2023-03-17T10:10:21Z OWASP Foundation CycloneDX Maven plugin 2.7.3 ab886f1cb1a79b4244ac54dde22a0989 9ed658496dfeef87fe6072b95c62ec37165cc741 df9b43417bef6aeac86a393abcc1ac2ed0518239ba544aaeb595b9619c603503 223da34bb51c5339e0f7285757608c1a56b1ea887f7ad835af9299fabacc693053163da74af352af86b16e18e04db730bd44214eda04291410c42b6ae657d85c 3aaf057329ed0f90ec3a49a45b3cf4ec5ce637fd75d6202e9483fa4274cec3e7b74308016e146b6ba087df5fce9397bb The Apache Software Foundation org.apache.flink flink-protobuf 1.17.0 The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users. Apache-2.0 pkg:maven/org.apache.flink/flink-protobuf@1.17.0?type=jar https://www.apache.org/https://repository.apache.org/service/local/staging/deploy/maven2https://mail-archives.apache.org/mod_mbox/www-announce/https://github.com/apache/flink/flink-formats/flink-protobuf org.apache.flink flink-core 1.17.0 required 52790bc8580c0381f3722126f2672e92 1211131371b252ba1b25715247c93d60a09839f2 bc024437713d954fc88b238cf94f111c735afae5666b51d0eb3e0084aefce333 d35a9acb6fd557ab3497d87666597c728bef60aab85242bddfb1436d6bd5477b5fbea4bc7f93cd5e06e522f542cc077c2d2ae2f88d2550080d07d0289792907a a0a606829c35e4ef90057af8f4612f7d9808e34fe546b3dcc531b43708bc1de7bb7b9a696bf8db15f532ef6595b0265e pkg:maven/org.apache.flink/flink-core@1.17.0?type=jar org.apache.flink flink-annotations 1.17.0 8722229171d763f57b027d0a2d2be7aa 6a627ba30bf3e3be766f440695d4b5e5a5dcb4e9 ca9f02d09d74d40196ffcd706030fde626e5aa4611e6dfaee1ff3d0ea343ebff 5789077b29a903e3b879dc713388f9b0fb35ae0034bf53318f34c05302fbabc3a9fecbed67280aeb547cb8674650e71963909e596f073b13867418e00a37e33c 197d6829888940ced6cbcfc8e7fdb822486fc60c5d393a7e278aad6ef42be3b9a050826e33e782d8cfbb1fc18a9db0b3 pkg:maven/org.apache.flink/flink-annotations@1.17.0?type=jar org.apache.flink flink-metrics-core 1.17.0 1ed9920da68ac343424f40cf4a6b824f 666fb09d3ad2098625aa4f2efc4ce24754abeed7 ecb1164a32f0ff87db9c42f96aef8281b66a78a42e1f7ee2500a8255ebf4110f 4fec1b5d13a7666f6ce73feaa7ea677c1ac110aeeb54ea2b0d39675098d920d8a8df8ecd253e38d9e1f24d09c6344a4cd3591433e4e06be861ba411f14c93529 6233b45a5fddef0569b01ee891bec76d49ded5697d210d05a14c18e5c4166add2bf3b1d60f4fba0188cfa448c6e0333d pkg:maven/org.apache.flink/flink-metrics-core@1.17.0?type=jar The Apache Software Foundation org.apache.flink flink-shaded-asm-9 9.3-16.1 The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users. 8ab02de7e3964cac3f5f49c2b299aaf8 252941e7a5e6772647ec1c222bebd92eddea79f2 bca08c293e85b88a3ee5a4b4367af319c396047e03257a4787370f15f39dce6d d712544a0f1c3d0d4db88045de14b014f23b745b6f98dae78a3656cb3b3d7418f91fda32f87d16f8a69c45b47abec57f8632ed6e7735136a79873ee272cb5a50 4982ca611821a37c4f5828d3859fceff2ae35846bf1a7d3e61b652cc6fefb3ca1f242886bf637000af35bbef4f78a276 Apache-2.0 pkg:maven/org.apache.flink/flink-shaded-asm-9@9.3-16.1?type=jar https://github.com/apache/flink-shadedhttps://www.apache.org/https://repository.apache.org/service/local/staging/deploy/maven2https://mail-archives.apache.org/mod_mbox/www-announce/ The Apache Software Foundation org.apache.flink flink-shaded-jackson 2.13.4-16.1 