{ "bomFormat" : "CycloneDX", "specVersion" : "1.5", "serialNumber" : "urn:uuid:c190c627-4788-3811-9e5f-ec90a1937d93", "version" : 1, "metadata" : { "timestamp" : "2025-11-27T08:52:45Z", "lifecycles" : [ { "phase" : "build" } ], "tools" : { "components" : [ { "type" : "library", "author" : "OWASP Foundation", "group" : "org.cyclonedx", "name" : "cyclonedx-maven-plugin", "version" : "2.9.0", "description" : "CycloneDX Maven plugin", "hashes" : [ { "alg" : "MD5", "content" : "dfaeab7ec837ce07874e2ee66fdc57d3" }, { "alg" : "SHA-1", "content" : "8bab47bafc8183d0a5f37790ff55ed05ead1ae2d" }, { "alg" : "SHA-256", "content" : "67117e03eae4a03ca8bab3add044995f4899aa21798a2510b8265ef8101e90ac" }, { "alg" : "SHA-512", "content" : "ae6b706516bb76da806b7854aef9e348fa593f5159ae9d693ad38942165c0ebc0846d977a477f6029612d43468fd2cd73a5aa253c228a94fb8d184e0acefc3d2" }, { "alg" : "SHA-384", "content" : "ee872354d8b0dcd6f9835a913b3aaba70d9365a46043be78020183282a1e9fca812e969246cbe31d642541591b46648b" }, { "alg" : "SHA3-384", "content" : "e5167f9e7ceba3b7b4d1900c404543907868745334bedc69cdf79c271727148413033a3b1426b733b7549e612e44adee" }, { "alg" : "SHA3-256", "content" : "41fc0bc2275f354e2c7da01041ce73ce677364799cba53920a180aa5d4571c63" }, { "alg" : "SHA3-512", "content" : "ed7f97900b09b818dbc0b8a23c00a2843e1bc34e2e8eb5b6df52533af0a15b721de6f7d5c2fd9352b8d4fde768e080053b40a16f0f9f04c336fe9b44abe83fc0" } ] } ] }, "component" : { "type" : "library", "bom-ref" : "pkg:maven/io.confluent/dek-registry-client@8.0.3?type=jar", "publisher" : "Confluent, Inc.", "group" : "io.confluent", "name" : "dek-registry-client", "version" : "8.0.3", "description" : "Schema Registry provides a RESTful interface for storing and retrieving versioned Avro schemas for use with Kafka.", "licenses" : [ { "license" : { "name" : "Confluent Community License", "url" : "http://www.confluent.io/confluent-community-license" } }, { "license" : { "id" : "Apache-2.0", "url" : "https://www.apache.org/licenses/LICENSE-2.0" } } ], "purl" : "pkg:maven/io.confluent/dek-registry-client@8.0.3?type=jar", "externalReferences" : [ { "type" : "website", "url" : "http://confluent.io/dek-registry-client" }, { "type" : "distribution-intake", "url" : "s3://staging-confluent-packages-maven-654654529379-us-west-2/v8.0.3-rc251127071245/maven" }, { "type" : "vcs", "url" : "https://github.com/confluentinc/schema-registry/dek-registry-client" } ] }, "properties" : [ { "name" : "maven.goal", "value" : "makeBom" }, { "name" : "maven.scopes", "value" : "compile,provided,runtime,system,test" } ] }, "components" : [ { "type" : "library", "bom-ref" : "pkg:maven/io.confluent/kafka-schema-registry-client@8.0.3?type=jar", "publisher" : "Confluent, Inc.", "group" : "io.confluent", "name" : "kafka-schema-registry-client", "version" : "8.0.3", "description" : "Schema Registry provides a RESTful interface for storing and retrieving versioned Avro schemas for use with Kafka.", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "f97a03cb2230ea89e1633d942fd46095" }, { "alg" : "SHA-1", "content" : "c17d1cb16d5b6c90255340262ef10c728ad4fbac" }, { "alg" : "SHA-256", "content" : "66f8105efd4f02edf9f147bc2d55d1188e8aa11fce154ba4204640a5c0a614a9" }, { "alg" : "SHA-512", "content" : "82d47d50feeb7143eaeb77d096847d467f37c565fd208434387336fb43ed9d2bfb38536eec06c4f30fd9533556119eeb2bae86b329dcf8a973bee787e432c504" }, { "alg" : "SHA-384", "content" : "75c14111237a9f6029231bec5d59dd32e37deb13a9131a958099f0bf66ae7a90285a9b40149eebe46e5f178381c0b7e3" }, { "alg" : "SHA3-384", "content" : "1f7986ded4426101039550ba54762eda66699bffadf2272c64eeac57cd62efa7c502c10c927c6c484d7d1fac5737cb04" }, { "alg" : "SHA3-256", "content" : "9462370cf81757727a5d2a1cf2abf129d5eca7559652a6b79284a086b72a6cae" }, { "alg" : "SHA3-512", "content" : "01e366efc503c9be7d1ce589a082ebb4c3a19a0d6b0b52fb43a9f5c3b701bf6cfc5eede68b0feb19b766cdd9706fb4e96ba8b73ad42955ad38925b2676cb1c2d" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0", "url" : "https://www.apache.org/licenses/LICENSE-2.0" } } ], "purl" : "pkg:maven/io.confluent/kafka-schema-registry-client@8.0.3?type=jar", "externalReferences" : [ { "type" : "website", "url" : "http://confluent.io/kafka-schema-registry-client" }, { "type" : "distribution-intake", "url" : "s3://staging-confluent-packages-maven-654654529379-us-west-2/v8.0.3-rc251127071245/maven" }, { "type" : "vcs", "url" : "https://github.com/confluentinc/schema-registry/kafka-schema-registry-client" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/org.yaml/snakeyaml@2.0?type=jar", "group" : "org.yaml", "name" : "snakeyaml", "version" : "2.0", "description" : "YAML 1.1 parser and emitter for Java", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "caf24b81b9d57e6d4f68b1ccd36e00a3" }, { "alg" : "SHA-1", "content" : "3aab2116756442bf0d4cd1c089b24d34c3baa253" }, { "alg" : "SHA-256", "content" : "880c9d896e4b74a06c549c15ca496450165d6909fa15d7e662bee8f6a66d7afa" }, { "alg" : "SHA-512", "content" : "93567558444365c436027bd1064b67ae99abde77fa89b33ac7c586ab83e4dbf02b7610669fd00ccd258bca6ba3fa078954c92d918b989317dce7bf9ce18836b8" }, { "alg" : "SHA-384", "content" : "63c0ec40f4e3f24786031fb8a9477071c86e69247dce283ff725e328e26fba7bdfbb0ab52027b9b0988b3978703a95fe" }, { "alg" : "SHA3-384", "content" : "fedd091de2b63c38fb04cb8e2d657bc7b37193ef065b18058be892d6b816d7cb68e5445819c3f3f8fca116311adc9760" }, { "alg" : "SHA3-256", "content" : "66264c5c5f4703942a959310c14f22df9c2b1c304ddca1d1c211da58af5623f4" }, { "alg" : "SHA3-512", "content" : "0c4c5807880025a22791114253443d2166218760d63b80cd72eb3fdd71a19fdadb27d392b47de9c6b7ca2a2dc312273f0b8c97012ff277d2cab0fd06f3902573" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/org.yaml/snakeyaml@2.0?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://bitbucket.org/snakeyaml/snakeyaml" }, { "type" : "distribution-intake", "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type" : "issue-tracker", "url" : "https://bitbucket.org/snakeyaml/snakeyaml/issues" }, { "type" : "vcs", "url" : "https://bitbucket.org/snakeyaml/snakeyaml/src" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/org.apache.kafka/kafka-clients@8.0.3-ccs?type=jar", "group" : "org.apache.kafka", "name" : "kafka-clients", "version" : "8.0.3-ccs", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "1d212e89bd0ad6b23eb77e805d0e57d3" }, { "alg" : "SHA-1", "content" : "6aa5f316228291b78cf6fb2fae4e1c9da50f8e10" }, { "alg" : "SHA-256", "content" : "a10b9d85b9305f75890721b5d48d29b753809493da8090df7afe8a06cdbccc6d" }, { "alg" : "SHA-512", "content" : "51c27d0cc680bc9860531cb3e9e6f35e5b3aac92ad52a84f6b46ef61942a1390f214a734881d6556499d1b8552fa5b90013ab0d1a6cd3438df488f8d81fe0b79" }, { "alg" : "SHA-384", "content" : "97d092b0a792cb48136a984c36fb6612fbfeffe96a5d4106cbeb69481bca6a46a801e1870463494e1768370c23eca0e2" }, { "alg" : "SHA3-384", "content" : "2f45ec14cb0bd3067abcb7a5fdfc42e82235544c3d4031c97feac552d827271293543183d2d5752e07cd520cf680aa4e" }, { "alg" : "SHA3-256", "content" : "47a2cce783867eaf6fd4fdf47089907b6ed383fba6669379745d0ac68ff6550e" }, { "alg" : "SHA3-512", "content" : "94bd79cc6c7e6b00d1fdfb02c9d99e4f89be0d1b46f36f9761f42a648701e239c52f7e0c88d6bbc0fe37ef22714f67729acadd4925ae3ea601df1a9f3ab6a06f" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/org.apache.kafka/kafka-clients@8.0.3-ccs?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://kafka.apache.org" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/com.github.luben/zstd-jni@1.5.6-6?type=jar", "publisher" : "com.github.luben", "group" : "com.github.luben", "name" : "zstd-jni", "version" : "1.5.6-6", "description" : "JNI bindings for Zstd native library that provides fast and high compression lossless algorithm for Java and all JVM languages.", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "a90336bc443a08521cbf6b8853c82921" }, { "alg" : "SHA-1", "content" : "2fbdb6597ff51efa4a5bf12df18f27b5aa4f2625" }, { "alg" : "SHA-256", "content" : "1f85db623bf653860d10e13e7b1ca6609301f66994dc93784c92a66019516bb9" }, { "alg" : "SHA-512", "content" : "e78b0dd951cdb8eb2d506d80e894df520c8c241192e2ab7a2db45d5bef6185fae1cf74bc0da5f074f93c0893f77192e55fc9258e83d24527fb18764286c1bc3e" }, { "alg" : "SHA-384", "content" : "e7912607a4c98da551433a2a1a0ffb84cf024dd97d36625d937ab0eb0fc14b98bcf29adaaadfe44eddfd7f889ba6004f" }, { "alg" : "SHA3-384", "content" : "05bee204911011f16001b96f435ab22e54074948ce80cf466e857641991cbc7527f44fbb7eae0c5291aedf27635da5df" }, { "alg" : "SHA3-256", "content" : "0830dc76be96ac3fcd2cdbe886884cacef6cb2ae25bc47140a42b13f3fcf12f5" }, { "alg" : "SHA3-512", "content" : "145678086eadff805f2b695ab9464ebb1aa3fe0094ddab558ac03c0bff3cd9604a6f9f62fa884e3446dc9ac6eec016f50bc5fbe4425b962d2e16f152b64f4a79" } ], "licenses" : [ { "license" : { "id" : "BSD-2-Clause" } } ], "purl" : "pkg:maven/com.github.luben/zstd-jni@1.5.6-6?