<?xml version="1.0" encoding="UTF-8"?>
<bom serialNumber="urn:uuid:ebdf3fe4-ddad-44ce-aafb-2124a5799304" version="1" xmlns="http://cyclonedx.org/schema/bom/1.4">
  <metadata>
    <timestamp>2024-03-06T14:59:03Z</timestamp>
    <tools>
      <tool>
        <vendor>OWASP Foundation</vendor>
        <name>CycloneDX Maven plugin</name>
        <version>2.7.7</version>
        <hashes>
          <hash alg="MD5">436dfb24c63a322708e4a5143d8543af</hash>
          <hash alg="SHA-1">3ef2e8728dc9eff2f129c34057e46e9d2b10629a</hash>
          <hash alg="SHA-256">c185b79bf0f9264f43bc8c222c44db67bea275bb727e3327cf9aea6bf45292c9</hash>
          <hash alg="SHA-512">41488733e31e6c5315327dcc86187c2b9a6b96cd08f7e2157ce130688afde29c313fc6a73edb8a76333a930c78874aa2eac874448920030c0f7af0ac05e65ced</hash>
          <hash alg="SHA-384">f9462f86240fd9fc0942f34981e6d2371f252aa1a4e5e8c3c14e7f0f1a4e4de69ef972e51cf09a749afb6d97c13e67ed</hash>
        </hashes>
      </tool>
    </tools>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-sql-parquet@1.19.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-sql-parquet</name>
      <version>1.19.0</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-sql-parquet@1.19.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://flink.apache.org/flink-formats/flink-sql-parquet</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink/flink-formats/flink-sql-parquet</url></reference></externalReferences>
    </component>
    <properties>
      <property name="maven.goal">makeBom</property>
      <property name="maven.scopes">compile,provided,runtime,system</property>
    </properties>
  </metadata>
  <components>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-parquet@1.19.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-parquet</name>
      <version>1.19.0</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">510b396601fe2bda970518d3b863d307</hash>
        <hash alg="SHA-1">21e6fd632a2d8eba06423877ad5509495c94de7f</hash>
        <hash alg="SHA-256">d798e1faf11fd714972fe180d9a03cfb6bb02bae7d47473207a7c69b4db2b37c</hash>
        <hash alg="SHA-512">7cf79b700973e7aa0048c3d6507be049aa57073d9bf4a2b7dc98cf91bf73583cf295bc7e1bac9344f6b76c3890e30898e9e84c1929819ede6f6407814b04cba6</hash>
        <hash alg="SHA-384">f655ec86ebbd7c6ac5721cc3cbfd1d7f81c860b49517f52246d2bd2cff725abde88b1d132b7ffc406b268624141f20a3</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-parquet@1.19.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://flink.apache.org/flink-formats/flink-parquet</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink/flink-formats/flink-parquet</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.parquet/parquet-hadoop@1.13.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.parquet</group>
      <name>parquet-hadoop</name>
      <version>1.13.1</version>
      <description>Parquet is a columnar storage format that supports nested data. This provides the java implementation.</description>
      <hashes>
        <hash alg="MD5">77cea2800fb038443a062ed25c0742cd</hash>
        <hash alg="SHA-1">6b9a84875b7576d64cf4890c69c2ed1c7557b950</hash>
        <hash alg="SHA-256">5b86f191d0bbfe866d194bd1a336fa79d049d342fb7a05aefcf31ea266792a40</hash>
        <hash alg="SHA-512">cacff5ff1e0b99c140a21181d26b3233c6118fc10a660f559919cb405631681d37073ad32dcd3b7399667a7d3364ad9fa7ce0f760feda5a6ffcc817c933f8ec6</hash>
        <hash alg="SHA-384">ebbd7008507e7f56a552a71df31b60c84c9be6bb7d99e86dd4070ea94708fbce10ee14348d79c0c518223c832faab450</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.parquet/parquet-hadoop@1.13.1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://parquet.apache.org</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/PARQUET</url></reference><reference type="mailing-list"><url>dev-subscribe@parquet.apache.org</url></reference><reference type="vcs"><url>scm:git:git@github.com:apache/parquet-mr.git/parquet-hadoop</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.parquet/parquet-format-structures@1.13.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.parquet</group>
