<?xml version="1.0" encoding="UTF-8"?>
<bom serialNumber="urn:uuid:e60a79a4-a656-4695-88e3-d5aa01c427b3" version="1" xmlns="http://cyclonedx.org/schema/bom/1.4">
  <metadata>
    <timestamp>2023-06-02T02:08:35Z</timestamp>
    <tools>
      <tool>
        <vendor>OWASP Foundation</vendor>
        <name>CycloneDX Maven plugin makeBom compile+provided+runtime+system</name>
        <version>2.7.6</version>
        <hashes>
          <hash alg="MD5">639c35c7f79c5514f3abe11247999b70</hash>
          <hash alg="SHA-1">649239e622d8d454bb9ab6fafd6746c85cd11b7d</hash>
          <hash alg="SHA-256">1e3bc10146c370fe8b8f0a2edcb64329907d61dbc2f445db6ac1034cd3221ce3</hash>
          <hash alg="SHA-512">894a4b5762d32c88cc58ae1a35a3cc3d45a3c494accadb31b55b5832af65f60c0f8164623521a81de73e3ed6a4c994cca0f1951c8368b9d07fb41c82eaa84bbd</hash>
          <hash alg="SHA-384">3c385acc773a41056fb58ea27096c8ec86d46d8bd74a2eee9cf0913051981611afc68cf13a88d31af16590a489a97c0e</hash>
          <hash alg="SHA3-384">93695160055039f4791ecebd61c7aa6130f074f50a823de6e5aff7217c35548062829ec2b930658c2702cd47ea3118a1</hash>
          <hash alg="SHA3-256">4c9f5d3ab2b6ab9b4b4a8968a7ee2373b85a496bec34eefd96ed7c8260d2a45b</hash>
          <hash alg="SHA3-512">c2af46fe07c4be746fdc0b54e9eb3285231055c5401bcfb34c2d9392efe27fe9c16a0edd91615970bfae3f4a59846e89c3d88a6a36d4ba110a6d140a04fe184d</hash>
        </hashes>
      </tool>
    </tools>
    <component type="library" bom-ref="pkg:maven/org.apache.hbase/hbase-shaded@2.5.5-hadoop3?type=pom">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.hbase</group>
      <name>hbase-shaded</name>
      <version>2.5.5-hadoop3</version>
      <description>Module of HBase with most deps shaded.</description>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.hbase/hbase-shaded@2.5.5-hadoop3?type=pom</purl>
      <externalReferences><reference type="website"><url>https://hbase.apache.org/hbase-build-configuration/hbase-shaded</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/HBASE</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/hbase-user/</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=hbase.git/hbase-build-configuration/hbase-shaded</url></reference></externalReferences>
    </component>
  </metadata>
  <components>
    <component type="library" bom-ref="pkg:maven/org.apache.hbase/hbase-resource-bundle@2.5.5-hadoop3?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.hbase</group>
      <name>hbase-resource-bundle</name>
      <version>2.5.5-hadoop3</version>
      <description>licensing info for use when bundling works</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">a020a52352be381d4afda7a9cad9ac65</hash>
        <hash alg="SHA-1">06b0cc63cff73ee40338ab7f28e84256a120ecc9</hash>
        <hash alg="SHA-256">ba115df80ebddf7af0814881ed22172c1d97bb336ce467bd9abd013e0e069579</hash>
        <hash alg="SHA-512">2ffe44edb4a553b5e71166d666a8c45159c1c1e9dbae4780084d88973613f04f00025ccc8de31b400ef95d240668e90985965a6c9bba7efc1b9cec125ce643d7</hash>
        <hash alg="SHA-384">5ab5c57a6478233556f08c0036375f1afb8a38c45715ecccbc32fe5a281fcd27b42c486a1c05af86824087c32f75c73d</hash>
        <hash alg="SHA3-384">d72b71ed5e387a8bdeecccd902733afb738f009b8d57c560ae22f828c932e6d4ce4a8596ddb330214dec28938437c2f0</hash>
        <hash alg="SHA3-256">b56893444f0d9832e80c8ff9088fba561f96735620f76d6db61825e50ba1abd7</hash>
        <hash alg="SHA3-512">cb6ea48101a5e46831b81feee15cae3169ab2cc0d6b4efc78fe02d83a7e6cbb41de113397cd836743151d5080d01381c9cf4f5d5180853b50c4b7f6ce460015a</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.hbase/hbase-resource-bundle@2.5.5-hadoop3?type=jar</purl>
