <purl>pkg:maven/org.apache.flink/flink-ml-examples-1.15@2.3.0?type=jar</purl>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-ml-python-1.15@2.3.0?type=jar">
      <group>org.apache.flink</group>
      <name>flink-ml-python-1.15</name>
      <version>2.3.0</version>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">3f6a1de9aced0cdcf0814a9ab78118a9</hash>
        <hash alg="SHA-1">3b41b6731e362914f92afb20dd51359254c17d4c</hash>
        <hash alg="SHA-256">8b450753f3711b3f72d43e01edc32d3b3b0745a7ea2db70d0b09ec9a3f3fb76b</hash>
        <hash alg="SHA-512">7ebe3cd3e7cba05ce803f0f9135f480273a113865c49e9b118b014fc65dfe4a5d839774ab465617d6d6472166f3325d428f61c0202a574447b2bbffb4c809e08</hash>
        <hash alg="SHA-384">80fa7fef0a0592a34d4c631e177833230cf1682e390b9ab2ffeec3ea8e543af3b69a20cf059c8b7291e32e834a86ad1f</hash>
        <hash alg="SHA3-384">714304bc4fa97f1662813bb215628a0f996e81a1982d9ff889546ed363584a03a41d39bff6b87a5e16cebd97257451d8</hash>
        <hash alg="SHA3-256">c438b408cf10baeb0014171acb001937fc40d920b3988de1348c37b91952896f</hash>
        <hash alg="SHA3-512">6b9f59b15f55c9ac65a383b1334fb1c84550fbf72bd399c5ca8da76f87571eebf2ecf8f1c49c6f5bb4d7b630bf5cd22c7d54d724a90836f5d62575c7e46125ee</hash>
      </hashes>
      <licenses/>
      <purl>pkg:maven/org.apache.flink/flink-ml-python-1.15@2.3.0?type=jar</purl>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/statefun-flink-core@3.2.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>statefun-flink-core</name>
      <version>3.2.0</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">cd04168286d9d12bccefc77e9562dc03</hash>
        <hash alg="SHA-1">8004aa4848b2454c901d8807b65cf2622d847eb2</hash>
        <hash alg="SHA-256">24a560fb9ffab88542fce194b073d1f11168d06cda74e2e98a4dac65609d3e21</hash>
        <hash alg="SHA-512">432d285910ac2dbfcc34f50aeb45fc2ce334fa8fc41fb88f298fa8d57f14819b084e2dfb34b2012c7b196529c4c782e1bbe0d08747907068cc048ee1a1a2607b</hash>
        <hash alg="SHA-384">99142f66f302b289ab94ee75fb0b13bc7458449c68866eb65d5454d480c8bcaf0f3ac738044e19653d8d66245afd9f48</hash>
        <hash alg="SHA3-384">3793f7d38f70cf7ef3b5b96f115b9d4fa75e795525ff00f734780e8374ce56db8d43671bc61711c3f6a972e5ffdb2ace</hash>
        <hash alg="SHA3-256">12c7f538cb55a8525b5dd9522122abdf0a20fe51435607b6afb3ed519e7068e6</hash>
        <hash alg="SHA3-512">3ce7a2b06862898bbe6cd7fb74d696b1e7103217d03d646063a0d2b517d32514a5390103b0656be1437e1de44c0445f793c9accdd3185c0fbde55483289743ea</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/statefun-flink-core@3.2.0?type=jar</purl>
      <externalReferences><reference type="vcs"><url>https://github.com/apache/flink-statefun</url></reference><reference type="website"><url>https://www.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/statefun-sdk-embedded@3.2.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>statefun-sdk-embedded</name>
      <version>3.2.0</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <hashes>
        <hash alg="MD5">1ac360c52b0bd442adfd7728f7ba8fc1</hash>
        <hash alg="SHA-1">84e4fb49c20706249a5a3dc48288658de8028d0d</hash>
        <hash alg="SHA-256">24799b9b20aea701b8acc135d5db570fbb68e74b2f73510dfc28977d596cdfc2</hash>
        <hash alg="SHA-512">9d5b33b9899908cf8b3246a7132dac6b468acb864cabf0d7c872e830cabc883fd24525869dce9818ba2fc23531206aaa57a2cc588a023ca91f4095812899358f</hash>
        <hash alg="SHA-384">e50cf1cb4d5a26cf2b948ecfde4f9adc33018166220a5ea1b38e07b2f714e59b294038a801f1f1694f115def531b8963</hash>
        <hash alg="SHA3-384">9f099c65b9761c29e6c82f2e3db2672072c47eabb47794be8951d549f86a82313a6bb33b477bfdb7c4992bc36a129a67</hash>
        <hash alg="SHA3-256">fe17282cd2bf47764fdea738df251a6320d2900bc1c8f8c0b2a15a3a2c8852ce</hash>
        <hash alg="SHA3-512">433e86a5ab9d054b87557ee1a25bc899e93aeca58cd7a32089ff5332364a70fc84783cac05da000745eac8ce60e2b2465c9cd9065291723ffefb77791033169c</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/statefun-sdk-embedded@3.2.0?type=jar</purl>
      <externalReferences><reference type="vcs"><url>https://github.com/apache/flink-statefun</url></reference><reference type="website"><url>https://www.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar">
      <group>com.google.code.findbugs</group>
      <name>jsr305</name>
      <version>1.3.9</version>
      <description>JSR305 Annotations for Findbugs</description>
      <hashes>
        <hash alg="MD5">1d5a772e400b04bb67a7ef4a0e0996d8</hash>
        <hash alg="SHA-1">40719ea6961c0cb6afaeb6a921eaa1f6afd4cfdf</hash>
        <hash alg="SHA-256">905721a0eea90a81534abb7ee6ef4ea2e5e645fa1def0a5cd88402df1b46c9ed</hash>
        <hash alg="SHA-512">06da282cfd8e30d9f8cf17702b8709172b00e22b75a627a1d85f8989615b8a1a401bc25d9aee7b14aed1d9b5df73bf2ea8d66f9c8468d9577c29f0ccfa2cc70a</hash>
        <hash alg="SHA-384">56e6b41ef62eb5edfed0203802cefae9c2df86388148e420bb0c687abb2b80e14d5c2a82d5b35dce4badaf148f94eada</hash>
        <hash alg="SHA3-384">58c3bf89fa1afa75c2c5078159fd28e27b2273d437f26aaaa7391310b6f0823f3cf476a24f5631c0881f3f7e946d99be</hash>
        <hash alg="SHA3-256">c333ea5faedfa78e0614a2620438d5724eab093df4e960918391b6a44c2915b0</hash>
        <hash alg="SHA3-512">67ec31448e156cc72dd036060b460bb2667a13b1cbe500b6b7eed3235b1994b44c39f440ebd07b21ec9595b166ad61121d4f6a132b5b313c558ab21b72599425</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar</purl>
      <externalReferences><reference type="vcs"><url>http://findbugs.googlecode.com/svn/trunk/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/statefun-sdk-protos@3.2.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>statefun-sdk-protos</name>
      <version>3.2.0</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <hashes>
        <hash alg="MD5">d879814ca8e18f4ca915931e7c5f0b62</hash>
        <hash alg="SHA-1">b25a7dce37e10d2ddffbb754fdc87a997d73b83d</hash>
        <hash alg="SHA-256">26606c616dbad915aeb08c96c8db80bdbfdd3fd716fe099eeee3094a73bf846d</hash>
        <hash alg="SHA-512">c0267bb6c96ce71db5390c2c77647f4a696ef0cd3c3a0b829e8c29bd7fa5e096d3ef14e7a06fa94b3f3ae111d4e67f2e3d4dcaa62eebd954e74a9b97f3171ea2</hash>
        <hash alg="SHA-384">25b37e8a148a0acd67ce0e6d1c348373e377c5dcaace44e78ea58f9e88d65f133df2b1426bdeb283b2ac7822318946db</hash>
        <hash alg="SHA3-384">51e1bd15d65be1f6b05e454b1727a093be4eaef483de539163aba638a2bfa75726b3ae740aa0ed7e8a8f426fe6911d17</hash>
        <hash alg="SHA3-256">2aa64b4aec83bad6886a80fdb6d44568e73544fb500da5ddb4e4ce5106cb4ec8</hash>
        <hash alg="SHA3-512">b53394cacda2424669af92ff4b02ecb4b31255c52f980523b4cb6239fdac3f8cf45e15a1a3664e307c5874de895484838abeb80c3e5d881352298fb70612495a</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/statefun-sdk-protos@3.2.0?type=jar</purl>
      <externalReferences><reference type="vcs"><url>https://github.com/apache/flink-statefun</url></reference><reference type="website"><url>https://www.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/statefun-flink-io@3.2.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>statefun-flink-io</name>
      <version>3.2.0</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <hashes>
        <hash alg="MD5">5a42caf327e3aaf9efdd30176554b548</hash>
        <hash alg="SHA-1">ebd72da6144236bae53286316e0d09a7d55050da</hash>
        <hash alg="SHA-256">0c2b8b49d193efe46c58cac9dc4a18edb625df0012ba3930fa4e05686ceb3d77</hash>
        <hash alg="SHA-512">b7eeb0ca0142ec7d6595599587355ee4a159b3d012cc69216cbddc9b47d2a160e79fade796801d3e3bf5151d5901083f32984b229b37621152b057b80f01f63a</hash>
        <hash alg="SHA-384">45b27dfb347ad912386ae8615a8a01926f916fad1dfcb15c5e66501fd7491ed91256d960f1210981448139146c5f876c</hash>
        <hash alg="SHA3-384">481f0df4f39430fcdd9a4eaafc0191b0ff8f84d4ea431e89f2b8822a64e04eee4d8a914d034ef162152d23e8104c48d0</hash>
        <hash alg="SHA3-256">ea46e98501d21514f92ed9230c21624e055b5cfec25425a459f5775906740974</hash>
        <hash alg="SHA3-512">dea066f66241825b214ff1f61d29981e43864f4853e59ad890f04b0310e94f814ec01f46d07ac16c1ff6d05fa2e79b0bb0c9756cbe7a3d2bfea2fe40a38b2594</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/statefun-flink-io@3.2.0?type=jar</purl>
      <externalReferences><reference type="vcs"><url>https://github.com/apache/flink-statefun</url></reference><reference type="website"><url>https://www.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-streaming-java_2.12@1.14.3?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-streaming-java_2.12</name>
      <version>1.14.3</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <hashes>
        <hash alg="MD5">dead66dcc1d3c262ba9f4f2c03e8f4fa</hash>
        <hash alg="SHA-1">bf94ebacad233dea8faa71a95b29b6865be8bf4f</hash>
        <hash alg="SHA-256">3a6f3074b24bf89e4cfd6151fc7388801e502c7d85d3fcf036ee8167f758febd</hash>
        <hash alg="SHA-512">e5bc47c97aa93f5053178078bacaee3fdcf20ec0b74edbd754e9d560a0ce253035d5de54db1bd868677c75c58cd87ddf524adbbacd67463d8360d8dbbaa85bda</hash>
        <hash alg="SHA-384">4445771c2fabeb1ccc275d1f44b5fc02f8d8ed0fa94c7130a655ae7ab3fdd41ee04e7c189498e5306c00231283638a63</hash>
        <hash alg="SHA3-384">0866a7a94dc2a9d20066933d62d2010ef59966c2305ccf69f101c0371755397d46fb25f4d263fea6126b18f4d35eb779</hash>
        <hash alg="SHA3-256">8a2f18a1cca1db855e3184ebe0148d79a65e76de134b8001505b263293504a7b</hash>
        <hash alg="SHA3-512">56867233922ade9fdf51fe0fd6c1ef03dbadce22ffa6d9dfa6149fff15437afe3d3b21cb78c01fd313649d8234dd201ee6eb6a2d38be01974d2293c6eb3b2d04</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-streaming-java_2.12@1.14.3?type=jar</purl>
      <externalReferences><reference type="vcs"><url>https://github.com/apache/flink</url></reference><reference type="website"><url>https://www.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-runtime@1.14.3?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-runtime</name>
      <version>1.14.3</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <hashes>
        <hash alg="MD5">7b1e5a27ea129fa61cf864cea98ee0f0</hash>
        <hash alg="SHA-1">421398ee85d43591d502ec2fcbfa76fddbe15f88</hash>
        <hash alg="SHA-256">e5d143b2070c2abc7684e2fccc597a853b0eee27b277fe50005b4625a5c6352e</hash>
        <hash alg="SHA-512">cf358a298c328c7d741e1b3d595cb77793a778d8638bf57289709ff6605a7c606bda550b72a362f02e00a5fa66358b490bbd47b35c7694ca10a074528063cf23</hash>
        <hash alg="SHA-384">ddca2ad11761e71690288b4850c96f501d5baf4ff43e05d8f36e4f0d6bf49e8d929560fe3e1f175e89b2751771bb0467</hash>
        <hash alg="SHA3-384">3ef65a89abffba5942696ae834f1456c2fda50d00189a21262c35f5b03dd0ad173c767a0cf007e807d594f5d8c7f6d03</hash>
        <hash alg="SHA3-256">bd38a192f0376757562ecf28b2786d33978d924d2df550f5b6bfc81750d201d1</hash>
        <hash alg="SHA3-512">c2797d4479412e785d7a16dd8b30df21d2d0cdd7fea2f9b5576eee0d5237592e996a66f5eb4329868d1b64653543c0a23ae03756a1728339b89ad5b61025b089</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-runtime@1.14.3?type=jar</purl>
      <externalReferences><reference type="vcs"><url>https://github.com/apache/flink</url></reference><reference type="website"><url>https://www.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-rpc-core@1.14.3?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-rpc-core</name>
      <version>1.14.3</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <hashes>
        <hash alg="MD5">165dc7f316d055ef48a4d895f5d9e48c</hash>
        <hash alg="SHA-1">e9027fe79b50a49574bf44ebe1534e65b4374438</hash>
        <hash alg="SHA-256">dfd403287ee88a939062087e5c1bcb5df249078cc70852ed1845f09c59de412f</hash>