      <name>parquet-format-structures</name>
      <version>1.13.1</version>
      <description>Parquet-mr related java classes to use the parquet-format thrift structures.</description>
      <hashes>
        <hash alg="MD5">b41fcfc59d68450b5153472d5a92345c</hash>
        <hash alg="SHA-1">550ac211af104eabeedfaabe68f6769010a80366</hash>
        <hash alg="SHA-256">57b3e31e9502a1121dc481a3017fc2f20d1d6116da82dd58155a69b10b28e1e6</hash>
        <hash alg="SHA-512">ce1fd360edf3cb86d0d0c3d8b00d7c840b5a997cd5d44213dd7c6cbaa15c9eea1f5ef61474a1879d1b245c8feafea0b1f22c554f63e742feb1c5e9e9d1c237d3</hash>
        <hash alg="SHA-384">1c73a54de30153c0813b402e5f4bed5caab94c2c1bc2f473e3b78f441636607fb11ed115ae7a8adf6ada6f9ce4bfe37e</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.parquet/parquet-format-structures@1.13.1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://parquet.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/PARQUET</url></reference><reference type="mailing-list"><url>dev-subscribe@parquet.apache.org</url></reference><reference type="vcs"><url>scm:git:git@github.com:apache/parquet-mr.git/parquet-format-structures</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.parquet/parquet-jackson@1.13.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.parquet</group>
      <name>parquet-jackson</name>
      <version>1.13.1</version>
      <description>Parquet is a columnar storage format that supports nested data. This provides the java implementation.</description>
      <hashes>
        <hash alg="MD5">83b70b16ef2ebd3e35d32af63a9d99c9</hash>
        <hash alg="SHA-1">c096efa2bb68d24d29139e93f9b5a5357f10f253</hash>
        <hash alg="SHA-256">d1e66f2a392d1777425688d3439b7f57d08c4404a81ae95bb247a16cfc773da1</hash>
        <hash alg="SHA-512">8c2b515d781e3cd2fc1d33671e2cae45d69e7d76e7e82b89a2c90022eb8852a135d920b198101328728f860008c8040d2628fda007d0ccfab0b761bfe8092afc</hash>
        <hash alg="SHA-384">2271d1678c68e85d847aee63392d15f165658f031c8c276cc44cae5bb19c8b0b2b2cfa36d2405575d4c0d5e4968009b6</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.parquet/parquet-jackson@1.13.1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://parquet.apache.org</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/PARQUET</url></reference><reference type="mailing-list"><url>dev-subscribe@parquet.apache.org</url></reference><reference type="vcs"><url>scm:git:git@github.com:apache/parquet-mr.git/parquet-jackson</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.airlift/aircompressor@0.21?type=jar">
      <group>io.airlift</group>
      <name>aircompressor</name>
      <version>0.21</version>
      <description>Compression algorithms</description>
      <hashes>
        <hash alg="MD5">43f5c177aaca2ba4e4ad78e4d6f3e992</hash>
        <hash alg="SHA-1">0d1efd839d539481952a9757834054239774f057</hash>
        <hash alg="SHA-256">e968bd7f31641ae94ea4ae12971337bdfab794349cc0baa9ccd54553cce712ac</hash>
        <hash alg="SHA-512">5a2eb2c1fabc5159e00371ebb4ba7532705de7587980af3c7c92c942794f2e21e1af0a82427372eab632a0b1bd52895afa799b62b7f42512c52cf55fdccb4386</hash>
        <hash alg="SHA-384">ef54231df593357c29984e81d6605f1177cb0c77c496c80097f401ab75b74943429a351d7b09202ed4e1cad127106c97</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/io.airlift/aircompressor@0.21?type=jar</purl>
      <externalReferences><reference type="website"><url>http://github.com/airlift/aircompressor</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>http://github.com/airlift/aircompressor/tree/master</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-pool/commons-pool@1.6?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>commons-pool</group>
      <name>commons-pool</name>
