<?xml version="1.0" encoding="UTF-8"?>
<bom version="1" xmlns="http://cyclonedx.org/schema/bom/1.4">
  <metadata>
    <tools>
      <tool>
        <vendor>OWASP Foundation</vendor>
        <name>CycloneDX Maven plugin</name>
        <version>2.7.10</version>
        <hashes>
          <hash alg="MD5">1cc7f6a0382f8bb2f758d6a6ea401d1b</hash>
          <hash alg="SHA-1">a4297947a1f2d7d453105db542651614bbd37f38</hash>
          <hash alg="SHA-256">bd0fdd8f2f2116eee5e715aeac1580f19eb7a10ec2b6f805b53567067658e872</hash>
          <hash alg="SHA-512">9cde8352a427e10b96cae01348fc7cfe5d4aa9cd0a5e5dd93b414ce3bb7d112993c3b3004e53af52567fbfa16de0704ec59a5556a635ad70571fd124ae389f39</hash>
          <hash alg="SHA-384">93d7bf5b5c735347edfbfbd66810273ca840f9a322b816d22d44c3d8e8255c09e86570bb23712aeb0cade0f478be5aeb</hash>
          <hash alg="SHA3-384">4467f16e9ca32190a6e49c65339eb28ee5e8c78f4e918fcf95128a4b7648898de56ccb43eacfad0c9391ef8cdb7d629a</hash>
          <hash alg="SHA3-256">ed2996c99b483e969221d5e9a40f562ea2ab85442d361d72a90e85266a3ed781</hash>
          <hash alg="SHA3-512">c8e6ea9ddc38edc77e284b3bf541663e84752bdc59ed1935799847a48a14ea2fa531b61008fefcba37d732a56702a11ac112437b9b80d18f4ecc8ef0ecfb32cf</hash>
        </hashes>
      </tool>
    </tools>
    <component type="library" bom-ref="pkg:maven/org.apache.hbase/hbase-protocol-shaded@2.5.9-hadoop3?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.hbase</group>
      <name>hbase-protocol-shaded</name>
      <version>2.5.9-hadoop3</version>
      <description>Shaded protobuf protocol classes used by HBase internally.</description>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.hbase/hbase-protocol-shaded@2.5.9-hadoop3?type=jar</purl>
      <externalReferences><reference type="website"><url>https://hbase.apache.org/hbase-build-configuration/hbase-protocol-shaded</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/HBASE</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/hbase-user/</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=hbase.git/hbase-build-configuration/hbase-protocol-shaded</url></reference></externalReferences>
    </component>
    <properties>
      <property name="maven.goal">makeBom</property>
      <property name="maven.scopes">compile,provided,runtime,system</property>
      <property name="cdx:reproducible">enabled</property>
    </properties>
  </metadata>
  <components>
    <component type="library" bom-ref="pkg:maven/org.apache.hbase.thirdparty/hbase-shaded-protobuf@4.1.5?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.hbase.thirdparty</group>
      <name>hbase-shaded-protobuf</name>
      <version>4.1.5</version>
      <description>Pulls down protobuf, patches it, compiles, and then relocates/shades.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">bfe29809d2bad1c319888f938bf729dc</hash>
        <hash alg="SHA-1">86905c2ab891b64d70a7577562a199755d533916</hash>
        <hash alg="SHA-256">4be5f508a6ef4c2218a4ea17285cd06f2ee7b354b916a87342e7cb48eed3b478</hash>
        <hash alg="SHA-512">f627b3d44b238d9691d866d2ab6049b52cee4eca560597011276b2015c19fd4dc81da9038bba1849762132d6accfb682d07ac53ca9dd32aaf74ddb85db23e1c9</hash>
        <hash alg="SHA-384">7cccd1e8d6cb2fb530bf164860a2da7bd0ec92c59bfe2408a8fa237eaac7c1d5cac92199968b930417459cf11763f9fd</hash>
        <hash alg="SHA3-384">ee710093271ddf4c2b345f8449d5e69625d3c923424f84564b37c752ece45bdf7dfb3ef802864a636388b69da866afdc</hash>
        <hash alg="SHA3-256">e64b31e34f0fb4c281aaf3e354fa2011e25ab97f5c9f24bc8b68941f935540d1</hash>
        <hash alg="SHA3-512">d6e71b440ec3e026bcae253c24314b4d942dac370dbd1e18c0ff9c3ec74e2d08463e4948390095093c20f4ecced89e31ac07dcde9c797ec82033f0943f1b6e06</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.hbase.thirdparty/hbase-shaded-protobuf@4.1.5?type=jar</purl>
      <externalReferences><reference type="website"><url>https://hbase.apache.org/hbase-shaded-protobuf</url></reference><reference type="build-system"><url>http://hudson.zones.apache.org/hudson/view/HBase/job/HBase-TRUNK/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/HBASE</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/hbase-user/</url></reference><reference type="vcs"><url>https://git-wip-us.apache.org/repos/asf?p=hbase-thirdparty.git/hbase-shaded-protobuf</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.yetus/audience-annotations@0.13.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.yetus</group>
      <name>audience-annotations</name>
      <version>0.13.0</version>
      <description>Annotations for defining API boundaries and tools for managing javadocs</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">e7b6aa8d8967f6f34a711d763d1b4816</hash>
        <hash alg="SHA-1">8ad1147dcd02196e3924013679c6bf4c25d8c351</hash>
        <hash alg="SHA-256">3bfbb397b06f63a2a0a361f62ed32cf199bd92ddd48ea99281f4987edec9777b</hash>
        <hash alg="SHA-512">9fdd60a366629a7ef7f934eea7d27d38e1614472e9090fd23c66032589fbfb9d90516c9cb13a44e4a3598e50d62daf851bb87e4dc8375b1da2cfe6392c448bd8</hash>
        <hash alg="SHA-384">bdd7d0a05faa80c56ab33e8f0c9b70a366f3bcc9cb36fcf88d4f6761feee36b46787baf42b1f62606935eb595279de7e</hash>
        <hash alg="SHA3-384">1a38fd63d6825a724bda4f2dd3dccd7c1d7cbdf7225236e4dc59f5f9642e8be8d1cf9863d723fa3f52d4e6f952eb99bf</hash>
        <hash alg="SHA3-256">3cb50163f379a7eb642d4f6ceb0f4ab1d8a10414c656a101ca8027c2c4125c25</hash>
        <hash alg="SHA3-512">444f96bec24b7d28999c6830db42267ee0a007ffccdd2e48ae75c83ba22442fe5bed854280699e197e77b20ccf6fb19a562c0031b8911bca68a7e66dc7d80797</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.yetus/audience-annotations@0.13.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://yetus.apache.org/audience-annotations</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/YETUS</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/yetus-dev/</url></reference><reference type="vcs"><url>https://github.com/apache/yetus.git/audience-annotations</url></reference></externalReferences>
    </component>
  </components>
  <dependencies>
    <dependency ref="pkg:maven/org.apache.hbase/hbase-protocol-shaded@2.5.9-hadoop3?type=jar">
      <dependency ref="pkg:maven/org.apache.hbase.thirdparty/hbase-shaded-protobuf@4.1.5?type=jar"/>
      <dependency ref="pkg:maven/org.apache.yetus/audience-annotations@0.13.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.hbase.thirdparty/hbase-shaded-protobuf@4.1.5?type=jar"/>
    <dependency ref="pkg:maven/org.apache.yetus/audience-annotations@0.13.0?type=jar"/>
  </dependencies>
</bom>
