2023-12-19T21:44:55Z OWASP Foundation CycloneDX Maven plugin 2.7.7 436dfb24c63a322708e4a5143d8543af 3ef2e8728dc9eff2f129c34057e46e9d2b10629a c185b79bf0f9264f43bc8c222c44db67bea275bb727e3327cf9aea6bf45292c9 41488733e31e6c5315327dcc86187c2b9a6b96cd08f7e2157ce130688afde29c313fc6a73edb8a76333a930c78874aa2eac874448920030c0f7af0ac05e65ced f9462f86240fd9fc0942f34981e6d2371f252aa1a4e5e8c3c14e7f0f1a4e4de69ef972e51cf09a749afb6d97c13e67ed The Apache Software Foundation org.apache.flink flink-sql-avro-confluent-registry 1.18.1 The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users. Apache-2.0 pkg:maven/org.apache.flink/flink-sql-avro-confluent-registry@1.18.1?type=jar https://flink.apache.org/flink-formats/flink-sql-avro-confluent-registryhttps://repository.apache.org/service/local/staging/deploy/maven2https://mail-archives.apache.org/mod_mbox/www-announce/https://github.com/apache/flink/flink-formats/flink-sql-avro-confluent-registry makeBom compile,provided,runtime,system The Apache Software Foundation org.apache.flink flink-avro-confluent-registry 1.18.1 The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users. optional b1a019bec224365249b9249c59545dbe d0bd6852a5825cc84d09a807ab15ea1e6dbc2dde 63d10e9242192bb5178e3e820cf3d4762c69e7a752bda40b6b9943d007c56241 f7220562d38396a81af2e738e97c162064c970a4f4fabacd260e34b64aae7716d41dfda5447c05dc56aa7d4c9626cce5c93035abf563018b2d0ffb031639312d b68161e19d45a22763f3f84bf0b6a992b16e84ea6b113ad7f3f7ec1cb44939ce1c473eb768d003d834505a1363d16ee8 Apache-2.0 pkg:maven/org.apache.flink/flink-avro-confluent-registry@1.18.1?type=jar https://flink.apache.org/flink-formats/flink-avro-confluent-registryhttps://repository.apache.org/service/local/staging/deploy/maven2https://mail-archives.apache.org/mod_mbox/www-announce/https://github.com/apache/flink/flink-formats/flink-avro-confluent-registry Confluent, Inc. io.confluent kafka-schema-registry-client 7.2.2 Schema Registry provides a RESTful interface for storing and retrieving versioned Avro schemas for use with Kafka. 70de5957a959ba1c0a4fcb90744c9d23 5458c066627767f114b97ba7a2fcbf13f9bf4daa 4b2405f374af26ae3556e983f44812090c6f2006c63de58ad161b8b2a51e025e e034df9dc16d1eb917085a4aa4bbb78cf1340cb88322c2d7eebf6acad9bb8964fcdc941dfa641829e6cec3a52c14f819c9ccf64f46b3e2ed3dc587805b4d6d30 f74866d1e1e9cad90fb118650d2bf3cd64fc04afaec83da12fa6aaa1a0a29f09077f8c469325f000e73f9995efe6999b Apache-2.0 https://www.apache.org/licenses/LICENSE-2.0 pkg:maven/io.confluent/kafka-schema-registry-client@7.2.2?type=jar http://confluent.io/kafka-schema-registry-clienthttps://github.com/confluentinc/schema-registry/kafka-schema-registry-client org.apache.kafka kafka-clients 7.2.2-ccs 77b6695aec559c5fe17f412c789767ad ca252a7e40f4a52846e0867b5bd334a2eacbdda5 f4ad1f7dd43935883b846693af22785017d204528f167b82c42e09d5093f32d5 f9bbc88289f52b19e026ea269e4a95d0c7043364c8d2490df05a2161c8b4ce0c20128963b1d0133921e457e36657705bd294b78459b0658cfaf4298ca9a5a752 9987bf23a4c3f2f95dcab6c285102afbb96a34396d9438106b97bfb53552bdf4f1a63cf9aaa4e51dbbebee27f9e127e6 Apache-2.0 pkg:maven/org.apache.kafka/kafka-clients@7.2.2-ccs?type=jar https://kafka.apache.org com.github.luben com.github.luben zstd-jni 1.5.2-1 JNI bindings for Zstd native library that provides fast and high compression lossless algorithm for Java and all JVM languages. 