<?xml version="1.0" encoding="UTF-8"?>
<bom serialNumber="urn:uuid:aa791659-6dec-4467-a3a9-653a0d08957d" version="1" xmlns="http://cyclonedx.org/schema/bom/1.4">
  <metadata>
    <timestamp>2023-04-12T05:50:32Z</timestamp>
    <tools>
      <tool>
        <vendor>OWASP Foundation</vendor>
        <name>CycloneDX Maven plugin</name>
        <version>2.7.3</version>
        <hashes>
          <hash alg="MD5">ab886f1cb1a79b4244ac54dde22a0989</hash>
          <hash alg="SHA-1">9ed658496dfeef87fe6072b95c62ec37165cc741</hash>
          <hash alg="SHA-256">df9b43417bef6aeac86a393abcc1ac2ed0518239ba544aaeb595b9619c603503</hash>
          <hash alg="SHA-512">223da34bb51c5339e0f7285757608c1a56b1ea887f7ad835af9299fabacc693053163da74af352af86b16e18e04db730bd44214eda04291410c42b6ae657d85c</hash>
          <hash alg="SHA-384">3aaf057329ed0f90ec3a49a45b3cf4ec5ce637fd75d6202e9483fa4274cec3e7b74308016e146b6ba087df5fce9397bb</hash>
          <hash alg="SHA3-384">0e2ce6d2a0e0ddea90f63d2e521e640e83aeac1230c201042e542186e9f32bceaf54ed9d26e6a9dec04c0f7895bbae19</hash>
          <hash alg="SHA3-256">dd3ba8325a1a759e5a8f159a3363213d4a34d51120c4e4c77097a6779964fb33</hash>
          <hash alg="SHA3-512">e5f87b2380e9785330fce113fedd5866a1498d5a9e365b7b00cb6fea50fd47166c471a6347d46d3edb7dd247a583874169624db5be2845c5c87dfdbcd58d9e89</hash>
        </hashes>
      </tool>
    </tools>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-ml-tests@2.2.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-ml-tests</name>
      <version>2.2.0</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-ml-tests@2.2.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://www.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink-ml/flink-ml-tests</url></reference></externalReferences>
    </component>
  </metadata>
  <components>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-table-runtime@1.15.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-table-runtime</name>
      <version>1.15.1</version>
      <description>This module contains classes that are required by a task manager for
		execution of table programs.</description>
      <hashes>
        <hash alg="MD5">92f5cb8058cd3aed886ecf97dec1b379</hash>
        <hash alg="SHA-1">45f7f910cc03b4eb7c468f62ed7e149d648040d4</hash>
        <hash alg="SHA-256">14f6aba9cdb0ad5d26373bbe38e4472d8ea0645f6b33abe301c1fe4a7d43e546</hash>
        <hash alg="SHA-512">966502c7b683909b9c75c8aa2eda49217ac4ef0086d4d01a7bffa5bd8808a2b1b441ed7a447116fbb505c54c9fa4334e7fc7322391d966dc5c48466109f571b3</hash>
        <hash alg="SHA-384">f6d97d357efddf91ee0fadea3629b091435f89bd5add85a0ad265591b9edd6176ba7418ab0546688da6f2f64137519f4</hash>
        <hash alg="SHA3-384">76e90fbd2bf38a9712a261a1218a21ecd5b69392fea1f52a3d424e7531713442a0ca05655136ec63973a15aae942a530</hash>
        <hash alg="SHA3-256">2eb5d6f4ae07f48820cc9de8c953fc0e33a947d05fb34af705c4e26bc4cc416c</hash>
        <hash alg="SHA3-512">8df52a8554fabdfc69f0142b7454f521ab270bf7573472e23fd4ef9d668c685e7cfd46dd0191c22f7070c4d83f175849aeac13192bb5441ebcb7baae4d97e41b</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-table-runtime@1.15.1?type=jar</purl>
      <externalReferences><reference type="vcs"><url>https://github.com/apache/flink</url></reference><reference type="website"><url>https://www.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-table-common@1.15.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-table-common</name>
      <version>1.15.1</version>
      <description>This module contains extension points of the Table/SQL API.
