<?xml version="1.0" encoding="UTF-8"?>
<bom version="1" xmlns="http://cyclonedx.org/schema/bom/1.4">
  <metadata>
    <tools>
      <tool>
        <vendor>OWASP Foundation</vendor>
        <name>CycloneDX Maven plugin</name>
        <version>2.7.10</version>
        <hashes>
          <hash alg="MD5">1cc7f6a0382f8bb2f758d6a6ea401d1b</hash>
          <hash alg="SHA-1">a4297947a1f2d7d453105db542651614bbd37f38</hash>
          <hash alg="SHA-256">bd0fdd8f2f2116eee5e715aeac1580f19eb7a10ec2b6f805b53567067658e872</hash>
          <hash alg="SHA-512">9cde8352a427e10b96cae01348fc7cfe5d4aa9cd0a5e5dd93b414ce3bb7d112993c3b3004e53af52567fbfa16de0704ec59a5556a635ad70571fd124ae389f39</hash>
          <hash alg="SHA-384">93d7bf5b5c735347edfbfbd66810273ca840f9a322b816d22d44c3d8e8255c09e86570bb23712aeb0cade0f478be5aeb</hash>
          <hash alg="SHA3-384">4467f16e9ca32190a6e49c65339eb28ee5e8c78f4e918fcf95128a4b7648898de56ccb43eacfad0c9391ef8cdb7d629a</hash>
          <hash alg="SHA3-256">ed2996c99b483e969221d5e9a40f562ea2ab85442d361d72a90e85266a3ed781</hash>
          <hash alg="SHA3-512">c8e6ea9ddc38edc77e284b3bf541663e84752bdc59ed1935799847a48a14ea2fa531b61008fefcba37d732a56702a11ac112437b9b80d18f4ecc8ef0ecfb32cf</hash>
        </hashes>
      </tool>
    </tools>
    <component type="library" bom-ref="pkg:maven/org.apache.hbase/hbase-shaded@2.5.10?type=pom">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.hbase</group>
      <name>hbase-shaded</name>
      <version>2.5.10</version>
      <description>Module of HBase with most deps shaded.</description>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.hbase/hbase-shaded@2.5.10?type=pom</purl>
      <externalReferences><reference type="website"><url>https://hbase.apache.org/hbase-build-configuration/hbase-shaded</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/HBASE</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/hbase-user/</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=hbase.git/hbase-build-configuration/hbase-shaded</url></reference></externalReferences>
    </component>
    <properties>
      <property name="maven.goal">makeBom</property>
      <property name="maven.scopes">compile,provided,runtime,system</property>
      <property name="cdx:reproducible">enabled</property>
    </properties>
  </metadata>
  <components>
    <component type="library" bom-ref="pkg:maven/org.apache.hbase/hbase-resource-bundle@2.5.10?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.hbase</group>
      <name>hbase-resource-bundle</name>
      <version>2.5.10</version>
      <description>licensing info for use when bundling works</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">ad8d8a0dcb2561e60595822b0faea1fb</hash>
        <hash alg="SHA-1">961f0bccc08b1b85653f360af89fcc586f615644</hash>
        <hash alg="SHA-256">1a41525cb768fad5d77b7a37e6850ae9edc9bc62f2b4f2a9fbfc3aabb4966d2f</hash>
        <hash alg="SHA-512">f23ca80e0c759652f3a34a3fb9cbd0903e219733dfd98990f8c0598213e76afb89030fd8d90877be3fb7cdec5bc5a2ecab9d82d8660b58332dcb13dca4fe3570</hash>
        <hash alg="SHA-384">5874ddd8050d77c0c2b329a4046b67a15f9cb5983d19787ad075ce8ec175d706628ee8fbcec7b2d4c0e31db4817eb01a</hash>
        <hash alg="SHA3-384">f52b0d61f8ebd42ae55988f8c34a036fc0433ba4dba4e5760be8ca30798a9793c6f4e3ebf26be43d74539a341da359de</hash>
        <hash alg="SHA3-256">a83d555389d7552bb3257ab3176fd5f822b6bd032a7388330a1eedf50cc44fc5</hash>
        <hash alg="SHA3-512">34d2f59a7a21fe6554668e706952a12076ab3a10ead93971d19392dcef33d98ae0f05061cf3960f18c2c529f507a575b41b96d7134604028b9779257cbeb4646</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.hbase/hbase-resource-bundle@2.5.10?type=jar</purl>
