<?xml version="1.0" encoding="UTF-8"?>
<bom serialNumber="urn:uuid:4bc9f4be-09b4-481a-8722-7d13def1f558" version="1" xmlns="http://cyclonedx.org/schema/bom/1.4">
  <metadata>
    <timestamp>2023-04-12T05:48:58Z</timestamp>
    <tools>
      <tool>
        <vendor>OWASP Foundation</vendor>
        <name>CycloneDX Maven plugin</name>
        <version>2.7.3</version>
        <hashes>
          <hash alg="MD5">ab886f1cb1a79b4244ac54dde22a0989</hash>
          <hash alg="SHA-1">9ed658496dfeef87fe6072b95c62ec37165cc741</hash>
          <hash alg="SHA-256">df9b43417bef6aeac86a393abcc1ac2ed0518239ba544aaeb595b9619c603503</hash>
          <hash alg="SHA-512">223da34bb51c5339e0f7285757608c1a56b1ea887f7ad835af9299fabacc693053163da74af352af86b16e18e04db730bd44214eda04291410c42b6ae657d85c</hash>
          <hash alg="SHA-384">3aaf057329ed0f90ec3a49a45b3cf4ec5ce637fd75d6202e9483fa4274cec3e7b74308016e146b6ba087df5fce9397bb</hash>
          <hash alg="SHA3-384">0e2ce6d2a0e0ddea90f63d2e521e640e83aeac1230c201042e542186e9f32bceaf54ed9d26e6a9dec04c0f7895bbae19</hash>
          <hash alg="SHA3-256">dd3ba8325a1a759e5a8f159a3363213d4a34d51120c4e4c77097a6779964fb33</hash>
          <hash alg="SHA3-512">e5f87b2380e9785330fce113fedd5866a1498d5a9e365b7b00cb6fea50fd47166c471a6347d46d3edb7dd247a583874169624db5be2845c5c87dfdbcd58d9e89</hash>
        </hashes>
      </tool>
    </tools>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-ml-servable-lib@2.2.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-ml-servable-lib</name>
      <version>2.2.0</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-ml-servable-lib@2.2.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://www.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink-ml/flink-ml-servable-lib</url></reference></externalReferences>
    </component>
  </metadata>
  <components>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-ml-servable-core@2.2.0?type=jar">
      <group>org.apache.flink</group>
      <name>flink-ml-servable-core</name>
      <version>2.2.0</version>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">f55748b25ac82d331363dfd73015e91a</hash>
        <hash alg="SHA-1">7b65b0b508adde983161c77d8c7a823591f141b2</hash>
        <hash alg="SHA-256">6d9ab0f5bf980a867cb11472519f0e92c3be394d3a0b8c9b1e001b9987fa21a0</hash>
        <hash alg="SHA-512">0a992d014f0768b2fa03e2815dd49e2e8af737cfbf8bec957c4e70267221229a78e149d731a6caf522514b8e439dca6c762e99e1ebfd9a836a730593cec61d87</hash>
        <hash alg="SHA-384">a7263153c10ab68a0cd43af99c4dacd41924957e60658d1378d88dbe957d535da67e9cb96ac794a5b6b94515f03ee4d2</hash>
        <hash alg="SHA3-384">a2141ecca148c02b147610089c3034887dcffbaa6a4df92ca42fb38c8208d7caebc94ae69e31a097a34b6fa3a65d05e8</hash>
        <hash alg="SHA3-256">a4662f56b3c7b6f6e42ff5fcd2f58b100d1ccbce75370cda88a1f6c315ed34da</hash>
        <hash alg="SHA3-512">9868c6fbf79f72776623548e28e1d4f14aa1cca6b20c892f71937bb161fc450a503b4c6489e6825a8a94e953eb92a2bf1b576de610019477e8c9116464b5cc85</hash>
      </hashes>
      <licenses/>
      <purl>pkg:maven/org.apache.flink/flink-ml-servable-core@2.2.0?type=jar</purl>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.commons</group>
      <name>commons-lang3</name>
      <version>3.12.0</version>
      <description>Apache Commons Lang, a package of Java utility classes for the
  classes that are in java.lang's hierarchy, or are considered to be so
  standard as to justify existence in java.lang.</description>
      <hashes>
        <hash alg="MD5">19fe50567358922bdad277959ea69545</hash>
        <hash alg="SHA-1">c6842c86792ff03b9f1d1fe2aab8dc23aa6c6f0e</hash>
        <hash alg="SHA-256">d919d904486c037f8d193412da0c92e22a9fa24230b9d67a57855c5c31c7e94e</hash>
        <hash alg="SHA-512">fbdbc0943cb3498b0148e86a39b773f97c8e6013740f72dbc727faeabea402073e2cc8c4d68198e5fc6b08a13b7700236292e99d4785f2c9989f2e5fac11fd81</hash>
        <hash alg="SHA-384">c34b8a0e0eba2168ad56fedeb7a1d710b6f1d3f1ce6aae99a4e0247bd120efbbadc8dcb2f731045b8a16e3efd30604dc</hash>
        <hash alg="SHA3-384">8ad6ebe7754bf0caa8cda7e59c0e95360d76e06a7ad6aeec5637985519dbd1dd06e7eed04711039f36ec4c49de280def</hash>
        <hash alg="SHA3-256">18ef639b2aeeb5aedffb18dbf20c79f33e300d99fb31b131689639cc470e6e4c</hash>
        <hash alg="SHA3-512">fbea96114dcf4f31cfaaa99987be756ddda3a6c74f8c835461997df794d54b92da1f60fe5c3f1f2a43cb8c5f5db7f4048bef77c70993673c7a93f3660fffc8da</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar</purl>