		It allows for implementing user-defined functions, custom
		formats, etc. with minimal dependencies.</description>
      <hashes>
        <hash alg="MD5">e502f75adc71c60f195b91a2a65bfa2c</hash>
        <hash alg="SHA-1">8cd9ed68ce520d3d79fd898fa46f4cd72d31e561</hash>
        <hash alg="SHA-256">bff7cc0459b86f2684de5a51e8f8b5af22ea4b5913b638613474ac9a09032184</hash>
        <hash alg="SHA-512">e04591c11e11e57bbb4255011ca24284ec735fe9e51aed9bc36e3b1f7de71fb2c34f109739bc6d49f4720f0b9038d75780dc0b16d03e0592be72c67ad8239b1d</hash>
        <hash alg="SHA-384">5426fcd834ed9607082df06204c28a7c3300797806c6c50f275be99d2bf3f4e28322ec329f70f51a879d8363d052b8be</hash>
        <hash alg="SHA3-384">907f6b6af33927f97b9cd80179c705ede6f7377607d1168ca4cdd0de9353abd890477a400e0eaaf3b0555712d4247adb</hash>
        <hash alg="SHA3-256">9f9246c4464456445bb3e111953f16f08629790f402e287126d33922c31c553b</hash>
        <hash alg="SHA3-512">a67f7f31646ff4b9aaaf2f4e476c05ca55d2c81ee3fd0acb286314a6526abc11ae0c7f0be05e945a7a95424d8b316e8ec049e268ab6596d04b9074fd3b082c50</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-table-common@1.15.1?type=jar</purl>
      <externalReferences><reference type="vcs"><url>https://github.com/apache/flink</url></reference><reference type="website"><url>https://www.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.ibm.icu/icu4j@67.1?type=jar">
      <group>com.ibm.icu</group>
      <name>icu4j</name>
      <version>67.1</version>
      <description>International Component for Unicode for Java (ICU4J) is a mature, widely used Java library
    providing Unicode and Globalization support</description>
      <hashes>
        <hash alg="MD5">046a5f59abf6b67a464dea584d11e59d</hash>
        <hash alg="SHA-1">2e159807158095566726600534034030dddab6d0</hash>
        <hash alg="SHA-256">c4eb904caf5fba968a2f1a3b8aef14df801e9329b21697209ca30bfcf153867d</hash>
        <hash alg="SHA-512">b3036b162356a0a5dad39eee611dae27c6fbe53f9e5ec1f3529ab02d49d97093b58602f43dd855433a0bbe02f6253e46a9d1899911c8e2e73001ab2c9a79d68d</hash>
        <hash alg="SHA-384">c2b28649d0ef9bf68f258a9f432c627a553ead79670f0a7ada3d986091a0001c5ab9eca372f792734bff733370a61fb1</hash>
        <hash alg="SHA3-384">3726bfa8b77bd0cdd66564944044d82dca3ee1fcf2594ebf1a7acc6752faf4c11892a1744af27e5528dc4b991e4cd0c0</hash>
        <hash alg="SHA3-256">cb19cec2baad1dc610267b2c98325f5c742230caf2247ef6297dfe8d9be9f11d</hash>
        <hash alg="SHA3-512">f46e4ead1cc1c05c3825716485ce79c890500a5356f8e7ca578f3080c09fb2460fb1aed81d65d345c402706906ea4e96afc0ff03c50fb0ac5bbacd351a8f11ec</hash>
      </hashes>
      <licenses>
        <license>
          <name>Unicode/ICU License</name>
          <url>https://raw.githubusercontent.com/unicode-org/icu/master/icu4c/LICENSE</url>
        </license>
      </licenses>
      <purl>pkg:maven/com.ibm.icu/icu4j@67.1?type=jar</purl>
      <externalReferences><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://unicode-org.atlassian.net/projects/ICU</url></reference><reference type="mailing-list"><url>http://sourceforge.net/mailarchive/forum.php?forum_name=icu-support</url></reference><reference type="vcs"><url>https://github.com/unicode-org/icu</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-table-api-java@1.15.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-table-api-java</name>
      <version>1.15.1</version>
      <description>This module contains the Table/SQL API for writing table programs
		within the table ecosystem using the Java programming language.</description>
      <hashes>
        <hash alg="MD5">ace2c7ab68a8aeb5075805db7d0ce55b</hash>
        <hash alg="SHA-1">b4e3413ac3fde45c083a8bdfca4468611e7ce9e3</hash>
        <hash alg="SHA-256">ebe1c5d80b7b8f42de65a095ff1a018b0381a443b614d4f480023106c847f101</hash>
        <hash alg="SHA-512">8e79cf201766d7b284c2e5ec4a708cdb27c638bd750d2a10e6f9b3c61def64cbc5a7560d8524bf14df8512533b0e2b0ea81bcef49f2563d2fc6d82ef35c3f79d</hash>
        <hash alg="SHA-384">c2360e0f8b38d56ce2d62dc8eb079786403abc853cc2930a833a57b08ccc46ba22a603d0098bc7701556382a3986a3da</hash>
        <hash alg="SHA3-384">36f97e8347901ff43856a0209f92ed848344fc06e10b28e4fff9142e579212a8cbb94f89c4d3cf4474302f9ad8b78810</hash>
        <hash alg="SHA3-256">153b4694c9a45f14b049aea3763911a1e16ff015fb25847d86ec474f95695de0</hash>
        <hash alg="SHA3-512">20619b200224f13cd123bf9b35d7ca6aba90c8766c542b5ef432f2bac131b6360e9a8b30452ad1dfc8f1f17533104e7980d16e4348a58f5f3af20369abe850f3</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-table-api-java@1.15.1?type=jar</purl>
      <externalReferences><reference type="vcs"><url>https://github.com/apache/flink</url></reference><reference type="website"><url>https://www.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-table-api-java-bridge@1.15.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-table-api-java-bridge</name>
      <version>1.15.1</version>
      <description>This module contains the Table/SQL API for writing table programs