      <externalReferences><reference type="website"><url>https://hbase.apache.org/hbase-build-configuration/hbase-resource-bundle</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/HBASE</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/hbase-user/</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=hbase.git/hbase-build-configuration/hbase-resource-bundle</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.logging.log4j/log4j-api@2.17.2?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.logging.log4j</group>
      <name>log4j-api</name>
      <version>2.17.2</version>
      <description>The Apache Log4j API</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">0c39d90e7819c92c111e447bdf786a90</hash>
        <hash alg="SHA-1">f42d6afa111b4dec5d2aea0fe2197240749a4ea6</hash>
        <hash alg="SHA-256">09351b5a03828f369cdcff76f4ed39e6a6fc20f24f046935d0b28ef5152f8ce4</hash>
        <hash alg="SHA-512">8f986171ee6ca94ba8eacfc83b5b45bb87221c176076eb152715fcb4e1f351c4e9f88d56420fc02ee166ebe0b896fb52eda21355dec49302ab3e83a56b245d04</hash>
        <hash alg="SHA-384">e4ba0afbfd91ef295e6c1c1edfa7854e216a29705b5c4b520f803697ae6badf3630c5d55e56394954988fa88e62176b4</hash>
        <hash alg="SHA3-384">ef8ecf2f848bcb18790d79b1d4e0fac0582e94f226eb8c7039d7316bd9f4c472556a4052b4a93958eb1248c7a3756433</hash>
        <hash alg="SHA3-256">bdcccb79127c28c0f42374eeac65891e7c0d02f18e1469c705e946f74cfc89db</hash>
        <hash alg="SHA3-512">14a4d4f38dc5392f378e006994780d686095e1190d476fd18efcd4211bd4dcd64b699d79c5f4351c51f2d26a3ab98b4a49745df6dbd404e3bc981797a5b8c075</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.logging.log4j/log4j-api@2.17.2?type=jar</purl>
      <externalReferences><reference type="website"><url>https://logging.apache.org/log4j/2.x/log4j-api/</url></reference><reference type="build-system"><url>https://ci-builds.apache.org/job/Logging/job/log4j/</url></reference><reference type="distribution"><url>https://logging.apache.org/log4j/2.x/download.html</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/LOG4J2</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?log4j-user@logging.apache.org</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=logging-log4j2.git/log4j-api</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.logging.log4j/log4j-core@2.17.2?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.logging.log4j</group>
      <name>log4j-core</name>
      <version>2.17.2</version>
      <description>The Apache Log4j Implementation</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">b35d06ffd3ea52e5ba9efe455108745c</hash>
        <hash alg="SHA-1">fa43ba4467f5300b16d1e0742934149bfc5ac564</hash>
        <hash alg="SHA-256">5adb34ff4197cd16a8d24f63035856a933cb59562a6888dde86e9450fcfef646</hash>
        <hash alg="SHA-512">c2fc60a1e8c866c09f4787d1edb1bd87a5a5fe114c477d065a3c43f4e513f055d61560b597f06ef6d95c09763b6adb3be17812c8611c00df6f4959311bc9599d</hash>
        <hash alg="SHA-384">a8e03c55833df8f96d7066645440281ba212040af247733db6f4debcb38b7fe8e1e9ac79eb9b67105670e82136125e7c</hash>
        <hash alg="SHA3-384">f59e8609518ae9be81b30a480bf72a93cbf2b5e25e1465a0124945817a0a98969205147289177631a2a38783d3815af4</hash>
        <hash alg="SHA3-256">ce14c5b6c9c5285db2089e70bd78ade549b6b3109b897aad868a4a2e642489b7</hash>
        <hash alg="SHA3-512">51f5519f25b534e1d9eb43b9e53d56e93c373b0dd64fa9d80a187e1ede7b5c32823d6fa5a034ec37f2a8c19d8af4dba0827912e7546824320a98af5348e6e83f</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.logging.log4j/log4j-core@2.17.2?type=jar</purl>