      <version>1.6</version>
      <description>Commons Object Pooling Library</description>
      <hashes>
        <hash alg="MD5">5ca02245c829422176d23fa530e919cc</hash>
        <hash alg="SHA-1">4572d589699f09d866a226a14b7f4323c6d8f040</hash>
        <hash alg="SHA-256">46c42b4a38dc6b2db53a9ee5c92c63db103665d56694e2cfce2c95d51a6860cc</hash>
        <hash alg="SHA-512">3bf5bcdbd7342e794f95747421c510778d8656d7ca901eb9b0fd15b9edb5b470e799c76abce9fe5958355d0d6067565ab71897d02462232176a0145a7d546e69</hash>
        <hash alg="SHA-384">9dd327008604be77bad6fcf249f2806c9b6b6b9858ff35ceff74d6954ea5f66c162c92ba7a24f5da3ad9694b445a644a</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/commons-pool/commons-pool@1.6?type=jar</purl>
      <externalReferences><reference type="website"><url>http://commons.apache.org/pool/</url></reference><reference type="build-system"><url>http://vmbuild.apache.org/continuum/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/POOL</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>http://svn.apache.org/viewvc/commons/proper/pool/trunk</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.github.luben/zstd-jni@1.5.0-1?type=jar">
      <publisher>com.github.luben</publisher>
      <group>com.github.luben</group>
      <name>zstd-jni</name>
      <version>1.5.0-1</version>
      <description>JNI bindings for Zstd native library that provides fast and high compression lossless algorithm for Java and all JVM languages.</description>
      <hashes>
        <hash alg="MD5">29aafa647bb981b8f8f5713b856c22d5</hash>
        <hash alg="SHA-1">e7fe84d449409634be17ab7dfa0ea4e29c2a7076</hash>
        <hash alg="SHA-256">5264f7e82e37d46deb1af8b4d123043e1f1c5e923f1fabff7217fa702118acc7</hash>
        <hash alg="SHA-512">aa6c04ad9d6c0c64385a9673b620d0fcaf8ae41b296e824e193959289d0358bd758a40536bff89826960180cd4aa0c7c48a2a73b1ebc361e129b03e7c315d0eb</hash>
        <hash alg="SHA-384">81d544134359a650fec01852a1348584394d9096c556616571c812735a73b67838626bf68e928de42dabbd92f30e6a62</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-2-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.github.luben/zstd-jni@1.5.0-1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/luben/zstd-jni</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.yetus/audience-annotations@0.13.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.yetus</group>
      <name>audience-annotations</name>
      <version>0.13.0</version>
      <description>Annotations for defining API boundaries and tools for managing javadocs</description>
      <hashes>
        <hash alg="MD5">e7b6aa8d8967f6f34a711d763d1b4816</hash>
        <hash alg="SHA-1">8ad1147dcd02196e3924013679c6bf4c25d8c351</hash>
        <hash alg="SHA-256">3bfbb397b06f63a2a0a361f62ed32cf199bd92ddd48ea99281f4987edec9777b</hash>
        <hash alg="SHA-512">9fdd60a366629a7ef7f934eea7d27d38e1614472e9090fd23c66032589fbfb9d90516c9cb13a44e4a3598e50d62daf851bb87e4dc8375b1da2cfe6392c448bd8</hash>
        <hash alg="SHA-384">bdd7d0a05faa80c56ab33e8f0c9b70a366f3bcc9cb36fcf88d4f6761feee36b46787baf42b1f62606935eb595279de7e</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.yetus/audience-annotations@0.13.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://yetus.apache.org/audience-annotations</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/YETUS</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/yetus-dev/</url></reference><reference type="vcs"><url>https://github.com/apache/yetus.git/audience-annotations</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.protobuf/protobuf-java@3.21.7?type=jar">
      <group>com.google.protobuf</group>
      <name>protobuf-java</name>
      <version>3.21.7</version>
      <description>Core Protocol Buffers library. Protocol Buffers are a way of encoding structured data in an
    efficient yet extensible format.</description>
      <hashes>