      <externalReferences><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/LANG</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=commons-lang.git</url></reference><reference type="build-system"><url>https://builds.apache.org/</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="website"><url>https://www.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/dev.ludovic.netlib/blas@2.2.1?type=jar">
      <group>dev.ludovic.netlib</group>
      <name>blas</name>
      <version>2.2.1</version>
      <description>Implementation of the Netlib APIs in Java using hardware acceleration.</description>
      <hashes>
        <hash alg="MD5">f53f00b91c5ed18ea315f5f14a31d164</hash>
        <hash alg="SHA-1">5c6ccfe1220ef06b38f4bcd0fc34e95c9846d9a7</hash>
        <hash alg="SHA-256">3550832630de7ad6460164413cf14890ded7369998b3a4d1ef689a215560f212</hash>
        <hash alg="SHA-512">59277b2dedb370f01344ff1e5e6d114c33e9af638c8bd4d34edf47be6adac63af329eff01c84f0fa6dd04fb2e28ad84a9b3b91c807cd695b885662a64352117b</hash>
        <hash alg="SHA-384">06204a102b2816bffcd5936e883026121531ed8dd45aafd7126cde6ef71c4c2692994186ac6ac60937ff1cfde91c1261</hash>
        <hash alg="SHA3-384">ae2e2756636b62d61c461115fff6525aa7877b0168ad59e3c37495f1d7db58021e966fcabb33e6a00097fa8aa5e6511a</hash>
        <hash alg="SHA3-256">35bf68fda1228f62c86104d989914ede5df5d414c5c47fc46752e74b65731dba</hash>
        <hash alg="SHA3-512">0e3ee0d7d1db39901e91749d42e8db0e857853d14d0bc61624f23ee9667ce90a57e2eedf8fc413e67addf57f1921dbfe3c44dfe93b3ec732d8806498521a657b</hash>
      </hashes>
      <licenses>
        <license>
          <id>MIT</id>
          <url>https://opensource.org/licenses/MIT</url>
        </license>
      </licenses>
      <purl>pkg:maven/dev.ludovic.netlib/blas@2.2.1?type=jar</purl>
      <externalReferences><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>http://github.com/luhenry/netlib/tree/master</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/net.sourceforge.f2j/arpack_combined_all@0.1?type=jar">
      <group>net.sourceforge.f2j</group>
      <name>arpack_combined_all</name>
      <version>0.1</version>
      <description>Java APIs for the BLAS, LAPACK, and ARPACK Fortran libraries as translated through F2J.</description>
      <hashes>
        <hash alg="MD5">83d82dd480da2aeba6429e746453ec0b</hash>
        <hash alg="SHA-1">225619a060b42605b4d9fd4af11815664abf26eb</hash>
        <hash alg="SHA-256">9964fb948ef213548a79b23dd480af9d72f1450824fa006bbfea211ac1ffa6dc</hash>
        <hash alg="SHA-512">1ee91ab6a9b5d058e7580d42cf21af0d21f4ad3774689b56c275dedd72d2a0b49dc1af2e63834ac76e8ac6356380d1452377799633d8f71e922333ff7578e927</hash>
        <hash alg="SHA-384">44186a386ce96a108a0b46244c84640047ecb8ffa14d1c47040946dad936b91252cc4afc02a68736e2166817598a2f87</hash>
        <hash alg="SHA3-384">48d9bf716bc126daa772167068242b3e525bbcbf1f0d136407b5bf5a62e830c94f2c323cb2e2ca1cbff6c4a435725ef1</hash>
        <hash alg="SHA3-256">45e5d4bbff9fd3eaf734d2855f2d5b245a3cad53bbf76790d7aa3f75d8ea8532</hash>
        <hash alg="SHA3-512">ee391c458dbc6ff043f10abe6342bce827512c6e9a5c0ac0b32069fe3d73ef8ba4b2e39bda92976c980482ed455ede899d21f883ea1f2a88b4dbc4dfeb34d9f2</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-4-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/net.sourceforge.f2j/arpack_combined_all@0.1?type=jar</purl>
      <externalReferences><reference type="vcs"><url>http://f2j.cvs.sourceforge.net/viewvc/f2j/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.12.6.1?type=jar">
      <publisher>FasterXML</publisher>
      <group>com.fasterxml.jackson.core</group>
      <name>jackson-databind</name>
      <version>2.12.6.1</version>
      <description>General data-binding functionality for Jackson: works on core streaming API</description>
      <hashes>
        <hash alg="MD5">88088e2e9bbc93adb021ae8bf436e544</hash>
        <hash alg="SHA-1">df01cc0c2d4acb913d73d587274986a12e3dec8c</hash>
        <hash alg="SHA-256">eb60e494ba8c23e653da4db8e29af0342927fc7e1c60501bf99e93145738c696</hash>
        <hash alg="SHA-512">9fa25c2a2917a751a1d77ff5301627a1adf48fb8b9924acb47d176b142fe791e4b12b7a526327e93557d0052dc10ea210a87849f1d292ba4ec581357f1b21971</hash>
        <hash alg="SHA-384">48ec219d4a8692ce850d7eedaf7fadad2c1891887773d3b90767538a4174248c8b51ceb5360ba8fa3e69efa736c3abde</hash>
