<?xml version="1.0" encoding="UTF-8"?>
<bom serialNumber="urn:uuid:049a8b90-a1ad-40d9-a2b2-19943404fb2b" version="1" xmlns="http://cyclonedx.org/schema/bom/1.4">
  <metadata>
    <timestamp>2025-01-28T15:58:20Z</timestamp>
    <tools>
      <tool>
        <vendor>OWASP Foundation</vendor>
        <name>CycloneDX Maven plugin</name>
        <version>2.7.7</version>
        <hashes>
          <hash alg="MD5">436dfb24c63a322708e4a5143d8543af</hash>
          <hash alg="SHA-1">3ef2e8728dc9eff2f129c34057e46e9d2b10629a</hash>
          <hash alg="SHA-256">c185b79bf0f9264f43bc8c222c44db67bea275bb727e3327cf9aea6bf45292c9</hash>
          <hash alg="SHA-512">41488733e31e6c5315327dcc86187c2b9a6b96cd08f7e2157ce130688afde29c313fc6a73edb8a76333a930c78874aa2eac874448920030c0f7af0ac05e65ced</hash>
          <hash alg="SHA-384">f9462f86240fd9fc0942f34981e6d2371f252aa1a4e5e8c3c14e7f0f1a4e4de69ef972e51cf09a749afb6d97c13e67ed</hash>
        </hashes>
      </tool>
    </tools>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-sql-orc@1.19.2?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-sql-orc</name>
      <version>1.19.2</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-sql-orc@1.19.2?type=jar</purl>
      <externalReferences><reference type="website"><url>https://flink.apache.org/flink-formats/flink-sql-orc</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink/flink-formats/flink-sql-orc</url></reference></externalReferences>
    </component>
    <properties>
      <property name="maven.goal">makeBom</property>
      <property name="maven.scopes">compile,provided,runtime,system</property>
    </properties>
  </metadata>
  <components>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-orc@1.19.2?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-orc</name>
      <version>1.19.2</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">4297acc6c84bc01417d2da1c30d10afc</hash>
        <hash alg="SHA-1">24ab4ca92e51605b3deb8f5ee15f014e3d0fe519</hash>
        <hash alg="SHA-256">dbc4e7e1375f3b1994feedf4b706ab7fcfbdf335d50beac764896b4379a3e52a</hash>
        <hash alg="SHA-512">eaab379ed59e0a99a5dc13751a097065c7a6889a145ab4a0516233228d0859bfdce3c6a288467c56507c8db389bd6f1badf7a0d4ae22a5a2b0c9f8b0cedc5666</hash>
        <hash alg="SHA-384">df88d3903caad692e1d3c25a8bbb33b8523f9e876bda6179bf24067a9a3bde7c44f8f4dc6be83f25853180b29a802dfd</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-orc@1.19.2?type=jar</purl>
      <externalReferences><reference type="website"><url>https://flink.apache.org/flink-formats/flink-orc</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink/flink-formats/flink-orc</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.orc/orc-core@1.5.6?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.orc</group>
      <name>orc-core</name>
      <version>1.5.6</version>
      <description>The core reader and writer for ORC files. Uses the vectorized column batch
    for the in memory representation.</description>
      <hashes>
        <hash alg="MD5">252e39ceb4b752a88e34eec3b96f6c68</hash>
        <hash alg="SHA-1">f9ccd73bb7fc3c69c8f0af59942d9b7df09a569f</hash>
        <hash alg="SHA-256">abc6efb4e33583ffc11c7e9938c2f4b48190e3b0bea9a2c82465aa25eff903ed</hash>
        <hash alg="SHA-512">b610205e34e8876d8bbe6c37e1b9d5a8446b90cfe6d85ea6ea09cc4eede18676a2b3c7f14921765f975f85470a8d56d1e58e268eaf04ea0f940afebd3d18bdcd</hash>
        <hash alg="SHA-384">7e5ee63aad151c157a7ad66bbfc2e1166092b88f2dad94cafecb54d3ebef6167891bba348376199f43385fd1b66bcb65</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.orc/orc-core@1.5.6?type=jar</purl>
      <externalReferences><reference type="website"><url>http://orc.apache.org/orc-core</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/orc-user/</url></reference><reference type="vcs"><url>https://svn.apache.org/viewvc/maven/pom/tags/apache-18/orc/orc-core</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.orc/orc-shims@1.5.6?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.orc</group>
      <name>orc-shims</name>
      <version>1.5.6</version>
      <description>A shim layer for supporting various versions of Hadoop dynamically.