		that interact with other Flink APIs using the Java programming language.</description>
      <hashes>
        <hash alg="MD5">7763e26f9a4c04c512754f1be34436bf</hash>
        <hash alg="SHA-1">78fc08e8facd9716ea89eb28d4c7a329b96e6d89</hash>
        <hash alg="SHA-256">dc9213db9c50134a1fa98e136cdb8ba86c2daa6600fdd8d660fd79458e842e62</hash>
        <hash alg="SHA-512">6c000069c855ae59484f8a3fb0e322154c0ebd26c930f6f718d38d6ac1be7cc257e400d0868c819512f4c96f2ab3a0c38df2030adf570206567315cc59c409f3</hash>
        <hash alg="SHA-384">b12682541bd7ffebf1b03ffcbc6952e29f6af3efea6cf058e1d3ee0ba2069f67f5d0fdaa6b1db2d7f9548a985ed585ec</hash>
        <hash alg="SHA3-384">6384e20d1804f0b6eb758288273a5717978cfbf03e5e0f89893868dfdd7e48a331ebffecd6b4aeae6f2d0fc2fbad19a8</hash>
        <hash alg="SHA3-256">b8db48c5c92e04e975ab45aa533801f1a196cc4413948fa2096f08ea1dbcb302</hash>
        <hash alg="SHA3-512">da84b2831d1d8f2531721c511ca5e556e6e29cfe12a55422065526d9b88da7b201a421e0a3302a05458aaf063282a1599d8ac382c1ecc33c9b6079ccfb93eb30</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-table-api-java-bridge@1.15.1?type=jar</purl>
      <externalReferences><reference type="vcs"><url>https://github.com/apache/flink</url></reference><reference type="website"><url>https://www.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-table-api-bridge-base@1.15.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-table-api-bridge-base</name>
      <version>1.15.1</version>
      <description>This module contains the base code for bridging between Table API and DataStream API for
		both Java and Scala.</description>
      <hashes>
        <hash alg="MD5">19a367a2d0b36686d0e1fd0b3cc9f399</hash>
        <hash alg="SHA-1">cc65b5142add0d55f2bc39b3c017b40bced66a02</hash>
        <hash alg="SHA-256">9a21e7377ff04cbfe4323767c681bd3a18c98a8c8711f5f264bd3e63bfda6b20</hash>
        <hash alg="SHA-512">f196f03e3baad209303a829ebb4ab2fa725baefdb5d6280d1d28f9af8e8d19326b2069e6d6736567609c269536403256a26947d871d9bb08c521ff8425b43eb3</hash>
        <hash alg="SHA-384">986883df8fbadfbb2c26dc865cf9db53e9828c8bae13f5fa88d5d234d48c43e9cdc84be3b54e68de5d6f3ee4ead61458</hash>
        <hash alg="SHA3-384">fcb460da0247116aa6d257797d9a150411d7ac4eb2e144b1a327a5d4231ac8ed6ff636a11b0bd627f35b1585807b59cd</hash>
        <hash alg="SHA3-256">7fca6c20059c0111d801d67785122edc972e31ae0fe0748057221fc31942b7d9</hash>
        <hash alg="SHA3-512">820581d731bed67c7c69bc74343a8ca1bc67b60b47d4cce366d3225f0876b2186f9cf2c1b28ea48d73462721690b505670d3ee4e57dc5123ea2c803038623377</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-table-api-bridge-base@1.15.1?type=jar</purl>
      <externalReferences><reference type="vcs"><url>https://github.com/apache/flink</url></reference><reference type="website"><url>https://www.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-cep@1.15.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-cep</name>
      <version>1.15.1</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <hashes>
        <hash alg="MD5">94b3946b16bfee0defce7e3803c1dc77</hash>
        <hash alg="SHA-1">f3d4e1785ab30c6b7ce5def73916547997f0c93f</hash>
        <hash alg="SHA-256">fcf3fa860298901611fa56795d3c7441e858d2e0ecad860b0f3eef1373a694c6</hash>
        <hash alg="SHA-512">105aff4d6966fc9a1219749a73e83fd7999c7c932c9fb6fa3516249f321e5455c1800ea22b8417437d80985974a20ed7df1f74ba1c2d5a470e6030b19c66eed0</hash>
        <hash alg="SHA-384">db8a91567a1daf16f2460a318b3777c36eebea1af7b5b38cfb73a162c04ba25c0758313cb6ce65969e0d35b8b8d7c1e1</hash>
        <hash alg="SHA3-384">90d3221c3d5dec26a6f9907c3da32eacfc9f4e12901d9e7e0ddee9fbf23163114e276e89de4f0dfcdd66afea2b009f12</hash>
        <hash alg="SHA3-256">4ef98688a8ec72920a05d7dcce9da715222b9df987b5a604c4e505e8c9fe2c6b</hash>
        <hash alg="SHA3-512">e534292da5f16b5d117ec9babbe76da555549c606ed17c8c89efcf695a1b5e44ffd550add17911a8f13325204f29fa3648ef3d7e0641d5e5912990a4ab96808e</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-cep@1.15.1?type=jar</purl>
      <externalReferences><reference type="vcs"><url>https://github.com/apache/flink</url></reference><reference type="website"><url>https://www.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-core@1.15.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-core</name>
      <version>1.15.1</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">0159591ac5f6a1cf2733abe2c900708f</hash>
        <hash alg="SHA-1">cb3199f5804ebb32945a541f5c32153a174527ad</hash>
        <hash alg="SHA-256">9f245eefb1373078c9c6a6146a09322e56d85943311fff7f963c2376902c5e7d</hash>
        <hash alg="SHA-512">6c569c7b3cb99d1e33cf23fd26aa9cc7d3114e84deeb7f64cc17327437f66bb04ce7fbce0c0143812382d9977528a61889ec89557dea4caf9a185b0a431f774b</hash>
        <hash alg="SHA-384">388d77d56bd7898c47adf9a9f72fd8b695167a8f31a1c215b9c93c8b73caf031c7e55bf7b05c7373ff51158a71c14b44</hash>
        <hash alg="SHA3-384">0de3ce57f77caadc3910e415a7c9f21fa56d61d4b2a0e7e1b9d3d27acd65749eb61afecfab9cb11e2f619d0f73ca9482</hash>
