<?xml version="1.0" encoding="UTF-8"?>
<bom serialNumber="urn:uuid:e87f6495-6cdf-34ca-89a7-d32c0b12790e" version="1" xmlns="http://cyclonedx.org/schema/bom/1.6">
  <metadata>
    <lifecycles>
      <lifecycle>
        <phase>build</phase>
      </lifecycle>
    </lifecycles>
    <tools>
      <components>
        <component type="library">
          <author>OWASP Foundation</author>
          <group>org.cyclonedx</group>
          <name>cyclonedx-maven-plugin</name>
          <version>2.9.1</version>
          <description>CycloneDX Maven plugin</description>
          <hashes>
            <hash alg="MD5">9c7a565cf28cce58557d0c621c5ea4b1</hash>
            <hash alg="SHA-1">be882d5a22050bfa9d19090b1420c188617d0e1c</hash>
            <hash alg="SHA-256">698e0f37184a5b28c245c4065fd036dfce253b52f82fbb7113d81d36326cc249</hash>
            <hash alg="SHA-512">c0f0b11026858166f872a2eb54719492e5cecaa0bc9cd6b30b3ecb4a174eed220f4a1b5829d18d6734128e778d3cb3db7ffed177c92866133129cb29081814a0</hash>
            <hash alg="SHA-384">d80964707dfe5caca8c70521d5066f57589304c0a657e6fbc7c0614ea0fc7b3b3dbe7778361eee0f54ba111e9cb0ffcb</hash>
            <hash alg="SHA3-384">80bc3a275d9514bc457461ff52a72add8c7ecbbc01d8912efce57139016c544ee776981851be0a58fa977ab4221f703f</hash>
            <hash alg="SHA3-256">142317d6f245390f4fd2d0c100b16281b8dfc5c0c2cff86943bdcc97039cb699</hash>
            <hash alg="SHA3-512">af0fb9137c90b65d1a07f72e4d51ae509956cdb8800f35c961b037cdda1fe4a14ce3b496cef71ba85f1621affcfe29cd42704ae4191ff0b090a9602087c8997b</hash>
          </hashes>
        </component>
      </components>
    </tools>
    <component type="library" bom-ref="pkg:maven/org.apache.maven.resolver/maven-resolver-spi@2.0.13?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven.resolver</group>
      <name>maven-resolver-spi</name>
      <version>2.0.13</version>
      <description>The service provider interface for repository system implementations and repository connectors.</description>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven.resolver/maven-resolver-spi@2.0.13?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://maven.apache.org/resolver/maven-resolver-spi/</url>
        </reference>
        <reference type="build-system">
          <url>https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-resolver/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/apache/maven-resolver/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://lists.apache.org/list.html?users@maven.apache.org</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/maven-resolver/tree/maven-resolver-2.0.13/maven-resolver-spi</url>
        </reference>
      </externalReferences>
    </component>
    <properties>
      <property name="maven.goal">makeBom</property>
      <property name="maven.scopes">compile,provided,runtime,system</property>
      <property name="cdx:reproducible">enabled</property>
    </properties>
  </metadata>
  <components>
    <component type="library" bom-ref="pkg:maven/org.apache.maven.resolver/maven-resolver-api@2.0.13?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven.resolver</group>
      <name>maven-resolver-api</name>
      <version>2.0.13</version>
      <description>The application programming interface for the repository system.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">5bf072d04574a1e1a33df16af96c3033</hash>
        <hash alg="SHA-1">9add7d4a7177ec7777236fffc348b90660f22164</hash>
        <hash alg="SHA-256">08839d804cb0083c32003919b6d40f572b2e1b778cd7f8a500fc00c011d129fe</hash>
        <hash alg="SHA-512">c6603ac2076f5ca9a16536f3ecc0640566f9e14b393baac9a212fab8d1c7bb59ceaccc2a18a3de7107de37b758f54c703aa4c6b046f001b2fcf4be991bcec666</hash>
        <hash alg="SHA-384">9a0c62260c12af4371e20061f523d25e23040e3f3fa5a27916897ae2c2bf12ae610b4f4e7b9c6a0080cb0b3d6af68093</hash>
        <hash alg="SHA3-384">5f6a0d4d842e18d10b756d5a3160ebec5b8ec1c3e33e62b9dde52fe07961da8e67c53ff2d065001d413214beeb3fb543</hash>
        <hash alg="SHA3-256">eb9e94662c974614e5f7927ae619c76469dfcabcf1aefff6cba2a95684f57029</hash>
        <hash alg="SHA3-512">965f23fe970c3c5a7d444983a45dc0bc66cdae9f3e1332799a6a2d2f2d72d0971ea9ad038e1818fd65fcd1b6e1a88baa030d577715085b6d2c2c0cc6e205fd88</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven.resolver/maven-resolver-api@2.0.13?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://maven.apache.org/resolver/maven-resolver-api/</url>