    This module uses a higher version of Hadoop so that we can create shims
    that let us use new features of Hadoop without having a hard dependency
    on the latest version.</description>
      <hashes>
        <hash alg="MD5">2b8507183e5eac1cb7bdb1ebeae20a28</hash>
        <hash alg="SHA-1">03e86861e74e80d1f5dcb55182e2466da86369d4</hash>
        <hash alg="SHA-256">c85e474f3a3a388c467e5056ed23de5c8a23e6e353bbc132ac9e3c5b84e82370</hash>
        <hash alg="SHA-512">c4c57aedd6a51b346fca6730e1f36c9ae61f847c060e70862ba1267136a3d47676998c7e62bf6f891a13c5ac9b695f5095cd27bc3608fe17b9f5cb14670f766f</hash>
        <hash alg="SHA-384">294d23be9b554505ccbb637459614b513b8a2b57caded1cea7e4833cf165e95e17b968b9e52b73d75a63a421f718089c</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.orc/orc-shims@1.5.6?type=jar</purl>
      <externalReferences><reference type="website"><url>http://orc.apache.org/orc-shims</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/orc-user/</url></reference><reference type="vcs"><url>https://svn.apache.org/viewvc/maven/pom/tags/apache-18/orc/orc-shims</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.protobuf/protobuf-java@2.5.0?type=jar">
      <publisher>Google</publisher>
      <group>com.google.protobuf</group>
      <name>protobuf-java</name>
      <version>2.5.0</version>
      <description>Protocol Buffers are a way of encoding structured data in an efficient yet
    extensible format.</description>
      <hashes>
        <hash alg="MD5">a44473b98947e2a54c54e0db1387d137</hash>
        <hash alg="SHA-1">a10732c76bfacdbd633a7eb0f7968b1059a65dfa</hash>
        <hash alg="SHA-256">e0c1c64575c005601725e7c6a02cebf9e1285e888f756b2a1d73ffa8d725cc74</hash>
        <hash alg="SHA-512">10ea0baf440c78598eee2bff3742bc2f41b7e67847f8bb43a1f154d7649853ebd9eb86288aab65f4d1a196f4586bab16b656ec7940ec92a57b1c117b8f59abac</hash>
        <hash alg="SHA-384">33ad6e25b942b4076c8b9dfcc0aae8ca802b9028aa9939f86e4752b4847b35fb486f6d3efa81d38ad1edcbec6e614494</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.protobuf/protobuf-java@2.5.0?type=jar</purl>
      <externalReferences><reference type="website"><url>http://code.google.com/p/protobuf</url></reference><reference type="distribution"><url>dav:https://google-maven-repository.googlecode.com/svn/repository/</url></reference><reference type="vcs"><url>http://code.google.com/p/protobuf/source/browse</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-lang/commons-lang@2.6?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>commons-lang</group>
      <name>commons-lang</name>
      <version>2.6</version>
      <description>Commons Lang, a package of Java utility classes for the
        classes that are in java.lang's hierarchy, or are considered to be so
        standard as to justify existence in java.lang.</description>
      <hashes>
        <hash alg="MD5">4d5c1693079575b362edf41500630bbd</hash>
        <hash alg="SHA-1">0ce1edb914c94ebc388f086c6827e8bdeec71ac2</hash>
        <hash alg="SHA-256">50f11b09f877c294d56f24463f47d28f929cf5044f648661c0f0cfbae9a2f49c</hash>
        <hash alg="SHA-512">4a5a3dbe4941c645e2cca068cca5c1882cfe988b02e7cd981d1e51784900767d1deab0e0e0566f559c9fcabb4a180e436d5bb948902d4f4106f37360466afb42</hash>
        <hash alg="SHA-384">9725bc421adc1dbcd6f937eca0f3075d186a2b353ece4cef66b0fe81bb8d3f7d7641c43e86d657ef526c719f0c2a8c90</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/commons-lang/commons-lang@2.6?type=jar</purl>