      <externalReferences><reference type="website"><url>https://hbase.apache.org/hbase-build-configuration/hbase-resource-bundle</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/HBASE</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/hbase-user/</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=hbase.git/hbase-build-configuration/hbase-resource-bundle</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.logging.log4j/log4j-api@2.17.2?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.logging.log4j</group>
      <name>log4j-api</name>
      <version>2.17.2</version>
      <description>The Apache Log4j API</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">0c39d90e7819c92c111e447bdf786a90</hash>
        <hash alg="SHA-1">f42d6afa111b4dec5d2aea0fe2197240749a4ea6</hash>
        <hash alg="SHA-256">09351b5a03828f369cdcff76f4ed39e6a6fc20f24f046935d0b28ef5152f8ce4</hash>
        <hash alg="SHA-512">8f986171ee6ca94ba8eacfc83b5b45bb87221c176076eb152715fcb4e1f351c4e9f88d56420fc02ee166ebe0b896fb52eda21355dec49302ab3e83a56b245d04</hash>
        <hash alg="SHA-384">e4ba0afbfd91ef295e6c1c1edfa7854e216a29705b5c4b520f803697ae6badf3630c5d55e56394954988fa88e62176b4</hash>
        <hash alg="SHA3-384">ef8ecf2f848bcb18790d79b1d4e0fac0582e94f226eb8c7039d7316bd9f4c472556a4052b4a93958eb1248c7a3756433</hash>
        <hash alg="SHA3-256">bdcccb79127c28c0f42374eeac65891e7c0d02f18e1469c705e946f74cfc89db</hash>
        <hash alg="SHA3-512">14a4d4f38dc5392f378e006994780d686095e1190d476fd18efcd4211bd4dcd64b699d79c5f4351c51f2d26a3ab98b4a49745df6dbd404e3bc981797a5b8c075</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.logging.log4j/log4j-api@2.17.2?type=jar</purl>
      <externalReferences><reference type="website"><url>https://logging.apache.org/log4j/2.x/log4j-api/</url></reference><reference type="build-system"><url>https://ci-builds.apache.org/job/Logging/job/log4j/</url></reference><reference type="distribution"><url>https://logging.apache.org/log4j/2.x/download.html</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/LOG4J2</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?log4j-user@logging.apache.org</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=logging-log4j2.git/log4j-api</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.logging.log4j/log4j-core@2.17.2?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.logging.log4j</group>
      <name>log4j-core</name>
      <version>2.17.2</version>
      <description>The Apache Log4j Implementation</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">b35d06ffd3ea52e5ba9efe455108745c</hash>
        <hash alg="SHA-1">fa43ba4467f5300b16d1e0742934149bfc5ac564</hash>
        <hash alg="SHA-256">5adb34ff4197cd16a8d24f63035856a933cb59562a6888dde86e9450fcfef646</hash>
        <hash alg="SHA-512">c2fc60a1e8c866c09f4787d1edb1bd87a5a5fe114c477d065a3c43f4e513f055d61560b597f06ef6d95c09763b6adb3be17812c8611c00df6f4959311bc9599d</hash>
        <hash alg="SHA-384">a8e03c55833df8f96d7066645440281ba212040af247733db6f4debcb38b7fe8e1e9ac79eb9b67105670e82136125e7c</hash>
        <hash alg="SHA3-384">f59e8609518ae9be81b30a480bf72a93cbf2b5e25e1465a0124945817a0a98969205147289177631a2a38783d3815af4</hash>
        <hash alg="SHA3-256">ce14c5b6c9c5285db2089e70bd78ade549b6b3109b897aad868a4a2e642489b7</hash>
        <hash alg="SHA3-512">51f5519f25b534e1d9eb43b9e53d56e93c373b0dd64fa9d80a187e1ede7b5c32823d6fa5a034ec37f2a8c19d8af4dba0827912e7546824320a98af5348e6e83f</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.logging.log4j/log4j-core@2.17.2?type=jar</purl>
