<?xml version="1.0" encoding="UTF-8"?>
<bom serialNumber="urn:uuid:11f76dd7-007d-3e4a-94f7-83ab2429c1f2" version="1" xmlns="http://cyclonedx.org/schema/bom/1.5">
  <metadata>
    <lifecycles>
      <lifecycle>
        <phase>build</phase>
      </lifecycle>
    </lifecycles>
    <tools>
      <tool>
        <vendor>OWASP Foundation</vendor>
        <name>CycloneDX Maven plugin</name>
        <version>2.8.0</version>
        <hashes>
          <hash alg="MD5">76ffec6a7ddd46b2b24517411874eb99</hash>
          <hash alg="SHA-1">5b0d5b41975b53be4799b9621b4af0cfc41d44b6</hash>
          <hash alg="SHA-256">6852aa0f4e42a2db745bab80e384951a6a65b9215d041081d675780999027e81</hash>
          <hash alg="SHA-512">417de20fcdcb11c9713bacbd57290d8e68037fdb4553fd31b8cb08bd760ad52dc65ea88ad4be15844ad3fd5a4d3e440d2f70326f2fe1e63ec78e059c9a883f8d</hash>
          <hash alg="SHA-384">5eb755c6492e7a7385fa9a1e1f4517875bcb834b2df437808a37a2d6f5285df428741762305980315a63fcef1406597d</hash>
          <hash alg="SHA3-384">0fe16a47cf7aab0b22251dafcc39939b68e8f1778093309d8d2060b51a08df445a8b8ed5a9561669faf2e55f907c76d8</hash>
          <hash alg="SHA3-256">3e5a1eb5ab7d0797498862794709ff8eaaa071fe4cc9ec77f52db7e2f97ef487</hash>
          <hash alg="SHA3-512">59281a3e29e76270d7f44b40b5b9f05e55f1ae3ec716d80add806f360940809e3813998ac7c5758043b8e248aed73b86e37dc506cdb4cde03c16bb617d8e5a3a</hash>
        </hashes>
      </tool>
    </tools>
    <component type="library" bom-ref="pkg:maven/org.apache.skywalking/apm@10.0.1?type=pom">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.skywalking</group>
      <name>apm</name>
      <version>10.0.1</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.skywalking/apm@10.0.1?type=pom</purl>
      <externalReferences><reference type="website"><url>https://github.com/apache/skywalking</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://github.com/apache/skywalking/issues</url></reference><reference type="mailing-list"><url>dev-subscribe@skywalking.apache.org</url></reference><reference type="vcs"><url>https://github.com/apache/skywalking</url></reference></externalReferences>
    </component>
    <properties>
      <property name="maven.goal">makeBom</property>
      <property name="maven.scopes">compile,provided,runtime,system</property>
      <property name="cdx:reproducible">enabled</property>
    </properties>
  </metadata>
  <components>
    <component type="library" bom-ref="pkg:maven/org.projectlombok/lombok@1.18.30?type=jar">
      <group>org.projectlombok</group>
      <name>lombok</name>
      <version>1.18.30</version>
      <description>Spice up your java: Automatic Resource Management, automatic generation of getters, setters, equals, hashCode and toString, and more!</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">14e90bb14cac804c1a6e2024e78f436d</hash>
        <hash alg="SHA-1">f195ee86e6c896ea47a1d39defbe20eb59cd149d</hash>
        <hash alg="SHA-256">14151b47582d570b4de16a147ece3bdbd19ace4aee5bde3a5578c87db9ecb998</hash>
        <hash alg="SHA-512">432978b662744078f86e2e808c692744be31a49ce5bd1ff9188158b1ed262da0b25adf5a5eff23cf6bce1f98df12e424e6e14e6ed34bc22e00b4cb9c8f743135</hash>
        <hash alg="SHA-384">a1545815a3c8af024b826ea524d130276c98596c0bbe8ab17d817739c4287390d9a88999d1930c8620a073497067f5d0</hash>
