{ "bomFormat" : "CycloneDX", "specVersion" : "1.5", "serialNumber" : "urn:uuid:1a5141e2-2403-37e9-af0f-20a1171b1b9a", "version" : 1, "metadata" : { "timestamp" : "2025-11-24T10:32:54Z", "lifecycles" : [ { "phase" : "build" } ], "tools" : { "components" : [ { "type" : "library", "author" : "OWASP Foundation", "group" : "org.cyclonedx", "name" : "cyclonedx-maven-plugin", "version" : "2.9.0", "description" : "CycloneDX Maven plugin", "hashes" : [ { "alg" : "MD5", "content" : "dfaeab7ec837ce07874e2ee66fdc57d3" }, { "alg" : "SHA-1", "content" : "8bab47bafc8183d0a5f37790ff55ed05ead1ae2d" }, { "alg" : "SHA-256", "content" : "67117e03eae4a03ca8bab3add044995f4899aa21798a2510b8265ef8101e90ac" }, { "alg" : "SHA-512", "content" : "ae6b706516bb76da806b7854aef9e348fa593f5159ae9d693ad38942165c0ebc0846d977a477f6029612d43468fd2cd73a5aa253c228a94fb8d184e0acefc3d2" }, { "alg" : "SHA-384", "content" : "ee872354d8b0dcd6f9835a913b3aaba70d9365a46043be78020183282a1e9fca812e969246cbe31d642541591b46648b" } ] } ] }, "component" : { "type" : "library", "bom-ref" : "pkg:maven/io.confluent/confluent-command@7.6.9?type=jar", "publisher" : "Confluent, Inc.", "group" : "io.confluent", "name" : "confluent-command", "version" : "7.6.9", "description" : "Control Center for Kafka.", "licenses" : [ { "license" : { "name" : "Confluent License Agreement", "url" : "https://www.confluent.io/legal/confluent-license-agreement/" } } ], "purl" : "pkg:maven/io.confluent/confluent-command@7.6.9?type=jar", "externalReferences" : [ { "type" : "website", "url" : "http://confluent.io/confluent-command" }, { "type" : "distribution-intake", "url" : "s3://staging-confluent-packages-maven-654654529379-us-west-2/v7.6.9-rc251124141106/maven" }, { "type" : "vcs", "url" : "https://github.com/confluentinc/blueway/confluent-command" } ] }, "properties" : [ { "name" : "maven.goal", "value" : "makeBom" }, { "name" : "maven.scopes", "value" : "compile,provided,runtime,system,test" } ] }, "components" : [ { "type" : "library", "bom-ref" : "pkg:maven/io.confluent/confluent-serializers-new@7.6.9-ce?type=jar", "group" : "io.confluent", "name" : "confluent-serializers-new", "version" : "7.6.9-ce", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "883086c06cabe2fc2110b08777c89e2d" }, { "alg" : "SHA-1", "content" : "4210b1b21a58f7e4958e8cb16aba931d9b8bc7d6" }, { "alg" : "SHA-256", "content" : "b4058f2f7e415ea3e257396aa47bb1e084cdfda77dcee3dcc3ee7734484802f7" }, { "alg" : "SHA-512", "content" : "660ff6f2aef10284ad583fbb314ca930705184376c6a5e7c8edf3853c44d204bb75e0b8e4526e10b77d4b99dfb1ffcedb49f31c7e04cb20d0a436a51ec80777a" }, { "alg" : "SHA-384", "content" : "b73e97a555fdae0bfede953cbd3a93255c3d5afcdea713647aebf4a2526aeebc7bef32cd06c4fc4a24a6f0e26e34b4f3" } ], "licenses" : [ { "license" : { "name" : "Confluent License Agreement", "url" : "https://www.confluent.io/legal/confluent-license-agreement/" } } ], "purl" : "pkg:maven/io.confluent/confluent-serializers-new@7.6.9-ce?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://docs.confluent.io/platform/current/get-started/platform.html" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/com.google.protobuf/protobuf-java@3.25.5?type=jar", "group" : "com.google.protobuf", "name" : "protobuf-java", "version" : "3.25.5", "description" : "Core Protocol Buffers library. Protocol Buffers are a way of encoding structured data in an efficient yet extensible format.", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "639cfcf9717cf4e4dd9e808e6f8d24a4" }, { "alg" : "SHA-1", "content" : "5ae5c9ec39930ae9b5a61b32b93288818ec05ec1" }, { "alg" : "SHA-256", "content" : "8540247fad9e06baefa8fb45eb313802d019f485f14300e0f9d6b556ed88e753" }, { "alg" : "SHA-512", "content" : "432d8a9359e614d38fe416b7a4564aed3e358fd5f3c2c4f22caf97945a0f3e5cbd2220b690d6b822504e7bcbbd67458eb12d232232dd113f804683a172f8eb71" }, { "alg" : "SHA-384", "content" : "e78be1eae5721143fa31d5e13b2219158b7cec75e88d24fbfcafadf1315bcefa0baed312ef6e3943ce32e6c388a4a318" } ], "licenses" : [ { "license" : { "id" : "BSD-3-Clause", "url" : "https://opensource.org/licenses/BSD-3-Clause" } } ], "purl" : "pkg:maven/com.google.protobuf/protobuf-java@3.25.5?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://developers.google.com/protocol-buffers/protobuf-java/" }, { "type" : "distribution-intake", "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type" : "vcs", "url" : "https://github.com/protocolbuffers/protobuf/protobuf-java" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/com.google.code.gson/gson@2.9.0?type=jar", "group" : "com.google.code.gson", "name" : "gson", "version" : "2.9.0", "description" : "Gson JSON library", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "53fa3e6753e90d931d62cb89580fde2f" }, { "alg" : "SHA-1", "content" : "8a1167e089096758b49f9b34066ef98b2f4b37aa" }, { "alg" : "SHA-256", "content" : "c96d60551331a196dac54b745aa642cd078ef89b6f267146b705f2c2cbef052d" }, { "alg" : "SHA-512", "content" : "13ff22a60ee6a72ba0c4e8fe3702b8f3f6be6b67ed4279079a9843f57ad0ca125d4ecc1564ac4e736eab10fb6254d2c011b2c08c514d708be7f8091332ed2c2c" }, { "alg" : "SHA-384", "content" : "fde5b61066a8cdd711874ed42f20cb914e4193f1477456c431fb0ca32d86324414e92b0b2c5696f56d0b9d69521d8dee" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0", "url" : "https://www.apache.org/licenses/LICENSE-2.0" } } ], "purl" : "pkg:maven/com.google.code.gson/gson@2.9.0?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://github.com/google/gson/gson" }, { "type" : "distribution-intake", "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type" : "issue-tracker", "url" : "https://github.com/google/gson/issues" }, { "type" : "vcs", "url" : "https://github.com/google/gson/gson/" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/javax.xml.bind/jaxb-api@2.3.0?type=jar", "publisher" : "Oracle Corporation", "group" : "javax.xml.bind", "name" : "jaxb-api", "version" : "2.3.0", "description" : "JAXB (JSR 222) API", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "ffa4ea6fada02493779bcd7f04f11ea3" }, { "alg" : "SHA-1", "content" : "99f802e0cb3e953ba3d6e698795c4aeb98d37c48" }, { "alg" : "SHA-256", "content" : "883007989d373d19f352ba9792b25dec21dc7d0e205a710a93a3815101bb3d03" }, { "alg" : "SHA-512", "content" : "0c5bfc2c9f655bf5e6d596e0c196dcb9344d6dc78bf774207c8f8b6be59f69addf2b3121e81491983eff648dfbd55002b9878132de190825dad3ef3a1265b367" }, { "alg" : "SHA-384", "content" : "9c1ac98f02cd0e1fe91d1742004b6e87520a84a0de18d51ba1a6f615cb92fb7d9d0640157547f18d5b2e2c81b4b1c4d0" } ], "licenses" : [ { "license" : { "id" : "CDDL-1.1" } }, { "license" : { "id" : "GPL-2.0-with-classpath-exception" } } ], "purl" : "pkg:maven/javax.xml.bind/jaxb-api@2.3.0?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://github.com/javaee/jaxb-spec/jaxb-api" }, { "type" : "distribution-intake", "url" : "https://maven.java.net/service/local/staging/deploy/maven2/" }, { "type" : "issue-tracker", "url" : "https://github.com/javaee/jaxb-spec/issues" }, { "type" : "vcs", "url" : "https://github.com/javaee/jaxb-spec.git/jaxb-api" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/com.google.protobuf/protobuf-java-util@3.25.5?type=jar", "group" : "com.google.protobuf", "name" : "protobuf-java-util", "version" : "3.25.5", "description" : "Utilities for Protocol Buffers", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "16ac8649c95e9ac6550190f4944665d6" }, { "alg" : "SHA-1", "content" : "38cc5ce479603e36466feda2a9f1dfdb2210ef00" }, { "alg" : "SHA-256", "content" : "dacc58b2c3d2fa8d4bddc1acb881e78d6cf7c137dd78bc1d67f6aca732436a8d" }, { "alg" : "SHA-512", "content" : "bd9411eba3911839ded3dc26536e3383f3135738ec0f17ecd29681f99cbc8dd50dfce73b7da9ab80eca6adea5271cff337192e7d96fea17fe27ee92e69a4d07f" }, { "alg" : "SHA-384", "content" : "eca054684915d1f1986ca6292ff81bdb6d7a42f57ba8a68bf961c1213531991018b185939b53b29591fd9294b6bf222b" } ], "licenses" : [ { "license" : { "id" : "BSD-3-Clause", "url" : "https://opensource.org/licenses/BSD-3-Clause" } } ], "purl" : "pkg:maven/com.google.protobuf/protobuf-java-util@3.25.5?