2023-03-17T10:10:51Z OWASP Foundation CycloneDX Maven plugin 2.7.3 ab886f1cb1a79b4244ac54dde22a0989 9ed658496dfeef87fe6072b95c62ec37165cc741 df9b43417bef6aeac86a393abcc1ac2ed0518239ba544aaeb595b9619c603503 223da34bb51c5339e0f7285757608c1a56b1ea887f7ad835af9299fabacc693053163da74af352af86b16e18e04db730bd44214eda04291410c42b6ae657d85c 3aaf057329ed0f90ec3a49a45b3cf4ec5ce637fd75d6202e9483fa4274cec3e7b74308016e146b6ba087df5fce9397bb The Apache Software Foundation org.apache.flink flink-sql-avro-confluent-registry 1.17.0 The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users. Apache-2.0 pkg:maven/org.apache.flink/flink-sql-avro-confluent-registry@1.17.0?type=jar https://www.apache.org/https://repository.apache.org/service/local/staging/deploy/maven2https://mail-archives.apache.org/mod_mbox/www-announce/https://github.com/apache/flink/flink-formats/flink-sql-avro-confluent-registry org.apache.flink flink-avro-confluent-registry 1.17.0 optional 4bc34c49a797be39c2fae86b7df751a4 85b449c1807e4ec1c28402f56de521685f6856e4 394944dd0acfbd2764e39e47c3c2ad8e614e9174a2eea31cd66f94e75eca2c66 e2143e76ebf5ff2460323f09e7e68d311ddd061456b43ea363652d5b5ee448b27e8d68202607eb8a5f2cd11f5cb5e0375c2840bcfd7a746542f7cdecc0ec0f22 d728485d5e4024d522ed92c64f1a0b9591b80f6ac4d8b3e81a4f301ed9dcceb9c7f13ef76e503ce140692522777376df pkg:maven/org.apache.flink/flink-avro-confluent-registry@1.17.0?type=jar Confluent, Inc. io.confluent kafka-schema-registry-client 7.2.2 Schema Registry provides a RESTful interface for storing and retrieving versioned Avro schemas for use with Kafka. 70de5957a959ba1c0a4fcb90744c9d23 5458c066627767f114b97ba7a2fcbf13f9bf4daa 4b2405f374af26ae3556e983f44812090c6f2006c63de58ad161b8b2a51e025e e034df9dc16d1eb917085a4aa4bbb78cf1340cb88322c2d7eebf6acad9bb8964fcdc941dfa641829e6cec3a52c14f819c9ccf64f46b3e2ed3dc587805b4d6d30 f74866d1e1e9cad90fb118650d2bf3cd64fc04afaec83da12fa6aaa1a0a29f09077f8c469325f000e73f9995efe6999b Apache-2.0 https://www.apache.org/licenses/LICENSE-2.0 pkg:maven/io.confluent/kafka-schema-registry-client@7.2.2?type=jar http://confluent.iohttps://github.com/confluentinc/schema-registry org.apache.kafka kafka-clients 7.2.2-ccs 77b6695aec559c5fe17f412c789767ad ca252a7e40f4a52846e0867b5bd334a2eacbdda5 f4ad1f7dd43935883b846693af22785017d204528f167b82c42e09d5093f32d5 f9bbc88289f52b19e026ea269e4a95d0c7043364c8d2490df05a2161c8b4ce0c20128963b1d0133921e457e36657705bd294b78459b0658cfaf4298ca9a5a752 9987bf23a4c3f2f95dcab6c285102afbb96a34396d9438106b97bfb53552bdf4f1a63cf9aaa4e51dbbebee27f9e127e6 Apache-2.0 pkg:maven/org.apache.kafka/kafka-clients@7.2.2-ccs?type=jar com.github.luben com.github.luben zstd-jni 1.5.2-1 JNI bindings for Zstd native library that provides fast and high compression lossless algorithm for Java and all JVM languages. 