<?xml version="1.0" encoding="UTF-8"?>
<bom version="1" xmlns="http://cyclonedx.org/schema/bom/1.4">
  <metadata>
    <tools>
      <tool>
        <vendor>OWASP Foundation</vendor>
        <name>CycloneDX Maven plugin</name>
        <version>2.7.10</version>
        <hashes>
          <hash alg="MD5">1cc7f6a0382f8bb2f758d6a6ea401d1b</hash>
          <hash alg="SHA-1">a4297947a1f2d7d453105db542651614bbd37f38</hash>
          <hash alg="SHA-256">bd0fdd8f2f2116eee5e715aeac1580f19eb7a10ec2b6f805b53567067658e872</hash>
          <hash alg="SHA-512">9cde8352a427e10b96cae01348fc7cfe5d4aa9cd0a5e5dd93b414ce3bb7d112993c3b3004e53af52567fbfa16de0704ec59a5556a635ad70571fd124ae389f39</hash>
          <hash alg="SHA-384">93d7bf5b5c735347edfbfbd66810273ca840f9a322b816d22d44c3d8e8255c09e86570bb23712aeb0cade0f478be5aeb</hash>
        </hashes>
      </tool>
    </tools>
    <component type="library" bom-ref="pkg:maven/org.apache.maven.scm/maven-scm-provider-gitexe@2.1.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven.scm</group>
      <name>maven-scm-provider-gitexe</name>
      <version>2.1.0</version>
      <description>Executable implementation for SCM Git Provider.</description>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven.scm/maven-scm-provider-gitexe@2.1.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://maven.apache.org/scm/maven-scm-providers/maven-scm-providers-git/maven-scm-provider-gitexe/</url></reference><reference type="build-system"><url>https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-scm/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/SCM</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/maven-dev</url></reference><reference type="vcs"><url>https://github.com/apache/maven-scm/tree/maven-scm-2.1.0/maven-scm-providers/maven-scm-providers-git/maven-scm-provider-gitexe</url></reference></externalReferences>
    </component>
    <properties>
      <property name="maven.goal">makeBom</property>
      <property name="maven.scopes">compile,provided,runtime,system</property>
      <property name="cdx:reproducible">enabled</property>
    </properties>
  </metadata>
  <components>
    <component type="library" bom-ref="pkg:maven/javax.inject/javax.inject@1?type=jar">
      <group>javax.inject</group>
      <name>javax.inject</name>
      <version>1</version>
      <description>The javax.inject API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">289075e48b909e9e74e6c915b3631d2e</hash>
        <hash alg="SHA-1">6975da39a7040257bd51d21a231b76c915872d38</hash>
        <hash alg="SHA-256">91c77044a50c481636c32d916fd89c9118a72195390452c81065080f957de7ff</hash>
        <hash alg="SHA-512">e126b7ccf3e42fd1984a0beef1004a7269a337c202e59e04e8e2af714280d2f2d8d2ba5e6f59481b8dcd34aaf35c966a688d0b48ec7e96f102c274dc0d3b381e</hash>
        <hash alg="SHA-384">ac04c9f03ccbe35a25deb8b50280a0ca01dbe6aff0dd795d55af6112bfe3cd5817eb82f32fb18378d86cd64b07597190</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/javax.inject/javax.inject@1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://code.google.com/p/atinject/</url></reference><reference type="vcs"><url>http://code.google.com/p/atinject/source/checkout</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar">
      <publisher>QOS.ch</publisher>
      <group>org.slf4j</group>
      <name>slf4j-api</name>
      <version>1.7.36</version>
      <description>The slf4j API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">872da51f5de7f3923da4de871d57fd85</hash>
        <hash alg="SHA-1">6c62681a2f655b49963a5983b8b0950a6120ae14</hash>
        <hash alg="SHA-256">d3ef575e3e4979678dc01bf1dcce51021493b4d11fb7f1be8ad982877c16a1c0</hash>
        <hash alg="SHA-512">f9b033fc019a44f98b16048da7e2b59edd4a6a527ba60e358f65ab88e0afae03a9340f1b3e8a543d49fa542290f499c5594259affa1ff3e6e7bf3b428d4c610b</hash>
        <hash alg="SHA-384">2b14ad035877087157e379d3277dcdcd79e58d6bdb147c47d29e377d75ce53ad42cafbf22f5fb7827c7e946ff4876b9a</hash>
      </hashes>
      <licenses>
        <license>
          <id>MIT</id>
          <url>https://opensource.org/licenses/MIT</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.slf4j.org</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/qos-ch/slf4j/slf4j-api</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-io/commons-io@2.16.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>commons-io</group>
      <name>commons-io</name>
      <version>2.16.1</version>
      <description>The Apache Commons IO library contains utility classes, stream implementations, file filters,
file comparators, endian transformation classes, and much more.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">ed8191a5a217940140001b0acfed18d9</hash>
        <hash alg="SHA-1">377d592e740dc77124e0901291dbfaa6810a200e</hash>
        <hash alg="SHA-256">f41f7baacd716896447ace9758621f62c1c6b0a91d89acee488da26fc477c84f</hash>
        <hash alg="SHA-512">97eab31b073c5c57c8bcfaa2fec7b481a15a9a1f9ed864dfdc63b57f062b230557caa734c3133aca1165facb588c58db0185c07832241d70159e87a4bcf48008</hash>