      <externalReferences><reference type="website"><url>https://logging.apache.org/log4j/2.x/log4j-core/</url></reference><reference type="build-system"><url>https://ci-builds.apache.org/job/Logging/job/log4j/</url></reference><reference type="distribution"><url>https://logging.apache.org/log4j/2.x/download.html</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/LOG4J2</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?log4j-user@logging.apache.org</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=logging-log4j2.git/log4j-core</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.logging.log4j/log4j-slf4j-impl@2.17.2?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.logging.log4j</group>
      <name>log4j-slf4j-impl</name>
      <version>2.17.2</version>
      <description>The Apache Log4j SLF4J API binding to Log4j 2 Core</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">fe52fcd1f4027ab9a12bed89acdbf109</hash>
        <hash alg="SHA-1">0183f7c95fc981f3e97d008b363341343508848e</hash>
        <hash alg="SHA-256">77912d47190a5d25d583728e048496a92a2cb32308b71d3439931d7719996637</hash>
        <hash alg="SHA-512">a9400a5b22de9c7b43e6ea2885001d9b3c3b9d822e05ea50f366fbd919e47bced1cbc25984dfd391bd087d199d3bf6e6178b2343a58b9cb40ede2cd419469565</hash>
        <hash alg="SHA-384">9d81106b5e48d63f834efb2a9d84b6c616d32a534cd896e9211c3e47ccd68f3885aaaa13d37bf79e5c54edf0e46b43a1</hash>
        <hash alg="SHA3-384">77548d79eff23118500a3f48bef773df8f7ec44ced3b6694f1e0e9daf7c51af492aeffc351130e57c462fb8d404aef4f</hash>
        <hash alg="SHA3-256">34063c820ead06b61b20a9cd225d88be3b90905d8bcc49b235c27f74d5a79255</hash>
        <hash alg="SHA3-512">06835ccef8c2e54a06986cc516d7558901423517e4022da6f5893fc2acca8dc7e4b2e32a69132b5aac5ff9009c42fb3590553ff1611783cff3c928c17ec288c4</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.logging.log4j/log4j-slf4j-impl@2.17.2?type=jar</purl>
      <externalReferences><reference type="website"><url>https://logging.apache.org/log4j/2.x/log4j-slf4j-impl/</url></reference><reference type="build-system"><url>https://ci-builds.apache.org/job/Logging/job/log4j/</url></reference><reference type="distribution"><url>https://logging.apache.org/log4j/2.x/download.html</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/LOG4J2</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?log4j-user@logging.apache.org</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=logging-log4j2.git/log4j-slf4j-impl</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.slf4j/slf4j-api@1.7.33?type=jar">
      <publisher>QOS.ch</publisher>
      <group>org.slf4j</group>
      <name>slf4j-api</name>
      <version>1.7.33</version>
      <description>The slf4j API</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">de8684fca5e9042d0120cb3306e8278f</hash>
        <hash alg="SHA-1">d375aa1b98d34d5ddf73a3f19eaad66e98975b12</hash>
        <hash alg="SHA-256">336811855ee97fcd8413343dc42f4d26362502860e8a9193e4db305e3e8ef80a</hash>
        <hash alg="SHA-512">ccde4a938e90d683288f84375224ecd9b46aca20de7544c6300c82ef07780d25306239ea9c5565c3ff58038c9d5becc85c846df3c1809585ae33b20a32e6b8d9</hash>
        <hash alg="SHA-384">dd31ce1f4fa4c7a892388422b4694d8a51bac05e4f2789eb7be734cdb2738f9f796eb951cfe989834ec78a65d5d762b5</hash>
        <hash alg="SHA3-384">75d1aa5e386f2c71c598cda5b995ff5fd496e4003489d58d217be1951d24f5444c8de2fe7bf7a7ce9c40d6cfc0ee01b2</hash>
        <hash alg="SHA3-256">ef2ec74302de597f6eec560b04a8de12a331302cbd5b9c178c237c3b683426a5</hash>