2909788860e8e3ee29d51b327a43ca24 fad786abc1d1b81570e8d9a2fc8a1ef479bc27b6 93f7e4cbc907c2650f89f9f0bec94873735a58f1e4b66a54973294e4ec1878e8 92174059714b98d4275dca1b057c857766267afe6ae2b27bfdfe50395cb90a3ec973032977a074c5ce516a3769336e6bf63d3bbde95bea165c409f1c990a651d cdc9284a4537fcf83166bae1c4731463d94ad9615f91200c4da6368ddbd769314e87453e9114649c694966e6c77d4883 BSD-2-Clause pkg:maven/com.github.luben/zstd-jni@1.5.2-1?type=jar xerial.org org.xerial.snappy snappy-java 1.1.8.3 snappy-java: A fast compression/decompression library fdacc9d6d764fe918daca743a67ce24f 2c58fa5745831afa3a4290c2ce15553ff13ad0ab d371202c03bd165f6fd660f63ae597fbb4c91b81bfc6e12cf6b2a93ace93a800 5f3f9a391a70c1898610892bca07bb87b867caf4e6d959800a3abdd45435b4af52a9fdd82d7aefe0bd47af169203f83c92450e327c3b8bf47373e8030004344b bc9e1d3ad7dfbd35fc1e7e9287f254eca5fc1f20234558bd963e1f504b55c4d2aacf424f05b211e24846d4d158fb3c91 Apache-2.0 https://www.apache.org/licenses/LICENSE-2.0 pkg:maven/org.xerial.snappy/snappy-java@1.1.8.3?type=jar https://github.com/xerial/snappy-javahttps://github.com/xerial/snappy-java The Apache Software Foundation org.apache.commons commons-compress 1.21 Apache Commons Compress software defines an API for working with compression and archive formats. These include: bzip2, gzip, pack200, lzma, xz, Snappy, traditional Unix Compress, DEFLATE, DEFLATE64, LZ4, Brotli, Zstandard and ar, cpio, jar, tar, zip, dump, 7z, arj. 2a713d10331bc4e13459a3dc0463f16f 4ec95b60d4e86b5c95a0e919cb172a0af98011ef 6aecfd5459728a595601cfa07258d131972ffc39b492eb48bdd596577a2f244a c92d9a12547aab475e057955ad815fdfe92ff44c78383fa5af54b089f1bff5525126ef6aef93334f3bfc22e2fef4ad0d969f69384e978a83a55f011a53e7e471 da56f95d420cd7278cee646f4cd0e7a5ee12b6a2894efaec12f0ff7b56c3d43e5db736fe1ed66ff91118b16f2d64ebef Apache-2.0 pkg:maven/org.apache.commons/commons-compress@1.21?type=jar https://issues.apache.org/jira/browse/COMPRESShttps://gitbox.apache.org/repos/asf?p=commons-compress.githttps://builds.apache.org/https://mail-archives.apache.org/mod_mbox/commons-user/https://www.apache.org/https://repository.apache.org/service/local/staging/deploy/maven2 FasterXML com.fasterxml.jackson.core jackson-databind 2.13.4.2 General data-binding functionality for Jackson: works on core streaming API f26eab82fa1da09f8e8bc7e52fc82088 325c06bdfeb628cfb80ebaaf1a26cc1eb558a585 ba1a368137f9b92f48dd07f299ff7a782a69487b853ef5578215426fcde8f08b 89b5f58414d541d79f63ddedbcf4d5fafabc68d9bf9cad09f354c151e9685512e1433f2e22f6a7ffc8100c3c5fddbbb99fd64d7c6d4974b2915edb523f99ca16 87d3468179690f73868e8e2cad7b5107d4cea86ba7d6481ed288101f9d59b6b9ad27c7cfd1c466bdccc89effeb8291cd Apache-2.0 pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.13.4.2?type=jar http://github.com/FasterXML/jackson-databindhttp://fasterxml.com/https://oss.sonatype.org/service/local/staging/deploy/maven2/ FasterXML com.fasterxml.jackson.core jackson-annotations 2.13.4 Core annotations used for value types, used by Jackson data binding package. 