<?xml version="1.0" encoding="UTF-8"?>
<bom serialNumber="urn:uuid:50a29d81-ae1f-47b3-ae96-3ae876548ffb" version="1" xmlns="http://cyclonedx.org/schema/bom/1.4">
  <metadata>
    <timestamp>2023-06-26T08:49:28Z</timestamp>
    <tools>
      <tool>
        <vendor>OWASP Foundation</vendor>
        <name>CycloneDX Maven plugin</name>
        <version>2.7.3</version>
        <hashes>
          <hash alg="MD5">ab886f1cb1a79b4244ac54dde22a0989</hash>
          <hash alg="SHA-1">9ed658496dfeef87fe6072b95c62ec37165cc741</hash>
          <hash alg="SHA-256">df9b43417bef6aeac86a393abcc1ac2ed0518239ba544aaeb595b9619c603503</hash>
          <hash alg="SHA-512">223da34bb51c5339e0f7285757608c1a56b1ea887f7ad835af9299fabacc693053163da74af352af86b16e18e04db730bd44214eda04291410c42b6ae657d85c</hash>
          <hash alg="SHA-384">3aaf057329ed0f90ec3a49a45b3cf4ec5ce637fd75d6202e9483fa4274cec3e7b74308016e146b6ba087df5fce9397bb</hash>
          <hash alg="SHA3-384">0e2ce6d2a0e0ddea90f63d2e521e640e83aeac1230c201042e542186e9f32bceaf54ed9d26e6a9dec04c0f7895bbae19</hash>
          <hash alg="SHA3-256">dd3ba8325a1a759e5a8f159a3363213d4a34d51120c4e4c77097a6779964fb33</hash>
          <hash alg="SHA3-512">e5f87b2380e9785330fce113fedd5866a1498d5a9e365b7b00cb6fea50fd47166c471a6347d46d3edb7dd247a583874169624db5be2845c5c87dfdbcd58d9e89</hash>
        </hashes>
      </tool>
    </tools>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-ml-tests-1.15@2.3.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-ml-tests-1.15</name>
      <version>2.3.0</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-ml-tests-1.15@2.3.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://www.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink-ml/flink-ml-tests-1.15</url></reference></externalReferences>
    </component>
  </metadata>
  <components>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-table-runtime@1.15.3?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-table-runtime</name>
      <version>1.15.3</version>
      <description>This module contains classes that are required by a task manager for
		execution of table programs.</description>
      <hashes>
        <hash alg="MD5">2d07901946033ccc611285914eb3ce7d</hash>
        <hash alg="SHA-1">87f28b33df20b23d12b0418aa51d9609798b9f9f</hash>
        <hash alg="SHA-256">a1990fe8f05f78638f53fcebf6bdef4360cf01487a7f59a2a9581dc236418189</hash>
        <hash alg="SHA-512">8f0977a70231579ae107680341844c228042989392a16a3fb090bc418be7eeae1923c168425c4b3349673479edace20413aa277c8272f2d4b81fef9fe1c2a01b</hash>
        <hash alg="SHA-384">4f4c96d76ca20fc8131b0a7d19218a18d8db9c463c11a7ad6ea716c5aa1a6f5e5358f392faebf101505f0cd6fc8c7713</hash>
        <hash alg="SHA3-384">24f41654d2d4d725320ee3ce4bf2f7951c5a4dfffe57080ef27f035da2236c564b736b20b16fc1f384aec6c14d18afcd</hash>
        <hash alg="SHA3-256">c5aaa4f5d80c60c1cba8a47958dcc8b41a4b37c692442799546975f453cbbe31</hash>
        <hash alg="SHA3-512">1f573001af4c761c2ebcc22af379b1dc5059c4dfb562b5c2a41e5d87feb5d7f4fdce74aae59a1a1feeb3b94b2d52d15862cd9499cf578c2801f6c233c4482612</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-table-runtime@1.15.3?type=jar</purl>
      <externalReferences><reference type="vcs"><url>https://github.com/apache/flink</url></reference><reference type="website"><url>https://www.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-table-common@1.15.3?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-table-common</name>
      <version>1.15.3</version>
      <description>This module contains extension points of the Table/SQL API.