        <hash alg="SHA-512">2586a322091ac3de514544ce9af18a0511fba62a731d0d0f9d8f3d5980b14125582f9474bb2f183c5a9bdd86599fa5372a7c9bee4785944e0d7d7878861acd4d</hash>
        <hash alg="SHA-384">c86a001279539b48b376a5bdcb656dcc530c27c00ade444bcea4630fe4d320eeada262908c313003c98f2780d6d749b0</hash>
        <hash alg="SHA3-384">8e99f38e874e9169ff5dc089d0e742a7b2558499fb6ace6ac8e837d6f333c6b43cbd876beae4fb508957e0a39902c8c2</hash>
        <hash alg="SHA3-256">ec80dea18ea392b2467472b0d911cdcb6ded6394fb55eb6a669d7f4caade1d50</hash>
        <hash alg="SHA3-512">00f0e3b155d3dca191842206a32767749857e1d3890f587290d64e1f51d082a333d12aa107c5ce8288ee469d74b09d956deda3d269bc14e08a84015c13daca3a</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-rpc-core@1.14.3?type=jar</purl>
      <externalReferences><reference type="vcs"><url>https://github.com/apache/flink</url></reference><reference type="website"><url>https://www.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-rpc-akka-loader@1.14.3?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-rpc-akka-loader</name>
      <version>1.14.3</version>
      <description>This module contains the mechanism for loading flink-rpc-akka through a separate classloader.</description>
      <hashes>
        <hash alg="MD5">4f9528ad1401da00ebfa13e8c90945ac</hash>
        <hash alg="SHA-1">448d4ff7f8b580d6fa9dc42978df2a90d3d01227</hash>
        <hash alg="SHA-256">37b8cc730e00d2f4beb7817c39a7b507274eeaac9f400165d706dcc2cfd5b9cf</hash>
        <hash alg="SHA-512">e9f39c9bf6a98badfee133c1d63e16aab414d22085ad327d5fc3da6e3d2770f6a8474c2f60416a83b17be2f06ed91f780fcec5ad3d59ca42f57fe1bcfbd77a30</hash>
        <hash alg="SHA-384">a0ef7624acc5438197766e9353f81b5d7ad047dbf99f2e161c61cdaa312afcb3624b006fcea9533a118919eb508e7603</hash>
        <hash alg="SHA3-384">96548c7e6fecf28d3841c11444f0f4e6ac308c892fe9252862c5f2f4ecb52b2204334c292d2517179d95886cbe772ec2</hash>
        <hash alg="SHA3-256">8a8348c60a9409ae55acce8bac23ae90e44f2c01f1bd25145b363447a0705bfa</hash>
        <hash alg="SHA3-512">ddd4f12498f15554d5bf549a145c9324ee828c33d40fc4a18ef3dc1b5067cd5231901ea5308d225caa56eafe8f48810479151ec13e1e92f38dbda9a1dba3f723</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-rpc-akka-loader@1.14.3?type=jar</purl>
      <externalReferences><reference type="vcs"><url>https://github.com/apache/flink</url></reference><reference type="website"><url>https://www.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-queryable-state-client-java@1.14.3?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-queryable-state-client-java</name>
      <version>1.14.3</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <hashes>
        <hash alg="MD5">6f50b0cdd4e87697db498cd81ee26925</hash>
        <hash alg="SHA-1">502dfdf75c8f73385254f0ee832352cac26ca178</hash>
        <hash alg="SHA-256">acc0203ce3ae8a6f48c6dfdfcb5bd51e3d98c0b20fa83cb97dd0ffc380d73ba8</hash>
        <hash alg="SHA-512">504bc796f81be5ee6257a12c00a02fa3b816e04750fa2f354b45d30b1cccfd3853b5eedef1891acaff084df5e8c586516f3b08348313a9f170508b56db66ce0d</hash>
        <hash alg="SHA-384">afa468303e1e230df0527d316760898dc76ab2042f140bc2b85d93b4fe0709f92c53baeb873a3efc4808e6eeeb6ad41b</hash>
        <hash alg="SHA3-384">4bda0c51fc709316ec517e52c3bf1c2309a852278d9aceab437c3bcaef675298488b3a29d82b199373357a40f1eba1c5</hash>
        <hash alg="SHA3-256">9949a9416053c883d0d051c1cad8b4bc04ea25f5017a82cfe776a6e2b439b06b</hash>
        <hash alg="SHA3-512">549a42a9fe0406a553651f5b74a18c1013fd461507a40d2de9c407448d9567d1ac5e403344452381756c14db36c97856ef31718e36462b56f4134007c45e22ae</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-queryable-state-client-java@1.14.3?type=jar</purl>
      <externalReferences><reference type="vcs"><url>https://github.com/apache/flink</url></reference><reference type="website"><url>https://www.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-io/commons-io@2.8.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>commons-io</group>
      <name>commons-io</name>
      <version>2.8.0</version>
      <description>The Apache Commons IO library contains utility classes, stream implementations, file filters,
file comparators, endian transformation classes, and much more.</description>
      <hashes>
        <hash alg="MD5">21ba575792e2694c39af13918a80550b</hash>
        <hash alg="SHA-1">92999e26e6534606b5678014e66948286298a35c</hash>
        <hash alg="SHA-256">02f291e5d1243dc143496e3cbbb40a1ced47aa58f2d633d3e38780cd068d5074</hash>
        <hash alg="SHA-512">72040ed293a083f979c3f23b00c359195cf0e4c227a9cb962d99804cbe07d86e24d2864aa8c533bb79e4ad1f83d3d17f290c8c24630410eb80734d6d1266e7ec</hash>
        <hash alg="SHA-384">13cb963b3b8bd821f3d3c0e7bea787f9b0e78b35073a4132e6d865c289e3293978096a4fe51a5deb04e297ba4db644a5</hash>
        <hash alg="SHA3-384">2b4bb78ebda93daf3c337a969a4383951c985ce5bc1171d25b8975a95bff844597815fe8b44a241fe05bd8a82b88c2d4</hash>
        <hash alg="SHA3-256">951806bba26758fb22f73179475b1936c9c35552155a62a2d9b09e0bc5f99865</hash>
        <hash alg="SHA3-512">75b9fd12b695a4e7d1dc26103013fc8dff5caea76e74100a18d4f808eb0b3d62b5dce8d91eca241234123986c25e80e5ce2a485dd3556d6750386fabc0899194</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/commons-io/commons-io@2.8.0?type=jar</purl>
      <externalReferences><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/IO</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=commons-io.git</url></reference><reference type="build-system"><url>https://builds.apache.org/</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="website"><url>https://www.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-shaded-zookeeper-3@3.6.3-16.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-shaded-zookeeper-3</name>
      <version>3.6.3-16.1</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <hashes>
        <hash alg="MD5">5dc535e45a8c2080a677c6632d5b2e49</hash>
        <hash alg="SHA-1">0f63ba1384765c4f5a1f30b5ce9d88d68f37d403</hash>
        <hash alg="SHA-256">e74a7e724dd0d6566055541127c0acaea5d042e74f07c46ea1ce26ffdd1171e8</hash>
        <hash alg="SHA-512">e7565e246a802598f50434bda9e23f1d5834b39e07cac6adcafd37c87befe4b64310928fc4af5bddf28418f1017a7c0eadbdebeccb6521b53fbbd9f7dd0aaeef</hash>
        <hash alg="SHA-384">592cf9cb9d2b441f379bac86ad9febf71d99c66668297c528018a535999d04f8aa98280c6f1b4c50ddf1ffaa0cc1a379</hash>
        <hash alg="SHA3-384">c633e96d1decf0fb15bbe5c6d98ad1805dc5e6565c860bd9d299a8003c823f0557eb96dc8ec47e4640b58a791e6aebf3</hash>
        <hash alg="SHA3-256">8f94e982ad9a5684c60fc3e2c6d56d30b843528f8330b0604e9a2e65ce76f359</hash>
        <hash alg="SHA3-512">502ae7635054ce4efa8136fad6fc55c6c4b3cf3d6aac36bb79f04a2d4f52dcb3c62f43b8cb5f655c7523ca3df72c6a1f81890276604e04e51ae6715b8ccd7a4b</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-shaded-zookeeper-3@3.6.3-16.1?type=jar</purl>
      <externalReferences><reference type="vcs"><url>https://github.com/apache/flink-shaded</url></reference><reference type="website"><url>https://www.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-cli/commons-cli@1.3.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>commons-cli</group>
      <name>commons-cli</name>
      <version>1.3.1</version>
      <description>Apache Commons CLI provides a simple API for presenting, processing and validating a command line interface.</description>
      <hashes>
        <hash alg="MD5">8d5fa2a42fef17d9034b35a9ac9cc750</hash>
        <hash alg="SHA-1">1303efbc4b181e5a58bf2e967dc156a3132b97c0</hash>
        <hash alg="SHA-256">3a2f057041aa6a8813f5b59b695f726c5e85014a703d208d7e1689098e92d8c0</hash>
        <hash alg="SHA-512">383ff22040787d7a27e18b414892dd204ba0f9d75e43eee775c1276d6dd6ea2a38fc349edec1b2bd332fb0bd324dcc8ccce084b98d47bcaf8aa443773fabf3de</hash>
        <hash alg="SHA-384">d0c5fe2acc826cec496790cb206fc8d887eef5a400bcf72cb81cb493688286045d8353dd1a7ed57f30b95bbdb4f829c3</hash>
        <hash alg="SHA3-384">9e1e44c060bb57dd6daaa300b9bdfeb4e977e770d113f85e6883a9c829e5309c90a557ff0b64cf32f5252a6ed0829a49</hash>
        <hash alg="SHA3-256">8c71796d10168b9f0c20844032b90c793f05e9bb581e6c072c0680f815d6d2e5</hash>
        <hash alg="SHA3-512">737381965fc1fb7b746ceeaf449f4f8c481793b1d43c2260be2ef94eb93d558f7399f0b82f367620cbd1ecedb64dd2b4da990e6dc63a54d2ef3a875ca00f7cbf</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/commons-cli/commons-cli@1.3.1?type=jar</purl>
      <externalReferences><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/CLI</url></reference><reference type="vcs"><url>http://svn.apache.org/viewvc/commons/proper/cli/tags/cli-1.3.1/</url></reference><reference type="build-system"><url>https://continuum-ci.apache.org/</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="website"><url>http://www.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.javassist/javassist@3.24.0-GA?type=jar">
      <publisher>Shigeru Chiba, www.javassist.org</publisher>
      <group>org.javassist</group>
      <name>javassist</name>
      <version>3.24.0-GA</version>
      <description>Javassist (JAVA programming ASSISTant) makes Java bytecode manipulation
    simple.  It is a class library for editing bytecodes in Java.</description>
      <hashes>
        <hash alg="MD5">23fd22d0d089ddfac567a39ce0cb1a91</hash>
        <hash alg="SHA-1">d7466fc2e3af7c023e95c510f06448ad29b225b3</hash>
        <hash alg="SHA-256">aba81efa678b621203fb89aeff81d6f126f7a9dd709401e5609c42976684ae23</hash>
        <hash alg="SHA-512">e57dad74a3edef837ece841d06e4a7c96ffecab8fbcba56fe5f7eccd662f0c0d757880a6073793a8c75ad7a0a1d146346b75cdbfe4fd8a271048a54446e5d1a2</hash>
        <hash alg="SHA-384">4867afdb7522b3dbfa10a51264ac6c15a2a8083d16c8dbef318275d24687768f35130b1c17d8407ca8ecf855abd83dff</hash>
        <hash alg="SHA3-384">a52be891987d4fc7d319e6417e0cd9a28f189d8623b803d72b5429e118da73b9937899231825e793d37b434d7522d283</hash>
        <hash alg="SHA3-256">0cf8db7d2a5f7e1a70827538cb4b0b446fcc239f05ca55d9bf8f2a50f1e08af3</hash>
        <hash alg="SHA3-512">ed9675f9f070203801eb762092ac99636d376b7ef563f99508283006a65a0d2dfce38e1ba7ff2ccfebcede0376ba0724b76b459ca112477234aed8208807f785</hash>
      </hashes>
      <licenses>
        <license>
          <id>MPL-1.1</id>
        </license>
        <license>
          <id>LGPL-2.1-only</id>
        </license>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.javassist/javassist@3.24.0-GA?type=jar</purl>
      <externalReferences><reference type="distribution"><url>https://repository.jboss.org/nexus/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://jira.jboss.org/jira/browse/JASSIST/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.xerial.snappy/snappy-java@1.1.8.3?type=jar">
      <publisher>xerial.org</publisher>
      <group>org.xerial.snappy</group>
      <name>snappy-java</name>
      <version>1.1.8.3</version>
      <description>snappy-java: A fast compression/decompression library</description>
      <hashes>
        <hash alg="MD5">fdacc9d6d764fe918daca743a67ce24f</hash>
        <hash alg="SHA-1">2c58fa5745831afa3a4290c2ce15553ff13ad0ab</hash>
        <hash alg="SHA-256">d371202c03bd165f6fd660f63ae597fbb4c91b81bfc6e12cf6b2a93ace93a800</hash>
        <hash alg="SHA-512">5f3f9a391a70c1898610892bca07bb87b867caf4e6d959800a3abdd45435b4af52a9fdd82d7aefe0bd47af169203f83c92450e327c3b8bf47373e8030004344b</hash>
        <hash alg="SHA-384">bc9e1d3ad7dfbd35fc1e7e9287f254eca5fc1f20234558bd963e1f504b55c4d2aacf424f05b211e24846d4d158fb3c91</hash>