        <hash alg="SHA3-384">8ca6c47360018827f1593d66786ecea285851c502ac43f7f42e81eb4254d637df7d45f5e88318e386de3d6bece38fca3</hash>
        <hash alg="SHA3-256">40bdbd0d303793df14d3fa8c5d6266a208793e466c0fc7ba5b39d29c134dcf80</hash>
        <hash alg="SHA3-512">ff1a8f9259cb6ff708a5ccc2505815b7c6fefb8ca6995a33a821bbea6f8a6f253cd69d9651b087de9cd3b8345ec75f59760e064f5389e0976e09e73efee6faf9</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.12.6.1?type=jar</purl>
      <externalReferences><reference type="vcs"><url>http://github.com/FasterXML/jackson-databind</url></reference><reference type="website"><url>http://fasterxml.com/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.fasterxml.jackson.core/jackson-core@2.12.4?type=jar">
      <publisher>FasterXML</publisher>
      <group>com.fasterxml.jackson.core</group>
      <name>jackson-core</name>
      <version>2.12.4</version>
      <description>Core Jackson processing abstractions (aka Streaming API), implementation for JSON</description>
      <hashes>
        <hash alg="MD5">58ffcb451f0bf6beb78e306cfe5d46f3</hash>
        <hash alg="SHA-1">006a1bd259b6c4e3f9219ec8ec0be55ed11eed0c</hash>
        <hash alg="SHA-256">3506ce47ec2604ae2d80d79505f7cb374f718060639415c07d144adadd2d68a3</hash>
        <hash alg="SHA-512">428e0ebb16dd4c74ab0adf712058fd0dc0cd788f6e6f90c60c627da6577b345fac60a30694e111f1cd4e3e8bf79a1f1b820d30ada114984b26c28e299e326eaa</hash>
        <hash alg="SHA-384">d14522335bb794675c557ee54320df2db3803d31f9d054a9299f738fe644a487d8837cd30395fd0cfc5cfdcee591fc45</hash>
        <hash alg="SHA3-384">2e0e35f6d76e7166b782c4f121bac42f1f8ab67f1fd2acc8d5c1168fc85ea85bc74fb10c78871ad380abfe4f863d9216</hash>
        <hash alg="SHA3-256">47a188a6b932b7cec26907d4487d36c2e304f8d9b095d46834d5eed61c946efa</hash>
        <hash alg="SHA3-512">0e7d6ac4aee2a4b6e6203059cbaddb85d26a797a27fb3397a95225a71f1f61b02bc1f9aa67c3242fc9f5107a3df7da692e5840e28019dcddc8fbcb7921a5662b</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.fasterxml.jackson.core/jackson-core@2.12.4?type=jar</purl>
      <externalReferences><reference type="vcs"><url>http://github.com/FasterXML/jackson-core</url></reference><reference type="website"><url>http://fasterxml.com/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.12.4?type=jar">
      <publisher>FasterXML</publisher>
      <group>com.fasterxml.jackson.core</group>
      <name>jackson-annotations</name>
      <version>2.12.4</version>
      <description>Core annotations used for value types, used by Jackson data binding package.</description>
      <hashes>
        <hash alg="MD5">16c7a1094270a27013fd58df7f6800f7</hash>
        <hash alg="SHA-1">752cf9a2562ac2c012e48057e3a4c17dad66c66e</hash>
        <hash alg="SHA-256">f6aa3706a875689b66cdac3334f65dfdb795ccfad4117bf072893b196ed1ec8e</hash>
        <hash alg="SHA-512">6fdad6c5bb71a97331a662fe26265aacab6869f3307a710697d5c2f256fd48935764bfb0b3505a2cbb1605daf0b7350abdf84a1b1cf2bb1e91d9184565243c8e</hash>
        <hash alg="SHA-384">c8e65ce81c0f34aa01a83b3506247d28feff2765c234606657d77344ca85dbf9a38c447ae5dfcf1dfdc793f0582cc086</hash>
        <hash alg="SHA3-384">fad11b5170fbc17ed65efcd52e15b83f77b1f810a368b855000b005a63e9f55b82cb3091971e140c282c958b7f2370f1</hash>
        <hash alg="SHA3-256">a06fe4ccbda06d120d896ae0aafddcbbe308618d570ddd0fab79f6d4f2e88bff</hash>
        <hash alg="SHA3-512">d215707c4becadfe5c4aa5ceafa88d2e532e705fa2cb31f35f6ca70868109bb24822097b5f8f108891eca356404cc5ab7ffb556f971b091c9774f580c522a3c4</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.12.4?type=jar</purl>
      <externalReferences><reference type="vcs"><url>http://github.com/FasterXML/jackson-annotations</url></reference><reference type="website"><url>http://fasterxml.com/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-core@1.15.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-core</name>
      <version>1.15.1</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">0159591ac5f6a1cf2733abe2c900708f</hash>
        <hash alg="SHA-1">cb3199f5804ebb32945a541f5c32153a174527ad</hash>
        <hash alg="SHA-256">9f245eefb1373078c9c6a6146a09322e56d85943311fff7f963c2376902c5e7d</hash>
        <hash alg="SHA-512">6c569c7b3cb99d1e33cf23fd26aa9cc7d3114e84deeb7f64cc17327437f66bb04ce7fbce0c0143812382d9977528a61889ec89557dea4caf9a185b0a431f774b</hash>