		It allows for implementing user-defined functions, custom
		formats, etc. with minimal dependencies.</description>
      <hashes>
        <hash alg="MD5">fba972f90cd4a266aa4dd7bd514578dc</hash>
        <hash alg="SHA-1">5833ec6d1e23a8b4f3f5dba3fbf30449f2327eec</hash>
        <hash alg="SHA-256">b563604964357537af776c82eedd545af43fed921356422ead9e24a10892a10f</hash>
        <hash alg="SHA-512">d362954262ff75c5f4402ac253b008c0b47739ad82a62ff99da3662ee96e0e47aff03c0ceee07f07f15f7acbb2ab6da30ee0e14557c09f756ae941aacad1b890</hash>
        <hash alg="SHA-384">bc8e8647b4322c4d59d0a165143b1e0d6acb376555bad8d078d705b30941aef0005b23e4d03ba09e24e20e65d5c12354</hash>
        <hash alg="SHA3-384">194ad37aeeaee6f8d805bbda8004cabe560fb9100af8f143a9654e6a4f2a8f72a329bf1b50d227c555a349711647445c</hash>
        <hash alg="SHA3-256">d961ec323ebd72fa664f12e715df5bdd763ff5fe6f59a994facb0525e9f64536</hash>
        <hash alg="SHA3-512">f76577e67f90e97be955e17086c3fbed8e032b4382f7cd9c885a787d0f91ba0e3120a8aeebe1f596656056f2376c2ed2237b4e01f4df94b616ea5b64e0c299b2</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-table-common@1.15.3?type=jar</purl>
      <externalReferences><reference type="vcs"><url>https://github.com/apache/flink</url></reference><reference type="website"><url>https://www.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.ibm.icu/icu4j@67.1?type=jar">
      <group>com.ibm.icu</group>
      <name>icu4j</name>
      <version>67.1</version>
      <description>International Component for Unicode for Java (ICU4J) is a mature, widely used Java library
    providing Unicode and Globalization support</description>
      <hashes>
        <hash alg="MD5">046a5f59abf6b67a464dea584d11e59d</hash>
        <hash alg="SHA-1">2e159807158095566726600534034030dddab6d0</hash>
        <hash alg="SHA-256">c4eb904caf5fba968a2f1a3b8aef14df801e9329b21697209ca30bfcf153867d</hash>
        <hash alg="SHA-512">b3036b162356a0a5dad39eee611dae27c6fbe53f9e5ec1f3529ab02d49d97093b58602f43dd855433a0bbe02f6253e46a9d1899911c8e2e73001ab2c9a79d68d</hash>
        <hash alg="SHA-384">c2b28649d0ef9bf68f258a9f432c627a553ead79670f0a7ada3d986091a0001c5ab9eca372f792734bff733370a61fb1</hash>
        <hash alg="SHA3-384">3726bfa8b77bd0cdd66564944044d82dca3ee1fcf2594ebf1a7acc6752faf4c11892a1744af27e5528dc4b991e4cd0c0</hash>
        <hash alg="SHA3-256">cb19cec2baad1dc610267b2c98325f5c742230caf2247ef6297dfe8d9be9f11d</hash>
        <hash alg="SHA3-512">f46e4ead1cc1c05c3825716485ce79c890500a5356f8e7ca578f3080c09fb2460fb1aed81d65d345c402706906ea4e96afc0ff03c50fb0ac5bbacd351a8f11ec</hash>
      </hashes>
      <licenses>
        <license>
          <name>Unicode/ICU License</name>
          <url>https://raw.githubusercontent.com/unicode-org/icu/master/icu4c/LICENSE</url>
        </license>
      </licenses>
      <purl>pkg:maven/com.ibm.icu/icu4j@67.1?type=jar</purl>
      <externalReferences><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://unicode-org.atlassian.net/projects/ICU</url></reference><reference type="mailing-list"><url>http://sourceforge.net/mailarchive/forum.php?forum_name=icu-support</url></reference><reference type="vcs"><url>https://github.com/unicode-org/icu</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-table-api-java@1.15.3?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-table-api-java</name>
      <version>1.15.3</version>
      <description>This module contains the Table/SQL API for writing table programs
		within the table ecosystem using the Java programming language.</description>
      <hashes>
        <hash alg="MD5">357b2fcb3dc6861365845dec0d13cf05</hash>
        <hash alg="SHA-1">02335b676c1f83869261fac541b151793aae3d5a</hash>
        <hash alg="SHA-256">750c46f007aea6b2be4ed5b21f0c79b3cccad0048fa818860a55b0740770883f</hash>
        <hash alg="SHA-512">ef17b8f880f234701786b82b71e02cd820925269ec5c20d0d9fad894c13368c5471915d4635cfd3dbcbb5a0bfecd2d2d9013280d28b41e2cae17bddd61618d51</hash>
        <hash alg="SHA-384">f7e62a183ec7758cc30e437777ee81fd7325e618aea5e5b58ff559cc0c45cf6037ee541612cab50c2d792aa735eb905c</hash>
        <hash alg="SHA3-384">f2f9a2b585b19c570ce361be33297dae993cc0c5833b476fc37b8833972785fa4aeae9f3b08996d30a7544bc14ac5c76</hash>
        <hash alg="SHA3-256">fbef4b943b506e8cc54132db1e99a2042edf8301eaf45bce5a19e010aa5967ce</hash>
        <hash alg="SHA3-512">db62ca9dc4591c8713c500f4854c0d34080739113d799aeb4f1a51323901aaf610d0c150be26ed6a35c840da2504a577847ddf7c9f7ca696e16a666951d146ba</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-table-api-java@1.15.3?type=jar</purl>
      <externalReferences><reference type="vcs"><url>https://github.com/apache/flink</url></reference><reference type="website"><url>https://www.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-table-api-java-bridge@1.15.3?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-table-api-java-bridge</name>
      <version>1.15.3</version>
      <description>This module contains the Table/SQL API for writing table programs