The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users. c26b24a1094f56a837610d5ea08ae0f6 004e5fb57e10af9cd814258221c9f50c920e6c09 601da81a8920228bfefc0a38229304340a6296a1f431522973bd2d7007f09d4e b2a66341cceb0dc75d1d1ccf4dcab69bef6289060b1688556443327b508b039d510298aea67dd1540122312db40d91dd86ad852f2afd0b087a479da340b580c2 f9c750a59372ecbfd951b8ae5efef49110c060d43bde418bc723c5156bcf81b44f5a4c65fccbffa9642c978628dc9b00 Apache-2.0 pkg:maven/org.apache.flink/flink-shaded-jackson@2.13.4-16.1?type=jar https://github.com/apache/flink-shadedhttps://www.apache.org/https://repository.apache.org/service/local/staging/deploy/maven2https://mail-archives.apache.org/mod_mbox/www-announce/ The Apache Software Foundation org.apache.commons commons-lang3 3.12.0 Apache Commons Lang, a package of Java utility classes for the classes that are in java.lang's hierarchy, or are considered to be so standard as to justify existence in java.lang. 19fe50567358922bdad277959ea69545 c6842c86792ff03b9f1d1fe2aab8dc23aa6c6f0e d919d904486c037f8d193412da0c92e22a9fa24230b9d67a57855c5c31c7e94e fbdbc0943cb3498b0148e86a39b773f97c8e6013740f72dbc727faeabea402073e2cc8c4d68198e5fc6b08a13b7700236292e99d4785f2c9989f2e5fac11fd81 c34b8a0e0eba2168ad56fedeb7a1d710b6f1d3f1ce6aae99a4e0247bd120efbbadc8dcb2f731045b8a16e3efd30604dc Apache-2.0 pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar https://issues.apache.org/jira/browse/LANGhttps://gitbox.apache.org/repos/asf?p=commons-lang.githttps://builds.apache.org/https://mail-archives.apache.org/mod_mbox/commons-user/https://www.apache.org/https://repository.apache.org/service/local/staging/deploy/maven2 The Apache Software Foundation org.apache.commons commons-text 1.10.0 Apache Commons Text is a library focused on algorithms working on strings. 4afc9bfa2d31dbf7330c98fcc954b892 3363381aef8cef2dbc1023b3e3a9433b08b64e01 770cd903fa7b604d1f7ef7ba17f84108667294b2b478be8ed1af3bffb4ae0018 afd836a1094449e0a791fee67363666c47b6d24acff353a5089b837b332c0f4af89565c354682521e37062d20e6b52d70c77bb4f24cca9b9532c274fc708a831 06c56e6e513dd77cf10d0da46cdea08c34e220e81fa024735b668c6650df4234e564fe865ff5cafea963f56b1e8ffd4a Apache-2.0 pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar https://issues.apache.org/jira/browse/TEXThttps://gitbox.apache.org/repos/asf?p=commons-text.githttps://github.com/apache/commons-parent/actionshttps://mail-archives.apache.org/mod_mbox/commons-user/https://www.apache.org/https://repository.apache.org/service/local/staging/deploy/maven2 com.esotericsoftware.kryo kryo 2.24.0 Fast, efficient Java serialization 6cf0fa5b5d4f6b8226fd4a4bfb7532b8 0c6b206e80cfd97e66a1364003724491c757b92f 7e56b32c635058f9aa2820f88919ab702d029cbcd15285da9992e36cc0ae52f2 a4c6ce768528a03c219cc6a41b22293f78e433c849c90391b64dda3f2376fd79951a89c5f4e6701bcbcb6eee9abffe2390cfb12dba3b885e4a3d411a26b78f40 678ad1b7f4d99910b8ff44a6c8f78ccae91f823161ce23de39077397352919b7257e1e6e0dea90900be973291ea19282 BSD-3-Clause pkg:maven/com.esotericsoftware.kryo/kryo@2.24.0?type=jar https://github.com/EsotericSoftware/kryohttps://oss.sonatype.org/service/local/staging/deploy/maven2/ com.esotericsoftware.minlog minlog 1.2 Minimal