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://github.com/luben/zstd-jni" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/org.lz4/lz4-java@1.8.0?type=jar", "group" : "org.lz4", "name" : "lz4-java", "version" : "1.8.0", "description" : "Java ports and bindings of the LZ4 compression algorithm and the xxHash hashing algorithm", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "936a927700aa8fc3b75d21d7571171f6" }, { "alg" : "SHA-1", "content" : "4b986a99445e49ea5fbf5d149c4b63f6ed6c6780" }, { "alg" : "SHA-256", "content" : "d74a3334fb35195009b338a951f918203d6bbca3d1d359033dc33edd1cadc9ef" }, { "alg" : "SHA-512", "content" : "98d59086a6021ca571d9c1d64b715e43044c730e1ac563f514c40cf44302615d30378b6d5cc69990446522de6260dc8e7b303e3990a3139dc326d058dfb6dbd9" }, { "alg" : "SHA-384", "content" : "8e3f2acdbb41a00c4d9cc5f328e63fb626ac7c6c84e1bf9502e2fcc76a591b2b819b2d27b29925ff986b95c297b30e2c" }, { "alg" : "SHA3-384", "content" : "ec0d6a00760d0a4ecba13a41785d6ae57a64552b1687eaa3e292b3054bb1348e49ab8a938197ff126f9218c6cb96ee1c" }, { "alg" : "SHA3-256", "content" : "7be684c102891105f66d378b61ea1297a392c1618b5aebf7e0b281f55217c206" }, { "alg" : "SHA3-512", "content" : "0b2294570ea2bfbb50ced21dfa4bad956467ca447e9ab2dd602a3478371bcd0e9f13d2dff74d06827a28882409612cdde00bd91267be05bd3510c68268bf3166" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/org.lz4/lz4-java@1.8.0?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://github.com/lz4/lz4-java" }, { "type" : "vcs", "url" : "git://github.com/lz4/lz4-java.git" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/org.xerial.snappy/snappy-java@1.1.10.5?type=jar", "publisher" : "xerial.org", "group" : "org.xerial.snappy", "name" : "snappy-java", "version" : "1.1.10.5", "description" : "snappy-java: A fast compression/decompression library", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "a52ffcdbbe525b486237a7098e5c5ff7" }, { "alg" : "SHA-1", "content" : "ac605269f3598506196e469f1fb0d7ed5c55059e" }, { "alg" : "SHA-256", "content" : "0f3f1857ed33116583f480b4df5c0218836c47bfbc9c6221c0d73f356decf37b" }, { "alg" : "SHA-512", "content" : "36c288aa84017b52362a49a20d1702151a16b9f58518b6877f11122941a549d94fab8d515f7f1ad6384fb94be569328abf862edaf970c10a16832498dfda853b" }, { "alg" : "SHA-384", "content" : "693a542ca2471dec4da5fe582563aff1bf5238e1a8d1a1f79cd8138334f94f1112094fbd270b1637d983c9290084a6e1" }, { "alg" : "SHA3-384", "content" : "41cbbb20b4bc0bd9a80521904568335fb131602a6931783f5bf6a1c8287b8ccd92c8169b8bb2399d27208fc067ef2321" }, { "alg" : "SHA3-256", "content" : "38dc41c5a0d827c58e1409a63e902d0568a03d67cdb99708ccc63921000ddc55" }, { "alg" : "SHA3-512", "content" : "b07d178cc94f6385d5f09d7730d2dd161c6f7d6815ae779e742421c0c1fb92043c8ec8ce5ee67660760f5287bd959eba1028924257a6ff36fb5439d8f81bd049" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0", "url" : "https://www.apache.org/licenses/LICENSE-2.0" } } ], "purl" : "pkg:maven/org.xerial.snappy/snappy-java@1.1.10.5?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://github.com/xerial/snappy-java" }, { "type" : "vcs", "url" : "https://github.com/xerial/snappy-java" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/org.apache.avro/avro@1.12.1?type=jar", "publisher" : "The Apache Software Foundation", "group" : "org.apache.avro", "name" : "avro", "version" : "1.12.1", "description" : "Avro core components", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "83a5127156dbc59c024d8e76302161e7" }, { "alg" : "SHA-1", "content" : "1c6294ac1d67ce396f51827c87ba2e01de304500" }, { "alg" : "SHA-256", "content" : "72600f057bfbe2efe35fa55433e7756d45667dc938934be38a6e2be368aca237" }, { "alg" : "SHA-512", "content" : "1d3ea16d6f374724728660f02fbbb20a42a6f380404cce092d3ab6c143e4e3b8ae9353040ba409af21b06e4a1a1456098020509bed6c12aa9ab6974d52ea8c5f" }, { "alg" : "SHA-384", "content" : "fbe691d8500a239ba2a4370235f66fd4e53895489181258ecee2a45fa5dc5cfaf191b5973d702f96e17284f96562675c" }, { "alg" : "SHA3-384", "content" : "2a945cd2245ee74ecba3760b2767abe6b105b4557cc3ab97298dcae75044cd2fa077705b48371ee9ba580c9112ff942c" }, { "alg" : "SHA3-256", "content" : "1d2f7bbd2ed2e57097bbe760f4c392ea46de7870547170c43b12ddcfa731140b" }, { "alg" : "SHA3-512", "content" : "c163eca320d4e66751b2e08bc06f1a659059c009e3f98074da2404d4e58994fbaf4ccadb14f3631bf6fdd270c711e4f320a7f83f519f6269afe89b1eb425adc4" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0", "url" : "https://www.apache.org/licenses/LICENSE-2.0" } } ], "purl" : "pkg:maven/org.apache.avro/avro@1.12.1?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://avro.apache.org" }, { "type" : "distribution-intake", "url" : "https://repository.apache.org/service/local/staging/deploy/maven2" }, { "type" : "issue-tracker", "url" : "https://issues.apache.org/jira/browse/AVRO" }, { "type" : "mailing-list", "url" : "https://mail-archives.apache.org/mod_mbox/avro-dev/" }, { "type" : "vcs", "url" : "scm:git:https://github.com/apache/avro/avro-parent/avro" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/org.apache.commons/commons-compress@1.26.1?type=jar", "publisher" : "The Apache Software Foundation", "group" : "org.apache.commons", "name" : "commons-compress", "version" : "1.26.1", "description" : "Apache Commons Compress defines an API for working with compression and archive formats. These include bzip2, gzip, pack200, LZMA, XZ, Snappy, traditional Unix Compress, DEFLATE, DEFLATE64, LZ4, Brotli, Zstandard and ar, cpio, jar, tar, zip, dump, 7z, arj.", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "7af7d22a7280508327d809b183114a92" }, { "alg" : "SHA-1", "content" : "44331c1130c370e726a2e1a3e6fba6d2558ef04a" }, { "alg" : "SHA-256", "content" : "27bb5d40f37c3bb7205b4a0540247df057715e9f6cbbd97d626ab8b50318bb04" }, { "alg" : "SHA-512", "content" : "ef18a2e3abbf249b95bc5dc95d276fd66e495a74f8f1ce02e9e388048c5a0684f07bbf6924fcc1fc3943b95f30d908fee8778f1e4c6293431172e31f5ddc5f02" }, { "alg" : "SHA-384", "content" : "c37e35684971b436dc7a6bc428b306804302f99ef46c5df44b6826e267427e6146580b5cda1a96472b65ef12ef7fa6e9" }, { "alg" : "SHA3-384", "content" : "9a6a43bc19652007a0a61c8007dc5e67c98bade39f0c8b567e10ec82dc95f2288fcac53ec7d31ca793f4c3edf8ef9fbe" }, { "alg" : "SHA3-256", "content" : "c2bddb71dcfe84e98754a1e0f0b16ec60a8e4c5761cd4db210477fcd3a3bf595" }, { "alg" : "SHA3-512", "content" : "2636e83c2274019d7c1742477e5c641d0348afe5179e4a8316f28f41c51ca0f609a8e9a41fdaf0b68f7830d2e0fc74268fcee43d9c7cf49b57d74a426295f4ee" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0", "url" : "https://www.apache.org/licenses/LICENSE-2.0" } } ], "purl" : "pkg:maven/org.apache.commons/commons-compress@1.26.1?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://commons.apache.org/proper/commons-compress/" }, { "type" : "build-system", "url" : "https://github.com/apache/commons-parent/actions" }, { "type" : "distribution-intake", "url" : "https://repository.apache.org/service/local/staging/deploy/maven2" }, { "type" : "issue-tracker", "url" : "https://issues.apache.org/jira/browse/COMPRESS" }, { "type" : "mailing-list", "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/" }, { "type" : "vcs", "url" : "https://gitbox.apache.org/repos/asf?p=commons-compress.git" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/commons-codec/commons-codec@1.16.1?type=jar", "publisher" : "The Apache Software Foundation", "group" : "commons-codec", "name" : "commons-codec", "version" : "1.16.1", "description" : "The Apache Commons Codec component contains encoder and decoders for various formats such as Base16, Base32, Base64, digest, and Hexadecimal. In addition to these widely used encoders and decoders, the codec package also maintains a collection of phonetic encoding utilities.", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "6c5be822d8d3fa61c3b54c4c8978dfdc" }, { "alg" : "SHA-1", "content" : "47bd4d333fba53406f6c6c51884ddbca435c8862" }, { "alg" : "SHA-256", "content" : "ec87bfb55f22cbd1b21e2190eeda28b2b312ed2a431ee49fbdcc01812d04a5e4" }, { "alg" : "SHA-512", "content" : "bd33fd5340757ea0616a8c2a48760cfc9932f93b8e067701f4a122fd59735083468a016d8c0fd65973dd3fa4fc3537855e71a1fae7d14e1777e31ff1c47708ce" }, { "alg" : "SHA-384", "content" : "ee7f4c3e5c01cf77f4d82b09c358087738e6e79507ced9f2c82fdce3b32825bb62b2d66b30ef897e2972d3253478c525" }, { "alg" : "SHA3-384", "content" : "c200875af6359f6a584b108ecae3d83496942e1216dfacbd86e3c22e54b90b9519a9b01a229e71552111b10c8734c327" }, { "alg" : "SHA3-256", "content" : "81cd8a4c12e0b7ac84222e33b159cbd6f658b3e0f48e5fd8075d50cd03b05837" }, { "alg" : "SHA3-512", "content" : "c821b99a5b4a3fbf052f562d60479bc252aafa8057fcbe095e09e96cf01594a23455658f9c666866e1937910ff44a1a891760d04c22d5187cb98be9d0d58952b" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0", "url" : "https://www.apache.org/licenses/LICENSE-2.0" } } ], "purl" : "pkg:maven/commons-codec/commons-codec@1.16.1?