{
  "bomFormat" : "CycloneDX",
  "specVersion" : "1.4",
  "serialNumber" : "urn:uuid:b2e61c5c-3083-4ea5-9e28-c4f642b0ee0d",
  "version" : 1,
  "metadata" : {
    "timestamp" : "2023-03-17T09:58:37Z",
    "tools" : [
      {
        "vendor" : "OWASP Foundation",
        "name" : "CycloneDX Maven plugin",
        "version" : "2.7.3",
        "hashes" : [
          {
            "alg" : "MD5",
            "content" : "ab886f1cb1a79b4244ac54dde22a0989"
          },
          {
            "alg" : "SHA-1",
            "content" : "9ed658496dfeef87fe6072b95c62ec37165cc741"
          },
          {
            "alg" : "SHA-256",
            "content" : "df9b43417bef6aeac86a393abcc1ac2ed0518239ba544aaeb595b9619c603503"
          },
          {
            "alg" : "SHA-512",
            "content" : "223da34bb51c5339e0f7285757608c1a56b1ea887f7ad835af9299fabacc693053163da74af352af86b16e18e04db730bd44214eda04291410c42b6ae657d85c"
          },
          {
            "alg" : "SHA-384",
            "content" : "3aaf057329ed0f90ec3a49a45b3cf4ec5ce637fd75d6202e9483fa4274cec3e7b74308016e146b6ba087df5fce9397bb"
          }
        ]
      }
    ],
    "component" : {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.flink",
      "name" : "flink-python",
      "version" : "1.17.0",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.flink/flink-python@1.17.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink/flink-python"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.flink/flink-python@1.17.0?type=jar"
    }
  },
  "components" : [
    {
      "group" : "org.apache.flink",
      "name" : "flink-core",
      "version" : "1.17.0",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "52790bc8580c0381f3722126f2672e92"
        },
        {
          "alg" : "SHA-1",
          "content" : "1211131371b252ba1b25715247c93d60a09839f2"
        },
        {
          "alg" : "SHA-256",
          "content" : "bc024437713d954fc88b238cf94f111c735afae5666b51d0eb3e0084aefce333"
        },
        {
          "alg" : "SHA-512",
          "content" : "d35a9acb6fd557ab3497d87666597c728bef60aab85242bddfb1436d6bd5477b5fbea4bc7f93cd5e06e522f542cc077c2d2ae2f88d2550080d07d0289792907a"
        },
        {
          "alg" : "SHA-384",
          "content" : "a0a606829c35e4ef90057af8f4612f7d9808e34fe546b3dcc531b43708bc1de7bb7b9a696bf8db15f532ef6595b0265e"
        }
      ],
      "licenses" : [ ],
      "purl" : "pkg:maven/org.apache.flink/flink-core@1.17.0?type=jar",
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.flink/flink-core@1.17.0?type=jar"
    },
    {
      "group" : "org.apache.flink",
      "name" : "flink-annotations",
      "version" : "1.17.0",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "8722229171d763f57b027d0a2d2be7aa"
        },
        {
          "alg" : "SHA-1",
          "content" : "6a627ba30bf3e3be766f440695d4b5e5a5dcb4e9"
        },
        {
          "alg" : "SHA-256",
          "content" : "ca9f02d09d74d40196ffcd706030fde626e5aa4611e6dfaee1ff3d0ea343ebff"
        },
        {
          "alg" : "SHA-512",
          "content" : "5789077b29a903e3b879dc713388f9b0fb35ae0034bf53318f34c05302fbabc3a9fecbed67280aeb547cb8674650e71963909e596f073b13867418e00a37e33c"
        },
        {
          "alg" : "SHA-384",
          "content" : "197d6829888940ced6cbcfc8e7fdb822486fc60c5d393a7e278aad6ef42be3b9a050826e33e782d8cfbb1fc18a9db0b3"
        }
      ],
      "licenses" : [ ],
      "purl" : "pkg:maven/org.apache.flink/flink-annotations@1.17.0?type=jar",
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.flink/flink-annotations@1.17.0?type=jar"
    },
    {
      "group" : "org.apache.flink",
      "name" : "flink-metrics-core",
      "version" : "1.17.0",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "1ed9920da68ac343424f40cf4a6b824f"
        },
        {
          "alg" : "SHA-1",
          "content" : "666fb09d3ad2098625aa4f2efc4ce24754abeed7"
        },
        {
          "alg" : "SHA-256",
          "content" : "ecb1164a32f0ff87db9c42f96aef8281b66a78a42e1f7ee2500a8255ebf4110f"
        },
        {
          "alg" : "SHA-512",
          "content" : "4fec1b5d13a7666f6ce73feaa7ea677c1ac110aeeb54ea2b0d39675098d920d8a8df8ecd253e38d9e1f24d09c6344a4cd3591433e4e06be861ba411f14c93529"
        },
        {
          "alg" : "SHA-384",
          "content" : "6233b45a5fddef0569b01ee891bec76d49ded5697d210d05a14c18e5c4166add2bf3b1d60f4fba0188cfa448c6e0333d"
        }
      ],
      "licenses" : [ ],
      "purl" : "pkg:maven/org.apache.flink/flink-metrics-core@1.17.0?type=jar",
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.flink/flink-metrics-core@1.17.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.flink",
      "name" : "flink-shaded-asm-9",
      "version" : "9.3-16.1",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "8ab02de7e3964cac3f5f49c2b299aaf8"
        },
        {
          "alg" : "SHA-1",
          "content" : "252941e7a5e6772647ec1c222bebd92eddea79f2"
        },
        {
          "alg" : "SHA-256",
          "content" : "bca08c293e85b88a3ee5a4b4367af319c396047e03257a4787370f15f39dce6d"
        },
        {
          "alg" : "SHA-512",
          "content" : "d712544a0f1c3d0d4db88045de14b014f23b745b6f98dae78a3656cb3b3d7418f91fda32f87d16f8a69c45b47abec57f8632ed6e7735136a79873ee272cb5a50"
        },
        {
          "alg" : "SHA-384",
          "content" : "4982ca611821a37c4f5828d3859fceff2ae35846bf1a7d3e61b652cc6fefb3ca1f242886bf637000af35bbef4f78a276"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.flink/flink-shaded-asm-9@9.3-16.1?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink-shaded"
        },
        {
          "type" : "website",
          "url" : "https://www.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.flink/flink-shaded-asm-9@9.3-16.1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.flink",
      "name" : "flink-shaded-jackson",
      "version" : "2.13.4-16.1",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "c26b24a1094f56a837610d5ea08ae0f6"
        },
        {
          "alg" : "SHA-1",
          "content" : "004e5fb57e10af9cd814258221c9f50c920e6c09"
        },
        {
          "alg" : "SHA-256",
          "content" : "601da81a8920228bfefc0a38229304340a6296a1f431522973bd2d7007f09d4e"
        },
        {
          "alg" : "SHA-512",
          "content" : "b2a66341cceb0dc75d1d1ccf4dcab69bef6289060b1688556443327b508b039d510298aea67dd1540122312db40d91dd86ad852f2afd0b087a479da340b580c2"
        },
        {
          "alg" : "SHA-384",
          "content" : "f9c750a59372ecbfd951b8ae5efef49110c060d43bde418bc723c5156bcf81b44f5a4c65fccbffa9642c978628dc9b00"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.flink/flink-shaded-jackson@2.13.4-16.1?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink-shaded"
        },
        {
          "type" : "website",
          "url" : "https://www.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.flink/flink-shaded-jackson@2.13.4-16.1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-lang3",
      "version" : "3.12.0",
      "description" : "Apache Commons Lang, a package of Java utility classes for the classes that are in java.lang's hierarchy, or are considered to be so standard as to justify existence in java.lang.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "19fe50567358922bdad277959ea69545"
        },
        {
          "alg" : "SHA-1",
          "content" : "c6842c86792ff03b9f1d1fe2aab8dc23aa6c6f0e"
        },
        {
          "alg" : "SHA-256",
          "content" : "d919d904486c037f8d193412da0c92e22a9fa24230b9d67a57855c5c31c7e94e"
        },
        {
          "alg" : "SHA-512",
          "content" : "fbdbc0943cb3498b0148e86a39b773f97c8e6013740f72dbc727faeabea402073e2cc8c4d68198e5fc6b08a13b7700236292e99d4785f2c9989f2e5fac11fd81"
        },
        {
          "alg" : "SHA-384",
          "content" : "c34b8a0e0eba2168ad56fedeb7a1d710b6f1d3f1ce6aae99a4e0247bd120efbbadc8dcb2f731045b8a16e3efd30604dc"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/LANG"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-lang.git"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "website",
          "url" : "https://www.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-text",
      "version" : "1.10.0",
      "description" : "Apache Commons Text is a library focused on algorithms working on strings.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "4afc9bfa2d31dbf7330c98fcc954b892"
        },
        {
          "alg" : "SHA-1",
          "content" : "3363381aef8cef2dbc1023b3e3a9433b08b64e01"
        },
        {
          "alg" : "SHA-256",
          "content" : "770cd903fa7b604d1f7ef7ba17f84108667294b2b478be8ed1af3bffb4ae0018"
        },
        {
          "alg" : "SHA-512",
          "content" : "afd836a1094449e0a791fee67363666c47b6d24acff353a5089b837b332c0f4af89565c354682521e37062d20e6b52d70c77bb4f24cca9b9532c274fc708a831"
        },
        {
          "alg" : "SHA-384",
          "content" : "06c56e6e513dd77cf10d0da46cdea08c34e220e81fa024735b668c6650df4234e564fe865ff5cafea963f56b1e8ffd4a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/TEXT"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-text.git"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-parent/actions"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "website",
          "url" : "https://www.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar"
    },
    {
      "group" : "com.esotericsoftware.kryo",
      "name" : "kryo",
      "version" : "2.24.0",
      "description" : "Fast, efficient Java serialization",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "6cf0fa5b5d4f6b8226fd4a4bfb7532b8"
        },
        {
          "alg" : "SHA-1",
          "content" : "0c6b206e80cfd97e66a1364003724491c757b92f"
        },
        {
          "alg" : "SHA-256",
          "content" : "7e56b32c635058f9aa2820f88919ab702d029cbcd15285da9992e36cc0ae52f2"
        },
        {
          "alg" : "SHA-512",
          "content" : "a4c6ce768528a03c219cc6a41b22293f78e433c849c90391b64dda3f2376fd79951a89c5f4e6701bcbcb6eee9abffe2390cfb12dba3b885e4a3d411a26b78f40"
        },
        {
          "alg" : "SHA-384",
          "content" : "678ad1b7f4d99910b8ff44a6c8f78ccae91f823161ce23de39077397352919b7257e1e6e0dea90900be973291ea19282"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/com.esotericsoftware.kryo/kryo@2.24.0?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "https://github.com/EsotericSoftware/kryo"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.esotericsoftware.kryo/kryo@2.24.0?type=jar"
    },
    {
      "group" : "com.esotericsoftware.minlog",
      "name" : "minlog",
      "version" : "1.2",
      "description" : "Minimal overhead Java logging",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f7cfbdf63b67df0bbfa4c7cb260885bc"
        },
        {
          "alg" : "SHA-1",
          "content" : "59bfcd171d82f9981a5e242b9e840191f650e209"
        },
        {
          "alg" : "SHA-256",
          "content" : "a678cb1aa8f5d03d901c992c75741841d98a9bc3d55dad02e84d65315c4e60f2"
        },
        {
          "alg" : "SHA-512",
          "content" : "7b4082766ad740d86708783f3b08780ed72dd18062aa9ba422c4b9016b332d2334ae511f50ef7d89e4eedbdac5cebc51ab6ddaf4d1eea857a3250eb5962f0d08"
        },
        {
          "alg" : "SHA-384",
          "content" : "932a282a9c06864001f8212199e4be05543609adbd985c5f4517ee6eba734acd3fd8812213bc0c98af264637cbf9c78d"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/com.esotericsoftware.minlog/minlog@1.2?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "http://minlog.googlecode.com/svn/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.esotericsoftware.minlog/minlog@1.2?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-collections",
      "name" : "commons-collections",
      "version" : "3.2.2",
      "description" : "Types that extend and augment the Java Collections Framework.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f54a8510f834a1a57166970bfc982e94"
        },
        {
          "alg" : "SHA-1",
          "content" : "8ad72fe39fa8c91eaaf12aadb21e0c3661fe26d5"
        },
        {
          "alg" : "SHA-256",
          "content" : "eeeae917917144a68a741d4c0dff66aa5c5c5fd85593ff217bced3fc8ca783b8"
        },
        {
          "alg" : "SHA-512",
          "content" : "51c72f9aca7726f3c387095e66be85a6df97c74b00a25434b89188c1b8eab6e2b55accf7b9bd412430d22bd09324dec076e300b3d1fa39fccad471f0f2a3da16"
        },
        {
          "alg" : "SHA-384",
          "content" : "dd4e99b3314bd3c1a1ee26296615d9e44dadf7a1f8a7bbba44fb95121803d331e36d4cca4260e7609af78a47ba3e4073"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-collections/commons-collections@3.2.2?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/COLLECTIONS"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/viewvc/commons/proper/collections/trunk"
        },
        {
          "type" : "build-system",
          "url" : "https://continuum-ci.apache.org/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "website",
          "url" : "http://www.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-collections/commons-collections@3.2.2?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-compress",
      "version" : "1.21",
      "description" : "Apache Commons Compress software defines an API for working with compression and archive formats. These include: bzip2, gzip, pack200, lzma, xz, Snappy, traditional Unix Compress, DEFLATE, DEFLATE64, LZ4, Brotli, Zstandard and ar, cpio, jar, tar, zip, dump, 7z, arj.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "2a713d10331bc4e13459a3dc0463f16f"
        },
        {
          "alg" : "SHA-1",
          "content" : "4ec95b60d4e86b5c95a0e919cb172a0af98011ef"
        },
        {
          "alg" : "SHA-256",
          "content" : "6aecfd5459728a595601cfa07258d131972ffc39b492eb48bdd596577a2f244a"
        },
        {
          "alg" : "SHA-512",