overhead Java logging f7cfbdf63b67df0bbfa4c7cb260885bc 59bfcd171d82f9981a5e242b9e840191f650e209 a678cb1aa8f5d03d901c992c75741841d98a9bc3d55dad02e84d65315c4e60f2 7b4082766ad740d86708783f3b08780ed72dd18062aa9ba422c4b9016b332d2334ae511f50ef7d89e4eedbdac5cebc51ab6ddaf4d1eea857a3250eb5962f0d08 932a282a9c06864001f8212199e4be05543609adbd985c5f4517ee6eba734acd3fd8812213bc0c98af264637cbf9c78d BSD-3-Clause pkg:maven/com.esotericsoftware.minlog/minlog@1.2?type=jar http://minlog.googlecode.com/svn/ The Apache Software Foundation commons-collections commons-collections 3.2.2 Types that extend and augment the Java Collections Framework. f54a8510f834a1a57166970bfc982e94 8ad72fe39fa8c91eaaf12aadb21e0c3661fe26d5 eeeae917917144a68a741d4c0dff66aa5c5c5fd85593ff217bced3fc8ca783b8 51c72f9aca7726f3c387095e66be85a6df97c74b00a25434b89188c1b8eab6e2b55accf7b9bd412430d22bd09324dec076e300b3d1fa39fccad471f0f2a3da16 dd4e99b3314bd3c1a1ee26296615d9e44dadf7a1f8a7bbba44fb95121803d331e36d4cca4260e7609af78a47ba3e4073 Apache-2.0 pkg:maven/commons-collections/commons-collections@3.2.2?type=jar http://issues.apache.org/jira/browse/COLLECTIONShttp://svn.apache.org/viewvc/commons/proper/collections/trunkhttps://continuum-ci.apache.org/http://mail-archives.apache.org/mod_mbox/commons-user/http://www.apache.org/https://repository.apache.org/service/local/staging/deploy/maven2 The Apache Software Foundation org.apache.commons commons-compress 1.21 Apache Commons Compress software defines an API for working with compression and archive formats. These include: bzip2, gzip, pack200, lzma, xz, Snappy, traditional Unix Compress, DEFLATE, DEFLATE64, LZ4, Brotli, Zstandard and ar, cpio, jar, tar, zip, dump, 7z, arj. 2a713d10331bc4e13459a3dc0463f16f 4ec95b60d4e86b5c95a0e919cb172a0af98011ef 6aecfd5459728a595601cfa07258d131972ffc39b492eb48bdd596577a2f244a c92d9a12547aab475e057955ad815fdfe92ff44c78383fa5af54b089f1bff5525126ef6aef93334f3bfc22e2fef4ad0d969f69384e978a83a55f011a53e7e471 da56f95d420cd7278cee646f4cd0e7a5ee12b6a2894efaec12f0ff7b56c3d43e5db736fe1ed66ff91118b16f2d64ebef Apache-2.0 pkg:maven/org.apache.commons/commons-compress@1.21?type=jar https://issues.apache.org/jira/browse/COMPRESShttps://gitbox.apache.org/repos/asf?p=commons-compress.githttps://builds.apache.org/https://mail-archives.apache.org/mod_mbox/commons-user/https://www.apache.org/https://repository.apache.org/service/local/staging/deploy/maven2 The Apache Software Foundation org.apache.flink flink-shaded-guava 30.1.1-jre-16.1 The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users. required 74bc641198b30c213cd9a2754297100d ad8725e964b6c2c0df16877f4132ad348c4ff09c d5ea841b0a51c7db4ecc48c96c0f334da40a9980645cf6d9e6e2b04b2441315c 801c9fae8aaf7cec12f82e9d84b2e93648b4f7e58a4f240029db17b922c394ade14082e2022e3036bd33edaf1eb1bb0881570345270bb8820ab827efc9e42aea 0b3aca631b15d8e5617952c2c18bed624e0f24b24ca7fb129c4ceb28c416e6e59d0acec3d7f624a7534fb2e9edfb83b6 Apache-2.0 pkg:maven/org.apache.flink/flink-shaded-guava@30.1.1-jre-16.1?type=jar https://github.com/apache/flink-shadedhttps://www.apache.org/https://repository.apache.org/service/local/staging/deploy/maven2https://mail-archives.apache.org/mod_mbox/www-announce/ org.apache.flink flink-table-common 1.17.0 This module contains extension points of the Table/SQL API. It allows for implementing user-defined functions, custom formats, etc. with minimal dependencies. required 6ea7ba13722bb7b654248e3137f32baf 94844acbede2d68e9c91e96d9a8e70c972876b80 3c433064c6ac81796d5b73b6950710fbc7e7432377326d42ebb5885d6ad03c95 414c4db70dc58be27f16ac2e78694d3160c13e904ace2038c3aa835db6e67ad7932a050df19108244b1b03eae84bf1f75941e71e2f9e8be731709a42e226dc62 960f0dfccac773da46e3518dba75a1f17336bb222178d432937b3815fc6584f87603f1a95c57e5cd96eb7c4016e2307b pkg:maven/org.apache.flink/flink-table-common@1.17.0?type=jar com.ibm.icu icu4j 67.1 International Component for Unicode for Java (ICU4J) is a mature, widely used Java library providing Unicode and Globalization support 046a5f59abf6b67a464dea584d11e59d 2e159807158095566726600534034030dddab6d0 c4eb904caf5fba968a2f1a3b8aef14df801e9329b21697209ca30bfcf153867d b3036b162356a0a5dad39eee611dae27c6fbe53f9e5ec1f3529ab02d49d97093b58602f43dd855433a0bbe02f6253e46a9d1899911c8e2e73001ab2c9a79d68d c2b28649d0ef9bf68f258a9f432c627a553ead79670f0a7ada3d986091a0001c5ab9eca372f792734bff733370a61fb1 Unicode/ICU License https://raw.githubusercontent.com/unicode-org/icu/master/icu4c/LICENSE pkg:maven/com.ibm.icu/icu4j@67.1?type=jar https://oss.sonatype.org/service/local/staging/deploy/maven2https://unicode-org.atlassian.net/projects/ICUhttp://sourceforge.net/mailarchive/forum.php?forum_name=icu-supporthttps://github.com/unicode-org/icu com.google.protobuf protobuf-java 3.21.7 Core Protocol Buffers library. Protocol Buffers are a way of encoding structured data in an efficient yet extensible format. required 87417783d3677d733eae82bda7664943 96cfc7147192f1de72c3d7d06972155ffb7d180c a204ec68748a7b26351ae37a311e8de468f248d1916d5f8dbe812c1289d0a0ff d2450e62ea4003295a50bd863c9cc25016f58a08e94171d581ae8fca626c6dabfc458b8f55310874f9e17189704e9b4d0cc259641c36ef5e83466bdaf2770bde 23adb6f7e52739ca6e3c3f1f8a364a7ab3da5dabfe99fcc784c15fbff294fcdc91f40a2ee4362f66995eb9b1922b4746 BSD-3-Clause https://opensource.org/licenses/BSD-3-Clause pkg:maven/com.google.protobuf/protobuf-java@3.21.7?type=jar https://oss.sonatype.org/service/local/staging/deploy/maven2/https://github.com/protocolbuffers/protobuf org.codehaus.janino janino 3.0.11 The "JANINO" implementation of the "commons-compiler" API: Super-small, super-fast, independent from the JDK's "tools.jar". required a6e6d343f1a8c5c36b1a0483e7f5fbab e699e368095379ba0402ea1780a87fcaea16e68f 9237b71d2329180e59210e9aaa100ee313454ef0ae588608c75cb19319591be1 e6b850f0fc63fc08bae80304b9660c719920a14f24b9bab78852031c559a820720a71fd7c1552fe456fd60197cecace11cdc72aef77332c62fe45cab2aff023f 2eaa95a0b28833a8ce44f693fe1582a687eeff147756de0452a7c08c088e95981033a3745d6833b617b6e523dedf6a6c BSD-3-Clause pkg:maven/org.codehaus.janino/janino@3.0.11?type=jar https://github.com/janino-compiler/janino org.codehaus.janino commons-compiler 3.0.11 The "commons-compiler" API, including the "IExpressionEvaluator", "IScriptEvaluator", "IClassBodyEvaluator" and "ISimpleCompiler" interfaces. 