      <externalReferences><reference type="website"><url>http://commons.apache.org/lang/</url></reference><reference type="build-system"><url>http://vmbuild.apache.org/continuum/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/LANG</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>http://svn.apache.org/viewvc/commons/proper/lang/branches/LANG_2_X</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.airlift/aircompressor@0.10?type=jar">
      <group>io.airlift</group>
      <name>aircompressor</name>
      <version>0.10</version>
      <description>Compression algorithms</description>
      <hashes>
        <hash alg="MD5">f7530afc9741d3594cb9f86a2ab875c2</hash>
        <hash alg="SHA-1">bf8305930ec675964bd68599c702ffb32df4d1e6</hash>
        <hash alg="SHA-256">a5471abddc99a95939abfc0405cddb2213c4fba561de94f888d6e625566e826c</hash>
        <hash alg="SHA-512">ee562bfbccad7ff78c49dbc3a3d32675214a9d00133f57b249f2e6417a4bb77015e98a91c5fcf965a6427c1959836405bbacf8a29ffd9f91ce825feb74bc43aa</hash>
        <hash alg="SHA-384">89bd15d77c0e4aedcdebb1ac87fd61c908becd12ef8d376be5e876a22984ac332ff9e47c9b327fa542bd2617ca613ff8</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/io.airlift/aircompressor@0.10?type=jar</purl>
      <externalReferences><reference type="website"><url>http://github.com/airlift/aircompressor</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>http://github.com/airlift/aircompressor/tree/master</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.hive/hive-storage-api@2.6.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.hive</group>
      <name>hive-storage-api</name>
      <version>2.6.0</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <hashes>
        <hash alg="MD5">fd5484f4b2a5607c145224aa8fd0283f</hash>
        <hash alg="SHA-1">0f278d89710827312db75d7c87315a917cbd0349</hash>
        <hash alg="SHA-256">7221fc528bfee6385396b4ca05b1faedb658ef54253cd11f34a500883868c82e</hash>
        <hash alg="SHA-512">b3e7c3417d21335cd3a292b0c677d73b7d6462fcf3e11209fbda3b3bb2655b6608c792d8d8a6c0940413ccacd9d8486ff6467f35ab105b75c7271e2252a5a39a</hash>
        <hash alg="SHA-384">7aaeddedf7cb29159976b42950bf5b1addc79bd11990432ee82897d59439961c7dbf9c668dad324d463ed6b9032c3d58</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.hive/hive-storage-api@2.6.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://www.apache.org/hive-storage-api/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://svn.apache.org/viewvc/maven/pom/tags/apache-18/hive-storage-api</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar">
      <publisher>QOS.ch</publisher>
      <group>org.slf4j</group>
      <name>slf4j-api</name>
      <version>1.7.36</version>
      <description>The slf4j API</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">872da51f5de7f3923da4de871d57fd85</hash>
        <hash alg="SHA-1">6c62681a2f655b49963a5983b8b0950a6120ae14</hash>
        <hash alg="SHA-256">d3ef575e3e4979678dc01bf1dcce51021493b4d11fb7f1be8ad982877c16a1c0</hash>
        <hash alg="SHA-512">f9b033fc019a44f98b16048da7e2b59edd4a6a527ba60e358f65ab88e0afae03a9340f1b3e8a543d49fa542290f499c5594259affa1ff3e6e7bf3b428d4c610b</hash>
        <hash alg="SHA-384">2b14ad035877087157e379d3277dcdcd79e58d6bdb147c47d29e377d75ce53ad42cafbf22f5fb7827c7e946ff4876b9a</hash>
      </hashes>
      <licenses>
        <license>
          <id>MIT</id>
          <url>https://opensource.org/licenses/MIT</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.slf4j.org</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/qos-ch/slf4j/slf4j-api</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-shaded-force-shading@17.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-shaded-force-shading</name>