          "content" : "c92d9a12547aab475e057955ad815fdfe92ff44c78383fa5af54b089f1bff5525126ef6aef93334f3bfc22e2fef4ad0d969f69384e978a83a55f011a53e7e471"
        },
        {
          "alg" : "SHA-384",
          "content" : "da56f95d420cd7278cee646f4cd0e7a5ee12b6a2894efaec12f0ff7b56c3d43e5db736fe1ed66ff91118b16f2d64ebef"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-compress@1.21?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/COMPRESS"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-compress.git"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "website",
          "url" : "https://www.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-compress@1.21?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.flink",
      "name" : "flink-shaded-guava",
      "version" : "30.1.1-jre-16.1",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "74bc641198b30c213cd9a2754297100d"
        },
        {
          "alg" : "SHA-1",
          "content" : "ad8725e964b6c2c0df16877f4132ad348c4ff09c"
        },
        {
          "alg" : "SHA-256",
          "content" : "d5ea841b0a51c7db4ecc48c96c0f334da40a9980645cf6d9e6e2b04b2441315c"
        },
        {
          "alg" : "SHA-512",
          "content" : "801c9fae8aaf7cec12f82e9d84b2e93648b4f7e58a4f240029db17b922c394ade14082e2022e3036bd33edaf1eb1bb0881570345270bb8820ab827efc9e42aea"
        },
        {
          "alg" : "SHA-384",
          "content" : "0b3aca631b15d8e5617952c2c18bed624e0f24b24ca7fb129c4ceb28c416e6e59d0acec3d7f624a7534fb2e9edfb83b6"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.flink/flink-shaded-guava@30.1.1-jre-16.1?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink-shaded"
        },
        {
          "type" : "website",
          "url" : "https://www.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.flink/flink-shaded-guava@30.1.1-jre-16.1?type=jar"
    },
    {
      "group" : "org.apache.flink",
      "name" : "flink-clients",
      "version" : "1.17.0",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "2817484e46b950818250d5431699e459"
        },
        {
          "alg" : "SHA-1",
          "content" : "017d5a12c29292bbb9a41de8b8b632a9d8541ff6"
        },
        {
          "alg" : "SHA-256",
          "content" : "947d7842ee76d705d4166c99dd5d4328d8811cb6d4c6ae5714fb3865617d7097"
        },
        {
          "alg" : "SHA-512",
          "content" : "33965c334e3320afbb58698fce24d33a03413c68e4487ade889720e700442a180a7e2fade837821a5ce3350c37ba449701f315d34d2a688b371594e2e2e03ca6"
        },
        {
          "alg" : "SHA-384",
          "content" : "9c9f72bc17ff283dcd168ab64a5b74e5527c4b43f188d0f81ff2f5158f2889e764bbf69f559dc18b91af031ad0b3b54a"
        }
      ],
      "licenses" : [ ],
      "purl" : "pkg:maven/org.apache.flink/flink-clients@1.17.0?type=jar",
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.flink/flink-clients@1.17.0?type=jar"
    },
    {
      "group" : "org.apache.flink",
      "name" : "flink-runtime",
      "version" : "1.17.0",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f5f0f23d1b3db23f050e7d949370ee82"
        },
        {
          "alg" : "SHA-1",
          "content" : "a9c9821762932ce8fd25a0c783de697108e95759"
        },
        {
          "alg" : "SHA-256",
          "content" : "8f1536770468c5f008891cc94043fd842c58dd5f61f15a341fd21b3e8f154cb0"
        },
        {
          "alg" : "SHA-512",
          "content" : "6d2e83508ade4b373eeb1421f44b5cf06455e9be75ad5bf92d478eefe8c130c0ca08fb8e179b1012a46bed65a8272010e8c7ae5aec195b4875fa49301387236d"
        },
        {
          "alg" : "SHA-384",
          "content" : "5ad66f1e93443fb12ed1ce04401d1333de0f1d139d211f4f2f2b0cb0821df0af6fdae87513bbfb0cae6f010ba00f71d0"
        }
      ],
      "licenses" : [ ],
      "purl" : "pkg:maven/org.apache.flink/flink-runtime@1.17.0?type=jar",
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.flink/flink-runtime@1.17.0?type=jar"
    },
    {
      "group" : "org.apache.flink",
      "name" : "flink-optimizer",
      "version" : "1.17.0",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "4ef6604fb0bd01e9fa1aa68511f82996"
        },
        {
          "alg" : "SHA-1",
          "content" : "8145503bca8f235a94e56e68847df3a11d6335a0"
        },
        {
          "alg" : "SHA-256",
          "content" : "0ee4fedac51b4e811fa0f30065b1b3ff7c2eff84f208df5f946ae6c58b2f5736"
        },
        {
          "alg" : "SHA-512",
          "content" : "e528f8447e5d442d0a25cee268a7b11be3f846bbd585740c0a3cab2347f987662bf60cb7d9b572504871f6e26d00bfbf5ae48f29df293ee79835391a0d80c184"
        },
        {
          "alg" : "SHA-384",
          "content" : "d031887c1baee387c213a8d9aa1c715cd1361119b6395f8de4c572245f4fe4802a414943415234995361f58d215732a7"
        }
      ],
      "licenses" : [ ],
      "purl" : "pkg:maven/org.apache.flink/flink-optimizer@1.17.0?type=jar",
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.flink/flink-optimizer@1.17.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-cli",
      "name" : "commons-cli",
      "version" : "1.5.0",
      "description" : "Apache Commons CLI provides a simple API for presenting, processing and validating a Command Line Interface.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "6c3b2052160144196118b1f019504388"
        },
        {
          "alg" : "SHA-1",
          "content" : "dc98be5d5390230684a092589d70ea76a147925c"
        },
        {
          "alg" : "SHA-256",
          "content" : "bc8bb01fc0fad250385706e20f927ddcff6173f6339b387dc879237752567ac6"
        },
        {
          "alg" : "SHA-512",
          "content" : "b78ac2b418e9e9e7d0bc866664577199d320408a6f03151b3789bac365c986dd526df853599e633d7e50fe136cbf3eb9ce50c9cfa0ad38c3cc8d8ee416f61c40"
        },
        {
          "alg" : "SHA-384",
          "content" : "a7a2daa807c4007c506b5100f0a9b526c0052c4e1f6b699904ef9d2aba8195b6003dc4d47ca133b15e2f3e830bdbe6c4"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-cli/commons-cli@1.5.0?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/CLI"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-cli.git"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "website",
          "url" : "https://www.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-cli/commons-cli@1.5.0?type=jar"
    },
    {
      "group" : "org.apache.flink",
      "name" : "flink-java",
      "version" : "1.17.0",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f926a00f3e57ac3843bad16f8ec68772"
        },
        {
          "alg" : "SHA-1",
          "content" : "d8c66cce8f16f120761173666140e2b7d11ce1f6"
        },
        {
          "alg" : "SHA-256",
          "content" : "8ffd2444336ff9f66a144662cfc35c5ed96d4a605f7092717444ef435953d44f"
        },
        {
          "alg" : "SHA-512",
          "content" : "d5570c313e9a30a7741ef057ea1e5e2196ff635ab0374afd11b8e3e015e4655b83d9ac74a10048c3c46ca952c4627cf148d8dbf0bf6060927b7ad10a304b623c"
        },
        {
          "alg" : "SHA-384",
          "content" : "194d150baf67450f28f4e148f5d4c5d1f4ab1e6f2533eaea49eb6e50fde77fc0acc91dbe7142b343c1229e2f746cd448"
        }
      ],
      "licenses" : [ ],
      "purl" : "pkg:maven/org.apache.flink/flink-java@1.17.0?type=jar",
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.flink/flink-java@1.17.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-math3",
      "version" : "3.6.1",
      "description" : "The Apache Commons Math project is a library of lightweight, self-contained mathematics and statistics components addressing the most common practical problems not immediately available in the Java programming language or commons-lang.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "5b730d97e4e6368069de1983937c508e"
        },
        {
          "alg" : "SHA-1",
          "content" : "e4ba98f1d4b3c80ec46392f25e094a6a2e58fcbf"
        },
        {
          "alg" : "SHA-256",
          "content" : "1e56d7b058d28b65abd256b8458e3885b674c1d588fa43cd7d1cbb9c7ef2b308"
        },
        {
          "alg" : "SHA-512",
          "content" : "8bc2438b3b4d9a6be4a47a58410b2d4d0e56e05787ab24badab8cbc9075d61857e8d2f0bffedad33f18f8a356541d00f80a8597b5dedb995be8480d693d03226"
        },
        {
          "alg" : "SHA-384",
          "content" : "95d1186d9ca06a3ea2e6437ddec3a55698e2493d3e72f6f554746b74fa929892bd71a2ab501a4e7b1ce56b7cd64e7ab4"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-math3@3.6.1?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/MATH"
        },
        {
          "type" : "vcs",
          "url" : "https://git-wip-us.apache.org/repos/asf?p=commons-math.git"
        },
        {
          "type" : "build-system",
          "url" : "https://continuum-ci.apache.org/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "website",
          "url" : "http://www.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-math3@3.6.1?type=jar"
    },
    {
      "publisher" : "com.twitter",
      "group" : "com.twitter",
      "name" : "chill-java",
      "version" : "0.7.6",
      "description" : "chill-java",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "886eb8ef6db3880433f4a8e10ef37300"
        },
        {
          "alg" : "SHA-1",
          "content" : "a74b8d019d6941d82ff86d1612e382f4a0ae8259"
        },
        {
          "alg" : "SHA-256",
          "content" : "f7c41a2257be11e6c9bca97095c8f4b0299626941a3508469f90622eb8f8368e"
        },
        {
          "alg" : "SHA-512",
          "content" : "dc9973909b87cfb85ee45c90662612dd2bc137b7510172221eb47020f76b23eb3ea76c6b4fba4cee5d81e910f87aba71359136d33ae0f6424e3ce7123bf77dbf"
        },
        {
          "alg" : "SHA-384",
          "content" : "41e7faed7c2c22987868fba7cd6dac0d59d174d82d841ba4e5aa8675cc9265bf9d9df021553a781cfa24c4c9c7a35c5c"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.twitter/chill-java@0.7.6?type=jar",
      "type" : "library",
      "bom-ref" : "pkg:maven/com.twitter/chill-java@0.7.6?type=jar"
    },
    {
      "group" : "org.apache.flink",
      "name" : "flink-streaming-java",
      "version" : "1.17.0",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "8e226d9f7f0737622f9fa896893e1e64"
        },
        {
          "alg" : "SHA-1",
          "content" : "adba65e6269e889d66fc99c131cea69ff3911b53"
        },
        {
          "alg" : "SHA-256",
          "content" : "ab397b75188eec9c12e3413b57a1a22744c418df132951f52a770e41b84f9166"
        },
        {
          "alg" : "SHA-512",
          "content" : "f9ae5b15a42e70bd4ea9ad6ef090f2fa3946a1a0fec55ff49aaff9352ae2285d60c7feabdf805fbebbd15ac3bf4490a9cf3940652732e61fcc867dee46f8f62e"
        },
        {
          "alg" : "SHA-384",
          "content" : "2dd9ace59ed1df7f00a83625fa6031e874c76f119ea872f756d86802b18c86f5b1b017552d9212407f0451342d69a84c"
        }
      ],
      "licenses" : [ ],
      "purl" : "pkg:maven/org.apache.flink/flink-streaming-java@1.17.0?type=jar",
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.flink/flink-streaming-java@1.17.0?type=jar"
    },
    {
      "group" : "org.apache.flink",
      "name" : "flink-file-sink-common",
      "version" : "1.17.0",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f3063ed34431cfb1962af3f6844b76ed"
        },
        {
          "alg" : "SHA-1",
          "content" : "1db9a694889e4591efa1194baa1acebd7371030b"
        },
        {
          "alg" : "SHA-256",
          "content" : "ccde948f931459e551cb7a0005742309af3213e1023d5409670586d5e03509e4"
        },
        {
          "alg" : "SHA-512",
          "content" : "4176158968f0a7065a020d73956f9dccc901aa549a8a8e1b7335ede9dee89998dc28f770138c20620ee9b718f9b7dcd8892f76e663003787b609755e2151ebbd"
        },
        {
          "alg" : "SHA-384",
          "content" : "8039451dae28d9481172b7a5104d7e3296db761cec57a3ffde7c103b3d9f7a76aa68fa206b348b204a85b8f2388302dc"
        }
      ],
      "licenses" : [ ],
      "purl" : "pkg:maven/org.apache.flink/flink-file-sink-common@1.17.0?type=jar",
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.flink/flink-file-sink-common@1.17.0?type=jar"
    },
    {
      "group" : "org.apache.flink",
      "name" : "flink-table-common",
      "version" : "1.17.0",
      "description" : "This module contains extension points of the Table/SQL API. It allows for implementing user-defined functions, custom formats, etc. with minimal dependencies.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "6ea7ba13722bb7b654248e3137f32baf"
        },
        {
          "alg" : "SHA-1",
          "content" : "94844acbede2d68e9c91e96d9a8e70c972876b80"
        },
        {
          "alg" : "SHA-256",
          "content" : "3c433064c6ac81796d5b73b6950710fbc7e7432377326d42ebb5885d6ad03c95"
        },
        {
          "alg" : "SHA-512",
          "content" : "414c4db70dc58be27f16ac2e78694d3160c13e904ace2038c3aa835db6e67ad7932a050df19108244b1b03eae84bf1f75941e71e2f9e8be731709a42e226dc62"
        },
        {
          "alg" : "SHA-384",
          "content" : "960f0dfccac773da46e3518dba75a1f17336bb222178d432937b3815fc6584f87603f1a95c57e5cd96eb7c4016e2307b"
        }
      ],
      "licenses" : [ ],
      "purl" : "pkg:maven/org.apache.flink/flink-table-common@1.17.0?type=jar",
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.flink/flink-table-common@1.17.0?type=jar"
    },
    {
      "group" : "com.ibm.icu",
      "name" : "icu4j",
      "version" : "67.1",
      "description" : "International Component for Unicode for Java (ICU4J) is a mature, widely used Java library providing Unicode and Globalization support",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "046a5f59abf6b67a464dea584d11e59d"
        },
        {
          "alg" : "SHA-1",
          "content" : "2e159807158095566726600534034030dddab6d0"
        },
        {
          "alg" : "SHA-256",
          "content" : "c4eb904caf5fba968a2f1a3b8aef14df801e9329b21697209ca30bfcf153867d"
        },
        {
          "alg" : "SHA-512",
          "content" : "b3036b162356a0a5dad39eee611dae27c6fbe53f9e5ec1f3529ab02d49d97093b58602f43dd855433a0bbe02f6253e46a9d1899911c8e2e73001ab2c9a79d68d"