6dea71e8377d7b5df36b11a57406b261 f2a6ec7fbc929c9fc87ff8bb486c0574951c5b09 0f1a4f5f265c701a31933244ae7045fcef18b4fa5950417e25ee70be50dddacf 277a0f7b2d4257f6ef0e8edab04b45d882f93c97a99456d2f46ea72c85b66d35b783c9236f8a7a1e16bc9c689fb14649dfe79c4b3150f51f834890da3f31db5f c22614f6fd01f2182e4cbbaf11573c94d4332e30245ba1efabd80f72dc97308b359059e02db6e86906cb98447d74a68d BSD-3-Clause pkg:maven/org.codehaus.janino/commons-compiler@3.0.11?type=jar https://github.com/janino-compiler/janino QOS.ch org.slf4j slf4j-api 1.7.36 The slf4j API required 872da51f5de7f3923da4de871d57fd85 6c62681a2f655b49963a5983b8b0950a6120ae14 d3ef575e3e4979678dc01bf1dcce51021493b4d11fb7f1be8ad982877c16a1c0 f9b033fc019a44f98b16048da7e2b59edd4a6a527ba60e358f65ab88e0afae03a9340f1b3e8a543d49fa542290f499c5594259affa1ff3e6e7bf3b428d4c610b 2b14ad035877087157e379d3277dcdcd79e58d6bdb147c47d29e377d75ce53ad42cafbf22f5fb7827c7e946ff4876b9a MIT https://opensource.org/licenses/MIT pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar http://www.qos.chhttps://oss.sonatype.org/service/local/staging/deploy/maven2/https://github.com/qos-ch/slf4j The Apache Software Foundation org.apache.flink flink-shaded-force-shading 16.1 The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users. optional 0f703324b629fbc0d0cbf22375515477 5040816ebca54b5bb4d5bb98b741ff77da59505b 44ab80c42c380bc813bbf477256a4f4334e44088c8fb1b34d3c867733e54c664 bf56dc058175101f58f2abfb3307349e9e911743f118c9309e0b8d3860f164c2c88b5fa1113e2270c1533bf37dc8102f1482099f11bdaa5acf316b7a9808093b 3b7c079f14bfeb02219e4430fa2bbe66e9000596116c5247f98e0b0852bd59877559358704c8be7d18c0fbed1fff0880 Apache-2.0 pkg:maven/org.apache.flink/flink-shaded-force-shading@16.1?type=jar https://github.com/apache/flink-shadedhttps://www.apache.org/https://repository.apache.org/service/local/staging/deploy/maven2https://mail-archives.apache.org/mod_mbox/www-announce/ com.google.code.findbugs jsr305 1.3.9 JSR305 Annotations for Findbugs optional 1d5a772e400b04bb67a7ef4a0e0996d8 40719ea6961c0cb6afaeb6a921eaa1f6afd4cfdf 905721a0eea90a81534abb7ee6ef4ea2e5e645fa1def0a5cd88402df1b46c9ed 06da282cfd8e30d9f8cf17702b8709172b00e22b75a627a1d85f8989615b8a1a401bc25d9aee7b14aed1d9b5df73bf2ea8d66f9c8468d9577c29f0ccfa2cc70a 56e6b41ef62eb5edfed0203802cefae9c2df86388148e420bb0c687abb2b80e14d5c2a82d5b35dce4badaf148f94eada Apache-2.0 pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar http://findbugs.googlecode.com/svn/trunk/ Joe Walnes, Henri Tremblay, Leonardo Mesquita org.objenesis objenesis 2.1 A library for instantiating Java objects 32ccb1d20a42b5aaaceb90c9082a2efa 87c0ea803b69252868d09308b4618f766f135a96 c74330cc6b806c804fd37e74487b4fe5d7c2750c5e15fbc6efa13bdee1bdef80 1dec9ee30812b8006e536a2749c5781ccdc4b446539efb6fa534f22e70562033876bf2eb22c6946d617695729bd65f0f65b984f15f05ac63db5bed215e74427c 657b8a3b80a5475f198425396f7264301f9e0f3ad5dc336ef0c7b46874f5544861a8a2fd48cdb5f672e199a6935c19d1 Apache-2.0 pkg:maven/org.objenesis/objenesis@2.1?type=jar http://oss.sonatype.org/service/local/staging/deploy/maven2/https://github.com/easymock/easymock