<?xml version="1.0" encoding="UTF-8"?>
<bom serialNumber="urn:uuid:40197082-09e5-33f0-8afc-69fad36237df" version="1" xmlns="http://cyclonedx.org/schema/bom/1.5">
  <metadata>
    <lifecycles>
      <lifecycle>
        <phase>build</phase>
      </lifecycle>
    </lifecycles>
    <tools>
      <tool>
        <vendor>OWASP Foundation</vendor>
        <name>CycloneDX Maven plugin</name>
        <version>2.8.0</version>
        <hashes>
          <hash alg="MD5">76ffec6a7ddd46b2b24517411874eb99</hash>
          <hash alg="SHA-1">5b0d5b41975b53be4799b9621b4af0cfc41d44b6</hash>
          <hash alg="SHA-256">6852aa0f4e42a2db745bab80e384951a6a65b9215d041081d675780999027e81</hash>
          <hash alg="SHA-512">417de20fcdcb11c9713bacbd57290d8e68037fdb4553fd31b8cb08bd760ad52dc65ea88ad4be15844ad3fd5a4d3e440d2f70326f2fe1e63ec78e059c9a883f8d</hash>
          <hash alg="SHA-384">5eb755c6492e7a7385fa9a1e1f4517875bcb834b2df437808a37a2d6f5285df428741762305980315a63fcef1406597d</hash>
          <hash alg="SHA3-384">0fe16a47cf7aab0b22251dafcc39939b68e8f1778093309d8d2060b51a08df445a8b8ed5a9561669faf2e55f907c76d8</hash>
          <hash alg="SHA3-256">3e5a1eb5ab7d0797498862794709ff8eaaa071fe4cc9ec77f52db7e2f97ef487</hash>
          <hash alg="SHA3-512">59281a3e29e76270d7f44b40b5b9f05e55f1ae3ec716d80add806f360940809e3813998ac7c5758043b8e248aed73b86e37dc506cdb4cde03c16bb617d8e5a3a</hash>
        </hashes>
      </tool>
    </tools>
    <component type="library" bom-ref="pkg:maven/org.apache.maven/maven-api-metadata@4.0.0-rc-2?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven</group>
      <name>maven-api-metadata</name>
      <version>4.0.0-rc-2</version>
      <description>Maven 4 API - Immutable Repository Metadata model.</description>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven/maven-api-metadata@4.0.0-rc-2?type=jar</purl>
      <externalReferences><reference type="website"><url>https://maven.apache.org/ref/4.0.0-rc-2/api/maven-api-metadata/</url></reference><reference type="build-system"><url>https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/</url></reference><reference type="distribution"><url>https://maven.apache.org/download.html</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/MNG</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?users@maven.apache.org</url></reference><reference type="vcs"><url>https://github.com/apache/maven/tree/maven-4.0.0-rc-2/api/maven-api-metadata</url></reference></externalReferences>
    </component>
    <properties>
      <property name="maven.goal">makeBom</property>
      <property name="maven.scopes">compile,provided,runtime,system</property>
      <property name="cdx:reproducible">enabled</property>
    </properties>
  </metadata>
  <components>
    <component type="library" bom-ref="pkg:maven/org.apache.maven/maven-api-annotations@4.0.0-rc-2?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven</group>
      <name>maven-api-annotations</name>
      <version>4.0.0-rc-2</version>
      <description>Maven 4 API - Java meta annotations.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">0e9172b8fabad8e54ed78aa10591fd04</hash>
        <hash alg="SHA-1">074f3946c17df44356f18d0de12a8d5f60c54936</hash>
        <hash alg="SHA-256">dc61f601ad6b4dcc7bcb688b712eeb8e6cf22d36994d2d7851f7f1ab5fc152b2</hash>
        <hash alg="SHA-512">e2c32d44f9663a14a7554911abda925fbfb464503ba9ea7f51b8662837f2b603ff26dcfaad8677bab0bc5bd9207f460288fb6d90f91984fd6d1d7a6cef44194f</hash>
        <hash alg="SHA-384">053004020e4701c636a1c241d804d608e3fe467c76f5532e87067b2223ab38ba9bede4819e86ed665a2fe208f8f0e0d9</hash>
        <hash alg="SHA3-384">43c2482617a43d9772b07f5e39911d47764971631ed489b3daff116081fc67b5e43be470e608ac8cd9631a443e5154ef</hash>
        <hash alg="SHA3-256">258329b7b447e075290b82571dc3262997d9a5b2e20eec41200bc6c5ce203ee9</hash>
        <hash alg="SHA3-512">f5dd7fcb2daee191b16d19a50b20c93e4d39c827f4d21198ebec4bbd32caf85e0ff9810a479c696b77c1e54a33358e5404405275d656215e4edd8e07ae896ec6</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven/maven-api-annotations@4.0.0-rc-2?type=jar</purl>
      <externalReferences><reference type="website"><url>https://maven.apache.org/ref/4.0.0-rc-2/api/maven-api-annotations/</url></reference><reference type="build-system"><url>https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/</url></reference><reference type="distribution"><url>https://maven.apache.org/download.html</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/MNG</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?users@maven.apache.org</url></reference><reference type="vcs"><url>https://github.com/apache/maven/tree/maven-4.0.0-rc-2/api/maven-api-annotations</url></reference></externalReferences>
    </component>
  </components>
  <dependencies>
    <dependency ref="pkg:maven/org.apache.maven/maven-api-metadata@4.0.0-rc-2?type=jar">
      <dependency ref="pkg:maven/org.apache.maven/maven-api-annotations@4.0.0-rc-2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.maven/maven-api-annotations@4.0.0-rc-2?type=jar"/>
  </dependencies>
</bom>
