2024-03-06T15:24:02Z OWASP Foundation CycloneDX Maven plugin 2.7.7 436dfb24c63a322708e4a5143d8543af 3ef2e8728dc9eff2f129c34057e46e9d2b10629a c185b79bf0f9264f43bc8c222c44db67bea275bb727e3327cf9aea6bf45292c9 41488733e31e6c5315327dcc86187c2b9a6b96cd08f7e2157ce130688afde29c313fc6a73edb8a76333a930c78874aa2eac874448920030c0f7af0ac05e65ced f9462f86240fd9fc0942f34981e6d2371f252aa1a4e5e8c3c14e7f0f1a4e4de69ef972e51cf09a749afb6d97c13e67ed The Apache Software Foundation org.apache.flink flink-sql-avro-confluent-registry 1.19.0 The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users. Apache-2.0 pkg:maven/org.apache.flink/flink-sql-avro-confluent-registry@1.19.0?type=jar https://flink.apache.org/flink-formats/flink-sql-avro-confluent-registryhttps://repository.apache.org/service/local/staging/deploy/maven2https://mail-archives.apache.org/mod_mbox/www-announce/https://github.com/apache/flink/flink-formats/flink-sql-avro-confluent-registry makeBom compile,provided,runtime,system The Apache Software Foundation org.apache.flink flink-avro-confluent-registry 1.19.0 The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users. optional f123bc01112ecac51b14a864a03dc8dc 06f765aec8f21f8e28b5ef437806f38ade580ca1 9bb4ad80bab609ac00bab930d56e5977dc071dbd1f7c0339fdf53ba69236508b f0670f1cb10e84a53e25ad83cd37e3bd2b1330701dd14b9c94585bdc07df6ddd1484acef22ab753bfce9dd949dd4d04493d1f1650afb13742f21dffd9c286bd9 4e85ba5fc0c27fe08073cbda7f4a86cfa642b5b3ad8af99bfa7b89654a926d8e98352f83597b8657e40b7946fd3f792c Apache-2.0 pkg:maven/org.apache.flink/flink-avro-confluent-registry@1.19.0?type=jar https://flink.apache.org/flink-formats/flink-avro-confluent-registryhttps://repository.apache.org/service/local/staging/deploy/maven2https://mail-archives.apache.org/mod_mbox/www-announce/https://github.com/apache/flink/flink-formats/flink-avro-confluent-registry Confluent, Inc. io.confluent kafka-schema-registry-client 7.2.2 Schema Registry provides a RESTful interface for storing and retrieving versioned Avro schemas for use with Kafka. 70de5957a959ba1c0a4fcb90744c9d23 5458c066627767f114b97ba7a2fcbf13f9bf4daa 4b2405f374af26ae3556e983f44812090c6f2006c63de58ad161b8b2a51e025e e034df9dc16d1eb917085a4aa4bbb78cf1340cb88322c2d7eebf6acad9bb8964fcdc941dfa641829e6cec3a52c14f819c9ccf64f46b3e2ed3dc587805b4d6d30 f74866d1e1e9cad90fb118650d2bf3cd64fc04afaec83da12fa6aaa1a0a29f09077f8c469325f000e73f9995efe6999b Apache-2.0 https://www.apache.org/licenses/LICENSE-2.0 pkg:maven/io.confluent/kafka-schema-registry-client@7.2.2?type=jar http://confluent.io/kafka-schema-registry-clienthttps://github.com/confluentinc/schema-registry/kafka-schema-registry-client org.apache.kafka kafka-clients 7.2.2-ccs 77b6695aec559c5fe17f412c789767ad ca252a7e40f4a52846e0867b5bd334a2eacbdda5 f4ad1f7dd43935883b846693af22785017d204528f167b82c42e09d5093f32d5 f9bbc88289f52b19e026ea269e4a95d0c7043364c8d2490df05a2161c8b4ce0c20128963b1d0133921e457e36657705bd294b78459b0658cfaf4298ca9a5a752 9987bf23a4c3f2f95dcab6c285102afbb96a34396d9438106b97bfb53552bdf4f1a63cf9aaa4e51dbbebee27f9e127e6 Apache-2.0 pkg:maven/org.apache.kafka/kafka-clients@7.2.2-ccs?type=jar https://kafka.apache.org com.github.luben com.github.luben zstd-jni 1.5.2-1 JNI bindings for Zstd native library that provides fast and high compression lossless algorithm for Java and all JVM languages. 