      <version>17.0</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">6890ff555c82f3bb156cf9c73bf09cf9</hash>
        <hash alg="SHA-1">345c153973a17fb8a98d368352e14893edcbd610</hash>
        <hash alg="SHA-256">dcc7dff160a40b74fa5db2805b2004153ffd0517968f3c7843a8ee43be82e710</hash>
        <hash alg="SHA-512">9de23513832248618b78e279c0e3900f5cafb7193254ef6818b4f0b6f3b70045dd9cc4fdd13caeeca8b70a44f38201ce055f07248cdf08930a20e1b7a73997ff</hash>
        <hash alg="SHA-384">063611872b4b1a1718e0472e32198bded0d74fa656e5c47a7b20038cd5ff70106e3109b60fe882880feea486e1ef83bf</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-shaded-force-shading@17.0?type=jar</purl>
      <externalReferences><reference type="website"><url>http://flink.apache.org/flink-shaded-force-shading</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink-shaded/flink-shaded-force-shading</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar">
      <group>com.google.code.findbugs</group>
      <name>jsr305</name>
      <version>1.3.9</version>
      <description>JSR305 Annotations for Findbugs</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">1d5a772e400b04bb67a7ef4a0e0996d8</hash>
        <hash alg="SHA-1">40719ea6961c0cb6afaeb6a921eaa1f6afd4cfdf</hash>
        <hash alg="SHA-256">905721a0eea90a81534abb7ee6ef4ea2e5e645fa1def0a5cd88402df1b46c9ed</hash>
        <hash alg="SHA-512">06da282cfd8e30d9f8cf17702b8709172b00e22b75a627a1d85f8989615b8a1a401bc25d9aee7b14aed1d9b5df73bf2ea8d66f9c8468d9577c29f0ccfa2cc70a</hash>
        <hash alg="SHA-384">56e6b41ef62eb5edfed0203802cefae9c2df86388148e420bb0c687abb2b80e14d5c2a82d5b35dce4badaf148f94eada</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar</purl>
      <externalReferences><reference type="website"><url>http://findbugs.sourceforge.net/</url></reference><reference type="vcs"><url>http://findbugs.googlecode.com/svn/trunk/</url></reference></externalReferences>
    </component>
  </components>
  <dependencies>
    <dependency ref="pkg:maven/org.apache.flink/flink-sql-orc@1.19.2?type=jar">
      <dependency ref="pkg:maven/org.apache.flink/flink-orc@1.19.2?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-force-shading@17.0?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.flink/flink-orc@1.19.2?type=jar">
      <dependency ref="pkg:maven/org.apache.orc/orc-core@1.5.6?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.orc/orc-core@1.5.6?type=jar">
      <dependency ref="pkg:maven/org.apache.orc/orc-shims@1.5.6?type=jar"/>
      <dependency ref="pkg:maven/com.google.protobuf/protobuf-java@2.5.0?type=jar"/>
      <dependency ref="pkg:maven/commons-lang/commons-lang@2.6?type=jar"/>
      <dependency ref="pkg:maven/io.airlift/aircompressor@0.10?type=jar"/>
      <dependency ref="pkg:maven/org.apache.hive/hive-storage-api@2.6.0?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.orc/orc-shims@1.5.6?type=jar">
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    <dependency ref="pkg:maven/com.google.protobuf/protobuf-java@2.5.0?type=jar"/>
    <dependency ref="pkg:maven/commons-lang/commons-lang@2.6?type=jar"/>
    <dependency ref="pkg:maven/io.airlift/aircompressor@0.10?type=jar"/>
    <dependency ref="pkg:maven/org.apache.hive/hive-storage-api@2.6.0?type=jar">
      <dependency ref="pkg:maven/commons-lang/commons-lang@2.6?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"/>
    <dependency ref="pkg:maven/org.apache.flink/flink-shaded-force-shading@17.0?type=jar"/>
  </dependencies>
</bom>