		that interact with other Flink APIs using the Java programming language.</description>
      <hashes>
        <hash alg="MD5">1e47e1ecd717730fb520f5ef825afc0f</hash>
        <hash alg="SHA-1">1bbf436be6bf7ef65f5550d575dffd19499bd04e</hash>
        <hash alg="SHA-256">9ba371039bd0b619202a2b6353d9c8876f54436859d9c4d7b73191b70f5e843c</hash>
        <hash alg="SHA-512">cf86c8f6f1e4703e6738706b385025404a38bef5144ae60dfb851291a5175b4036073c94d07224f68740396a8b596f637ae17a455f95577027c983d1b2208b74</hash>
        <hash alg="SHA-384">752c41b9c9ba399430475504bf9055f6c178b932ff91c38a7c3bf787bd90a496a246a29fe6509d1aab814665309a10fe</hash>
        <hash alg="SHA3-384">1aa5ed6be2aa167798cbe18f01733d311cf1c89bac848d9336cc9edc4aa5d87f5de2cb643b50447c4813e4c31b621dd8</hash>
        <hash alg="SHA3-256">614a2be7eff126c89994687d6d62c7782dfe6beb5cf7d4ee8795cd79cba23120</hash>
        <hash alg="SHA3-512">69b4140ea7dfbf47c90afe2acb8369f3b3d58204d58a3c67b44c3f12aff7e98c1d0473e2320ff1d6fdb8d6676d1fcddb8e50c2c0ad9c670c67c442b94e0e40d2</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-table-api-java-bridge@1.15.3?type=jar</purl>
      <externalReferences><reference type="vcs"><url>https://github.com/apache/flink</url></reference><reference type="website"><url>https://www.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-table-api-bridge-base@1.15.3?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-table-api-bridge-base</name>
      <version>1.15.3</version>
      <description>This module contains the base code for bridging between Table API and DataStream API for
		both Java and Scala.</description>
      <hashes>
        <hash alg="MD5">83282472d5cb4b28ce058c6054e78c0f</hash>
        <hash alg="SHA-1">a6a7b5a728fae573013a11327038f4bb97cc4fa2</hash>
        <hash alg="SHA-256">58f6bbb21f0d7fa39e97a3c6e8ea553f2d1ac0361bc09abe642b3f780972c910</hash>
        <hash alg="SHA-512">49848a54369ff14ba312d040622c795b9a021a22ef4ebda548e854a3553069930e28cbe092c053f0d3922405ef0422e538f97a39d1c519da8fca25c1b9a19066</hash>
        <hash alg="SHA-384">50b02315ff9518a11c62eac891784b0fd19b7501514f090c1765acd49234083a3475ee128665c8279c50284f1bd619fd</hash>
        <hash alg="SHA3-384">7efd8b7dae6fda4462de9ddedb84a5950f7567ee7b380ac308d372eafd397f1d1a2abdee18dad485a2853d02ad0bb161</hash>
        <hash alg="SHA3-256">7d9fd91439a04df6064da7b87d1d0a4cb9bc9978c91024e8a933d036b9a0d5bb</hash>
        <hash alg="SHA3-512">ccd05bc1b8b3b64f6cbef7fc296e7216cf54246229904554651ae22b7edcfa6d58ce9e1af27ecc2a74a06a8040df5fc66cb3168b31705fedb67814e47cdc3225</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-table-api-bridge-base@1.15.3?type=jar</purl>
      <externalReferences><reference type="vcs"><url>https://github.com/apache/flink</url></reference><reference type="website"><url>https://www.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-cep@1.15.3?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-cep</name>
      <version>1.15.3</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <hashes>
        <hash alg="MD5">326916db80ce8ac3174cf59a14a2b85b</hash>
        <hash alg="SHA-1">dfce5dd505da28457b4da7f863324ae2b5860beb</hash>
        <hash alg="SHA-256">669de9713a89b79b263411611b7374b5ed08f54ab34f89f57cdcab0d5fa8a535</hash>
        <hash alg="SHA-512">3ac477c0ab16ab8f5eafc4cef8ec3ee51d0e897398ca9bc4deafe68af58882d4f1acc511263511aa58e8ba855d2a976dac200f403ff99c86c40647525d3210fb</hash>
        <hash alg="SHA-384">57a01df0ed3b75a77cd98613d90074e01ca2e40d72c53d6da7ea6e500a69a065cd763100180b8487d9736bb480a4f14f</hash>
        <hash alg="SHA3-384">e1974f620b58f8bf356c82072c8a9cb0f6eb9eec4699ab9aa5a49ab08b0e501141a3de65af4a4114ef85c35e6e7839fd</hash>
        <hash alg="SHA3-256">d1cbd257c6d613ef830044fe73c17cdadeca8b9db289a78194777ee93d7e4cef</hash>
        <hash alg="SHA3-512">f3ce389edd8fd9cb8aa156ebb20a23a8415f16b644f655cafc6501c6da504f4d644608ca414272bfa157788c0523c705c13e9d6c3bf5e385b387ebddff75f09c</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-cep@1.15.3?type=jar</purl>
      <externalReferences><reference type="vcs"><url>https://github.com/apache/flink</url></reference><reference type="website"><url>https://www.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-core@1.15.3?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-core</name>
      <version>1.15.3</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">700536a7c8473c58be73bf9d5a50aec5</hash>
        <hash alg="SHA-1">a36ea8f29ac7026b2edc7cd8ca82fd353ac1aed4</hash>
        <hash alg="SHA-256">139a41daff39d2fa9a9d358a9aabffb93f6280ed492449fc87cfae402e5f88f6</hash>
        <hash alg="SHA-512">d453511ad0eaee6c2bfa669a493ca7ff384c765d08029975ce3e8dfe97239486e9acd6bf98b8ac801cd80d60a1cea1a905136aa908314921ce9a588ae12774a5</hash>
        <hash alg="SHA-384">fffa5ec4b09ea389ef3315bce01af0065a3b6ccccae92fcc792d788372892369251e18f71a839c76c2344bde197ea0ca</hash>
        <hash alg="SHA3-384">a4b09a2fa45cb2a37d4eea3a00035964d3a70171ea16ee332b38909b6e9543cf6106bf340bc564817375acde348857e4</hash>