2909788860e8e3ee29d51b327a43ca24 fad786abc1d1b81570e8d9a2fc8a1ef479bc27b6 93f7e4cbc907c2650f89f9f0bec94873735a58f1e4b66a54973294e4ec1878e8 92174059714b98d4275dca1b057c857766267afe6ae2b27bfdfe50395cb90a3ec973032977a074c5ce516a3769336e6bf63d3bbde95bea165c409f1c990a651d cdc9284a4537fcf83166bae1c4731463d94ad9615f91200c4da6368ddbd769314e87453e9114649c694966e6c77d4883 BSD-2-Clause pkg:maven/com.github.luben/zstd-jni@1.5.2-1?type=jar https://github.com/luben/zstd-jni xerial.org org.xerial.snappy snappy-java 1.1.10.4 snappy-java: A fast compression/decompression library d1d3b91e925c46a1a0f68b87298bafe8 50d0390056017158bdc75c063efd5c2a898d5f0c 55b30c94e5c4cc2d4b6976916098d0678a8a6cc7427fa8c875621bd94e731ac8 9e52bad4eaa0d0a2e0083cdd3433d84c4bb44c4d3f0314a48c3d6eacbb64d0f4fb2d71197944115618a598eb4a4941c13af2a9ec676b003fb3462ddac58bbe41 9539e8eb2dea244f07a7216db38970e3f336b5dc9d132cbe54e201c818dba3e02a1fc467b4529a18eca7127f86d742dd Apache-2.0 https://www.apache.org/licenses/LICENSE-2.0 pkg:maven/org.xerial.snappy/snappy-java@1.1.10.4?type=jar https://github.com/xerial/snappy-javahttps://github.com/xerial/snappy-java The Apache Software Foundation org.apache.commons commons-compress 1.21 Apache Commons Compress software defines an API for working with compression and archive formats. These include: bzip2, gzip, pack200, lzma, xz, Snappy, traditional Unix Compress, DEFLATE, DEFLATE64, LZ4, Brotli, Zstandard and ar, cpio, jar, tar, zip, dump, 7z, arj. 2a713d10331bc4e13459a3dc0463f16f 4ec95b60d4e86b5c95a0e919cb172a0af98011ef 6aecfd5459728a595601cfa07258d131972ffc39b492eb48bdd596577a2f244a c92d9a12547aab475e057955ad815fdfe92ff44c78383fa5af54b089f1bff5525126ef6aef93334f3bfc22e2fef4ad0d969f69384e978a83a55f011a53e7e471 da56f95d420cd7278cee646f4cd0e7a5ee12b6a2894efaec12f0ff7b56c3d43e5db736fe1ed66ff91118b16f2d64ebef Apache-2.0 pkg:maven/org.apache.commons/commons-compress@1.21?type=jar https://commons.apache.org/proper/commons-compress/https://builds.apache.org/https://repository.apache.org/service/local/staging/deploy/maven2https://issues.apache.org/jira/browse/COMPRESShttps://mail-archives.apache.org/mod_mbox/commons-user/https://gitbox.apache.org/repos/asf?p=commons-compress.git FasterXML com.fasterxml.jackson.core jackson-databind 2.14.3 General data-binding functionality for Jackson: works on core streaming API d9aed5b42f6769cb06d6802250aed19b ba0373b04bf0f03b0cd268cd2e5e8444aaaf9208 ef0694046dc86e8a601e69efef24cda88a85773aaf012f5b9b1167d6f2e7de45 54f4842e09b4166bc0c0851407bdf988a0f88d5f68d58134eb0d393c80e20b337545fffa96c3563b79b71b105d9e55713815749af48cab752633d98c0dbfcf99 624b07a0b597c07a2c82cd6fbbb31d796c69a189931b73b7ce9c35dd0aca6dfca378d08c05e943b10c7f12e06904bb04 Apache-2.0 pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.14.3?type=jar https://github.com/FasterXML/jacksonhttps://oss.sonatype.org/service/local/staging/deploy/maven2/https://github.com/FasterXML/jackson-databind/issueshttps://github.com/FasterXML/jackson-databind FasterXML com.fasterxml.jackson.core jackson-annotations 2.14.3 Core annotations used for value types, used by Jackson data binding package. f6ee414687751fbadc55998ec49b3ea6 