        <hash alg="MD5">87417783d3677d733eae82bda7664943</hash>
        <hash alg="SHA-1">96cfc7147192f1de72c3d7d06972155ffb7d180c</hash>
        <hash alg="SHA-256">a204ec68748a7b26351ae37a311e8de468f248d1916d5f8dbe812c1289d0a0ff</hash>
        <hash alg="SHA-512">d2450e62ea4003295a50bd863c9cc25016f58a08e94171d581ae8fca626c6dabfc458b8f55310874f9e17189704e9b4d0cc259641c36ef5e83466bdaf2770bde</hash>
        <hash alg="SHA-384">23adb6f7e52739ca6e3c3f1f8a364a7ab3da5dabfe99fcc784c15fbff294fcdc91f40a2ee4362f66995eb9b1922b4746</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
          <url>https://opensource.org/licenses/BSD-3-Clause</url>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.protobuf/protobuf-java@3.21.7?type=jar</purl>
      <externalReferences><reference type="website"><url>https://developers.google.com/protocol-buffers/protobuf-java/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/protocolbuffers/protobuf/protobuf-java</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.parquet/parquet-avro@1.13.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.parquet</group>
      <name>parquet-avro</name>
      <version>1.13.1</version>
      <description>Parquet is a columnar storage format that supports nested data. This provides the java implementation.</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">259b10463d34fe70766b02a0c004d15a</hash>
        <hash alg="SHA-1">ac6e3cb8c258d630afe6d340a71f017a8bf05fb9</hash>
        <hash alg="SHA-256">5a08438385193de70a961e6a2c82084401106def11f74c3dcec4d5ee166e7561</hash>
        <hash alg="SHA-512">da5f14ebd988abeff6175c8d1c45c09541e7891690d9b3fd8d8eb79c431712d9638992e31bfa4a1d88677eb275d2a6f4c186ae84ed17ae63f994e05a9fe3010c</hash>
        <hash alg="SHA-384">1542c47e536996a451b134ef801e98142e3ee8765969dde2a702007ff287e83df9b938de6df39d9975a2a1e7ea62634d</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.parquet/parquet-avro@1.13.1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://parquet.apache.org</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/PARQUET</url></reference><reference type="mailing-list"><url>dev-subscribe@parquet.apache.org</url></reference><reference type="vcs"><url>scm:git:git@github.com:apache/parquet-mr.git/parquet-avro</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.parquet/parquet-column@1.13.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.parquet</group>
      <name>parquet-column</name>
      <version>1.13.1</version>
      <description>Parquet is a columnar storage format that supports nested data. This provides the java implementation.</description>
      <hashes>
        <hash alg="MD5">d75526e32d2630e5bad8d9fce847d838</hash>
        <hash alg="SHA-1">9ed76ae5d9fdfc6c2eb51aef87ad34c5cdc56384</hash>
        <hash alg="SHA-256">3ff4222b5da77cc85e3fee623ff9779f991a1a0987125e68bc642ff913ec5612</hash>
        <hash alg="SHA-512">4de18d73bdbf77f9327b7f61fd9e333d7d2700a552432401a1253ccb34c77f82d82ff514c9f1fefd8c21b407fdf21e68e8b2e9142c5fdffe0ef035485c716976</hash>
        <hash alg="SHA-384">76167345e924a70f01910bd3647388bd2e8c2d04e4ece65c1abf5968476a6870769c238e10e2cbfddb3962e30d4eff0d</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.parquet/parquet-column@1.13.1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://parquet.apache.org</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/PARQUET</url></reference><reference type="mailing-list"><url>dev-subscribe@parquet.apache.org</url></reference><reference type="vcs"><url>scm:git:git@github.com:apache/parquet-mr.git/parquet-column</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.parquet/parquet-encoding@1.13.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.parquet</group>
      <name>parquet-encoding</name>
      <version>1.13.1</version>
      <description>Parquet is a columnar storage format that supports nested data. This provides the java implementation.</description>