        <hash alg="SHA3-256">a59526b52c3254f4698925b1800308eb07bc3c2226c4f620f44fcaef11eb295e</hash>
        <hash alg="SHA3-512">7c91586139e868303286d3518dc3016ea1659b5487806621ac3cf28758c4671aa4e21fa4ce6c7b341973d6075c7068724decef41ec5acd45cf38856b1bdc0583</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-core@1.15.3?type=jar</purl>
      <externalReferences><reference type="vcs"><url>https://github.com/apache/flink</url></reference><reference type="website"><url>https://www.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-annotations@1.15.3?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-annotations</name>
      <version>1.15.3</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <hashes>
        <hash alg="MD5">c6406e8997648bc16faf3536ac2daaec</hash>
        <hash alg="SHA-1">5f208474ce7679d9b1fb34d2969f709331d33a96</hash>
        <hash alg="SHA-256">52a1acd88ab089ad98f989ada700df21cd2920d319b2e906020e227a01dd6f89</hash>
        <hash alg="SHA-512">b653eebe8070ae90293323d77244153844e467ae131f41b1c4a59705b7efbc76406eec10d3c950beacea761024a30b4a503191467ea487ab82e9648037cdeb05</hash>
        <hash alg="SHA-384">07c58771bc846b1eb0e06c5825d3ae3796d4b91a1cf7c4a280acb2a92c490e3c94bf25e955dcce02e076244505f7094f</hash>
        <hash alg="SHA3-384">2d5282e9159906b87994a35e8b80506277a0f64515004375e860557b4eade6eb3f612fcc2aa0672fcba9767e9cf62423</hash>
        <hash alg="SHA3-256">48c7e456dca1a28f0db2934f3e2cc53ca396bf2c42892ed8f535c4c2468b7fe6</hash>
        <hash alg="SHA3-512">3663a9906ae04444aeebad20e0ee0e7e6c681b6c853b820e57e24b0d90822701869a430aba03f735c490e4b47efe9786d528888489db1f2517248d70fbea1a5f</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-annotations@1.15.3?type=jar</purl>
      <externalReferences><reference type="vcs"><url>https://github.com/apache/flink</url></reference><reference type="website"><url>https://www.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-metrics-core@1.15.3?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-metrics-core</name>
      <version>1.15.3</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <hashes>
        <hash alg="MD5">60269675e0e371d294e6ba0b9abacd20</hash>
        <hash alg="SHA-1">bcc5cc4bad581628f9c555f264dabfb824880587</hash>
        <hash alg="SHA-256">61749685e52e011f326353159ce152b3a5080ff9147f86e37eb6caf7d357902c</hash>
        <hash alg="SHA-512">8c276031da2377440de927fdc4abc62f14fa737852bddf4c2c10fd7d82c468a12f67098246aa9c708a3186dbc009fb2b69cf00f0b5c58979e9609cc0ff6a2b7a</hash>
        <hash alg="SHA-384">8138bef0fc1c4117ddc00cd58e8bc6a91de366b634c64580f75d9f4b1dd2bace349535af051a9fe9afbab15786415f28</hash>
        <hash alg="SHA3-384">aa91202d58e6fb75ad1f6d74804ad72da2ac867de162582f08da067c3214b7d4722e3351304689455c70de08ee1ee60c</hash>
        <hash alg="SHA3-256">f392151cb94b8d6b1655123d5d4d912880542b9181eda74d465b621a4a41eb60</hash>
        <hash alg="SHA3-512">8f7d730fe66cdb909f42c486a7743d9388850f3b95c8666d7eacf8ae13e409d5a2cf3570ee9be96efa2374a4c65549950c0385c3812d66202fa8e0db726840aa</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-metrics-core@1.15.3?type=jar</purl>
      <externalReferences><reference type="vcs"><url>https://github.com/apache/flink</url></reference><reference type="website"><url>https://www.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-shaded-asm-9@9.2-15.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-shaded-asm-9</name>
      <version>9.2-15.0</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <hashes>
        <hash alg="MD5">4b57b7ead9578721e3135394fa69ae29</hash>
        <hash alg="SHA-1">f89d00906d3ffcf97b049cdc6d6e70dcb101a4cd</hash>
        <hash alg="SHA-256">9692cd3f8953c74920bbbf17002bf874953871564768b2f0a97199bfed475e3f</hash>
        <hash alg="SHA-512">f8e86733ae3e52482bf8ed74370827a4405d362a5bbd63bc1a2652db75845eef9c43d687d3f3663e2bfcb030acfaee2b5fbdce9eee873cb4887c66c9ccebf8ef</hash>
        <hash alg="SHA-384">6542af42f033dce80d803348694a998d7b5e02dd49a15378696a0e57f7377192ae1f5c17744629145dba5e14d8110c96</hash>
        <hash alg="SHA3-384">ea6d6901d3c4a7d731de82d91fc1791ece8a86be02ecdcb948f211abc58ad61cb0fa199345c9163abdfd6b41dc238dd9</hash>
        <hash alg="SHA3-256">2e5ef369755a9302ad55865e3027e76f48b9c8ad53e2b7e290c07d4395ad9421</hash>
        <hash alg="SHA3-512">51acf643099af357dbbe5720c6f1e54b1ff9f36007f2f3c2a6b14221f750d7201ee2c2ef90c0cd654ddcc083ed8dfafcaf13dbc1be55460ff9edd731a09511e3</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-shaded-asm-9@9.2-15.0?type=jar</purl>
      <externalReferences><reference type="vcs"><url>https://github.com/apache/flink-shaded</url></reference><reference type="website"><url>https://www.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-lang3@3.3.2?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.commons</group>
      <name>commons-lang3</name>
      <version>3.3.2</version>
      <description>Apache Commons Lang, a package of Java utility classes for the
