<?xml version="1.0" encoding="UTF-8"?>
<bom version="1" xmlns="http://cyclonedx.org/schema/bom/1.4">
  <metadata>
    <tools>
      <tool>
        <vendor>OWASP Foundation</vendor>
        <name>CycloneDX Maven plugin</name>
        <version>2.7.10</version>
        <hashes>
          <hash alg="MD5">1cc7f6a0382f8bb2f758d6a6ea401d1b</hash>
          <hash alg="SHA-1">a4297947a1f2d7d453105db542651614bbd37f38</hash>
          <hash alg="SHA-256">bd0fdd8f2f2116eee5e715aeac1580f19eb7a10ec2b6f805b53567067658e872</hash>
          <hash alg="SHA-512">9cde8352a427e10b96cae01348fc7cfe5d4aa9cd0a5e5dd93b414ce3bb7d112993c3b3004e53af52567fbfa16de0704ec59a5556a635ad70571fd124ae389f39</hash>
          <hash alg="SHA-384">93d7bf5b5c735347edfbfbd66810273ca840f9a322b816d22d44c3d8e8255c09e86570bb23712aeb0cade0f478be5aeb</hash>
          <hash alg="SHA3-384">4467f16e9ca32190a6e49c65339eb28ee5e8c78f4e918fcf95128a4b7648898de56ccb43eacfad0c9391ef8cdb7d629a</hash>
          <hash alg="SHA3-256">ed2996c99b483e969221d5e9a40f562ea2ab85442d361d72a90e85266a3ed781</hash>
          <hash alg="SHA3-512">c8e6ea9ddc38edc77e284b3bf541663e84752bdc59ed1935799847a48a14ea2fa531b61008fefcba37d732a56702a11ac112437b9b80d18f4ecc8ef0ecfb32cf</hash>
        </hashes>
      </tool>
    </tools>
    <component type="library" bom-ref="pkg:maven/org.apache.maven/maven-xml-impl@4.0.0-alpha-10?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven</group>
      <name>maven-xml-impl</name>
      <version>4.0.0-alpha-10</version>
      <description>Provides the implementation classes for the Maven API XML</description>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven/maven-xml-impl@4.0.0-alpha-10?type=jar</purl>
      <externalReferences><reference type="website"><url>https://maven.apache.org/ref/4.0.0-alpha-10/maven-xml-impl/</url></reference><reference type="build-system"><url>https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/</url></reference><reference type="distribution"><url>https://maven.apache.org/download.html</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/MNG</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?users@maven.apache.org</url></reference><reference type="vcs"><url>https://github.com/apache/maven/tree/maven-4.0.0-alpha-10/maven-xml-impl</url></reference></externalReferences>
    </component>
    <properties>
      <property name="maven.goal">makeBom</property>
      <property name="maven.scopes">compile,provided,runtime,system</property>
      <property name="cdx:reproducible">enabled</property>
    </properties>
  </metadata>
  <components>
    <component type="library" bom-ref="pkg:maven/org.apache.maven/maven-api-xml@4.0.0-alpha-10?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven</group>
      <name>maven-api-xml</name>
      <version>4.0.0-alpha-10</version>
      <description>Maven 4 API - Immutable XML.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">4e5b755b727a5dbf8686440734f40e6c</hash>
        <hash alg="SHA-1">f7c50193c94ddcfc6464b0062b11d2d30a955a30</hash>
        <hash alg="SHA-256">5147df02225de81747b2598bafac61023ef24ab46fd895166cb798e26d7eea14</hash>
        <hash alg="SHA-512">c0e097a4cc20ed9cc74def852543d91fdbaa99cf5a1ecad0edd62c1d95a2502bd4195cf7030b37375a4134aad27b1f0344af66b1e2f39171ddf4c59cca2f0177</hash>
        <hash alg="SHA-384">078692abef34ce3475df3ec265d56996d25726d5b43daacbdbcc5f221e3d5649bc2d48f7d843ea719c7a63ad58805046</hash>
        <hash alg="SHA3-384">0c4ead971aaa4058a4e844a933512af8966eb0c4ab2bbebe8f764e93e9e247a632ebf907e78bf8f34320a5bf3a5fdead</hash>
        <hash alg="SHA3-256">1396e506848d47cdf3a41bf7a431aea8a5f334d54c3165c9d8d667f1d8b4f7e1</hash>