        <hash alg="SHA3-384">8481ad7e2cdfdcd38bad657f9f04addedd7c3cc486ee2abd6c8aff82fe6d8dbc11b9c19e9e024a28fdeabf09b937c8db</hash>
        <hash alg="SHA3-256">cadeeae860e97960d0a32a2211de5f4cb42dce9849df32788f5a238c1d9fb791</hash>
        <hash alg="SHA3-512">60f155286eb2b97e505a997e21245a80800e1292ef31f8656d2f538286cfab2cfbd96826db29f340c2cb20356011e3452796949b9e60a0dad0d198c4ea3b35df</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.xerial.snappy/snappy-java@1.1.8.3?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/xerial/snappy-java</url></reference><reference type="vcs"><url>https://github.com/xerial/snappy-java</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.lz4/lz4-java@1.8.0?type=jar">
      <group>org.lz4</group>
      <name>lz4-java</name>
      <version>1.8.0</version>
      <description>Java ports and bindings of the LZ4 compression algorithm and the xxHash hashing algorithm</description>
      <hashes>
        <hash alg="MD5">936a927700aa8fc3b75d21d7571171f6</hash>
        <hash alg="SHA-1">4b986a99445e49ea5fbf5d149c4b63f6ed6c6780</hash>
        <hash alg="SHA-256">d74a3334fb35195009b338a951f918203d6bbca3d1d359033dc33edd1cadc9ef</hash>
        <hash alg="SHA-512">98d59086a6021ca571d9c1d64b715e43044c730e1ac563f514c40cf44302615d30378b6d5cc69990446522de6260dc8e7b303e3990a3139dc326d058dfb6dbd9</hash>
        <hash alg="SHA-384">8e3f2acdbb41a00c4d9cc5f328e63fb626ac7c6c84e1bf9502e2fcc76a591b2b819b2d27b29925ff986b95c297b30e2c</hash>
        <hash alg="SHA3-384">ec0d6a00760d0a4ecba13a41785d6ae57a64552b1687eaa3e292b3054bb1348e49ab8a938197ff126f9218c6cb96ee1c</hash>
        <hash alg="SHA3-256">7be684c102891105f66d378b61ea1297a392c1618b5aebf7e0b281f55217c206</hash>
        <hash alg="SHA3-512">0b2294570ea2bfbb50ced21dfa4bad956467ca447e9ab2dd602a3478371bcd0e9f13d2dff74d06827a28882409612cdde00bd91267be05bd3510c68268bf3166</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.lz4/lz4-java@1.8.0?type=jar</purl>
      <externalReferences/>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-scala_2.12@1.14.3?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-scala_2.12</name>
      <version>1.14.3</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <hashes>
        <hash alg="MD5">e84ee26d5131827e480659b35c69c8a0</hash>
        <hash alg="SHA-1">2f99fe8bd8df90cbe36d542c315062dbb99befcf</hash>
        <hash alg="SHA-256">4ef28d42469b98ade4cfd11a205789bfd0cf161983fe8a9ef77a81d37e74e694</hash>
        <hash alg="SHA-512">0179d864990a93063e7a2345dd21510f800675dc20f314a327faa62df68f379e0f5b0ccd71b5979a23a7eb2a8682d01ee95934dc5cea9582df5460c5d94d561f</hash>
        <hash alg="SHA-384">f0c97a3a48424669e1d9aaf8f6c2e288ec8a9c91a151104c9794718ab96410ed2758e8e821f52952c6bcd022d959bf96</hash>
        <hash alg="SHA3-384">1915ec7177c773a9261820202703b37755e47debf6f6b3f0db1c84d9847b37996b4cf92c9acb920dcafb52f7e21bcf72</hash>
        <hash alg="SHA3-256">48bb6e2deccdb16047277fea2da26fe11c1247b45de79d401aa5b079df8a767d</hash>
        <hash alg="SHA3-512">932350b3dcbff1b2a18ed5a80a436a913daeb97e4b93a7e3c84b54d16e1d70b67061d8128e0f2d69200eb5a6f6e9a1572a8a41187e9f49421ff212722d76cedf</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-scala_2.12@1.14.3?type=jar</purl>
      <externalReferences><reference type="vcs"><url>https://github.com/apache/flink</url></reference><reference type="website"><url>https://www.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.scala-lang/scala-reflect@2.12.7?type=jar">
      <publisher>LAMP/EPFL</publisher>
      <group>org.scala-lang</group>
      <name>scala-reflect</name>
      <version>2.12.7</version>
      <description>Compiler for the Scala Programming Language</description>
      <hashes>
        <hash alg="MD5">b46b2a5d2194097750b15b82089a0dab</hash>
        <hash alg="SHA-1">c5a8eb12969e77db4c0dd785c104b59d226b8265</hash>
        <hash alg="SHA-256">7427d7ee5771e8c36c1db5a09368fa3078f6eceb77d7c797a322a088c5dddb76</hash>
        <hash alg="SHA-512">f8ddebcbc1bab9cb7f7e2b0aeb68469d8e08502965394a93f224b80226f675daa41ade32fe6f7cbdf037171bccb6aa92084d935ed2e109249dbc11c6f40fdbb1</hash>
        <hash alg="SHA-384">9485782d1641c33cc63435a3851bbcbb21088d6cb4439abc6609424336e674a8025a9fe07e58220719e4983359402e3e</hash>
        <hash alg="SHA3-384">fd7fe4c6576024ea5937caef8dda70d25bd35d044c0de89316d40ed0d872509e8808ff51b3c80a5b120dcfe9fc4f0d5f</hash>
        <hash alg="SHA3-256">3fa37bd8b1e9cacccb3fcbf2e6e752746e9352ccc5ed38d69899a5e30eec99f5</hash>
        <hash alg="SHA3-512">3465bbf51593054ad0d0ddab598a2d2305fd8a4b8f76825cd3b8b12a954a48445b7a17bb990e845b99cc63fd2840abb33fd6f69764a7de1dfba3382f9bb9d267</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.scala-lang/scala-reflect@2.12.7?type=jar</purl>
      <externalReferences><reference type="website"><url>http://lamp.epfl.ch/</url></reference><reference type="issue-tracker"><url>https://github.com/scala/bug/issues</url></reference><reference type="vcs"><url>https://github.com/scala/scala.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.scala-lang/scala-library@2.12.7?type=jar">
      <publisher>LAMP/EPFL</publisher>
      <group>org.scala-lang</group>
      <name>scala-library</name>
      <version>2.12.7</version>
      <description>Standard library for the Scala Programming Language</description>
      <hashes>
        <hash alg="MD5">54ecf0101bf195a0158d8b5bfeb1fd41</hash>
        <hash alg="SHA-1">18c09ad08ec783f5074f4a0d6308a78759000cb1</hash>
        <hash alg="SHA-256">8f3dc6091db688464ad8b1ee6c7343d7aa5940d474ee8b90406c71e45dd74fc0</hash>
        <hash alg="SHA-512">4131ffeac8c7089adab8958b00358f364b29fbebed585d891d65345388120e8bafbb13e1e097b78af25ed72f6d778b74d60c16e7a1cf662c158ed3c3fe7624ea</hash>
        <hash alg="SHA-384">a53be24a2c53a3bd6d43de6e60fd53e81e8d69dcb9e703d160ac14931ab658d6ea36d8b1a376e63efb2dc13db2d35dec</hash>
        <hash alg="SHA3-384">93f30b10ae443b11a85650e5f5a5b335e54fc704aecffbc59a2ebf4c9310e71f6d2b00533a12f8f20f8122f7399f82d1</hash>
        <hash alg="SHA3-256">8e7b5c0e0cb091e6b7ae1d4274f8a7e2825114877c3ea6263ee5146805200da0</hash>
        <hash alg="SHA3-512">be5e8b051603847ef828e1f1758889184bb3101ca24804ccdab09b1a0c51ab8aa9071fbe0e566a0cdb39c051f10ab80d500a330b17982a420ee3795a602470ea</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.scala-lang/scala-library@2.12.7?type=jar</purl>
      <externalReferences><reference type="website"><url>http://lamp.epfl.ch/</url></reference><reference type="issue-tracker"><url>https://github.com/scala/bug/issues</url></reference><reference type="vcs"><url>https://github.com/scala/scala.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.scala-lang/scala-compiler@2.12.7?type=jar">
      <publisher>LAMP/EPFL</publisher>
      <group>org.scala-lang</group>
      <name>scala-compiler</name>
      <version>2.12.7</version>
      <description>Compiler for the Scala Programming Language</description>
      <hashes>
        <hash alg="MD5">7e08a63966d66dd335ee90df4982c883</hash>
        <hash alg="SHA-1">a393b72134dff0751d5110c3e4808689deba75c1</hash>
        <hash alg="SHA-256">6e80ef4493127214d31631287a6789170bf6c9a771d6094acd8dc785e8970270</hash>
        <hash alg="SHA-512">21f03599d8a642ad677bd59963648df57a3a1addd4c06a233790f24025ae7f7d1bde91a18fe53ecc1ac4b84afc06405a1d7fa97347abf10c07975cae4e6f9df7</hash>
        <hash alg="SHA-384">73b955ccf058087ca573ca5414130202a8cd88bcc0e7e88561612d9666ca3fb87382c48ebd6a57753aa64ec7909b62e7</hash>
        <hash alg="SHA3-384">3f31e8f92ee159321f49057e6a582b81d808bb7ee18fa804dc207921863862c22c2525b58935ac76b554d9a13b5067cd</hash>
        <hash alg="SHA3-256">fff7b0e1a8584e88d15efe264e1daadf5681deb85c5884d3cc9c028c03b8dcec</hash>
        <hash alg="SHA3-512">46f284f70c90e61934ec53a848a0c603a039026ec8ebcfc1ba1061f2842d980f3a6ade797a2d241826e837b66bf46a8c277941e76bde0272829e887a84e9b65c</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.scala-lang/scala-compiler@2.12.7?type=jar</purl>
      <externalReferences><reference type="website"><url>http://lamp.epfl.ch/</url></reference><reference type="issue-tracker"><url>https://github.com/scala/bug/issues</url></reference><reference type="vcs"><url>https://github.com/scala/scala.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.scala-lang.modules/scala-xml_2.12@1.0.6?type=jar">
      <publisher>org.scala-lang.modules</publisher>
      <group>org.scala-lang.modules</group>
      <name>scala-xml_2.12</name>
      <version>1.0.6</version>
      <description>scala-xml</description>
      <hashes>
        <hash alg="MD5">ac867dfb81feb7c874f2cbc953453700</hash>
        <hash alg="SHA-1">e22de3366a698a9f744106fb6dda4335838cf6a7</hash>
        <hash alg="SHA-256">7cc3b6ceb56e879cb977e8e043f4bfe2e062f78795efd7efa09f85003cb3230a</hash>
        <hash alg="SHA-512">9bbb05828f532ab17e7ad36021996e1eaedb2296298ded4f323d7f471dede76487a67f32eda57aeaa0cd3d4c4996c80453ca6b3d0b81cd6314df0416d59d2138</hash>
        <hash alg="SHA-384">4b6d6f4628c826e81b18710a50915819a2a332b9c61ba4624a965af0f7f42e144cfbefe4c93e247c29b464ad49b7b5c4</hash>
        <hash alg="SHA3-384">ea8ee87f74eaf2c1f7fc0df13b4def0b1fe5bddfe1c504fa635a68fdb3d45595033ca68bbe7beeb9f5ed82fd68c9bf87</hash>
        <hash alg="SHA3-256">6f4229ddd186d5d0022c4ed8f8ba97f02fbcb9efee8916f761677b13fef12518</hash>
        <hash alg="SHA3-512">77ac1a719bf84e0a40019233be18ba604ac70a5436221d695623507182a3f73672277590105b4c7c7035c5c969827fae5992127738b3eb7a0e10a742b15af772</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.scala-lang.modules/scala-xml_2.12@1.0.6?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.scala-lang.org/</url></reference><reference type="issue-tracker"><url>https://issues.scala-lang.org/</url></reference><reference type="vcs"><url>https://github.com/scala/scala-xml</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.twitter/chill_2.12@0.7.6?type=jar">
      <publisher>com.twitter</publisher>
      <group>com.twitter</group>
      <name>chill_2.12</name>
      <version>0.7.6</version>
      <description>chill</description>
      <hashes>
        <hash alg="MD5">b9daf74021387a3c60aac76da7d498d5</hash>
        <hash alg="SHA-1">37ab91c4029e8c34f39bfc6c2c7735ba69c6f53f</hash>
        <hash alg="SHA-256">bce92caa7e97ed70e5df8fb8aeac92c7c374109f7c681fde4ec19af63ee90a76</hash>
        <hash alg="SHA-512">0838b95f4202083e69764b581fcc006828b331cbf87853c95b02ff1dd8a7faf68a7cf1ff4bec350e6b211fa60a0dfcddc24ebc7b3a2df2813f2309f340614b14</hash>
        <hash alg="SHA-384">1750fce0456aba55446e02ef0cefabb84754bb0a32272910da724bcdbe5f790218f5b25a899ad1faa73123222250d0ac</hash>
        <hash alg="SHA3-384">fb77305f102422a736da20a04044bd445a8423e6e0de2c57402ccbae8075225b5814cd9659803833b4b93c57308baf87</hash>
        <hash alg="SHA3-256">ce59a98c30398b63f6a84e12207800ba4ce1f05b26e39dea6e5a819df162ad92</hash>
        <hash alg="SHA3-512">1910dacc2c3ee038baa4b0ff5236788e378a4080041a91733aae00828b440152c3f4a9de27b3aa1a64467000e4ab082f643650161127a8d6b49f6f2f2f3d5c64</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.twitter/chill_2.12@0.7.6?type=jar</purl>
    </component>
    <component type="library" bom-ref="pkg:maven/com.twitter/chill-java@0.7.6?type=jar">
      <publisher>com.twitter</publisher>
      <group>com.twitter</group>
      <name>chill-java</name>
      <version>0.7.6</version>
      <description>chill-java</description>
      <hashes>
        <hash alg="MD5">886eb8ef6db3880433f4a8e10ef37300</hash>
        <hash alg="SHA-1">a74b8d019d6941d82ff86d1612e382f4a0ae8259</hash>
        <hash alg="SHA-256">f7c41a2257be11e6c9bca97095c8f4b0299626941a3508469f90622eb8f8368e</hash>