        },
        {
          "alg" : "SHA-384",
          "content" : "c2b28649d0ef9bf68f258a9f432c627a553ead79670f0a7ada3d986091a0001c5ab9eca372f792734bff733370a61fb1"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "Unicode/ICU License",
            "url" : "https://raw.githubusercontent.com/unicode-org/icu/master/icu4c/LICENSE"
          }
        }
      ],
      "purl" : "pkg:maven/com.ibm.icu/icu4j@67.1?type=jar",
      "externalReferences" : [
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://unicode-org.atlassian.net/projects/ICU"
        },
        {
          "type" : "mailing-list",
          "url" : "http://sourceforge.net/mailarchive/forum.php?forum_name=icu-support"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/unicode-org/icu"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.ibm.icu/icu4j@67.1?type=jar"
    },
    {
      "group" : "org.apache.flink",
      "name" : "flink-table-runtime",
      "version" : "1.17.0",
      "description" : "This module contains classes that are required by a task manager for execution of table programs.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "bba9289a128eae8032022d623fb18329"
        },
        {
          "alg" : "SHA-1",
          "content" : "f00213281a16d631aebef263a62a038430e9b278"
        },
        {
          "alg" : "SHA-256",
          "content" : "c35280e23d3ec3d33e31dda941dcebb397c69d65a2644d9fb1df4a41f4e2dac9"
        },
        {
          "alg" : "SHA-512",
          "content" : "2a0666b6299ff04ec3f583504be922f5d40264a5d2f8b54f5c3da3680e93c681b67b80a762cd9ff3afde9c5e3080a4178109f0821769c6b4e496d9f12bf775ce"
        },
        {
          "alg" : "SHA-384",
          "content" : "5df7ec8ceb1f44994c9f127a25853e5908c140299d3cac5089bc82a3cbe8f501edd34aed03816d4f355121d2f8125296"
        }
      ],
      "licenses" : [ ],
      "purl" : "pkg:maven/org.apache.flink/flink-table-runtime@1.17.0?type=jar",
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.flink/flink-table-runtime@1.17.0?type=jar"
    },
    {
      "group" : "org.apache.flink",
      "name" : "flink-table-api-java",
      "version" : "1.17.0",
      "description" : "This module contains the Table/SQL API for writing table programs within the table ecosystem using the Java programming language.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "9ec4d6b670e05a6995d909ae9e023cc7"
        },
        {
          "alg" : "SHA-1",
          "content" : "25850ea9b66a033639956ce23c2091ab3cbf5a66"
        },
        {
          "alg" : "SHA-256",
          "content" : "976b883a9092c3b35c5f366dcdc9fc7a767446737dce72263891dde4dba98c90"
        },
        {
          "alg" : "SHA-512",
          "content" : "71ec40ff23be4ad4969ee43be6d2fcd7486247a46f34ff2cd64ea894791ef49c4e36eaf2bf6d12bbdb10a1dd7ef0cf542fd57d2ebfd3e2411e157ad530786dbc"
        },
        {
          "alg" : "SHA-384",
          "content" : "2473cf4e5316b41a27ae47e5cd72b8ebec9b8dcb57e5ecdd58a0ac94ac75cf7fde58004c14b1574dd681b84ce37acb4b"
        }
      ],
      "licenses" : [ ],
      "purl" : "pkg:maven/org.apache.flink/flink-table-api-java@1.17.0?type=jar",
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.flink/flink-table-api-java@1.17.0?type=jar"
    },
    {
      "group" : "org.apache.flink",
      "name" : "flink-table-api-java-bridge",
      "version" : "1.17.0",
      "description" : "This module contains the Table/SQL API for writing table programs that interact with other Flink APIs using the Java programming language.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "1db3cb0a200b1ada590aaa64315ca44e"
        },
        {
          "alg" : "SHA-1",
          "content" : "67cbfdbf118fa2ffc6fa494f7eda66d442100a7f"
        },
        {
          "alg" : "SHA-256",
          "content" : "3c9e3ac7b648e18e03d4320073a16eda75656c74c339932155a401222f78a652"
        },
        {
          "alg" : "SHA-512",
          "content" : "90d37a448dc11c09b11b39429908b0679e6cfeb869febe2f008a19b1c2d548ae57c4f615c0615622e1b3337bb4132576356e232223435202486e12d7a80dcf52"
        },
        {
          "alg" : "SHA-384",
          "content" : "bc9de5d4f2cd06e46bb5b50465720f94ec5159089ab17653552b4bb2d7d88c0805d30e98ce1a418305dccaefb5c2c113"
        }
      ],
      "licenses" : [ ],
      "purl" : "pkg:maven/org.apache.flink/flink-table-api-java-bridge@1.17.0?type=jar",
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.flink/flink-table-api-java-bridge@1.17.0?type=jar"
    },
    {
      "group" : "org.apache.flink",
      "name" : "flink-table-api-bridge-base",
      "version" : "1.17.0",
      "description" : "This module contains the base code for bridging between Table API and DataStream API for both Java and Scala.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "94fc78b795c51b6b8e18f20f2491d4f2"
        },
        {
          "alg" : "SHA-1",
          "content" : "f412eb89c3d30d8ed5cd70941bdff00ad4df96e8"
        },
        {
          "alg" : "SHA-256",
          "content" : "ff10bf5fd4ce929e2cdb683f25e6151ecec824a058d3749f11cbfaf485c19dde"
        },
        {
          "alg" : "SHA-512",
          "content" : "ca0888ec362a72090d8f735a6fcb2bb55a87af868ffb90eef04d16a17abbf6fc49c63baf8d4a673a6bc54e5cf881891e186e694d063ef0c0173ba3933c8a27b3"
        },
        {
          "alg" : "SHA-384",
          "content" : "6f106930144e4022a4ea5563cd977da7cb893d1cf6bae4fe00a841fb793b156f3269e9529c55d04e07c5068877695649"
        }
      ],
      "licenses" : [ ],
      "purl" : "pkg:maven/org.apache.flink/flink-table-api-bridge-base@1.17.0?type=jar",
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.flink/flink-table-api-bridge-base@1.17.0?type=jar"
    },
    {
      "group" : "org.apache.flink",
      "name" : "flink-cep",
      "version" : "1.17.0",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "df5a627ee4b54536b93ff11cc813c5a4"
        },
        {
          "alg" : "SHA-1",
          "content" : "c5d1999d5c684f9de37c6a85d5f83642ee45b696"
        },
        {
          "alg" : "SHA-256",
          "content" : "2bcec9f1f8871b2c3ed83ce366d3a8ee690398d62d1bbda0fa185e08cfce9473"
        },
        {
          "alg" : "SHA-512",
          "content" : "1afdc6bf9463a806f94bc610b17b866fc60a2b8d6120e2f60aa5d54545f5e7a05c5c5c89440affd7108d11d471f6cec8715d7a58c79d56a07eddeab2157b2bd9"
        },
        {
          "alg" : "SHA-384",
          "content" : "9e888ea677d13210c2ecd7376cd7076329af77c3a81f2adf3fcd8b8850a98dcddc606397cfba2654a48ae8bcbeb21add"
        }
      ],
      "licenses" : [ ],
      "purl" : "pkg:maven/org.apache.flink/flink-cep@1.17.0?type=jar",
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.flink/flink-cep@1.17.0?type=jar"
    },
    {
      "group" : "org.apache.flink",
      "name" : "flink-connector-files",
      "version" : "1.17.0",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "cc87e143598e29ff8726411d35d4937d"
        },
        {
          "alg" : "SHA-1",
          "content" : "41f5acb20a0e009f461d2d812ae9cab6abd69afe"
        },
        {
          "alg" : "SHA-256",
          "content" : "3b477cacd2a7095fd5384b5b9f60dbc309c03cb2115db7a1d1d10cf9a3420347"
        },
        {
          "alg" : "SHA-512",
          "content" : "1919d082b3606478af3abbb4499f8fd1e33dd5b3fa489febab35a41f2142ce2a80b09d82af3cc5123aa5f18c84c8480ce662ad383faf6b72dcc4b0c28e6192d4"
        },
        {
          "alg" : "SHA-384",
          "content" : "2ade5f5196980debdef501406e03c248f8e0a9bc40b51049a0daaf2abad7f5553ea1d2fa2dc4ac12705035a086d8f370"
        }
      ],
      "licenses" : [ ],
      "purl" : "pkg:maven/org.apache.flink/flink-connector-files@1.17.0?type=jar",
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.flink/flink-connector-files@1.17.0?type=jar"
    },
    {
      "group" : "org.apache.flink",
      "name" : "flink-csv",
      "version" : "1.17.0",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "cdcf249bcffdf72f919104f2cedddf56"
        },
        {
          "alg" : "SHA-1",
          "content" : "499b031c38d0466cff7ef21440b0c6450487bccd"
        },
        {
          "alg" : "SHA-256",
          "content" : "ff7979017564736f06228eeb7d8a8cc6dd0031fce6d24610ff6f7d5124b3f024"
        },
        {
          "alg" : "SHA-512",
          "content" : "6ef938c9e773c353ff47b5ca33fbd5acba63c468c088eda05194c2651c9de9f4e7d944c230bdbcae7a32b9bc68626308ccfda21c8ad19ce19a44344797b2b6aa"
        },
        {
          "alg" : "SHA-384",
          "content" : "d7064cc199e20210f47fb929ae5b7cb718045d666a16c76e31dd07f75e5b19139a775f8ffeffd5ff131d3b658eba23df"
        }
      ],
      "licenses" : [ ],
      "purl" : "pkg:maven/org.apache.flink/flink-csv@1.17.0?type=jar",
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.flink/flink-csv@1.17.0?type=jar"
    },
    {
      "group" : "org.apache.beam",
      "name" : "beam-runners-java-fn-execution",
      "version" : "2.43.0",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "232fc08e8d7b9faa4ebe4756aa466144"
        },
        {
          "alg" : "SHA-1",
          "content" : "443b90fa1743b1992c198aa9bab687f216bd3898"
        },
        {
          "alg" : "SHA-256",
          "content" : "da25afe0b643800b836be6a84056798fb24137c67239ad8aa724bdad94cdb2cf"
        },
        {
          "alg" : "SHA-512",
          "content" : "14ac0eaa4e44f6552d2cde8264c34d3d4517daaf8c13ff2db3513e9021eed33acb353937001b6211c6bed70910fa14cdfbd683740b5b721bc42542e0eaa834da"
        },
        {
          "alg" : "SHA-384",
          "content" : "d555c92a71c831b444178f06d83b08bae935fbefaa3e519ff9b0424b6f492524b0033c6edd8053fee19a9df0ec096527"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.beam/beam-runners-java-fn-execution@2.43.0?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/apache/beam/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "http://www.mail-archive.com/dev%beam.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=beam.git;a=summary"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.beam/beam-runners-java-fn-execution@2.43.0?type=jar"
    },
    {
      "group" : "org.checkerframework",
      "name" : "checker-qual",
      "version" : "3.10.0",
      "description" : "checker-qual contains annotations (type qualifiers) used by the Checker Framework to type-check Java source code. Please see artifact: org.checkerframework:checker",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "d7e964cf19235ee401c48383306aec86"
        },
        {
          "alg" : "SHA-1",
          "content" : "710fd6abff4b26b40dc0917050dc4c67efcf60b6"
        },
        {
          "alg" : "SHA-256",
          "content" : "a4dc882ca6aac496d33381e5e5eb0604c45483b004bc3eac9368f1bb17cb2512"
        },
        {
          "alg" : "SHA-512",
          "content" : "df244d8121f246e459c0354a1ab7275947b469413fb6024b2e77b1bf155c190b027daa8784ac7fccbd82058bdd0fb0ae8fac4dd9d1b6bb294cac787e931de621"
        },
        {
          "alg" : "SHA-384",
          "content" : "f3f1080829a7ca7d6965f77d2b405a83a64e40b04c22f5de5bfb2801d42280217a940b14fb68c88b497b3f6f22e203f8"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT"
          }
        }
      ],
      "purl" : "pkg:maven/org.checkerframework/checker-qual@3.10.0?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "https://github.com/typetools/checker-framework.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.checkerframework/checker-qual@3.10.0?type=jar"
    },
    {
      "group" : "org.apache.beam",
      "name" : "beam-vendor-guava-26_0-jre",
      "version" : "0.1",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "e90a24186f5634be4cc986771b91d68c"
        },
        {
          "alg" : "SHA-1",
          "content" : "f309c3047ca99428e567afa42d233fb3e839bde1"
        },
        {
          "alg" : "SHA-256",
          "content" : "f2aba2cdf5d3ae672f2723978b7cd60c5b4fe44a1f82a8e4b18e6c21bb01ab0b"
        },
        {
          "alg" : "SHA-512",
          "content" : "5ee180ae30c3b57e5bed30a3e06c96a7fdd6bec0079e164c0b3d027c276b7dda67a181623036f9869b3a57fc0540911ffee8f6778187178c68d3fb1044891bef"
        },
        {
          "alg" : "SHA-384",
          "content" : "7d0f80504f0dc518777b0dd0cdebe1e34711d4d872141085dd177d1122fa5111995ed9a08c0173389d97d6c925e3103c"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.beam/beam-vendor-guava-26_0-jre@0.1?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/BEAM"
        },
        {
          "type" : "mailing-list",
          "url" : "http://www.mail-archive.com/dev%beam.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=beam.git;a=summary"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.beam/beam-vendor-guava-26_0-jre@0.1?type=jar"
    },
    {
      "group" : "org.apache.beam",
      "name" : "beam-runners-core-construction-java",
      "version" : "2.43.0",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "55543cfae3a1afd90ef941d818395df8"
        },
        {
          "alg" : "SHA-1",
          "content" : "bddae6e9e0d23e618e017dd817dc18fedcdbf1bc"
        },
        {
          "alg" : "SHA-256",
          "content" : "d72aa50f810b15cfaa7a2cee1f165a0196380b161144718f40ba25e3fd5b701d"
        },
        {
          "alg" : "SHA-512",
          "content" : "4e8751748de30bfc47cded02de4921caa63ce048d34740f8947adebb3ec728e422e614c0d8760a4e51b73318d2f60fcf8a019620f14b4c38ff42b255b31f6404"
        },
        {
          "alg" : "SHA-384",
          "content" : "3b7bd679684d1cee4be603154802fc0ae0417b4e6751a9573dfd5f560524a38dc1a50d2651f0454b3e479dc9b7809c2b"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.beam/beam-runners-core-construction-java@2.43.0?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/apache/beam/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "http://www.mail-archive.com/dev%beam.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=beam.git;a=summary"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.beam/beam-runners-core-construction-java@2.43.0?type=jar"
    },
    {
      "group" : "io.github.classgraph",
      "name" : "classgraph",