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://commons.apache.org/proper/commons-codec/" }, { "type" : "build-system", "url" : "https://github.com/apache/commons-parent/actions" }, { "type" : "distribution-intake", "url" : "https://repository.apache.org/service/local/staging/deploy/maven2" }, { "type" : "issue-tracker", "url" : "https://issues.apache.org/jira/browse/CODEC" }, { "type" : "mailing-list", "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/" }, { "type" : "vcs", "url" : "https://github.com/apache/commons-codec" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/commons-io/commons-io@2.16.0?type=jar", "publisher" : "The Apache Software Foundation", "group" : "commons-io", "name" : "commons-io", "version" : "2.16.0", "description" : "The Apache Commons IO library contains utility classes, stream implementations, file filters, file comparators, endian transformation classes, and much more.", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "4e115587dca5dd3c178e7c8f17a371b3" }, { "alg" : "SHA-1", "content" : "27875a7935f1ddcc13267eb6fae1f719e0409572" }, { "alg" : "SHA-256", "content" : "d1e417901235fae3aa0cb9736baeaf5b74de7349817d1c72390d82e3d83d3a97" }, { "alg" : "SHA-512", "content" : "afba6cc8fdef9d347aaccb3bff327ba8e2c17135989cf01179fdb2e3ca8d0afdce37defb08659eb1e99b8730e2baaaec95c7d3599f7ebf526c97c8edc477b852" }, { "alg" : "SHA-384", "content" : "0413eda39746809f3c7ce44336f6d88d8d72e2781db4b74c98a206f34b94639a39024697fde25f310edda8cf628fd376" }, { "alg" : "SHA3-384", "content" : "386bee9245d0ef901c3010be3603d4cd083c2745737fdf852f3c7024b295aa74d006f0d1a3e7cbc2b09b6023b42d41b5" }, { "alg" : "SHA3-256", "content" : "22054f3faf8d31b9bdb010e1341cf74dfcb40860e50eaf238991c784a9a8b4ae" }, { "alg" : "SHA3-512", "content" : "c7e76ce4a2177ea7898931e180cca6463bf5eab34199c6a9a0146474262f16c30d99a05eb02a86f37870ba83b1b413e78949582add25aa87c5f39462444be6ea" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0", "url" : "https://www.apache.org/licenses/LICENSE-2.0" } } ], "purl" : "pkg:maven/commons-io/commons-io@2.16.0?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://commons.apache.org/proper/commons-io/" }, { "type" : "build-system", "url" : "https://github.com/apache/commons-parent/actions" }, { "type" : "distribution-intake", "url" : "https://repository.apache.org/service/local/staging/deploy/maven2" }, { "type" : "issue-tracker", "url" : "https://issues.apache.org/jira/browse/IO" }, { "type" : "mailing-list", "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/" }, { "type" : "vcs", "url" : "https://gitbox.apache.org/repos/asf?p=commons-io.git" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar", "publisher" : "The Apache Software Foundation", "group" : "org.apache.commons", "name" : "commons-lang3", "version" : "3.18.0", "description" : "Apache Commons Lang, a package of Java utility classes for the classes that are in java.lang's hierarchy, or are considered to be so standard as to justify existence in java.lang. The code is tested using the latest revision of the JDK for supported LTS releases: 8, 11, 17 and 21 currently. See https://github.com/apache/commons-lang/blob/master/.github/workflows/maven.yml Please ensure your build environment is up-to-date and kindly report any build issues.", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "48b9886957920a4cdb602780ca345087" }, { "alg" : "SHA-1", "content" : "fb14946f0e39748a6571de0635acbe44e7885491" }, { "alg" : "SHA-256", "content" : "4eeeae8d20c078abb64b015ec158add383ac581571cddc45c68f0c9ae0230720" }, { "alg" : "SHA-512", "content" : "c2c9d497fc1be411050f4011b2407764b78aa098eb42925af8a197eabdbc25b507f09fb898805e9bed4815f35236a508ee5b096e36f363df4d407232d50fc832" }, { "alg" : "SHA-384", "content" : "4fb3f101106e4ce3666d5c15d276ba86f7683a0ef35f0384edfcd579ea454275edbb7400795d265ec3a38e39997e79b8" }, { "alg" : "SHA3-384", "content" : "aada7e3612cf3f6190a19fa7c3db74df1e13ec56b300be9bb4317d261d5877c84ab59ba9a09168becdbd82cd41961395" }, { "alg" : "SHA3-256", "content" : "306d286d0bd7549c203cc802fd755d354c4f7926fa023f4e83623ba1a6261250" }, { "alg" : "SHA3-512", "content" : "f6f1ecc684e309d7b9fc5c343792508fee935cd2119d962721662c5af88e4864ba6f47a863e083714f315f926c156de1970cd2fb577449bdfdc7bf98a4a451fa" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0", "url" : "https://www.apache.org/licenses/LICENSE-2.0" } } ], "purl" : "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://commons.apache.org/proper/commons-lang/" }, { "type" : "build-system", "url" : "https://github.com/apache/commons-lang/actions" }, { "type" : "distribution-intake", "url" : "https://repository.apache.org/service/local/staging/deploy/maven2" }, { "type" : "issue-tracker", "url" : "https://issues.apache.org/jira/browse/LANG" }, { "type" : "mailing-list", "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/" }, { "type" : "vcs", "url" : "https://gitbox.apache.org/repos/asf/commons-lang.git" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jdk8@2.16.0?type=jar", "publisher" : "FasterXML", "group" : "com.fasterxml.jackson.datatype", "name" : "jackson-datatype-jdk8", "version" : "2.16.0", "description" : "Add-on module for Jackson (http://jackson.codehaus.org) to support JDK 8 data types.", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "90a345c79790ef01d916cbb27673bb6a" }, { "alg" : "SHA-1", "content" : "20ebeb699640f96fc6dd8d3852cb52a57da13333" }, { "alg" : "SHA-256", "content" : "197056dd721fb460b483660e423c04142af4b9d408be856f7626ca0aca63966c" }, { "alg" : "SHA-512", "content" : "4764bb4f8a86a39d3cca353d15c825c11e1dd90ff6320492a43559a15b1017d7833592b6d73661650d2737a9dfd060d59c100ee6363f9ddbc11e54d43bb24e07" }, { "alg" : "SHA-384", "content" : "15e4a4ea88a4567b1d3871d14a744e4df50591b09e22ecca270753f71f8e32a691cef1fd303242d5d286ccdffb5dc827" }, { "alg" : "SHA3-384", "content" : "1f38b6002305bb29c0cfcf4b8ffd2e6fb7d4d74b211fc537c31cc6ac3b4e6d3c158a80e34ad79d72a1291b63d555af27" }, { "alg" : "SHA3-256", "content" : "861c14bcb42595d1d553c59fef8ccdaaa9d93f045561823aa556fb06034d0f7e" }, { "alg" : "SHA3-512", "content" : "d7744583aee8d1c1a8e192ddc36eb39086e95ed29d6acb3b7fe3a6deb7a555cacd1f38eee85c7e79fd8c1e69f32a39fcecec127685d344473cfaa85a4f31e432" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jdk8@2.16.0?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://github.com/FasterXML/jackson-modules-java8/jackson-datatype-jdk8" }, { "type" : "distribution-intake", "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type" : "issue-tracker", "url" : "https://github.com/FasterXML/jackson-modules-java8/issues" }, { "type" : "vcs", "url" : "http://github.com/FasterXML/jackson-modules-java8/jackson-datatype-jdk8" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/io.swagger.core.v3/swagger-annotations@2.2.29?type=jar", "group" : "io.swagger.core.v3", "name" : "swagger-annotations", "version" : "2.2.29", "description" : "swagger-annotations", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "3825eb7b2845c7abba9faeae42845c4e" }, { "alg" : "SHA-1", "content" : "07bbed78c1cf66bdcd674775dfe0dca4a073bba6" }, { "alg" : "SHA-256", "content" : "e224a6e11f16c525d8ad04090cc32b534a9ee10835b9f93457ba6ff00f117f34" }, { "alg" : "SHA-512", "content" : "a82ab3dc5048da1f7c8f7303cffe4827a98349c896d3949935e1f975c4db509669492ae5442ff56bcd3db5c3e05f2806a1920d44b1ea232a93907a9b76f8c77e" }, { "alg" : "SHA-384", "content" : "0d8ac35492816229ea0a75a4b19338b52dd9b06a2eeb675335c89dee62e52818cb8ac10464028d109d7bf5bcfc5d7b47" }, { "alg" : "SHA3-384", "content" : "af4282044be922d06828877db796b86e2d6b20a1cf0d1ec50c5b89d35acee0d857fe6851d47bc454099426f54bcedb75" }, { "alg" : "SHA3-256", "content" : "ebe0641a27c48a8c632846c919218af536d67dc9db588b093f9904b4e94de011" }, { "alg" : "SHA3-512", "content" : "bff9b74ec9b6d63e812914945783eba4b76ee65e4ba1ed401fcf7625c7e008a164f30b27ae7b33b73481fafa5acee063725f80f9d2992c1f41e7ede83e2fbb8d" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0", "url" : "https://www.apache.org/licenses/LICENSE-2.0" } } ], "purl" : "pkg:maven/io.swagger.core.v3/swagger-annotations@2.2.29?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://github.com/swagger-api/swagger-core/modules/swagger-annotations" }, { "type" : "distribution-intake", "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type" : "issue-tracker", "url" : "https://github.com/swagger-api/swagger-core/issues" }, { "type" : "mailing-list", "url" : "https://groups.google.com/forum/#!forum/swagger-swaggersocket" }, { "type" : "vcs", "url" : "https://github.com/swagger-api/swagger-core/modules/swagger-annotations" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/org.apache.httpcomponents.client5/httpclient5@5.5?type=jar", "publisher" : "The Apache Software Foundation", "group" : "org.apache.httpcomponents.client5", "name" : "httpclient5", "version" : "5.5", "description" : "Apache HttpComponents Client", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "26a991677cf91d4145aedf896b0b8a8e" }, { "alg" : "SHA-1", "content" : "4b3d253351cf74eb0ae8eb21ca5a5fb9815ef861" }, { "alg" : "SHA-256", "content" : "496b4b0e8d5f3a8139a5d2638486d304758bac3a9c39d76989f663cfd9354fc9" }, { "alg" : "SHA-512", "content" : "143d42160551a994e0ec4b7e8fbc0fe53ffaab008e2d2003b8239fa2178b82e78572589c53d5daa734cc2ce7dd33d890adb940b0ccf7bc5d0f64cd2ed761e3b8" }, { "alg" : "SHA-384", "content" : "7fb2810b30dcea689c7edab92bba6f8c216e564336c3f9e0152d692b78089877cb5946eae4dfd09cb727db67871f281f" }, { "alg" : "SHA3-384", "content" : "98bc2f69082bd07db1b1554d28429ffbe4263827b7caa5dfc4cc530112dd52b55a599484af28850abc5820bf93354b55" }, { "alg" : "SHA3-256", "content" : "c441fed9f7e6ab68cd08bf18c2451c5a5eee8f5534e6c6ae90d6320004a7e6c0" }, { "alg" : "SHA3-512", "content" : "11420f691b45a38a58e233675d364b3e0775eb199761c80f3de8cd22d6164b7cb6f9489f30355d1ef5b26be2534bd8a7283f9bedf6532a51e3cedd6341ceddac" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/org.apache.httpcomponents.client5/httpclient5@5.5?