        <hash alg="SHA-512">dc9973909b87cfb85ee45c90662612dd2bc137b7510172221eb47020f76b23eb3ea76c6b4fba4cee5d81e910f87aba71359136d33ae0f6424e3ce7123bf77dbf</hash>
        <hash alg="SHA-384">41e7faed7c2c22987868fba7cd6dac0d59d174d82d841ba4e5aa8675cc9265bf9d9df021553a781cfa24c4c9c7a35c5c</hash>
        <hash alg="SHA3-384">32751d6ecd77676ffa11a109dead8c8d19a6d1d78576b19ac5a8323d9446ba51fba87e0d60820dd2bac69fb705aa2061</hash>
        <hash alg="SHA3-256">6bdf2ed042c5b7f4f4d11bb52e448ce740e18563364f66730ca2b6b4eadf0401</hash>
        <hash alg="SHA3-512">0ab14bee65d85803d5080f3b0ad86183daafb61e3ca3a610e199bc04a11421b45436e405dc3c227b5d80a64178ca82739eccb5ad8ee157efa925d484d9daae28</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.twitter/chill-java@0.7.6?type=jar</purl>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-java@1.14.3?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-java</name>
      <version>1.14.3</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <hashes>
        <hash alg="MD5">86890fd051bbe77683d75abf1057287d</hash>
        <hash alg="SHA-1">46abe1d83daa523714483b48b9203ece74392ebd</hash>
        <hash alg="SHA-256">675154a0ceaf450359152b3c493cddd004c514e11a030e360c2a2e62e03c30ba</hash>
        <hash alg="SHA-512">f7fa6ed3e0154df61d257033aa6edd4b3d6e0d8ed74432ae991a70c3d2d385825cd7321ab90b458d4c4e62cc3121ec5f0d000dc80b65c45bd8586932fabd3861</hash>
        <hash alg="SHA-384">cdfef5ddbcc2fa2be28d708929fac2f4e1a3f6bcd58f8792f63170ec3a0751f9e85385d4dca3636269ee3b83d4105ebf</hash>
        <hash alg="SHA3-384">b5a497fcd89d187126842219535c9b5215a3bdd1b007863c0c0671874f972a914abc50dd9f4fcaf419ea3d7cc57a2c9e</hash>
        <hash alg="SHA3-256">6492b039d070fe78e3de42482b96ccd29ad04e390f32f010c6189d123229a130</hash>
        <hash alg="SHA3-512">81745698308271fe6d606446cec772be37ec797fe54043fc77c2bcda834f985379e2ee58cdc38cc50b75b076c15176772b6ca4acceaac9bf6ac4f480b3d3b568</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-java@1.14.3?type=jar</purl>
      <externalReferences><reference type="vcs"><url>https://github.com/apache/flink</url></reference><reference type="website"><url>https://www.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-shaded-guava@30.1.1-jre-14.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-shaded-guava</name>
      <version>30.1.1-jre-14.0</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <hashes>
        <hash alg="MD5">6b3d346db4f447bfad8a6adc812f8009</hash>
        <hash alg="SHA-1">78af6143a92912e0f084490fe5a8b175e541ce32</hash>
        <hash alg="SHA-256">6a38557d5609734448ef8d113040433451012e40cd0a1460b4d0f258ef2207f1</hash>
        <hash alg="SHA-512">9e1ae21362b62d2a3ca370cc4dffa02c80d82b6f963a145c1a2dacc10f472a16935fa7927e47d12c2b3955b1bc00f47d78123075a951fb6620fec10d9a09fb54</hash>
        <hash alg="SHA-384">1715fca47a995f6b63efab9bd20580da8a499d8df1e088403a48fd9eaab8b4e961433afcea99224398488191f03e7dae</hash>
        <hash alg="SHA3-384">9f4b746e101c0105b301b3f2eef3b1462ce43e601b8f40a76a8355d354efcd8084af372f00640d6939eaaae26517eda7</hash>
        <hash alg="SHA3-256">bda420718db7995103952fdbe6305ad6f7ba31c44d005f343cb260daa882fc29</hash>
        <hash alg="SHA3-512">981868f60b4178079c63dd495513c58aade3fbad4bc02806075a344c5c455f58022906acde92f34db70ac2074fc03693bdecd8a675be00b483812e4d40742a5d</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-shaded-guava@30.1.1-jre-14.0?type=jar</purl>
      <externalReferences><reference type="vcs"><url>https://github.com/apache/flink-shaded</url></reference><reference type="website"><url>https://www.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/statefun-flink-common@3.2.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>statefun-flink-common</name>
      <version>3.2.0</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <hashes>
        <hash alg="MD5">546b282076298b92fb8113fd04a80c0d</hash>
        <hash alg="SHA-1">cec6423ab076b5e1f5d1031d9fc7262162f5f833</hash>
        <hash alg="SHA-256">fc48d9d74e48fc3b73acfabf3c8df016de4f18ed94ea57aa330802c05c0330d9</hash>
        <hash alg="SHA-512">775c391afc1293eed94b120c1c42d19fad116b7b85ae02fa3d4aea579cecb688fc616d8a6a154586cf785712b14956632586689cde139f75c525aa3cf48b86fe</hash>
        <hash alg="SHA-384">a07bf43a0924c3bafc3b96991003397dd31881a78f5cf99cf5f63497c65d4c2d93ed2438ceccb973d525d05c10dbc20a</hash>
        <hash alg="SHA3-384">c8e23f23cabc15b3276cc24538da9780dc8901415621aea0b57635d113650394a0e757494d5737397ed9d74e91fd5bf9</hash>
        <hash alg="SHA3-256">7d2b47836baa175d66a2d0aec44fd4c4791b0aaae1a2d851a330677c5b698105</hash>
        <hash alg="SHA3-512">2eaee2633ebef171b9f35a3a04a0c0110ef52f9de63834939a0058b3b85867d90f5f7e14cbb4d9d37cc7abab206849101f5954624d2cb2484d534dc8862b7014</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/statefun-flink-common@3.2.0?type=jar</purl>
      <externalReferences><reference type="vcs"><url>https://github.com/apache/flink-statefun</url></reference><reference type="website"><url>https://www.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-core@1.14.3?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-core</name>
      <version>1.14.3</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <hashes>
        <hash alg="MD5">a4db783aebeb41eb9c2cde91e5b75871</hash>
        <hash alg="SHA-1">8a608d16c47ee4353d7c7d3f3fe1ce14a1489a96</hash>
        <hash alg="SHA-256">b812448cc4a5d7740a1491f8a620d82dc73a98f8eaa1812961a1e9c6e5e9c845</hash>
        <hash alg="SHA-512">eaee3bf66591f9badf7ae7bbc267eab82aee2785c571b47b76b245b12f1b8b4c012cf076a5c4ce90b1732955e040c2188d3aac41da6ddcfd9a14339c28ee6109</hash>
        <hash alg="SHA-384">7f361f777bebb405af0d62efcb1422b77a4c87d55ea02a80b5225fd1862386527c37a0dc6dcf13480ffe18685e6ee3db</hash>
        <hash alg="SHA3-384">eded065d36d85df0e1e43af3c2a606aa359eb77199afd2580a94d6f34a1063bd22f11d46b8ae6cf7d58c523a2b65e27b</hash>
        <hash alg="SHA3-256">814d612308e9174015f0b211a7e62de08bf8c7578ef431a08a3af006384cd748</hash>
        <hash alg="SHA3-512">4625598176511bb95c0dc5f2dd9182ea04bd4ac6aec36f2f0ef6beac5815e0d97bf708c9d8a65527a4506347a4e7edaaa1afd195229390c7fd34a4cb89fa8b40</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-core@1.14.3?type=jar</purl>
      <externalReferences><reference type="vcs"><url>https://github.com/apache/flink</url></reference><reference type="website"><url>https://www.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-metrics-core@1.14.3?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-metrics-core</name>
      <version>1.14.3</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <hashes>
        <hash alg="MD5">e0d83254a84cffcd7462382c0d8689ed</hash>
        <hash alg="SHA-1">0cb60da21a632823bb14a8864b4bd89c2b5c0721</hash>
        <hash alg="SHA-256">cb48adee4aef90e589b2b457a199f4cdbe2544e76c3b76d0f7f9c11c63b4391f</hash>
        <hash alg="SHA-512">4839b26374787ae15ec46f7362d81dcd9baba178888e706b83d1dbcc0e2eb5c2ab52d2e0750fd9520d88ca8b8d62e1019f701280740865aac62a4b61ae2ec96e</hash>
        <hash alg="SHA-384">a48ed136ba6562a6a1de4e00a8b94067d90560a33d854f4289c5ef24953679143b576a8d90913b48d0a533323675248e</hash>
        <hash alg="SHA3-384">4c0e831c595cd33023c509a72eaed9645f003ee3054b99a56f9c65e3aea2b5f463d82f2f56259401cbd63002abace09b</hash>
        <hash alg="SHA3-256">8146b8afa31759626c75f8872be16c67302f0dc785ba4cdb4ed0c42c1fb5d7de</hash>
        <hash alg="SHA3-512">80d1ce174c4c3a62e69070f8f094c2ffa52ad59e59a7048148b258aec39feaecabaefb979b7258ac290f28af7053ec5944476e80fa354bb16ce86999257941a1</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-metrics-core@1.14.3?type=jar</purl>
      <externalReferences><reference type="vcs"><url>https://github.com/apache/flink</url></reference><reference type="website"><url>https://www.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-shaded-asm-7@7.1-14.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-shaded-asm-7</name>
      <version>7.1-14.0</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <hashes>
        <hash alg="MD5">cc913f3bb7a3ca0ab33e9f2bf54f0bc4</hash>
        <hash alg="SHA-1">b1a61ed357e24720273432e3e4d883a67ed35a56</hash>
        <hash alg="SHA-256">017007ca78c30db017b066dccd94824943ca0b5b278774e20412633bdd513e63</hash>
        <hash alg="SHA-512">5b6486ff88f49f4eae3381303119f4e285352a5d2a13d5016cdc2ce506d46d73adba0df5380ecad16f78b0c03e99a6b0330ea8a7577beb217a8e86ff7e65b210</hash>
        <hash alg="SHA-384">7ef8906166b7fc19078df7e4517aed21f372c7e53cc6083f4776e935de72c358b4633fb37fde0f709a876af9c2377e2a</hash>
        <hash alg="SHA3-384">b8e89f294726c63c81c19754019886ba147a1f3c972b933367c664154d00d2ae907d246cf69a96c6fd1bfeb25bb3e25a</hash>
        <hash alg="SHA3-256">68f9d6654cb11ab1b7f67105ee6d7df555f9f377474e7e52d62ca3f58256fb23</hash>
        <hash alg="SHA3-512">fe185288b4834fa0da3a2314e7f301de14fc23e762197236ee1ee824c81d3691fe1b32ef8805eab642c5e5e05a050ff77643ae3bec53ba4697074c7a973c0de1</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-shaded-asm-7@7.1-14.0?type=jar</purl>
      <externalReferences><reference type="vcs"><url>https://github.com/apache/flink-shaded</url></reference><reference type="website"><url>https://www.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.esotericsoftware.kryo/kryo@2.24.0?type=jar">
      <group>com.esotericsoftware.kryo</group>
      <name>kryo</name>
      <version>2.24.0</version>
      <description>Fast, efficient Java serialization</description>
      <hashes>
        <hash alg="MD5">6cf0fa5b5d4f6b8226fd4a4bfb7532b8</hash>
        <hash alg="SHA-1">0c6b206e80cfd97e66a1364003724491c757b92f</hash>
        <hash alg="SHA-256">7e56b32c635058f9aa2820f88919ab702d029cbcd15285da9992e36cc0ae52f2</hash>
        <hash alg="SHA-512">a4c6ce768528a03c219cc6a41b22293f78e433c849c90391b64dda3f2376fd79951a89c5f4e6701bcbcb6eee9abffe2390cfb12dba3b885e4a3d411a26b78f40</hash>
        <hash alg="SHA-384">678ad1b7f4d99910b8ff44a6c8f78ccae91f823161ce23de39077397352919b7257e1e6e0dea90900be973291ea19282</hash>
        <hash alg="SHA3-384">671fc6aa9905f8131482e1d0f3fe26126562b13777893d51a66d0f84fc6f2aa3f13947e488ffba8f09c31a2cc0e9758a</hash>
        <hash alg="SHA3-256">46e89d8f12cbead0fe29ad707d5dba96e880dacce2a6b374ac4bf1ced9f36a79</hash>
        <hash alg="SHA3-512">c7cde437eef8343eccd4c5ecb8de5683529e3d4d8262e8cd1f7b7d0df9c632253b979737fd1b486314ec2728aee3a3782dee5d2032621485db4aa3b2a8262741</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.esotericsoftware.kryo/kryo@2.24.0?type=jar</purl>
      <externalReferences><reference type="vcs"><url>https://github.com/EsotericSoftware/kryo</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.esotericsoftware.minlog/minlog@1.2?type=jar">
      <group>com.esotericsoftware.minlog</group>
      <name>minlog</name>
      <version>1.2</version>
      <description>Minimal overhead Java logging</description>
      <hashes>
        <hash alg="MD5">f7cfbdf63b67df0bbfa4c7cb260885bc</hash>
        <hash alg="SHA-1">59bfcd171d82f9981a5e242b9e840191f650e209</hash>
        <hash alg="SHA-256">a678cb1aa8f5d03d901c992c75741841d98a9bc3d55dad02e84d65315c4e60f2</hash>
        <hash alg="SHA-512">7b4082766ad740d86708783f3b08780ed72dd18062aa9ba422c4b9016b332d2334ae511f50ef7d89e4eedbdac5cebc51ab6ddaf4d1eea857a3250eb5962f0d08</hash>
        <hash alg="SHA-384">932a282a9c06864001f8212199e4be05543609adbd985c5f4517ee6eba734acd3fd8812213bc0c98af264637cbf9c78d</hash>
        <hash alg="SHA3-384">f36e9f494611c85f59febfef9ce93fc68f1f17db881400456204c1f099e623e334d2f10b41018392877c8af13de7f59a</hash>