      "version" : "4.8.104",
      "description" : "The uber-fast, ultra-lightweight classpath and module scanner for JVM languages.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "99ef9ac36f5ff5f23bb1188662c6e822"
        },
        {
          "alg" : "SHA-1",
          "content" : "6a40ced7ec6898f6046f0b04415fa2b1578f4457"
        },
        {
          "alg" : "SHA-256",
          "content" : "78fbdf33a59d889301ce4d39cad6f39a8a5ec3ef93d6ba86ab0fcf61cbe2ea1d"
        },
        {
          "alg" : "SHA-512",
          "content" : "17888fdbf079aad2e76809d663170dcbc5b20b5de0f4688bd51f49a60d79f9d688e56a108829953ee61f79ddc3db09c09dd9fc91a4724c5a75059a94d1b89b44"
        },
        {
          "alg" : "SHA-384",
          "content" : "71b4fff7089bb8db4690d8c302109c289285291ec26e1cc6ddf205619182257b22da218f4702c1642d8128b969c0270d"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT"
          }
        }
      ],
      "purl" : "pkg:maven/io.github.classgraph/classgraph@4.8.104?type=jar",
      "externalReferences" : [
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/classgraph/classgraph/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/classgraph/classgraph"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.github.classgraph/classgraph@4.8.104?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.avro",
      "name" : "avro",
      "version" : "1.11.1",
      "description" : "Avro core components",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "9fad4fb0e34810ae5f3d7cb5223a7e1c"
        },
        {
          "alg" : "SHA-1",
          "content" : "81af5d4b9bdaaf4ba41bcb0df5241355ec34c630"
        },
        {
          "alg" : "SHA-256",
          "content" : "1213dfffe9295daa3d986713ae36b8daad36bfba039810264bca1cdac0cf8b6a"
        },
        {
          "alg" : "SHA-512",
          "content" : "a0e8b7c1f138747334a2f1f20f40a6893543d049243f7cec67ee572ec4a40e4dc7b82e9b8769c64a90eb9c8ed92cc646daee3cacd523d3e9289a67decd2bb0d6"
        },
        {
          "alg" : "SHA-384",
          "content" : "2406810a329612f96f2881e9912dc42cf880eb721026b13e45716586860921223fdc003081e4711ad9ee26a1d85936cc"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.avro/avro@1.11.1?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/AVRO"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/avro-dev/"
        },
        {
          "type" : "website",
          "url" : "https://www.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.avro/avro@1.11.1?type=jar"
    },
    {
      "group" : "org.apache.beam",
      "name" : "beam-model-pipeline",
      "version" : "2.43.0",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "86c39522c87dbecb6fe2ddbb66c8c58f"
        },
        {
          "alg" : "SHA-1",
          "content" : "7a4b675878c805396183448ac625dad05f12016b"
        },
        {
          "alg" : "SHA-256",
          "content" : "813898fbb4013eaceb97e9d4a4161a903b4acfca14259b325187d801f76c6125"
        },
        {
          "alg" : "SHA-512",
          "content" : "fb4ae108f020b55acea1c6eb944ae4b5934384e897417340b4c199aee36caa364d56cc55d94bdd9ee8e5ed0ed9631888b3d0108bfdf95ffc191fb6d05c49acee"
        },
        {
          "alg" : "SHA-384",
          "content" : "c3d5dfeceadc6b18becc25d8ea66da079adb2404c7faf62c1effb23df5b369b15fbc555530886f4dc39ebb4edde81c0d"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.beam/beam-model-pipeline@2.43.0?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/apache/beam/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "http://www.mail-archive.com/dev%beam.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=beam.git;a=summary"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.beam/beam-model-pipeline@2.43.0?type=jar"
    },
    {
      "group" : "org.conscrypt",
      "name" : "conscrypt-openjdk-uber",
      "version" : "2.5.1",
      "description" : "Conscrypt: OpenJdk UberJAR",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "ee6de6e578762d474b2ca5418e16815b"
        },
        {
          "alg" : "SHA-1",
          "content" : "3658b276ab54bd600f754b3c8cf4b7cd77fc61e6"
        },
        {
          "alg" : "SHA-256",
          "content" : "01f9c742cb592a151e2e62bd5397a8980628a967001fcdacd4aa4744678685f3"
        },
        {
          "alg" : "SHA-512",
          "content" : "033a8e18eae24add9ed1eb2448c5b4adfff903e9b455a44d6aa5e0b39be6c0969b43b789f662564ed63bf6714b389410a531d158a70a886bf388960826a8af7a"
        },
        {
          "alg" : "SHA-384",
          "content" : "5374aaaaafa4897319b94e0360b14960d71f0de7c332d9226e8397c27d4ab81ce6b062a414b7d51fbc743b2d7bfd4ac3"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.conscrypt/conscrypt-openjdk-uber@2.5.1?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "https://github.com/google/conscrypt"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.conscrypt/conscrypt-openjdk-uber@2.5.1?type=jar"
    },
    {
      "group" : "org.apache.beam",
      "name" : "beam-model-fn-execution",
      "version" : "2.43.0",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "706377df14df9afc44b65194451dced8"
        },
        {
          "alg" : "SHA-1",
          "content" : "f14440a703a15b94f03c16e3c036a39b17241b41"
        },
        {
          "alg" : "SHA-256",
          "content" : "002431116246c9f7aae4ffae96b491c37a4e0fefd4c44b2fc06e13d2a9aebcdd"
        },
        {
          "alg" : "SHA-512",
          "content" : "8db33c972ffcba420edcc0e1cf5609453dd04d327971062c3ded72b388dd94d9e2440640cc8cce17c5e72a9e8af3ae8d700ac9585887222a47af08dc00d47b8e"
        },
        {
          "alg" : "SHA-384",
          "content" : "afb75a9b1063e020e4c716f1f7542252aabccc3a5fa2b7bdf3a9a788cae7504dfaaefc8de25fff2744a2a7e8c373d308"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.beam/beam-model-fn-execution@2.43.0?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/apache/beam/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "http://www.mail-archive.com/dev%beam.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=beam.git;a=summary"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.beam/beam-model-fn-execution@2.43.0?type=jar"
    },
    {
      "group" : "org.apache.beam",
      "name" : "beam-sdks-java-core",
      "version" : "2.43.0",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "04954a4a3d29c0811e6d06abc7be8c62"
        },
        {
          "alg" : "SHA-1",
          "content" : "ae71c948337868c9f946ce7a91cfd5efd0cba6fd"
        },
        {
          "alg" : "SHA-256",
          "content" : "cdda3fe1a7ecbfc8b07d8d7563a119a7ee9583fb1ce7aa6ea7e0eaadc4849d10"
        },
        {
          "alg" : "SHA-512",
          "content" : "be3f5be8da537c841f6de02082172d256ee0f83bfe9dce5474c94793408e3e3a6c13fb41790b30208f36653d72b7d0fb2e263008bfa18cde840c7c54d9a3132c"
        },
        {
          "alg" : "SHA-384",
          "content" : "e19572a6a1e2f89e97575ab7940be14f56e2b893f4aa5d441f233a9d024a7171ee99c63c7c1a2eb2ca9b992a7fb057de"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.beam/beam-sdks-java-core@2.43.0?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/apache/beam/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "http://www.mail-archive.com/dev%beam.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=beam.git;a=summary"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.beam/beam-sdks-java-core@2.43.0?type=jar"
    },
    {
      "group" : "org.apache.beam",
      "name" : "beam-sdks-java-fn-execution",
      "version" : "2.43.0",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "feb3f69e427cf9c6264de92ff1256b60"
        },
        {
          "alg" : "SHA-1",
          "content" : "dded4ee74b105794aefc9447e77dc4ac4f3135ba"
        },
        {
          "alg" : "SHA-256",
          "content" : "9fdbd81a93a66ba7a9bf50e7951f002c1ed1a43831b6f40ebf3f0d0bf73223e3"
        },
        {
          "alg" : "SHA-512",
          "content" : "384503e455f76064ce3eddf1db714adb2e4ba571aa995e7a19c86b40b262138390fa8a323bb044cf792d8199efcb8e5336a63e65d972e1f062190c41756a87d8"
        },
        {
          "alg" : "SHA-384",
          "content" : "f422c33ee0f38b44c8832dd0940e180874ee8f335df16cef9dc0f93a692911c6c2808d4ce88e4dd93aae25707fb84ad9"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.beam/beam-sdks-java-fn-execution@2.43.0?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/apache/beam/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "http://www.mail-archive.com/dev%beam.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=beam.git;a=summary"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.beam/beam-sdks-java-fn-execution@2.43.0?type=jar"
    },
    {
      "group" : "org.apache.beam",
      "name" : "beam-vendor-grpc-1_48_1",
      "version" : "0.1",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "188aaf82dd0643ed5cc905a1f40c56a6"
        },
        {
          "alg" : "SHA-1",
          "content" : "2eb9368bb32243cbde59e680f44963f8ce93858f"
        },
        {
          "alg" : "SHA-256",
          "content" : "0efc70aa4af25030dd29ccfe621c70ecc739b73fe17ad828f6a26f0037f56b73"
        },
        {
          "alg" : "SHA-512",
          "content" : "d1f6704d037954a0ae935758c5d368061df6a522cc396644e65a56362f877edba073cb511975ab2d4e2860eb8ce7e3856b2da360b8a21711e3824caea12e471a"
        },
        {
          "alg" : "SHA-384",
          "content" : "356110133834c755a3726d3040a198a86a285c7483771f581d59f8efe63e366445589796cc4b6e6741c2d42195dcc05a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.beam/beam-vendor-grpc-1_48_1@0.1?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/apache/beam/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "http://www.mail-archive.com/dev%beam.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=beam.git;a=summary"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.beam/beam-vendor-grpc-1_48_1@0.1?type=jar"
    },
    {
      "group" : "org.apache.beam",
      "name" : "beam-model-job-management",
      "version" : "2.43.0",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "7a00585b18642db9cdbea03fbc10ed5a"
        },
        {
          "alg" : "SHA-1",
          "content" : "f2554e11a0556e8a7bacd18c8598a035daeda0fe"
        },
        {
          "alg" : "SHA-256",
          "content" : "aa50badad3a3557e3dd2df387b7cd33774f566abd8beaf8791697cbcf88766da"
        },
        {
          "alg" : "SHA-512",
          "content" : "2f67b60545af87b4c4c863e57026d9fa593ba9c85f369e1d6b4ce6af16b1e63bf1fd58d32c3b0b753e890d82ed9975c37a4be72c2afdfc9ab8c0bb69aefc3098"
        },
        {
          "alg" : "SHA-384",
          "content" : "5a7fc8442b9e436845249e8daf128d88261ad5efb98bf711aa2f76082ba43a7b5f232b53d127c004edcfcde151f14b88"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.beam/beam-model-job-management@2.43.0?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/apache/beam/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "http://www.mail-archive.com/dev%beam.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=beam.git;a=summary"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.beam/beam-model-job-management@2.43.0?type=jar"
    },
    {
      "publisher" : "Joda.org",
      "group" : "joda-time",
      "name" : "joda-time",
      "version" : "2.5",
      "description" : "Date and time library to replace JDK date handling",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "c18e34f88c183cb21bbb693b3505e7d2"
        },
        {
          "alg" : "SHA-1",
          "content" : "c73038a3688525aad5cf33409df483178290cd64"
        },
        {
          "alg" : "SHA-256",
          "content" : "f75a29b82613411c9be37d419658e044179f1bf6b91d8786a4a49407531425b6"
        },
        {
          "alg" : "SHA-512",
          "content" : "77ebe5b92875140002fda1e4d7b05893fe603b019aa1257c44cf09c920fee8998b538bc0d8fb0d76171d65b8b3d752e95d1667db2d0cf21e2250fa9e09b822f6"
        },
        {
          "alg" : "SHA-384",
          "content" : "e5d4f8119f1feeb3dd15d2a1b3f02646629ecad98db64f084ac76a2143d324f489ad0558f2d6530490bbc9e9e172d4e3"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/joda-time/joda-time@2.5?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.joda.org"
        },
        {
          "type" : "distribution",
          "url" : "http://oss.sonatype.org/content/repositories/joda-releases"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/JodaOrg/joda-time/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "http://sourceforge.net/mailarchive/forum.php?forum_name=joda-interest"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/JodaOrg/joda-time"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/joda-time/joda-time@2.5?type=jar"
    },
    {
      "group" : "org.apache.beam",
      "name" : "beam-runners-core-java",
      "version" : "2.43.0",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "37624a39c37880560999f45a7262a67f"
        },
        {
          "alg" : "SHA-1",
          "content" : "375c455a1f11b4a38bb6f1e66830cb639de27039"
        },
        {
          "alg" : "SHA-256",
          "content" : "7da8bccdc89eb4b66e647a259b02d5d30e07b23af38817634b5c6a274bf92d56"
        },
        {
          "alg" : "SHA-512",
          "content" : "0b7c71abc7bfd1ba1a516b4fd0f80125f38ffc59f822c274fcf9806f5154da84e3d9970c1100ab711873c4e606f0e97d00a2d85f2a638c52f7a47c5af8b3ac6a"
        },
        {
          "alg" : "SHA-384",
          "content" : "1143023450d5c4de7e8010c23985c2709d8f35b93c2c5eefff602139c84aef5c9a68b7afc3bff00770e0e0af4c7b1fc7"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.beam/beam-runners-core-java@2.43.0?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/apache/beam/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "http://www.mail-archive.com/dev%beam.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=beam.git;a=summary"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.beam/beam-runners-core-java@2.43.0?type=jar"
    },
    {
      "group" : "com.alibaba",
      "name" : "pemja",
      "version" : "0.3.0",