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://developers.google.com/protocol-buffers/protobuf-java-util/" }, { "type" : "distribution-intake", "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type" : "vcs", "url" : "https://github.com/protocolbuffers/protobuf/protobuf-java-util" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/com.google.guava/guava@32.0.1-jre?type=jar", "group" : "com.google.guava", "name" : "guava", "version" : "32.0.1-jre", "description" : "Guava is a suite of core and expanded libraries that include utility classes, Google's collections, I/O classes, and much more.", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "6951895e804b36322214c95917e598d4" }, { "alg" : "SHA-1", "content" : "6e5d51a72d142f2d40a57dfb897188b36a95b489" }, { "alg" : "SHA-256", "content" : "bd7fa227591fb8509677d0d1122cf95158f3b8a9f45653f58281d879f6dc48c5" }, { "alg" : "SHA-512", "content" : "5dbe7a697511cfbe44f3ffb954e32e997677ecc61f03bb7bb374f1b8fa4a931a95cd9d1f5288eb5d42e2aa380e3241b35059786c07edc48e5aa67c30cddad8a5" }, { "alg" : "SHA-384", "content" : "abad4556e073fb38062c636b6599ceed992302c7d98150e3842d32ce92f6aac7d630633c56efa581523d591361fcf898" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/com.google.guava/guava@32.0.1-jre?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://github.com/google/guava" }, { "type" : "build-system", "url" : "https://github.com/google/guava/actions" }, { "type" : "distribution-intake", "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type" : "issue-tracker", "url" : "https://github.com/google/guava/issues" }, { "type" : "vcs", "url" : "https://github.com/google/guava/guava" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/com.google.guava/failureaccess@1.0.1?type=jar", "group" : "com.google.guava", "name" : "failureaccess", "version" : "1.0.1", "description" : "Contains com.google.common.util.concurrent.internal.InternalFutureFailureAccess and InternalFutures. Most users will never need to use this artifact. Its classes is conceptually a part of Guava, but they're in this separate artifact so that Android libraries can use them without pulling in all of Guava (just as they can use ListenableFuture by depending on the listenablefuture artifact).", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "091883993ef5bfa91da01dcc8fc52236" }, { "alg" : "SHA-1", "content" : "1dcf1de382a0bf95a3d8b0849546c88bac1292c9" }, { "alg" : "SHA-256", "content" : "a171ee4c734dd2da837e4b16be9df4661afab72a41adaf31eb84dfdaf936ca26" }, { "alg" : "SHA-512", "content" : "f8d59b808d6ba617252305b66d5590937da9b2b843d492d06b8d0b1b1f397e39f360d5817707797b979a5bf20bf21987b35333e7a15c44ed7401fea2d2119cae" }, { "alg" : "SHA-384", "content" : "67659dbd9647ec303d7f15128dc9dba19b98fd8d74758ee3b602451e32c855e236ccaafe08edf4bbfa245f981268440f" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/com.google.guava/failureaccess@1.0.1?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://github.com/google/guava/failureaccess" }, { "type" : "build-system", "url" : "https://travis-ci.org/google/guava" }, { "type" : "distribution-intake", "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type" : "issue-tracker", "url" : "https://github.com/google/guava/issues" }, { "type" : "vcs", "url" : "https://github.com/google/guava/failureaccess" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar", "group" : "com.google.guava", "name" : "listenablefuture", "version" : "9999.0-empty-to-avoid-conflict-with-guava", "description" : "An empty artifact that Guava depends on to signal that it is providing ListenableFuture -- but is also available in a second \"version\" that contains com.google.common.util.concurrent.ListenableFuture class, without any other Guava classes. The idea is: - If users want only ListenableFuture, they depend on listenablefuture-1.0. - If users want all of Guava, they depend on guava, which, as of Guava 27.0, depends on listenablefuture-9999.0-empty-to-avoid-conflict-with-guava. The 9999.0-... version number is enough for some build systems (notably, Gradle) to select that empty artifact over the \"real\" listenablefuture-1.0 -- avoiding a conflict with the copy of ListenableFuture in guava itself. If users are using an older version of Guava or a build system other than Gradle, they may see class conflicts. If so, they can solve them by manually excluding the listenablefuture artifact or manually forcing their build systems to use 9999.0-....", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "d094c22570d65e132c19cea5d352e381" }, { "alg" : "SHA-1", "content" : "b421526c5f297295adef1c886e5246c39d4ac629" }, { "alg" : "SHA-256", "content" : "b372a037d4230aa57fbeffdef30fd6123f9c0c2db85d0aced00c91b974f33f99" }, { "alg" : "SHA-512", "content" : "c5987a979174cbacae2e78b319f080420cc71bcdbcf7893745731eeb93c23ed13bff8d4599441f373f3a246023d33df03e882de3015ee932a74a774afdd0782f" }, { "alg" : "SHA-384", "content" : "caff9b74079f95832ca7f6029346b34b606051cc8c5a4389fac263511d277ada0c55f28b0d43011055b268c6eb7184d5" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://github.com/google/guava/listenablefuture" }, { "type" : "build-system", "url" : "https://travis-ci.org/google/guava" }, { "type" : "distribution-intake", "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type" : "issue-tracker", "url" : "https://github.com/google/guava/issues" }, { "type" : "vcs", "url" : "https://github.com/google/guava/listenablefuture" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar", "group" : "com.google.code.findbugs", "name" : "jsr305", "version" : "3.0.2", "description" : "JSR305 Annotations for Findbugs", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "dd83accb899363c32b07d7a1b2e4ce40" }, { "alg" : "SHA-1", "content" : "25ea2e8b0c338a877313bd4672d3fe056ea78f0d" }, { "alg" : "SHA-256", "content" : "766ad2a0783f2687962c8ad74ceecc38a28b9f72a2d085ee438b7813e928d0c7" }, { "alg" : "SHA-512", "content" : "bb09db62919a50fa5b55906013be6ca4fc7acb2e87455fac5eaf9ede2e41ce8bbafc0e5a385a561264ea4cd71bbbd3ef5a45e02d63277a201d06a0ae1636f804" }, { "alg" : "SHA-384", "content" : "ca0b169d3eb2d0922dc031133a021f861a043bb3e405a88728215fd6ff00fa52fdc7347842dcc2031472e3726164bdc4" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar", "externalReferences" : [ { "type" : "website", "url" : "http://findbugs.sourceforge.net/" }, { "type" : "distribution-intake", "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type" : "vcs", "url" : "https://code.google.com/p/jsr-305/" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/org.checkerframework/checker-qual@3.33.0?type=jar", "group" : "org.checkerframework", "name" : "checker-qual", "version" : "3.33.0", "description" : "checker-qual contains annotations (type qualifiers) that a programmer writes to specify Java code for type-checking by the Checker Framework.", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "fc9418b779d9d57dcd52197006cbdb9b" }, { "alg" : "SHA-1", "content" : "de2b60b62da487644fc11f734e73c8b0b431238f" }, { "alg" : "SHA-256", "content" : "e316255bbfcd9fe50d165314b85abb2b33cb2a66a93c491db648e498a82c2de1" }, { "alg" : "SHA-512", "content" : "049c446677b7b386f3fb501bf65e032bdf2b1b29a3f545848035fff2b683cd275380cf302e30eea641af7f0801f779bcda3d82a71d928e4176f564f796640a64" }, { "alg" : "SHA-384", "content" : "ddf7a0f70421d1ed75e93c0a30434a4862c3905e433223e19861323cf0994e843392b746003040f10a7db6fc960b8aa6" } ], "licenses" : [ { "license" : { "id" : "MIT" } } ], "purl" : "pkg:maven/org.checkerframework/checker-qual@3.33.0?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://checkerframework.org/" }, { "type" : "vcs", "url" : "https://github.com/typetools/checker-framework.git" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.18.0?type=jar", "publisher" : "Google LLC", "group" : "com.google.errorprone", "name" : "error_prone_annotations", "version" : "2.18.0", "description" : "Error Prone is a static analysis tool for Java that catches common programming mistakes at compile-time.", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "64145d0e7fee5a69ed7b84cf402de998" }, { "alg" : "SHA-1", "content" : "89b684257096f548fa39a7df9fdaa409d4d4df91" }, { "alg" : "SHA-256", "content" : "9e6814cb71816988a4fd1b07a993a8f21bb7058d522c162b1de849e19bea54ae" }, { "alg" : "SHA-512", "content" : "3cea86be94bb8ae40d21ad4bf7d7f6b2233e89593b7b741ad84c78840cd3837bb5136f52e62fe9ae0953d7b190c46ad3edc102dfa97b4c7ea472a80206bf5db7" }, { "alg" : "SHA-384", "content" : "7622eb33f83f03ab32b710b36c2fe836e24c5318f65fb8c0631a99507ca3ae65c2df8e33b63a5ce853b9cab6d9cb32e5" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.18.0?