        <hash alg="SHA3-256">37422ef85dce86abd8b14b4c9f7ad77261d728a472126c8eca38f356c98da395</hash>
        <hash alg="SHA3-512">74ba47271899706a284e942482ff41649ffd93e57a29320732e57864c47f3f0431377130ca7afb5e64cc6b68d4e5a5cdfc38027966cda4b5e512e3ce02bd8a99</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.esotericsoftware.minlog/minlog@1.2?type=jar</purl>
      <externalReferences><reference type="vcs"><url>http://minlog.googlecode.com/svn/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.objenesis/objenesis@2.1?type=jar">
      <publisher>Joe Walnes, Henri Tremblay, Leonardo Mesquita</publisher>
      <group>org.objenesis</group>
      <name>objenesis</name>
      <version>2.1</version>
      <description>A library for instantiating Java objects</description>
      <hashes>
        <hash alg="MD5">32ccb1d20a42b5aaaceb90c9082a2efa</hash>
        <hash alg="SHA-1">87c0ea803b69252868d09308b4618f766f135a96</hash>
        <hash alg="SHA-256">c74330cc6b806c804fd37e74487b4fe5d7c2750c5e15fbc6efa13bdee1bdef80</hash>
        <hash alg="SHA-512">1dec9ee30812b8006e536a2749c5781ccdc4b446539efb6fa534f22e70562033876bf2eb22c6946d617695729bd65f0f65b984f15f05ac63db5bed215e74427c</hash>
        <hash alg="SHA-384">657b8a3b80a5475f198425396f7264301f9e0f3ad5dc336ef0c7b46874f5544861a8a2fd48cdb5f672e199a6935c19d1</hash>
        <hash alg="SHA3-384">e526937d722aad1857869b2d2a0ba5c88815609308c00b776b51614e501de5d93d54978f5bb9cf496bdcc28b1dbd5775</hash>
        <hash alg="SHA3-256">436cfbb9c208dd03c951708fa4ba6525e2a0b26a873d594a6fbe93ab49082c97</hash>
        <hash alg="SHA3-512">1e7ee9411df7cfbf0669c38e4ef029155dd718b91db1d182841c740caf8c1057ed273a77f8e32d724c48aaf96815a26ab099c776511ffc5ef351d70ebfa70344</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.objenesis/objenesis@2.1?type=jar</purl>
      <externalReferences><reference type="distribution"><url>http://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/easymock/easymock</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-collections/commons-collections@3.2.2?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>commons-collections</group>
      <name>commons-collections</name>
      <version>3.2.2</version>
      <description>Types that extend and augment the Java Collections Framework.</description>
      <hashes>
        <hash alg="MD5">f54a8510f834a1a57166970bfc982e94</hash>
        <hash alg="SHA-1">8ad72fe39fa8c91eaaf12aadb21e0c3661fe26d5</hash>
        <hash alg="SHA-256">eeeae917917144a68a741d4c0dff66aa5c5c5fd85593ff217bced3fc8ca783b8</hash>
        <hash alg="SHA-512">51c72f9aca7726f3c387095e66be85a6df97c74b00a25434b89188c1b8eab6e2b55accf7b9bd412430d22bd09324dec076e300b3d1fa39fccad471f0f2a3da16</hash>
        <hash alg="SHA-384">dd4e99b3314bd3c1a1ee26296615d9e44dadf7a1f8a7bbba44fb95121803d331e36d4cca4260e7609af78a47ba3e4073</hash>
        <hash alg="SHA3-384">8ce03528e4a6e95c44283b56eca87e6a6d3bf1363411a55b538f4f9110cf7470581ea5c73925e877ddab08dba0603f40</hash>
        <hash alg="SHA3-256">fd3d6134b5f07077b82ccf93d148dacf7c4ce5c971209510edd0e77e3e38c19e</hash>
        <hash alg="SHA3-512">c2a523916fb7c7d55a05d5e3d9e9b33000733f4b20a71be174e4e093e3f06ea78ad831edd1505527da7388105f8647efb7d5666ba852c90b4e2d5bb74256efbc</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/commons-collections/commons-collections@3.2.2?type=jar</purl>
      <externalReferences><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/COLLECTIONS</url></reference><reference type="vcs"><url>http://svn.apache.org/viewvc/commons/proper/collections/trunk</url></reference><reference type="build-system"><url>https://continuum-ci.apache.org/</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="website"><url>http://www.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-compress@1.21?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.commons</group>
      <name>commons-compress</name>
      <version>1.21</version>
      <description>Apache Commons Compress software defines an API for working with
compression and archive formats.  These include: bzip2, gzip, pack200,
lzma, xz, Snappy, traditional Unix Compress, DEFLATE, DEFLATE64, LZ4,
Brotli, Zstandard and ar, cpio, jar, tar, zip, dump, 7z, arj.</description>
      <hashes>
        <hash alg="MD5">2a713d10331bc4e13459a3dc0463f16f</hash>
        <hash alg="SHA-1">4ec95b60d4e86b5c95a0e919cb172a0af98011ef</hash>
        <hash alg="SHA-256">6aecfd5459728a595601cfa07258d131972ffc39b492eb48bdd596577a2f244a</hash>
        <hash alg="SHA-512">c92d9a12547aab475e057955ad815fdfe92ff44c78383fa5af54b089f1bff5525126ef6aef93334f3bfc22e2fef4ad0d969f69384e978a83a55f011a53e7e471</hash>
        <hash alg="SHA-384">da56f95d420cd7278cee646f4cd0e7a5ee12b6a2894efaec12f0ff7b56c3d43e5db736fe1ed66ff91118b16f2d64ebef</hash>
        <hash alg="SHA3-384">6d3dc0198dd523a49fa94e054841aece853577b5c3ea1029fc288ad9ff580ab1b65ea99ddbe58c42125054e8c43be461</hash>
        <hash alg="SHA3-256">37d4a014b50393793d35c70431bd8a1842c197d854c6f174dfa946b9edc2b841</hash>
        <hash alg="SHA3-512">61609f60746406a7cb1ef3f979488beca6674fde208c9025d3fdee115de4767e8a4a1ee38f5bf79ac0104505ddb3558f1feeba5e318d6545647120ac60db6b89</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.commons/commons-compress@1.21?type=jar</purl>
      <externalReferences><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/COMPRESS</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=commons-compress.git</url></reference><reference type="build-system"><url>https://builds.apache.org/</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="website"><url>https://www.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-shaded-jackson@2.13.4-16.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-shaded-jackson</name>
      <version>2.13.4-16.1</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <hashes>
        <hash alg="MD5">c26b24a1094f56a837610d5ea08ae0f6</hash>
        <hash alg="SHA-1">004e5fb57e10af9cd814258221c9f50c920e6c09</hash>
        <hash alg="SHA-256">601da81a8920228bfefc0a38229304340a6296a1f431522973bd2d7007f09d4e</hash>
        <hash alg="SHA-512">b2a66341cceb0dc75d1d1ccf4dcab69bef6289060b1688556443327b508b039d510298aea67dd1540122312db40d91dd86ad852f2afd0b087a479da340b580c2</hash>
        <hash alg="SHA-384">f9c750a59372ecbfd951b8ae5efef49110c060d43bde418bc723c5156bcf81b44f5a4c65fccbffa9642c978628dc9b00</hash>
        <hash alg="SHA3-384">47b7b04c995c96ca7bea2652c49001067c7350775557b73c1fd3d27214931f11ec0860580d8afdecdcb0944463ec790d</hash>
        <hash alg="SHA3-256">898aa072867959648b4fb6991967dacd1fbdccbc14c6f96548b138476203056c</hash>
        <hash alg="SHA3-512">e33b87d36aee6333bfe16771a06bbfbe8633d5d772f3ba4b036fd9130f6ad4a18d15b74be7a84f6d4c6eedb404b2b2f985912dce147744338b525d9594964bc2</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-shaded-jackson@2.13.4-16.1?type=jar</purl>
      <externalReferences><reference type="vcs"><url>https://github.com/apache/flink-shaded</url></reference><reference type="website"><url>https://www.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/statefun-flink-extensions@3.2.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>statefun-flink-extensions</name>
      <version>3.2.0</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <hashes>
        <hash alg="MD5">b4a40f3466a242c291b04ed67be5a727</hash>
        <hash alg="SHA-1">bece19935eae82febc24d5e260e4d75ca14a6665</hash>
        <hash alg="SHA-256">18a4a6da320fbdbb52e343ad4b396353ef978befb37b035734c3caeb3ccd1536</hash>
        <hash alg="SHA-512">abf481001e06b8794220b4380b6341878e943d34316754dad6275150f03277a496ef26d92e2bbda23c47140cd999244bf31fb8d258cb129e39f6f12dad5847d8</hash>
        <hash alg="SHA-384">466a1112f0407a753891d7b37b85e318d98bd45029a7494b9cd6854466fe69d63a2b22e9aeba37a2084ae9796a0f5d9e</hash>
        <hash alg="SHA3-384">3ae2f4f6b7968f74e276fa266e8dbd599c1c53ec69e6a217637966c3a8cbb715d0e4341dbc9c48f4fc9f359c4988323a</hash>
        <hash alg="SHA3-256">a4e1c6a10a80cc2bcd42e3b3eaeaa66fccae4c2198e1f6fa3841f6adc1cf29be</hash>
        <hash alg="SHA3-512">40dc9aad0b12dc3a7b4d31ef5855f64070c74fef8c45a6da1c9efd0bd29e2bbc0082df9fa2b3be81c9419d5cbc18f303ec8a66e07899b442da076b1049c833da</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/statefun-flink-extensions@3.2.0?type=jar</purl>
      <externalReferences><reference type="vcs"><url>https://github.com/apache/flink-statefun</url></reference><reference type="website"><url>https://www.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-annotations@1.14.3?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-annotations</name>
      <version>1.14.3</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <hashes>
        <hash alg="MD5">f0292ee044fc2e5abd223e223ae0a97e</hash>
        <hash alg="SHA-1">0004523d39999e2596fbe67fd9f799bf6a7b8646</hash>
        <hash alg="SHA-256">b02195607d74b83a758474346230757d434c1ad1f00337e9faba98c24e597373</hash>
        <hash alg="SHA-512">ee5f4ba8a77f992ec5c2b3d53b8a111a9b7c74e122600543270ca1b3a1333f3aed730ea5c2efe364ee9ec021e32a21bcbaa668ac3ecbd6e2445682cc05668fb5</hash>
        <hash alg="SHA-384">96fc482c119862690d369cddfd8406760c782c8ae7a7448d44cd6f5fc6e9a0e1aed9ed2d7d92fd540fe01b6b0d61ab5e</hash>
        <hash alg="SHA3-384">002e1ec81b01258dfd16aa49ac43cb409c1c32c86b5f8def07ae87d49167332fbb01f90714ea392eb0a2e955c5d5483b</hash>
        <hash alg="SHA3-256">5f36e106aa0ae10cf40a615355766c24a83564996a205cc7bd93b82b97aa2aaa</hash>
        <hash alg="SHA3-512">aa8fa0f26a2a60654dc84780ff4540d5643424d70353ceb9611e8011edcd86af215807fb1b5b67fb6e24eaeda5b09aa845de4403fa9d8902ea11fcfb8eb157f3</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-annotations@1.14.3?type=jar</purl>
      <externalReferences><reference type="vcs"><url>https://github.com/apache/flink</url></reference><reference type="website"><url>https://www.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-metrics-dropwizard@1.14.3?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-metrics-dropwizard</name>
      <version>1.14.3</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <hashes>
        <hash alg="MD5">1caab5d14e020a61c486a0957874fe3d</hash>
        <hash alg="SHA-1">965822115867fdc9e49f59c326e5e93de543e176</hash>
        <hash alg="SHA-256">4ebb8d1c334d84322b6988b9de3f70a077b9bfcfba813881c4d22841f28f9b4a</hash>
        <hash alg="SHA-512">d827fb97d23c0257aabc962af1cd36f9ac06b9d5a05bf2e9fca33ee1d23163bc7a817b3e86b6817cc279b20ec49a48bae490fd494c1c40c053d5ea53f41630c7</hash>
        <hash alg="SHA-384">510f9393c7808497d7f97d6f8c901783eee0e569e8eabae451c5b7f5c4c7731dc017ac779db58a1b7c7205b5e8185752</hash>
        <hash alg="SHA3-384">0371a640bb78abe07ab8a8d786fca84386ced1d0ae9505e70eeb894f298f219a16d922d06eeb0d9860c459a083373091</hash>
        <hash alg="SHA3-256">39fcffac13a7980b5790ce175849fd7770dcb2b21f8cc1d2c089824c35842ecb</hash>
        <hash alg="SHA3-512">794df4ef36b2fcd4242fa6df08d1a0512235f62a06dec100355f7906b2f5fad56a15780174f6e07ccfa4725743a0e2d9954791931eca0feda83a9e5b2ceddf8d</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-metrics-dropwizard@1.14.3?type=jar</purl>
      <externalReferences><reference type="vcs"><url>https://github.com/apache/flink</url></reference><reference type="website"><url>https://www.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.dropwizard.metrics/metrics-core@3.2.6?type=jar">
      <group>io.dropwizard.metrics</group>
      <name>metrics-core</name>
      <version>3.2.6</version>
      <description>Metrics is a Java library which gives you unparalleled insight into what your code does in