2909788860e8e3ee29d51b327a43ca24 fad786abc1d1b81570e8d9a2fc8a1ef479bc27b6 93f7e4cbc907c2650f89f9f0bec94873735a58f1e4b66a54973294e4ec1878e8 92174059714b98d4275dca1b057c857766267afe6ae2b27bfdfe50395cb90a3ec973032977a074c5ce516a3769336e6bf63d3bbde95bea165c409f1c990a651d cdc9284a4537fcf83166bae1c4731463d94ad9615f91200c4da6368ddbd769314e87453e9114649c694966e6c77d4883 BSD-2-Clause pkg:maven/com.github.luben/zstd-jni@1.5.2-1?type=jar https://github.com/luben/zstd-jni xerial.org org.xerial.snappy snappy-java 1.1.10.4 snappy-java: A fast compression/decompression library d1d3b91e925c46a1a0f68b87298bafe8 50d0390056017158bdc75c063efd5c2a898d5f0c 55b30c94e5c4cc2d4b6976916098d0678a8a6cc7427fa8c875621bd94e731ac8 9e52bad4eaa0d0a2e0083cdd3433d84c4bb44c4d3f0314a48c3d6eacbb64d0f4fb2d71197944115618a598eb4a4941c13af2a9ec676b003fb3462ddac58bbe41 9539e8eb2dea244f07a7216db38970e3f336b5dc9d132cbe54e201c818dba3e02a1fc467b4529a18eca7127f86d742dd Apache-2.0 https://www.apache.org/licenses/LICENSE-2.0 pkg:maven/org.xerial.snappy/snappy-java@1.1.10.4?type=jar https://github.com/xerial/snappy-javahttps://github.com/xerial/snappy-java The Apache Software Foundation org.apache.commons commons-compress 1.24.0 Apache Commons Compress defines an API for working with compression and archive formats. These include: bzip2, gzip, pack200, lzma, xz, Snappy, traditional Unix Compress, DEFLATE, DEFLATE64, LZ4, Brotli, Zstandard and ar, cpio, jar, tar, zip, dump, 7z, arj. a99bcb4c7967d685eeecaa814b9a902d b4b1b5a3d9573b2970fddab236102c0a4d27d35e fbf2c5d275e513c08f4e4fb539726dbf3ac2142af956ba93efb983244f0c36bd 7392ca7c08ab295a2f20152a7dd3190211331d869355d3698bf14908248b318e2b1fecb5050414939c046819a3c965492dee7f50b2281bc55db026cf76e286b1 2370d070972604f37c121c0a1d2982e6b693a0a31b150c60ada83ad7e80437156f179639a8859bb90012549fc51bb034 Apache-2.0 https://www.apache.org/licenses/LICENSE-2.0 pkg:maven/org.apache.commons/commons-compress@1.24.0?type=jar https://commons.apache.org/proper/commons-compress/https://github.com/apache/commons-parent/actionshttps://repository.apache.org/service/local/staging/deploy/maven2https://issues.apache.org/jira/browse/COMPRESShttps://mail-archives.apache.org/mod_mbox/commons-user/https://gitbox.apache.org/repos/asf?p=commons-compress.git FasterXML com.fasterxml.jackson.core jackson-databind 2.15.3 General data-binding functionality for Jackson: works on core streaming API 5f453c55f127690fa8491ce347aa055c a734bc2c47a9453c4efa772461a3aeb273c010d9 c3c53333a2172a80678bda1803e39cff45bec6ae3e9c7d4f44a81ec4e2ab18dc 490ccc99a9c28238fe28455bae08196b83df034cae8a1947d27ff89e500a5d812cf4be36c61942e647c62ad540d8eb4428f49855f0cc8db0ee9e7a5b12ba2454 b53f4a6fddbf677a8d02c65e9f0a96372140c68286d68740987fb462f946de878abaeea421d3e4716751f04d88c16ad1 Apache-2.0 pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.15.3?type=jar https://github.com/FasterXML/jacksonhttps://oss.sonatype.org/service/local/staging/deploy/maven2/https://github.com/FasterXML/jackson-databind/issueshttps://github.com/FasterXML/jackson-databind FasterXML com.fasterxml.jackson.core jackson-annotations 2.15.3 Core annotations used for value types, used by Jackson data binding