        <hash alg="SHA3-512">33c74706b77094b8592722954b86c54e88e3ee397e1f1f38ed085a267d04528632022b07679ac5e3dae36f05caac39448c31ae46a5dd2acd552129c56bc3d182</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven/maven-api-xml@4.0.0-alpha-10?type=jar</purl>
      <externalReferences><reference type="website"><url>https://maven.apache.org/ref/4.0.0-alpha-10/api/maven-api-xml/</url></reference><reference type="build-system"><url>https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/</url></reference><reference type="distribution"><url>https://maven.apache.org/download.html</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/MNG</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?users@maven.apache.org</url></reference><reference type="vcs"><url>https://github.com/apache/maven/tree/maven-4.0.0-alpha-10/api/maven-api-xml</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.maven/maven-api-meta@4.0.0-alpha-10?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven</group>
      <name>maven-api-meta</name>
      <version>4.0.0-alpha-10</version>
      <description>Maven 4 API - Java meta annotations.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">eaf36f06efc41de01a4072a00a8f3b56</hash>
        <hash alg="SHA-1">d2478befa726ddd25f7c819518d6e04e314339a0</hash>
        <hash alg="SHA-256">6d468ee721dbb1049ba7197b7b82b54f8ac2dd5186f79b8d1464263176acfef4</hash>
        <hash alg="SHA-512">e1da0e848460fbde65fc0603b75e9b21889f3bc10a7cce0c68adc6f671e557c334a24ebed933eac7be3a1888033de948097a66f7cf2bcce6ecf04cd2e1f059c2</hash>
        <hash alg="SHA-384">ffc03308edf0725f0a589f0b20ef23d1aa798a419624bede4a242707a512956090bf602df628d20321a66f601a2d2ee0</hash>
        <hash alg="SHA3-384">2963f49401530f49684a6498279e9f4acb020d11d666d2a077a44fd435608bf1dfa6e046defdefdd6edb3d2b90e89d0d</hash>
        <hash alg="SHA3-256">e074fa6fb95560f5da580e38d986a595e01023ac606decd4b7e0b765e4e687b8</hash>
        <hash alg="SHA3-512">96227870b19b593552f33d4f6eb405a6bebbad00ac2f0c525fe9ae692bdfb1c43870e641f9724693c3448e7ff26147fef5c41026010f3e522fc3dae6af631821</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven/maven-api-meta@4.0.0-alpha-10?type=jar</purl>
      <externalReferences><reference type="website"><url>https://maven.apache.org/ref/4.0.0-alpha-10/api/maven-api-meta/</url></reference><reference type="build-system"><url>https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/</url></reference><reference type="distribution"><url>https://maven.apache.org/download.html</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/MNG</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?users@maven.apache.org</url></reference><reference type="vcs"><url>https://github.com/apache/maven/tree/maven-4.0.0-alpha-10/api/maven-api-meta</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.fasterxml.woodstox/woodstox-core@6.5.1?type=jar">
      <publisher>FasterXML</publisher>
      <group>com.fasterxml.woodstox</group>
      <name>woodstox-core</name>
      <version>6.5.1</version>
      <description>Woodstox is a high-performance XML processor that implements Stax (JSR-173),
SAX2 and Stax2 APIs</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">961dd4b2afedf95293dfdd8adfc8f211</hash>
        <hash alg="SHA-1">c6e52e84fe959e69a243c83ec7d24cd889444ddf</hash>
        <hash alg="SHA-256">c928d60665c6415fb1c39775cf95cfc44f7f4580cf5ab01b1c380ebffd76887f</hash>
        <hash alg="SHA-512">d9b3cf6aaac85d8c349e7a24ad30f7e23b7765f1b7ce2fdf301bf2240b9c7ee184bdd938e58be6df9ac90e97e3b8c7b34f8fa9da27d1ed8de78765a8345b18f2</hash>
        <hash alg="SHA-384">d51e67aae26449a2cdffa90a08b09cc805b85da3e758011a0945fc8b0ee8c18e98c6f94f0c0cf46b7a49e7370073068c</hash>