        production. Metrics provides a powerful toolkit of ways to measure the behavior of critical
        components in your production environment.</description>
      <hashes>
        <hash alg="MD5">641716ee081aeaa016415019c74fb447</hash>
        <hash alg="SHA-1">62fe170cffeded1cef60e9e3402a93b45ce14327</hash>
        <hash alg="SHA-256">891174c5230476e1950a286169672002978562ebdf5c85f0199ecae1bd030f9f</hash>
        <hash alg="SHA-512">91b170d541e2da3cf2482e795422b8c0c2890e87823feed2d9e16ea22ccf61ec1cc759d974f66e987f884f699551997574fb6c26f377c1136d930bc10778e74c</hash>
        <hash alg="SHA-384">47d7ba837dccb5596cbbce45c4514dc53c74ee9e0751954524bd437350574d375cb96a66a1175aae52296f58c401b142</hash>
        <hash alg="SHA3-384">edc589029f0f01e5a7f47395b338c5e594e2564050874fbe94bd032dc0fc7a0053972c4eb4a61324a1ba6a8eb71ee93e</hash>
        <hash alg="SHA3-256">0b8c9c0f8d1d5dac61aa1e8316acaafafb2406528fa836680262d0c3f48ccf8e</hash>
        <hash alg="SHA3-512">c1da107b3cafb74efb522ab0ea6b8a931f094719340cfd33e7bfffe5809b89cf635e964d05a4081508dc40324836d29155307772464151c60498da33dd739fac</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/io.dropwizard.metrics/metrics-core@3.2.6?type=jar</purl>
      <externalReferences><reference type="distribution"><url>http://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>http://github.com/dropwizard/metrics/issues#issue/</url></reference><reference type="vcs"><url>http://github.com/dropwizard/metrics/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-shaded-force-shading@14.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-shaded-force-shading</name>
      <version>14.0</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <hashes>
        <hash alg="MD5">199d5a2e6f516730bed0c1846f24603c</hash>
        <hash alg="SHA-1">fbb920848d55aa214ec4501af955acfd3118441f</hash>
        <hash alg="SHA-256">8986b27266466087f59d655864f4e78bff20f7aa61b1809ad3c134a504b32d1e</hash>
        <hash alg="SHA-512">471a270da4a2ed1bc08e14e245f2d2a5fc7b6f8df91036bd088ad74ad58a2914027d1a131157a923942da1e029ba493ce87e5591d00224ce5994a384d04ea0eb</hash>
        <hash alg="SHA-384">9742fdaf2c48622373d8d034f81b273d3aada02947049dd08f93f245eed5c917ca342664a68f4acf92c8eb1839de0cd9</hash>
        <hash alg="SHA3-384">38946d99292afc4778db7c2f7c825e19ea15c4c64a0d834a68706633580af02e0a0fb5df22cabba8972c70a1553195de</hash>
        <hash alg="SHA3-256">ba617a50fcf2b3cc8923c9c0ad730762741183930d9350b5ad30fb17b4265356</hash>
        <hash alg="SHA3-512">e6662edd7efc34d4ace64e4b23c9ce9eafb21b6d3babbc27e4ea3d826f0b42c8982599ff36fe02df4102bae80e17d8349fc8c89fcbf4b2fe80fc74b1bf1ab0c7</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-shaded-force-shading@14.0?type=jar</purl>
      <externalReferences><reference type="vcs"><url>https://github.com/apache/flink-shaded</url></reference><reference type="website"><url>https://www.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.protobuf/protobuf-java@3.7.1?type=jar">
      <group>com.google.protobuf</group>
      <name>protobuf-java</name>
      <version>3.7.1</version>
      <description>Core Protocol Buffers library. Protocol Buffers are a way of encoding structured data in an
    efficient yet extensible format.</description>
      <hashes>
        <hash alg="MD5">c8f2dd7f0854bbe04c9acc61a929dbd0</hash>
        <hash alg="SHA-1">0bce1b6dc9e4531169542ab37a1c8641bcaa8afb</hash>
        <hash alg="SHA-256">22779eacfe0f33b9e8ceffa3cdef5935cae4e53f736e027d912b707522fea645</hash>
        <hash alg="SHA-512">b7d24e9bb5c9dc1b2d60393008e5cc20f5e4e2769e3fde542130b61d63b1ec1b8d76afdd8b3a5e0692cb8e4dd104ef7312de3423dc51a7979f6dbdd770e9bed2</hash>
        <hash alg="SHA-384">e8db149046c4fdf5c50f5ad504f694b432a2399a8e8062c5ab5103f3ef8cbc77dd49f1d8e5691adb8c673384325bb140</hash>
        <hash alg="SHA3-384">909b44dfb30b4cba102c91d5548278dbe19a903838bf954530e0bb99a625e0ac79599c030b5c006b6afdb789ab75a5e3</hash>
        <hash alg="SHA3-256">feb836fc25b2026b09ebe6bc17ab98fd4856bcbeaae028a9718cd3ab545eb0a6</hash>
        <hash alg="SHA3-512">e6ef9e8f0d873dd729e6868e083b35edd365557a16d6679be0f7b77a9ad0e095c932f96b42e2518220ec68feb79cc7a5ec6e5b2de74ff302b999ba3669b4efce</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.protobuf/protobuf-java@3.7.1?type=jar</purl>
      <externalReferences><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/protocolbuffers/protobuf</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.squareup.okhttp3/okhttp@3.14.6?type=jar">
      <group>com.squareup.okhttp3</group>
      <name>okhttp</name>
      <version>3.14.6</version>
      <description>An HTTP+HTTP/2 client for Android and Java applications</description>
      <hashes>
        <hash alg="MD5">b7edf93ad1b7c12e6957815add15d39f</hash>
        <hash alg="SHA-1">3922cd2edd3df7616aa85a170398e5010989f212</hash>
        <hash alg="SHA-256">0af938f02fed609776cdbcea3c118aee5f368fb483fa0b91aab23a94fdc7c9de</hash>
        <hash alg="SHA-512">aa97e3a9e8c55a754e822e0cbaaa1324d39b150bc36207bb31f77b34917e537c337eae4dcb85d215c73ee8890afb986932095d356e13994ad886d979c2fd8e0d</hash>
        <hash alg="SHA-384">783f88a27ae5f1b5d6d24f4fb2f9bc5ef0be0d8a1030916fc59cbc975417bbd8e773960e4e66db2ecd444f5b3eb3dda5</hash>
        <hash alg="SHA3-384">aa663a10e7e2c025e8b4dd5c9780dff60257f31265f292c1de770e5bcbc239548f297c586431d62d37c2d9834f35a53b</hash>
        <hash alg="SHA3-256">a35a95ab88a4698f08d44e9605f96c9e62323b933adb7f704a24add387223354</hash>
        <hash alg="SHA3-512">5254d3d721882b2f702368bdb5878ac5b0bc5d2ef09a9e1671c82fb8e929cda0d4b6f6579a82de4fb71a1daf8ad1f2963292f0080d5135215b219aa20274decb</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.squareup.okhttp3/okhttp@3.14.6?type=jar</purl>
      <externalReferences><reference type="issue-tracker"><url>https://github.com/square/okhttp/issues</url></reference><reference type="vcs"><url>https://github.com/square/okhttp/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.squareup.okio/okio@1.17.2?type=jar">
      <group>com.squareup.okio</group>
      <name>okio</name>
      <version>1.17.2</version>
      <description>A modern I/O API for Java</description>
      <hashes>
        <hash alg="MD5">54a6a8979bd8e64e1fbf21d511654737</hash>
        <hash alg="SHA-1">78c7820b205002da4d2d137f6f312bd64b3d6049</hash>
        <hash alg="SHA-256">f80ce42d2ffac47ad4c47e1d6f980d604d247ceb1a886705cf4581ab0c9fe2b8</hash>
        <hash alg="SHA-512">3ad9127705ad00962b96a10d134a06378a3ef5558b0c5955ace54e15a771027a11503981a8dcf0959fb806d35ba8da9b12282a5a2f3d6dd7c71266120a4e0b4d</hash>
        <hash alg="SHA-384">98a16e221860faf4ae809743fbc956614aa32b0d78b35703d8ceb78c42a42e9afe7f1b3c8c9df5c63b9ee6e0fcfcd98c</hash>
        <hash alg="SHA3-384">1118bb002f8389c4fb0829b8a7151aab2b2f99197f5987cb6b760afc7503be39e544e92e272fddbbaf6dd292fe2cb54d</hash>
        <hash alg="SHA3-256">6fb3af2f7a46a6897f4ebe343cc6aa5ad97a3c74d943129c393671ffb686f7ed</hash>
        <hash alg="SHA3-512">121da9911e31293293aac0012fe2fcd665971a62f633df4dbb0ac5e5e87ee384827e5d440cb7e6d9817ad0a0730d25934ab00dd7b97a04ea013f68565797fc60</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.squareup.okio/okio@1.17.2?type=jar</purl>
      <externalReferences><reference type="issue-tracker"><url>https://github.com/square/okio/issues</url></reference><reference type="vcs"><url>https://github.com/square/okio/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.kohlschutter.junixsocket/junixsocket-core@2.3.2?type=jar">
      <publisher>Kohlschütter Search Intelligence</publisher>
      <group>com.kohlschutter.junixsocket</group>
      <name>junixsocket-core</name>
      <version>2.3.2</version>
      <description>The core system dependency; the one you want to add to your project</description>
      <hashes>
        <hash alg="MD5">cd1f3ae9506801f2ef452f4018d063b5</hash>
        <hash alg="SHA-1">72fd4f265f1b697328fb31141c91154febd1a775</hash>
        <hash alg="SHA-256">535e729eb03a438ebf3f9cd17bf56286173bf768cb4beab9beba1fce9fea9f58</hash>
        <hash alg="SHA-512">15a31c3935da201c98890a0afc02ab45fc9eaa3b1ae4f11f933f91613380cbbd354bee931148b386882e60a9c627d22de57236bfe6d31b374e642f4e11282c8c</hash>
        <hash alg="SHA-384">8ff4fe8a84936d310a0e93cabcf0a5a20d1fca937ce843cbeb82716854a4abd289f71d25e0eccef3d3850657af7de793</hash>
        <hash alg="SHA3-384">5769a4dbd431663c5c9c2ede19daac89fff7c0fd1796b031338a0efaf54aab62971abfbab906ea5464845555dc8de0fe</hash>
        <hash alg="SHA3-256">83f0c900f85bef1f3fef42db624f167bc730fa39b026a34e20999134c099f7a0</hash>
        <hash alg="SHA3-512">00680b4fe13b7dc461e09db06b6d421deefeee88c640d6d9054c50416a5d49eb19d9ca85f5635814ddb4804dbba92842361a126aefa014b3e3a9a682451a3795</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.kohlschutter.junixsocket/junixsocket-core@2.3.2?type=jar</purl>
      <externalReferences><reference type="website"><url>https://www.kohlschutter.com/</url></reference><reference type="issue-tracker"><url>https://github.com/kohlschutter/junixsocket/issues</url></reference><reference type="vcs"><url>https://github.com/kohlschutter/junixsocket</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.kohlschutter.junixsocket/junixsocket-native-common@2.3.2?type=jar">
      <publisher>Kohlschütter Search Intelligence</publisher>
      <group>com.kohlschutter.junixsocket</group>
      <name>junixsocket-native-common</name>
      <version>2.3.2</version>
      <description>Binaries of the native JNI library for common platforms</description>
      <hashes>
        <hash alg="MD5">adabc36ff3ec95a0be424c46d80e6427</hash>
        <hash alg="SHA-1">e5f7711c06fb5bc83a8931c1b72dc5fd645aafce</hash>
        <hash alg="SHA-256">6a090697071ae30a29c263ffd5999778dd560779974ee15b9586a0aa3dc3e0d2</hash>
        <hash alg="SHA-512">52fd20e59d35b8eac2207f6c8a107074d46fa9ec56a6b2bd09db94f6f26a33bc98695f0ac9e648651e496a47a747e576e8f7ce896cfea8da9cd365be694824c4</hash>
        <hash alg="SHA-384">27e3251386edaf6e5ab22853b62868793e31310c12a3f28deeb394b358af61a2a1c05d2384978f454699f74915fcda98</hash>
        <hash alg="SHA3-384">e90b3d5e3b26937578db769f97ec1c4568551d43fc2f7f73ce66eb2816105197aee9d8c37ed56c7ecd51e83377200ae1</hash>
        <hash alg="SHA3-256">4f0c88946f5d1c9b05d2e6f15dc3a854a72ca4737d1f77457c87b4ae07a1c8fd</hash>
        <hash alg="SHA3-512">fe36d00c488548b73bb02f2f7f0eae71f566597b8fb040b243a3f9697bb68b0074b5cdbadae62daf33bddc09c9232515cb100eeb6ca9addabe0223820965015c</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.kohlschutter.junixsocket/junixsocket-native-common@2.3.2?type=jar</purl>
      <externalReferences><reference type="website"><url>https://www.kohlschutter.com/</url></reference><reference type="issue-tracker"><url>https://github.com/kohlschutter/junixsocket/issues</url></reference><reference type="vcs"><url>https://github.com/kohlschutter/junixsocket</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.kohlschutter.junixsocket/junixsocket-common@2.3.2?type=jar">
      <publisher>Kohlschütter Search Intelligence</publisher>
      <group>com.kohlschutter.junixsocket</group>
      <name>junixsocket-common</name>
      <version>2.3.2</version>
      <description>The public, core API</description>
      <hashes>
        <hash alg="MD5">4e6e9996f86ff408e43e60e22bd95a5e</hash>
        <hash alg="SHA-1">17b89da8995a595eb017a55d0262fed62e113e46</hash>
        <hash alg="SHA-256">2b501ae7e230b8dbcae0991a10b99bb22b752c583919d6db8e017de53415db0e</hash>
        <hash alg="SHA-512">a935a1bc84c08cd20fc64be6212ab7634f921a991e261e8a143e46915723337a4ef0d607e77edc201650948766182e25828cecf070ac00681d1c9afa369efa1e</hash>