  classes that are in java.lang's hierarchy, or are considered to be so
  standard as to justify existence in java.lang.</description>
      <hashes>
        <hash alg="MD5">3128bf75a2549ebe38663401191bacab</hash>
        <hash alg="SHA-1">90a3822c38ec8c996e84c16a3477ef632cbc87a3</hash>
        <hash alg="SHA-256">6b81d10754dadf184d386011486e6509c2cc0c3d33565ced4fb4402b9413d47d</hash>
        <hash alg="SHA-512">3e6eb74b61c42d22de48c29e7e52057dd25d9f93857dc7bffc7052a56449f62153c487877d6a019adabbaee90e32085b104acc591ea9731839f8148dc4059e10</hash>
        <hash alg="SHA-384">06bc46540d0b297f595c9625ff0b272a38faf9ebcaf822b687a4fc8bd7d01e4954cad866d54c4ae17cd787d61f852797</hash>
        <hash alg="SHA3-384">b91600411b010ecde5ba763c1930f1858044904e01aa7088c42e95dcdbce010a73a79baed47284c1d8dc6918fb73571c</hash>
        <hash alg="SHA3-256">d78a4436d103be34ae2bd23c8cb78f504c77960559c57fc09b970d2b48a73e2b</hash>
        <hash alg="SHA3-512">2716f57d20fb5bcd5ac6b0642575de79055d9e38b0836bdc3780eeee4bb5bb69538acd4f61adf82424f806fd4bd3629104880501314450047a9365b44622c3be</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.commons/commons-lang3@3.3.2?type=jar</purl>
      <externalReferences><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/LANG</url></reference><reference type="vcs"><url>http://svn.apache.org/viewvc/commons/proper/lang/trunk</url></reference><reference type="build-system"><url>http://vmbuild.apache.org/continuum/</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="website"><url>http://www.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.esotericsoftware.kryo/kryo@2.24.0?type=jar">
      <group>com.esotericsoftware.kryo</group>
      <name>kryo</name>
      <version>2.24.0</version>
      <description>Fast, efficient Java serialization</description>
      <hashes>
        <hash alg="MD5">6cf0fa5b5d4f6b8226fd4a4bfb7532b8</hash>
        <hash alg="SHA-1">0c6b206e80cfd97e66a1364003724491c757b92f</hash>
        <hash alg="SHA-256">7e56b32c635058f9aa2820f88919ab702d029cbcd15285da9992e36cc0ae52f2</hash>
        <hash alg="SHA-512">a4c6ce768528a03c219cc6a41b22293f78e433c849c90391b64dda3f2376fd79951a89c5f4e6701bcbcb6eee9abffe2390cfb12dba3b885e4a3d411a26b78f40</hash>
        <hash alg="SHA-384">678ad1b7f4d99910b8ff44a6c8f78ccae91f823161ce23de39077397352919b7257e1e6e0dea90900be973291ea19282</hash>
        <hash alg="SHA3-384">671fc6aa9905f8131482e1d0f3fe26126562b13777893d51a66d0f84fc6f2aa3f13947e488ffba8f09c31a2cc0e9758a</hash>
        <hash alg="SHA3-256">46e89d8f12cbead0fe29ad707d5dba96e880dacce2a6b374ac4bf1ced9f36a79</hash>
        <hash alg="SHA3-512">c7cde437eef8343eccd4c5ecb8de5683529e3d4d8262e8cd1f7b7d0df9c632253b979737fd1b486314ec2728aee3a3782dee5d2032621485db4aa3b2a8262741</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.esotericsoftware.kryo/kryo@2.24.0?type=jar</purl>
      <externalReferences><reference type="vcs"><url>https://github.com/EsotericSoftware/kryo</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.esotericsoftware.minlog/minlog@1.2?type=jar">
      <group>com.esotericsoftware.minlog</group>
      <name>minlog</name>
      <version>1.2</version>
      <description>Minimal overhead Java logging</description>
      <hashes>
        <hash alg="MD5">f7cfbdf63b67df0bbfa4c7cb260885bc</hash>
        <hash alg="SHA-1">59bfcd171d82f9981a5e242b9e840191f650e209</hash>
        <hash alg="SHA-256">a678cb1aa8f5d03d901c992c75741841d98a9bc3d55dad02e84d65315c4e60f2</hash>
        <hash alg="SHA-512">7b4082766ad740d86708783f3b08780ed72dd18062aa9ba422c4b9016b332d2334ae511f50ef7d89e4eedbdac5cebc51ab6ddaf4d1eea857a3250eb5962f0d08</hash>
        <hash alg="SHA-384">932a282a9c06864001f8212199e4be05543609adbd985c5f4517ee6eba734acd3fd8812213bc0c98af264637cbf9c78d</hash>
        <hash alg="SHA3-384">f36e9f494611c85f59febfef9ce93fc68f1f17db881400456204c1f099e623e334d2f10b41018392877c8af13de7f59a</hash>
        <hash alg="SHA3-256">37422ef85dce86abd8b14b4c9f7ad77261d728a472126c8eca38f356c98da395</hash>
        <hash alg="SHA3-512">74ba47271899706a284e942482ff41649ffd93e57a29320732e57864c47f3f0431377130ca7afb5e64cc6b68d4e5a5cdfc38027966cda4b5e512e3ce02bd8a99</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.esotericsoftware.minlog/minlog@1.2?type=jar</purl>
      <externalReferences><reference type="vcs"><url>http://minlog.googlecode.com/svn/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.objenesis/objenesis@2.1?type=jar">
      <publisher>Joe Walnes, Henri Tremblay, Leonardo Mesquita</publisher>
      <group>org.objenesis</group>
      <name>objenesis</name>
      <version>2.1</version>
      <description>A library for instantiating Java objects</description>
      <hashes>
        <hash alg="MD5">32ccb1d20a42b5aaaceb90c9082a2efa</hash>
        <hash alg="SHA-1">87c0ea803b69252868d09308b4618f766f135a96</hash>
        <hash alg="SHA-256">c74330cc6b806c804fd37e74487b4fe5d7c2750c5e15fbc6efa13bdee1bdef80</hash>
