<?xml version="1.0" encoding="UTF-8"?>
<bom serialNumber="urn:uuid:89dc7db7-8fc9-30e9-964c-8f8eb2fcbdf7" version="1" xmlns="http://cyclonedx.org/schema/bom/1.6">
  <metadata>
    <lifecycles>
      <lifecycle>
        <phase>build</phase>
      </lifecycle>
    </lifecycles>
    <tools>
      <components>
        <component type="library">
          <author>OWASP Foundation</author>
          <group>org.cyclonedx</group>
          <name>cyclonedx-maven-plugin</name>
          <version>2.9.1</version>
          <description>CycloneDX Maven plugin</description>
          <hashes>
            <hash alg="MD5">9c7a565cf28cce58557d0c621c5ea4b1</hash>
            <hash alg="SHA-1">be882d5a22050bfa9d19090b1420c188617d0e1c</hash>
            <hash alg="SHA-256">698e0f37184a5b28c245c4065fd036dfce253b52f82fbb7113d81d36326cc249</hash>
            <hash alg="SHA-512">c0f0b11026858166f872a2eb54719492e5cecaa0bc9cd6b30b3ecb4a174eed220f4a1b5829d18d6734128e778d3cb3db7ffed177c92866133129cb29081814a0</hash>
            <hash alg="SHA-384">d80964707dfe5caca8c70521d5066f57589304c0a657e6fbc7c0614ea0fc7b3b3dbe7778361eee0f54ba111e9cb0ffcb</hash>
            <hash alg="SHA3-384">80bc3a275d9514bc457461ff52a72add8c7ecbbc01d8912efce57139016c544ee776981851be0a58fa977ab4221f703f</hash>
            <hash alg="SHA3-256">142317d6f245390f4fd2d0c100b16281b8dfc5c0c2cff86943bdcc97039cb699</hash>
            <hash alg="SHA3-512">af0fb9137c90b65d1a07f72e4d51ae509956cdb8800f35c961b037cdda1fe4a14ce3b496cef71ba85f1621affcfe29cd42704ae4191ff0b090a9602087c8997b</hash>
          </hashes>
        </component>
      </components>
    </tools>
    <component type="library" bom-ref="pkg:maven/org.apache.maven.resolver/maven-resolver-transport-file@2.0.13?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven.resolver</group>
      <name>maven-resolver-transport-file</name>
      <version>2.0.13</version>
      <description>A transport implementation for repositories using file:// URLs.</description>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven.resolver/maven-resolver-transport-file@2.0.13?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://maven.apache.org/resolver/maven-resolver-transport-file/</url>
        </reference>
        <reference type="build-system">
          <url>https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-resolver/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/apache/maven-resolver/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://lists.apache.org/list.html?users@maven.apache.org</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/maven-resolver/tree/maven-resolver-2.0.13/maven-resolver-transport-file</url>
        </reference>
      </externalReferences>
    </component>
    <properties>
      <property name="maven.goal">makeBom</property>
      <property name="maven.scopes">compile,provided,runtime,system</property>
      <property name="cdx:reproducible">enabled</property>
    </properties>
  </metadata>
  <components>
    <component type="library" bom-ref="pkg:maven/org.apache.maven.resolver/maven-resolver-api@2.0.13?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven.resolver</group>
      <name>maven-resolver-api</name>
      <version>2.0.13</version>
      <description>The application programming interface for the repository system.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">5bf072d04574a1e1a33df16af96c3033</hash>
        <hash alg="SHA-1">9add7d4a7177ec7777236fffc348b90660f22164</hash>
        <hash alg="SHA-256">08839d804cb0083c32003919b6d40f572b2e1b778cd7f8a500fc00c011d129fe</hash>
        <hash alg="SHA-512">c6603ac2076f5ca9a16536f3ecc0640566f9e14b393baac9a212fab8d1c7bb59ceaccc2a18a3de7107de37b758f54c703aa4c6b046f001b2fcf4be991bcec666</hash>
        <hash alg="SHA-384">9a0c62260c12af4371e20061f523d25e23040e3f3fa5a27916897ae2c2bf12ae610b4f4e7b9c6a0080cb0b3d6af68093</hash>
        <hash alg="SHA3-384">5f6a0d4d842e18d10b756d5a3160ebec5b8ec1c3e33e62b9dde52fe07961da8e67c53ff2d065001d413214beeb3fb543</hash>
        <hash alg="SHA3-256">eb9e94662c974614e5f7927ae619c76469dfcabcf1aefff6cba2a95684f57029</hash>
        <hash alg="SHA3-512">965f23fe970c3c5a7d444983a45dc0bc66cdae9f3e1332799a6a2d2f2d72d0971ea9ad038e1818fd65fcd1b6e1a88baa030d577715085b6d2c2c0cc6e205fd88</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven.resolver/maven-resolver-api@2.0.13?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://maven.apache.org/resolver/maven-resolver-api/</url>
        </reference>
        <reference type="build-system">