package. f478f693731e4a2f0f0d3c7bba119b32 79baf4e605eb3bbb60b1c475d44a7aecceea1d60 aae865c3d88256d61b11523cb1e88bd48d5b9ad5855fa1fc859504fd2204708a c496afd736fa8acbf8126887e2ff375f162212f451326451fbb4b9194231d814e25bccacbaead9db98beec454f6b8d9ed706c5c88e2145bf7e1a37e13fd81af0 13b4d153cc113a69008147974d8887f868f2f3f0a551ef0bacaccf0add17a3168465a94a471e075913f9c6649980a3cb Apache-2.0 pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.15.3?type=jar https://github.com/FasterXML/jacksonhttps://oss.sonatype.org/service/local/staging/deploy/maven2/https://github.com/FasterXML/jackson-annotations/issueshttps://github.com/FasterXML/jackson-annotations FasterXML com.fasterxml.jackson.core jackson-core 2.15.3 Core Jackson processing abstractions (aka Streaming API), implementation for JSON c86c75392bf138d54d2a219bb1d0cbcd 60d600567c1862840397bf9ff5a92398edc5797b 51fab7aad51ed588482edc507fd542747936c5094d1ab76ed21ddb63b96b610d 112de40a31dc7d011f256f1d2fe0d9e2afc301a1f31974318f8d070c3e362b2ba96005167384244f630b915451db6694bd3cf6a9b793872351bc18f21c9de5e4 9daaf08467525e462234c53ddbf7287bcef15d8df7fbc64bcd558a91d11e8335b3a79368d194b126d3c8fb846800025b Apache-2.0 pkg:maven/com.fasterxml.jackson.core/jackson-core@2.15.3?type=jar https://github.com/FasterXML/jackson-corehttps://oss.sonatype.org/service/local/staging/deploy/maven2/https://github.com/FasterXML/jackson-core/issueshttps://github.com/FasterXML/jackson-core com.google.guava guava 30.1.1-jre Guava is a suite of core and expanded libraries that include utility classes, Google's collections, I/O classes, and much more. 05374f163d0a4141db672fff9df95b12 87e0fd1df874ea3cbe577702fe6f17068b790fd8 44ce229ce26d880bf3afc362bbfcec34d7e6903d195bbb1db9f3b6e0d9834f06 025cdd70db7d896d57cc04a8a735ded609b393e8d56af23d454198b64a263147ab0d68fbdffabcb926b143433fccdc022f76aaed658b9448c5ce85f07c42140f 5a7d9c9792f0912bf49ecc97fabbce703408e2009f84a827ca3ff3bc5a3e171f2759821a75da155b4e45e5ad87893053 Apache-2.0 pkg:maven/com.google.guava/guava@30.1.1-jre?type=jar https://github.com/google/guava/guavahttps://travis-ci.org/google/guavahttps://oss.sonatype.org/service/local/staging/deploy/maven2/https://github.com/google/guava/issueshttps://github.com/google/guava/guava Confluent, Inc. io.confluent common-utils 7.2.2 Common utilities, including metrics and config. f392fe6a12f3dfa8f66d3c5b3d5fc1bb 8bfc0e7eed95e6d5d9a54cf0f542d7bc24ecdc30 591847307715ec705d73c81db018d0a7d754a7e694e63472ce2ba5746002ca16 882d83540ab701e593fd97a6cabc11cee02a6c017e440cded8a365ddd69eb7ce9459ad99f505e729caaffc4d7e1312d2f7e4769400f8d733d1abc07240981853 d4ca10aae92a766dda9cbea71a69bde356ffa743b33b3d2e147c300e945d7099189af2deb66c4ff08841c02376e59480 Apache-2.0 https://www.apache.org/licenses/LICENSE-2.0 pkg:maven/io.confluent/common-utils@7.2.2?type=jar https://confluent.io/common-utilshttps://github.com/confluentinc/common/common-utils The Apache Software Foundation org.apache.flink flink-avro 1.19.0 The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users. b616c3145ae2a3ee35f041f2df786a82 f3411ebba67e78bc203ee8b2dc96d06fc7a3bd80 be55b07019c720f89a227bde2c93fbc93bf999c1bd3fa8c605e09687098f8b85 76f018139229b62bf4a41a0a5bd8113ea76bb741180f214850689379e669368089a914a428cb703eec46d5f967a4d175faba35b1f1ce72dc77cf2eefaf05cb87 