      "description" : "PemJa is an open source cross language call framework based on FFI",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "e4bb6de2a44d1f35262deb32e8b6bcd7"
        },
        {
          "alg" : "SHA-1",
          "content" : "e53d5fd6c2ff8d3d0243e1c66dcb75e235efa3f3"
        },
        {
          "alg" : "SHA-256",
          "content" : "be51d59c37251f3ead3526c773a30b2d621170f7f0bcf309ae61e9a48c1b259c"
        },
        {
          "alg" : "SHA-512",
          "content" : "02fd871accba875e8978fd212f49c36fe4da36c8b66f60d3208eec44cd7007929678ff5301dbf259f5656275565bb7fd506bf97bfcc4eaeda5d58e6a459ad8ca"
        },
        {
          "alg" : "SHA-384",
          "content" : "1616735d57063fb71a579613b342299ae0926fe432d5898974e201d237709f17223eee0e04c56d940c165e09c3cadf54"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-1.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.alibaba/pemja@0.3.0?type=jar",
      "externalReferences" : [
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/alibaba/pemja/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/alibaba/pemja"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.alibaba/pemja@0.3.0?type=jar"
    },
    {
      "group" : "com.google.protobuf",
      "name" : "protobuf-java",
      "version" : "3.21.7",
      "description" : "Core Protocol Buffers library. Protocol Buffers are a way of encoding structured data in an efficient yet extensible format.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "87417783d3677d733eae82bda7664943"
        },
        {
          "alg" : "SHA-1",
          "content" : "96cfc7147192f1de72c3d7d06972155ffb7d180c"
        },
        {
          "alg" : "SHA-256",
          "content" : "a204ec68748a7b26351ae37a311e8de468f248d1916d5f8dbe812c1289d0a0ff"
        },
        {
          "alg" : "SHA-512",
          "content" : "d2450e62ea4003295a50bd863c9cc25016f58a08e94171d581ae8fca626c6dabfc458b8f55310874f9e17189704e9b4d0cc259641c36ef5e83466bdaf2770bde"
        },
        {
          "alg" : "SHA-384",
          "content" : "23adb6f7e52739ca6e3c3f1f8a364a7ab3da5dabfe99fcc784c15fbff294fcdc91f40a2ee4362f66995eb9b1922b4746"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause",
            "url" : "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.protobuf/protobuf-java@3.21.7?type=jar",
      "externalReferences" : [
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/protocolbuffers/protobuf"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.protobuf/protobuf-java@3.21.7?type=jar"
    },
    {
      "group" : "net.sf.py4j",
      "name" : "py4j",
      "version" : "0.10.9.7",
      "description" : "Py4J enables Python programs running in a Python interpreter to dynamically access Java objects in a Java Virtual Machine. Methods are called as if the Java objects resided in the Python interpreter and Java collections can be accessed through standard Python collection methods. Py4J also enables Java programs to call back Python objects.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "7afcbc30fa3c00d5febfbc522235f2a5"
        },
        {
          "alg" : "SHA-1",
          "content" : "e444374109f6f3ffdfdbd4e7dc5a89122b0c9134"
        },
        {
          "alg" : "SHA-256",
          "content" : "4d67d584e7b0f456deedffbd3f43047efd6748ff3d13b443abb61ec54cf7af13"
        },
        {
          "alg" : "SHA-512",
          "content" : "8e3bb548cea719e4ab0d3d559f1cdb8401c74606036c93f93b6519942994432786a800ce57b6d04fd090dfdea0359cf78e4d899021c5559f4f2f558fb09dc1be"
        },
        {
          "alg" : "SHA-384",
          "content" : "b7d117caa8c2269807f1ad4335fab2f9f6d99b93ee68ec548f3ff3d520f8d11ce8ecb2c2798f8fd86fb19606be60187f"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/net.sf.py4j/py4j@0.10.9.7?type=jar",
      "externalReferences" : [
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.sonatype.org/spice/tags/oss-parent-7"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/net.sf.py4j/py4j@0.10.9.7?type=jar"
    },
    {
      "group" : "net.razorvine",
      "name" : "pyrolite",
      "version" : "4.13",
      "description" : "This library allows your Java program to interface very easily with the Python world. It uses the Pyro protocol to call methods on remote objects. (See https://github.com/irmen/Pyro4). To that end, it also contains and uses a feature complete pickle protocol implementation -read and write- to exchange data with Pyro/Python. Pyrolite only implements part of the client side Pyro library, hence its name 'lite'... But because Pyrolite has no dependencies, it is a much lighter way to use Pyro from Java/.NET than a solution with jython+pyro or IronPython+Pyro would provide. So if you don't need Pyro's full feature set, and don't require your Java/.NET code to host Pyro objects itself, Pyrolite may be a good choice to connect java or .NET and python. Version 4.13 can now register a custom pickler for inheritance tree of interfaces or abstract base class.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "b4ab074cb07e995bcbd203c72e5efa1d"
        },
        {
          "alg" : "SHA-1",
          "content" : "b71a4668b0c4194486832fe7ce161eed2d0d12cb"
        },
        {
          "alg" : "SHA-256",
          "content" : "4ba424d328cbd7a6ff73108cce40d3cc376eef602b947e57fdc782171d92e463"
        },
        {
          "alg" : "SHA-512",
          "content" : "a25804a42355b24978ed47516a4a05a3ea35cf1f3773e1e46df0abd8a4b52e38ecdacbcaadc224e2a7ee62d0b183e46a63aae2154bef790306d752d65bd2491f"
        },
        {
          "alg" : "SHA-384",
          "content" : "bec0930daf4d20cee74051875feb9172601d8e7f2c052284805d2c5c9efe5953f41a122807d57d795a8cdde27f402a4e"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl" : "pkg:maven/net.razorvine/pyrolite@4.13?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/irmen/Pyrolite/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/irmen/Pyrolite"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/net.razorvine/pyrolite@4.13?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.arrow",
      "name" : "arrow-vector",
      "version" : "5.0.0",
      "description" : "An off-heap reference implementation for Arrow columnar data format.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "768bf0a031bad62ef58c17f7a25fbce5"
        },
        {
          "alg" : "SHA-1",
          "content" : "72935a1a65befde97b84884479ad3b771efeff06"
        },
        {
          "alg" : "SHA-256",
          "content" : "a822dcda3194db0552a9fcb845250fb8dd3128ccf4e41e2c60d785c503c4c272"
        },
        {
          "alg" : "SHA-512",
          "content" : "b986553161d0bca088f22ca6e9a7dbeb121ba79e11e89e27c72fa280c6a65e9b639167597072bee8c7b4f7a4c3a02cc9d63600957fff839755390170e12c8ba9"
        },
        {
          "alg" : "SHA-384",
          "content" : "75ddcc88e95746812018b717e42b947467b52ff5b58714052fd8e1da010adc0ca51e672a0b6fc46178b75424c7770b65"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.arrow/arrow-vector@5.0.0?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/arrow"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/arrow-dev/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/arrow"
        },
        {
          "type" : "website",
          "url" : "https://www.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.arrow/arrow-vector@5.0.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.arrow",
      "name" : "arrow-format",
      "version" : "5.0.0",
      "description" : "Generated Java files from the IPC Flatbuffer definitions.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "b8d121a9ed3fad918d1a72d777b7850f"
        },
        {
          "alg" : "SHA-1",
          "content" : "518e640c68f372be71d958b5501a774a9b698516"
        },
        {
          "alg" : "SHA-256",
          "content" : "1735d6d0a734c1c33ee2a3cc9d7926b311a89bd2db8a87cd4fd807175e1afe5e"
        },
        {
          "alg" : "SHA-512",
          "content" : "47c2839604fa45f694506dc3b4393515589db3e1b52d4494fc14539133a7c569cc3e4792810fd50dee478dae88b62116880c763cc12c8d671b068d8a9d4a6efa"
        },
        {
          "alg" : "SHA-384",
          "content" : "e54d004601fb2310e91a546329de2bb54a7e9026e708a2cf83d7c858ff691bb6f3fab342ada6ca0a31f43ba5f886ef48"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.arrow/arrow-format@5.0.0?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/arrow"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/arrow-dev/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/arrow"
        },
        {
          "type" : "website",
          "url" : "https://www.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.arrow/arrow-format@5.0.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.arrow",
      "name" : "arrow-memory-core",
      "version" : "5.0.0",
      "description" : "Core off-heap memory management libraries for Arrow ValueVectors.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "5ee5f50f7a802139f22b0530a567cff9"
        },
        {
          "alg" : "SHA-1",
          "content" : "e70cfdacb4c2640d6ad368af969352a59cc342d6"
        },
        {
          "alg" : "SHA-256",
          "content" : "713327177e478ff0331d49fb896c833c8abcac6f68f198d112966d220d7b3f83"
        },
        {
          "alg" : "SHA-512",
          "content" : "16a6c3518b3dd4d1dd0c6bb926c1f4309017159e47a606c92c6b950a98dd265f85a69ab00f214f9b9f2f42656d6bbfde6fd8981069a5145f19d4880e9bc4747f"
        },
        {
          "alg" : "SHA-384",
          "content" : "306c9416dbe5689c049afff6e94fe765edb5e06211ec2ec0788ef68af837833968f317c9b85aec86ec9e599c5a9c57e0"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.arrow/arrow-memory-core@5.0.0?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/arrow"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/arrow-dev/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/arrow"
        },
        {
          "type" : "website",
          "url" : "https://www.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.arrow/arrow-memory-core@5.0.0?type=jar"
    },
    {
      "publisher" : "FasterXML",
      "group" : "com.fasterxml.jackson.core",
      "name" : "jackson-core",
      "version" : "2.13.4",
      "description" : "Core Jackson processing abstractions (aka Streaming API), implementation for JSON",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "e8f064827ddb8deb06e45d20988bcaa5"
        },
        {
          "alg" : "SHA-1",
          "content" : "0cf934c681294b97ef6d80082faeefbe1edadf56"
        },
        {
          "alg" : "SHA-256",
          "content" : "4c2e043200edd9ee7ba6fc378bd5c17784a5bf2388e152d208068b51fd0839cf"
        },
        {
          "alg" : "SHA-512",
          "content" : "cf54bf5be3a5015a4b2c3ac986bf01f64517df224c8ba67197118d06f7fbe8ad64e39d002df326a72feb5aec8f0bc7f15338e90c4ba0668a167a0f03a81ce47f"
        },
        {
          "alg" : "SHA-384",
          "content" : "5fd2723a9f5bae811e71b596180c56355497f87cdd6c9bdc74716224ea1d133b6ed4e5df20b6ec169b3745066019ad94"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.13.4?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "http://github.com/FasterXML/jackson-core"
        },
        {
          "type" : "website",
          "url" : "http://fasterxml.com/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.13.4?type=jar"
    },
    {
      "publisher" : "FasterXML",
      "group" : "com.fasterxml.jackson.core",
      "name" : "jackson-annotations",
      "version" : "2.13.4",
      "description" : "Core annotations used for value types, used by Jackson data binding package.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "7e982dafcf25c24b365b5088eaf8a0a6"
        },
        {
          "alg" : "SHA-1",
          "content" : "858c6cc78e1f08a885b1613e1d817c829df70a6e"
        },
        {
          "alg" : "SHA-256",
          "content" : "ac5b27a634942391ca113850ee7db01df1499a240174021263501c05fc653b44"
        },
        {
          "alg" : "SHA-512",
          "content" : "788a836b1631dabed472a0387de2ccdf86ab9091b04246d58e257780bb382e6ae068b6df862407c1256b0b83d1f9366813e54e98982f881c3d222a9f4a8e9ebb"
        },
        {
          "alg" : "SHA-384",
          "content" : "7ae717dc399ccfe7c2a4831fae5c410d896e0a5afdff710003fa306ae2663a3c21ca000edfec9cdba30b0997c4c66757"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.13.4?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "http://github.com/FasterXML/jackson-annotations"
        },
        {
          "type" : "website",
          "url" : "http://fasterxml.com/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.13.4?type=jar"
    },
    {
      "publisher" : "FasterXML",
      "group" : "com.fasterxml.jackson.core",
      "name" : "jackson-databind",
      "version" : "2.13.4.2",
      "description" : "General data-binding functionality for Jackson: works on core streaming API",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f26eab82fa1da09f8e8bc7e52fc82088"
        },
        {
          "alg" : "SHA-1",
          "content" : "325c06bdfeb628cfb80ebaaf1a26cc1eb558a585"
        },
        {
          "alg" : "SHA-256",
          "content" : "ba1a368137f9b92f48dd07f299ff7a782a69487b853ef5578215426fcde8f08b"
        },
        {
          "alg" : "SHA-512",
          "content" : "89b5f58414d541d79f63ddedbcf4d5fafabc68d9bf9cad09f354c151e9685512e1433f2e22f6a7ffc8100c3c5fddbbb99fd64d7c6d4974b2915edb523f99ca16"
        },
        {
          "alg" : "SHA-384",
          "content" : "87d3468179690f73868e8e2cad7b5107d4cea86ba7d6481ed288101f9d59b6b9ad27c7cfd1c466bdccc89effeb8291cd"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.13.4.2?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "http://github.com/FasterXML/jackson-databind"
        },
        {
          "type" : "website",
          "url" : "http://fasterxml.com/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.13.4.2?type=jar"
    },
    {
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-common",