        <hash alg="SHA3-512">4528a2981a1107261f6798c628075e9ac724060a72338e0ca8786b27162b17e358a96711b3d0cc673dff85d36fa9eb6eba907e15697b4c40a5236f140fb6a6f2</hash>
      </hashes>
      <licenses>
        <license>
          <id>MIT</id>
          <url>https://opensource.org/licenses/MIT</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.slf4j/slf4j-api@1.7.33?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.slf4j.org</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/qos-ch/slf4j/slf4j-api</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.yetus/audience-annotations@0.13.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.yetus</group>
      <name>audience-annotations</name>
      <version>0.13.0</version>
      <description>Annotations for defining API boundaries and tools for managing javadocs</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">e7b6aa8d8967f6f34a711d763d1b4816</hash>
        <hash alg="SHA-1">8ad1147dcd02196e3924013679c6bf4c25d8c351</hash>
        <hash alg="SHA-256">3bfbb397b06f63a2a0a361f62ed32cf199bd92ddd48ea99281f4987edec9777b</hash>
        <hash alg="SHA-512">9fdd60a366629a7ef7f934eea7d27d38e1614472e9090fd23c66032589fbfb9d90516c9cb13a44e4a3598e50d62daf851bb87e4dc8375b1da2cfe6392c448bd8</hash>
        <hash alg="SHA-384">bdd7d0a05faa80c56ab33e8f0c9b70a366f3bcc9cb36fcf88d4f6761feee36b46787baf42b1f62606935eb595279de7e</hash>
        <hash alg="SHA3-384">1a38fd63d6825a724bda4f2dd3dccd7c1d7cbdf7225236e4dc59f5f9642e8be8d1cf9863d723fa3f52d4e6f952eb99bf</hash>
        <hash alg="SHA3-256">3cb50163f379a7eb642d4f6ceb0f4ab1d8a10414c656a101ca8027c2c4125c25</hash>
        <hash alg="SHA3-512">444f96bec24b7d28999c6830db42267ee0a007ffccdd2e48ae75c83ba22442fe5bed854280699e197e77b20ccf6fb19a562c0031b8911bca68a7e66dc7d80797</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.yetus/audience-annotations@0.13.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://yetus.apache.org/audience-annotations</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/YETUS</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/yetus-dev/</url></reference><reference type="vcs"><url>https://github.com/apache/yetus.git/audience-annotations</url></reference></externalReferences>
    </component>
  </components>
  <dependencies>
    <dependency ref="pkg:maven/org.apache.hbase/hbase-shaded@2.5.10?type=pom">
      <dependency ref="pkg:maven/org.apache.hbase/hbase-resource-bundle@2.5.10?type=jar"/>
      <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-api@2.17.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-core@2.17.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-slf4j-impl@2.17.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.yetus/audience-annotations@0.13.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.hbase/hbase-resource-bundle@2.5.10?type=jar">
      <dependency ref="pkg:maven/org.apache.yetus/audience-annotations@0.13.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.yetus/audience-annotations@0.13.0?type=jar"/>
    <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-api@2.17.2?type=jar"/>
    <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-core@2.17.2?type=jar">
      <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-api@2.17.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-slf4j-impl@2.17.2?type=jar">
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.33?type=jar"/>
      <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-api@2.17.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-core@2.17.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.33?type=jar"/>
  </dependencies>
</bom>