        </reference>
        <reference type="build-system">
          <url>https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-resolver/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/apache/maven-resolver/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://lists.apache.org/list.html?users@maven.apache.org</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/maven-resolver/tree/maven-resolver-2.0.13/maven-resolver-api</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.code.gson/gson@2.13.2?type=jar">
      <group>com.google.code.gson</group>
      <name>gson</name>
      <version>2.13.2</version>
      <description>Gson JSON library</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">a2c47e14ce5e956105458fe455f5d542</hash>
        <hash alg="SHA-1">48b8230771e573b54ce6e867a9001e75977fe78e</hash>
        <hash alg="SHA-256">dd0ce1b55a3ed2080cb70f9c655850cda86c206862310009dcb5e5c95265a5e0</hash>
        <hash alg="SHA-512">8974a052656d2e5ec968b6bac2edf51413ffc62040fdc65f14f00597e738ab544d22487f8579ba90618b5a7f94ef33773510fac67b408fee6ed274b38f3d9947</hash>
        <hash alg="SHA-384">98e8afe5b23c43b84e7a57e0e27f683a182fcf97ee3eeb6a1311582f7fecd846c806ffb092b620088dc03d256d8eaf27</hash>
        <hash alg="SHA3-384">d61d6b1cf6997c75287f454e536f855db8404e5fb9d0b8faa4dcc1e7a60ffefc05c2f92f3514e091808a8677b29f3619</hash>
        <hash alg="SHA3-256">1c051cfe5e630b35d003f96e135de7c5d5cab145b6e1159143570cb246426a0d</hash>
        <hash alg="SHA3-512">55ddee7f6c1659ffa82e5c308a0181b459cfeb3442f1f9868ff7e9a3c83376bd2ad527b16d5131df442ffd03d06c35dbd64458df6b02a111c1654f01db381ba5</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.code.gson/gson@2.13.2?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/google/gson</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/google/gson/issues</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/google/gson/</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.errorprone/error_prone_annotations@2.41.0?type=jar">
      <publisher>Google LLC</publisher>
      <group>com.google.errorprone</group>
      <name>error_prone_annotations</name>
      <version>2.41.0</version>
      <description>Error Prone is a static analysis tool for Java that catches common programming mistakes at compile-time.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">75e3b25da8b8a2136463c4674f5e49bf</hash>
        <hash alg="SHA-1">4381275efdef6ddfae38f002c31e84cd001c97f0</hash>
        <hash alg="SHA-256">a56e782b5b50811ac204073a355a21d915a2107fce13ec711331ad036f660fcc</hash>
        <hash alg="SHA-512">e2eb4bf9f36f95a4d4c5ea344db5cd90a456e63bef8e52932b8f6f4ecfdd59cb2f6c2ce9e67b0070c82177e42885688b95afef591b16001f789b378f18afdf30</hash>
        <hash alg="SHA-384">43700b378624aa37197ef03a6b5ea40b5fbb6c0aa667eadf810ad36f0707dffaf3ea23471f2553327c3f5644cc875ee7</hash>
        <hash alg="SHA3-384">8bf3293cf4b72c9a999948f8812190636ef3b0c35bab8dbf9a54c263eeab2a3b3d0774fdcab52c6d114551ff74a8aea2</hash>
        <hash alg="SHA3-256">2ca1a59f4fdc37a3c83501542c63842fa4fe40c06f69a59a2a072e4af442a16a</hash>
        <hash alg="SHA3-512">6d1f419996b15e5a2bd9b268d166046e38fe9cc6c58fe56aaacbe71b95e3db8c8fe1d226e7f549ea227956feaf3087706bdfa79930fe432298bba9ec06c26a90</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.errorprone/error_prone_annotations@2.41.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://errorprone.info/error_prone_annotations</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/google/error-prone/error_prone_annotations</url>
        </reference>
      </externalReferences>
    </component>
  </components>
  <dependencies>
    <dependency ref="pkg:maven/org.apache.maven.resolver/maven-resolver-spi@2.0.13?type=jar">
      <dependency ref="pkg:maven/org.apache.maven.resolver/maven-resolver-api@2.0.13?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.gson/gson@2.13.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.maven.resolver/maven-resolver-api@2.0.13?type=jar"/>
    <dependency ref="pkg:maven/com.google.code.gson/gson@2.13.2?type=jar">
      <dependency ref="pkg:maven/com.google.errorprone/error_prone_annotations@2.41.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.google.errorprone/error_prone_annotations@2.41.0?type=jar"/>
  </dependencies>
</bom>