        <hash alg="SHA3-384">2e731b74e4814647b1a320cd2f1b9f9914db1cb07510e69fb4dda33c6b1586fb2ee9e3f5af027c98dd0d33e2ed4b19de</hash>
        <hash alg="SHA3-256">f84ca4c9bb77abb6e61930c7debee48497b2febc30d48329c6b15546dd00371b</hash>
        <hash alg="SHA3-512">257aea7a23c4631eaaa942763e639d239660f29cfb7190f0b112abf6301a214fcc8e84b118ba73d92861a5f441bee479908a4831352ce2278d3d40ef51067894</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.fasterxml.woodstox/woodstox-core@6.5.1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/FasterXML/woodstox</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/FasterXML/woodstox/issues</url></reference><reference type="vcs"><url>https://github.com/FasterXML/woodstox</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.codehaus.woodstox/stax2-api@4.2.1?type=jar">
      <publisher>fasterxml.com</publisher>
      <group>org.codehaus.woodstox</group>
      <name>stax2-api</name>
      <version>4.2.1</version>
      <description>tax2 API is an extension to basic Stax 1.0 API that adds significant new functionality, such as full-featured bi-direction validation interface and high-performance Typed Access API.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">af8377bc7882332e22456616a9f164f6</hash>
        <hash alg="SHA-1">a3f7325c52240418c2ba257b103c3c550e140c83</hash>
        <hash alg="SHA-256">678567e48b51a42c65c699f266539ad3d676d4b1a5b0ad7d89ece8b9d5772579</hash>
        <hash alg="SHA-512">00efc5d4d17540fb180c5b20d456630a8b3262dff46676689ae916ba16f0fbd9b1a71c7badfb254faad6597f94fed1edb96f77c15f40178eaf4d8cd35cea5e8d</hash>
        <hash alg="SHA-384">97a6a9f0cc666776e4a4f08729c303d2a602ce5c25ee633cd6c54c72f12d11e9d43634ca6ca4ef7da5973a52030384da</hash>
        <hash alg="SHA3-384">683a1f110ab84333e7517dabe175b91d7ea2fbead2f9d02acf798c588a7508bc67580642afa8d57441bc56ce610d5b0f</hash>
        <hash alg="SHA3-256">5e8e54209fb6b580e928e703ef11645aff1a21dfd47cca2dc0e53d0befaef09c</hash>
        <hash alg="SHA3-512">d79338a481605c94e144c967cb7adbc6cfd06ee6a1182b5ebc8cd8ad3deedd707931e404aa197bc94d3b5a5d82a2e6dd6a2f6cc9dafc42ce3ad5061076b05199</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-4-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.codehaus.woodstox/stax2-api@4.2.1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://github.com/FasterXML/stax2-api</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/FasterXML/stax2-api/issues</url></reference><reference type="vcs"><url>http://github.com/FasterXML/stax2-api</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.9.0.M2?type=jar">
      <publisher>The Eclipse Foundation</publisher>
      <group>org.eclipse.sisu</group>
      <name>org.eclipse.sisu.plexus</name>
      <version>0.9.0.M2</version>
      <description>Plexus-JSR330 adapter; adds Plexus support to the Sisu-Inject container</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">98e320df2caac742b2ae33d938c69df8</hash>
        <hash alg="SHA-1">31456dd2293197bb282c03168f6767acca3dec96</hash>
        <hash alg="SHA-256">9500d303ce467e26d129dda8559c3f3a91277d41ab49d2c4b4a5779536a62fc1</hash>
        <hash alg="SHA-512">907bb88258ba9d9ae465db219de803074a677193f3a5a05cc36c7fcf413123f50742bab231d3eb783395448bb487934f85b12972efe36b77a32e235524bef4ec</hash>
        <hash alg="SHA-384">8eb92a65730622e93791bc4c6435113596473d69f3d8dd5348c42ea47c2a93017674fafb34f5d5a48ef210638d37640d</hash>
        <hash alg="SHA3-384">e97753b0913e87a430a7e6ce8467a2903670edbc87cba4282cd401137983b15cb9c4361c7504e139bb10119d9d7ddfde</hash>
        <hash alg="SHA3-256">883521331173ce90227bec1c5848ffc2f2a45e83eaa29d0376fb80e633c462c0</hash>