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://errorprone.info/error_prone_annotations" }, { "type" : "vcs", "url" : "https://github.com/google/error-prone/error_prone_annotations" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/com.google.j2objc/j2objc-annotations@2.8?type=jar", "group" : "com.google.j2objc", "name" : "j2objc-annotations", "version" : "2.8", "description" : "A set of annotations that provide additional information to the J2ObjC translator to modify the result of translation.", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "c50af69b704dc91050efb98e0dff66d1" }, { "alg" : "SHA-1", "content" : "c85270e307e7b822f1086b93689124b89768e273" }, { "alg" : "SHA-256", "content" : "f02a95fa1a5e95edb3ed859fd0fb7df709d121a35290eff8b74dce2ab7f4d6ed" }, { "alg" : "SHA-512", "content" : "f8263868a792b41707c9e7fe6fa5650a14cd93fbeafad20efe3772a3058fc933eb59782ec59e6eb9b9c569aa96da80134ae9fdf7547b69c44a97087efddceeff" }, { "alg" : "SHA-384", "content" : "e6087ec31fec8289158496ad2ed6ce8472d5d513808a312e0782cedac3b86c37a62a63c0b5ea3839491d109fe9e148a1" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/com.google.j2objc/j2objc-annotations@2.8?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://github.com/google/j2objc/" }, { "type" : "distribution-intake", "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type" : "vcs", "url" : "http://svn.sonatype.org/spice/trunk/oss/oss-parent-9/j2objc-annotations" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/org.apache.kafka/kafka-streams@7.6.9-ce?type=jar", "group" : "org.apache.kafka", "name" : "kafka-streams", "version" : "7.6.9-ce", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "5de13406bb299744190a6b928c2608ef" }, { "alg" : "SHA-1", "content" : "76652f843d5e3727b4a16f9160627fbe96b24179" }, { "alg" : "SHA-256", "content" : "815d7e7ff3a4df9a6f20fdc418050c84aa61c98b0e2b93b3f1e3c4d2af90c1fc" }, { "alg" : "SHA-512", "content" : "3464f0bcb3efbf42cc0c5d40ff884de9fb23294d21f5d3e22be5b01882e4d1093b54cf1532485da85bdf40d4c077cf63106f3c5121617c673b08ec79c49e2919" }, { "alg" : "SHA-384", "content" : "2ae205ee59b14606427656899f9234977240497823f80d664f35ef9f50a1f00e954bbbfca73e4c26357a6916c73e6dd3" } ], "licenses" : [ { "license" : { "name" : "Confluent License Agreement", "url" : "https://www.confluent.io/legal/confluent-license-agreement/" } } ], "purl" : "pkg:maven/org.apache.kafka/kafka-streams@7.6.9-ce?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://docs.confluent.io/platform/current/get-started/platform.html" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/org.rocksdb/rocksdbjni@7.9.2?type=jar", "publisher" : "Facebook", "group" : "org.rocksdb", "name" : "rocksdbjni", "version" : "7.9.2", "description" : "RocksDB fat jar that contains .so files for linux32 and linux64 (glibc and musl-libc), jnilib files for Mac OSX, and a .dll for Windows x64.", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "16e263508ddba146dcf18efb1a4627d2" }, { "alg" : "SHA-1", "content" : "6409b667493149191b09fe1fce94bada6096a3e9" }, { "alg" : "SHA-256", "content" : "0e0e886c44ef1a04104116a05c7e03e9b24069d7fbc6a0fb2cde2032fa92cb20" }, { "alg" : "SHA-512", "content" : "39670f0e33f07cd801a4a5d006b5881aceef1d25861f11bd0b5aab2d3d7904dceef228600e2f2a08137ed34b36177e1251be2db35ef508d5b5f6452ccc7591e1" }, { "alg" : "SHA-384", "content" : "ae2c2e0c4dfbbdb980ba3433a309f304e1f3335e3e1d39e3659d182367e76ea368f390ef47187d1c291da51b63285013" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0", "url" : "https://www.apache.org/licenses/LICENSE-2.0" } }, { "license" : { "name" : "GNU General Public License, version 2", "url" : "http://www.gnu.org/licenses/gpl-2.0.html" } } ], "purl" : "pkg:maven/org.rocksdb/rocksdbjni@7.9.2?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://rocksdb.org" }, { "type" : "mailing-list", "url" : "https://groups.google.com/forum/#!forum/rocksdb" }, { "type" : "vcs", "url" : "scm:git:https://github.com/facebook/rocksdb.git" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.16.0?type=jar", "publisher" : "FasterXML", "group" : "com.fasterxml.jackson.core", "name" : "jackson-annotations", "version" : "2.16.0", "description" : "Core annotations used for value types, used by Jackson data binding package.", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "9caec6e7cdd5cc18e18f99359b9e8d95" }, { "alg" : "SHA-1", "content" : "dc30995f7428c0a405eba9b8c619b20d2b3b9905" }, { "alg" : "SHA-256", "content" : "c4b90ea0c0074da17efdc3aa23973525f25d6f34725692169748f529547334a6" }, { "alg" : "SHA-512", "content" : "2c7d70c88b7e8dd710863f8c920d3e2fe56f8ecc01c757011bd9bbd195228028402566fbf4feaa083192453348a86a70732bf5d3f6eebb75ab4e5b3a525f6148" }, { "alg" : "SHA-384", "content" : "99413ce47a9980b0954051f651068565e75b6300c0b801179c87f347053e9c9f31c60c698a7e1ee9d1ff664facbb6c8e" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.16.0?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://github.com/FasterXML/jackson" }, { "type" : "distribution-intake", "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type" : "issue-tracker", "url" : "https://github.com/FasterXML/jackson-annotations/issues" }, { "type" : "vcs", "url" : "https://github.com/FasterXML/jackson-annotations" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.16.0?type=jar", "publisher" : "FasterXML", "group" : "com.fasterxml.jackson.core", "name" : "jackson-databind", "version" : "2.16.0", "description" : "General data-binding functionality for Jackson: works on core streaming API", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "f9ae3e3bd773be8b474cb1b98dcf7ee6" }, { "alg" : "SHA-1", "content" : "3a6b7f8ff7b30d518bbd65678e9c30cd881f19a7" }, { "alg" : "SHA-256", "content" : "8aaf1753823be70b798290e5826ab5bfe015d35b3a36a5d3c2ec9f57d4b0138b" }, { "alg" : "SHA-512", "content" : "2f0a4211c1723bd88299380093a935840290694838a4c5ae0989bad46a615e02017b707ba7f3b825d0f0163f42a392efd0a1629024594992b5a4edee415c207a" }, { "alg" : "SHA-384", "content" : "8113432d108a152cd08ff4b12e4ea649d3240db070d3194a64712459436c1ea0c4b5362ec86ed076dc92c013215b043c" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.16.0?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://github.com/FasterXML/jackson" }, { "type" : "distribution-intake", "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type" : "issue-tracker", "url" : "https://github.com/FasterXML/jackson-databind/issues" }, { "type" : "vcs", "url" : "https://github.com/FasterXML/jackson-databind" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.16.0?type=jar", "publisher" : "FasterXML", "group" : "com.fasterxml.jackson.core", "name" : "jackson-core", "version" : "2.16.0", "description" : "Core Jackson processing abstractions (aka Streaming API), implementation for JSON", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "e2510fa60b7d363566a9016a8c40710f" }, { "alg" : "SHA-1", "content" : "899e5cf01be55fbf094ad72b2edb0c5df99111ee" }, { "alg" : "SHA-256", "content" : "66e2cde4cc7e565d5fce2a2998b64e991777bf9fad4d220735c525fd8d01c31a" }, { "alg" : "SHA-512", "content" : "89b134b2808c34562f751ff39b938e8c1b67030c4cfb8fd0418d76aed1d6b8f256915a5e88d9935f472322b414a7002e59d92160854cbd01774b28eed61c5315" }, { "alg" : "SHA-384", "content" : "fae7b757f776419e32e2f598f12c92c576c37e0ca489250a4aabf2db118913163aba958a9d5414da47d770810b20594a" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.16.0?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://github.com/FasterXML/jackson-core" }, { "type" : "distribution-intake", "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type" : "issue-tracker", "url" : "https://github.com/FasterXML/jackson-core/issues" }, { "type" : "vcs", "url" : "https://github.com/FasterXML/jackson-core" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/org.apache.kafka/kafka-clients@7.6.9-ce?type=jar", "group" : "org.apache.kafka", "name" : "kafka-clients", "version" : "7.6.9-ce", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "0771b1e07bbde3d978eb2b8160b94f0a" }, { "alg" : "SHA-1", "content" : "33408e8df8e765dc71211d2e9e4a20ea1e8fae4d" }, { "alg" : "SHA-256", "content" : "cdd263025ba06077d0d65c5f6e280724b519f02e5e79ea8cbc6408007434df70" }, { "alg" : "SHA-512", "content" : "84385e43d3776b5081e53c1118b39f4226f87fb0b042b4bf01ca6524352d821e2bff6fd0c8be3d3cf709faf711a4c85cf1972f703b1287c384cbb2763881127b" }, { "alg" : "SHA-384", "content" : "947676e432718038daf268843425d4601e5a8d60fde6c92051c1976bf64027c0b3d6f1dbcdfc7c9175ab1c6ed9d1b56d" } ], "licenses" : [ { "license" : { "name" : "Confluent License Agreement", "url" : "https://www.confluent.io/legal/confluent-license-agreement/" } } ], "purl" : "pkg:maven/org.apache.kafka/kafka-clients@7.6.9-ce?