259ed196acc0dfd81ed6c4ae83f335a65956c8990189e5ce44b35b12f04e00850e2246332543cc6dcb55d8b0e60987b3 Apache-2.0 pkg:maven/org.apache.flink/flink-avro@1.19.0?type=jar https://flink.apache.org/flink-formats/flink-avrohttps://repository.apache.org/service/local/staging/deploy/maven2https://mail-archives.apache.org/mod_mbox/www-announce/https://github.com/apache/flink/flink-formats/flink-avro The Apache Software Foundation org.apache.avro avro 1.11.3 Avro core components 0ce474e395d0aad56c11293fd68ccb52 02b463409b373bff9ece09f54a43d42da5cea55a 4554aa8f8175f999fc56e35d8d294d634480992ce02406a52c650f521997e436 06829cf06127621042d024668c1c4c7b68b19e9a54e51495c03ead0ce600291e675da6f081307b8a949be45a6f6e6fe55ee1af1a69990ae47dc300277ab3493d 991cab21cebff4d891c2d8f9c1c09761f06bc438f71ca811b482a35536e379da4e84d84645a9527330ff725dc2ff1da8 Apache-2.0 https://www.apache.org/licenses/LICENSE-2.0 pkg:maven/org.apache.avro/avro@1.11.3?type=jar https://avro.apache.orghttps://repository.apache.org/service/local/staging/deploy/maven2https://issues.apache.org/jira/browse/AVROhttps://mail-archives.apache.org/mod_mbox/avro-dev/scm:git:https://github.com/apache/avro/avro-parent/avro QOS.ch org.slf4j slf4j-api 1.7.36 The slf4j API optional 872da51f5de7f3923da4de871d57fd85 6c62681a2f655b49963a5983b8b0950a6120ae14 d3ef575e3e4979678dc01bf1dcce51021493b4d11fb7f1be8ad982877c16a1c0 f9b033fc019a44f98b16048da7e2b59edd4a6a527ba60e358f65ab88e0afae03a9340f1b3e8a543d49fa542290f499c5594259affa1ff3e6e7bf3b428d4c610b 2b14ad035877087157e379d3277dcdcd79e58d6bdb147c47d29e377d75ce53ad42cafbf22f5fb7827c7e946ff4876b9a MIT https://opensource.org/licenses/MIT pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar http://www.slf4j.orghttps://oss.sonatype.org/service/local/staging/deploy/maven2/https://github.com/qos-ch/slf4j/slf4j-api The Apache Software Foundation org.apache.flink flink-shaded-force-shading 17.0 The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users. optional 6890ff555c82f3bb156cf9c73bf09cf9 345c153973a17fb8a98d368352e14893edcbd610 dcc7dff160a40b74fa5db2805b2004153ffd0517968f3c7843a8ee43be82e710 9de23513832248618b78e279c0e3900f5cafb7193254ef6818b4f0b6f3b70045dd9cc4fdd13caeeca8b70a44f38201ce055f07248cdf08930a20e1b7a73997ff 063611872b4b1a1718e0472e32198bded0d74fa656e5c47a7b20038cd5ff70106e3109b60fe882880feea486e1ef83bf Apache-2.0 pkg:maven/org.apache.flink/flink-shaded-force-shading@17.0?type=jar http://flink.apache.org/flink-shaded-force-shadinghttps://repository.apache.org/service/local/staging/deploy/maven2https://mail-archives.apache.org/mod_mbox/www-announce/https://github.com/apache/flink-shaded/flink-shaded-force-shading com.google.code.findbugs jsr305 1.3.9 JSR305 Annotations for Findbugs optional 1d5a772e400b04bb67a7ef4a0e0996d8 40719ea6961c0cb6afaeb6a921eaa1f6afd4cfdf 905721a0eea90a81534abb7ee6ef4ea2e5e645fa1def0a5cd88402df1b46c9ed 06da282cfd8e30d9f8cf17702b8709172b00e22b75a627a1d85f8989615b8a1a401bc25d9aee7b14aed1d9b5df73bf2ea8d66f9c8468d9577c29f0ccfa2cc70a 56e6b41ef62eb5edfed0203802cefae9c2df86388148e420bb0c687abb2b80e14d5c2a82d5b35dce4badaf148f94eada Apache-2.0 pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar http://findbugs.sourceforge.net/http://findbugs.googlecode.com/svn/trunk/