        <hash alg="SHA3-512">3429abb8aecac539bbf04bd6f6ba339c71d7156ec0861f27de86e1664312bb30dcd076a317dad0bbdefad89dbd03fbcf56003e16551c3320e2bf223424998c16</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-1.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.9.0.M2?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.eclipse.org/sisu/org.eclipse.sisu.plexus/</url></reference><reference type="build-system"><url>https://ci.eclipse.org/sisu/job/sisu.plexus/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/eclipse/sisu.plexus/issues</url></reference><reference type="mailing-list"><url>http://dev.eclipse.org/mhonarc/lists/sisu-dev/</url></reference><reference type="vcs"><url>https://github.com/eclipse/sisu.plexus/org.eclipse.sisu.plexus</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.codehaus.plexus/plexus-xml@4.0.1?type=jar">
      <publisher>Codehaus Plexus</publisher>
      <group>org.codehaus.plexus</group>
      <name>plexus-xml</name>
      <version>4.0.1</version>
      <description>A collection of various utility classes to ease working with XML.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">33b3cbfce10fbae18749358d9803fcc7</hash>
        <hash alg="SHA-1">736d992ca3f42181ae6ddf8d9d184105e4ebd751</hash>
        <hash alg="SHA-256">a5b13d1a8efb8e9240d9a32b7a7da87b5dfff563e7737f7005d334af861f1f62</hash>
        <hash alg="SHA-512">2c26eb899e5140aabee1d592b965a50ee34463d2a86ca388cfb94a5ae4f6514541a8ba880135122a9589566012537c47932687f8e854f4d66779a38c47856567</hash>
        <hash alg="SHA-384">d0af58c3d41930a2bd6a4c998e0b49682fe40632ab2dd700eac1ff41b2de4ce6e7ef03a7cb999d14a393fb5603f13b30</hash>
        <hash alg="SHA3-384">d755fb0bbd118738dcc6e80407ab762f4103e0b212d53de9431197a7330231a768e7d7b7137f02c45163fbb61f1c3188</hash>
        <hash alg="SHA3-256">28b0de82ff98f0479a497f129de1a9f2ad9b3ae5cd43f4db26794c2fd6945756</hash>
        <hash alg="SHA3-512">fb45f6d819422c4b2e7b40a5df4edb8b194080cb6ad6c7079a6f43543dc968b1219392e13f6bd950d1207d2d421cddb6cf77d5e6f3f0389512686e7dc81be265</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.codehaus.plexus/plexus-xml@4.0.1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://codehaus-plexus.github.io/plexus-xml/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/codehaus-plexus/plexus-xml/issues</url></reference><reference type="mailing-list"><url>https://groups.google.com/forum/#!forum/mojohaus-dev</url></reference><reference type="vcs"><url>https://github.com/codehaus-plexus/plexus-xml/tree/plexus-xml-4.0.1/</url></reference></externalReferences>
    </component>
  </components>
  <dependencies>
    <dependency ref="pkg:maven/org.apache.maven/maven-xml-impl@4.0.0-alpha-10?type=jar">
      <dependency ref="pkg:maven/org.apache.maven/maven-api-xml@4.0.0-alpha-10?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.woodstox/woodstox-core@6.5.1?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.9.0.M2?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-xml@4.0.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.maven/maven-api-xml@4.0.0-alpha-10?type=jar">
      <dependency ref="pkg:maven/org.apache.maven/maven-api-meta@4.0.0-alpha-10?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.maven/maven-api-meta@4.0.0-alpha-10?type=jar"/>
    <dependency ref="pkg:maven/com.fasterxml.woodstox/woodstox-core@6.5.1?type=jar">
      <dependency ref="pkg:maven/org.codehaus.woodstox/stax2-api@4.2.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.codehaus.woodstox/stax2-api@4.2.1?type=jar"/>
    <dependency ref="pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.9.0.M2?type=jar"/>
    <dependency ref="pkg:maven/org.codehaus.plexus/plexus-xml@4.0.1?type=jar"/>
  </dependencies>
</bom>