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://hc.apache.org/httpcomponents-client-5.5.x/5.5/httpclient5/" }, { "type" : "distribution-intake", "url" : "https://repository.apache.org/service/local/staging/deploy/maven2" }, { "type" : "issue-tracker", "url" : "https://issues.apache.org/jira/browse/HTTPCLIENT" }, { "type" : "mailing-list", "url" : "https://lists.apache.org/list.html?httpclient-users@hc.apache.org" }, { "type" : "vcs", "url" : "https://github.com/apache/httpcomponents-client/tree/5.5/httpclient5" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/org.apache.httpcomponents.core5/httpcore5@5.3.4?type=jar", "publisher" : "The Apache Software Foundation", "group" : "org.apache.httpcomponents.core5", "name" : "httpcore5", "version" : "5.3.4", "description" : "Apache HttpComponents HTTP/1.1 core components", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "7b20d8a28f51b648fb3e8e4303885609" }, { "alg" : "SHA-1", "content" : "ea47f0fe6e00ffb07cec3a0cb1bb801b1a9cc353" }, { "alg" : "SHA-256", "content" : "f2b2fd7a0164e8c3120cd8437bc9fea439239e165c17262b3e907daa7e979f80" }, { "alg" : "SHA-512", "content" : "a892b3458b9f7a9ee0e8b22121680994a78f70498ce22b3c26462538856b7f000e5807afa853c4c0fee638bca9148ba5b19a495bd9049da2023f077a11d567ac" }, { "alg" : "SHA-384", "content" : "581af0dff3b2b2916dbef5cbfd92b11d92b5134efcc347433994c8423885001a016eddc55857173e4e07b4f35eb2ed06" }, { "alg" : "SHA3-384", "content" : "ed24c76060d9ad575e2da80176c97a06c7266ed6e3ebc933f791c7a9d6bad3cfc487d36ae4d733ee7e4a1c9468350643" }, { "alg" : "SHA3-256", "content" : "9874cae80a78848318fb1ac9e0fb21b516ccc049a9abc267f6fd160c013d3641" }, { "alg" : "SHA3-512", "content" : "eb10d4e176d450202d5abcec5d0f754182ad94c4322373997836842790aef756de6b625a49c7d70fea3d432c8dfe892677b0965f70cd10d5ff66ba6be59e449c" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/org.apache.httpcomponents.core5/httpcore5@5.3.4?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://hc.apache.org/httpcomponents-core-5.3.x/5.3.4/httpcore5/" }, { "type" : "distribution-intake", "url" : "https://repository.apache.org/service/local/staging/deploy/maven2" }, { "type" : "issue-tracker", "url" : "https://issues.apache.org/jira/browse/HTTPCORE" }, { "type" : "mailing-list", "url" : "https://lists.apache.org/list.html?httpclient-users@hc.apache.org" }, { "type" : "vcs", "url" : "https://github.com/apache/httpcomponents-core/tree/5.3.4/httpcore5" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/org.apache.httpcomponents.core5/httpcore5-h2@5.3.4?type=jar", "publisher" : "The Apache Software Foundation", "group" : "org.apache.httpcomponents.core5", "name" : "httpcore5-h2", "version" : "5.3.4", "description" : "Apache HttpComponents HTTP/2 Core Components", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "45cddb0e4be800806019ef8d9bfa7931" }, { "alg" : "SHA-1", "content" : "3742a9a9ba3a5a0d45be230093b52a1302a561e2" }, { "alg" : "SHA-256", "content" : "1fb4f34e4b612e7c127ad693335583587850b17ce9b1c366f9de1ca49fe2c781" }, { "alg" : "SHA-512", "content" : "ff6a6ffa1f6e4974011778ea8ffb6771c52c8b1ec161f7f411f7d6e0ec2988a36cf3c9636da956222a91a81f2718a215bc176b678cb6ef98ff44bc6cfe4b80e7" }, { "alg" : "SHA-384", "content" : "0e5a679b26abd8b170f7f5afded5a3923908dfd0fc92e90ab4757e561fa92a0e36cf2129313c355245810db9061fb309" }, { "alg" : "SHA3-384", "content" : "a203c70cd9e2d7f378b4745886ac8a25c2bcee599dc9f66f4be295deed81a70d68ba7b69d8a658a3a6fe9f14fda9dada" }, { "alg" : "SHA3-256", "content" : "cd90c09e8b92780fc77a197bea9f7a056ca79e80359d5f356727e1a132ac57fc" }, { "alg" : "SHA3-512", "content" : "e792b5a49e3b5dfd71de0130122cf5b52dac056bbc27aa67863d3b4877e721a0774a0483f41bae89016ddb1f8444e3a4cc2fda25213f38d008788ced76f14c18" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/org.apache.httpcomponents.core5/httpcore5-h2@5.3.4?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://hc.apache.org/httpcomponents-core-5.3.x/5.3.4/httpcore5-h2/" }, { "type" : "distribution-intake", "url" : "https://repository.apache.org/service/local/staging/deploy/maven2" }, { "type" : "issue-tracker", "url" : "https://issues.apache.org/jira/browse/HTTPCORE" }, { "type" : "mailing-list", "url" : "https://lists.apache.org/list.html?httpclient-users@hc.apache.org" }, { "type" : "vcs", "url" : "https://github.com/apache/httpcomponents-core/tree/5.3.4/httpcore5-h2" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/io.confluent/kafka-schema-registry-client-encryption-tink@8.0.3?type=jar", "publisher" : "Confluent, Inc.", "group" : "io.confluent", "name" : "kafka-schema-registry-client-encryption-tink", "version" : "8.0.3", "description" : "Schema Registry provides a RESTful interface for storing and retrieving versioned Avro schemas for use with Kafka.", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "2004ed052a508ffe6ad5529ef10b1062" }, { "alg" : "SHA-1", "content" : "3a125910819a6eccc5eed5953b62228df70c7c21" }, { "alg" : "SHA-256", "content" : "ef0bdfa23c9f67d040d2f1f5badeb66e5fca1abed59553988d2b69396b10e187" }, { "alg" : "SHA-512", "content" : "e8d954af2a08dfa64c6f99b46ad15e7ecff90cf9bdfe4db1924c560f60032d220efdacaa4ebad0360be0296ed8f19ff8e5168ac056a97edce9e5ed8247512db4" }, { "alg" : "SHA-384", "content" : "7e4d2e92f5bfa90e6889c04b1b9cdd297b8b59c70a3d4b5c5ad8b61b88517b9519003747aba934f4ccaee4246ef6ac84" }, { "alg" : "SHA3-384", "content" : "ddcb4135a29341d26299c9071b9ecd97a9849e257cafa98f97bacc72206f6f677825309affd7de6fc54a56aa1518669d" }, { "alg" : "SHA3-256", "content" : "209711334e20e892306d638fcc337395a960f50ca69868bbe7cd97ac1cf8acfb" }, { "alg" : "SHA3-512", "content" : "c7eccd338f983af4c244bd771f64f5b094b9d1c042244040ef1f419bff1a830ea87812cdaea4ffa5e89facfc6be87f59cc87646268c791dfe8a0da056d91bf53" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0", "url" : "https://www.apache.org/licenses/LICENSE-2.0" } } ], "purl" : "pkg:maven/io.confluent/kafka-schema-registry-client-encryption-tink@8.0.3?type=jar", "externalReferences" : [ { "type" : "website", "url" : "http://confluent.io/kafka-schema-registry-client-encryption-tink" }, { "type" : "distribution-intake", "url" : "s3://staging-confluent-packages-maven-654654529379-us-west-2/v8.0.3-rc251127071245/maven" }, { "type" : "vcs", "url" : "https://github.com/confluentinc/schema-registry/kafka-schema-registry-client-encryption-tink" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/com.google.protobuf/protobuf-java@4.31.1?type=jar", "group" : "com.google.protobuf", "name" : "protobuf-java", "version" : "4.31.1", "description" : "Core Protocol Buffers library. Protocol Buffers are a way of encoding structured data in an efficient yet extensible format.", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "4987ffc8ba1965e5546bdcf49dcfffe2" }, { "alg" : "SHA-1", "content" : "1828b20315b63d5f71b3c61b094494a8f1acdc5a" }, { "alg" : "SHA-256", "content" : "d60dfe7c68a0d38a248cca96924f289dc7e1966a887ee7cae397701af08575ae" }, { "alg" : "SHA-512", "content" : "004fa2bcb5bac222a96e0d2d6590fa7e768c2be63f1acd0b8da0c0e583539b932d8df6bda9989c679cf25e5977bedcff386690e8a305816ab44b9dd44ba2d149" }, { "alg" : "SHA-384", "content" : "97b9c3f171bbdf1e72338a57cfe095768fd5dad297e4c699f1f0424976f184801667e66b029ee80b9950431bd6335b1e" }, { "alg" : "SHA3-384", "content" : "02fec81acf70c02e57050e0916956fa67af1c5261f8517285d1d9eba72be9fe108fc4f93b0307b0c1e95884695a4fb4c" }, { "alg" : "SHA3-256", "content" : "f885f98a6e71360652d92b3620e0374b3efb01311a79e614ab666b49b48a5b1a" }, { "alg" : "SHA3-512", "content" : "58a1feb51486d3c571d91e1daaef679cab71e9a82a521855e87048a1ff3ddbcb68718a5b33f4b13b8df12ec269ffc394814d0c0e442ed1dc592404b3c6fc62cc" } ], "licenses" : [ { "license" : { "id" : "BSD-3-Clause", "url" : "https://opensource.org/licenses/BSD-3-Clause" } } ], "purl" : "pkg:maven/com.google.protobuf/protobuf-java@4.31.1?