{
  "bomFormat" : "CycloneDX",
  "specVersion" : "1.6",
  "serialNumber" : "urn:uuid:54526318-bc2c-324b-b04c-27fb8de06f7b",
  "version" : 1,
  "metadata" : {
    "lifecycles" : [
      {
        "phase" : "build"
      }
    ],
    "tools" : {
      "components" : [
        {
          "type" : "library",
          "author" : "OWASP Foundation",
          "group" : "org.cyclonedx",
          "name" : "cyclonedx-maven-plugin",
          "version" : "2.9.1",
          "description" : "CycloneDX Maven plugin",
          "hashes" : [
            {
              "alg" : "MD5",
              "content" : "9c7a565cf28cce58557d0c621c5ea4b1"
            },
            {
              "alg" : "SHA-1",
              "content" : "be882d5a22050bfa9d19090b1420c188617d0e1c"
            },
            {
              "alg" : "SHA-256",
              "content" : "698e0f37184a5b28c245c4065fd036dfce253b52f82fbb7113d81d36326cc249"
            },
            {
              "alg" : "SHA-512",
              "content" : "c0f0b11026858166f872a2eb54719492e5cecaa0bc9cd6b30b3ecb4a174eed220f4a1b5829d18d6734128e778d3cb3db7ffed177c92866133129cb29081814a0"
            },
            {
              "alg" : "SHA-384",
              "content" : "d80964707dfe5caca8c70521d5066f57589304c0a657e6fbc7c0614ea0fc7b3b3dbe7778361eee0f54ba111e9cb0ffcb"
            },
            {
              "alg" : "SHA3-384",
              "content" : "80bc3a275d9514bc457461ff52a72add8c7ecbbc01d8912efce57139016c544ee776981851be0a58fa977ab4221f703f"
            },
            {
              "alg" : "SHA3-256",
              "content" : "142317d6f245390f4fd2d0c100b16281b8dfc5c0c2cff86943bdcc97039cb699"
            },
            {
              "alg" : "SHA3-512",
              "content" : "af0fb9137c90b65d1a07f72e4d51ae509956cdb8800f35c961b037cdda1fe4a14ce3b496cef71ba85f1621affcfe29cd42704ae4191ff0b090a9602087c8997b"
            }
          ]
        }
      ]
    },
    "component" : {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven/maven-api-metadata@4.0.0-rc-4?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven",
      "name" : "maven-api-metadata",
      "version" : "4.0.0-rc-4",
      "description" : "Maven 4 API - Immutable Repository Metadata model.",
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven/maven-api-metadata@4.0.0-rc-4?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/ref/4.0.0-rc-4/api/maven-api-metadata/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/"
        },
        {
          "type" : "distribution",
          "url" : "https://maven.apache.org/download.html"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/apache/maven/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven/tree/maven-4.0.0-rc-4/api/maven-api-metadata"
        }
      ]
    },
    "properties" : [
      {
        "name" : "maven.goal",
        "value" : "makeBom"
      },
      {
        "name" : "maven.scopes",
        "value" : "compile,provided,runtime,system"
      },
      {
        "name" : "cdx:reproducible",
        "value" : "enabled"
      }
    ]
  },
  "components" : [
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven/maven-api-annotations@4.0.0-rc-4?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven",
      "name" : "maven-api-annotations",
      "version" : "4.0.0-rc-4",
      "description" : "Maven 4 API - Java meta annotations.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "29603c6fbed96392c25be6d5e7e76e69"
        },
        {
          "alg" : "SHA-1",
          "content" : "6f21e6b98fb81349f5312ad128b3ec349aa6aa13"
        },
        {
          "alg" : "SHA-256",
          "content" : "2937b37475450e47e1d9175733d6a1af8aa816889c2165e1a1bfc80461c66908"
        },
        {
          "alg" : "SHA-512",
          "content" : "028c9560e72a62416db6b8b9ac68043888db4dbc7ae053b57fce4a7150078b67132a01ed7093eb180696d8a6cf4dc20dab8995c3d220a084822282070ab0396b"
        },
        {
          "alg" : "SHA-384",
          "content" : "9b4975a73e35711765c4587958efbeaaa150492754c7d407a2e35b47f9a66381c68bef89cf621399a7596e732c9d18d5"
        },
        {
          "alg" : "SHA3-384",
          "content" : "e824161d3d10f785297b22972e93ac52b91baa840cf783e50f333cd173fb51f1fa82fe3ef53154bf96b423fb1a4973e9"
        },
        {
          "alg" : "SHA3-256",
          "content" : "f78e4ba654e114ab96f5b549727c150200cb1e170f71771c3cc804fd2734e633"
        },
        {
          "alg" : "SHA3-512",
          "content" : "02ec6045524d078581f96cab1e3495398de6d57712afed280bf3e9b194fb0a7aaa93655a4de51c6b902aabf337826783856e8771ecb11a79d9259009d44624e1"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven/maven-api-annotations@4.0.0-rc-4?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/ref/4.0.0-rc-4/api/maven-api-annotations/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/"
        },
        {
          "type" : "distribution",
          "url" : "https://maven.apache.org/download.html"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/apache/maven/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven/tree/maven-4.0.0-rc-4/api/maven-api-annotations"
        }
      ]
    }
  ],
  "dependencies" : [
    {
      "ref" : "pkg:maven/org.apache.maven/maven-api-metadata@4.0.0-rc-4?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.maven/maven-api-annotations@4.0.0-rc-4?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven/maven-api-annotations@4.0.0-rc-4?type=jar",
      "dependsOn" : [ ]
    }
  ]
}