        <hash alg="SHA-384">bd78e2eb3d005046d1329557d3a77529e98384d4d87940374eef432d73d5a06ef20fb7b0c44389de64496fe134dcf199</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/commons-io/commons-io@2.16.1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://commons.apache.org/proper/commons-io/</url></reference><reference type="build-system"><url>https://github.com/apache/commons-parent/actions</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/IO</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=commons-io.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-text@1.11.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.commons</group>
      <name>commons-text</name>
      <version>1.11.0</version>
      <description>Apache Commons Text is a library focused on algorithms working on strings.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">ebfec4f77cc595c518d655f7e68346be</hash>
        <hash alg="SHA-1">2bb044b7717ec2eccaf9ea7769c1509054b50e9a</hash>
        <hash alg="SHA-256">2acf30a070b19163d5a480eae411a281341e870020e3534c6d5d4c8472739e30</hash>
        <hash alg="SHA-512">486fdff6253c0e837fd838f75f1737176987bd12192c955d98a4aebf6d8e1b14413b5269d53b150ce1536a70f59367ae54c1371a60f53b6f0ed5bba1b9eb6ee4</hash>
        <hash alg="SHA-384">65bfca9b4f21565689cadfa15bb565ca3f9823316303bfc57a75f4daa5a2a35daf70f373fd08e9692efac2fb013d90b7</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.commons/commons-text@1.11.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://commons.apache.org/proper/commons-text</url></reference><reference type="build-system"><url>https://github.com/apache/commons-parent/actions</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/TEXT</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=commons-text.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-lang3@3.13.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.commons</group>
      <name>commons-lang3</name>
      <version>3.13.0</version>
      <description>Apache Commons Lang, a package of Java utility classes for the
  classes that are in java.lang's hierarchy, or are considered to be so
  standard as to justify existence in java.lang.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">3435b913691a5c1b173485a49850b1a8</hash>
        <hash alg="SHA-1">b7263237aa89c1f99b327197c41d0669707a462e</hash>
        <hash alg="SHA-256">82f528cf718c7a3c2f30fc5bc784e3c6a0a10b17605dadb9e16c82ede11e6064</hash>
        <hash alg="SHA-512">9cce41fd8bb2a24bcf8e75898190730d62b656af0d1a199202cd6cc848956b8cce4840ee616fb559c254fdff0bd09def9e65de6940a65bc7a07a386cec2bec0b</hash>
        <hash alg="SHA-384">cb663314025f3c2da314c0880e6928f5567cc448ded5deabd5cece5695e6fd0d4a84349fc7ee9638c732204dc3b26519</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.commons/commons-lang3@3.13.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://commons.apache.org/proper/commons-lang/</url></reference><reference type="build-system"><url>https://github.com/apache/commons-parent/actions</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/LANG</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=commons-lang.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.codehaus.plexus/plexus-utils@4.0.0?type=jar">
      <publisher>Codehaus Plexus</publisher>
      <group>org.codehaus.plexus</group>
      <name>plexus-utils</name>
      <version>4.0.0</version>
      <description>A collection of various utility classes to ease working with strings, files, command lines and
    more.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">16481d9d3af602d73a6355e79d2de889</hash>
        <hash alg="SHA-1">ff00a04ba971655ed10e9fb93bce0ed3014e9477</hash>
        <hash alg="SHA-256">270cd703b48c6e5c8c691f1875f22d62d22cfe072c73ae2f5814d83d68c1da0b</hash>
        <hash alg="SHA-512">1c4dde3e36c37c4b3b3860b54848fc5fbb80f536d2efe095a06629aa782044aeb693adeda3106ac8c773069e766f3def616990c0444597d20c0bc9f1d7348bd1</hash>
        <hash alg="SHA-384">5f855b2f6b40c05d9ed6b7b7a0c79d808c69f0fae0bb5d2ce5840c74775831a7def6f5309c484988e73474e255823b20</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.codehaus.plexus/plexus-utils@4.0.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://codehaus-plexus.github.io/plexus-pom/plexus-utils/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>http://github.com/codehaus-plexus/plexus-utils/issues</url></reference><reference type="mailing-list"><url>https://groups.google.com/forum/#!forum/mojohaus-dev</url></reference><reference type="vcs"><url>https://github.com/codehaus-plexus/plexus-utils/tree/master/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.maven.scm/maven-scm-provider-git-commons@2.1.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven.scm</group>
      <name>maven-scm-provider-git-commons</name>
      <version>2.1.0</version>
      <description>Common library for SCM Git Provider.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">f3c8dc5ad1a0a102e8f95bc017f2a39a</hash>
        <hash alg="SHA-1">31b07f5a57f3d9bb8c24f1c7d32f185906f5f572</hash>
        <hash alg="SHA-256">b27aeb8d54b1ac62381bd26b8d53ac7d2569c7fe52851e2d591bc8e64d4a789a</hash>
        <hash alg="SHA-512">37558056b57ff60e181d8ec4e8ab79019584498267ed932d07d689993a68459327db992b67aefac179ec524df45cadd2ef82b79ac195947a06b33d0205630cb6</hash>