      <hashes>
        <hash alg="MD5">2ca33d628896a57c83fd338ba4b3712c</hash>
        <hash alg="SHA-1">2554cef74a90736ad42ed994116123038c0ffee9</hash>
        <hash alg="SHA-256">0c921d275bbcc31552ee94d383ea38b2615110790d59f11ad07ffe5f3f0c23b3</hash>
        <hash alg="SHA-512">7d08f31b531bdb58d1593e15807f82387a99540c09e90d1cb4fee5b5d3d7b1ad04a599533717c27b83dccf0635983448ea2ae88385424976a46c2dca2dbe5ee9</hash>
        <hash alg="SHA-384">7ac660630e30e2cda430223450010d2be60dfdfb094712c241db1a73780c62ee66a6e53890ec3065ab762e5f8c13619b</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.parquet/parquet-encoding@1.13.1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://parquet.apache.org</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/PARQUET</url></reference><reference type="mailing-list"><url>dev-subscribe@parquet.apache.org</url></reference><reference type="vcs"><url>scm:git:git@github.com:apache/parquet-mr.git/parquet-encoding</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.parquet/parquet-common@1.13.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.parquet</group>
      <name>parquet-common</name>
      <version>1.13.1</version>
      <description>Parquet is a columnar storage format that supports nested data. This provides the java implementation.</description>
      <hashes>
        <hash alg="MD5">6a52cc2d093a61027d8df49b6ae39a6a</hash>
        <hash alg="SHA-1">77e65a1a4522f476994aa90c06fcca842c4ab73f</hash>
        <hash alg="SHA-256">4a2d7a8eb395bbc8d202fa74b272e45374a1034b351028824ad46925366297ea</hash>
        <hash alg="SHA-512">236b9a8876c51f39aec3c7299642c4813b24f9a709b2b6306a058893ec1e97026dbd4009d9ea64a1984eaff0a6977648ff4e72363d1e9a25b635796aa5a472b4</hash>
        <hash alg="SHA-384">5afd34d71bbe49d7c875e02e2dfe234b4ca18e035f5e4348cc39d103a43fc303c72f3c7ac7b22ed8340c30f19cab33a9</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.parquet/parquet-common@1.13.1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://parquet.apache.org</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/PARQUET</url></reference><reference type="mailing-list"><url>dev-subscribe@parquet.apache.org</url></reference><reference type="vcs"><url>scm:git:git@github.com:apache/parquet-mr.git/parquet-common</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.avro/avro@1.11.3?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.avro</group>
      <name>avro</name>
      <version>1.11.3</version>
      <description>Avro core components</description>
      <hashes>
        <hash alg="MD5">0ce474e395d0aad56c11293fd68ccb52</hash>
        <hash alg="SHA-1">02b463409b373bff9ece09f54a43d42da5cea55a</hash>
        <hash alg="SHA-256">4554aa8f8175f999fc56e35d8d294d634480992ce02406a52c650f521997e436</hash>
        <hash alg="SHA-512">06829cf06127621042d024668c1c4c7b68b19e9a54e51495c03ead0ce600291e675da6f081307b8a949be45a6f6e6fe55ee1af1a69990ae47dc300277ab3493d</hash>
        <hash alg="SHA-384">991cab21cebff4d891c2d8f9c1c09761f06bc438f71ca811b482a35536e379da4e84d84645a9527330ff725dc2ff1da8</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.avro/avro@1.11.3?type=jar</purl>
      <externalReferences><reference type="website"><url>https://avro.apache.org</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/AVRO</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/avro-dev/</url></reference><reference type="vcs"><url>scm:git:https://github.com/apache/avro/avro-parent/avro</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.fasterxml.jackson.core/jackson-core@2.15.3?type=jar">
      <publisher>FasterXML</publisher>
      <group>com.fasterxml.jackson.core</group>
      <name>jackson-core</name>
      <version>2.15.3</version>
      <description>Core Jackson processing abstractions (aka Streaming API), implementation for JSON</description>
      <hashes>
        <hash alg="MD5">c86c75392bf138d54d2a219bb1d0cbcd</hash>