        <hash alg="SHA-384">388d77d56bd7898c47adf9a9f72fd8b695167a8f31a1c215b9c93c8b73caf031c7e55bf7b05c7373ff51158a71c14b44</hash>
        <hash alg="SHA3-384">0de3ce57f77caadc3910e415a7c9f21fa56d61d4b2a0e7e1b9d3d27acd65749eb61afecfab9cb11e2f619d0f73ca9482</hash>
        <hash alg="SHA3-256">5f1259573b80925e259da352dfdc519d4ff1e86a1a8f77bc83af94108851c6ff</hash>
        <hash alg="SHA3-512">cb90da606352140b15529a38f84667020254bd00e406c139d0524cae815be2e2e3690ebbf07e85bb4d3718f5f3cbdd5294da3c5c6758425d4aef7392b54ae03f</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-core@1.15.1?type=jar</purl>
      <externalReferences><reference type="vcs"><url>https://github.com/apache/flink</url></reference><reference type="website"><url>https://www.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-annotations@1.15.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-annotations</name>
      <version>1.15.1</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">f93c00fc3296014ed5df8ccd7f5a2ad6</hash>
        <hash alg="SHA-1">f686b5115a9685895a5b3b2b39909e027f60279a</hash>
        <hash alg="SHA-256">bec5d57185cbd65b1127d3e644f36927e54dc28ddbcf732f9f8142db150f2973</hash>
        <hash alg="SHA-512">85ac29ab72cc12fc77c73a956b42493b8dc9b1a3be4f199d5f6c26e9e97cde3a3b96c79ecc1817734ec7e2899c7f10a2089c72f9f1af9e24bf8d6b2c92194b49</hash>
        <hash alg="SHA-384">82669e4b59b582c3429c2edeabdcb7e7061478e9f1b318b4e073e38a7c6accc6b4c39f9fcb6d575fd18d15b8c056e5bb</hash>
        <hash alg="SHA3-384">21131faa5d32e95209cac1f1a9d46d0fbfa6358dd27e65774f92e882902d293a3e1e3798d177958a9fff9e7f6b244362</hash>
        <hash alg="SHA3-256">97fdbbdacbfa1f7446035572c9a5c0a7e297dadfbb8c67c66d780e3bacfd6fc2</hash>
        <hash alg="SHA3-512">cef8c70a21f1daf7b10ad971b794a0b47083b187df2ab0399d3f4a495d173e96cf98614f4277d6d8df026e75570fb916fffab5cfb3e427fcf29d842f88513a6c</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-annotations@1.15.1?type=jar</purl>
      <externalReferences><reference type="vcs"><url>https://github.com/apache/flink</url></reference><reference type="website"><url>https://www.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-metrics-core@1.15.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-metrics-core</name>
      <version>1.15.1</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <hashes>
        <hash alg="MD5">69005e6238ff75c220e029e7aabd39a1</hash>
        <hash alg="SHA-1">da4ba89f395eeb152f17ef0e67f77fcbf84c7926</hash>
        <hash alg="SHA-256">63afd16ce890909d4061bf2208947b9b6aefe31a73110492cfbd0a711c4fa3f1</hash>
        <hash alg="SHA-512">586040c8f58405534630a5ed44b4d4fc03fdc02f34215481a7d81427ffc84831ace41d9862c2e918d37eb38d5225d3f72d38516180034e831fa26150da57ec2b</hash>
        <hash alg="SHA-384">e6b530176242a7bd06a2f1345ca4a04c908bfa0bba48e5fc66671699b57fb59f11ce2393e8d81e4b377c93baa634fe7a</hash>
        <hash alg="SHA3-384">ee55124e9c1e9f9f3756c46164513e7b91a27b7b7daf59ce0caa25d70c72dc5ed9b6bde114d06f67d3c9904705d0c0e2</hash>
        <hash alg="SHA3-256">66981ee63d9372cce901bf238300776e0828afc0f5ba1c12617f452c7d40b37b</hash>
        <hash alg="SHA3-512">301b8c668a01cfd5b21990a9331d85517d172b0647f45235237ab638dc343b4e82a0a5d0aa829301519825253b50517b460d5fc6d8f988aeb0e2d9c2b84c2889</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-metrics-core@1.15.1?type=jar</purl>
      <externalReferences><reference type="vcs"><url>https://github.com/apache/flink</url></reference><reference type="website"><url>https://www.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-shaded-asm-9@9.2-15.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-shaded-asm-9</name>
      <version>9.2-15.0</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <hashes>
        <hash alg="MD5">4b57b7ead9578721e3135394fa69ae29</hash>
        <hash alg="SHA-1">f89d00906d3ffcf97b049cdc6d6e70dcb101a4cd</hash>
        <hash alg="SHA-256">9692cd3f8953c74920bbbf17002bf874953871564768b2f0a97199bfed475e3f</hash>
        <hash alg="SHA-512">f8e86733ae3e52482bf8ed74370827a4405d362a5bbd63bc1a2652db75845eef9c43d687d3f3663e2bfcb030acfaee2b5fbdce9eee873cb4887c66c9ccebf8ef</hash>
        <hash alg="SHA-384">6542af42f033dce80d803348694a998d7b5e02dd49a15378696a0e57f7377192ae1f5c17744629145dba5e14d8110c96</hash>
        <hash alg="SHA3-384">ea6d6901d3c4a7d731de82d91fc1791ece8a86be02ecdcb948f211abc58ad61cb0fa199345c9163abdfd6b41dc238dd9</hash>