      "version" : "4.1.70.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "75ded3bde221b50248f9f004dd841ee5"
        },
        {
          "alg" : "SHA-1",
          "content" : "c2db94c855f472573b64ca68d00effcde00329bd"
        },
        {
          "alg" : "SHA-256",
          "content" : "11196ace142d8f5edc1bfbf96c7f64ac69f57a31971b8f67af957c5c701b13f5"
        },
        {
          "alg" : "SHA-512",
          "content" : "e4113aa6ef6ac00d14f0aaef754372083ece2a2835be50e91672584f482f1ae0b13ea68edffa0865835ea8fb373995cdc419bbd0227fafca10da906791ab398b"
        },
        {
          "alg" : "SHA-384",
          "content" : "b6e2868facbd0830e451eabb529b15a0b1d4bde01f5b079199c38d35662f537cc47fec8cace412139f4099525ac9a618"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-common@4.1.70.Final?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-common@4.1.70.Final?type=jar"
    },
    {
      "group" : "com.google.flatbuffers",
      "name" : "flatbuffers-java",
      "version" : "1.12.0",
      "description" : "Memory Efficient Serialization Library",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "26ecc1a330e441f909226a338d4bef65"
        },
        {
          "alg" : "SHA-1",
          "content" : "8201cc7b511177a37071249e891f2f2fea4b32e9"
        },
        {
          "alg" : "SHA-256",
          "content" : "3f8c088b4dd04a9858721f2e162508c94db0dd86f961e306ee63ef2eda871bf7"
        },
        {
          "alg" : "SHA-512",
          "content" : "20750e91441c074ca28f72b0b6494e8f0bfbc94caff04eb49727efc6b28e453c84732f24acc52cf36b36ba66b57a145d003e87f749c5c4518ddc6f9247b8ab47"
        },
        {
          "alg" : "SHA-384",
          "content" : "7af7d2e03ae71bea1ebac6cc9c2926b9f952c48a124db160ee2327f2f7e6b2e3ba153e5924971788392fc278b0e04ee9"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.flatbuffers/flatbuffers-java@1.12.0?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "https://github.com/google/flatbuffers"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.flatbuffers/flatbuffers-java@1.12.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.arrow",
      "name" : "arrow-memory-netty",
      "version" : "5.0.0",
      "description" : "Netty allocator and utils for allocating memory in Arrow",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "b3c2fa7921bb1c7930c361759cd20b13"
        },
        {
          "alg" : "SHA-1",
          "content" : "8767068de7454c9f6e304849dc4cba6da1e797fb"
        },
        {
          "alg" : "SHA-256",
          "content" : "828d7aed3ef9d6d552763c92c048b2a390487476e01c19e2c14be7061be9107b"
        },
        {
          "alg" : "SHA-512",
          "content" : "0e675249b51b810606c58eff88899f86e8ee82070a9abe3389ec59ad70b0e1f0b2a03d365041e8679ddcd4af94bbf4c33fafe810bd4a169c01a13a81a433baae"
        },
        {
          "alg" : "SHA-384",
          "content" : "3f632f774fa91e3f3850a6aa7da03c3ec9d9af5250e2ac8d7b254b20e55ecb9a900e3133e436c4dad3427cf3336d5cd7"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.arrow/arrow-memory-netty@5.0.0?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/arrow"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/arrow-dev/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/arrow"
        },
        {
          "type" : "website",
          "url" : "https://www.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.arrow/arrow-memory-netty@5.0.0?type=jar"
    },
    {
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-buffer",
      "version" : "4.1.70.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "831200f595550d7d5bc42cfe4d362a46"
        },
        {
          "alg" : "SHA-1",
          "content" : "54620560d725f497b73d54509baac64dfc4e0093"
        },
        {
          "alg" : "SHA-256",
          "content" : "30108c7bfc1dfec9ff050affa2815eb3883f1f1d24898c6b1959b36a2828339a"
        },
        {
          "alg" : "SHA-512",
          "content" : "2f9ace5701dcd52c2f4ef0058d2a5bd11bbeba6f80511c9a0253b611d45414da22bf1fd64bf007d317f482f36d12f153aa4027b8d6e2d1fd122543817c790b48"
        },
        {
          "alg" : "SHA-384",
          "content" : "ac28551b89558bcc426f463f1e9f1b1c02aa6f54f7afcf50c0f7629422e154946c3e7cf0e01d8b40cb21aa602d1d9483"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-buffer@4.1.70.Final?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-buffer@4.1.70.Final?type=jar"
    },
    {
      "group" : "org.apache.flink",
      "name" : "flink-rpc-core",
      "version" : "1.17.0",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "619be6316bd04bf13b29acdc26084491"
        },
        {
          "alg" : "SHA-1",
          "content" : "b09f05d32173634231838a63a2bc52ccd1e8e751"
        },
        {
          "alg" : "SHA-256",
          "content" : "ee5338ad324a9cc995a09119a5596d2fd077f3da24c281f30be0db2fd1011b4e"
        },
        {
          "alg" : "SHA-512",
          "content" : "f5a8933289be162896b33af2b4b30130b730c66283c3c32523ff7c1e76a9a1fc080ccdea99682acc2b5e0e3be4fe0fda150e2c7cbffa6f654d1a3761e119ad11"
        },
        {
          "alg" : "SHA-384",
          "content" : "dba9e000012609d4e5ba0c0f015fa2ce490a53f69c61a3bb6fefa2d88a2c3dcd0369c4111d814a2f21bae471de26dfac"
        }
      ],
      "licenses" : [ ],
      "purl" : "pkg:maven/org.apache.flink/flink-rpc-core@1.17.0?type=jar",
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.flink/flink-rpc-core@1.17.0?type=jar"
    },
    {
      "group" : "org.apache.flink",
      "name" : "flink-rpc-akka-loader",
      "version" : "1.17.0",
      "description" : "This module contains the mechanism for loading flink-rpc-akka through a separate classloader.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "38868ff03f249de8b1401da71a059caf"
        },
        {
          "alg" : "SHA-1",
          "content" : "9ce887a6bc365cb5fcc53c6350de9b3b43242f53"
        },
        {
          "alg" : "SHA-256",
          "content" : "634b50506ff04d8a65551e4ed96cefd0f1711637f87eea8bffe739ffc79510b7"
        },
        {
          "alg" : "SHA-512",
          "content" : "6d4da0720068f7d074348ac6e99eced9bd635e8ba1097c29fe4420e96b305af0d238ef0df3f57e452e45b04c4b6ae7ef6bed45d3424d71da2e06bb4bab948043"
        },
        {
          "alg" : "SHA-384",
          "content" : "5ffe5de895af29bb3f7597c2bce8ba3934fe4f3d0af54f2e64f8621a8b48059aa6f1c4bcc87ba950fd86d6db025a5166"
        }
      ],
      "licenses" : [ ],
      "purl" : "pkg:maven/org.apache.flink/flink-rpc-akka-loader@1.17.0?type=jar",
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.flink/flink-rpc-akka-loader@1.17.0?type=jar"
    },
    {
      "group" : "org.apache.flink",
      "name" : "flink-queryable-state-client-java",
      "version" : "1.17.0",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "608a5046fcd31b4cb3f53d7490171eca"
        },
        {
          "alg" : "SHA-1",
          "content" : "0d2a584736c010680cb80c0937f3fd26410f2235"
        },
        {
          "alg" : "SHA-256",
          "content" : "1e0cdb22b341aa379fc9f9400f4452fb5ab8af57181ec60598300290bdaac87d"
        },
        {
          "alg" : "SHA-512",
          "content" : "495c03c978e3035fa88d0e558f27aca64fdfd45ea6580fc3787b5c59cf8c62dc9ac8972805704ec369f08607a236cf8fe0ec6295124134707525c97994dad915"
        },
        {
          "alg" : "SHA-384",
          "content" : "a292a62469b7718c380dc09ac022df915cf7607dadcaeb8191a1f0c6f45d0ac74f8ee7d287d24b5f7af5d70dfbc78e56"
        }
      ],
      "licenses" : [ ],
      "purl" : "pkg:maven/org.apache.flink/flink-queryable-state-client-java@1.17.0?type=jar",
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.flink/flink-queryable-state-client-java@1.17.0?type=jar"
    },
    {
      "group" : "org.apache.flink",
      "name" : "flink-hadoop-fs",
      "version" : "1.17.0",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "307e994baf9df4aa23320816e422dcb8"
        },
        {
          "alg" : "SHA-1",
          "content" : "44a8cf8172031f81dc165543ec67f2fc11f618ba"
        },
        {
          "alg" : "SHA-256",
          "content" : "a98f585fb1f621f215ea562dc248d898faaae0a59a7bfae3b78aaf8872204802"
        },
        {
          "alg" : "SHA-512",
          "content" : "e638e5d6d8872119532625d622516d7e19e82405f32946f45a6c302903464a6e86239610904bbbd47e572560d1ea81b3b11ad3b1179ad7637c12009cd6ab06b9"
        },
        {
          "alg" : "SHA-384",
          "content" : "3867ace16bb040384b0bd9dec1656c9964a5785ae31c17d322538f3e2c9735fa10bbb73ad7fc40c3582f310b785683b3"
        }
      ],
      "licenses" : [ ],
      "purl" : "pkg:maven/org.apache.flink/flink-hadoop-fs@1.17.0?type=jar",
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.flink/flink-hadoop-fs@1.17.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-io",
      "name" : "commons-io",
      "version" : "2.11.0",
      "description" : "The Apache Commons IO library contains utility classes, stream implementations, file filters, file comparators, endian transformation classes, and much more.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "3b4b7ccfaeceeac240b804839ee1a1ca"
        },
        {
          "alg" : "SHA-1",
          "content" : "a2503f302b11ebde7ebc3df41daebe0e4eea3689"
        },
        {
          "alg" : "SHA-256",
          "content" : "961b2f6d87dbacc5d54abf45ab7a6e2495f89b75598962d8c723cea9bc210908"
        },
        {
          "alg" : "SHA-512",
          "content" : "5bd78eed456ede30119319c5bed8e3e4c443b6fd7bdb3a7a5686647bd83094d0c3e2832a7575cfb60e4ef25f08106b93476939d3adcfecf5533cc030b3039e10"
        },
        {
          "alg" : "SHA-384",
          "content" : "114f1e324d90ad887c177876d410f5787a8e8da6c48d4b2862d365802c0efded3a88cb24046976bf6276cadad3712f0f"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-io/commons-io@2.11.0?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/IO"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-io.git"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "website",
          "url" : "https://www.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-io/commons-io@2.11.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.flink",
      "name" : "flink-shaded-netty",
      "version" : "4.1.82.Final-16.1",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "587a1560d64c8e3016f2a6fa05434839"
        },
        {
          "alg" : "SHA-1",
          "content" : "cfe139947f5cefe7429993b68d60498d2eb59965"
        },
        {
          "alg" : "SHA-256",
          "content" : "fc5c3f267ab9a160ad075a1d8168100e6190aae4eb57861023e47356eabe2306"
        },
        {
          "alg" : "SHA-512",
          "content" : "c6c54ea5b34f45622291c8a080fb566a4a795b0a07c941840fe767d5b0a9de84dde78270c96c0a9ffd06b56e630710b767ac5991f77c031e3e40aa41a8f15a02"
        },
        {
          "alg" : "SHA-384",
          "content" : "93633a19903a4807f49ce87f141f6e0148d2bec7344f3c019c37f98861f2893efe0a29fb5da9152363459c2ed458e1de"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.flink/flink-shaded-netty@4.1.82.Final-16.1?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink-shaded"
        },
        {
          "type" : "website",
          "url" : "https://www.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.flink/flink-shaded-netty@4.1.82.Final-16.1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.flink",
      "name" : "flink-shaded-zookeeper-3",
      "version" : "3.7.1-16.1",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "af578f2f1293b405fb145a35375ed7fe"
        },
        {
          "alg" : "SHA-1",
          "content" : "99500524021365e7b33a873e4102dbed99c2b8fb"
        },
        {
          "alg" : "SHA-256",
          "content" : "c5475aa90a9fe2d5b898129386030994777f4e0906b4e983b4969415e315e1e2"
        },
        {
          "alg" : "SHA-512",
          "content" : "54d46d83fc7cf8c816758988a50b64366f21e121148ca348b1b98f5a293e4f91dac273d7e848a92b2a21f2a0eeb130b87246ec47c7d1ba77991ebbbc297c7fb3"
        },
        {
          "alg" : "SHA-384",
          "content" : "df2f43f9e7837296ae7913041b3f9611b409cdce3ce03f04db3df84f0150dd3534467481d2b5c7853d590b840d5b084c"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.flink/flink-shaded-zookeeper-3@3.7.1-16.1?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink-shaded"
        },
        {
          "type" : "website",
          "url" : "https://www.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.flink/flink-shaded-zookeeper-3@3.7.1-16.1?type=jar"
    },
    {
      "publisher" : "Shigeru Chiba, www.javassist.org",
      "group" : "org.javassist",
      "name" : "javassist",
      "version" : "3.24.0-GA",
      "description" : "Javassist (JAVA programming ASSISTant) makes Java bytecode manipulation simple. It is a class library for editing bytecodes in Java.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "23fd22d0d089ddfac567a39ce0cb1a91"
        },
        {
          "alg" : "SHA-1",
          "content" : "d7466fc2e3af7c023e95c510f06448ad29b225b3"
        },
        {
          "alg" : "SHA-256",
          "content" : "aba81efa678b621203fb89aeff81d6f126f7a9dd709401e5609c42976684ae23"
        },
        {
          "alg" : "SHA-512",
          "content" : "e57dad74a3edef837ece841d06e4a7c96ffecab8fbcba56fe5f7eccd662f0c0d757880a6073793a8c75ad7a0a1d146346b75cdbfe4fd8a271048a54446e5d1a2"
        },
        {
          "alg" : "SHA-384",
          "content" : "4867afdb7522b3dbfa10a51264ac6c15a2a8083d16c8dbef318275d24687768f35130b1c17d8407ca8ecf855abd83dff"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MPL-1.1"
          }
        },
        {
          "license" : {
            "id" : "LGPL-2.1-only"
          }
        },
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.javassist/javassist@3.24.0-GA?type=jar",
      "externalReferences" : [
        {
          "type" : "distribution",
          "url" : "https://repository.jboss.org/nexus/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://jira.jboss.org/jira/browse/JASSIST/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.javassist/javassist@3.24.0-GA?type=jar"