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://developers.google.com/protocol-buffers/protobuf-java/" }, { "type" : "distribution-intake", "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type" : "vcs", "url" : "https://github.com/protocolbuffers/protobuf/protobuf-java" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.16.0?type=jar", "publisher" : "FasterXML", "group" : "com.fasterxml.jackson.core", "name" : "jackson-annotations", "version" : "2.16.0", "description" : "Core annotations used for value types, used by Jackson data binding package.", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "9caec6e7cdd5cc18e18f99359b9e8d95" }, { "alg" : "SHA-1", "content" : "dc30995f7428c0a405eba9b8c619b20d2b3b9905" }, { "alg" : "SHA-256", "content" : "c4b90ea0c0074da17efdc3aa23973525f25d6f34725692169748f529547334a6" }, { "alg" : "SHA-512", "content" : "2c7d70c88b7e8dd710863f8c920d3e2fe56f8ecc01c757011bd9bbd195228028402566fbf4feaa083192453348a86a70732bf5d3f6eebb75ab4e5b3a525f6148" }, { "alg" : "SHA-384", "content" : "99413ce47a9980b0954051f651068565e75b6300c0b801179c87f347053e9c9f31c60c698a7e1ee9d1ff664facbb6c8e" }, { "alg" : "SHA3-384", "content" : "074ae852029679152418a8038e4743f0a08ac8629c829655528e55df9a9b485ab156760beb3d56e312e49dc9935979a2" }, { "alg" : "SHA3-256", "content" : "b06c76f9180c0c520d1a1f207f8dda1a5428282c2c8aa6483d762473aa09e8d4" }, { "alg" : "SHA3-512", "content" : "d3501082dc25d1fe1b044ca8361d74945f5a7a6dffc54261c0465b858efccc510e364d7a23dc32335648196cd4aa8d512f7dc9a79142cd19aa477270ed4daf5a" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.16.0?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://github.com/FasterXML/jackson" }, { "type" : "distribution-intake", "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type" : "issue-tracker", "url" : "https://github.com/FasterXML/jackson-annotations/issues" }, { "type" : "vcs", "url" : "https://github.com/FasterXML/jackson-annotations" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.16.0?type=jar", "publisher" : "FasterXML", "group" : "com.fasterxml.jackson.core", "name" : "jackson-core", "version" : "2.16.0", "description" : "Core Jackson processing abstractions (aka Streaming API), implementation for JSON", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "e2510fa60b7d363566a9016a8c40710f" }, { "alg" : "SHA-1", "content" : "899e5cf01be55fbf094ad72b2edb0c5df99111ee" }, { "alg" : "SHA-256", "content" : "66e2cde4cc7e565d5fce2a2998b64e991777bf9fad4d220735c525fd8d01c31a" }, { "alg" : "SHA-512", "content" : "89b134b2808c34562f751ff39b938e8c1b67030c4cfb8fd0418d76aed1d6b8f256915a5e88d9935f472322b414a7002e59d92160854cbd01774b28eed61c5315" }, { "alg" : "SHA-384", "content" : "fae7b757f776419e32e2f598f12c92c576c37e0ca489250a4aabf2db118913163aba958a9d5414da47d770810b20594a" }, { "alg" : "SHA3-384", "content" : "c51d4ed62c446f42bb3dbdfaa76fbb26beb1386aff50533049addc6bfc23476195060e80f06cc14e35540d7181f1b314" }, { "alg" : "SHA3-256", "content" : "d1ef5cdf29d629c6291b3d39f7ce9c0f3538d3713c6840430f36e32b333c85a4" }, { "alg" : "SHA3-512", "content" : "6af6b9310b50644e3fa8b3f6b9f8f97151c6745d68440736543fb0d2e2a913f4fa0a189c876ae9899941db980e4ece0e34996ff79a39a10fff71e97144cc1504" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.16.0?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://github.com/FasterXML/jackson-core" }, { "type" : "distribution-intake", "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type" : "issue-tracker", "url" : "https://github.com/FasterXML/jackson-core/issues" }, { "type" : "vcs", "url" : "https://github.com/FasterXML/jackson-core" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.16.0?type=jar", "publisher" : "FasterXML", "group" : "com.fasterxml.jackson.core", "name" : "jackson-databind", "version" : "2.16.0", "description" : "General data-binding functionality for Jackson: works on core streaming API", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "f9ae3e3bd773be8b474cb1b98dcf7ee6" }, { "alg" : "SHA-1", "content" : "3a6b7f8ff7b30d518bbd65678e9c30cd881f19a7" }, { "alg" : "SHA-256", "content" : "8aaf1753823be70b798290e5826ab5bfe015d35b3a36a5d3c2ec9f57d4b0138b" }, { "alg" : "SHA-512", "content" : "2f0a4211c1723bd88299380093a935840290694838a4c5ae0989bad46a615e02017b707ba7f3b825d0f0163f42a392efd0a1629024594992b5a4edee415c207a" }, { "alg" : "SHA-384", "content" : "8113432d108a152cd08ff4b12e4ea649d3240db070d3194a64712459436c1ea0c4b5362ec86ed076dc92c013215b043c" }, { "alg" : "SHA3-384", "content" : "5f708bb3920dc2da40fab38218404760bb3c5aeabe361212bbfb0a0586d009e2d8724db7602694834d13f814c2683472" }, { "alg" : "SHA3-256", "content" : "20e10ade4d4842297ccd29f20db6f9e8f1caf845fe99460a238bc6681a384da1" }, { "alg" : "SHA3-512", "content" : "e898514f8eb2e5c8ace07ff7c587408434eb4c330ea0067a01655be9d199e7fce59a8519869fd118cbcf86c019faccef6a6a2dfd3d79a454554ec0e1dafa739b" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.16.0?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://github.com/FasterXML/jackson" }, { "type" : "distribution-intake", "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type" : "issue-tracker", "url" : "https://github.com/FasterXML/jackson-databind/issues" }, { "type" : "vcs", "url" : "https://github.com/FasterXML/jackson-databind" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/com.google.guava/guava@32.0.1-jre?type=jar", "group" : "com.google.guava", "name" : "guava", "version" : "32.0.1-jre", "description" : "Guava is a suite of core and expanded libraries that include utility classes, Google's collections, I/O classes, and much more.", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "6951895e804b36322214c95917e598d4" }, { "alg" : "SHA-1", "content" : "6e5d51a72d142f2d40a57dfb897188b36a95b489" }, { "alg" : "SHA-256", "content" : "bd7fa227591fb8509677d0d1122cf95158f3b8a9f45653f58281d879f6dc48c5" }, { "alg" : "SHA-512", "content" : "5dbe7a697511cfbe44f3ffb954e32e997677ecc61f03bb7bb374f1b8fa4a931a95cd9d1f5288eb5d42e2aa380e3241b35059786c07edc48e5aa67c30cddad8a5" }, { "alg" : "SHA-384", "content" : "abad4556e073fb38062c636b6599ceed992302c7d98150e3842d32ce92f6aac7d630633c56efa581523d591361fcf898" }, { "alg" : "SHA3-384", "content" : "c7b02d77e04c567e8870674f71a60141e83ca9e5e9180138450ede78ad7f2be8b6636c514096e15ba2921c2889427852" }, { "alg" : "SHA3-256", "content" : "17f18d8631c9bff9234c214522ce89eb1feef27a4dfe990760d4943ad3de710d" }, { "alg" : "SHA3-512", "content" : "7cf7847812b47cc232ef3c27719457dd19610b3e3bb25c1be640821a3a2be67781047f41e34491b5c8ed68010bbb1d53c5f7706633f3a3f44f3f3133bb7635ec" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/com.google.guava/guava@32.0.1-jre?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://github.com/google/guava" }, { "type" : "build-system", "url" : "https://github.com/google/guava/actions" }, { "type" : "distribution-intake", "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type" : "issue-tracker", "url" : "https://github.com/google/guava/issues" }, { "type" : "vcs", "url" : "https://github.com/google/guava/guava" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/com.google.guava/failureaccess@1.0.1?type=jar", "group" : "com.google.guava", "name" : "failureaccess", "version" : "1.0.1", "description" : "Contains com.google.common.util.concurrent.internal.InternalFutureFailureAccess and InternalFutures. Most users will never need to use this artifact. Its classes is conceptually a part of Guava, but they're in this separate artifact so that Android libraries can use them without pulling in all of Guava (just as they can use ListenableFuture by depending on the listenablefuture artifact).", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "091883993ef5bfa91da01dcc8fc52236" }, { "alg" : "SHA-1", "content" : "1dcf1de382a0bf95a3d8b0849546c88bac1292c9" }, { "alg" : "SHA-256", "content" : "a171ee4c734dd2da837e4b16be9df4661afab72a41adaf31eb84dfdaf936ca26" }, { "alg" : "SHA-512", "content" : "f8d59b808d6ba617252305b66d5590937da9b2b843d492d06b8d0b1b1f397e39f360d5817707797b979a5bf20bf21987b35333e7a15c44ed7401fea2d2119cae" }, { "alg" : "SHA-384", "content" : "67659dbd9647ec303d7f15128dc9dba19b98fd8d74758ee3b602451e32c855e236ccaafe08edf4bbfa245f981268440f" }, { "alg" : "SHA3-384", "content" : "1460875f0331c5fa3791772a6a322a7db180261bc2adacf7271df1fbf3b088a587a755a604c039982cb593c5cfc1f101" }, { "alg" : "SHA3-256", "content" : "ea86406e75fcd93eafe3cde1b3135ba485f1bb9b75fed98894a0bf1f0aee04f0" }, { "alg" : "SHA3-512", "content" : "52ac0f487ab5dd27c9f2e54fd1d84c7a620cae9d49be4072aa2b11501787bf4391ddaa13d02eccdf19e8eea46aecbea5f6064b26777c1b836108a280652e04ac" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/com.google.guava/failureaccess@1.0.1?