        <hash alg="SHA3-256">2e5ef369755a9302ad55865e3027e76f48b9c8ad53e2b7e290c07d4395ad9421</hash>
        <hash alg="SHA3-512">51acf643099af357dbbe5720c6f1e54b1ff9f36007f2f3c2a6b14221f750d7201ee2c2ef90c0cd654ddcc083ed8dfafcaf13dbc1be55460ff9edd731a09511e3</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-shaded-asm-9@9.2-15.0?type=jar</purl>
      <externalReferences><reference type="vcs"><url>https://github.com/apache/flink-shaded</url></reference><reference type="website"><url>https://www.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.esotericsoftware.kryo/kryo@2.24.0?type=jar">
      <group>com.esotericsoftware.kryo</group>
      <name>kryo</name>
      <version>2.24.0</version>
      <description>Fast, efficient Java serialization</description>
      <hashes>
        <hash alg="MD5">6cf0fa5b5d4f6b8226fd4a4bfb7532b8</hash>
        <hash alg="SHA-1">0c6b206e80cfd97e66a1364003724491c757b92f</hash>
        <hash alg="SHA-256">7e56b32c635058f9aa2820f88919ab702d029cbcd15285da9992e36cc0ae52f2</hash>
        <hash alg="SHA-512">a4c6ce768528a03c219cc6a41b22293f78e433c849c90391b64dda3f2376fd79951a89c5f4e6701bcbcb6eee9abffe2390cfb12dba3b885e4a3d411a26b78f40</hash>
        <hash alg="SHA-384">678ad1b7f4d99910b8ff44a6c8f78ccae91f823161ce23de39077397352919b7257e1e6e0dea90900be973291ea19282</hash>
        <hash alg="SHA3-384">671fc6aa9905f8131482e1d0f3fe26126562b13777893d51a66d0f84fc6f2aa3f13947e488ffba8f09c31a2cc0e9758a</hash>
        <hash alg="SHA3-256">46e89d8f12cbead0fe29ad707d5dba96e880dacce2a6b374ac4bf1ced9f36a79</hash>
        <hash alg="SHA3-512">c7cde437eef8343eccd4c5ecb8de5683529e3d4d8262e8cd1f7b7d0df9c632253b979737fd1b486314ec2728aee3a3782dee5d2032621485db4aa3b2a8262741</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.esotericsoftware.kryo/kryo@2.24.0?type=jar</purl>
      <externalReferences><reference type="vcs"><url>https://github.com/EsotericSoftware/kryo</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.esotericsoftware.minlog/minlog@1.2?type=jar">
      <group>com.esotericsoftware.minlog</group>
      <name>minlog</name>
      <version>1.2</version>
      <description>Minimal overhead Java logging</description>
      <hashes>
        <hash alg="MD5">f7cfbdf63b67df0bbfa4c7cb260885bc</hash>
        <hash alg="SHA-1">59bfcd171d82f9981a5e242b9e840191f650e209</hash>
        <hash alg="SHA-256">a678cb1aa8f5d03d901c992c75741841d98a9bc3d55dad02e84d65315c4e60f2</hash>
        <hash alg="SHA-512">7b4082766ad740d86708783f3b08780ed72dd18062aa9ba422c4b9016b332d2334ae511f50ef7d89e4eedbdac5cebc51ab6ddaf4d1eea857a3250eb5962f0d08</hash>
        <hash alg="SHA-384">932a282a9c06864001f8212199e4be05543609adbd985c5f4517ee6eba734acd3fd8812213bc0c98af264637cbf9c78d</hash>
        <hash alg="SHA3-384">f36e9f494611c85f59febfef9ce93fc68f1f17db881400456204c1f099e623e334d2f10b41018392877c8af13de7f59a</hash>
        <hash alg="SHA3-256">37422ef85dce86abd8b14b4c9f7ad77261d728a472126c8eca38f356c98da395</hash>
        <hash alg="SHA3-512">74ba47271899706a284e942482ff41649ffd93e57a29320732e57864c47f3f0431377130ca7afb5e64cc6b68d4e5a5cdfc38027966cda4b5e512e3ce02bd8a99</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.esotericsoftware.minlog/minlog@1.2?type=jar</purl>
      <externalReferences><reference type="vcs"><url>http://minlog.googlecode.com/svn/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.objenesis/objenesis@2.1?type=jar">
      <publisher>Joe Walnes, Henri Tremblay, Leonardo Mesquita</publisher>
      <group>org.objenesis</group>
      <name>objenesis</name>
      <version>2.1</version>
      <description>A library for instantiating Java objects</description>
      <hashes>
        <hash alg="MD5">32ccb1d20a42b5aaaceb90c9082a2efa</hash>
        <hash alg="SHA-1">87c0ea803b69252868d09308b4618f766f135a96</hash>
        <hash alg="SHA-256">c74330cc6b806c804fd37e74487b4fe5d7c2750c5e15fbc6efa13bdee1bdef80</hash>
        <hash alg="SHA-512">1dec9ee30812b8006e536a2749c5781ccdc4b446539efb6fa534f22e70562033876bf2eb22c6946d617695729bd65f0f65b984f15f05ac63db5bed215e74427c</hash>
        <hash alg="SHA-384">657b8a3b80a5475f198425396f7264301f9e0f3ad5dc336ef0c7b46874f5544861a8a2fd48cdb5f672e199a6935c19d1</hash>
        <hash alg="SHA3-384">e526937d722aad1857869b2d2a0ba5c88815609308c00b776b51614e501de5d93d54978f5bb9cf496bdcc28b1dbd5775</hash>