        <hash alg="SHA-1">60d600567c1862840397bf9ff5a92398edc5797b</hash>
        <hash alg="SHA-256">51fab7aad51ed588482edc507fd542747936c5094d1ab76ed21ddb63b96b610d</hash>
        <hash alg="SHA-512">112de40a31dc7d011f256f1d2fe0d9e2afc301a1f31974318f8d070c3e362b2ba96005167384244f630b915451db6694bd3cf6a9b793872351bc18f21c9de5e4</hash>
        <hash alg="SHA-384">9daaf08467525e462234c53ddbf7287bcef15d8df7fbc64bcd558a91d11e8335b3a79368d194b126d3c8fb846800025b</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.fasterxml.jackson.core/jackson-core@2.15.3?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/FasterXML/jackson-core</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/FasterXML/jackson-core/issues</url></reference><reference type="vcs"><url>https://github.com/FasterXML/jackson-core</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.15.3?type=jar">
      <publisher>FasterXML</publisher>
      <group>com.fasterxml.jackson.core</group>
      <name>jackson-databind</name>
      <version>2.15.3</version>
      <description>General data-binding functionality for Jackson: works on core streaming API</description>
      <hashes>
        <hash alg="MD5">5f453c55f127690fa8491ce347aa055c</hash>
        <hash alg="SHA-1">a734bc2c47a9453c4efa772461a3aeb273c010d9</hash>
        <hash alg="SHA-256">c3c53333a2172a80678bda1803e39cff45bec6ae3e9c7d4f44a81ec4e2ab18dc</hash>
        <hash alg="SHA-512">490ccc99a9c28238fe28455bae08196b83df034cae8a1947d27ff89e500a5d812cf4be36c61942e647c62ad540d8eb4428f49855f0cc8db0ee9e7a5b12ba2454</hash>
        <hash alg="SHA-384">b53f4a6fddbf677a8d02c65e9f0a96372140c68286d68740987fb462f946de878abaeea421d3e4716751f04d88c16ad1</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.15.3?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/FasterXML/jackson</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/FasterXML/jackson-databind/issues</url></reference><reference type="vcs"><url>https://github.com/FasterXML/jackson-databind</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.15.3?type=jar">
      <publisher>FasterXML</publisher>
      <group>com.fasterxml.jackson.core</group>
      <name>jackson-annotations</name>
      <version>2.15.3</version>
      <description>Core annotations used for value types, used by Jackson data binding package.</description>
      <hashes>
        <hash alg="MD5">f478f693731e4a2f0f0d3c7bba119b32</hash>
        <hash alg="SHA-1">79baf4e605eb3bbb60b1c475d44a7aecceea1d60</hash>
        <hash alg="SHA-256">aae865c3d88256d61b11523cb1e88bd48d5b9ad5855fa1fc859504fd2204708a</hash>
        <hash alg="SHA-512">c496afd736fa8acbf8126887e2ff375f162212f451326451fbb4b9194231d814e25bccacbaead9db98beec454f6b8d9ed706c5c88e2145bf7e1a37e13fd81af0</hash>
        <hash alg="SHA-384">13b4d153cc113a69008147974d8887f868f2f3f0a551ef0bacaccf0add17a3168465a94a471e075913f9c6649980a3cb</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.15.3?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/FasterXML/jackson</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/FasterXML/jackson-annotations/issues</url></reference><reference type="vcs"><url>https://github.com/FasterXML/jackson-annotations</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-compress@1.24.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.commons</group>
      <name>commons-compress</name>
      <version>1.24.0</version>
      <description>Apache Commons Compress defines an API for working with
compression and archive formats.  These include: bzip2, gzip, pack200,
lzma, xz, Snappy, traditional Unix Compress, DEFLATE, DEFLATE64, LZ4,
Brotli, Zstandard and ar, cpio, jar, tar, zip, dump, 7z, arj.</description>
      <hashes>
        <hash alg="MD5">a99bcb4c7967d685eeecaa814b9a902d</hash>
        <hash alg="SHA-1">b4b1b5a3d9573b2970fddab236102c0a4d27d35e</hash>
        <hash alg="SHA-256">fbf2c5d275e513c08f4e4fb539726dbf3ac2142af956ba93efb983244f0c36bd</hash>