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://github.com/google/guava/failureaccess" }, { "type" : "build-system", "url" : "https://travis-ci.org/google/guava" }, { "type" : "distribution-intake", "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type" : "issue-tracker", "url" : "https://github.com/google/guava/issues" }, { "type" : "vcs", "url" : "https://github.com/google/guava/failureaccess" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar", "group" : "com.google.guava", "name" : "listenablefuture", "version" : "9999.0-empty-to-avoid-conflict-with-guava", "description" : "An empty artifact that Guava depends on to signal that it is providing ListenableFuture -- but is also available in a second \"version\" that contains com.google.common.util.concurrent.ListenableFuture class, without any other Guava classes. The idea is: - If users want only ListenableFuture, they depend on listenablefuture-1.0. - If users want all of Guava, they depend on guava, which, as of Guava 27.0, depends on listenablefuture-9999.0-empty-to-avoid-conflict-with-guava. The 9999.0-... version number is enough for some build systems (notably, Gradle) to select that empty artifact over the \"real\" listenablefuture-1.0 -- avoiding a conflict with the copy of ListenableFuture in guava itself. If users are using an older version of Guava or a build system other than Gradle, they may see class conflicts. If so, they can solve them by manually excluding the listenablefuture artifact or manually forcing their build systems to use 9999.0-....", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "d094c22570d65e132c19cea5d352e381" }, { "alg" : "SHA-1", "content" : "b421526c5f297295adef1c886e5246c39d4ac629" }, { "alg" : "SHA-256", "content" : "b372a037d4230aa57fbeffdef30fd6123f9c0c2db85d0aced00c91b974f33f99" }, { "alg" : "SHA-512", "content" : "c5987a979174cbacae2e78b319f080420cc71bcdbcf7893745731eeb93c23ed13bff8d4599441f373f3a246023d33df03e882de3015ee932a74a774afdd0782f" }, { "alg" : "SHA-384", "content" : "caff9b74079f95832ca7f6029346b34b606051cc8c5a4389fac263511d277ada0c55f28b0d43011055b268c6eb7184d5" }, { "alg" : "SHA3-384", "content" : "e939f08df0545847ea0d3e4b04a114b08499ad069ba8ec9461d1779f87a56e0c37273630a0f4c14e78c348d3ac7eb97f" }, { "alg" : "SHA3-256", "content" : "1f0a8b1177773b3a8ace839df5eed63cbf56b24a38714898a6e4ed065c42559f" }, { "alg" : "SHA3-512", "content" : "6b495ecc2a18b17365cb08d124a0da47f04bcdde81927b5245edf3edd8e498c3c3fb92ce6a4127f660bac851bb1d3e4510e5c20d03be47ce99dc296d360db285" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://github.com/google/guava/listenablefuture" }, { "type" : "build-system", "url" : "https://travis-ci.org/google/guava" }, { "type" : "distribution-intake", "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type" : "issue-tracker", "url" : "https://github.com/google/guava/issues" }, { "type" : "vcs", "url" : "https://github.com/google/guava/listenablefuture" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar", "group" : "com.google.code.findbugs", "name" : "jsr305", "version" : "3.0.2", "description" : "JSR305 Annotations for Findbugs", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "dd83accb899363c32b07d7a1b2e4ce40" }, { "alg" : "SHA-1", "content" : "25ea2e8b0c338a877313bd4672d3fe056ea78f0d" }, { "alg" : "SHA-256", "content" : "766ad2a0783f2687962c8ad74ceecc38a28b9f72a2d085ee438b7813e928d0c7" }, { "alg" : "SHA-512", "content" : "bb09db62919a50fa5b55906013be6ca4fc7acb2e87455fac5eaf9ede2e41ce8bbafc0e5a385a561264ea4cd71bbbd3ef5a45e02d63277a201d06a0ae1636f804" }, { "alg" : "SHA-384", "content" : "ca0b169d3eb2d0922dc031133a021f861a043bb3e405a88728215fd6ff00fa52fdc7347842dcc2031472e3726164bdc4" }, { "alg" : "SHA3-384", "content" : "9903fd7505218999f8262efedb3d935d64bcef84aae781064ab5e1b24755466b269517cada562fa140cd1d417ede57a1" }, { "alg" : "SHA3-256", "content" : "223fda9a89a461afaae73b177a2dc20ed4a90f2f8757f5c65f3241b0510f00ff" }, { "alg" : "SHA3-512", "content" : "3996b5af57a5d5c6a0cd62b11773360fb051dd86a2ba968476806a2a5d32049b82d69a24a3c694e8fe4d735be6a28e41000cc500cc2a9fb577e058045855d2d6" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar", "externalReferences" : [ { "type" : "website", "url" : "http://findbugs.sourceforge.net/" }, { "type" : "distribution-intake", "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type" : "vcs", "url" : "https://code.google.com/p/jsr-305/" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/org.checkerframework/checker-qual@3.33.0?type=jar", "group" : "org.checkerframework", "name" : "checker-qual", "version" : "3.33.0", "description" : "checker-qual contains annotations (type qualifiers) that a programmer writes to specify Java code for type-checking by the Checker Framework.", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "fc9418b779d9d57dcd52197006cbdb9b" }, { "alg" : "SHA-1", "content" : "de2b60b62da487644fc11f734e73c8b0b431238f" }, { "alg" : "SHA-256", "content" : "e316255bbfcd9fe50d165314b85abb2b33cb2a66a93c491db648e498a82c2de1" }, { "alg" : "SHA-512", "content" : "049c446677b7b386f3fb501bf65e032bdf2b1b29a3f545848035fff2b683cd275380cf302e30eea641af7f0801f779bcda3d82a71d928e4176f564f796640a64" }, { "alg" : "SHA-384", "content" : "ddf7a0f70421d1ed75e93c0a30434a4862c3905e433223e19861323cf0994e843392b746003040f10a7db6fc960b8aa6" }, { "alg" : "SHA3-384", "content" : "edf079834fdd23317851318504b2fcc10b055cdb5cc4ada9c773d1b6c815ed6dd193c433d2b83103f070fd521021ff33" }, { "alg" : "SHA3-256", "content" : "56244f45b03fc2a472b35489324e392e6001fac088d19f33629a87adb74a0575" }, { "alg" : "SHA3-512", "content" : "e0516c11fe613f258bf9ad39358a8d9fb7c8df57ff9aaca5d6d16055c196fac4ed3b4185f2501a3bdf7aeb1fe142693b1d788bdaa73366be1af15762bb3591a4" } ], "licenses" : [ { "license" : { "id" : "MIT" } } ], "purl" : "pkg:maven/org.checkerframework/checker-qual@3.33.0?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://checkerframework.org/" }, { "type" : "vcs", "url" : "https://github.com/typetools/checker-framework.git" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.18.0?type=jar", "publisher" : "Google LLC", "group" : "com.google.errorprone", "name" : "error_prone_annotations", "version" : "2.18.0", "description" : "Error Prone is a static analysis tool for Java that catches common programming mistakes at compile-time.", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "64145d0e7fee5a69ed7b84cf402de998" }, { "alg" : "SHA-1", "content" : "89b684257096f548fa39a7df9fdaa409d4d4df91" }, { "alg" : "SHA-256", "content" : "9e6814cb71816988a4fd1b07a993a8f21bb7058d522c162b1de849e19bea54ae" }, { "alg" : "SHA-512", "content" : "3cea86be94bb8ae40d21ad4bf7d7f6b2233e89593b7b741ad84c78840cd3837bb5136f52e62fe9ae0953d7b190c46ad3edc102dfa97b4c7ea472a80206bf5db7" }, { "alg" : "SHA-384", "content" : "7622eb33f83f03ab32b710b36c2fe836e24c5318f65fb8c0631a99507ca3ae65c2df8e33b63a5ce853b9cab6d9cb32e5" }, { "alg" : "SHA3-384", "content" : "1ea52a5ce2a9ee1a960dc2a1bbe4b009d4d6a4448498e4cd76401605fa877662911e8c93b2b8bfda57bedc56c83f10a0" }, { "alg" : "SHA3-256", "content" : "ed53f4295da75753267f241315352c4a39e60796f04e1c0c12d29c3a38be48ed" }, { "alg" : "SHA3-512", "content" : "8266b313bd4e1170daf60642e838841370d99bc24b2a1f91825ca22037a6a30ff15cc76069f8e8770f1dc12772c277ee1320de67e815041697d93d6d7ba884fb" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.18.0?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://errorprone.info/error_prone_annotations" }, { "type" : "vcs", "url" : "https://github.com/google/error-prone/error_prone_annotations" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/com.google.j2objc/j2objc-annotations@2.8?type=jar", "group" : "com.google.j2objc", "name" : "j2objc-annotations", "version" : "2.8", "description" : "A set of annotations that provide additional information to the J2ObjC translator to modify the result of translation.", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "c50af69b704dc91050efb98e0dff66d1" }, { "alg" : "SHA-1", "content" : "c85270e307e7b822f1086b93689124b89768e273" }, { "alg" : "SHA-256", "content" : "f02a95fa1a5e95edb3ed859fd0fb7df709d121a35290eff8b74dce2ab7f4d6ed" }, { "alg" : "SHA-512", "content" : "f8263868a792b41707c9e7fe6fa5650a14cd93fbeafad20efe3772a3058fc933eb59782ec59e6eb9b9c569aa96da80134ae9fdf7547b69c44a97087efddceeff" }, { "alg" : "SHA-384", "content" : "e6087ec31fec8289158496ad2ed6ce8472d5d513808a312e0782cedac3b86c37a62a63c0b5ea3839491d109fe9e148a1" }, { "alg" : "SHA3-384", "content" : "10add34bfeb8612283eef89ac96747a3c9b755acd80ad526e1addaeb7efd6323c52b9bfa1a3d34adb40e1ccb963ee65d" }, { "alg" : "SHA3-256", "content" : "b3336f8abd6b1f73b9f06d306974557000a000073bfbae6b54fda26d17dbb072" }, { "alg" : "SHA3-512", "content" : "d376c184a6df071c4e93b913d175b5c2e63deac37105dc20342c19bdda62e4e9598ca1e8bfb4f4fd5cdee6dd5ac3b8af49e2c5193e324d59a59ce1f7adeab627" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/com.google.j2objc/j2objc-annotations@2.8?