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://docs.confluent.io/platform/current/get-started/platform.html" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/io.confluent/telemetry-events-api@7.6.9-ce?type=jar", "group" : "io.confluent", "name" : "telemetry-events-api", "version" : "7.6.9-ce", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "3f185ac9dd4dff0e77bcbe3526e93923" }, { "alg" : "SHA-1", "content" : "f2e1804aae44c3ac4f037962d029015609098a0e" }, { "alg" : "SHA-256", "content" : "2918bbdd54c88171926b321dc4855ee6cd04eaa24a5ee55b1ce7c731416814b0" }, { "alg" : "SHA-512", "content" : "b6474f60aeb98ef1cdc5436ce44ecaf2cedb102467d4c0e96c8f0f22421f706666cda04cc931aa440ced3bdb0867da888fe791112d8202e6243f6653a7bc8cab" }, { "alg" : "SHA-384", "content" : "47d49e64e44fb8e7a193f7f0893cc2a4815e738df9247c97ba63ca39f3f6311e31dad337b6bf3c14092d68acb6a54e77" } ], "licenses" : [ { "license" : { "name" : "Confluent License Agreement", "url" : "https://www.confluent.io/legal/confluent-license-agreement/" } } ], "purl" : "pkg:maven/io.confluent/telemetry-events-api@7.6.9-ce?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://docs.confluent.io/platform/current/get-started/platform.html" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/com.github.luben/zstd-jni@1.5.5-1?type=jar", "publisher" : "com.github.luben", "group" : "com.github.luben", "name" : "zstd-jni", "version" : "1.5.5-1", "description" : "JNI bindings for Zstd native library that provides fast and high compression lossless algorithm for Java and all JVM languages.", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "16ede3375b6c900abafd95b600b512b9" }, { "alg" : "SHA-1", "content" : "fda1d6278299af27484e1cc3c79a060e41b7ef7e" }, { "alg" : "SHA-256", "content" : "f779fcd068ad91ac77aa0239104bd42793b0dce807fb1d73b51c635e0ea1e293" }, { "alg" : "SHA-512", "content" : "15762f4bab9bf89211fd1a59f40bfc15e8d4041ad8be29966d93b4a2272059b57cacb97483eeb3ba9a63f2d78210d194591d0e7db923a6b5e754ef6f28c0d72e" }, { "alg" : "SHA-384", "content" : "b6db1222eb674bc743f85b768d585f75b30d7db70c70d75ec1fab33b3aa343ea05e59b906d7c2784d844911f05f792b6" } ], "licenses" : [ { "license" : { "id" : "BSD-2-Clause" } } ], "purl" : "pkg:maven/com.github.luben/zstd-jni@1.5.5-1?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://github.com/luben/zstd-jni" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/org.lz4/lz4-java@1.8.0?type=jar", "group" : "org.lz4", "name" : "lz4-java", "version" : "1.8.0", "description" : "Java ports and bindings of the LZ4 compression algorithm and the xxHash hashing algorithm", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "936a927700aa8fc3b75d21d7571171f6" }, { "alg" : "SHA-1", "content" : "4b986a99445e49ea5fbf5d149c4b63f6ed6c6780" }, { "alg" : "SHA-256", "content" : "d74a3334fb35195009b338a951f918203d6bbca3d1d359033dc33edd1cadc9ef" }, { "alg" : "SHA-512", "content" : "98d59086a6021ca571d9c1d64b715e43044c730e1ac563f514c40cf44302615d30378b6d5cc69990446522de6260dc8e7b303e3990a3139dc326d058dfb6dbd9" }, { "alg" : "SHA-384", "content" : "8e3f2acdbb41a00c4d9cc5f328e63fb626ac7c6c84e1bf9502e2fcc76a591b2b819b2d27b29925ff986b95c297b30e2c" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/org.lz4/lz4-java@1.8.0?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://github.com/lz4/lz4-java" }, { "type" : "vcs", "url" : "git://github.com/lz4/lz4-java.git" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/org.xerial.snappy/snappy-java@1.1.10.5?type=jar", "publisher" : "xerial.org", "group" : "org.xerial.snappy", "name" : "snappy-java", "version" : "1.1.10.5", "description" : "snappy-java: A fast compression/decompression library", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "a52ffcdbbe525b486237a7098e5c5ff7" }, { "alg" : "SHA-1", "content" : "ac605269f3598506196e469f1fb0d7ed5c55059e" }, { "alg" : "SHA-256", "content" : "0f3f1857ed33116583f480b4df5c0218836c47bfbc9c6221c0d73f356decf37b" }, { "alg" : "SHA-512", "content" : "36c288aa84017b52362a49a20d1702151a16b9f58518b6877f11122941a549d94fab8d515f7f1ad6384fb94be569328abf862edaf970c10a16832498dfda853b" }, { "alg" : "SHA-384", "content" : "693a542ca2471dec4da5fe582563aff1bf5238e1a8d1a1f79cd8138334f94f1112094fbd270b1637d983c9290084a6e1" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0", "url" : "https://www.apache.org/licenses/LICENSE-2.0" } } ], "purl" : "pkg:maven/org.xerial.snappy/snappy-java@1.1.10.5?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://github.com/xerial/snappy-java" }, { "type" : "vcs", "url" : "https://github.com/xerial/snappy-java" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/junit/junit@4.13.2?type=jar", "publisher" : "JUnit", "group" : "junit", "name" : "junit", "version" : "4.13.2", "description" : "JUnit is a unit testing framework for Java, created by Erich Gamma and Kent Beck.", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "d98a9a02a99a9acd22d7653cbcc1f31f" }, { "alg" : "SHA-1", "content" : "8ac9e16d933b6fb43bc7f576336b8f4d7eb5ba12" }, { "alg" : "SHA-256", "content" : "8e495b634469d64fb8acfa3495a065cbacc8a0fff55ce1e31007be4c16dc57d3" }, { "alg" : "SHA-512", "content" : "a31b9950f929a7e5a600d89787ef40e42a8a8e2392e210d0c0f45b3572937670a18a524f1815508cd1152cd1eaa7275cb7430ba45c053be365c83c231bccd3f0" }, { "alg" : "SHA-384", "content" : "9f85c56a77c699eb87630b9e8224068a34c296bcd9aadb52248dd4665036f5bf1048fe75e5cb590b59e7855ca716acae" } ], "licenses" : [ { "license" : { "id" : "EPL-1.0", "url" : "http://www.eclipse.org/legal/epl-v10.html" } } ], "purl" : "pkg:maven/junit/junit@4.13.2?type=jar", "externalReferences" : [ { "type" : "website", "url" : "http://junit.org" }, { "type" : "build-system", "url" : "https://github.com/junit-team/junit4/actions" }, { "type" : "distribution", "url" : "https://github.com/junit-team/junit4/wiki/Download-and-Install" }, { "type" : "distribution-intake", "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type" : "issue-tracker", "url" : "https://github.com/junit-team/junit4/issues" }, { "type" : "vcs", "url" : "https://github.com/junit-team/junit4" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/org.hamcrest/hamcrest-core@1.3?type=jar", "group" : "org.hamcrest", "name" : "hamcrest-core", "version" : "1.3", "description" : "This is the core API of hamcrest matcher framework to be used by third-party framework providers. This includes the a foundation set of matcher implementations for common operations.", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "6393363b47ddcbba82321110c3e07519" }, { "alg" : "SHA-1", "content" : "42a25dc3219429f0e5d060061f71acb49bf010a0" }, { "alg" : "SHA-256", "content" : "66fdef91e9739348df7a096aa384a5685f4e875584cce89386a7a47251c4d8e9" }, { "alg" : "SHA-512", "content" : "e237ae735aac4fa5a7253ec693191f42ef7ddce384c11d29fbf605981c0be077d086757409acad53cb5b9e53d86a07cc428d459ff0f5b00d32a8cbbca390be49" }, { "alg" : "SHA-384", "content" : "4b5297d2a12cc32b824153afc83f1ba9f1869ca288330f0a2f759659d09e4c420eb6ba4a1efbfa0657b625edd41293d5" } ], "licenses" : [ { "license" : { "id" : "BSD-3-Clause" } } ], "purl" : "pkg:maven/org.hamcrest/hamcrest-core@1.3?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://github.com/hamcrest/JavaHamcrest/hamcrest-core" }, { "type" : "vcs", "url" : "https://github.com/hamcrest/JavaHamcrest/hamcrest-core" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar", "publisher" : "The Apache Software Foundation", "group" : "org.apache.commons", "name" : "commons-lang3", "version" : "3.18.0", "description" : "Apache Commons Lang, a package of Java utility classes for the classes that are in java.lang's hierarchy, or are considered to be so standard as to justify existence in java.lang. The code is tested using the latest revision of the JDK for supported LTS releases: 8, 11, 17 and 21 currently. See https://github.com/apache/commons-lang/blob/master/.github/workflows/maven.yml Please ensure your build environment is up-to-date and kindly report any build issues.", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "48b9886957920a4cdb602780ca345087" }, { "alg" : "SHA-1", "content" : "fb14946f0e39748a6571de0635acbe44e7885491" }, { "alg" : "SHA-256", "content" : "4eeeae8d20c078abb64b015ec158add383ac581571cddc45c68f0c9ae0230720" }, { "alg" : "SHA-512", "content" : "c2c9d497fc1be411050f4011b2407764b78aa098eb42925af8a197eabdbc25b507f09fb898805e9bed4815f35236a508ee5b096e36f363df4d407232d50fc832" }, { "alg" : "SHA-384", "content" : "4fb3f101106e4ce3666d5c15d276ba86f7683a0ef35f0384edfcd579ea454275edbb7400795d265ec3a38e39997e79b8" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0", "url" : "https://www.apache.org/licenses/LICENSE-2.0" } } ], "purl" : "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://commons.apache.org/proper/commons-lang/" }, { "type" : "build-system", "url" : "https://github.com/apache/commons-lang/actions" }, { "type" : "distribution-intake", "url" : "https://repository.apache.org/service/local/staging/deploy/maven2" }, { "type" : "issue-tracker", "url" : "https://issues.apache.org/jira/browse/LANG" }, { "type" : "mailing-list", "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/" }, { "type" : "vcs", "url" : "https://gitbox.apache.org/repos/asf/commons-lang.git" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar", "publisher" : "QOS.ch", "group" : "org.slf4j", "name" : "slf4j-api", "version" : "1.7.36", "description" : "The