        <hash alg="SHA-512">7392ca7c08ab295a2f20152a7dd3190211331d869355d3698bf14908248b318e2b1fecb5050414939c046819a3c965492dee7f50b2281bc55db026cf76e286b1</hash>
        <hash alg="SHA-384">2370d070972604f37c121c0a1d2982e6b693a0a31b150c60ada83ad7e80437156f179639a8859bb90012549fc51bb034</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.commons/commons-compress@1.24.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://commons.apache.org/proper/commons-compress/</url></reference><reference type="build-system"><url>https://github.com/apache/commons-parent/actions</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/COMPRESS</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=commons-compress.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar">
      <publisher>QOS.ch</publisher>
      <group>org.slf4j</group>
      <name>slf4j-api</name>
      <version>1.7.36</version>
      <description>The slf4j API</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">872da51f5de7f3923da4de871d57fd85</hash>
        <hash alg="SHA-1">6c62681a2f655b49963a5983b8b0950a6120ae14</hash>
        <hash alg="SHA-256">d3ef575e3e4979678dc01bf1dcce51021493b4d11fb7f1be8ad982877c16a1c0</hash>
        <hash alg="SHA-512">f9b033fc019a44f98b16048da7e2b59edd4a6a527ba60e358f65ab88e0afae03a9340f1b3e8a543d49fa542290f499c5594259affa1ff3e6e7bf3b428d4c610b</hash>
        <hash alg="SHA-384">2b14ad035877087157e379d3277dcdcd79e58d6bdb147c47d29e377d75ce53ad42cafbf22f5fb7827c7e946ff4876b9a</hash>
      </hashes>
      <licenses>
        <license>
          <id>MIT</id>
          <url>https://opensource.org/licenses/MIT</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.slf4j.org</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/qos-ch/slf4j/slf4j-api</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-shaded-force-shading@17.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-shaded-force-shading</name>
      <version>17.0</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">6890ff555c82f3bb156cf9c73bf09cf9</hash>
        <hash alg="SHA-1">345c153973a17fb8a98d368352e14893edcbd610</hash>
        <hash alg="SHA-256">dcc7dff160a40b74fa5db2805b2004153ffd0517968f3c7843a8ee43be82e710</hash>
        <hash alg="SHA-512">9de23513832248618b78e279c0e3900f5cafb7193254ef6818b4f0b6f3b70045dd9cc4fdd13caeeca8b70a44f38201ce055f07248cdf08930a20e1b7a73997ff</hash>
        <hash alg="SHA-384">063611872b4b1a1718e0472e32198bded0d74fa656e5c47a7b20038cd5ff70106e3109b60fe882880feea486e1ef83bf</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-shaded-force-shading@17.0?type=jar</purl>
      <externalReferences><reference type="website"><url>http://flink.apache.org/flink-shaded-force-shading</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink-shaded/flink-shaded-force-shading</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar">
      <group>com.google.code.findbugs</group>
      <name>jsr305</name>
      <version>1.3.9</version>
      <description>JSR305 Annotations for Findbugs</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">1d5a772e400b04bb67a7ef4a0e0996d8</hash>
        <hash alg="SHA-1">40719ea6961c0cb6afaeb6a921eaa1f6afd4cfdf</hash>
        <hash alg="SHA-256">905721a0eea90a81534abb7ee6ef4ea2e5e645fa1def0a5cd88402df1b46c9ed</hash>
        <hash alg="SHA-512">06da282cfd8e30d9f8cf17702b8709172b00e22b75a627a1d85f8989615b8a1a401bc25d9aee7b14aed1d9b5df73bf2ea8d66f9c8468d9577c29f0ccfa2cc70a</hash>
        <hash alg="SHA-384">56e6b41ef62eb5edfed0203802cefae9c2df86388148e420bb0c687abb2b80e14d5c2a82d5b35dce4badaf148f94eada</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar</purl>
      <externalReferences><reference type="website"><url>http://findbugs.sourceforge.net/</url></reference><reference type="vcs"><url>http://findbugs.googlecode.com/svn/trunk/</url></reference></externalReferences>
    </component>
  </components>
  <dependencies>