b49701acb02b8e95ae1967821cfbafc220cf5795 ea1b3a9ec60a353f4d7e78559c7140abb9bcf71b31456e9d57c8289f7cf397f1 d265ba6cc1d20721ba7803416005f25d70036cd659bf6071f4d3250d7dab272a2522d7db282e50aeae994907556ef63155d2c0bcc0bd1c96c6460143ff5a8d53 551a607644bcb3f3c06ac9c94861858a0d8f2b62b9120d34f5c2aad94a3a0e75478a94dca7eb290d9814c8dec739905e Apache-2.0 pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.14.3?type=jar https://github.com/FasterXML/jacksonhttps://oss.sonatype.org/service/local/staging/deploy/maven2/https://github.com/FasterXML/jackson-annotations/issueshttps://github.com/FasterXML/jackson-annotations FasterXML com.fasterxml.jackson.core jackson-core 2.14.3 Core Jackson processing abstractions (aka Streaming API), implementation for JSON abb25b80cda20ddc2cd3bbd8fccd0d34 4fa101f81504ed6811bf1823270adb51a9b45ff3 7ee2debad3c002e97b28b84d5f1b2044a38e780abb673948238f5bc656e2fe44 7907fbde57f1ebd18d0935d34c5c9657e7dcff924c540b6ba732f87ed2e9e653ee499b21b464b3b74fa569d5865ffa717b8e2098d600a5f74cef4e97f39cc7d5 0d584c6b0ce820441e7e8f341d567924ab236de62f4ad8a40f1af37e983946ea07a9de3a4b607b76bf3c421a02720d0e Apache-2.0 pkg:maven/com.fasterxml.jackson.core/jackson-core@2.14.3?type=jar https://github.com/FasterXML/jackson-corehttps://oss.sonatype.org/service/local/staging/deploy/maven2/https://github.com/FasterXML/jackson-core/issueshttps://github.com/FasterXML/jackson-core com.google.guava guava 30.1.1-jre Guava is a suite of core and expanded libraries that include utility classes, Google's collections, I/O classes, and much more. 05374f163d0a4141db672fff9df95b12 87e0fd1df874ea3cbe577702fe6f17068b790fd8 44ce229ce26d880bf3afc362bbfcec34d7e6903d195bbb1db9f3b6e0d9834f06 025cdd70db7d896d57cc04a8a735ded609b393e8d56af23d454198b64a263147ab0d68fbdffabcb926b143433fccdc022f76aaed658b9448c5ce85f07c42140f 5a7d9c9792f0912bf49ecc97fabbce703408e2009f84a827ca3ff3bc5a3e171f2759821a75da155b4e45e5ad87893053 Apache-2.0 pkg:maven/com.google.guava/guava@30.1.1-jre?type=jar https://github.com/google/guava/guavahttps://travis-ci.org/google/guavahttps://oss.sonatype.org/service/local/staging/deploy/maven2/https://github.com/google/guava/issueshttps://github.com/google/guava/guava Confluent, Inc. io.confluent common-utils 7.2.2 Common utilities, including metrics and config. f392fe6a12f3dfa8f66d3c5b3d5fc1bb 8bfc0e7eed95e6d5d9a54cf0f542d7bc24ecdc30 591847307715ec705d73c81db018d0a7d754a7e694e63472ce2ba5746002ca16 882d83540ab701e593fd97a6cabc11cee02a6c017e440cded8a365ddd69eb7ce9459ad99f505e729caaffc4d7e1312d2f7e4769400f8d733d1abc07240981853 d4ca10aae92a766dda9cbea71a69bde356ffa743b33b3d2e147c300e945d7099189af2deb66c4ff08841c02376e59480 Apache-2.0 https://www.apache.org/licenses/LICENSE-2.0 pkg:maven/io.confluent/common-utils@7.2.2?type=jar https://confluent.io/common-utilshttps://github.com/confluentinc/common/common-utils The Apache Software Foundation org.apache.flink flink-avro 1.18.1 The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users. 