        <hash alg="SHA3-256">436cfbb9c208dd03c951708fa4ba6525e2a0b26a873d594a6fbe93ab49082c97</hash>
        <hash alg="SHA3-512">1e7ee9411df7cfbf0669c38e4ef029155dd718b91db1d182841c740caf8c1057ed273a77f8e32d724c48aaf96815a26ab099c776511ffc5ef351d70ebfa70344</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.objenesis/objenesis@2.1?type=jar</purl>
      <externalReferences><reference type="distribution"><url>http://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/easymock/easymock</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-collections/commons-collections@3.2.2?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>commons-collections</group>
      <name>commons-collections</name>
      <version>3.2.2</version>
      <description>Types that extend and augment the Java Collections Framework.</description>
      <hashes>
        <hash alg="MD5">f54a8510f834a1a57166970bfc982e94</hash>
        <hash alg="SHA-1">8ad72fe39fa8c91eaaf12aadb21e0c3661fe26d5</hash>
        <hash alg="SHA-256">eeeae917917144a68a741d4c0dff66aa5c5c5fd85593ff217bced3fc8ca783b8</hash>
        <hash alg="SHA-512">51c72f9aca7726f3c387095e66be85a6df97c74b00a25434b89188c1b8eab6e2b55accf7b9bd412430d22bd09324dec076e300b3d1fa39fccad471f0f2a3da16</hash>
        <hash alg="SHA-384">dd4e99b3314bd3c1a1ee26296615d9e44dadf7a1f8a7bbba44fb95121803d331e36d4cca4260e7609af78a47ba3e4073</hash>
        <hash alg="SHA3-384">8ce03528e4a6e95c44283b56eca87e6a6d3bf1363411a55b538f4f9110cf7470581ea5c73925e877ddab08dba0603f40</hash>
        <hash alg="SHA3-256">fd3d6134b5f07077b82ccf93d148dacf7c4ce5c971209510edd0e77e3e38c19e</hash>
        <hash alg="SHA3-512">c2a523916fb7c7d55a05d5e3d9e9b33000733f4b20a71be174e4e093e3f06ea78ad831edd1505527da7388105f8647efb7d5666ba852c90b4e2d5bb74256efbc</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/commons-collections/commons-collections@3.2.2?type=jar</purl>
      <externalReferences><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/COLLECTIONS</url></reference><reference type="vcs"><url>http://svn.apache.org/viewvc/commons/proper/collections/trunk</url></reference><reference type="build-system"><url>https://continuum-ci.apache.org/</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="website"><url>http://www.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-compress@1.21?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.commons</group>
      <name>commons-compress</name>
      <version>1.21</version>
      <description>Apache Commons Compress software defines an API for working with
compression and archive formats.  These include: bzip2, gzip, pack200,
lzma, xz, Snappy, traditional Unix Compress, DEFLATE, DEFLATE64, LZ4,
Brotli, Zstandard and ar, cpio, jar, tar, zip, dump, 7z, arj.</description>
      <hashes>
        <hash alg="MD5">2a713d10331bc4e13459a3dc0463f16f</hash>
        <hash alg="SHA-1">4ec95b60d4e86b5c95a0e919cb172a0af98011ef</hash>
        <hash alg="SHA-256">6aecfd5459728a595601cfa07258d131972ffc39b492eb48bdd596577a2f244a</hash>
        <hash alg="SHA-512">c92d9a12547aab475e057955ad815fdfe92ff44c78383fa5af54b089f1bff5525126ef6aef93334f3bfc22e2fef4ad0d969f69384e978a83a55f011a53e7e471</hash>
        <hash alg="SHA-384">da56f95d420cd7278cee646f4cd0e7a5ee12b6a2894efaec12f0ff7b56c3d43e5db736fe1ed66ff91118b16f2d64ebef</hash>
        <hash alg="SHA3-384">6d3dc0198dd523a49fa94e054841aece853577b5c3ea1029fc288ad9ff580ab1b65ea99ddbe58c42125054e8c43be461</hash>
        <hash alg="SHA3-256">37d4a014b50393793d35c70431bd8a1842c197d854c6f174dfa946b9edc2b841</hash>
        <hash alg="SHA3-512">61609f60746406a7cb1ef3f979488beca6674fde208c9025d3fdee115de4767e8a4a1ee38f5bf79ac0104505ddb3558f1feeba5e318d6545647120ac60db6b89</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.commons/commons-compress@1.21?type=jar</purl>
      <externalReferences><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/COMPRESS</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=commons-compress.git</url></reference><reference type="build-system"><url>https://builds.apache.org/</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="website"><url>https://www.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-shaded-guava@30.1.1-jre-15.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-shaded-guava</name>
      <version>30.1.1-jre-15.0</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <hashes>
        <hash alg="MD5">290298c9d2f321101d156c9957aad688</hash>