slf4j API", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "872da51f5de7f3923da4de871d57fd85" }, { "alg" : "SHA-1", "content" : "6c62681a2f655b49963a5983b8b0950a6120ae14" }, { "alg" : "SHA-256", "content" : "d3ef575e3e4979678dc01bf1dcce51021493b4d11fb7f1be8ad982877c16a1c0" }, { "alg" : "SHA-512", "content" : "f9b033fc019a44f98b16048da7e2b59edd4a6a527ba60e358f65ab88e0afae03a9340f1b3e8a543d49fa542290f499c5594259affa1ff3e6e7bf3b428d4c610b" }, { "alg" : "SHA-384", "content" : "2b14ad035877087157e379d3277dcdcd79e58d6bdb147c47d29e377d75ce53ad42cafbf22f5fb7827c7e946ff4876b9a" } ], "licenses" : [ { "license" : { "id" : "MIT", "url" : "https://opensource.org/license/mit/" } } ], "purl" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar", "externalReferences" : [ { "type" : "website", "url" : "http://www.slf4j.org" }, { "type" : "distribution-intake", "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type" : "vcs", "url" : "https://github.com/qos-ch/slf4j/slf4j-api" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/org.slf4j/slf4j-reload4j@1.7.36?type=jar", "publisher" : "QOS.ch", "group" : "org.slf4j", "name" : "slf4j-reload4j", "version" : "1.7.36", "description" : "SLF4J Reload4j Binding", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "ebfedc67cca7891e9c535e5899930f07" }, { "alg" : "SHA-1", "content" : "db708f7d959dee1857ac524636e85ecf2e1781c1" }, { "alg" : "SHA-256", "content" : "ae6fdd5c9547896114d5ec7fa7503733b7d2890573d3886fb548b3119c4d3f67" }, { "alg" : "SHA-512", "content" : "595a00905b67886376adb45d6964b6d35a7e7fe90cfe0e26ed3b852c755ac4de96894974aac5fc590df689d3a28fa7198d899b544f30e83c320a2befe88fcb24" }, { "alg" : "SHA-384", "content" : "700e92389464261381690cee669d9446bf912b58fd94be50837e1456c8f42a4586960036c097b7e08c2b32eab190adc1" } ], "licenses" : [ { "license" : { "id" : "MIT", "url" : "https://opensource.org/license/mit/" } } ], "purl" : "pkg:maven/org.slf4j/slf4j-reload4j@1.7.36?type=jar", "externalReferences" : [ { "type" : "website", "url" : "http://reload4j.qos.ch" }, { "type" : "distribution-intake", "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type" : "vcs", "url" : "https://github.com/qos-ch/slf4j/slf4j-reload4j" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/ch.qos.reload4j/reload4j@1.2.25?type=jar", "publisher" : "QOS.CH Sarl (Switzerland)", "group" : "ch.qos.reload4j", "name" : "reload4j", "version" : "1.2.25", "description" : "Reload4j revives EOLed log4j 1.x", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "ca989b9d69c90159dde3b1594e99d58c" }, { "alg" : "SHA-1", "content" : "45921e383a1001c2a599fc4c6cf59af80cdd1cf1" }, { "alg" : "SHA-256", "content" : "e71115175c4b080cf51dd72097165ea001ff9fafdc4f79d88049d0b1ecca979c" }, { "alg" : "SHA-512", "content" : "a81e53780dccb36677471b9e6fbf25fdad49f68105a36b9a6708b1419ca9adb2957187ee1f8213add8c17a8a8bed1e744414fcf2833710990596fb780731bf5e" }, { "alg" : "SHA-384", "content" : "4202e04f302bdd94fa3bfc39361794cff964749b5fbb825fc4ff4a749f85cd373f0dd2d807911e81b4bcff86165a33cf" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/ch.qos.reload4j/reload4j@1.2.25?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://reload4j.qos.ch" }, { "type" : "distribution-intake", "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type" : "vcs", "url" : "https://github.com/qos-ch/reload4j" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/org.junit.jupiter/junit-jupiter-engine@5.8.2?type=jar", "group" : "org.junit.jupiter", "name" : "junit-jupiter-engine", "version" : "5.8.2", "description" : "Module \"junit-jupiter-engine\" of JUnit 5.", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "1bddf5761ce2a60e6d84663e6b79e280" }, { "alg" : "SHA-1", "content" : "c598b4328d2f397194d11df3b1648d68d7d990e3" }, { "alg" : "SHA-256", "content" : "753b7726cdd158bb34cedb94c161e2291896f47832a1e9eda53d970020a8184e" }, { "alg" : "SHA-512", "content" : "f6c8460d6048aab121cbb0153d71517a916dc020be3deec0f7a022c04ad7679c23155cc50167c6191730704a19943b0d1b6209e68f0e5078d8e1fd66ae8fb9f4" }, { "alg" : "SHA-384", "content" : "adadbd35b1b36de1a71b7129f24a0206f60eeb9af4dc14e6c8859983c6d90ccd3be0f71dd0f8d35597c4db0c55236d64" } ], "licenses" : [ { "license" : { "id" : "EPL-2.0" } } ], "purl" : "pkg:maven/org.junit.jupiter/junit-jupiter-engine@5.8.2?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://junit.org/junit5/" }, { "type" : "vcs", "url" : "https://github.com/junit-team/junit5" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/org.junit.platform/junit-platform-engine@1.8.2?type=jar", "group" : "org.junit.platform", "name" : "junit-platform-engine", "version" : "1.8.2", "description" : "Module \"junit-platform-engine\" of JUnit 5.", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "a6d209076d8a9fe4029c638cf05e6030" }, { "alg" : "SHA-1", "content" : "b737de09f19864bd136805c84df7999a142fec29" }, { "alg" : "SHA-256", "content" : "0b7d000f8c3e8e5f7d6b819649936e7b9938314e87c8f983805218ea57567e59" }, { "alg" : "SHA-512", "content" : "be82009a1958fc442a789f0515d43fd5e8fcd3767a48b04093a5fb6421d9de06d88c90849b9ad91471eb150b0496c32a69ecfd12dd0c26a891622060a78ed2b8" }, { "alg" : "SHA-384", "content" : "f91b0be2e15f1710055c959a47c789cccee3733d24e01655a958d80f8e21222f93977220dd8a1b8337142f91ed829d2e" } ], "licenses" : [ { "license" : { "id" : "EPL-2.0" } } ], "purl" : "pkg:maven/org.junit.platform/junit-platform-engine@1.8.2?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://junit.org/junit5/" }, { "type" : "vcs", "url" : "https://github.com/junit-team/junit5" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/org.opentest4j/opentest4j@1.2.0?type=jar", "group" : "org.opentest4j", "name" : "opentest4j", "version" : "1.2.0", "description" : "Open Test Alliance for the JVM", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "45c9a837c21f68e8c93e85b121e2fb90" }, { "alg" : "SHA-1", "content" : "28c11eb91f9b6d8e200631d46e20a7f407f2a046" }, { "alg" : "SHA-256", "content" : "58812de60898d976fb81ef3b62da05c6604c18fd4a249f5044282479fc286af2" }, { "alg" : "SHA-512", "content" : "17f77797a260eb2bd1666a90e25efc79a5413afa9df1c1cb6c4cd1949d61c38b241e3bb20956396b5f54d144720303d72a2ac00bc5bf245a260a3c3099e01c74" }, { "alg" : "SHA-384", "content" : "ef25f5dd948c9ab7256e896da994871c1645b22a8d2d83f1e9ff7c6562b62acb70fcf0bb976a9580fb955a8e8b9c43dd" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/org.opentest4j/opentest4j@1.2.0?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://github.com/ota4j-team/opentest4j" }, { "type" : "vcs", "url" : "https://github.com/ota4j-team/opentest4j" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/org.junit.platform/junit-platform-commons@1.8.2?type=jar", "group" : "org.junit.platform", "name" : "junit-platform-commons", "version" : "1.8.2", "description" : "Module \"junit-platform-commons\" of JUnit 5.", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "72693a20944048031e0a55f67413ca1b" }, { "alg" : "SHA-1", "content" : "32c8b8617c1342376fd5af2053da6410d8866861" }, { "alg" : "SHA-256", "content" : "d2e015fca7130e79af2f4608dc54415e4b10b592d77333decb4b1a274c185050" }, { "alg" : "SHA-512", "content" : "9ff90e05f39933342dcf8440336b32ac803a7348f86b63dab938083759cce56e22e290d056d4596f035a4dff629a4d159bf146ca7c32d0e89df2e0f0af7f1a9e" }, { "alg" : "SHA-384", "content" : "078f3e45d43772c385a7b290bf26de0433875fa21ce98611299f34e5c09e02486146fec1601fa7b19dd5c884a47e4148" } ], "licenses" : [ { "license" : { "id" : "EPL-2.0" } } ], "purl" : "pkg:maven/org.junit.platform/junit-platform-commons@1.8.2?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://junit.org/junit5/" }, { "type" : "vcs", "url" : "https://github.com/junit-team/junit5" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/org.junit.jupiter/junit-jupiter-api@5.8.2?type=jar", "group" : "org.junit.jupiter", "name" : "junit-jupiter-api", "version" : "5.8.2", "description" : "Module \"junit-jupiter-api\" of JUnit 5.", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "4e2f81d2ad6c031476d784d25c0f67a7" }, { "alg" : "SHA-1", "content" : "4c21029217adf07e4c0d0c5e192b6bf610c94bdc" }, { "alg" : "SHA-256", "content" : "1808ee87e0f718cd6e25f3b75afc17956ac8a3edc48c7e9bab9f19f9a79e3801" }, { "alg" : "SHA-512", "content" : "c304f4d392cee741f5cb75f1e4bdca61a0100d03cd5c79ccdbe61d9452a4e324b3a0c89da5bd92cf562d96fa682bdb2c8a062c6d45dade25f4680696620d58eb" }, { "alg" : "SHA-384", "content" : "6fe32ba4c6b1234f096fe468185eed92c886481c0c00734e6b5f4d047ca907ba49ebfab2ab4e68bb05af0cdd4bc70142" } ], "licenses" : [ { "license" : { "id" : "EPL-2.0" } } ], "purl" : "pkg:maven/org.junit.jupiter/junit-jupiter-api@5.8.2?