7e982dafcf25c24b365b5088eaf8a0a6 858c6cc78e1f08a885b1613e1d817c829df70a6e ac5b27a634942391ca113850ee7db01df1499a240174021263501c05fc653b44 788a836b1631dabed472a0387de2ccdf86ab9091b04246d58e257780bb382e6ae068b6df862407c1256b0b83d1f9366813e54e98982f881c3d222a9f4a8e9ebb 7ae717dc399ccfe7c2a4831fae5c410d896e0a5afdff710003fa306ae2663a3c21ca000edfec9cdba30b0997c4c66757 Apache-2.0 pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.13.4?type=jar http://github.com/FasterXML/jackson-annotationshttp://fasterxml.com/https://oss.sonatype.org/service/local/staging/deploy/maven2/ FasterXML com.fasterxml.jackson.core jackson-core 2.13.4 Core Jackson processing abstractions (aka Streaming API), implementation for JSON e8f064827ddb8deb06e45d20988bcaa5 0cf934c681294b97ef6d80082faeefbe1edadf56 4c2e043200edd9ee7ba6fc378bd5c17784a5bf2388e152d208068b51fd0839cf cf54bf5be3a5015a4b2c3ac986bf01f64517df224c8ba67197118d06f7fbe8ad64e39d002df326a72feb5aec8f0bc7f15338e90c4ba0668a167a0f03a81ce47f 5fd2723a9f5bae811e71b596180c56355497f87cdd6c9bdc74716224ea1d133b6ed4e5df20b6ec169b3745066019ad94 Apache-2.0 pkg:maven/com.fasterxml.jackson.core/jackson-core@2.13.4?type=jar http://github.com/FasterXML/jackson-corehttp://fasterxml.com/https://oss.sonatype.org/service/local/staging/deploy/maven2/ com.google.guava guava 30.1.1-jre Guava is a suite of core and expanded libraries that include utility classes, Google's collections, I/O classes, and much more. 05374f163d0a4141db672fff9df95b12 87e0fd1df874ea3cbe577702fe6f17068b790fd8 44ce229ce26d880bf3afc362bbfcec34d7e6903d195bbb1db9f3b6e0d9834f06 025cdd70db7d896d57cc04a8a735ded609b393e8d56af23d454198b64a263147ab0d68fbdffabcb926b143433fccdc022f76aaed658b9448c5ce85f07c42140f 5a7d9c9792f0912bf49ecc97fabbce703408e2009f84a827ca3ff3bc5a3e171f2759821a75da155b4e45e5ad87893053 Apache-2.0 pkg:maven/com.google.guava/guava@30.1.1-jre?type=jar https://travis-ci.org/google/guavahttps://oss.sonatype.org/service/local/staging/deploy/maven2/https://github.com/google/guava/issueshttps://github.com/google/guava Confluent, Inc. io.confluent common-utils 7.2.2 Common utilities, including metrics and config. f392fe6a12f3dfa8f66d3c5b3d5fc1bb 8bfc0e7eed95e6d5d9a54cf0f542d7bc24ecdc30 591847307715ec705d73c81db018d0a7d754a7e694e63472ce2ba5746002ca16 882d83540ab701e593fd97a6cabc11cee02a6c017e440cded8a365ddd69eb7ce9459ad99f505e729caaffc4d7e1312d2f7e4769400f8d733d1abc07240981853 d4ca10aae92a766dda9cbea71a69bde356ffa743b33b3d2e147c300e945d7099189af2deb66c4ff08841c02376e59480 Apache-2.0 https://www.apache.org/licenses/LICENSE-2.0 pkg:maven/io.confluent/common-utils@7.2.2?type=jar https://confluent.iohttps://github.com/confluentinc/common org.apache.flink flink-avro 1.17.0 ce4f24477666d11913972d025fd1c6f9 a954e4847648510f14e47a387ab75fd928bc44c6 3c76f17d12874b7336e7a84e449cf8da6a9d6886a10ace9740ab57c93432854a 