        <hash alg="SHA3-256">5f1259573b80925e259da352dfdc519d4ff1e86a1a8f77bc83af94108851c6ff</hash>
        <hash alg="SHA3-512">cb90da606352140b15529a38f84667020254bd00e406c139d0524cae815be2e2e3690ebbf07e85bb4d3718f5f3cbdd5294da3c5c6758425d4aef7392b54ae03f</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-core@1.15.1?type=jar</purl>
      <externalReferences><reference type="vcs"><url>https://github.com/apache/flink</url></reference><reference type="website"><url>https://www.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-annotations@1.15.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-annotations</name>
      <version>1.15.1</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <hashes>
        <hash alg="MD5">f93c00fc3296014ed5df8ccd7f5a2ad6</hash>
        <hash alg="SHA-1">f686b5115a9685895a5b3b2b39909e027f60279a</hash>
        <hash alg="SHA-256">bec5d57185cbd65b1127d3e644f36927e54dc28ddbcf732f9f8142db150f2973</hash>
        <hash alg="SHA-512">85ac29ab72cc12fc77c73a956b42493b8dc9b1a3be4f199d5f6c26e9e97cde3a3b96c79ecc1817734ec7e2899c7f10a2089c72f9f1af9e24bf8d6b2c92194b49</hash>
        <hash alg="SHA-384">82669e4b59b582c3429c2edeabdcb7e7061478e9f1b318b4e073e38a7c6accc6b4c39f9fcb6d575fd18d15b8c056e5bb</hash>
        <hash alg="SHA3-384">21131faa5d32e95209cac1f1a9d46d0fbfa6358dd27e65774f92e882902d293a3e1e3798d177958a9fff9e7f6b244362</hash>
        <hash alg="SHA3-256">97fdbbdacbfa1f7446035572c9a5c0a7e297dadfbb8c67c66d780e3bacfd6fc2</hash>
        <hash alg="SHA3-512">cef8c70a21f1daf7b10ad971b794a0b47083b187df2ab0399d3f4a495d173e96cf98614f4277d6d8df026e75570fb916fffab5cfb3e427fcf29d842f88513a6c</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-annotations@1.15.1?type=jar</purl>
      <externalReferences><reference type="vcs"><url>https://github.com/apache/flink</url></reference><reference type="website"><url>https://www.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-metrics-core@1.15.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-metrics-core</name>
      <version>1.15.1</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <hashes>
        <hash alg="MD5">69005e6238ff75c220e029e7aabd39a1</hash>
        <hash alg="SHA-1">da4ba89f395eeb152f17ef0e67f77fcbf84c7926</hash>
        <hash alg="SHA-256">63afd16ce890909d4061bf2208947b9b6aefe31a73110492cfbd0a711c4fa3f1</hash>
        <hash alg="SHA-512">586040c8f58405534630a5ed44b4d4fc03fdc02f34215481a7d81427ffc84831ace41d9862c2e918d37eb38d5225d3f72d38516180034e831fa26150da57ec2b</hash>
        <hash alg="SHA-384">e6b530176242a7bd06a2f1345ca4a04c908bfa0bba48e5fc66671699b57fb59f11ce2393e8d81e4b377c93baa634fe7a</hash>
        <hash alg="SHA3-384">ee55124e9c1e9f9f3756c46164513e7b91a27b7b7daf59ce0caa25d70c72dc5ed9b6bde114d06f67d3c9904705d0c0e2</hash>
        <hash alg="SHA3-256">66981ee63d9372cce901bf238300776e0828afc0f5ba1c12617f452c7d40b37b</hash>
        <hash alg="SHA3-512">301b8c668a01cfd5b21990a9331d85517d172b0647f45235237ab638dc343b4e82a0a5d0aa829301519825253b50517b460d5fc6d8f988aeb0e2d9c2b84c2889</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-metrics-core@1.15.1?type=jar</purl>
      <externalReferences><reference type="vcs"><url>https://github.com/apache/flink</url></reference><reference type="website"><url>https://www.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-shaded-asm-9@9.2-15.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-shaded-asm-9</name>
      <version>9.2-15.0</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <hashes>
        <hash alg="MD5">4b57b7ead9578721e3135394fa69ae29</hash>
        <hash alg="SHA-1">f89d00906d3ffcf97b049cdc6d6e70dcb101a4cd</hash>
        <hash alg="SHA-256">9692cd3f8953c74920bbbf17002bf874953871564768b2f0a97199bfed475e3f</hash>
        <hash alg="SHA-512">f8e86733ae3e52482bf8ed74370827a4405d362a5bbd63bc1a2652db75845eef9c43d687d3f3663e2bfcb030acfaee2b5fbdce9eee873cb4887c66c9ccebf8ef</hash>
        <hash alg="SHA-384">6542af42f033dce80d803348694a998d7b5e02dd49a15378696a0e57f7377192ae1f5c17744629145dba5e14d8110c96</hash>
        <hash alg="SHA3-384">ea6d6901d3c4a7d731de82d91fc1791ece8a86be02ecdcb948f211abc58ad61cb0fa199345c9163abdfd6b41dc238dd9</hash>
        <hash alg="SHA3-256">2e5ef369755a9302ad55865e3027e76f48b9c8ad53e2b7e290c07d4395ad9421</hash>
        <hash alg="SHA3-512">51acf643099af357dbbe5720c6f1e54b1ff9f36007f2f3c2a6b14221f750d7201ee2c2ef90c0cd654ddcc083ed8dfafcaf13dbc1be55460ff9edd731a09511e3</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-shaded-asm-9@9.2-15.0?type=jar</purl>
      <externalReferences><reference type="vcs"><url>https://github.com/apache/flink-shaded</url></reference><reference type="website"><url>https://www.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-lang3@3.3.2?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.commons</group>
      <name>commons-lang3</name>
      <version>3.3.2</version>
      <description>Apache Commons Lang, a package of Java utility classes for the