          <url>https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-resolver/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/apache/maven-resolver/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://lists.apache.org/list.html?users@maven.apache.org</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/maven-resolver/tree/maven-resolver-2.0.13/maven-resolver-api</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.maven.resolver/maven-resolver-spi@2.0.13?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven.resolver</group>
      <name>maven-resolver-spi</name>
      <version>2.0.13</version>
      <description>The service provider interface for repository system implementations and repository connectors.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">00d1393fc05bff257b76668db1c98ee9</hash>
        <hash alg="SHA-1">7c0498f3dcfd37d05c228b9322d59f49145631ca</hash>
        <hash alg="SHA-256">a64e3eeecb238960b9129b43c78680ec22fc3136d2bbdae73108e369ddf2c7e1</hash>
        <hash alg="SHA-512">3c75f99621be3d1dc3bfe56b588e831a59404e79d5fd1f0bf356513efccb7c655267163087aad961186391f9858d1154ceafafb082c96de3fcd2d2cdf50a2f4d</hash>
        <hash alg="SHA-384">df5a889dabd090a86f5669c77724d47c5e69f9f1abda158605db1a8db47bc8d6ec1ac8467e0f183a7e99d8af230adcff</hash>
        <hash alg="SHA3-384">c4c488345804c907e2e7185944cbc40fb982df9bb0cf8bfb1392ed111a28160b6628eb0116708f81c668bd60207eb9f7</hash>
        <hash alg="SHA3-256">c77b82aae71bded03fb3e69c844492e8fd5f735347c050f282bc29a96ce5af44</hash>
        <hash alg="SHA3-512">f6c4a995a4499bdfb034f587064d7168e6bc15df317daef190ff592f91f07fc8792f38f15578d42e4277461d7bf2c66a062aac0aa2569e31ddc507e128e5df93</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven.resolver/maven-resolver-spi@2.0.13?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://maven.apache.org/resolver/maven-resolver-spi/</url>
        </reference>
        <reference type="build-system">
          <url>https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-resolver/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/apache/maven-resolver/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://lists.apache.org/list.html?users@maven.apache.org</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/maven-resolver/tree/maven-resolver-2.0.13/maven-resolver-spi</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.code.gson/gson@2.13.2?type=jar">
      <group>com.google.code.gson</group>
      <name>gson</name>
      <version>2.13.2</version>
      <description>Gson JSON library</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">a2c47e14ce5e956105458fe455f5d542</hash>
        <hash alg="SHA-1">48b8230771e573b54ce6e867a9001e75977fe78e</hash>
        <hash alg="SHA-256">dd0ce1b55a3ed2080cb70f9c655850cda86c206862310009dcb5e5c95265a5e0</hash>
        <hash alg="SHA-512">8974a052656d2e5ec968b6bac2edf51413ffc62040fdc65f14f00597e738ab544d22487f8579ba90618b5a7f94ef33773510fac67b408fee6ed274b38f3d9947</hash>
        <hash alg="SHA-384">98e8afe5b23c43b84e7a57e0e27f683a182fcf97ee3eeb6a1311582f7fecd846c806ffb092b620088dc03d256d8eaf27</hash>
        <hash alg="SHA3-384">d61d6b1cf6997c75287f454e536f855db8404e5fb9d0b8faa4dcc1e7a60ffefc05c2f92f3514e091808a8677b29f3619</hash>
        <hash alg="SHA3-256">1c051cfe5e630b35d003f96e135de7c5d5cab145b6e1159143570cb246426a0d</hash>
        <hash alg="SHA3-512">55ddee7f6c1659ffa82e5c308a0181b459cfeb3442f1f9868ff7e9a3c83376bd2ad527b16d5131df442ffd03d06c35dbd64458df6b02a111c1654f01db381ba5</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.code.gson/gson@2.13.2?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/google/gson</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/google/gson/issues</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/google/gson/</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.errorprone/error_prone_annotations@2.41.0?type=jar">
      <publisher>Google LLC</publisher>
      <group>com.google.errorprone</group>
      <name>error_prone_annotations</name>
      <version>2.41.0</version>
      <description>Error Prone is a static analysis tool for Java that catches common programming mistakes at compile-time.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">75e3b25da8b8a2136463c4674f5e49bf</hash>
        <hash alg="SHA-1">4381275efdef6ddfae38f002c31e84cd001c97f0</hash>
        <hash alg="SHA-256">a56e782b5b50811ac204073a355a21d915a2107fce13ec711331ad036f660fcc</hash>
        <hash alg="SHA-512">e2eb4bf9f36f95a4d4c5ea344db5cd90a456e63bef8e52932b8f6f4ecfdd59cb2f6c2ce9e67b0070c82177e42885688b95afef591b16001f789b378f18afdf30</hash>
        <hash alg="SHA-384">43700b378624aa37197ef03a6b5ea40b5fbb6c0aa667eadf810ad36f0707dffaf3ea23471f2553327c3f5644cc875ee7</hash>
        <hash alg="SHA3-384">8bf3293cf4b72c9a999948f8812190636ef3b0c35bab8dbf9a54c263eeab2a3b3d0774fdcab52c6d114551ff74a8aea2</hash>
        <hash alg="SHA3-256">2ca1a59f4fdc37a3c83501542c63842fa4fe40c06f69a59a2a072e4af442a16a</hash>