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://junit.org/junit5/" }, { "type" : "vcs", "url" : "https://github.com/junit-team/junit5" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/org.apiguardian/apiguardian-api@1.1.2?type=jar", "group" : "org.apiguardian", "name" : "apiguardian-api", "version" : "1.1.2", "description" : "@API Guardian", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "8c7de3f82037fa4a2e8be2a2f13092af" }, { "alg" : "SHA-1", "content" : "a231e0d844d2721b0fa1b238006d15c6ded6842a" }, { "alg" : "SHA-256", "content" : "b509448ac506d607319f182537f0b35d71007582ec741832a1f111e5b5b70b38" }, { "alg" : "SHA-512", "content" : "d7ccd0e7019f1a997de39d66dc0ad4efe150428fdd7f4c743c93884f1602a3e90135ad34baea96d5b6d925ad6c0c8487c8e78304f0a089a12383d4a62e2c9a61" }, { "alg" : "SHA-384", "content" : "5ae11cfedcee7da43a506a67946ddc8a7a2622284a924ba78f74541e9a22db6868a15f5d84edb91a541e38afded734ea" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/org.apiguardian/apiguardian-api@1.1.2?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://github.com/apiguardian-team/apiguardian" }, { "type" : "vcs", "url" : "https://github.com/apiguardian-team/apiguardian" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/org.junit.vintage/junit-vintage-engine@5.8.2?type=jar", "group" : "org.junit.vintage", "name" : "junit-vintage-engine", "version" : "5.8.2", "description" : "Module \"junit-vintage-engine\" of JUnit 5.", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "a2e0d078b1cffaa71f444b50eebe26b0" }, { "alg" : "SHA-1", "content" : "64dde404f2db8b0e2ec6a53d31f4a076e298b1d1" }, { "alg" : "SHA-256", "content" : "ebd567b84e380d5373c47de3c9616d84f7bef91f9f8a8e7fc925be68240c1ba4" }, { "alg" : "SHA-512", "content" : "b0d65c6f0192dfd0a9e80ff2dfeb4ce69b6d987df9e83c81eec4ffa19dc3c86a6300faab23d5aa322640425f82164bce562f0859c02923e6b3b08d49f57d5678" }, { "alg" : "SHA-384", "content" : "083b8ee1c67dd85815903f26bad0988b0ddebbb88f8983394889c8daee0021bb6dbd7c0ad2d9e058c01aae815f048dc9" } ], "licenses" : [ { "license" : { "id" : "EPL-2.0" } } ], "purl" : "pkg:maven/org.junit.vintage/junit-vintage-engine@5.8.2?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://junit.org/junit5/" }, { "type" : "vcs", "url" : "https://github.com/junit-team/junit5" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/commons-io/commons-io@2.16.0?type=jar", "publisher" : "The Apache Software Foundation", "group" : "commons-io", "name" : "commons-io", "version" : "2.16.0", "description" : "The Apache Commons IO library contains utility classes, stream implementations, file filters, file comparators, endian transformation classes, and much more.", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "4e115587dca5dd3c178e7c8f17a371b3" }, { "alg" : "SHA-1", "content" : "27875a7935f1ddcc13267eb6fae1f719e0409572" }, { "alg" : "SHA-256", "content" : "d1e417901235fae3aa0cb9736baeaf5b74de7349817d1c72390d82e3d83d3a97" }, { "alg" : "SHA-512", "content" : "afba6cc8fdef9d347aaccb3bff327ba8e2c17135989cf01179fdb2e3ca8d0afdce37defb08659eb1e99b8730e2baaaec95c7d3599f7ebf526c97c8edc477b852" }, { "alg" : "SHA-384", "content" : "0413eda39746809f3c7ce44336f6d88d8d72e2781db4b74c98a206f34b94639a39024697fde25f310edda8cf628fd376" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0", "url" : "https://www.apache.org/licenses/LICENSE-2.0" } } ], "purl" : "pkg:maven/commons-io/commons-io@2.16.0?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://commons.apache.org/proper/commons-io/" }, { "type" : "build-system", "url" : "https://github.com/apache/commons-parent/actions" }, { "type" : "distribution-intake", "url" : "https://repository.apache.org/service/local/staging/deploy/maven2" }, { "type" : "issue-tracker", "url" : "https://issues.apache.org/jira/browse/IO" }, { "type" : "mailing-list", "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/" }, { "type" : "vcs", "url" : "https://gitbox.apache.org/repos/asf?p=commons-io.git" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/org.mockito/mockito-core@4.6.1?type=jar", "group" : "org.mockito", "name" : "mockito-core", "version" : "4.6.1", "description" : "Mockito mock objects library core API and implementation", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "67c6f27b8607f4634bb64c4ffe42987b" }, { "alg" : "SHA-1", "content" : "545665913b140db2793a0c37e6a686affd9c08b5" }, { "alg" : "SHA-256", "content" : "ee3b91cdf4c23cff92960c32364371c683ee6415f1ec4678317bcea79c9f9819" }, { "alg" : "SHA-512", "content" : "50dd388a7d24ad340fb387f30a65dabe1e613e1e086611f58691c5c4b05ce038b9eb5ab79ce52f1ca9abbe55c302a4802a86f228d952afd9d3e9fbceef42e7c5" }, { "alg" : "SHA-384", "content" : "b34472c5a18b06580675b78a5b2c461e13d373c29a0e8ef8d1d3e750e68875edb004a8de8f0755436e9954468abde252" } ], "licenses" : [ { "license" : { "id" : "MIT" } } ], "purl" : "pkg:maven/org.mockito/mockito-core@4.6.1?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://github.com/mockito/mockito" }, { "type" : "build-system", "url" : "https://github.com/mockito/mockito/actions" }, { "type" : "issue-tracker", "url" : "https://github.com/mockito/mockito/issues" }, { "type" : "vcs", "url" : "https://github.com/mockito/mockito.git" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/net.bytebuddy/byte-buddy@1.12.10?type=jar", "group" : "net.bytebuddy", "name" : "byte-buddy", "version" : "1.12.10", "description" : "Byte Buddy is a Java library for creating Java classes at run time. This artifact is a build of Byte Buddy with all ASM dependencies repackaged into its own name space.", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "92ceb541d5a497289e9b920b3cc94c13" }, { "alg" : "SHA-1", "content" : "f34127d93639fad8c6fb84b3ca30292697d6c55d" }, { "alg" : "SHA-256", "content" : "1a1ac9ce65eddcea54ead958387bb0b3863d02a2ffe856ab6a57ac79737c19cf" }, { "alg" : "SHA-512", "content" : "4e295ba2c209794be835ad15aa49f3f01622c7c84be42f4c3ecc9ec0cfab508c45a3077dde310ea2c5201e651ea0f48a870668016c0c79b8b96c4a4930db1087" }, { "alg" : "SHA-384", "content" : "f07efd73ed56f672b6d6fe69fee8a66ca8f9af174aa8c24a8b5c14f8cc2a9a3508fe8489b7ecb652c6e2f9ca9aad256e" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/net.bytebuddy/byte-buddy@1.12.10?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://bytebuddy.net/byte-buddy" }, { "type" : "distribution-intake", "url" : "https://s01.oss.sonatype.org/service/local/staging/deploy/maven2" }, { "type" : "issue-tracker", "url" : "https://github.com/raphw/byte-buddy/issues" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/net.bytebuddy/byte-buddy-agent@1.12.10?type=jar", "group" : "net.bytebuddy", "name" : "byte-buddy-agent", "version" : "1.12.10", "description" : "The Byte Buddy agent offers convenience for attaching an agent to the local or a remote VM.", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "b38c175272756e6dd2d0d7aa71e22412" }, { "alg" : "SHA-1", "content" : "01f097f8d6cad60e8f93e5eb670cf5dc9b64da32" }, { "alg" : "SHA-256", "content" : "5e8606d14a844c1ec70d2eb8f50c4009fb16138905dee8ca50a328116c041257" }, { "alg" : "SHA-512", "content" : "7a296822b2262719989dfcfa5ce549341d2f005088beaf6fc1e6dd0585962badd68ae210bae73709646e70b8d52b14239c88c3cabb50dfc261f77be5ed7866a2" }, { "alg" : "SHA-384", "content" : "10d5deb094c50a36dcf613721b5b23f1b6206696a19f5549dd960cc7e4160c69fcdb2759f9d4fa84817693d298333c09" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/net.bytebuddy/byte-buddy-agent@1.12.10?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://bytebuddy.net/byte-buddy-agent" }, { "type" : "distribution-intake", "url" : "https://s01.oss.sonatype.org/service/local/staging/deploy/maven2" }, { "type" : "issue-tracker", "url" : "https://github.com/raphw/byte-buddy/issues" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/org.objenesis/objenesis@3.2?type=jar", "publisher" : "Joe Walnes, Henri Tremblay, Leonardo Mesquita", "group" : "org.objenesis", "name" : "objenesis", "version" : "3.2", "description" : "A library for instantiating Java objects", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "5c1ee20481a06561af295034ea89c4b4" }, { "alg" : "SHA-1", "content" : "7fadf57620c8b8abdf7519533e5527367cb51f09" }, { "alg" : "SHA-256", "content" : "03d960bd5aef03c653eb000413ada15eb77cdd2b8e4448886edf5692805e35f3" }, { "alg" : "SHA-512", "content" : "13dbec3062b19c5b9920c0b69e842a9648f2a148c57b6977d90deea22b829cdbce4eaff1ae7763f397f6465ccb35b31e097078de507dc6de25cb95ec796045f7" }, { "alg" : "SHA-384", "content" : "7d70ab00e728b4233e38729f0eb392d14e828e857421ad66fc678cd162cf22d34958993d5c38fd8a0d8355d3859b763e" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/org.objenesis/objenesis@3.2?type=jar", "externalReferences" : [ { "type" : "website", "url" : "http://objenesis.org/objenesis" }, { "type" : "distribution-intake", "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type" : "vcs", "url" : "https://github.com/easymock/objenesis/objenesis" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/org.bouncycastle/bc-fips@2.1.2?type=jar", "group" : "org.bouncycastle", "name" : "bc-fips", "version" : "2.1.2", "description" : "The BC-FJA 2.1.