  classes that are in java.lang's hierarchy, or are considered to be so
  standard as to justify existence in java.lang.</description>
      <hashes>
        <hash alg="MD5">3128bf75a2549ebe38663401191bacab</hash>
        <hash alg="SHA-1">90a3822c38ec8c996e84c16a3477ef632cbc87a3</hash>
        <hash alg="SHA-256">6b81d10754dadf184d386011486e6509c2cc0c3d33565ced4fb4402b9413d47d</hash>
        <hash alg="SHA-512">3e6eb74b61c42d22de48c29e7e52057dd25d9f93857dc7bffc7052a56449f62153c487877d6a019adabbaee90e32085b104acc591ea9731839f8148dc4059e10</hash>
        <hash alg="SHA-384">06bc46540d0b297f595c9625ff0b272a38faf9ebcaf822b687a4fc8bd7d01e4954cad866d54c4ae17cd787d61f852797</hash>
        <hash alg="SHA3-384">b91600411b010ecde5ba763c1930f1858044904e01aa7088c42e95dcdbce010a73a79baed47284c1d8dc6918fb73571c</hash>
        <hash alg="SHA3-256">d78a4436d103be34ae2bd23c8cb78f504c77960559c57fc09b970d2b48a73e2b</hash>
        <hash alg="SHA3-512">2716f57d20fb5bcd5ac6b0642575de79055d9e38b0836bdc3780eeee4bb5bb69538acd4f61adf82424f806fd4bd3629104880501314450047a9365b44622c3be</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.commons/commons-lang3@3.3.2?type=jar</purl>
      <externalReferences><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/LANG</url></reference><reference type="vcs"><url>http://svn.apache.org/viewvc/commons/proper/lang/trunk</url></reference><reference type="build-system"><url>http://vmbuild.apache.org/continuum/</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="website"><url>http://www.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.esotericsoftware.kryo/kryo@2.24.0?type=jar">
      <group>com.esotericsoftware.kryo</group>
      <name>kryo</name>
      <version>2.24.0</version>
      <description>Fast, efficient Java serialization</description>
      <hashes>
        <hash alg="MD5">6cf0fa5b5d4f6b8226fd4a4bfb7532b8</hash>
        <hash alg="SHA-1">0c6b206e80cfd97e66a1364003724491c757b92f</hash>
        <hash alg="SHA-256">7e56b32c635058f9aa2820f88919ab702d029cbcd15285da9992e36cc0ae52f2</hash>
        <hash alg="SHA-512">a4c6ce768528a03c219cc6a41b22293f78e433c849c90391b64dda3f2376fd79951a89c5f4e6701bcbcb6eee9abffe2390cfb12dba3b885e4a3d411a26b78f40</hash>
        <hash alg="SHA-384">678ad1b7f4d99910b8ff44a6c8f78ccae91f823161ce23de39077397352919b7257e1e6e0dea90900be973291ea19282</hash>
        <hash alg="SHA3-384">671fc6aa9905f8131482e1d0f3fe26126562b13777893d51a66d0f84fc6f2aa3f13947e488ffba8f09c31a2cc0e9758a</hash>
        <hash alg="SHA3-256">46e89d8f12cbead0fe29ad707d5dba96e880dacce2a6b374ac4bf1ced9f36a79</hash>
        <hash alg="SHA3-512">c7cde437eef8343eccd4c5ecb8de5683529e3d4d8262e8cd1f7b7d0df9c632253b979737fd1b486314ec2728aee3a3782dee5d2032621485db4aa3b2a8262741</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.esotericsoftware.kryo/kryo@2.24.0?type=jar</purl>
      <externalReferences><reference type="vcs"><url>https://github.com/EsotericSoftware/kryo</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.esotericsoftware.minlog/minlog@1.2?type=jar">
      <group>com.esotericsoftware.minlog</group>
      <name>minlog</name>
      <version>1.2</version>
      <description>Minimal overhead Java logging</description>
      <hashes>
        <hash alg="MD5">f7cfbdf63b67df0bbfa4c7cb260885bc</hash>
        <hash alg="SHA-1">59bfcd171d82f9981a5e242b9e840191f650e209</hash>
        <hash alg="SHA-256">a678cb1aa8f5d03d901c992c75741841d98a9bc3d55dad02e84d65315c4e60f2</hash>
        <hash alg="SHA-512">7b4082766ad740d86708783f3b08780ed72dd18062aa9ba422c4b9016b332d2334ae511f50ef7d89e4eedbdac5cebc51ab6ddaf4d1eea857a3250eb5962f0d08</hash>
        <hash alg="SHA-384">932a282a9c06864001f8212199e4be05543609adbd985c5f4517ee6eba734acd3fd8812213bc0c98af264637cbf9c78d</hash>
        <hash alg="SHA3-384">f36e9f494611c85f59febfef9ce93fc68f1f17db881400456204c1f099e623e334d2f10b41018392877c8af13de7f59a</hash>
        <hash alg="SHA3-256">37422ef85dce86abd8b14b4c9f7ad77261d728a472126c8eca38f356c98da395</hash>
        <hash alg="SHA3-512">74ba47271899706a284e942482ff41649ffd93e57a29320732e57864c47f3f0431377130ca7afb5e64cc6b68d4e5a5cdfc38027966cda4b5e512e3ce02bd8a99</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.esotericsoftware.minlog/minlog@1.2?type=jar</purl>
      <externalReferences><reference type="vcs"><url>http://minlog.googlecode.com/svn/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.objenesis/objenesis@2.1?type=jar">
      <publisher>Joe Walnes, Henri Tremblay, Leonardo Mesquita</publisher>
      <group>org.objenesis</group>
      <name>objenesis</name>
      <version>2.1</version>
      <description>A library for instantiating Java objects</description>
      <hashes>
        <hash alg="MD5">32ccb1d20a42b5aaaceb90c9082a2efa</hash>
        <hash alg="SHA-1">87c0ea803b69252868d09308b4618f766f135a96</hash>
        <hash alg="SHA-256">c74330cc6b806c804fd37e74487b4fe5d7c2750c5e15fbc6efa13bdee1bdef80</hash>
