{ "bomFormat" : "CycloneDX", "specVersion" : "1.6", "serialNumber" : "urn:uuid:d29ef404-7f76-3a4e-bd4d-e6792d1c2826", "version" : 1, "metadata" : { "lifecycles" : [ { "phase" : "build" } ], "tools" : { "components" : [ { "type" : "library", "author" : "OWASP Foundation", "group" : "org.cyclonedx", "name" : "cyclonedx-maven-plugin", "version" : "2.9.1", "description" : "CycloneDX Maven plugin", "hashes" : [ { "alg" : "MD5", "content" : "9c7a565cf28cce58557d0c621c5ea4b1" }, { "alg" : "SHA-1", "content" : "be882d5a22050bfa9d19090b1420c188617d0e1c" }, { "alg" : "SHA-256", "content" : "698e0f37184a5b28c245c4065fd036dfce253b52f82fbb7113d81d36326cc249" }, { "alg" : "SHA-512", "content" : "c0f0b11026858166f872a2eb54719492e5cecaa0bc9cd6b30b3ecb4a174eed220f4a1b5829d18d6734128e778d3cb3db7ffed177c92866133129cb29081814a0" }, { "alg" : "SHA-384", "content" : "d80964707dfe5caca8c70521d5066f57589304c0a657e6fbc7c0614ea0fc7b3b3dbe7778361eee0f54ba111e9cb0ffcb" }, { "alg" : "SHA3-384", "content" : "80bc3a275d9514bc457461ff52a72add8c7ecbbc01d8912efce57139016c544ee776981851be0a58fa977ab4221f703f" }, { "alg" : "SHA3-256", "content" : "142317d6f245390f4fd2d0c100b16281b8dfc5c0c2cff86943bdcc97039cb699" }, { "alg" : "SHA3-512", "content" : "af0fb9137c90b65d1a07f72e4d51ae509956cdb8800f35c961b037cdda1fe4a14ce3b496cef71ba85f1621affcfe29cd42704ae4191ff0b090a9602087c8997b" } ] } ] }, "component" : { "type" : "library", "bom-ref" : "pkg:maven/org.jdbi/jdbi3-sqlobject@3.49.6?type=jar", "group" : "org.jdbi", "name" : "jdbi3-sqlobject", "version" : "3.49.6", "description" : "SqlObject is a declarative, annotation-driven API for database access. It complements the core API. Jdbi 3 is designed to provide convenient tabular data access in Java(tm) and other JVM based languages. It uses the Java collections framework for query results, provides a convenient means of externalizing SQL statements, and named parameter support for any database that supports JDBC.", "licenses" : [ { "license" : { "id" : "Apache-2.0", "url" : "https://www.apache.org/licenses/LICENSE-2.0" } } ], "purl" : "pkg:maven/org.jdbi/jdbi3-sqlobject@3.49.6?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://jdbi.org/jdbi3-parent/jdbi3-sqlobject/" }, { "type" : "vcs", "url" : "https://github.com/jdbi/jdbi/jdbi3-sqlobject/" } ] }, "properties" : [ { "name" : "maven.goal", "value" : "makeBom" }, { "name" : "maven.scopes", "value" : "compile,provided,runtime,system" }, { "name" : "cdx:reproducible", "value" : "enabled" } ] }, "components" : [ { "type" : "library", "bom-ref" : "pkg:maven/org.jdbi/jdbi3-core@3.49.6?type=jar", "group" : "org.jdbi", "name" : "jdbi3-core", "version" : "3.49.6", "description" : "The Jdbi core API. Jdbi 3 is designed to provide convenient tabular data access in Java(tm) and other JVM based languages. It uses the Java collections framework for query results, provides a convenient means of externalizing SQL statements, and named parameter support for any database that supports