        <hash alg="SHA-512">1dec9ee30812b8006e536a2749c5781ccdc4b446539efb6fa534f22e70562033876bf2eb22c6946d617695729bd65f0f65b984f15f05ac63db5bed215e74427c</hash>
        <hash alg="SHA-384">657b8a3b80a5475f198425396f7264301f9e0f3ad5dc336ef0c7b46874f5544861a8a2fd48cdb5f672e199a6935c19d1</hash>
        <hash alg="SHA3-384">e526937d722aad1857869b2d2a0ba5c88815609308c00b776b51614e501de5d93d54978f5bb9cf496bdcc28b1dbd5775</hash>
        <hash alg="SHA3-256">436cfbb9c208dd03c951708fa4ba6525e2a0b26a873d594a6fbe93ab49082c97</hash>
        <hash alg="SHA3-512">1e7ee9411df7cfbf0669c38e4ef029155dd718b91db1d182841c740caf8c1057ed273a77f8e32d724c48aaf96815a26ab099c776511ffc5ef351d70ebfa70344</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.objenesis/objenesis@2.1?type=jar</purl>
      <externalReferences><reference type="distribution"><url>http://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/easymock/easymock</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-collections/commons-collections@3.2.2?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>commons-collections</group>
      <name>commons-collections</name>
      <version>3.2.2</version>
      <description>Types that extend and augment the Java Collections Framework.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">f54a8510f834a1a57166970bfc982e94</hash>
        <hash alg="SHA-1">8ad72fe39fa8c91eaaf12aadb21e0c3661fe26d5</hash>
        <hash alg="SHA-256">eeeae917917144a68a741d4c0dff66aa5c5c5fd85593ff217bced3fc8ca783b8</hash>
        <hash alg="SHA-512">51c72f9aca7726f3c387095e66be85a6df97c74b00a25434b89188c1b8eab6e2b55accf7b9bd412430d22bd09324dec076e300b3d1fa39fccad471f0f2a3da16</hash>
        <hash alg="SHA-384">dd4e99b3314bd3c1a1ee26296615d9e44dadf7a1f8a7bbba44fb95121803d331e36d4cca4260e7609af78a47ba3e4073</hash>
        <hash alg="SHA3-384">8ce03528e4a6e95c44283b56eca87e6a6d3bf1363411a55b538f4f9110cf7470581ea5c73925e877ddab08dba0603f40</hash>
        <hash alg="SHA3-256">fd3d6134b5f07077b82ccf93d148dacf7c4ce5c971209510edd0e77e3e38c19e</hash>
        <hash alg="SHA3-512">c2a523916fb7c7d55a05d5e3d9e9b33000733f4b20a71be174e4e093e3f06ea78ad831edd1505527da7388105f8647efb7d5666ba852c90b4e2d5bb74256efbc</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/commons-collections/commons-collections@3.2.2?type=jar</purl>
      <externalReferences><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/COLLECTIONS</url></reference><reference type="vcs"><url>http://svn.apache.org/viewvc/commons/proper/collections/trunk</url></reference><reference type="build-system"><url>https://continuum-ci.apache.org/</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="website"><url>http://www.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-compress@1.21?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.commons</group>
      <name>commons-compress</name>
      <version>1.21</version>
      <description>Apache Commons Compress software defines an API for working with
compression and archive formats.  These include: bzip2, gzip, pack200,
lzma, xz, Snappy, traditional Unix Compress, DEFLATE, DEFLATE64, LZ4,
Brotli, Zstandard and ar, cpio, jar, tar, zip, dump, 7z, arj.</description>
      <hashes>
        <hash alg="MD5">2a713d10331bc4e13459a3dc0463f16f</hash>
        <hash alg="SHA-1">4ec95b60d4e86b5c95a0e919cb172a0af98011ef</hash>
        <hash alg="SHA-256">6aecfd5459728a595601cfa07258d131972ffc39b492eb48bdd596577a2f244a</hash>
        <hash alg="SHA-512">c92d9a12547aab475e057955ad815fdfe92ff44c78383fa5af54b089f1bff5525126ef6aef93334f3bfc22e2fef4ad0d969f69384e978a83a55f011a53e7e471</hash>
        <hash alg="SHA-384">da56f95d420cd7278cee646f4cd0e7a5ee12b6a2894efaec12f0ff7b56c3d43e5db736fe1ed66ff91118b16f2d64ebef</hash>
        <hash alg="SHA3-384">6d3dc0198dd523a49fa94e054841aece853577b5c3ea1029fc288ad9ff580ab1b65ea99ddbe58c42125054e8c43be461</hash>
        <hash alg="SHA3-256">37d4a014b50393793d35c70431bd8a1842c197d854c6f174dfa946b9edc2b841</hash>
        <hash alg="SHA3-512">61609f60746406a7cb1ef3f979488beca6674fde208c9025d3fdee115de4767e8a4a1ee38f5bf79ac0104505ddb3558f1feeba5e318d6545647120ac60db6b89</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.commons/commons-compress@1.21?type=jar</purl>
      <externalReferences><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/COMPRESS</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=commons-compress.git</url></reference><reference type="build-system"><url>https://builds.apache.org/</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="website"><url>https://www.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-java@1.15.3?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-java</name>
      <version>1.15.3</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <hashes>
        <hash alg="MD5">51da4fbd7cdc5361f1e6e96ef351b1de</hash>
        <hash alg="SHA-1">7d141878b5f232d6ecf165127ccf147aadb2ab07</hash>
        <hash alg="SHA-256">85db9a195fee2dd88fa4310253a82991760b09f0182f0ac634a6077268981255</hash>