        <hash alg="SHA-1">bd226b0497e69b57de5c9868cbf5489a573d52a9</hash>
        <hash alg="SHA-256">2991b8a58d676c0603920a5242895a06456105eedea16045a67fd0e06cc11e58</hash>
        <hash alg="SHA-512">952834dc99fcf3740474164bdf4db0cda2852835651617b71ae582eaafd31d7e88ce3d8f5d138c4093bba472775bade6a3e97ae45619fdfadc7526bcab8d9606</hash>
        <hash alg="SHA-384">b1e7e8c741419f3d3467878818a311462cb0ea1a11ca3e843dbce9665b8d67f675651883a7ed328eb86c85c7eaca89af</hash>
        <hash alg="SHA3-384">d97ceac9ddc23acf37d21abaec7ae340b6ef8e569288fb4cc1483db5bc21beb22fc859e7833c18119c6a471b8d1fdd13</hash>
        <hash alg="SHA3-256">d53cc3f5599c7b42fdd73d32dc702ce4b17ac04b98bfad457798adbe3e5a42cc</hash>
        <hash alg="SHA3-512">f9d2a748083a529853527bfafdcc1bd82d51e6ced2f7c99c39f6ef56f1030547600b448dbef9a8438a4073c169966c55f44dccdbdcd58e71c860824dec822b13</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-shaded-guava@30.1.1-jre-15.0?type=jar</purl>
      <externalReferences><reference type="vcs"><url>https://github.com/apache/flink-shaded</url></reference><reference type="website"><url>https://www.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar">
      <group>com.google.code.findbugs</group>
      <name>jsr305</name>
      <version>1.3.9</version>
      <description>JSR305 Annotations for Findbugs</description>
      <hashes>
        <hash alg="MD5">1d5a772e400b04bb67a7ef4a0e0996d8</hash>
        <hash alg="SHA-1">40719ea6961c0cb6afaeb6a921eaa1f6afd4cfdf</hash>
        <hash alg="SHA-256">905721a0eea90a81534abb7ee6ef4ea2e5e645fa1def0a5cd88402df1b46c9ed</hash>
        <hash alg="SHA-512">06da282cfd8e30d9f8cf17702b8709172b00e22b75a627a1d85f8989615b8a1a401bc25d9aee7b14aed1d9b5df73bf2ea8d66f9c8468d9577c29f0ccfa2cc70a</hash>
        <hash alg="SHA-384">56e6b41ef62eb5edfed0203802cefae9c2df86388148e420bb0c687abb2b80e14d5c2a82d5b35dce4badaf148f94eada</hash>
        <hash alg="SHA3-384">58c3bf89fa1afa75c2c5078159fd28e27b2273d437f26aaaa7391310b6f0823f3cf476a24f5631c0881f3f7e946d99be</hash>
        <hash alg="SHA3-256">c333ea5faedfa78e0614a2620438d5724eab093df4e960918391b6a44c2915b0</hash>
        <hash alg="SHA3-512">67ec31448e156cc72dd036060b460bb2667a13b1cbe500b6b7eed3235b1994b44c39f440ebd07b21ec9595b166ad61121d4f6a132b5b313c558ab21b72599425</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar</purl>
      <externalReferences><reference type="vcs"><url>http://findbugs.googlecode.com/svn/trunk/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-shaded-force-shading@15.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-shaded-force-shading</name>
      <version>15.0</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <hashes>
        <hash alg="MD5">8394d7e7f3ad54c3c895ca79deb90a58</hash>
        <hash alg="SHA-1">68f5786fa0554e0a567a15bec1618682d1695e80</hash>
        <hash alg="SHA-256">aff27589f46e4a50896fc64a768740617dd60ea8aa1ea22098e0193511f99bdf</hash>
        <hash alg="SHA-512">1bfbac436da364fe9373bbba3b1db47ac137ca5b22b95060619182f9fe3076036a43fd9116989c63bb0a1eb7a218ef7d9cc635c34119aa046c916c7b23df6374</hash>
        <hash alg="SHA-384">3f7bc60ade0ba76f293a9f8592d4f88ce1c4da36797e7946635bebe12b67271781a321dc67f3bad6635669b27609865a</hash>
        <hash alg="SHA3-384">e247180b5095da58066f39973e5d9e851039a57153889b9394a23b678ab54f05218440810128215be8d86ab602027485</hash>
        <hash alg="SHA3-256">9fcf057f3aeb570d1d087ca11bfa1bf916329fdf659479fe1072b477d01c8f21</hash>
        <hash alg="SHA3-512">d440d06d41d5c48988a617992fd2e5360723a5e8845c547a3a6d8cff805fcc94f5220ab813b45dc239943a874420ccd58f0937e54015f38eac9c45f43c8a88b5</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-shaded-force-shading@15.0?type=jar</purl>
      <externalReferences><reference type="vcs"><url>https://github.com/apache/flink-shaded</url></reference><reference type="website"><url>https://www.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar">
      <publisher>QOS.ch</publisher>
      <group>org.slf4j</group>
      <name>slf4j-api</name>
      <version>1.7.36</version>
      <description>The slf4j API</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">872da51f5de7f3923da4de871d57fd85</hash>
        <hash alg="SHA-1">6c62681a2f655b49963a5983b8b0950a6120ae14</hash>
        <hash alg="SHA-256">d3ef575e3e4979678dc01bf1dcce51021493b4d11fb7f1be8ad982877c16a1c0</hash>