      <externalReferences><reference type="website"><url>https://logging.apache.org/log4j/2.x/log4j-core/</url></reference><reference type="build-system"><url>https://ci-builds.apache.org/job/Logging/job/log4j/</url></reference><reference type="distribution"><url>https://logging.apache.org/log4j/2.x/download.html</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/LOG4J2</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?log4j-user@logging.apache.org</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=logging-log4j2.git/log4j-core</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.logging.log4j/log4j-slf4j-impl@2.17.2?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.logging.log4j</group>
      <name>log4j-slf4j-impl</name>
      <version>2.17.2</version>
      <description>The Apache Log4j SLF4J API binding to Log4j 2 Core</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">fe52fcd1f4027ab9a12bed89acdbf109</hash>
        <hash alg="SHA-1">0183f7c95fc981f3e97d008b363341343508848e</hash>
        <hash alg="SHA-256">77912d47190a5d25d583728e048496a92a2cb32308b71d3439931d7719996637</hash>
        <hash alg="SHA-512">a9400a5b22de9c7b43e6ea2885001d9b3c3b9d822e05ea50f366fbd919e47bced1cbc25984dfd391bd087d199d3bf6e6178b2343a58b9cb40ede2cd419469565</hash>
        <hash alg="SHA-384">9d81106b5e48d63f834efb2a9d84b6c616d32a534cd896e9211c3e47ccd68f3885aaaa13d37bf79e5c54edf0e46b43a1</hash>
        <hash alg="SHA3-384">77548d79eff23118500a3f48bef773df8f7ec44ced3b6694f1e0e9daf7c51af492aeffc351130e57c462fb8d404aef4f</hash>
        <hash alg="SHA3-256">34063c820ead06b61b20a9cd225d88be3b90905d8bcc49b235c27f74d5a79255</hash>
        <hash alg="SHA3-512">06835ccef8c2e54a06986cc516d7558901423517e4022da6f5893fc2acca8dc7e4b2e32a69132b5aac5ff9009c42fb3590553ff1611783cff3c928c17ec288c4</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.logging.log4j/log4j-slf4j-impl@2.17.2?type=jar</purl>
      <externalReferences><reference type="website"><url>https://logging.apache.org/log4j/2.x/log4j-slf4j-impl/</url></reference><reference type="build-system"><url>https://ci-builds.apache.org/job/Logging/job/log4j/</url></reference><reference type="distribution"><url>https://logging.apache.org/log4j/2.x/download.html</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/LOG4J2</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?log4j-user@logging.apache.org</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=logging-log4j2.git/log4j-slf4j-impl</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.slf4j/slf4j-api@1.7.33?type=jar">
      <publisher>QOS.ch</publisher>
      <group>org.slf4j</group>
      <name>slf4j-api</name>
      <version>1.7.33</version>
      <description>The slf4j API</description>
      <hashes>
        <hash alg="MD5">de8684fca5e9042d0120cb3306e8278f</hash>
        <hash alg="SHA-1">d375aa1b98d34d5ddf73a3f19eaad66e98975b12</hash>
        <hash alg="SHA-256">336811855ee97fcd8413343dc42f4d26362502860e8a9193e4db305e3e8ef80a</hash>
        <hash alg="SHA-512">ccde4a938e90d683288f84375224ecd9b46aca20de7544c6300c82ef07780d25306239ea9c5565c3ff58038c9d5becc85c846df3c1809585ae33b20a32e6b8d9</hash>
        <hash alg="SHA-384">dd31ce1f4fa4c7a892388422b4694d8a51bac05e4f2789eb7be734cdb2738f9f796eb951cfe989834ec78a65d5d762b5</hash>
        <hash alg="SHA3-384">75d1aa5e386f2c71c598cda5b995ff5fd496e4003489d58d217be1951d24f5444c8de2fe7bf7a7ce9c40d6cfc0ee01b2</hash>
        <hash alg="SHA3-256">ef2ec74302de597f6eec560b04a8de12a331302cbd5b9c178c237c3b683426a5</hash>