58b8c474f2064f7616f211a9c22356be 57146671b37d1f5c6e14f965012659eb3b7adad0 7fa3883507b2cab3fcd174f3ef3bad44618e81d26634775a3f6755e76612f4e4 9c0eb164fb40cce8c8b81e571f24ff2e9bd3963e453b8d53a9fecb4f531ece8d75646eefd98b68d09fca17985e2b17c7ba69ef50d288a6710d45b8957735df45 9dbbfc948ee8c18efec8b227c77dd967894a4434a1f2b0a3a2a393920a8a8040532df704c63ca2a063396ed501a29830 Apache-2.0 pkg:maven/org.apache.flink/flink-avro@1.18.1?type=jar https://flink.apache.org/flink-formats/flink-avrohttps://repository.apache.org/service/local/staging/deploy/maven2https://mail-archives.apache.org/mod_mbox/www-announce/https://github.com/apache/flink/flink-formats/flink-avro The Apache Software Foundation org.apache.avro avro 1.11.3 Avro core components 0ce474e395d0aad56c11293fd68ccb52 02b463409b373bff9ece09f54a43d42da5cea55a 4554aa8f8175f999fc56e35d8d294d634480992ce02406a52c650f521997e436 06829cf06127621042d024668c1c4c7b68b19e9a54e51495c03ead0ce600291e675da6f081307b8a949be45a6f6e6fe55ee1af1a69990ae47dc300277ab3493d 991cab21cebff4d891c2d8f9c1c09761f06bc438f71ca811b482a35536e379da4e84d84645a9527330ff725dc2ff1da8 Apache-2.0 https://www.apache.org/licenses/LICENSE-2.0 pkg:maven/org.apache.avro/avro@1.11.3?type=jar https://avro.apache.orghttps://repository.apache.org/service/local/staging/deploy/maven2https://issues.apache.org/jira/browse/AVROhttps://mail-archives.apache.org/mod_mbox/avro-dev/scm:git:https://github.com/apache/avro/avro-parent/avro QOS.ch org.slf4j slf4j-api 1.7.36 The slf4j API optional 872da51f5de7f3923da4de871d57fd85 6c62681a2f655b49963a5983b8b0950a6120ae14 d3ef575e3e4979678dc01bf1dcce51021493b4d11fb7f1be8ad982877c16a1c0 f9b033fc019a44f98b16048da7e2b59edd4a6a527ba60e358f65ab88e0afae03a9340f1b3e8a543d49fa542290f499c5594259affa1ff3e6e7bf3b428d4c610b 2b14ad035877087157e379d3277dcdcd79e58d6bdb147c47d29e377d75ce53ad42cafbf22f5fb7827c7e946ff4876b9a MIT https://opensource.org/licenses/MIT pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar http://www.slf4j.orghttps://oss.sonatype.org/service/local/staging/deploy/maven2/https://github.com/qos-ch/slf4j/slf4j-api The Apache Software Foundation org.apache.flink flink-shaded-force-shading 17.0 The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users. optional 6890ff555c82f3bb156cf9c73bf09cf9 345c153973a17fb8a98d368352e14893edcbd610 dcc7dff160a40b74fa5db2805b2004153ffd0517968f3c7843a8ee43be82e710 9de23513832248618b78e279c0e3900f5cafb7193254ef6818b4f0b6f3b70045dd9cc4fdd13caeeca8b70a44f38201ce055f07248cdf08930a20e1b7a73997ff 063611872b4b1a1718e0472e32198bded0d74fa656e5c47a7b20038cd5ff70106e3109b60fe882880feea486e1ef83bf Apache-2.0 pkg:maven/org.apache.flink/flink-shaded-force-shading@17.0?type=jar http://flink.apache.org/flink-shaded-force-shadinghttps://repository.apache.org/service/local/staging/deploy/maven2https://mail-archives.apache.org/mod_mbox/www-announce/https://github.com/apache/flink-shaded/flink-shaded-force-shading com.google.code.findbugs jsr305 1.3.9 JSR305 Annotations for Findbugs optional 1d5a772e400b04bb67a7ef4a0e0996d8 40719ea6961c0cb6afaeb6a921eaa1f6afd4cfdf 905721a0eea90a81534abb7ee6ef4ea2e5e645fa1def0a5cd88402df1b46c9ed 06da282cfd8e30d9f8cf17702b8709172b00e22b75a627a1d85f8989615b8a1a401bc25d9aee7b14aed1d9b5df73bf2ea8d66f9c8468d9577c29f0ccfa2cc70a 56e6b41ef62eb5edfed0203802cefae9c2df86388148e420bb0c687abb2b80e14d5c2a82d5b35dce4badaf148f94eada Apache-2.0 pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar http://findbugs.sourceforge.net/http://findbugs.googlecode.com/svn/trunk/