7487cc1d27334ab0646a734a19194f6f3c3b318043792abf233fcc665d0a14c08df61a3171d06231519898a17fc458f9456e76349bb4a05965ee7a86c55aa2cc 7a49da33918224fed316ea468ef9647710a1918134ecddeb7c1203086dccad1da426587a4ec33d92ea77b46c5cd6f3aa pkg:maven/org.apache.flink/flink-avro@1.17.0?type=jar The Apache Software Foundation org.apache.avro avro 1.11.1 Avro core components 9fad4fb0e34810ae5f3d7cb5223a7e1c 81af5d4b9bdaaf4ba41bcb0df5241355ec34c630 1213dfffe9295daa3d986713ae36b8daad36bfba039810264bca1cdac0cf8b6a a0e8b7c1f138747334a2f1f20f40a6893543d049243f7cec67ee572ec4a40e4dc7b82e9b8769c64a90eb9c8ed92cc646daee3cacd523d3e9289a67decd2bb0d6 2406810a329612f96f2881e9912dc42cf880eb721026b13e45716586860921223fdc003081e4711ad9ee26a1d85936cc Apache-2.0 pkg:maven/org.apache.avro/avro@1.11.1?type=jar https://issues.apache.org/jira/browse/AVROhttps://mail-archives.apache.org/mod_mbox/avro-dev/https://www.apache.org/https://repository.apache.org/service/local/staging/deploy/maven2 QOS.ch org.slf4j slf4j-api 1.7.36 The slf4j API optional 872da51f5de7f3923da4de871d57fd85 6c62681a2f655b49963a5983b8b0950a6120ae14 d3ef575e3e4979678dc01bf1dcce51021493b4d11fb7f1be8ad982877c16a1c0 f9b033fc019a44f98b16048da7e2b59edd4a6a527ba60e358f65ab88e0afae03a9340f1b3e8a543d49fa542290f499c5594259affa1ff3e6e7bf3b428d4c610b 2b14ad035877087157e379d3277dcdcd79e58d6bdb147c47d29e377d75ce53ad42cafbf22f5fb7827c7e946ff4876b9a MIT https://opensource.org/licenses/MIT pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar http://www.qos.chhttps://oss.sonatype.org/service/local/staging/deploy/maven2/https://github.com/qos-ch/slf4j The Apache Software Foundation org.apache.flink flink-shaded-force-shading 16.1 The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users. optional 0f703324b629fbc0d0cbf22375515477 5040816ebca54b5bb4d5bb98b741ff77da59505b 44ab80c42c380bc813bbf477256a4f4334e44088c8fb1b34d3c867733e54c664 bf56dc058175101f58f2abfb3307349e9e911743f118c9309e0b8d3860f164c2c88b5fa1113e2270c1533bf37dc8102f1482099f11bdaa5acf316b7a9808093b 3b7c079f14bfeb02219e4430fa2bbe66e9000596116c5247f98e0b0852bd59877559358704c8be7d18c0fbed1fff0880 Apache-2.0 pkg:maven/org.apache.flink/flink-shaded-force-shading@16.1?type=jar https://github.com/apache/flink-shadedhttps://www.apache.org/https://repository.apache.org/service/local/staging/deploy/maven2https://mail-archives.apache.org/mod_mbox/www-announce/ com.google.code.findbugs jsr305 1.3.9 JSR305 Annotations for Findbugs optional 1d5a772e400b04bb67a7ef4a0e0996d8 40719ea6961c0cb6afaeb6a921eaa1f6afd4cfdf 905721a0eea90a81534abb7ee6ef4ea2e5e645fa1def0a5cd88402df1b46c9ed 06da282cfd8e30d9f8cf17702b8709172b00e22b75a627a1d85f8989615b8a1a401bc25d9aee7b14aed1d9b5df73bf2ea8d66f9c8468d9577c29f0ccfa2cc70a 56e6b41ef62eb5edfed0203802cefae9c2df86388148e420bb0c687abb2b80e14d5c2a82d5b35dce4badaf148f94eada Apache-2.0 pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar http://findbugs.googlecode.com/svn/trunk/