        <hash alg="SHA3-384">8bb0b1e63c47156b7924daaa2d03e28ca7bf68288a6796a59f4dd3d8326f180ab05e56cb41e8d40dbd370916e02c7fe7</hash>
        <hash alg="SHA3-256">c204d71619ed2c0c1488a574515193703ba275c5c9ff78ba11f9a2675c6fef47</hash>
        <hash alg="SHA3-512">f10744ea41a13da1851baee93462b7ca87f89b5c740b1253d6523d87e671487611af2ec5cc184750e0d08da50a0cb2964e31fb477eaa39eed04a30ee44158712</hash>
      </hashes>
      <licenses>
        <license>
          <id>MIT</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.projectlombok/lombok@1.18.30?type=jar</purl>
      <externalReferences><reference type="website"><url>https://projectlombok.org</url></reference><reference type="issue-tracker"><url>https://github.com/projectlombok/lombok/issues</url></reference><reference type="vcs"><url>http://github.com/projectlombok/lombok</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/javax.annotation/javax.annotation-api@1.3.2?type=jar">
      <publisher>GlassFish Community</publisher>
      <group>javax.annotation</group>
      <name>javax.annotation-api</name>
      <version>1.3.2</version>
      <description>Common Annotations for the JavaTM Platform API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">2ab1973eefffaa2aeec47d50b9e40b9d</hash>
        <hash alg="SHA-1">934c04d3cfef185a8008e7bf34331b79730a9d43</hash>
        <hash alg="SHA-256">e04ba5195bcd555dc95650f7cc614d151e4bcd52d29a10b8aa2197f3ab89ab9b</hash>
        <hash alg="SHA-512">679cf44c3b9d635b43ed122a555d570292c3f0937c33871c40438a1a53e2058c80578694ec9466eac9e280e19bfb7a95b261594cc4c1161c85dc97df6235e553</hash>
        <hash alg="SHA-384">fc0058495e54efb6e05a34e3ff422e7c8347bcc77d6d9b87e9253424968dee6ef6a215c318d7e54f8705276be81f0682</hash>
        <hash alg="SHA3-384">ed6464b715de6ced0d9981a3f28140824946a4b7a02ffaff6116c833bb36e8f77a6282ce63c0d82cfe841d4fd6916891</hash>
        <hash alg="SHA3-256">ecfc9bef24ae28cf94c6775ecf6e2086d90a25d8d5476a4f6bb24001601b6cd0</hash>
        <hash alg="SHA3-512">f2b333527faedf504f60aa70a3d491972fa76f7e61e6351027f74613f41001157656824fe312b6e1df6dc4979704fe2a745b618d5368a97fe0bf8749739de9e2</hash>
      </hashes>
      <licenses>
        <expression>(CDDL-1.0 OR GPL-2.0-with-classpath-exception)</expression>
      </licenses>
      <purl>pkg:maven/javax.annotation/javax.annotation-api@1.3.2?type=jar</purl>
      <externalReferences><reference type="website"><url>http://jcp.org/en/jsr/detail?id=250</url></reference><reference type="distribution-intake"><url>https://maven.java.net/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/javaee/javax.annotation/issues</url></reference><reference type="mailing-list"><url>javaee-spec@javaee.groups.io</url></reference><reference type="vcs"><url>https://github.com/javaee/javax.annotation</url></reference></externalReferences>
    </component>
  </components>
  <dependencies>
    <dependency ref="pkg:maven/org.apache.skywalking/apm@10.0.1?type=pom">
      <dependency ref="pkg:maven/org.projectlombok/lombok@1.18.30?type=jar"/>
      <dependency ref="pkg:maven/javax.annotation/javax.annotation-api@1.3.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.projectlombok/lombok@1.18.30?type=jar"/>
    <dependency ref="pkg:maven/javax.annotation/javax.annotation-api@1.3.2?type=jar"/>
  </dependencies>
</bom>