        <hash alg="SHA-512">1dec9ee30812b8006e536a2749c5781ccdc4b446539efb6fa534f22e70562033876bf2eb22c6946d617695729bd65f0f65b984f15f05ac63db5bed215e74427c</hash>
        <hash alg="SHA-384">657b8a3b80a5475f198425396f7264301f9e0f3ad5dc336ef0c7b46874f5544861a8a2fd48cdb5f672e199a6935c19d1</hash>
        <hash alg="SHA3-384">e526937d722aad1857869b2d2a0ba5c88815609308c00b776b51614e501de5d93d54978f5bb9cf496bdcc28b1dbd5775</hash>
        <hash alg="SHA3-256">436cfbb9c208dd03c951708fa4ba6525e2a0b26a873d594a6fbe93ab49082c97</hash>
        <hash alg="SHA3-512">1e7ee9411df7cfbf0669c38e4ef029155dd718b91db1d182841c740caf8c1057ed273a77f8e32d724c48aaf96815a26ab099c776511ffc5ef351d70ebfa70344</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.objenesis/objenesis@2.1?type=jar</purl>
      <externalReferences><reference type="distribution"><url>http://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/easymock/easymock</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-collections/commons-collections@3.2.2?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>commons-collections</group>
      <name>commons-collections</name>
      <version>3.2.2</version>
      <description>Types that extend and augment the Java Collections Framework.</description>
      <hashes>
        <hash alg="MD5">f54a8510f834a1a57166970bfc982e94</hash>
        <hash alg="SHA-1">8ad72fe39fa8c91eaaf12aadb21e0c3661fe26d5</hash>
        <hash alg="SHA-256">eeeae917917144a68a741d4c0dff66aa5c5c5fd85593ff217bced3fc8ca783b8</hash>
        <hash alg="SHA-512">51c72f9aca7726f3c387095e66be85a6df97c74b00a25434b89188c1b8eab6e2b55accf7b9bd412430d22bd09324dec076e300b3d1fa39fccad471f0f2a3da16</hash>
        <hash alg="SHA-384">dd4e99b3314bd3c1a1ee26296615d9e44dadf7a1f8a7bbba44fb95121803d331e36d4cca4260e7609af78a47ba3e4073</hash>
        <hash alg="SHA3-384">8ce03528e4a6e95c44283b56eca87e6a6d3bf1363411a55b538f4f9110cf7470581ea5c73925e877ddab08dba0603f40</hash>
        <hash alg="SHA3-256">fd3d6134b5f07077b82ccf93d148dacf7c4ce5c971209510edd0e77e3e38c19e</hash>
        <hash alg="SHA3-512">c2a523916fb7c7d55a05d5e3d9e9b33000733f4b20a71be174e4e093e3f06ea78ad831edd1505527da7388105f8647efb7d5666ba852c90b4e2d5bb74256efbc</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/commons-collections/commons-collections@3.2.2?type=jar</purl>
      <externalReferences><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/COLLECTIONS</url></reference><reference type="vcs"><url>http://svn.apache.org/viewvc/commons/proper/collections/trunk</url></reference><reference type="build-system"><url>https://continuum-ci.apache.org/</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="website"><url>http://www.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-compress@1.21?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.commons</group>
      <name>commons-compress</name>
      <version>1.21</version>
      <description>Apache Commons Compress software defines an API for working with
compression and archive formats.  These include: bzip2, gzip, pack200,
lzma, xz, Snappy, traditional Unix Compress, DEFLATE, DEFLATE64, LZ4,
Brotli, Zstandard and ar, cpio, jar, tar, zip, dump, 7z, arj.</description>
      <hashes>
        <hash alg="MD5">2a713d10331bc4e13459a3dc0463f16f</hash>
        <hash alg="SHA-1">4ec95b60d4e86b5c95a0e919cb172a0af98011ef</hash>
        <hash alg="SHA-256">6aecfd5459728a595601cfa07258d131972ffc39b492eb48bdd596577a2f244a</hash>
        <hash alg="SHA-512">c92d9a12547aab475e057955ad815fdfe92ff44c78383fa5af54b089f1bff5525126ef6aef93334f3bfc22e2fef4ad0d969f69384e978a83a55f011a53e7e471</hash>
        <hash alg="SHA-384">da56f95d420cd7278cee646f4cd0e7a5ee12b6a2894efaec12f0ff7b56c3d43e5db736fe1ed66ff91118b16f2d64ebef</hash>
        <hash alg="SHA3-384">6d3dc0198dd523a49fa94e054841aece853577b5c3ea1029fc288ad9ff580ab1b65ea99ddbe58c42125054e8c43be461</hash>
        <hash alg="SHA3-256">37d4a014b50393793d35c70431bd8a1842c197d854c6f174dfa946b9edc2b841</hash>
        <hash alg="SHA3-512">61609f60746406a7cb1ef3f979488beca6674fde208c9025d3fdee115de4767e8a4a1ee38f5bf79ac0104505ddb3558f1feeba5e318d6545647120ac60db6b89</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.commons/commons-compress@1.21?type=jar</purl>
      <externalReferences><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/COMPRESS</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=commons-compress.git</url></reference><reference type="build-system"><url>https://builds.apache.org/</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="website"><url>https://www.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-java@1.15.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-java</name>
      <version>1.15.1</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <hashes>
        <hash alg="MD5">5065986ddabd5704a4ff54a0e645aff0</hash>
        <hash alg="SHA-1">90070ff2aad7d5b5379028eba9b3505e95a832f6</hash>
        <hash alg="SHA-256">bca5e45c1f658cfc8f95bb088ded9b1260f1e74f80880ffe56aaef5dce4ef28d</hash>