JDBC.", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "2d1f65dd6e361acbaf58569185f278a9" }, { "alg" : "SHA-1", "content" : "4824e2410d888738a86b310a69da18dae5678885" }, { "alg" : "SHA-256", "content" : "6241b9df392a689fdd5186a9f40f63006f70dfe22971614441bee4c9261b7e2b" }, { "alg" : "SHA-512", "content" : "d022c9c85bab0a3f9686ba71ea4994368298f893d654b5675572129851688982d2d54025d0b58c5dc38752fc62e3a21ea93e78a65dbfa3afd7da187ddac611a8" }, { "alg" : "SHA-384", "content" : "26c82787c4bc368ebb366837aafd7a757fbc42c1950c6a6cd8806d67ec36b6915edf156edd772c0d8d6dbc3a5a681085" }, { "alg" : "SHA3-384", "content" : "9397521ba679d1bc80544f3969ba3b84753015bcf8a1aa07e63289293e3532335dfafb34a89ef800e15dcb8e2e675c39" }, { "alg" : "SHA3-256", "content" : "a9f3a3142be01b955adf1b21f929b8f1e9915e813ea61efaaff8d1353dfc86a9" }, { "alg" : "SHA3-512", "content" : "68632348f754dbc662944838de6d90bc345c845b070c7252f7480be140427d6b20361f683a11123a792cceaa93dd2329f43dc53cf1e646ec30b9d9284f3561c7" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0", "url" : "https://www.apache.org/licenses/LICENSE-2.0" } } ], "purl" : "pkg:maven/org.jdbi/jdbi3-core@3.49.6?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://jdbi.org/jdbi3-parent/jdbi3-core/" }, { "type" : "vcs", "url" : "https://github.com/jdbi/jdbi/jdbi3-core/" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/org.antlr/antlr4-runtime@4.13.2?type=jar", "publisher" : "ANTLR", "group" : "org.antlr", "name" : "antlr4-runtime", "version" : "4.13.2", "description" : "The ANTLR 4 Runtime", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "eecf1908f0cfff10f8bb82878b5ca401" }, { "alg" : "SHA-1", "content" : "fc3db6d844df652a3d5db31c87fa12757f13691d" }, { "alg" : "SHA-256", "content" : "dd3e8a13a2d669bf84fb8d834de35ce4875f27157698d206241ec8488aadcaf7" }, { "alg" : "SHA-512", "content" : "1c3e47b6b5dc40ca13927a7ae2ed187f470b8f406cea325e73c7a18af8e07b9ada0484312dd611f225f030b5585924932c702fd9326c143a626e271682b2b95e" }, { "alg" : "SHA-384", "content" : "f49c2395e16fe71fa35622bcca225c0910609ef09626207ce4522c73c760fd232489489ea88d54c88fc21b05a03031e0" }, { "alg" : "SHA3-384", "content" : "322345326586e3f8954e80efa80b510228a7eb06f6d7283177f04809c15aad1722c700897c8c8f405955946b63808bc0" }, { "alg" : "SHA3-256", "content" : "2d39db66ce6dc530c7796f75d646f4d8316586e2acd0756524c25b238eb71618" }, { "alg" : "SHA3-512", "content" : "a4cdaec49dff4a6963a0db56712a837db7300de7145335b915ffc2234b0d53d6f9fd4b1d6e82c4350e22fee9390ca643cfbf7f51ff47a11bc44561b6686be32b" } ], "licenses" : [ { "license" : { "id" : "BSD-3-Clause", "url" : "https://opensource.org/licenses/BSD-3-Clause" } } ], "purl" : "pkg:maven/org.antlr/antlr4-runtime@4.13.2?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://www.antlr.org/antlr4-runtime/" }, { "type" : "distribution-intake", "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type" : "issue-tracker", "url" : "https://github.com/antlr/antlr4/issues" }, { "type" : "mailing-list", "url" : "https://groups.google.com/forum/?fromgroups#!forum/antlr-discussion" }, { "type" : "vcs", "url" : "https://github.com/antlr/antlr4/tree/master/antlr4-runtime" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar", "publisher" : "QOS.ch", "group" : "org.slf4j", "name" : "slf4j-api", "version" : "2.0.17", "description" : "The slf4j API", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "b6480d114a23683498ac3f746f959d2f" }, { "alg" : "SHA-1", "content" : "d9e58ac9c7779ba3bf8142aff6c830617a7fe60f" }, { "alg" : "SHA-256", "content" : "7b751d952061954d5abfed7181c1f645d336091b679891591d63329c622eb832" }, { "alg" : "SHA-512", "content" : "9a3e79db6666a6096a3021bb2e1d918f30f589d8de51d6b600f8ebd92515a510ae2d8f87919cc2dfa8365d64f10194cac8dfa0fb950160eef0e9da06f6caaeb9" }, { "alg" : "SHA-384", "content" : "6ea24f814a9b6ece428cfd0535e2f3b8927005745ef61006b50fdb5a90126ee5ea05650155382b3b755c5bce38ef3944" }, { "alg" : "SHA3-384", "content" : "9b1015052f0ec43f9be09764e131834157599611cb52f6fe591c4ac6a8ab4817518f2a4b8871e5e738c8678e93af5557" }, { "alg" : "SHA3-256", "content" : "00559b4f4066b4917ba4fe2a6f23111eaeada321112d030910d218ced9084b5e" }, { "alg" : "SHA3-512", "content" : "9579c2f7e7516e177c2d493ccc9eb8150978cf19f6f09b28d116f6935239fd56dc6af2b62b3336f79b0b462445550cd1fb5377a07001a6f44aaab6a32fa2fa47" } ], "licenses" : [ { "license" : { "id" : "MIT", "url" : "https://opensource.org/license/mit/" } } ], "purl" : "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar", "externalReferences" : [ { "type" : "website", "url" : "http://www.slf4j.org" }, { "type" : "distribution-intake", "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type" : "vcs", "url" : "https://github.com/qos-ch/slf4j/slf4j-parent/slf4j-api" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/io.leangen.geantyref/geantyref@2.0.1?type=jar", "group" : "io.leangen.geantyref", "name" : "geantyref", "version" : "2.0.1", "description" : "Generic type reflection library with support for AnnotatedType", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "08dce47c87ec3228628a42cb3eb8c181" }, { "alg" : "SHA-1", "content" : "81253383ac75126142f97781d22d19de2532bf76" }, { "alg" : "SHA-256", "content" : "386b535c079be7d65ddbe0ad9c00955155b7862225aa92b4c6553ab2b1ea95f9" }, { "alg" : "SHA-512", "content" : "c6655ef00ede5d9bb17d4e7556200acaeb5babd67295e9f72e26e8ea48fd50978cc147156e35feada204163163292ad3a0daf0d6b1366c9e933f13a1b4a9eb2f" }, { "alg" : "SHA-384", "content" : "3b97009b3b70156fcd3f39a8365e562d481fed54d779e6f60a82bdb0736ee7701edd0c69f58409154dc1823895e7da05" }, { "alg" : "SHA3-384", "content" : "36cfd6a2d9d4f0df12e9c688b1981f494f4b77f6f05dc57af69f03ab2d7f9d5628f9b90ad324dbadc2ffc210a74d25aa" }, { "alg" : "SHA3-256", "content" : "414a37fe9755beb446609dbc43f2eb702a0789ef5d046baff144596774e189ac" }, { "alg" : "SHA3-512", "content" : "6a2ecd82a48dc5272720726298d21a8548c46df8b52f9dea1c97c38e77372fb620ca5c5fbed1b9ea7234f7328c47ba9642366d63f0d3f0340c33faf1f5f7de76" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/io.leangen.geantyref/geantyref@2.0.1?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://github.com/leangen/geantyref" }, { "type" : "distribution-intake", "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type" : "issue-tracker", "url" : "https://github.com/leangen/geantyref/issues" }, { "type" : "vcs", "url" : "https://github.com/leangen/geantyref" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/jakarta.annotation/jakarta.annotation-api@3.0.0?type=jar", "publisher" : "Eclipse Foundation", "group" : "jakarta.annotation", "name" : "jakarta.annotation-api", "version" : "3.0.0", "description" : "Jakarta Annotations API", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "7faffaab962918da4cf5ddfd76609dd2" }, { "alg" : "SHA-1", "content" : "54f928fadec906a99d558536756d171917b9d936" }, { "alg" : "SHA-256", "content" : "b01f55552284cfb149411e64eabca75e942d26d2e1786b32914250e4330afaa2" }, { "alg" : "SHA-512", "content" : "2bd5a16684c4e8144897ba6dc467628d1b8a85326235240e4c20101b6df3681d23aeebc30ca99e395ec848f33cb5244085031b2a0fbce746c8ede7148a5e7c1d" }, { "alg" : "SHA-384", "content" : "1a12cb78019d310eb08314f863c2a0e48aa2845bde844f8204e653ec50713bf135cc58cce882e14ef631327952b5ad99" }, { "alg" : "SHA3-384", "content" : "a0dd7dd32e8dc5ed679589f6066f16593b52334b9947a71381aeab44b3cbe295ec24dfef4fbfa5514ba24ea60fe042a9" }, { "alg" : "SHA3-256", "content" : "6ae915a05b483f75c51f3a109cf368842d186b2996758b8a106377a7a9485c12" }, { "alg" : "SHA3-512", "content" : "52f611aa0a98812e525be2b9d5a5712aef660598cff64282dbd9afc237560f442ab745fc95c919216f9cb4197c224ba6c7317282962c638fee956925bfa031c0" } ], "licenses" : [ { "license" : { "id" : "EPL-2.0" } }, { "license" : { "id" : "GPL-2.0-with-classpath-exception" } } ], "purl" : "pkg:maven/jakarta.annotation/jakarta.annotation-api@3.0.0?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://projects.eclipse.org/projects/ee4j.ca" }, { "type" : "distribution-intake", "url" : "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type" : "issue-tracker", "url" : "https://github.com/jakartaee/common-annotations-api/issues" }, { "type" : "mailing-list", "url" : "https://dev.eclipse.org/mhonarc/lists/ca-dev" }, { "type" : "vcs", "url" : "https://github.com/jakartaee/common-annotations-api" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/com.github.spotbugs/spotbugs-annotations@4.9.6?type=jar", "group" : "com.github.spotbugs", "name" : "spotbugs-annotations", "version" : "4.9.6", "description" : "Annotations the SpotBugs tool supports", "scope" : "optional", "hashes" : [ { "alg" : "MD5", "content" : "afeb53284357009299bf2ac13cf021b2" }, { "alg" : "SHA-1", "content" : "fa9760f5a45bd158dab85aa7e2d954de5d389bbf" }, { "alg" : "SHA-256", "content" : "523d394a6b36174ad0a22f0c1c75b105ccff42869a8b7ce86e7fd339ca6f86ce" }, { "alg" : "SHA-512", "content" : "df639d7af3d8c764d6baac81015ef94ce567dd629f7e7db5b5569d7f380ea5bdd3983d9f09d136bbb9aa7f25467aeb8227a9c628d1a8178cddd0172a743161a1" }, { "alg" : "SHA-384", "content" : "6da0f0f1d90314f38be58cf604def71cb90cf0bc9c14b0ec7d2ae487925e11c988664c73ccb5967e2d87c413dd3ae6c6" }, { "alg" : "SHA3-384", "content" : "3c75b2eb449eb5e6d234d00def276864d1b55937406ddd854278ce8562a6aa7f1a1ccdb55387c483014f2d89ffa482f4" }, { "alg" : "SHA3-256", "content" : "9036584641cecba8a2aeb3dac9c02adfcb9e375c966e29eb974fd8661b719957" }, { "alg" : "SHA3-512", "content" : "0ef218a01bcf328909377ba0bd9cddbb52b393e60c5b670663610a1943dcd138a5622bf4dd1b96e4e38ed68951d7b74e15ecd087465f6cc0b4c339cb917cb6e2" } ], "licenses" : [ { "license" : { "id" : "LGPL-2.1-only" } } ], "purl" : "pkg:maven/com.github.spotbugs/spotbugs-annotations@4.9.6?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://spotbugs.github.io/" }, { "type" : "vcs", "url" : "https://github.com/spotbugs/spotbugs/" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar", "group" : "com.google.code.findbugs", "name" : "jsr305", "version" : "3.0.2", "description" : "JSR305 Annotations for Findbugs", "scope" : "optional", "hashes" : [ { "alg" : "MD5", "content" : "dd83accb899363c32b07d7a1b2e4ce40" }, { "alg" : "SHA-1", "content" : "25ea2e8b0c338a877313bd4672d3fe056ea78f0d" }, { "alg" : "SHA-256", "content" : "766ad2a0783f2687962c8ad74ceecc38a28b9f72a2d085ee438b7813e928d0c7" }, { "alg" : "SHA-512", "content" : "bb09db62919a50fa5b55906013be6ca4fc7acb2e87455fac5eaf9ede2e41ce8bbafc0e5a385a561264ea4cd71bbbd3ef5a45e02d63277a201d06a0ae1636f804" }, { "alg" : "SHA-384", "content" : "ca0b169d3eb2d0922dc031133a021f861a043bb3e405a88728215fd6ff00fa52fdc7347842dcc2031472e3726164bdc4" }, { "alg" : "SHA3-384", "content" : "9903fd7505218999f8262efedb3d935d64bcef84aae781064ab5e1b24755466b269517cada562fa140cd1d417ede57a1" }, { "alg" : "SHA3-256", "content" : "223fda9a89a461afaae73b177a2dc20ed4a90f2f8757f5c65f3241b0510f00ff" }, { "alg" : "SHA3-512", "content" : "3996b5af57a5d5c6a0cd62b11773360fb051dd86a2ba968476806a2a5d32049b82d69a24a3c694e8fe4d735be6a28e41000cc500cc2a9fb577e058045855d2d6" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar", "externalReferences" : [ { "type" : "website", "url" : "http://findbugs.sourceforge.net/" }, { "type" : "distribution-intake", "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type" : "vcs", "url" : "https://code.google.com/p/jsr-305/" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.39.0?type=jar", "publisher" : "Google LLC", "group" : "com.google.errorprone", "name" : "error_prone_annotations", "version" : "2.39.0", "description" : "Error Prone is a static analysis tool for Java that catches common programming mistakes at compile-time.", "scope" : "optional", "hashes" : [ { "alg" : "MD5", "content" : "4a3da0eca306a557a9a35440a04442a5" }, { "alg" : "SHA-1", "content" : "14dca85648561a1b695e3ae1c116b4508ef268f9" }, { "alg" : "SHA-256", "content" : "af25a04ec4161b3c98fd9e8c0df63d639003cf30a7e1e010ece54498b892557f" }, { "alg" : "SHA-512", "content" : "8dac9f8d66b38e0d65aa6b053c084364399a67b6f618aeb92e5a5bd21ce2508074e721e299ea16da8fd809c65977e004f5f325ba21140a539ed7dbfb139cfa98" }, { "alg" : "SHA-384", "content" : "ad921f40a39edabc610a0f08817116d63bde69d0143be3c2465050d68c0bbf662a496c52c90986382038c90b7950d6ca" }, { "alg" : "SHA3-384", "content" : "45cb6feb23cd231dd64748bb60220231c6f87f328cb3d8e9270e9ba3091de137f81a97bdad02e01cb7566232cbb69a05" }, { "alg" : "SHA3-256", "content" : "3e153a634e8b94ace54cc1bb27a16979f3c828435580aa5508f1226d96d51976" }, { "alg" : "SHA3-512", "content" : "df7e715550d51679c2fae77ca2e2eab7a04f550371b3be64a46b891b020c523ee55e90261f2ad06d6961bf568c03d6145380e9729d9ab3111c9e1d3ab42ae5d3" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.39.0?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://errorprone.info/error_prone_annotations" }, { "type" : "vcs", "url" : "https://github.com/google/error-prone/error_prone_annotations" } ] } ], "dependencies" : [ { "ref" : "pkg:maven/org.jdbi/jdbi3-sqlobject@3.49.6?type=jar", "dependsOn" : [ "pkg:maven/org.jdbi/jdbi3-core@3.49.6?type=jar", "pkg:maven/jakarta.annotation/jakarta.annotation-api@3.0.0?type=jar", "pkg:maven/com.github.spotbugs/spotbugs-annotations@4.9.6?type=jar", "pkg:maven/com.google.errorprone/error_prone_annotations@2.39.0?type=jar" ] }, { "ref" : "pkg:maven/org.jdbi/jdbi3-core@3.49.6?type=jar", "dependsOn" : [ "pkg:maven/org.antlr/antlr4-runtime@4.13.2?type=jar", "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar", "pkg:maven/io.leangen.geantyref/geantyref@2.0.1?type=jar" ] }, { "ref" : "pkg:maven/org.antlr/antlr4-runtime@4.13.2?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/io.leangen.geantyref/geantyref@2.0.1?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/jakarta.annotation/jakarta.annotation-api@3.0.0?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/com.github.spotbugs/spotbugs-annotations@4.9.6?type=jar", "dependsOn" : [ "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar" ] }, { "ref" : "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.39.0?type=jar", "dependsOn" : [ ] } ] }