        <hash alg="SHA3-512">6d1f419996b15e5a2bd9b268d166046e38fe9cc6c58fe56aaacbe71b95e3db8c8fe1d226e7f549ea227956feaf3087706bdfa79930fe432298bba9ec06c26a90</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.errorprone/error_prone_annotations@2.41.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://errorprone.info/error_prone_annotations</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/google/error-prone/error_prone_annotations</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar">
      <publisher>QOS.ch</publisher>
      <group>org.slf4j</group>
      <name>slf4j-api</name>
      <version>2.0.17</version>
      <description>The slf4j API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">b6480d114a23683498ac3f746f959d2f</hash>
        <hash alg="SHA-1">d9e58ac9c7779ba3bf8142aff6c830617a7fe60f</hash>
        <hash alg="SHA-256">7b751d952061954d5abfed7181c1f645d336091b679891591d63329c622eb832</hash>
        <hash alg="SHA-512">9a3e79db6666a6096a3021bb2e1d918f30f589d8de51d6b600f8ebd92515a510ae2d8f87919cc2dfa8365d64f10194cac8dfa0fb950160eef0e9da06f6caaeb9</hash>
        <hash alg="SHA-384">6ea24f814a9b6ece428cfd0535e2f3b8927005745ef61006b50fdb5a90126ee5ea05650155382b3b755c5bce38ef3944</hash>
        <hash alg="SHA3-384">9b1015052f0ec43f9be09764e131834157599611cb52f6fe591c4ac6a8ab4817518f2a4b8871e5e738c8678e93af5557</hash>
        <hash alg="SHA3-256">00559b4f4066b4917ba4fe2a6f23111eaeada321112d030910d218ced9084b5e</hash>
        <hash alg="SHA3-512">9579c2f7e7516e177c2d493ccc9eb8150978cf19f6f09b28d116f6935239fd56dc6af2b62b3336f79b0b462445550cd1fb5377a07001a6f44aaab6a32fa2fa47</hash>
      </hashes>
      <licenses>
        <license>
          <id>MIT</id>
          <url>https://opensource.org/license/mit/</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://www.slf4j.org</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/qos-ch/slf4j/slf4j-parent/slf4j-api</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/javax.inject/javax.inject@1?type=jar">
      <group>javax.inject</group>
      <name>javax.inject</name>
      <version>1</version>
      <description>The javax.inject API</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">289075e48b909e9e74e6c915b3631d2e</hash>
        <hash alg="SHA-1">6975da39a7040257bd51d21a231b76c915872d38</hash>
        <hash alg="SHA-256">91c77044a50c481636c32d916fd89c9118a72195390452c81065080f957de7ff</hash>
        <hash alg="SHA-512">e126b7ccf3e42fd1984a0beef1004a7269a337c202e59e04e8e2af714280d2f2d8d2ba5e6f59481b8dcd34aaf35c966a688d0b48ec7e96f102c274dc0d3b381e</hash>
        <hash alg="SHA-384">ac04c9f03ccbe35a25deb8b50280a0ca01dbe6aff0dd795d55af6112bfe3cd5817eb82f32fb18378d86cd64b07597190</hash>
        <hash alg="SHA3-384">fca090ecb1edeacb9fe865dc515cd1d109b323cd742d4a9733ff199a96ee96e0db4f924079520b9c189ef750f255475d</hash>
        <hash alg="SHA3-256">5b0054e39e522de0e0ffc4034d12f72270291fb24d94d5ffc9c4d69c25035fc6</hash>
        <hash alg="SHA3-512">fb290f5a70b1efc1dff12f40a0b2d7b94019f66da42e78010c0b8e61f222c4f267b67e356a9e9c346eb801e5515e36243888f280c5cb95c2dd69016a30cadeb9</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/javax.inject/javax.inject@1?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://code.google.com/p/atinject/</url>
        </reference>
        <reference type="vcs">
          <url>http://code.google.com/p/atinject/source/checkout</url>
        </reference>
      </externalReferences>
    </component>
  </components>
  <dependencies>
    <dependency ref="pkg:maven/org.apache.maven.resolver/maven-resolver-transport-file@2.0.13?type=jar">
      <dependency ref="pkg:maven/org.apache.maven.resolver/maven-resolver-api@2.0.13?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven.resolver/maven-resolver-spi@2.0.13?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar"/>
      <dependency ref="pkg:maven/javax.inject/javax.inject@1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.maven.resolver/maven-resolver-api@2.0.13?type=jar"/>
    <dependency ref="pkg:maven/org.apache.maven.resolver/maven-resolver-spi@2.0.13?type=jar">
      <dependency ref="pkg:maven/org.apache.maven.resolver/maven-resolver-api@2.0.13?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.gson/gson@2.13.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.google.code.gson/gson@2.13.2?type=jar">
      <dependency ref="pkg:maven/com.google.errorprone/error_prone_annotations@2.41.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.google.errorprone/error_prone_annotations@2.41.0?type=jar"/>
    <dependency ref="pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar"/>
    <dependency ref="pkg:maven/javax.inject/javax.inject@1?type=jar"/>
  </dependencies>
</bom>