        <hash alg="SHA-512">32f3e07e72e77b0a3105f9202e4079ccbf0e9581c37d6f073bedd3668d575286d2cfb1175b5762b30fd684ae7fc2170ce2acd762ec6aeea88f7f870fed638ccb</hash>
        <hash alg="SHA-384">cf950990f7d93e7276919f418aead86e9c2b85741fb2037ef20612c0c102c9db1bd224dadfbec64857041193378e56c3</hash>
        <hash alg="SHA3-384">91f3b333d0c0e0c422ad3e0fdfcdb23e452d3f14bc18d57344ae1ed942b583e7f1c628973aa7d7f37d84f4e11a4e5854</hash>
        <hash alg="SHA3-256">a9b93a118abea3fd8633bc2bb920df222016c9c86a0bbe84a3de5ec4837c7f8b</hash>
        <hash alg="SHA3-512">3bfd23e93fe282b06e01d54eb9addb95db4e5447ab658f40efb7864f6ce697339e40b14d7c4cd5c94004c330c9802664225be3e486b631812595b748bbbd6af0</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-java@1.15.1?type=jar</purl>
      <externalReferences><reference type="vcs"><url>https://github.com/apache/flink</url></reference><reference type="website"><url>https://www.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.twitter/chill-java@0.7.6?type=jar">
      <publisher>com.twitter</publisher>
      <group>com.twitter</group>
      <name>chill-java</name>
      <version>0.7.6</version>
      <description>chill-java</description>
      <hashes>
        <hash alg="MD5">886eb8ef6db3880433f4a8e10ef37300</hash>
        <hash alg="SHA-1">a74b8d019d6941d82ff86d1612e382f4a0ae8259</hash>
        <hash alg="SHA-256">f7c41a2257be11e6c9bca97095c8f4b0299626941a3508469f90622eb8f8368e</hash>
        <hash alg="SHA-512">dc9973909b87cfb85ee45c90662612dd2bc137b7510172221eb47020f76b23eb3ea76c6b4fba4cee5d81e910f87aba71359136d33ae0f6424e3ce7123bf77dbf</hash>
        <hash alg="SHA-384">41e7faed7c2c22987868fba7cd6dac0d59d174d82d841ba4e5aa8675cc9265bf9d9df021553a781cfa24c4c9c7a35c5c</hash>
        <hash alg="SHA3-384">32751d6ecd77676ffa11a109dead8c8d19a6d1d78576b19ac5a8323d9446ba51fba87e0d60820dd2bac69fb705aa2061</hash>
        <hash alg="SHA3-256">6bdf2ed042c5b7f4f4d11bb52e448ce740e18563364f66730ca2b6b4eadf0401</hash>
        <hash alg="SHA3-512">0ab14bee65d85803d5080f3b0ad86183daafb61e3ca3a610e199bc04a11421b45436e405dc3c227b5d80a64178ca82739eccb5ad8ee157efa925d484d9daae28</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.twitter/chill-java@0.7.6?type=jar</purl>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-shaded-guava@30.1.1-jre-15.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-shaded-guava</name>
      <version>30.1.1-jre-15.0</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <hashes>
        <hash alg="MD5">290298c9d2f321101d156c9957aad688</hash>
        <hash alg="SHA-1">bd226b0497e69b57de5c9868cbf5489a573d52a9</hash>
        <hash alg="SHA-256">2991b8a58d676c0603920a5242895a06456105eedea16045a67fd0e06cc11e58</hash>
        <hash alg="SHA-512">952834dc99fcf3740474164bdf4db0cda2852835651617b71ae582eaafd31d7e88ce3d8f5d138c4093bba472775bade6a3e97ae45619fdfadc7526bcab8d9606</hash>
        <hash alg="SHA-384">b1e7e8c741419f3d3467878818a311462cb0ea1a11ca3e843dbce9665b8d67f675651883a7ed328eb86c85c7eaca89af</hash>
        <hash alg="SHA3-384">d97ceac9ddc23acf37d21abaec7ae340b6ef8e569288fb4cc1483db5bc21beb22fc859e7833c18119c6a471b8d1fdd13</hash>
        <hash alg="SHA3-256">d53cc3f5599c7b42fdd73d32dc702ce4b17ac04b98bfad457798adbe3e5a42cc</hash>
        <hash alg="SHA3-512">f9d2a748083a529853527bfafdcc1bd82d51e6ced2f7c99c39f6ef56f1030547600b448dbef9a8438a4073c169966c55f44dccdbdcd58e71c860824dec822b13</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-shaded-guava@30.1.1-jre-15.0?type=jar</purl>
      <externalReferences><reference type="vcs"><url>https://github.com/apache/flink-shaded</url></reference><reference type="website"><url>https://www.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-math3@3.6.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.commons</group>
      <name>commons-math3</name>
      <version>3.6.1</version>
      <description>The Apache Commons Math project is a library of lightweight, self-contained mathematics and statistics components addressing the most common practical problems not immediately available in the Java programming language or commons-lang.</description>
      <hashes>
        <hash alg="MD5">5b730d97e4e6368069de1983937c508e</hash>
        <hash alg="SHA-1">e4ba98f1d4b3c80ec46392f25e094a6a2e58fcbf</hash>
        <hash alg="SHA-256">1e56d7b058d28b65abd256b8458e3885b674c1d588fa43cd7d1cbb9c7ef2b308</hash>
        <hash alg="SHA-512">8bc2438b3b4d9a6be4a47a58410b2d4d0e56e05787ab24badab8cbc9075d61857e8d2f0bffedad33f18f8a356541d00f80a8597b5dedb995be8480d693d03226</hash>
        <hash alg="SHA-384">95d1186d9ca06a3ea2e6437ddec3a55698e2493d3e72f6f554746b74fa929892bd71a2ab501a4e7b1ce56b7cd64e7ab4</hash>
        <hash alg="SHA3-384">f85bb3e46a00fc4940a3be1331301302b0eb728e2d1fe2c1842d4761e5a0bc7a420c0c705ae60250ca1c7b03d3694b9e</hash>
        <hash alg="SHA3-256">919c15ae4b1aef2a58aa6ea4b700bc5562e78dbc382f3393169425ca91ad368c</hash>