* series is a FIPS 140-3 certified Java implementation with additional Intel native hardware support for AES-NI and SHA-256 where supported. The package has been certified to FIPS 140-3 level 1. This jar contains JCE provider and low-level API for the BC-FJA version 2.1.2, a patched version of BC-FJA-2.1.0, interim FIPS Certificate #4943. Please see certificate for certified platform details.", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "0e3ce147f5132e096e7c3b22ab23a079" }, { "alg" : "SHA-1", "content" : "061fbe8383f70489dda95a11a2a4739eb818ff2c" }, { "alg" : "SHA-256", "content" : "044fcd8a29d236edea8a5b414406cdae63b475f9ad9f05fe2dc904a277941115" }, { "alg" : "SHA-512", "content" : "c20da957f38fc09b7fc6def8afe9c9f4137a8de56d8d602719be6e1eb7ea0d2dface092bdf0a16d2a178eb57078553e53db60fbbcda166038cddb0a22087f69b" }, { "alg" : "SHA-384", "content" : "f51856ec6c00f67f454747e75118c6204abaa433a4d6289610a0624cbc0cec2316663df06cbf876ba4ad8cee8748252e" } ], "licenses" : [ { "license" : { "name" : "Bouncy Castle Licence", "url" : "https://www.bouncycastle.org/licence.html" } } ], "purl" : "pkg:maven/org.bouncycastle/bc-fips@2.1.2?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://www.bouncycastle.org/download/bouncy-castle-java-fips/" }, { "type" : "issue-tracker", "url" : "https://www.bouncycastle.org/support" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/org.bouncycastle/bcpkix-fips@2.1.9?type=jar", "group" : "org.bouncycastle", "name" : "bcpkix-fips", "version" : "2.1.9", "description" : "The Bouncy Castle Java APIs for CMS, PKCS, EAC, TSP, CMP, CRMF, OCSP, S/MIME and certificate generation. The APIs are designed primarily to be used in conjunction with the BC FIPS provider. The APIs may also be used with other providers although if being used in a FIPS context it is the responsibility of the user to ensure that any other providers used are FIPS certified and used appropriately.", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "e295dcb91f2cab6403dc434013aa5cf9" }, { "alg" : "SHA-1", "content" : "722eaefa83fd8c53e1fc019bde25e353258ed22b" }, { "alg" : "SHA-256", "content" : "c31a4aeeda18f98b06deab50f6c5fa972eb87555ef134268be28eed95fadece7" }, { "alg" : "SHA-512", "content" : "6ff3f1d12fe2bb6a102975f94864f74459523dd7aeb2b1f293bfc76eebd2688ec1cdb5d72cdd2c5bffb0c41e2593c9364b8b15f411c298f5866138ce6c79d6a2" }, { "alg" : "SHA-384", "content" : "e8c31873b24176818285303a2b14144cfbb5844081461a3b2d7d0935f618d1620d2c7da49458b15687377ad42ab095ff" } ], "licenses" : [ { "license" : { "name" : "Bouncy Castle Licence", "url" : "https://www.bouncycastle.org/licence.html" } } ], "purl" : "pkg:maven/org.bouncycastle/bcpkix-fips@2.1.9?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://www.bouncycastle.org/download/bouncy-castle-java-fips" }, { "type" : "issue-tracker", "url" : "https://www.bouncycastle.org/support" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/org.bouncycastle/bcutil-fips@2.1.4?type=jar", "group" : "org.bouncycastle", "name" : "bcutil-fips", "version" : "2.1.4", "description" : "The Bouncy Castle Java APIs for ASN.1 extension and utility APIs used to support bcpkix and bctls with the BC FIPS provider. The APIs may also be used with other providers although if being used in a FIPS context it is the responsibility of the user to ensure that any other providers used are FIPS certified and used appropriately.", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "9323a42a9772823f806ce7b8d3965175" }, { "alg" : "SHA-1", "content" : "1d37b7a28560684f5b8e4fd65478c9130d4015d0" }, { "alg" : "SHA-256", "content" : "e169519e6441fb19cabf633d44fcef211506793e5be499ac9215648bd20634e0" }, { "alg" : "SHA-512", "content" : "6a149e7fbeaf15928e2f79039d0f730c8d1b52c12db7a1eed9491de88a0eeaae821b9bb7616d50e244f8bd754efcf90d7ac9f1c42cdd728c3601df4905935a3d" }, { "alg" : "SHA-384", "content" : "51b38b4b6dd559b30cd9f4b72300124bc100e1c4944098077a6bfb14fa93e07716149e87523b8ec200cecfb5cdfd8028" } ], "licenses" : [ { "license" : { "name" : "Bouncy Castle Licence", "url" : "https://www.bouncycastle.org/licence.html" } } ], "purl" : "pkg:maven/org.bouncycastle/bcutil-fips@2.1.4?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://www.bouncycastle.org/download/bouncy-castle-java-fips" }, { "type" : "issue-tracker", "url" : "https://www.bouncycastle.org/support" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/org.bouncycastle/bctls-fips@2.1.20?type=jar", "group" : "org.bouncycastle", "name" : "bctls-fips", "version" : "2.1.20", "description" : "The Bouncy Castle Java APIs for the TLS, including a JSSE provider. The APIs are designed primarily to be used in conjunction with the BC FIPS provider. The APIs may also be used with other providers although if being used in a FIPS context it is the responsibility of the user to ensure that any other providers used are FIPS certified and used appropriately.", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "f81962ca7e492deb4d65f165c38e96de" }, { "alg" : "SHA-1", "content" : "9c0632a6c5ca09a86434cf5e02e72c221e1c930f" }, { "alg" : "SHA-256", "content" : "c058a438442ea46d8abdefc95e581ebf2834e50504bda925a945b1f4ceb48d86" }, { "alg" : "SHA-512", "content" : "7af89150b7b6ad23a3e8859976cd4e7cf8e152c16f8a376760b94a77b02b6f3072dc6d0a1ad916e5a28190b3e25c8f92a0720dd040bbb94fb9d1dd72df9492f3" }, { "alg" : "SHA-384", "content" : "793d1411f41c6a8a0b964ce0d4e3b8dada545a33ce616aabf65c204f49dfb4c64ce02c79043ae5eb81ccc1d84a385f0a" } ], "licenses" : [ { "license" : { "name" : "Bouncy Castle Licence", "url" : "https://www.bouncycastle.org/licence.html" } } ], "purl" : "pkg:maven/org.bouncycastle/bctls-fips@2.1.20?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://www.bouncycastle.org/download/bouncy-castle-java-fips" }, { "type" : "issue-tracker", "url" : "https://www.bouncycastle.org/support" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/io.confluent/common-utils@7.6.9?type=jar", "publisher" : "Confluent, Inc.", "group" : "io.confluent", "name" : "common-utils", "version" : "7.6.9", "description" : "Common utilities, including metrics and config.", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "aeca9ab54b7427cce95ce3e1deadc950" }, { "alg" : "SHA-1", "content" : "c886c47b982ef63f9b8c8df50975f3be130cb435" }, { "alg" : "SHA-256", "content" : "4ddea7ab30a58b85943c8cf7d5e2a9987155416431634e36806620d90883d644" }, { "alg" : "SHA-512", "content" : "a0863fd24c7aaa703e0d2f83d63a671721cb74b665e6691d7a7cd4220cac78886dc5d9a7fa186fb7ba72e4379549be89cef763defdd814d98d00acf11cfdae30" }, { "alg" : "SHA-384", "content" : "f235d12fbca58da0ff8205a6e3caf0c0d7a4e6c9c8421998a995ced8ae1268cb42be55501f639f9bd3db974f04bbf821" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0", "url" : "https://www.apache.org/licenses/LICENSE-2.0" } } ], "purl" : "pkg:maven/io.confluent/common-utils@7.6.9?