    <dependency ref="pkg:maven/org.apache.flink/flink-sql-parquet@1.19.0?type=jar">
      <dependency ref="pkg:maven/org.apache.flink/flink-parquet@1.19.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.parquet/parquet-avro@1.13.1?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-force-shading@17.0?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.flink/flink-parquet@1.19.0?type=jar">
      <dependency ref="pkg:maven/org.apache.parquet/parquet-hadoop@1.13.1?type=jar"/>
      <dependency ref="pkg:maven/com.google.protobuf/protobuf-java@3.21.7?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.parquet/parquet-hadoop@1.13.1?type=jar">
      <dependency ref="pkg:maven/org.apache.parquet/parquet-column@1.13.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.parquet/parquet-format-structures@1.13.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.parquet/parquet-common@1.13.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.parquet/parquet-jackson@1.13.1?type=jar"/>
      <dependency ref="pkg:maven/io.airlift/aircompressor@0.21?type=jar"/>
      <dependency ref="pkg:maven/commons-pool/commons-pool@1.6?type=jar"/>
      <dependency ref="pkg:maven/com.github.luben/zstd-jni@1.5.0-1?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/org.apache.yetus/audience-annotations@0.13.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.parquet/parquet-column@1.13.1?type=jar">
      <dependency ref="pkg:maven/org.apache.parquet/parquet-common@1.13.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.parquet/parquet-encoding@1.13.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.yetus/audience-annotations@0.13.0?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.parquet/parquet-common@1.13.1?type=jar">
      <dependency ref="pkg:maven/org.apache.parquet/parquet-format-structures@1.13.1?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.parquet/parquet-format-structures@1.13.1?type=jar"/>
    <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    <dependency ref="pkg:maven/org.apache.parquet/parquet-encoding@1.13.1?type=jar">
      <dependency ref="pkg:maven/org.apache.parquet/parquet-common@1.13.1?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.yetus/audience-annotations@0.13.0?type=jar"/>
    <dependency ref="pkg:maven/org.apache.parquet/parquet-jackson@1.13.1?type=jar"/>
    <dependency ref="pkg:maven/io.airlift/aircompressor@0.21?type=jar"/>
    <dependency ref="pkg:maven/commons-pool/commons-pool@1.6?type=jar"/>
    <dependency ref="pkg:maven/com.github.luben/zstd-jni@1.5.0-1?type=jar"/>
    <dependency ref="pkg:maven/com.google.protobuf/protobuf-java@3.21.7?type=jar"/>
    <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"/>
    <dependency ref="pkg:maven/org.apache.parquet/parquet-avro@1.13.1?type=jar">
      <dependency ref="pkg:maven/org.apache.parquet/parquet-column@1.13.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.parquet/parquet-hadoop@1.13.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.parquet/parquet-common@1.13.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.avro/avro@1.11.3?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.avro/avro@1.11.3?type=jar">
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-core@2.15.3?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.15.3?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-compress@1.24.0?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-core@2.15.3?type=jar"/>
    <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.15.3?type=jar">
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.15.3?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-core@2.15.3?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.15.3?type=jar"/>
    <dependency ref="pkg:maven/org.apache.commons/commons-compress@1.24.0?type=jar"/>
    <dependency ref="pkg:maven/org.apache.flink/flink-shaded-force-shading@17.0?type=jar"/>
  </dependencies>
</bom>