        <hash alg="SHA-512">f9b033fc019a44f98b16048da7e2b59edd4a6a527ba60e358f65ab88e0afae03a9340f1b3e8a543d49fa542290f499c5594259affa1ff3e6e7bf3b428d4c610b</hash>
        <hash alg="SHA-384">2b14ad035877087157e379d3277dcdcd79e58d6bdb147c47d29e377d75ce53ad42cafbf22f5fb7827c7e946ff4876b9a</hash>
        <hash alg="SHA3-384">3bc3110dafb8d5be16a39f3b2671a466463cd99eb39610c0e4719a7bf2d928f2ea213c734887c6926a07c4cca7769e4b</hash>
        <hash alg="SHA3-256">ba2608179fcf46e2291a90b9cbb4aa30d718e481f59c350cc21c73b88d826881</hash>
        <hash alg="SHA3-512">14c4edcd19702ef607d78826839d8a6d3a39157df54b89a801d3d3cbbe1307131a77671b041c761122730fb1387888c5ec2e46bdd80e1cb07f8f144676441824</hash>
      </hashes>
      <licenses>
        <license>
          <id>MIT</id>
          <url>https://opensource.org/licenses/MIT</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.qos.ch</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/qos-ch/slf4j</url></reference></externalReferences>
    </component>
  </components>
  <dependencies>
    <dependency ref="pkg:maven/org.apache.flink/flink-ml-servable-lib@2.2.0?type=jar">
      <dependency ref="pkg:maven/org.apache.flink/flink-ml-servable-core@2.2.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-core@1.15.1?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.flink/flink-ml-servable-core@2.2.0?type=jar">
      <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar"/>
      <dependency ref="pkg:maven/dev.ludovic.netlib/blas@2.2.1?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.12.6.1?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-core@2.12.4?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.12.4?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar"/>
    <dependency ref="pkg:maven/dev.ludovic.netlib/blas@2.2.1?type=jar">
      <dependency ref="pkg:maven/net.sourceforge.f2j/arpack_combined_all@0.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/net.sourceforge.f2j/arpack_combined_all@0.1?type=jar"/>
    <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.12.6.1?type=jar">
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.12.4?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-core@2.12.4?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.12.4?type=jar"/>
    <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-core@2.12.4?type=jar"/>
    <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    <dependency ref="pkg:maven/org.apache.flink/flink-core@1.15.1?type=jar">
      <dependency ref="pkg:maven/org.apache.flink/flink-annotations@1.15.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-metrics-core@1.15.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-asm-9@9.2-15.0?type=jar"/>
      <dependency ref="pkg:maven/com.esotericsoftware.kryo/kryo@2.24.0?type=jar"/>
      <dependency ref="pkg:maven/commons-collections/commons-collections@3.2.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-compress@1.21?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-guava@30.1.1-jre-15.0?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-force-shading@15.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.flink/flink-annotations@1.15.1?type=jar">
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-force-shading@15.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"/>
    <dependency ref="pkg:maven/org.apache.flink/flink-shaded-force-shading@15.0?type=jar"/>
    <dependency ref="pkg:maven/org.apache.flink/flink-metrics-core@1.15.1?type=jar">
      <dependency ref="pkg:maven/org.apache.flink/flink-annotations@1.15.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-force-shading@15.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.flink/flink-shaded-asm-9@9.2-15.0?type=jar"/>
    <dependency ref="pkg:maven/com.esotericsoftware.kryo/kryo@2.24.0?type=jar">
      <dependency ref="pkg:maven/com.esotericsoftware.minlog/minlog@1.2?type=jar"/>
      <dependency ref="pkg:maven/org.objenesis/objenesis@2.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.esotericsoftware.minlog/minlog@1.2?type=jar"/>
    <dependency ref="pkg:maven/org.objenesis/objenesis@2.1?type=jar"/>
    <dependency ref="pkg:maven/commons-collections/commons-collections@3.2.2?type=jar"/>
    <dependency ref="pkg:maven/org.apache.commons/commons-compress@1.21?type=jar"/>
    <dependency ref="pkg:maven/org.apache.flink/flink-shaded-guava@30.1.1-jre-15.0?type=jar"/>
  </dependencies>
</bom>