        <hash alg="SHA-384">e7076b60e6eb96f43863fbf978f64f329a67a5f4213ef68ac3ce1b6d9f3b097db845c5f0bf790764749491eb86dcb06d</hash>
        <hash alg="SHA3-384">6ba4a26d77601044549b79802c13d47dbd5b73e887c0c69ee34e66378ed0ebc1aed24ead9e63c4a7ae8c98bec8cdb608</hash>
        <hash alg="SHA3-256">2f3007e7b187ce41a6f8a60c7219e7fc4a74f85c566a6bb3a24a0b4f3cc1659b</hash>
        <hash alg="SHA3-512">3da5067909de8b314363a422f6092c3ee218d16292262d4ae40d7a5ba1b43ab69bab67e0f94381dd2dcc29f8dc280ca95f18dff89c8ddd186314de8e65a4e24e</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.kohlschutter.junixsocket/junixsocket-common@2.3.2?type=jar</purl>
      <externalReferences><reference type="website"><url>https://www.kohlschutter.com/</url></reference><reference type="issue-tracker"><url>https://github.com/kohlschutter/junixsocket/issues</url></reference><reference type="vcs"><url>https://github.com/kohlschutter/junixsocket</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-shaded-netty@4.1.65.Final-14.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-shaded-netty</name>
      <version>4.1.65.Final-14.0</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <hashes>
        <hash alg="MD5">372faa03c506b7e5dc4acac933a77f83</hash>
        <hash alg="SHA-1">e1b2434e2aef7d00918bf0f9bdc8ef395b2136dd</hash>
        <hash alg="SHA-256">c821d36d0663f75dc0f3e1de2e4b88584f79900473f209a9eddf5f87d8fdf9eb</hash>
        <hash alg="SHA-512">8293ffb6f519f1b0287aed9d4c07300686410127362ce35439d362630c9ce033c5309c0b90e8c7c667aa70bb1da1357aab640353674c398e99f81c25317d2cf9</hash>
        <hash alg="SHA-384">9f4d35fdead79cb334a0f14b2dc049f9c4e8831889a1d2bdc45d97c432a41a60fd2d364fec627acfebeee2ee8b9b59ca</hash>
        <hash alg="SHA3-384">eb3d7e78f47e35a46960a94cbd5c3df78a0cad218af8d0353a0c8530fbe241e2ab6ee3b727b33289b28f6ca4a6a87f6c</hash>
        <hash alg="SHA3-256">77295bacdcaaceefe9c168f900aa75c671c76f119e81c9138b91e7d6ef36c99b</hash>
        <hash alg="SHA3-512">9710a3127be1ffbe304c2370a3b44082e5153d6aa933de60fcc265d5e3b776fdd79e1a234372ca577374aa88a7a2d123a4ed12b8bc68c375f2a447b259827e65</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-shaded-netty@4.1.65.Final-14.0?type=jar</purl>
      <externalReferences><reference type="vcs"><url>https://github.com/apache/flink-shaded</url></reference><reference type="website"><url>https://www.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.auto.service/auto-service-annotations@1.0-rc6?type=jar">
      <publisher>Google LLC</publisher>
      <group>com.google.auto.service</group>
      <name>auto-service-annotations</name>
      <version>1.0-rc6</version>
      <description>Provider-configuration files for ServiceLoader.</description>
      <hashes>
        <hash alg="MD5">09521774af3bde8e3f39cc6bd8dec2dd</hash>
        <hash alg="SHA-1">32c6a6313217c949396376d9caddb6b8c8f4e7c3</hash>
        <hash alg="SHA-256">f55aee753b45bb49464d3aaa998ff0c48e4bf99240ab381842fa490d1d644e48</hash>
        <hash alg="SHA-512">363db1aac4d18a51cebebbeb79c4031ff659564480dd740a4a69ef6185ba2e39b4dd736b0685221aa206e0eb8fd193d8419486ca27ba23ecd6ba8ade64be480e</hash>
        <hash alg="SHA-384">063ea90cef58b4c9f5d9914c03d4a7d4772a69630dcc245c1d981b695d0210c61f0a04c53f5b6022b6468f8fb9d9d834</hash>
        <hash alg="SHA3-384">cd3cdf15bd863163c716b2e5822e1dd774a62b55517aa48408a9d2474faa7287fc91a629f6244096fbb39fb73f142ee3</hash>
        <hash alg="SHA3-256">a056e942cd75ca4288d903c80376e7baf78ca907d7d2c3e8f8573fd65543ce89</hash>
        <hash alg="SHA3-512">fed05b6b7b8e8ca423145cc0e9365dc4c039b419ba6314c47322654b0803db50ea1be27cb96d16c47ea01e701df279eea72e92ab2dcefe1ce961230a3643ef3e</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.auto.service/auto-service-annotations@1.0-rc6?type=jar</purl>
      <externalReferences><reference type="vcs"><url>http://github.com/google/auto</url></reference><reference type="website"><url>http://www.google.com</url></reference><reference type="issue-tracker"><url>http://github.com/google/auto/issues</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar">
      <publisher>QOS.ch</publisher>
      <group>org.slf4j</group>
      <name>slf4j-api</name>
      <version>1.7.36</version>
      <description>The slf4j API</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">872da51f5de7f3923da4de871d57fd85</hash>
        <hash alg="SHA-1">6c62681a2f655b49963a5983b8b0950a6120ae14</hash>
        <hash alg="SHA-256">d3ef575e3e4979678dc01bf1dcce51021493b4d11fb7f1be8ad982877c16a1c0</hash>
        <hash alg="SHA-512">f9b033fc019a44f98b16048da7e2b59edd4a6a527ba60e358f65ab88e0afae03a9340f1b3e8a543d49fa542290f499c5594259affa1ff3e6e7bf3b428d4c610b</hash>
        <hash alg="SHA-384">2b14ad035877087157e379d3277dcdcd79e58d6bdb147c47d29e377d75ce53ad42cafbf22f5fb7827c7e946ff4876b9a</hash>
        <hash alg="SHA3-384">3bc3110dafb8d5be16a39f3b2671a466463cd99eb39610c0e4719a7bf2d928f2ea213c734887c6926a07c4cca7769e4b</hash>
        <hash alg="SHA3-256">ba2608179fcf46e2291a90b9cbb4aa30d718e481f59c350cc21c73b88d826881</hash>
        <hash alg="SHA3-512">14c4edcd19702ef607d78826839d8a6d3a39157df54b89a801d3d3cbbe1307131a77671b041c761122730fb1387888c5ec2e46bdd80e1cb07f8f144676441824</hash>
      </hashes>
      <licenses>
        <license>
          <id>MIT</id>
          <url>https://opensource.org/licenses/MIT</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.qos.ch</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/qos-ch/slf4j</url></reference></externalReferences>
    </component>
  </components>
  <dependencies>
    <dependency ref="pkg:maven/org.apache.flink/flink-ml-dist-1.15@2.3.0?type=jar">
      <dependency ref="pkg:maven/org.apache.flink/flink-ml-uber-1.15@2.3.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-ml-examples-1.15@2.3.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-ml-python-1.15@2.3.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/statefun-flink-core@3.2.0?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.flink/flink-ml-uber-1.15@2.3.0?type=jar">
      <dependency ref="pkg:maven/org.apache.flink/flink-ml-servable-core-1.15@2.3.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-ml-core-1.15@2.3.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-ml-iteration-1.15@2.3.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-ml-servable-lib-1.15@2.3.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-ml-lib-1.15@2.3.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-ml-benchmark-1.15@2.3.0?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.flink/flink-ml-servable-core-1.15@2.3.0?type=jar">
      <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar"/>
      <dependency ref="pkg:maven/dev.ludovic.netlib/blas@2.2.1?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.12.6.1?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-core@2.13.4?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.13.4?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar"/>
    <dependency ref="pkg:maven/dev.ludovic.netlib/blas@2.2.1?type=jar">
      <dependency ref="pkg:maven/net.sourceforge.f2j/arpack_combined_all@0.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/net.sourceforge.f2j/arpack_combined_all@0.1?type=jar"/>
    <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.12.6.1?type=jar">
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.13.4?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-core@2.13.4?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.13.4?type=jar"/>
    <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-core@2.13.4?type=jar"/>
    <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    <dependency ref="pkg:maven/org.apache.flink/flink-ml-core-1.15@2.3.0?type=jar">
      <dependency ref="pkg:maven/dev.ludovic.netlib/blas@2.2.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-connector-files@1.15.3?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.12.6.1?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-core@2.13.4?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.13.4?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.flink/flink-connector-files@1.15.3?type=jar">
      <dependency ref="pkg:maven/org.apache.flink/flink-file-sink-common@1.15.3?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.flink/flink-file-sink-common@1.15.3?type=jar"/>
    <dependency ref="pkg:maven/org.apache.flink/flink-ml-iteration-1.15@2.3.0?type=jar">
      <dependency ref="pkg:maven/org.apache.flink/flink-ml-iteration-common@2.3.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/statefun-flink-core@3.2.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-hadoop-fs@1.15.3?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-table-runtime@1.15.3?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.flink/flink-ml-iteration-common@2.3.0?type=jar"/>
    <dependency ref="pkg:maven/org.apache.flink/statefun-flink-core@3.2.0?type=jar">
      <dependency ref="pkg:maven/org.apache.flink/statefun-sdk-embedded@3.2.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/statefun-sdk-protos@3.2.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/statefun-flink-io@3.2.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/statefun-flink-common@3.2.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/statefun-flink-extensions@3.2.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-metrics-dropwizard@1.14.3?type=jar"/>
      <dependency ref="pkg:maven/com.google.protobuf/protobuf-java@3.7.1?type=jar"/>
      <dependency ref="pkg:maven/com.squareup.okhttp3/okhttp@3.14.6?type=jar"/>
      <dependency ref="pkg:maven/com.kohlschutter.junixsocket/junixsocket-core@2.3.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-netty@4.1.65.Final-14.0?type=jar"/>
      <dependency ref="pkg:maven/com.google.auto.service/auto-service-annotations@1.0-rc6?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.flink/flink-hadoop-fs@1.15.3?type=jar"/>
    <dependency ref="pkg:maven/org.apache.flink/flink-table-runtime@1.15.3?type=jar">
      <dependency ref="pkg:maven/org.apache.flink/flink-table-common@1.15.3?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-table-api-java@1.15.3?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-table-api-java-bridge@1.15.3?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-cep@1.15.3?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.flink/flink-table-common@1.15.3?type=jar">
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-asm-9@9.2-15.0?type=jar"/>
      <dependency ref="pkg:maven/com.ibm.icu/icu4j@67.1?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.flink/flink-shaded-asm-9@9.2-15.0?type=jar"/>
    <dependency ref="pkg:maven/com.ibm.icu/icu4j@67.1?type=jar"/>
    <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"/>
    <dependency ref="pkg:maven/org.apache.flink/flink-table-api-java@1.15.3?type=jar">
      <dependency ref="pkg:maven/org.apache.flink/flink-table-common@1.15.3?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.flink/flink-table-api-java-bridge@1.15.3?type=jar">
      <dependency ref="pkg:maven/org.apache.flink/flink-table-api-java@1.15.3?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-table-api-bridge-base@1.15.3?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-streaming-java@1.15.3?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.flink/flink-table-api-bridge-base@1.15.3?type=jar">
      <dependency ref="pkg:maven/org.apache.flink/flink-streaming-java@1.15.3?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-table-api-java@1.15.3?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.flink/flink-streaming-java@1.15.3?type=jar">