        <hash alg="SHA3-512">4528a2981a1107261f6798c628075e9ac724060a72338e0ca8786b27162b17e358a96711b3d0cc673dff85d36fa9eb6eba907e15697b4c40a5236f140fb6a6f2</hash>
      </hashes>
      <licenses>
        <license>
          <id>MIT</id>
          <url>https://opensource.org/licenses/MIT</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.slf4j/slf4j-api@1.7.33?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.slf4j.org</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/qos-ch/slf4j/slf4j-api</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.yetus/audience-annotations@0.13.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.yetus</group>
      <name>audience-annotations</name>
      <version>0.13.0</version>
      <description>Annotations for defining API boundaries and tools for managing javadocs</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">e7b6aa8d8967f6f34a711d763d1b4816</hash>
        <hash alg="SHA-1">8ad1147dcd02196e3924013679c6bf4c25d8c351</hash>
        <hash alg="SHA-256">3bfbb397b06f63a2a0a361f62ed32cf199bd92ddd48ea99281f4987edec9777b</hash>
        <hash alg="SHA-512">9fdd60a366629a7ef7f934eea7d27d38e1614472e9090fd23c66032589fbfb9d90516c9cb13a44e4a3598e50d62daf851bb87e4dc8375b1da2cfe6392c448bd8</hash>
        <hash alg="SHA-384">bdd7d0a05faa80c56ab33e8f0c9b70a366f3bcc9cb36fcf88d4f6761feee36b46787baf42b1f62606935eb595279de7e</hash>
        <hash alg="SHA3-384">1a38fd63d6825a724bda4f2dd3dccd7c1d7cbdf7225236e4dc59f5f9642e8be8d1cf9863d723fa3f52d4e6f952eb99bf</hash>
        <hash alg="SHA3-256">3cb50163f379a7eb642d4f6ceb0f4ab1d8a10414c656a101ca8027c2c4125c25</hash>
        <hash alg="SHA3-512">444f96bec24b7d28999c6830db42267ee0a007ffccdd2e48ae75c83ba22442fe5bed854280699e197e77b20ccf6fb19a562c0031b8911bca68a7e66dc7d80797</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.yetus/audience-annotations@0.13.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://yetus.apache.org/audience-annotations</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/YETUS</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/yetus-dev/</url></reference><reference type="vcs"><url>https://github.com/apache/yetus.git/audience-annotations</url></reference></externalReferences>
    </component>
  </components>
  <dependencies>
    <dependency ref="pkg:maven/org.apache.hbase/hbase-shaded@2.5.5-hadoop3?type=pom">
      <dependency ref="pkg:maven/org.apache.hbase/hbase-resource-bundle@2.5.5-hadoop3?type=jar"/>
      <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-api@2.17.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-core@2.17.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-slf4j-impl@2.17.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.yetus/audience-annotations@0.13.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.hbase/hbase-resource-bundle@2.5.5-hadoop3?type=jar">
      <dependency ref="pkg:maven/org.apache.yetus/audience-annotations@0.13.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.yetus/audience-annotations@0.13.0?type=jar"/>
    <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-api@2.17.2?type=jar"/>
    <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-core@2.17.2?type=jar">
      <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-api@2.17.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-slf4j-impl@2.17.2?type=jar">
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.33?type=jar"/>
      <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-api@2.17.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-core@2.17.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.33?type=jar"/>
  </dependencies>
</bom>