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://github.com/google/j2objc/" }, { "type" : "distribution-intake", "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type" : "vcs", "url" : "http://svn.sonatype.org/spice/trunk/oss/oss-parent-9/j2objc-annotations" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/com.google.crypto.tink/tink@1.17.0?type=jar", "group" : "com.google.crypto.tink", "name" : "tink", "version" : "1.17.0", "description" : "Tink is a small cryptographic library that provides a safe, simple, agile and fast way to accomplish some common cryptographic tasks.", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "5c6b11951a135365c5a2a0f15e1d45ae" }, { "alg" : "SHA-1", "content" : "09ebc1c3e09f88af4b2e2ccd6d288ba8e1a69bc2" }, { "alg" : "SHA-256", "content" : "1f5e1f52e1295b4c35d2257c3cd14d715f81872e928f5bfb1c39cfb89585411d" }, { "alg" : "SHA-512", "content" : "571c23a182e061ef5bf839098fa4c5904c1f107c9d1a66f2a9f003242318c3c44e125a9fadfc4a0f74f87e15dec14e9aa4f045324241f3b90c578a8b0a580021" }, { "alg" : "SHA-384", "content" : "8dde75d40f73851c734176aad553efcda0ad53231f7aabdd5438dbbf54642ff53c654f35f147ed2c411c87b9d9da2655" }, { "alg" : "SHA3-384", "content" : "017d2bed2bfc6ca4a39ce1c0c9feb801626ef6d146f8ef927067483076ae327fd700ef68838509348b8634d6af512a4c" }, { "alg" : "SHA3-256", "content" : "eee01f05eca2b27d7501675e10372f4b81141a8a0aff07e9171daba5a71321a4" }, { "alg" : "SHA3-512", "content" : "7b3115337cbd0640d65563198e0a9f4ade7f00ab5d1f42e38ca6b3fe9425e17da6392a6141b6aacd88772f98ccd05541517fd83c52d149c002b03eea4c631b0c" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/com.google.crypto.tink/tink@1.17.0?type=jar", "externalReferences" : [ { "type" : "website", "url" : "http://github.com/tink-crypto/tink-java" }, { "type" : "distribution-intake", "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type" : "issue-tracker", "url" : "https://github.com/tink-crypto/tink-java/issues" }, { "type" : "mailing-list", "url" : "https://groups.google.com/group/tink-users" }, { "type" : "vcs", "url" : "https://github.com/tink-crypto/tink-java.git" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/com.google.code.gson/gson@2.9.0?type=jar", "group" : "com.google.code.gson", "name" : "gson", "version" : "2.9.0", "description" : "Gson JSON library", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "53fa3e6753e90d931d62cb89580fde2f" }, { "alg" : "SHA-1", "content" : "8a1167e089096758b49f9b34066ef98b2f4b37aa" }, { "alg" : "SHA-256", "content" : "c96d60551331a196dac54b745aa642cd078ef89b6f267146b705f2c2cbef052d" }, { "alg" : "SHA-512", "content" : "13ff22a60ee6a72ba0c4e8fe3702b8f3f6be6b67ed4279079a9843f57ad0ca125d4ecc1564ac4e736eab10fb6254d2c011b2c08c514d708be7f8091332ed2c2c" }, { "alg" : "SHA-384", "content" : "fde5b61066a8cdd711874ed42f20cb914e4193f1477456c431fb0ca32d86324414e92b0b2c5696f56d0b9d69521d8dee" }, { "alg" : "SHA3-384", "content" : "314156bb766c2f792317763322a819ef968e5ecc7f1a236ab0bb383426d1bf396e18099edb16f85e572b42c85a6c89ba" }, { "alg" : "SHA3-256", "content" : "5e550f5f719c5f5c4ad04fbe6cd0d7868d6bf0e4184f386e4896e72c4839de3e" }, { "alg" : "SHA3-512", "content" : "a3db5a0129c42598b5ded96cdf75d69c75d4a6b317746c9b7fbf238b2ca78cfb48fb0023ae1a4178bc8da3727ceb0bad6930f8f24624e0be6dbbde00adbb0624" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0", "url" : "https://www.apache.org/licenses/LICENSE-2.0" } } ], "purl" : "pkg:maven/com.google.code.gson/gson@2.9.0?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://github.com/google/gson/gson" }, { "type" : "distribution-intake", "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type" : "issue-tracker", "url" : "https://github.com/google/gson/issues" }, { "type" : "vcs", "url" : "https://github.com/google/gson/gson/" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/junit/junit@4.13.2?type=jar", "publisher" : "JUnit", "group" : "junit", "name" : "junit", "version" : "4.13.2", "description" : "JUnit is a unit testing framework for Java, created by Erich Gamma and Kent Beck.", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "d98a9a02a99a9acd22d7653cbcc1f31f" }, { "alg" : "SHA-1", "content" : "8ac9e16d933b6fb43bc7f576336b8f4d7eb5ba12" }, { "alg" : "SHA-256", "content" : "8e495b634469d64fb8acfa3495a065cbacc8a0fff55ce1e31007be4c16dc57d3" }, { "alg" : "SHA-512", "content" : "a31b9950f929a7e5a600d89787ef40e42a8a8e2392e210d0c0f45b3572937670a18a524f1815508cd1152cd1eaa7275cb7430ba45c053be365c83c231bccd3f0" }, { "alg" : "SHA-384", "content" : "9f85c56a77c699eb87630b9e8224068a34c296bcd9aadb52248dd4665036f5bf1048fe75e5cb590b59e7855ca716acae" }, { "alg" : "SHA3-384", "content" : "590cfd9396424583879ca8ad732870406bab18325ac72fb2bbe188b9611278d6341700badf7cfc32525b8ff42900c905" }, { "alg" : "SHA3-256", "content" : "a06b3fd2fd1d9f4306b58125484e3605a395afe5ffe2c801e43ae462f366a430" }, { "alg" : "SHA3-512", "content" : "a6d25ce3c14f9065f06dfd0e68e1dad5c03bd5de0a302c44ca4733d2cb87ec1bc6f0abd36d65aeee8caf328b6881432c4b682fa4b4b1fa931c3c950de5129fb2" } ], "licenses" : [ { "license" : { "id" : "EPL-1.0", "url" : "http://www.eclipse.org/legal/epl-v10.html" } } ], "purl" : "pkg:maven/junit/junit@4.13.2?type=jar", "externalReferences" : [ { "type" : "website", "url" : "http://junit.org" }, { "type" : "build-system", "url" : "https://github.com/junit-team/junit4/actions" }, { "type" : "distribution", "url" : "https://github.com/junit-team/junit4/wiki/Download-and-Install" }, { "type" : "distribution-intake", "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type" : "issue-tracker", "url" : "https://github.com/junit-team/junit4/issues" }, { "type" : "vcs", "url" : "https://github.com/junit-team/junit4" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/org.hamcrest/hamcrest-core@1.3?type=jar", "group" : "org.hamcrest", "name" : "hamcrest-core", "version" : "1.3", "description" : "This is the core API of hamcrest matcher framework to be used by third-party framework providers. This includes the a foundation set of matcher implementations for common operations.", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "6393363b47ddcbba82321110c3e07519" }, { "alg" : "SHA-1", "content" : "42a25dc3219429f0e5d060061f71acb49bf010a0" }, { "alg" : "SHA-256", "content" : "66fdef91e9739348df7a096aa384a5685f4e875584cce89386a7a47251c4d8e9" }, { "alg" : "SHA-512", "content" : "e237ae735aac4fa5a7253ec693191f42ef7ddce384c11d29fbf605981c0be077d086757409acad53cb5b9e53d86a07cc428d459ff0f5b00d32a8cbbca390be49" }, { "alg" : "SHA-384", "content" : "4b5297d2a12cc32b824153afc83f1ba9f1869ca288330f0a2f759659d09e4c420eb6ba4a1efbfa0657b625edd41293d5" }, { "alg" : "SHA3-384", "content" : "b14d34985c0a78cf0ba19b5a18bffd403e08adcb2afde228ddef6e16121c7046dbebf58c04d3419311c4496c48aa93be" }, { "alg" : "SHA3-256", "content" : "f679af77deedf69b3c3066f7916583848c6fd32a950f9c0b0e2ef1da121717ba" }, { "alg" : "SHA3-512", "content" : "bca821931e438a1977b7b4356b5f8cebf485634f82159d505c48267c34e6a0f4fde9c2917331365f66dc0e52e2ca3a2db5256863584110c27ecebefc28741f63" } ], "licenses" : [ { "license" : { "id" : "BSD-3-Clause" } } ], "purl" : "pkg:maven/org.hamcrest/hamcrest-core@1.3?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://github.com/hamcrest/JavaHamcrest/hamcrest-core" }, { "type" : "vcs", "url" : "https://github.com/hamcrest/JavaHamcrest/hamcrest-core" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/io.confluent/common-utils@8.0.3?type=jar", "publisher" : "Confluent, Inc.", "group" : "io.confluent", "name" : "common-utils", "version" : "8.0.3", "description" : "Common utilities, including metrics and config.", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "62e933eadab3f56de20282ec093ff318" }, { "alg" : "SHA-1", "content" : "f6e78bba11583a7ea8217579162707be0e472a5f" }, { "alg" : "SHA-256", "content" : "4bdf57cd62e58fd25687deb15b6ae91ccf50da656a6d4270d662b2a114ec2d02" }, { "alg" : "SHA-512", "content" : "77a99d9282e11c7a24b12523167676efff7f6edbdc5d0511fb2325a169d9f8ec81a4b6f93acbe050616e4439078604a88ce79b3f0fb20ba9017982f2ddc92295" }, { "alg" : "SHA-384", "content" : "b492e34b799e1b3a5ec580147d7b0225348a394a7bddc6441fca6082ad76e6a40a4a68cd1340d32d5123bbb8c9031608" }, { "alg" : "SHA3-384", "content" : "ee6e9f20c15a6b1b687192d766d1e8879224a29260d7188ee1ffabaae652c9950c8afe46302e10e5a162aa3c67df73e3" }, { "alg" : "SHA3-256", "content" : "a295931be79405280056ae7525dbf85c8f64e347553fd6f01a379f1ed3a5ed41" }, { "alg" : "SHA3-512", "content" : "c79abc46294dd2cef535f444d5a4dfc0c14f304a92d29259f8eb89744fabe4b845e3138a4c3558f98d11935c781f6e3daffffeabc03481f09a2b7ebcba9c66c2" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0", "url" : "https://www.apache.org/licenses/LICENSE-2.0" } } ], "purl" : "pkg:maven/io.confluent/common-utils@8.0.3?