        <hash alg="SHA-512">9e0168f20869411fcffa48063a1b39172922297a94ed74c99c37b28142bba3f232f2f0298c2be51c699ec99c780c3bd937d49d0a439f788e5fa8b7725f0481e5</hash>
        <hash alg="SHA-384">02be9881db733b2f2a4ccf59242d95df5f7c9f8bf3126d2e79ded0e867d72fda85e140e43f341756f7557cb1a7ae0f60</hash>
        <hash alg="SHA3-384">9681bb6328797e499a443599da10d48db3e31d0532096bf49967f16f37d374d4dd2357fd54429205c1e1a9b053db7331</hash>
        <hash alg="SHA3-256">a940f73c40b83f91da33327310ba0b0ee884d6aeb4df9bc131fadff040023b52</hash>
        <hash alg="SHA3-512">ea37112d5ddf8b40a211047e6dff0de3c2a3cc809312b8621f9b215c3212ac196e6e5f99ad06c8463f1048c6edee4c2fffce38f2c53874b815eb8c719757bd2b</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-java@1.15.3?type=jar</purl>
      <externalReferences><reference type="vcs"><url>https://github.com/apache/flink</url></reference><reference type="website"><url>https://www.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.twitter/chill-java@0.7.6?type=jar">
      <publisher>com.twitter</publisher>
      <group>com.twitter</group>
      <name>chill-java</name>
      <version>0.7.6</version>
      <description>chill-java</description>
      <hashes>
        <hash alg="MD5">886eb8ef6db3880433f4a8e10ef37300</hash>
        <hash alg="SHA-1">a74b8d019d6941d82ff86d1612e382f4a0ae8259</hash>
        <hash alg="SHA-256">f7c41a2257be11e6c9bca97095c8f4b0299626941a3508469f90622eb8f8368e</hash>
        <hash alg="SHA-512">dc9973909b87cfb85ee45c90662612dd2bc137b7510172221eb47020f76b23eb3ea76c6b4fba4cee5d81e910f87aba71359136d33ae0f6424e3ce7123bf77dbf</hash>
        <hash alg="SHA-384">41e7faed7c2c22987868fba7cd6dac0d59d174d82d841ba4e5aa8675cc9265bf9d9df021553a781cfa24c4c9c7a35c5c</hash>
        <hash alg="SHA3-384">32751d6ecd77676ffa11a109dead8c8d19a6d1d78576b19ac5a8323d9446ba51fba87e0d60820dd2bac69fb705aa2061</hash>
        <hash alg="SHA3-256">6bdf2ed042c5b7f4f4d11bb52e448ce740e18563364f66730ca2b6b4eadf0401</hash>
        <hash alg="SHA3-512">0ab14bee65d85803d5080f3b0ad86183daafb61e3ca3a610e199bc04a11421b45436e405dc3c227b5d80a64178ca82739eccb5ad8ee157efa925d484d9daae28</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.twitter/chill-java@0.7.6?type=jar</purl>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-shaded-guava@30.1.1-jre-15.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-shaded-guava</name>
      <version>30.1.1-jre-15.0</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <hashes>
        <hash alg="MD5">290298c9d2f321101d156c9957aad688</hash>
        <hash alg="SHA-1">bd226b0497e69b57de5c9868cbf5489a573d52a9</hash>
        <hash alg="SHA-256">2991b8a58d676c0603920a5242895a06456105eedea16045a67fd0e06cc11e58</hash>
        <hash alg="SHA-512">952834dc99fcf3740474164bdf4db0cda2852835651617b71ae582eaafd31d7e88ce3d8f5d138c4093bba472775bade6a3e97ae45619fdfadc7526bcab8d9606</hash>
        <hash alg="SHA-384">b1e7e8c741419f3d3467878818a311462cb0ea1a11ca3e843dbce9665b8d67f675651883a7ed328eb86c85c7eaca89af</hash>
        <hash alg="SHA3-384">d97ceac9ddc23acf37d21abaec7ae340b6ef8e569288fb4cc1483db5bc21beb22fc859e7833c18119c6a471b8d1fdd13</hash>
        <hash alg="SHA3-256">d53cc3f5599c7b42fdd73d32dc702ce4b17ac04b98bfad457798adbe3e5a42cc</hash>
        <hash alg="SHA3-512">f9d2a748083a529853527bfafdcc1bd82d51e6ced2f7c99c39f6ef56f1030547600b448dbef9a8438a4073c169966c55f44dccdbdcd58e71c860824dec822b13</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-shaded-guava@30.1.1-jre-15.0?type=jar</purl>
      <externalReferences><reference type="vcs"><url>https://github.com/apache/flink-shaded</url></reference><reference type="website"><url>https://www.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-math3@3.6.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.commons</group>
      <name>commons-math3</name>
      <version>3.6.1</version>
      <description>The Apache Commons Math project is a library of lightweight, self-contained mathematics and statistics components addressing the most common practical problems not immediately available in the Java programming language or commons-lang.</description>
      <hashes>
        <hash alg="MD5">5b730d97e4e6368069de1983937c508e</hash>
        <hash alg="SHA-1">e4ba98f1d4b3c80ec46392f25e094a6a2e58fcbf</hash>
        <hash alg="SHA-256">1e56d7b058d28b65abd256b8458e3885b674c1d588fa43cd7d1cbb9c7ef2b308</hash>
        <hash alg="SHA-512">8bc2438b3b4d9a6be4a47a58410b2d4d0e56e05787ab24badab8cbc9075d61857e8d2f0bffedad33f18f8a356541d00f80a8597b5dedb995be8480d693d03226</hash>
        <hash alg="SHA-384">95d1186d9ca06a3ea2e6437ddec3a55698e2493d3e72f6f554746b74fa929892bd71a2ab501a4e7b1ce56b7cd64e7ab4</hash>
        <hash alg="SHA3-384">f85bb3e46a00fc4940a3be1331301302b0eb728e2d1fe2c1842d4761e5a0bc7a420c0c705ae60250ca1c7b03d3694b9e</hash>
        <hash alg="SHA3-256">919c15ae4b1aef2a58aa6ea4b700bc5562e78dbc382f3393169425ca91ad368c</hash>