        <hash alg="SHA-384">98f289cee033b504cf6f1797e823be5648237ce1e4e27f6ec37bba09f8c74042febed4c30481cefddcaeda15a8e73e0d</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven.scm/maven-scm-provider-git-commons@2.1.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://maven.apache.org/scm/maven-scm-providers/maven-scm-providers-git/maven-scm-provider-git-commons/</url></reference><reference type="build-system"><url>https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-scm/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/SCM</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/maven-dev</url></reference><reference type="vcs"><url>https://github.com/apache/maven-scm/tree/maven-scm-2.1.0/maven-scm-providers/maven-scm-providers-git/maven-scm-provider-git-commons</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.codehaus.plexus/plexus-xml@3.0.0?type=jar">
      <publisher>Codehaus Plexus</publisher>
      <group>org.codehaus.plexus</group>
      <name>plexus-xml</name>
      <version>3.0.0</version>
      <description>A collection of various utility classes to ease working with XML in Maven 3.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">cccca4a03a8367cd20e4efaead5fba0b</hash>
        <hash alg="SHA-1">d16b91678bc3734276886132923d6919c935c9f7</hash>
        <hash alg="SHA-256">d2622dc9339b16f5b8c9cad2add440e965831d0e16f19ae1de24e1202b0de536</hash>
        <hash alg="SHA-512">31b68a025ab2658fe59d5fbb79a2425560392e3db2746b0ab805846a58816c4235dd6d50ed3ed2d4919f7494e058075371bb29694f4aaae370c9e0caa2e55245</hash>
        <hash alg="SHA-384">2d341bb6b29b67afe31595657ff478406476408b61bb7a1deda3ec951582e27d0195cbb5dde87124ff803858c5235258</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.codehaus.plexus/plexus-xml@3.0.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://codehaus-plexus.github.io/plexus-xml/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/codehaus-plexus/plexus-xml/issues</url></reference><reference type="mailing-list"><url>https://groups.google.com/forum/#!forum/mojohaus-dev</url></reference><reference type="vcs"><url>https://github.com/codehaus-plexus/plexus-xml/tree/plexus-xml-3.0.0/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.maven.scm/maven-scm-api@2.1.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven.scm</group>
      <name>maven-scm-api</name>
      <version>2.1.0</version>
      <description>The SCM API provides mechanisms to manage all SCM tools.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">b21bdd4ef8cbdf393e88004a252186d9</hash>
        <hash alg="SHA-1">cb5d90a50c67b2f833d5db0861027a3a5f2ece43</hash>
        <hash alg="SHA-256">8c352e583ab13c9b4519d80bec07beff0e2b5bb752b3a40883edb9af3f99133b</hash>
        <hash alg="SHA-512">5e9a24e0a4cd119a6a45ca7ae344589800fb1877bb4ee7b5da80762201d1c89d571cf9b409b8902077378337b25296701b1f8926dd7f8e0c01cd6d74a9ef8daa</hash>
        <hash alg="SHA-384">dff336dc6969642003b5d6fc11344fc67ca677984e8d5c0a28663d52c1c2ce3caf8a48f72cb0a374d70c987fc0868c0a</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven.scm/maven-scm-api@2.1.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://maven.apache.org/scm/maven-scm-api/</url></reference><reference type="build-system"><url>https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-scm/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/SCM</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/maven-dev</url></reference><reference type="vcs"><url>https://github.com/apache/maven-scm/tree/maven-scm-2.1.0/maven-scm-api</url></reference></externalReferences>
    </component>
  </components>
  <dependencies>
    <dependency ref="pkg:maven/org.apache.maven.scm/maven-scm-provider-gitexe@2.1.0?type=jar">
      <dependency ref="pkg:maven/javax.inject/javax.inject@1?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/commons-io/commons-io@2.16.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-text@1.11.0?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-utils@4.0.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven.scm/maven-scm-provider-git-commons@2.1.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven.scm/maven-scm-api@2.1.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/javax.inject/javax.inject@1?type=jar"/>
    <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    <dependency ref="pkg:maven/commons-io/commons-io@2.16.1?type=jar"/>
    <dependency ref="pkg:maven/org.apache.commons/commons-text@1.11.0?type=jar">
      <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.13.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.13.0?type=jar"/>
    <dependency ref="pkg:maven/org.codehaus.plexus/plexus-utils@4.0.0?type=jar"/>
    <dependency ref="pkg:maven/org.apache.maven.scm/maven-scm-provider-git-commons@2.1.0?type=jar">
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-utils@4.0.0?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-xml@3.0.0?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven.scm/maven-scm-api@2.1.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.codehaus.plexus/plexus-xml@3.0.0?type=jar"/>
    <dependency ref="pkg:maven/org.apache.maven.scm/maven-scm-api@2.1.0?type=jar">
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-utils@4.0.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.13.0?type=jar"/>
    </dependency>
  </dependencies>
</bom>