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://confluent.io/common-utils" }, { "type" : "distribution-intake", "url" : "s3://staging-confluent-packages-maven-654654529379-us-west-2/v7.6.9-rc251124141106/maven" }, { "type" : "vcs", "url" : "https://github.com/confluentinc/common/common-utils" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/io.confluent/assembly-plugin-boilerplate@7.6.9?classifier=resources&type=zip", "group" : "io.confluent", "name" : "assembly-plugin-boilerplate", "version" : "7.6.9", "description" : "Maven Assembly Plugin boilerplate for Dockerized projects", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "82b7c82a90daa089ed4d1a5e50f07c48" }, { "alg" : "SHA-1", "content" : "c895f24ff1f5814afebf44209fdaae543cc35cb1" }, { "alg" : "SHA-256", "content" : "892dbe89bcbe4f02651f80285069816c849343ce23822a75d4e3e4d83c659f08" }, { "alg" : "SHA-512", "content" : "399c2a697475236491a444c4cfb6e4a09a4ca99ad6b6ebdfcb1d570de24ab3fff5c6ef26c9b705c1e955275c80244660a39b04e2e37f5d51756d07aade7b88c2" }, { "alg" : "SHA-384", "content" : "1dbcf6b74c6b05b10b625fd814f9ba1cdda752e41bd56397e926aefb416898c762f19a1cd2dcf04715666d3acff412c8" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0", "url" : "https://www.apache.org/licenses/LICENSE-2.0" } } ], "purl" : "pkg:maven/io.confluent/assembly-plugin-boilerplate@7.6.9?classifier=resources&type=zip", "externalReferences" : [ { "type" : "website", "url" : "https://github.com/confluentinc/common" }, { "type" : "distribution-intake", "url" : "s3://staging-confluent-packages-maven-654654529379-us-west-2/v7.6.9-rc251124141106/maven" } ] } ], "dependencies" : [ { "ref" : "pkg:maven/io.confluent/confluent-command@7.6.9?type=jar", "dependsOn" : [ "pkg:maven/io.confluent/confluent-serializers-new@7.6.9-ce?type=jar", "pkg:maven/com.google.guava/guava@32.0.1-jre?type=jar", "pkg:maven/org.apache.kafka/kafka-streams@7.6.9-ce?type=jar", "pkg:maven/org.apache.kafka/kafka-clients@7.6.9-ce?type=jar", "pkg:maven/junit/junit@4.13.2?type=jar", "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar", "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar", "pkg:maven/org.slf4j/slf4j-reload4j@1.7.36?type=jar", "pkg:maven/org.junit.jupiter/junit-jupiter-engine@5.8.2?type=jar", "pkg:maven/org.junit.vintage/junit-vintage-engine@5.8.2?type=jar", "pkg:maven/commons-io/commons-io@2.16.0?type=jar", "pkg:maven/org.mockito/mockito-core@4.6.1?type=jar", "pkg:maven/org.bouncycastle/bc-fips@2.1.2?type=jar", "pkg:maven/org.bouncycastle/bcpkix-fips@2.1.9?type=jar", "pkg:maven/org.bouncycastle/bctls-fips@2.1.20?type=jar", "pkg:maven/io.confluent/common-utils@7.6.9?type=jar", "pkg:maven/io.confluent/assembly-plugin-boilerplate@7.6.9?classifier=resources&type=zip" ] }, { "ref" : "pkg:maven/io.confluent/confluent-serializers-new@7.6.9-ce?type=jar", "dependsOn" : [ "pkg:maven/com.google.protobuf/protobuf-java@3.25.5?type=jar", "pkg:maven/org.apache.kafka/kafka-clients@7.6.9-ce?type=jar", "pkg:maven/com.google.code.gson/gson@2.9.0?type=jar", "pkg:maven/com.google.guava/guava@32.0.1-jre?type=jar", "pkg:maven/javax.xml.bind/jaxb-api@2.3.0?type=jar", "pkg:maven/com.google.protobuf/protobuf-java-util@3.25.5?type=jar", "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar" ] }, { "ref" : "pkg:maven/com.google.protobuf/protobuf-java@3.25.5?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/org.apache.kafka/kafka-clients@7.6.9-ce?type=jar", "dependsOn" : [ "pkg:maven/io.confluent/telemetry-events-api@7.6.9-ce?type=jar", "pkg:maven/com.google.guava/guava@32.0.1-jre?type=jar", "pkg:maven/com.github.luben/zstd-jni@1.5.5-1?type=jar", "pkg:maven/org.lz4/lz4-java@1.8.0?type=jar", "pkg:maven/org.xerial.snappy/snappy-java@1.1.10.5?type=jar", "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar" ] }, { "ref" : "pkg:maven/io.confluent/telemetry-events-api@7.6.9-ce?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/com.google.guava/guava@32.0.1-jre?type=jar", "dependsOn" : [ "pkg:maven/com.google.guava/failureaccess@1.0.1?type=jar", "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar", "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar", "pkg:maven/org.checkerframework/checker-qual@3.33.0?type=jar", "pkg:maven/com.google.errorprone/error_prone_annotations@2.18.0?type=jar", "pkg:maven/com.google.j2objc/j2objc-annotations@2.8?type=jar" ] }, { "ref" : "pkg:maven/com.google.guava/failureaccess@1.0.1?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/org.checkerframework/checker-qual@3.33.0?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.18.0?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/com.google.j2objc/j2objc-annotations@2.8?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/com.github.luben/zstd-jni@1.5.5-1?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/org.lz4/lz4-java@1.8.0?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/org.xerial.snappy/snappy-java@1.1.10.5?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/com.google.code.gson/gson@2.9.0?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/javax.xml.bind/jaxb-api@2.3.0?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/com.google.protobuf/protobuf-java-util@3.25.5?type=jar", "dependsOn" : [ "pkg:maven/com.google.protobuf/protobuf-java@3.25.5?type=jar", "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar", "pkg:maven/com.google.code.gson/gson@2.9.0?type=jar", "pkg:maven/com.google.errorprone/error_prone_annotations@2.18.0?type=jar", "pkg:maven/com.google.guava/guava@32.0.1-jre?type=jar", "pkg:maven/com.google.j2objc/j2objc-annotations@2.8?type=jar" ] }, { "ref" : "pkg:maven/org.apache.kafka/kafka-streams@7.6.9-ce?type=jar", "dependsOn" : [ "pkg:maven/org.apache.kafka/kafka-clients@7.6.9-ce?type=jar", "pkg:maven/org.rocksdb/rocksdbjni@7.9.2?type=jar", "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar", "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.16.0?type=jar", "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.16.0?type=jar" ] }, { "ref" : "pkg:maven/org.rocksdb/rocksdbjni@7.9.2?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.16.0?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.16.0?type=jar", "dependsOn" : [ "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.16.0?type=jar", "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.16.0?type=jar" ] }, { "ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.16.0?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/junit/junit@4.13.2?type=jar", "dependsOn" : [ "pkg:maven/org.hamcrest/hamcrest-core@1.3?type=jar" ] }, { "ref" : "pkg:maven/org.hamcrest/hamcrest-core@1.3?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/org.slf4j/slf4j-reload4j@1.7.36?type=jar", "dependsOn" : [ "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar", "pkg:maven/ch.qos.reload4j/reload4j@1.2.25?type=jar" ] }, { "ref" : "pkg:maven/ch.qos.reload4j/reload4j@1.2.25?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/org.junit.jupiter/junit-jupiter-engine@5.8.2?type=jar", "dependsOn" : [ "pkg:maven/org.junit.platform/junit-platform-engine@1.8.2?type=jar", "pkg:maven/org.junit.jupiter/junit-jupiter-api@5.8.2?type=jar", "pkg:maven/org.apiguardian/apiguardian-api@1.1.2?type=jar" ] }, { "ref" : "pkg:maven/org.junit.platform/junit-platform-engine@1.8.2?type=jar", "dependsOn" : [ "pkg:maven/org.opentest4j/opentest4j@1.2.0?type=jar", "pkg:maven/org.junit.platform/junit-platform-commons@1.8.2?type=jar", "pkg:maven/org.apiguardian/apiguardian-api@1.1.2?type=jar" ] }, { "ref" : "pkg:maven/org.opentest4j/opentest4j@1.2.0?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/org.junit.platform/junit-platform-commons@1.8.2?type=jar", "dependsOn" : [ "pkg:maven/org.apiguardian/apiguardian-api@1.1.2?type=jar" ] }, { "ref" : "pkg:maven/org.apiguardian/apiguardian-api@1.1.2?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/org.junit.jupiter/junit-jupiter-api@5.8.2?type=jar", "dependsOn" : [ "pkg:maven/org.opentest4j/opentest4j@1.2.0?type=jar", "pkg:maven/org.junit.platform/junit-platform-commons@1.8.2?type=jar", "pkg:maven/org.apiguardian/apiguardian-api@1.1.2?type=jar" ] }, { "ref" : "pkg:maven/org.junit.vintage/junit-vintage-engine@5.8.2?type=jar", "dependsOn" : [ "pkg:maven/org.junit.platform/junit-platform-engine@1.8.2?type=jar", "pkg:maven/junit/junit@4.13.2?type=jar", "pkg:maven/org.apiguardian/apiguardian-api@1.1.2?type=jar" ] }, { "ref" : "pkg:maven/commons-io/commons-io@2.16.0?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/org.mockito/mockito-core@4.6.1?type=jar", "dependsOn" : [ "pkg:maven/net.bytebuddy/byte-buddy@1.12.10?type=jar", "pkg:maven/net.bytebuddy/byte-buddy-agent@1.12.10?type=jar", "pkg:maven/org.objenesis/objenesis@3.2?type=jar" ] }, { "ref" : "pkg:maven/net.bytebuddy/byte-buddy@1.12.10?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/net.bytebuddy/byte-buddy-agent@1.12.10?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/org.objenesis/objenesis@3.2?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/org.bouncycastle/bc-fips@2.1.2?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/org.bouncycastle/bcpkix-fips@2.1.9?type=jar", "dependsOn" : [ "pkg:maven/org.bouncycastle/bcutil-fips@2.1.4?type=jar" ] }, { "ref" : "pkg:maven/org.bouncycastle/bcutil-fips@2.1.4?type=jar", "dependsOn" : [ "pkg:maven/org.bouncycastle/bc-fips@2.1.2?type=jar" ] }, { "ref" : "pkg:maven/org.bouncycastle/bctls-fips@2.1.20?type=jar", "dependsOn" : [ "pkg:maven/org.bouncycastle/bcutil-fips@2.1.4?type=jar" ] }, { "ref" : "pkg:maven/io.confluent/common-utils@7.6.9?type=jar", "dependsOn" : [ "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar" ] }, { "ref" : "pkg:maven/io.confluent/assembly-plugin-boilerplate@7.6.9?classifier=resources&type=zip", "dependsOn" : [ ] } ] }