        <hash alg="SHA3-512">dbe54d586c898cdbd7df6c31c131ca3525db17fcea5c7f5da8cbfe617e2afc667289290c76771ec5c9567a56fb2b177b0a31d67abcc656410c90287da4d88999</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.commons/commons-math3@3.6.1?type=jar</purl>
      <externalReferences><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/MATH</url></reference><reference type="vcs"><url>https://git-wip-us.apache.org/repos/asf?p=commons-math.git</url></reference><reference type="build-system"><url>https://continuum-ci.apache.org/</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="website"><url>http://www.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar">
      <group>com.google.code.findbugs</group>
      <name>jsr305</name>
      <version>1.3.9</version>
      <description>JSR305 Annotations for Findbugs</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">1d5a772e400b04bb67a7ef4a0e0996d8</hash>
        <hash alg="SHA-1">40719ea6961c0cb6afaeb6a921eaa1f6afd4cfdf</hash>
        <hash alg="SHA-256">905721a0eea90a81534abb7ee6ef4ea2e5e645fa1def0a5cd88402df1b46c9ed</hash>
        <hash alg="SHA-512">06da282cfd8e30d9f8cf17702b8709172b00e22b75a627a1d85f8989615b8a1a401bc25d9aee7b14aed1d9b5df73bf2ea8d66f9c8468d9577c29f0ccfa2cc70a</hash>
        <hash alg="SHA-384">56e6b41ef62eb5edfed0203802cefae9c2df86388148e420bb0c687abb2b80e14d5c2a82d5b35dce4badaf148f94eada</hash>
        <hash alg="SHA3-384">58c3bf89fa1afa75c2c5078159fd28e27b2273d437f26aaaa7391310b6f0823f3cf476a24f5631c0881f3f7e946d99be</hash>
        <hash alg="SHA3-256">c333ea5faedfa78e0614a2620438d5724eab093df4e960918391b6a44c2915b0</hash>
        <hash alg="SHA3-512">67ec31448e156cc72dd036060b460bb2667a13b1cbe500b6b7eed3235b1994b44c39f440ebd07b21ec9595b166ad61121d4f6a132b5b313c558ab21b72599425</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar</purl>
      <externalReferences><reference type="vcs"><url>http://findbugs.googlecode.com/svn/trunk/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-shaded-force-shading@15.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-shaded-force-shading</name>
      <version>15.0</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <hashes>
        <hash alg="MD5">8394d7e7f3ad54c3c895ca79deb90a58</hash>
        <hash alg="SHA-1">68f5786fa0554e0a567a15bec1618682d1695e80</hash>
        <hash alg="SHA-256">aff27589f46e4a50896fc64a768740617dd60ea8aa1ea22098e0193511f99bdf</hash>
        <hash alg="SHA-512">1bfbac436da364fe9373bbba3b1db47ac137ca5b22b95060619182f9fe3076036a43fd9116989c63bb0a1eb7a218ef7d9cc635c34119aa046c916c7b23df6374</hash>
        <hash alg="SHA-384">3f7bc60ade0ba76f293a9f8592d4f88ce1c4da36797e7946635bebe12b67271781a321dc67f3bad6635669b27609865a</hash>
        <hash alg="SHA3-384">e247180b5095da58066f39973e5d9e851039a57153889b9394a23b678ab54f05218440810128215be8d86ab602027485</hash>
        <hash alg="SHA3-256">9fcf057f3aeb570d1d087ca11bfa1bf916329fdf659479fe1072b477d01c8f21</hash>
        <hash alg="SHA3-512">d440d06d41d5c48988a617992fd2e5360723a5e8845c547a3a6d8cff805fcc94f5220ab813b45dc239943a874420ccd58f0937e54015f38eac9c45f43c8a88b5</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-shaded-force-shading@15.0?type=jar</purl>
      <externalReferences><reference type="vcs"><url>https://github.com/apache/flink-shaded</url></reference><reference type="website"><url>https://www.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar">
      <publisher>QOS.ch</publisher>
      <group>org.slf4j</group>
      <name>slf4j-api</name>
      <version>1.7.36</version>
      <description>The slf4j API</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">872da51f5de7f3923da4de871d57fd85</hash>
        <hash alg="SHA-1">6c62681a2f655b49963a5983b8b0950a6120ae14</hash>
        <hash alg="SHA-256">d3ef575e3e4979678dc01bf1dcce51021493b4d11fb7f1be8ad982877c16a1c0</hash>
        <hash alg="SHA-512">f9b033fc019a44f98b16048da7e2b59edd4a6a527ba60e358f65ab88e0afae03a9340f1b3e8a543d49fa542290f499c5594259affa1ff3e6e7bf3b428d4c610b</hash>
        <hash alg="SHA-384">2b14ad035877087157e379d3277dcdcd79e58d6bdb147c47d29e377d75ce53ad42cafbf22f5fb7827c7e946ff4876b9a</hash>
        <hash alg="SHA3-384">3bc3110dafb8d5be16a39f3b2671a466463cd99eb39610c0e4719a7bf2d928f2ea213c734887c6926a07c4cca7769e4b</hash>
        <hash alg="SHA3-256">ba2608179fcf46e2291a90b9cbb4aa30d718e481f59c350cc21c73b88d826881</hash>
        <hash alg="SHA3-512">14c4edcd19702ef607d78826839d8a6d3a39157df54b89a801d3d3cbbe1307131a77671b041c761122730fb1387888c5ec2e46bdd80e1cb07f8f144676441824</hash>
      </hashes>
      <licenses>
        <license>
          <id>MIT</id>
          <url>https://opensource.org/licenses/MIT</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.qos.ch</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/qos-ch/slf4j</url></reference></externalReferences>
    </component>
  </components>
  <dependencies>
    <dependency ref="pkg:maven/org.apache.flink/flink-ml-tests-1.15@2.3.0?type=jar">
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
  </dependencies>
</bom>