    },
    {
      "publisher" : "xerial.org",
      "group" : "org.xerial.snappy",
      "name" : "snappy-java",
      "version" : "1.1.8.3",
      "description" : "snappy-java: A fast compression/decompression library",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "fdacc9d6d764fe918daca743a67ce24f"
        },
        {
          "alg" : "SHA-1",
          "content" : "2c58fa5745831afa3a4290c2ce15553ff13ad0ab"
        },
        {
          "alg" : "SHA-256",
          "content" : "d371202c03bd165f6fd660f63ae597fbb4c91b81bfc6e12cf6b2a93ace93a800"
        },
        {
          "alg" : "SHA-512",
          "content" : "5f3f9a391a70c1898610892bca07bb87b867caf4e6d959800a3abdd45435b4af52a9fdd82d7aefe0bd47af169203f83c92450e327c3b8bf47373e8030004344b"
        },
        {
          "alg" : "SHA-384",
          "content" : "bc9e1d3ad7dfbd35fc1e7e9287f254eca5fc1f20234558bd963e1f504b55c4d2aacf424f05b211e24846d4d158fb3c91"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.xerial.snappy/snappy-java@1.1.8.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/xerial/snappy-java"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/xerial/snappy-java"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.xerial.snappy/snappy-java@1.1.8.3?type=jar"
    },
    {
      "group" : "org.lz4",
      "name" : "lz4-java",
      "version" : "1.8.0",
      "description" : "Java ports and bindings of the LZ4 compression algorithm and the xxHash hashing algorithm",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "936a927700aa8fc3b75d21d7571171f6"
        },
        {
          "alg" : "SHA-1",
          "content" : "4b986a99445e49ea5fbf5d149c4b63f6ed6c6780"
        },
        {
          "alg" : "SHA-256",
          "content" : "d74a3334fb35195009b338a951f918203d6bbca3d1d359033dc33edd1cadc9ef"
        },
        {
          "alg" : "SHA-512",
          "content" : "98d59086a6021ca571d9c1d64b715e43044c730e1ac563f514c40cf44302615d30378b6d5cc69990446522de6260dc8e7b303e3990a3139dc326d058dfb6dbd9"
        },
        {
          "alg" : "SHA-384",
          "content" : "8e3f2acdbb41a00c4d9cc5f328e63fb626ac7c6c84e1bf9502e2fcc76a591b2b819b2d27b29925ff986b95c297b30e2c"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.lz4/lz4-java@1.8.0?type=jar",
      "externalReferences" : [ ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.lz4/lz4-java@1.8.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.flink",
      "name" : "flink-shaded-force-shading",
      "version" : "16.1",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "0f703324b629fbc0d0cbf22375515477"
        },
        {
          "alg" : "SHA-1",
          "content" : "5040816ebca54b5bb4d5bb98b741ff77da59505b"
        },
        {
          "alg" : "SHA-256",
          "content" : "44ab80c42c380bc813bbf477256a4f4334e44088c8fb1b34d3c867733e54c664"
        },
        {
          "alg" : "SHA-512",
          "content" : "bf56dc058175101f58f2abfb3307349e9e911743f118c9309e0b8d3860f164c2c88b5fa1113e2270c1533bf37dc8102f1482099f11bdaa5acf316b7a9808093b"
        },
        {
          "alg" : "SHA-384",
          "content" : "3b7c079f14bfeb02219e4430fa2bbe66e9000596116c5247f98e0b0852bd59877559358704c8be7d18c0fbed1fff0880"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.flink/flink-shaded-force-shading@16.1?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink-shaded"
        },
        {
          "type" : "website",
          "url" : "https://www.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.flink/flink-shaded-force-shading@16.1?type=jar"
    },
    {
      "publisher" : "QOS.ch",
      "group" : "org.slf4j",
      "name" : "slf4j-api",
      "version" : "1.7.36",
      "description" : "The slf4j API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "872da51f5de7f3923da4de871d57fd85"
        },
        {
          "alg" : "SHA-1",
          "content" : "6c62681a2f655b49963a5983b8b0950a6120ae14"
        },
        {
          "alg" : "SHA-256",
          "content" : "d3ef575e3e4979678dc01bf1dcce51021493b4d11fb7f1be8ad982877c16a1c0"
        },
        {
          "alg" : "SHA-512",
          "content" : "f9b033fc019a44f98b16048da7e2b59edd4a6a527ba60e358f65ab88e0afae03a9340f1b3e8a543d49fa542290f499c5594259affa1ff3e6e7bf3b428d4c610b"
        },
        {
          "alg" : "SHA-384",
          "content" : "2b14ad035877087157e379d3277dcdcd79e58d6bdb147c47d29e377d75ce53ad42cafbf22f5fb7827c7e946ff4876b9a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.qos.ch"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/qos-ch/slf4j"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
    },
    {
      "group" : "com.google.code.findbugs",
      "name" : "jsr305",
      "version" : "1.3.9",
      "description" : "JSR305 Annotations for Findbugs",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "1d5a772e400b04bb67a7ef4a0e0996d8"
        },
        {
          "alg" : "SHA-1",
          "content" : "40719ea6961c0cb6afaeb6a921eaa1f6afd4cfdf"
        },
        {
          "alg" : "SHA-256",
          "content" : "905721a0eea90a81534abb7ee6ef4ea2e5e645fa1def0a5cd88402df1b46c9ed"
        },
        {
          "alg" : "SHA-512",
          "content" : "06da282cfd8e30d9f8cf17702b8709172b00e22b75a627a1d85f8989615b8a1a401bc25d9aee7b14aed1d9b5df73bf2ea8d66f9c8468d9577c29f0ccfa2cc70a"
        },
        {
          "alg" : "SHA-384",
          "content" : "56e6b41ef62eb5edfed0203802cefae9c2df86388148e420bb0c687abb2b80e14d5c2a82d5b35dce4badaf148f94eada"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "http://findbugs.googlecode.com/svn/trunk/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"
    },
    {
      "group" : "net.bytebuddy",
      "name" : "byte-buddy",
      "version" : "1.10.14",
      "description" : "Byte Buddy is a Java library for creating Java classes at run time. This artifact is a build of Byte Buddy with all ASM dependencies repackaged into its own name space.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "a6e02ea9a5acdc1a31df04d13f3ddc94"
        },
        {
          "alg" : "SHA-1",
          "content" : "5288bd154aa7bc8ea81a658f60a790f646025832"
        },
        {
          "alg" : "SHA-256",
          "content" : "0e6b935bfcb3e451d525956acad53ec86ff916d714abdbd32b3d2039771896f8"
        },
        {
          "alg" : "SHA-512",
          "content" : "30adb63eab83a36f7ce988c2858bf5418c0d3e448c4e4ce33b85129c24f4793262eb5b827b693fb27b67e180d0a7766ff6a666d6133a0e7aa5afa6d9a7f95413"
        },
        {
          "alg" : "SHA-384",
          "content" : "0f59c936ba21d5d716b010859f0aeb5fbfc4f1b88d8c92107068e0ee7e54c48929c22d49379440d4a5c5d14fa2f14a42"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/net.bytebuddy/byte-buddy@1.10.14?type=jar",
      "externalReferences" : [
        {
          "type" : "distribution",
          "url" : "https://api.bintray.com/maven/raphw/maven/ByteBuddy"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/raphw/byte-buddy/issues"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/net.bytebuddy/byte-buddy@1.10.14?type=jar"
    },
    {
      "publisher" : "Joe Walnes, Henri Tremblay, Leonardo Mesquita",
      "group" : "org.objenesis",
      "name" : "objenesis",
      "version" : "2.1",
      "description" : "A library for instantiating Java objects",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "32ccb1d20a42b5aaaceb90c9082a2efa"
        },
        {
          "alg" : "SHA-1",
          "content" : "87c0ea803b69252868d09308b4618f766f135a96"
        },
        {
          "alg" : "SHA-256",
          "content" : "c74330cc6b806c804fd37e74487b4fe5d7c2750c5e15fbc6efa13bdee1bdef80"
        },
        {
          "alg" : "SHA-512",
          "content" : "1dec9ee30812b8006e536a2749c5781ccdc4b446539efb6fa534f22e70562033876bf2eb22c6946d617695729bd65f0f65b984f15f05ac63db5bed215e74427c"
        },
        {
          "alg" : "SHA-384",
          "content" : "657b8a3b80a5475f198425396f7264301f9e0f3ad5dc336ef0c7b46874f5544861a8a2fd48cdb5f672e199a6935c19d1"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.objenesis/objenesis@2.1?type=jar",
      "externalReferences" : [
        {
          "type" : "distribution",
          "url" : "http://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/easymock/easymock"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.objenesis/objenesis@2.1?type=jar"
    }
  ],
  "dependencies" : [
    {
      "ref" : "pkg:maven/org.apache.flink/flink-python@1.17.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.flink/flink-core@1.17.0?type=jar",
        "pkg:maven/org.apache.flink/flink-clients@1.17.0?type=jar",
        "pkg:maven/org.apache.flink/flink-java@1.17.0?type=jar",
        "pkg:maven/org.apache.flink/flink-streaming-java@1.17.0?type=jar",
        "pkg:maven/org.apache.flink/flink-table-common@1.17.0?type=jar",
        "pkg:maven/org.apache.flink/flink-table-runtime@1.17.0?type=jar",
        "pkg:maven/org.apache.flink/flink-connector-files@1.17.0?type=jar",
        "pkg:maven/org.apache.flink/flink-csv@1.17.0?type=jar",
        "pkg:maven/org.apache.beam/beam-runners-java-fn-execution@2.43.0?type=jar",
        "pkg:maven/org.apache.beam/beam-runners-core-java@2.43.0?type=jar",
        "pkg:maven/com.alibaba/pemja@0.3.0?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java@3.21.7?type=jar",
        "pkg:maven/net.sf.py4j/py4j@0.10.9.7?type=jar",
        "pkg:maven/net.razorvine/pyrolite@4.13?type=jar",
        "pkg:maven/org.apache.arrow/arrow-vector@5.0.0?type=jar",
        "pkg:maven/org.apache.arrow/arrow-memory-netty@5.0.0?type=jar",
        "pkg:maven/org.apache.flink/flink-shaded-force-shading@16.1?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.flink/flink-core@1.17.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.flink/flink-annotations@1.17.0?type=jar",
        "pkg:maven/org.apache.flink/flink-metrics-core@1.17.0?type=jar",
        "pkg:maven/org.apache.flink/flink-shaded-asm-9@9.3-16.1?type=jar",
        "pkg:maven/org.apache.flink/flink-shaded-jackson@2.13.4-16.1?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar",
        "pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar",
        "pkg:maven/com.esotericsoftware.kryo/kryo@2.24.0?type=jar",
        "pkg:maven/commons-collections/commons-collections@3.2.2?type=jar",
        "pkg:maven/org.apache.commons/commons-compress@1.21?type=jar",
        "pkg:maven/org.apache.flink/flink-shaded-guava@30.1.1-jre-16.1?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar",
        "pkg:maven/org.apache.flink/flink-shaded-force-shading@16.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.flink/flink-annotations@1.17.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar",
        "pkg:maven/org.apache.flink/flink-shaded-force-shading@16.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.flink/flink-shaded-force-shading@16.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.flink/flink-metrics-core@1.17.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.flink/flink-annotations@1.17.0?type=jar",
        "pkg:maven/org.apache.flink/flink-shaded-force-shading@16.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.flink/flink-shaded-asm-9@9.3-16.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.flink/flink-shaded-jackson@2.13.4-16.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.esotericsoftware.kryo/kryo@2.24.0?type=jar",
      "dependsOn" : [
        "pkg:maven/com.esotericsoftware.minlog/minlog@1.2?type=jar",
        "pkg:maven/org.objenesis/objenesis@2.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.esotericsoftware.minlog/minlog@1.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.objenesis/objenesis@2.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/commons-collections/commons-collections@3.2.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-compress@1.21?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.flink/flink-shaded-guava@30.1.1-jre-16.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.flink/flink-clients@1.17.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.flink/flink-core@1.17.0?type=jar",
        "pkg:maven/org.apache.flink/flink-runtime@1.17.0?type=jar",
        "pkg:maven/org.apache.flink/flink-optimizer@1.17.0?type=jar",
        "pkg:maven/org.apache.flink/flink-java@1.17.0?type=jar",
        "pkg:maven/commons-cli/commons-cli@1.5.0?type=jar",
        "pkg:maven/org.apache.flink/flink-streaming-java@1.17.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar",
        "pkg:maven/org.apache.flink/flink-shaded-force-shading@16.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.flink/flink-runtime@1.17.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.flink/flink-core@1.17.0?type=jar",
        "pkg:maven/org.apache.flink/flink-rpc-core@1.17.0?type=jar",
        "pkg:maven/org.apache.flink/flink-rpc-akka-loader@1.17.0?type=jar",
        "pkg:maven/org.apache.flink/flink-java@1.17.0?type=jar",
        "pkg:maven/org.apache.flink/flink-queryable-state-client-java@1.17.0?type=jar",
        "pkg:maven/org.apache.flink/flink-hadoop-fs@1.17.0?type=jar",
        "pkg:maven/commons-io/commons-io@2.11.0?type=jar",
        "pkg:maven/org.apache.flink/flink-shaded-netty@4.1.82.Final-16.1?type=jar",
        "pkg:maven/org.apache.flink/flink-shaded-guava@30.1.1-jre-16.1?type=jar",
        "pkg:maven/org.apache.flink/flink-shaded-jackson@2.13.4-16.1?type=jar",
        "pkg:maven/org.apache.flink/flink-shaded-zookeeper-3@3.7.1-16.1?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar",
        "pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar",
        "pkg:maven/commons-cli/commons-cli@1.5.0?type=jar",
        "pkg:maven/org.javassist/javassist@3.24.0-GA?type=jar",
        "pkg:maven/org.xerial.snappy/snappy-java@1.1.8.3?type=jar",
        "pkg:maven/org.lz4/lz4-java@1.8.0?type=jar",