        <hash alg="SHA3-512">dbe54d586c898cdbd7df6c31c131ca3525db17fcea5c7f5da8cbfe617e2afc667289290c76771ec5c9567a56fb2b177b0a31d67abcc656410c90287da4d88999</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.commons/commons-math3@3.6.1?type=jar</purl>
      <externalReferences><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/MATH</url></reference><reference type="vcs"><url>https://git-wip-us.apache.org/repos/asf?p=commons-math.git</url></reference><reference type="build-system"><url>https://continuum-ci.apache.org/</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="website"><url>http://www.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar">
      <group>com.google.code.findbugs</group>
      <name>jsr305</name>
      <version>1.3.9</version>
      <description>JSR305 Annotations for Findbugs</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">1d5a772e400b04bb67a7ef4a0e0996d8</hash>
        <hash alg="SHA-1">40719ea6961c0cb6afaeb6a921eaa1f6afd4cfdf</hash>
        <hash alg="SHA-256">905721a0eea90a81534abb7ee6ef4ea2e5e645fa1def0a5cd88402df1b46c9ed</hash>
        <hash alg="SHA-512">06da282cfd8e30d9f8cf17702b8709172b00e22b75a627a1d85f8989615b8a1a401bc25d9aee7b14aed1d9b5df73bf2ea8d66f9c8468d9577c29f0ccfa2cc70a</hash>
        <hash alg="SHA-384">56e6b41ef62eb5edfed0203802cefae9c2df86388148e420bb0c687abb2b80e14d5c2a82d5b35dce4badaf148f94eada</hash>
        <hash alg="SHA3-384">58c3bf89fa1afa75c2c5078159fd28e27b2273d437f26aaaa7391310b6f0823f3cf476a24f5631c0881f3f7e946d99be</hash>
        <hash alg="SHA3-256">c333ea5faedfa78e0614a2620438d5724eab093df4e960918391b6a44c2915b0</hash>
        <hash alg="SHA3-512">67ec31448e156cc72dd036060b460bb2667a13b1cbe500b6b7eed3235b1994b44c39f440ebd07b21ec9595b166ad61121d4f6a132b5b313c558ab21b72599425</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar</purl>
      <externalReferences><reference type="vcs"><url>http://findbugs.googlecode.com/svn/trunk/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-shaded-force-shading@15.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-shaded-force-shading</name>
      <version>15.0</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <hashes>
        <hash alg="MD5">8394d7e7f3ad54c3c895ca79deb90a58</hash>
        <hash alg="SHA-1">68f5786fa0554e0a567a15bec1618682d1695e80</hash>
        <hash alg="SHA-256">aff27589f46e4a50896fc64a768740617dd60ea8aa1ea22098e0193511f99bdf</hash>
        <hash alg="SHA-512">1bfbac436da364fe9373bbba3b1db47ac137ca5b22b95060619182f9fe3076036a43fd9116989c63bb0a1eb7a218ef7d9cc635c34119aa046c916c7b23df6374</hash>
        <hash alg="SHA-384">3f7bc60ade0ba76f293a9f8592d4f88ce1c4da36797e7946635bebe12b67271781a321dc67f3bad6635669b27609865a</hash>
        <hash alg="SHA3-384">e247180b5095da58066f39973e5d9e851039a57153889b9394a23b678ab54f05218440810128215be8d86ab602027485</hash>
        <hash alg="SHA3-256">9fcf057f3aeb570d1d087ca11bfa1bf916329fdf659479fe1072b477d01c8f21</hash>
        <hash alg="SHA3-512">d440d06d41d5c48988a617992fd2e5360723a5e8845c547a3a6d8cff805fcc94f5220ab813b45dc239943a874420ccd58f0937e54015f38eac9c45f43c8a88b5</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-shaded-force-shading@15.0?type=jar</purl>
      <externalReferences><reference type="vcs"><url>https://github.com/apache/flink-shaded</url></reference><reference type="website"><url>https://www.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar">
      <publisher>QOS.ch</publisher>
      <group>org.slf4j</group>
      <name>slf4j-api</name>
      <version>1.7.36</version>
      <description>The slf4j API</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">872da51f5de7f3923da4de871d57fd85</hash>
        <hash alg="SHA-1">6c62681a2f655b49963a5983b8b0950a6120ae14</hash>
        <hash alg="SHA-256">d3ef575e3e4979678dc01bf1dcce51021493b4d11fb7f1be8ad982877c16a1c0</hash>
        <hash alg="SHA-512">f9b033fc019a44f98b16048da7e2b59edd4a6a527ba60e358f65ab88e0afae03a9340f1b3e8a543d49fa542290f499c5594259affa1ff3e6e7bf3b428d4c610b</hash>
        <hash alg="SHA-384">2b14ad035877087157e379d3277dcdcd79e58d6bdb147c47d29e377d75ce53ad42cafbf22f5fb7827c7e946ff4876b9a</hash>
        <hash alg="SHA3-384">3bc3110dafb8d5be16a39f3b2671a466463cd99eb39610c0e4719a7bf2d928f2ea213c734887c6926a07c4cca7769e4b</hash>
        <hash alg="SHA3-256">ba2608179fcf46e2291a90b9cbb4aa30d718e481f59c350cc21c73b88d826881</hash>
        <hash alg="SHA3-512">14c4edcd19702ef607d78826839d8a6d3a39157df54b89a801d3d3cbbe1307131a77671b041c761122730fb1387888c5ec2e46bdd80e1cb07f8f144676441824</hash>
      </hashes>
      <licenses>
        <license>
          <id>MIT</id>
          <url>https://opensource.org/licenses/MIT</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.qos.ch</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/qos-ch/slf4j</url></reference></externalReferences>
    </component>
  </components>
  <dependencies>
    <dependency ref="pkg:maven/org.apache.flink/flink-ml-tests@2.2.0?type=jar">
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
  </dependencies>
</bom>