      <dependency ref="pkg:maven/org.apache.flink/flink-file-sink-common@1.15.3?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.flink/flink-cep@1.15.3?type=jar"/>
    <dependency ref="pkg:maven/org.apache.flink/flink-ml-servable-lib-1.15@2.3.0?type=jar">
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.flink/flink-ml-lib-1.15@2.3.0?type=jar">
      <dependency ref="pkg:maven/com.github.wendykierp/JTransforms@3.1?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.github.wendykierp/JTransforms@3.1?type=jar">
      <dependency ref="pkg:maven/org.apache.commons/commons-math3@3.5?type=jar"/>
      <dependency ref="pkg:maven/pl.edu.icm/JLargeArrays@1.5?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.commons/commons-math3@3.5?type=jar"/>
    <dependency ref="pkg:maven/pl.edu.icm/JLargeArrays@1.5?type=jar">
      <dependency ref="pkg:maven/org.apache.commons/commons-math3@3.5?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.flink/flink-ml-benchmark-1.15@2.3.0?type=jar">
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.flink/flink-ml-examples-1.15@2.3.0?type=jar">
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.flink/flink-ml-python-1.15@2.3.0?type=jar">
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.flink/statefun-sdk-embedded@3.2.0?type=jar">
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"/>
      <dependency ref="pkg:maven/com.google.auto.service/auto-service-annotations@1.0-rc6?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.google.auto.service/auto-service-annotations@1.0-rc6?type=jar"/>
    <dependency ref="pkg:maven/org.apache.flink/statefun-sdk-protos@3.2.0?type=jar">
      <dependency ref="pkg:maven/com.google.auto.service/auto-service-annotations@1.0-rc6?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.flink/statefun-flink-io@3.2.0?type=jar">
      <dependency ref="pkg:maven/org.apache.flink/statefun-sdk-embedded@3.2.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/statefun-flink-extensions@3.2.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/statefun-sdk-protos@3.2.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-streaming-java_2.12@1.14.3?type=jar"/>
      <dependency ref="pkg:maven/com.google.protobuf/protobuf-java@3.7.1?type=jar"/>
      <dependency ref="pkg:maven/com.google.auto.service/auto-service-annotations@1.0-rc6?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.flink/statefun-flink-extensions@3.2.0?type=jar">
      <dependency ref="pkg:maven/org.apache.flink/statefun-sdk-embedded@3.2.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-jackson@2.13.4-16.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-annotations@1.14.3?type=jar"/>
      <dependency ref="pkg:maven/com.google.auto.service/auto-service-annotations@1.0-rc6?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.flink/flink-streaming-java_2.12@1.14.3?type=jar">
      <dependency ref="pkg:maven/org.apache.flink/flink-core@1.14.3?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-runtime@1.14.3?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-scala_2.12@1.14.3?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-java@1.14.3?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-guava@30.1.1-jre-14.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-math3@3.5?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-force-shading@14.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.flink/flink-core@1.14.3?type=jar">
      <dependency ref="pkg:maven/org.apache.flink/flink-annotations@1.14.3?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-metrics-core@1.14.3?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-asm-7@7.1-14.0?type=jar"/>
      <dependency ref="pkg:maven/com.esotericsoftware.kryo/kryo@2.24.0?type=jar"/>
      <dependency ref="pkg:maven/commons-collections/commons-collections@3.2.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-compress@1.21?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-guava@30.1.1-jre-14.0?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-force-shading@14.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.flink/flink-runtime@1.14.3?type=jar">
      <dependency ref="pkg:maven/org.apache.flink/flink-core@1.14.3?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-rpc-core@1.14.3?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-rpc-akka-loader@1.14.3?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-java@1.14.3?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-queryable-state-client-java@1.14.3?type=jar"/>
      <dependency ref="pkg:maven/commons-io/commons-io@2.8.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-netty@4.1.65.Final-14.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-guava@30.1.1-jre-14.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-jackson@2.13.4-16.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-zookeeper-3@3.6.3-16.1?type=jar"/>
      <dependency ref="pkg:maven/commons-cli/commons-cli@1.3.1?type=jar"/>
      <dependency ref="pkg:maven/org.javassist/javassist@3.24.0-GA?type=jar"/>
      <dependency ref="pkg:maven/org.xerial.snappy/snappy-java@1.1.8.3?type=jar"/>
      <dependency ref="pkg:maven/org.lz4/lz4-java@1.8.0?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-force-shading@14.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.flink/flink-rpc-core@1.14.3?type=jar">
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-force-shading@14.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.flink/flink-shaded-force-shading@14.0?type=jar"/>
    <dependency ref="pkg:maven/org.apache.flink/flink-rpc-akka-loader@1.14.3?type=jar">
      <dependency ref="pkg:maven/org.apache.flink/flink-core@1.14.3?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-rpc-core@1.14.3?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-force-shading@14.0?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.flink/flink-java@1.14.3?type=jar">
      <dependency ref="pkg:maven/org.apache.flink/flink-core@1.14.3?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-math3@3.5?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-force-shading@14.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.flink/flink-queryable-state-client-java@1.14.3?type=jar">
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-netty@4.1.65.Final-14.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-guava@30.1.1-jre-14.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-force-shading@14.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.flink/flink-shaded-netty@4.1.65.Final-14.0?type=jar"/>
    <dependency ref="pkg:maven/org.apache.flink/flink-shaded-guava@30.1.1-jre-14.0?type=jar"/>
    <dependency ref="pkg:maven/commons-io/commons-io@2.8.0?type=jar"/>
    <dependency ref="pkg:maven/org.apache.flink/flink-shaded-jackson@2.13.4-16.1?type=jar"/>
    <dependency ref="pkg:maven/org.apache.flink/flink-shaded-zookeeper-3@3.6.3-16.1?type=jar"/>
    <dependency ref="pkg:maven/commons-cli/commons-cli@1.3.1?type=jar"/>
    <dependency ref="pkg:maven/org.javassist/javassist@3.24.0-GA?type=jar"/>
    <dependency ref="pkg:maven/org.xerial.snappy/snappy-java@1.1.8.3?type=jar"/>
    <dependency ref="pkg:maven/org.lz4/lz4-java@1.8.0?type=jar"/>
    <dependency ref="pkg:maven/org.apache.flink/flink-scala_2.12@1.14.3?type=jar">
      <dependency ref="pkg:maven/org.apache.flink/flink-core@1.14.3?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-java@1.14.3?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-asm-7@7.1-14.0?type=jar"/>
      <dependency ref="pkg:maven/org.scala-lang/scala-reflect@2.12.7?type=jar"/>
      <dependency ref="pkg:maven/org.scala-lang/scala-library@2.12.7?type=jar"/>
      <dependency ref="pkg:maven/org.scala-lang/scala-compiler@2.12.7?type=jar"/>
      <dependency ref="pkg:maven/com.twitter/chill_2.12@0.7.6?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-force-shading@14.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.flink/flink-shaded-asm-7@7.1-14.0?type=jar"/>
    <dependency ref="pkg:maven/org.scala-lang/scala-reflect@2.12.7?type=jar">
      <dependency ref="pkg:maven/org.scala-lang/scala-library@2.12.7?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.scala-lang/scala-library@2.12.7?type=jar"/>
    <dependency ref="pkg:maven/org.scala-lang/scala-compiler@2.12.7?type=jar">
      <dependency ref="pkg:maven/org.scala-lang/scala-library@2.12.7?type=jar"/>
      <dependency ref="pkg:maven/org.scala-lang/scala-reflect@2.12.7?type=jar"/>
      <dependency ref="pkg:maven/org.scala-lang.modules/scala-xml_2.12@1.0.6?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.scala-lang.modules/scala-xml_2.12@1.0.6?type=jar"/>
    <dependency ref="pkg:maven/com.twitter/chill_2.12@0.7.6?type=jar">
      <dependency ref="pkg:maven/com.twitter/chill-java@0.7.6?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.twitter/chill-java@0.7.6?type=jar"/>
    <dependency ref="pkg:maven/com.google.protobuf/protobuf-java@3.7.1?type=jar"/>
    <dependency ref="pkg:maven/org.apache.flink/statefun-flink-common@3.2.0?type=jar">
      <dependency ref="pkg:maven/org.apache.flink/statefun-sdk-embedded@3.2.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-core@1.14.3?type=jar"/>
      <dependency ref="pkg:maven/com.google.protobuf/protobuf-java@3.7.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-jackson@2.13.4-16.1?type=jar"/>
      <dependency ref="pkg:maven/com.google.auto.service/auto-service-annotations@1.0-rc6?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.flink/flink-annotations@1.14.3?type=jar">
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-force-shading@14.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.flink/flink-metrics-core@1.14.3?type=jar">
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-force-shading@14.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.esotericsoftware.kryo/kryo@2.24.0?type=jar">
      <dependency ref="pkg:maven/com.esotericsoftware.minlog/minlog@1.2?type=jar"/>
      <dependency ref="pkg:maven/org.objenesis/objenesis@2.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.esotericsoftware.minlog/minlog@1.2?type=jar"/>
    <dependency ref="pkg:maven/org.objenesis/objenesis@2.1?type=jar"/>
    <dependency ref="pkg:maven/commons-collections/commons-collections@3.2.2?type=jar"/>
    <dependency ref="pkg:maven/org.apache.commons/commons-compress@1.21?type=jar"/>
    <dependency ref="pkg:maven/org.apache.flink/flink-metrics-dropwizard@1.14.3?type=jar">
      <dependency ref="pkg:maven/io.dropwizard.metrics/metrics-core@3.2.6?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-force-shading@14.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/io.dropwizard.metrics/metrics-core@3.2.6?type=jar"/>
    <dependency ref="pkg:maven/com.squareup.okhttp3/okhttp@3.14.6?type=jar">
      <dependency ref="pkg:maven/com.squareup.okio/okio@1.17.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.squareup.okio/okio@1.17.2?type=jar"/>
    <dependency ref="pkg:maven/com.kohlschutter.junixsocket/junixsocket-core@2.3.2?type=jar">
      <dependency ref="pkg:maven/com.kohlschutter.junixsocket/junixsocket-native-common@2.3.2?type=jar"/>
      <dependency ref="pkg:maven/com.kohlschutter.junixsocket/junixsocket-common@2.3.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.kohlschutter.junixsocket/junixsocket-native-common@2.3.2?type=jar"/>
    <dependency ref="pkg:maven/com.kohlschutter.junixsocket/junixsocket-common@2.3.2?type=jar"/>
  </dependencies>
</bom>