        "pkg:maven/org.apache.flink/flink-shaded-force-shading@16.1?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.flink/flink-rpc-core@1.17.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.flink/flink-rpc-akka-loader@1.17.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.flink/flink-java@1.17.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.flink/flink-core@1.17.0?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar",
        "pkg:maven/org.apache.commons/commons-math3@3.6.1?type=jar",
        "pkg:maven/com.twitter/chill-java@0.7.6?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar",
        "pkg:maven/org.apache.flink/flink-shaded-force-shading@16.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.flink/flink-queryable-state-client-java@1.17.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.flink/flink-hadoop-fs@1.17.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/commons-io/commons-io@2.11.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.flink/flink-shaded-netty@4.1.82.Final-16.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.flink/flink-shaded-zookeeper-3@3.7.1-16.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/commons-cli/commons-cli@1.5.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.javassist/javassist@3.24.0-GA?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.xerial.snappy/snappy-java@1.1.8.3?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.lz4/lz4-java@1.8.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.flink/flink-optimizer@1.17.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.flink/flink-core@1.17.0?type=jar",
        "pkg:maven/org.apache.flink/flink-runtime@1.17.0?type=jar",
        "pkg:maven/org.apache.flink/flink-java@1.17.0?type=jar",
        "pkg:maven/org.apache.flink/flink-shaded-guava@30.1.1-jre-16.1?type=jar",
        "pkg:maven/org.apache.flink/flink-shaded-jackson@2.13.4-16.1?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar",
        "pkg:maven/org.apache.flink/flink-shaded-force-shading@16.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.flink/flink-streaming-java@1.17.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.flink/flink-core@1.17.0?type=jar",
        "pkg:maven/org.apache.flink/flink-file-sink-common@1.17.0?type=jar",
        "pkg:maven/org.apache.flink/flink-runtime@1.17.0?type=jar",
        "pkg:maven/org.apache.flink/flink-java@1.17.0?type=jar",
        "pkg:maven/org.apache.flink/flink-shaded-guava@30.1.1-jre-16.1?type=jar",
        "pkg:maven/org.apache.commons/commons-math3@3.6.1?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar",
        "pkg:maven/org.apache.flink/flink-shaded-force-shading@16.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-math3@3.6.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.twitter/chill-java@0.7.6?type=jar",
      "dependsOn" : [
        "pkg:maven/com.esotericsoftware.kryo/kryo@2.24.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.flink/flink-file-sink-common@1.17.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.flink/flink-shaded-force-shading@16.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.flink/flink-table-common@1.17.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.flink/flink-core@1.17.0?type=jar",
        "pkg:maven/org.apache.flink/flink-shaded-asm-9@9.3-16.1?type=jar",
        "pkg:maven/com.ibm.icu/icu4j@67.1?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar",
        "pkg:maven/org.apache.flink/flink-shaded-force-shading@16.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.ibm.icu/icu4j@67.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.flink/flink-table-runtime@1.17.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.flink/flink-table-common@1.17.0?type=jar",
        "pkg:maven/org.apache.flink/flink-table-api-java@1.17.0?type=jar",
        "pkg:maven/org.apache.flink/flink-table-api-java-bridge@1.17.0?type=jar",
        "pkg:maven/org.apache.flink/flink-cep@1.17.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar",
        "pkg:maven/org.apache.flink/flink-shaded-force-shading@16.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.flink/flink-table-api-java@1.17.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.flink/flink-table-common@1.17.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar",
        "pkg:maven/org.apache.flink/flink-shaded-force-shading@16.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.flink/flink-table-api-java-bridge@1.17.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.flink/flink-table-api-java@1.17.0?type=jar",
        "pkg:maven/org.apache.flink/flink-table-api-bridge-base@1.17.0?type=jar",
        "pkg:maven/org.apache.flink/flink-java@1.17.0?type=jar",
        "pkg:maven/org.apache.flink/flink-streaming-java@1.17.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar",
        "pkg:maven/org.apache.flink/flink-shaded-force-shading@16.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.flink/flink-table-api-bridge-base@1.17.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.flink/flink-java@1.17.0?type=jar",
        "pkg:maven/org.apache.flink/flink-streaming-java@1.17.0?type=jar",
        "pkg:maven/org.apache.flink/flink-table-api-java@1.17.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar",
        "pkg:maven/org.apache.flink/flink-shaded-force-shading@16.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.flink/flink-cep@1.17.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.flink/flink-shaded-guava@30.1.1-jre-16.1?type=jar",
        "pkg:maven/org.apache.flink/flink-shaded-force-shading@16.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.flink/flink-connector-files@1.17.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.flink/flink-file-sink-common@1.17.0?type=jar",
        "pkg:maven/org.apache.flink/flink-shaded-force-shading@16.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.flink/flink-csv@1.17.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.flink/flink-shaded-force-shading@16.1?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.beam/beam-runners-java-fn-execution@2.43.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.checkerframework/checker-qual@3.10.0?type=jar",
        "pkg:maven/org.apache.beam/beam-vendor-guava-26_0-jre@0.1?type=jar",
        "pkg:maven/org.apache.beam/beam-runners-core-construction-java@2.43.0?type=jar",
        "pkg:maven/org.apache.beam/beam-runners-core-java@2.43.0?type=jar",
        "pkg:maven/org.apache.beam/beam-model-pipeline@2.43.0?type=jar",
        "pkg:maven/org.apache.beam/beam-model-fn-execution@2.43.0?type=jar",
        "pkg:maven/org.apache.beam/beam-sdks-java-core@2.43.0?type=jar",
        "pkg:maven/org.apache.beam/beam-sdks-java-fn-execution@2.43.0?type=jar",
        "pkg:maven/org.apache.beam/beam-vendor-grpc-1_48_1@0.1?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/org.apache.beam/beam-model-job-management@2.43.0?type=jar",
        "pkg:maven/joda-time/joda-time@2.5?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.checkerframework/checker-qual@3.10.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.beam/beam-vendor-guava-26_0-jre@0.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.beam/beam-runners-core-construction-java@2.43.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.checkerframework/checker-qual@3.10.0?type=jar",
        "pkg:maven/org.apache.beam/beam-model-pipeline@2.43.0?type=jar",
        "pkg:maven/org.apache.beam/beam-model-job-management@2.43.0?type=jar",
        "pkg:maven/org.apache.beam/beam-sdks-java-core@2.43.0?type=jar",
        "pkg:maven/org.apache.beam/beam-sdks-java-fn-execution@2.43.0?type=jar",
        "pkg:maven/org.apache.beam/beam-vendor-grpc-1_48_1@0.1?type=jar",
        "pkg:maven/org.apache.beam/beam-vendor-guava-26_0-jre@0.1?type=jar",
        "pkg:maven/io.github.classgraph/classgraph@4.8.104?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.13.4?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.13.4.2?type=jar",
        "pkg:maven/joda-time/joda-time@2.5?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.13.4?type=jar",
        "pkg:maven/org.apache.avro/avro@1.11.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.beam/beam-model-pipeline@2.43.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.beam/beam-vendor-grpc-1_48_1@0.1?type=jar",
        "pkg:maven/org.conscrypt/conscrypt-openjdk-uber@2.5.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.beam/beam-model-job-management@2.43.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.beam/beam-vendor-grpc-1_48_1@0.1?type=jar",
        "pkg:maven/org.conscrypt/conscrypt-openjdk-uber@2.5.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.beam/beam-sdks-java-core@2.43.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.beam/beam-model-pipeline@2.43.0?type=jar",
        "pkg:maven/org.apache.beam/beam-model-job-management@2.43.0?type=jar",
        "pkg:maven/org.apache.beam/beam-vendor-grpc-1_48_1@0.1?type=jar",
        "pkg:maven/org.apache.beam/beam-vendor-guava-26_0-jre@0.1?type=jar",
        "pkg:maven/net.bytebuddy/byte-buddy@1.10.14?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.13.4?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.13.4?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.13.4.2?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/org.apache.avro/avro@1.11.1?type=jar",
        "pkg:maven/org.xerial.snappy/snappy-java@1.1.8.3?type=jar",
        "pkg:maven/joda-time/joda-time@2.5?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.beam/beam-sdks-java-fn-execution@2.43.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.checkerframework/checker-qual@3.10.0?type=jar",
        "pkg:maven/org.apache.beam/beam-model-pipeline@2.43.0?type=jar",
        "pkg:maven/org.apache.beam/beam-model-fn-execution@2.43.0?type=jar",
        "pkg:maven/org.apache.beam/beam-sdks-java-core@2.43.0?type=jar",
        "pkg:maven/org.apache.beam/beam-vendor-grpc-1_48_1@0.1?type=jar",
        "pkg:maven/org.apache.beam/beam-vendor-guava-26_0-jre@0.1?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/joda-time/joda-time@2.5?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.beam/beam-vendor-grpc-1_48_1@0.1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.conscrypt/conscrypt-openjdk-uber@2.5.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.github.classgraph/classgraph@4.8.104?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.13.4?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.13.4.2?type=jar",
      "dependsOn" : [
        "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.13.4?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.13.4?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/joda-time/joda-time@2.5?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.13.4?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.avro/avro@1.11.1?type=jar",
      "dependsOn" : [
        "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.13.4?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.13.4.2?type=jar",
        "pkg:maven/org.apache.commons/commons-compress@1.21?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.beam/beam-runners-core-java@2.43.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.checkerframework/checker-qual@3.10.0?type=jar",
        "pkg:maven/org.apache.beam/beam-model-pipeline@2.43.0?type=jar",
        "pkg:maven/org.apache.beam/beam-sdks-java-core@2.43.0?type=jar",
        "pkg:maven/org.apache.beam/beam-model-job-management@2.43.0?type=jar",
        "pkg:maven/org.apache.beam/beam-runners-core-construction-java@2.43.0?type=jar",
        "pkg:maven/org.apache.beam/beam-sdks-java-fn-execution@2.43.0?type=jar",
        "pkg:maven/org.apache.beam/beam-vendor-guava-26_0-jre@0.1?type=jar",
        "pkg:maven/joda-time/joda-time@2.5?type=jar",
        "pkg:maven/org.apache.beam/beam-vendor-grpc-1_48_1@0.1?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.conscrypt/conscrypt-openjdk-uber@2.5.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.beam/beam-model-fn-execution@2.43.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.beam/beam-vendor-grpc-1_48_1@0.1?type=jar",
        "pkg:maven/org.conscrypt/conscrypt-openjdk-uber@2.5.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/net.bytebuddy/byte-buddy@1.10.14?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.alibaba/pemja@0.3.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.google.protobuf/protobuf-java@3.21.7?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/net.sf.py4j/py4j@0.10.9.7?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/net.razorvine/pyrolite@4.13?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.arrow/arrow-vector@5.0.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.arrow/arrow-format@5.0.0?type=jar",
        "pkg:maven/org.apache.arrow/arrow-memory-core@5.0.0?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.13.4?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.13.4?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.13.4.2?type=jar",
        "pkg:maven/io.netty/netty-common@4.1.70.Final?type=jar",
        "pkg:maven/com.google.flatbuffers/flatbuffers-java@1.12.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.arrow/arrow-format@5.0.0?type=jar",
      "dependsOn" : [
        "pkg:maven/com.google.flatbuffers/flatbuffers-java@1.12.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.google.flatbuffers/flatbuffers-java@1.12.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.arrow/arrow-memory-core@5.0.0?type=jar",
      "dependsOn" : [
        "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.netty/netty-common@4.1.70.Final?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.arrow/arrow-memory-netty@5.0.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.arrow/arrow-memory-core@5.0.0?type=jar",
        "pkg:maven/io.netty/netty-buffer@4.1.70.Final?type=jar",
        "pkg:maven/io.netty/netty-common@4.1.70.Final?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.netty/netty-buffer@4.1.70.Final?type=jar",
      "dependsOn" : [
        "pkg:maven/io.netty/netty-common@4.1.70.Final?type=jar"
      ]
    }
  ]
}