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://confluent.io/common-utils" }, { "type" : "distribution-intake", "url" : "s3://staging-confluent-packages-maven-654654529379-us-west-2/v8.0.3-rc251127071245/maven" }, { "type" : "vcs", "url" : "https://github.com/confluentinc/common/common-utils" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar", "publisher" : "QOS.ch", "group" : "org.slf4j", "name" : "slf4j-api", "version" : "1.7.36", "description" : "The slf4j API", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "872da51f5de7f3923da4de871d57fd85" }, { "alg" : "SHA-1", "content" : "6c62681a2f655b49963a5983b8b0950a6120ae14" }, { "alg" : "SHA-256", "content" : "d3ef575e3e4979678dc01bf1dcce51021493b4d11fb7f1be8ad982877c16a1c0" }, { "alg" : "SHA-512", "content" : "f9b033fc019a44f98b16048da7e2b59edd4a6a527ba60e358f65ab88e0afae03a9340f1b3e8a543d49fa542290f499c5594259affa1ff3e6e7bf3b428d4c610b" }, { "alg" : "SHA-384", "content" : "2b14ad035877087157e379d3277dcdcd79e58d6bdb147c47d29e377d75ce53ad42cafbf22f5fb7827c7e946ff4876b9a" }, { "alg" : "SHA3-384", "content" : "3bc3110dafb8d5be16a39f3b2671a466463cd99eb39610c0e4719a7bf2d928f2ea213c734887c6926a07c4cca7769e4b" }, { "alg" : "SHA3-256", "content" : "ba2608179fcf46e2291a90b9cbb4aa30d718e481f59c350cc21c73b88d826881" }, { "alg" : "SHA3-512", "content" : "14c4edcd19702ef607d78826839d8a6d3a39157df54b89a801d3d3cbbe1307131a77671b041c761122730fb1387888c5ec2e46bdd80e1cb07f8f144676441824" } ], "licenses" : [ { "license" : { "id" : "MIT", "url" : "https://opensource.org/license/mit/" } } ], "purl" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar", "externalReferences" : [ { "type" : "website", "url" : "http://www.slf4j.org" }, { "type" : "distribution-intake", "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type" : "vcs", "url" : "https://github.com/qos-ch/slf4j/slf4j-api" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/io.confluent/assembly-plugin-boilerplate@8.0.3?classifier=resources&type=zip", "group" : "io.confluent", "name" : "assembly-plugin-boilerplate", "version" : "8.0.3", "description" : "Maven Assembly Plugin boilerplate for Dockerized projects", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "c41daf2e1f3301ae704adff891844bc2" }, { "alg" : "SHA-1", "content" : "a10b8a51d046a1dff707a809d1ec7b69480e8e60" }, { "alg" : "SHA-256", "content" : "e3c4442b91b09a57a92f79482382f9ca9e77356e984cc207e218ec7b2a2a94e7" }, { "alg" : "SHA-512", "content" : "00b9abb6c4ed69408d3f25a2e79cace7dcfc57ed58c9deee32be18041861cc13163fef57e9d8436905ac7597f07c79e6bb31137bdeccad571b58c7745bcace8e" }, { "alg" : "SHA-384", "content" : "5c1de0f92b27537499b9b409c7b8c49f5ac4e5e3991e4c4cbe233397cf553a57406fcb0334ebcfb38b51a1e6815db6b7" }, { "alg" : "SHA3-384", "content" : "a239d659706eeb630613d15e4cd64d1b03abd57f6d716d6628832888e1bf465dc613d1cd6a55b687e1c91952e3dd6dc3" }, { "alg" : "SHA3-256", "content" : "e1e165b6516d180d2274e28f8346688fa90677f183ba3c662756decf2a998645" }, { "alg" : "SHA3-512", "content" : "b226b5051c5d49108e2fb53725b3e42817b5e2e31bfd9828590daa0640cbc3f10a0035549533fbb4be02f67ddd459d7daf16ac659a4daab1e28d2a2e7ece8584" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0", "url" : "https://www.apache.org/licenses/LICENSE-2.0" } } ], "purl" : "pkg:maven/io.confluent/assembly-plugin-boilerplate@8.0.3?classifier=resources&type=zip", "externalReferences" : [ { "type" : "website", "url" : "https://github.com/confluentinc/common" }, { "type" : "distribution-intake", "url" : "s3://staging-confluent-packages-maven-654654529379-us-west-2/v8.0.3-rc251127071245/maven" } ] } ], "dependencies" : [ { "ref" : "pkg:maven/io.confluent/dek-registry-client@8.0.3?type=jar", "dependsOn" : [ "pkg:maven/io.confluent/kafka-schema-registry-client@8.0.3?type=jar", "pkg:maven/io.confluent/kafka-schema-registry-client-encryption-tink@8.0.3?type=jar", "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.16.0?type=jar", "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.16.0?type=jar", "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.16.0?type=jar", "pkg:maven/com.google.guava/guava@32.0.1-jre?type=jar", "pkg:maven/com.google.crypto.tink/tink@1.17.0?type=jar", "pkg:maven/junit/junit@4.13.2?type=jar", "pkg:maven/io.confluent/common-utils@8.0.3?type=jar", "pkg:maven/io.confluent/assembly-plugin-boilerplate@8.0.3?classifier=resources&type=zip" ] }, { "ref" : "pkg:maven/io.confluent/kafka-schema-registry-client@8.0.3?type=jar", "dependsOn" : [ "pkg:maven/org.yaml/snakeyaml@2.0?type=jar", "pkg:maven/org.apache.kafka/kafka-clients@8.0.3-ccs?type=jar", "pkg:maven/org.apache.avro/avro@1.12.1?type=jar", "pkg:maven/org.apache.commons/commons-compress@1.26.1?type=jar", "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.16.0?type=jar", "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jdk8@2.16.0?type=jar", "pkg:maven/io.swagger.core.v3/swagger-annotations@2.2.29?type=jar", "pkg:maven/com.google.guava/guava@32.0.1-jre?type=jar", "pkg:maven/org.apache.httpcomponents.client5/httpclient5@5.5?type=jar", "pkg:maven/io.confluent/common-utils@8.0.3?type=jar" ] }, { "ref" : "pkg:maven/org.yaml/snakeyaml@2.0?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/org.apache.kafka/kafka-clients@8.0.3-ccs?type=jar", "dependsOn" : [ "pkg:maven/com.github.luben/zstd-jni@1.5.6-6?type=jar", "pkg:maven/org.lz4/lz4-java@1.8.0?type=jar", "pkg:maven/org.xerial.snappy/snappy-java@1.1.10.5?type=jar", "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar" ] }, { "ref" : "pkg:maven/com.github.luben/zstd-jni@1.5.6-6?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/org.lz4/lz4-java@1.8.0?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/org.xerial.snappy/snappy-java@1.1.10.5?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/org.apache.avro/avro@1.12.1?type=jar", "dependsOn" : [ "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.16.0?type=jar", "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.16.0?type=jar", "pkg:maven/org.apache.commons/commons-compress@1.26.1?type=jar", "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar" ] }, { "ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.16.0?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.16.0?type=jar", "dependsOn" : [ "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.16.0?type=jar", "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.16.0?type=jar" ] }, { "ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.16.0?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/org.apache.commons/commons-compress@1.26.1?type=jar", "dependsOn" : [ "pkg:maven/commons-codec/commons-codec@1.16.1?type=jar", "pkg:maven/commons-io/commons-io@2.16.0?type=jar", "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar" ] }, { "ref" : "pkg:maven/commons-codec/commons-codec@1.16.1?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/commons-io/commons-io@2.16.0?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jdk8@2.16.0?type=jar", "dependsOn" : [ "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.16.0?type=jar", "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.16.0?type=jar" ] }, { "ref" : "pkg:maven/io.swagger.core.v3/swagger-annotations@2.2.29?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/com.google.guava/guava@32.0.1-jre?type=jar", "dependsOn" : [ "pkg:maven/com.google.guava/failureaccess@1.0.1?type=jar", "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar", "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar", "pkg:maven/org.checkerframework/checker-qual@3.33.0?type=jar", "pkg:maven/com.google.errorprone/error_prone_annotations@2.18.0?type=jar", "pkg:maven/com.google.j2objc/j2objc-annotations@2.8?type=jar" ] }, { "ref" : "pkg:maven/com.google.guava/failureaccess@1.0.1?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/org.checkerframework/checker-qual@3.33.0?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.18.0?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/com.google.j2objc/j2objc-annotations@2.8?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/org.apache.httpcomponents.client5/httpclient5@5.5?type=jar", "dependsOn" : [ "pkg:maven/org.apache.httpcomponents.core5/httpcore5@5.3.4?type=jar", "pkg:maven/org.apache.httpcomponents.core5/httpcore5-h2@5.3.4?type=jar", "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar" ] }, { "ref" : "pkg:maven/org.apache.httpcomponents.core5/httpcore5@5.3.4?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/org.apache.httpcomponents.core5/httpcore5-h2@5.3.4?type=jar", "dependsOn" : [ "pkg:maven/org.apache.httpcomponents.core5/httpcore5@5.3.4?type=jar" ] }, { "ref" : "pkg:maven/io.confluent/common-utils@8.0.3?type=jar", "dependsOn" : [ "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar" ] }, { "ref" : "pkg:maven/io.confluent/kafka-schema-registry-client-encryption-tink@8.0.3?type=jar", "dependsOn" : [ "pkg:maven/com.google.crypto.tink/tink@1.17.0?type=jar", "pkg:maven/com.google.guava/guava@32.0.1-jre?type=jar", "pkg:maven/com.google.protobuf/protobuf-java@4.31.1?type=jar", "pkg:maven/io.confluent/common-utils@8.0.3?type=jar" ] }, { "ref" : "pkg:maven/com.google.crypto.tink/tink@1.17.0?type=jar", "dependsOn" : [ "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar", "pkg:maven/com.google.code.gson/gson@2.9.0?type=jar", "pkg:maven/com.google.errorprone/error_prone_annotations@2.18.0?type=jar", "pkg:maven/com.google.protobuf/protobuf-java@4.31.1?type=jar" ] }, { "ref" : "pkg:maven/com.google.code.gson/gson@2.9.0?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/com.google.protobuf/protobuf-java@4.31.1?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/junit/junit@4.13.2?type=jar", "dependsOn" : [ "pkg:maven/org.hamcrest/hamcrest-core@1.3?type=jar" ] }, { "ref" : "pkg:maven/org.hamcrest/hamcrest-core@1.3?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/io.confluent/assembly-plugin-boilerplate@8.0.3?classifier=resources&type=zip", "dependsOn" : [ ] } ] }