{ "bomFormat" : "CycloneDX", "specVersion" : "1.5", "serialNumber" : "urn:uuid:0c577c52-68fc-3459-acf1-26a0d884efa6", "version" : 1, "metadata" : { "timestamp" : "2026-02-24T11:50:00Z", "lifecycles" : [ { "phase" : "build" } ], "tools" : { "components" : [ { "type" : "library", "author" : "OWASP Foundation", "group" : "org.cyclonedx", "name" : "cyclonedx-maven-plugin", "version" : "2.9.0", "description" : "CycloneDX Maven plugin", "hashes" : [ { "alg" : "MD5", "content" : "dfaeab7ec837ce07874e2ee66fdc57d3" }, { "alg" : "SHA-1", "content" : "8bab47bafc8183d0a5f37790ff55ed05ead1ae2d" }, { "alg" : "SHA-256", "content" : "67117e03eae4a03ca8bab3add044995f4899aa21798a2510b8265ef8101e90ac" }, { "alg" : "SHA-512", "content" : "ae6b706516bb76da806b7854aef9e348fa593f5159ae9d693ad38942165c0ebc0846d977a477f6029612d43468fd2cd73a5aa253c228a94fb8d184e0acefc3d2" }, { "alg" : "SHA-384", "content" : "ee872354d8b0dcd6f9835a913b3aaba70d9365a46043be78020183282a1e9fca812e969246cbe31d642541591b46648b" }, { "alg" : "SHA3-384", "content" : "e5167f9e7ceba3b7b4d1900c404543907868745334bedc69cdf79c271727148413033a3b1426b733b7549e612e44adee" }, { "alg" : "SHA3-256", "content" : "41fc0bc2275f354e2c7da01041ce73ce677364799cba53920a180aa5d4571c63" }, { "alg" : "SHA3-512", "content" : "ed7f97900b09b818dbc0b8a23c00a2843e1bc34e2e8eb5b6df52533af0a15b721de6f7d5c2fd9352b8d4fde768e080053b40a16f0f9f04c336fe9b44abe83fc0" } ] } ] }, "component" : { "type" : "library", "bom-ref" : "pkg:maven/io.confluent/dek-registry-client@8.2.0?type=jar", "publisher" : "Confluent, Inc.", "group" : "io.confluent", "name" : "dek-registry-client", "version" : "8.2.0", "description" : "Schema Registry provides a RESTful interface for storing and retrieving versioned Avro schemas for use with Kafka.", "licenses" : [ { "license" : { "name" : "Confluent Community License", "url" : "http://www.confluent.io/confluent-community-license" } }, { "license" : { "id" : "Apache-2.0", "url" : "https://www.apache.org/licenses/LICENSE-2.0" } } ], "purl" : "pkg:maven/io.confluent/dek-registry-client@8.2.0?type=jar", "externalReferences" : [ { "type" : "website", "url" : "http://confluent.io/dek-registry-client" }, { "type" : "distribution-intake", "url" : "s3://staging-confluent-packages-maven-654654529379-us-west-2/v8.2.0-rc260224095616/maven" }, { "type" : "vcs", "url" : "https://github.com/confluentinc/schema-registry/dek-registry-client" } ] }, "properties" : [ { "name" : "maven.goal", "value" : "makeBom" }, { "name" : "maven.scopes", "value" : "compile,provided,runtime,system,test" } ] }, "components" : [ { "type" : "library", "bom-ref" : "pkg:maven/io.confluent/kafka-schema-registry-client@8.2.0?type=jar", "publisher" : "Confluent, Inc.", "group" : "io.confluent", "name" : "kafka-schema-registry-client", "version" : "8.2.0", "description" : "Schema Registry provides a RESTful interface for storing and retrieving versioned Avro schemas for use with Kafka.", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "6f7db38f3084bb3e3ba4fa8c91179f10" }, { "alg" : "SHA-1", "content" : "5b4cd9bf7ff41039cffb7d9aa7aa9546fb00c66a" }, { "alg" : "SHA-256", "content" : "cb3d90a3867a2e5052ada7a9cb64883e48d7ca2048accc10457f5deb421c5b80" }, { "alg" : "SHA-512", "content" : "30d98edd3c5bd9a0ac57f68ffab40c203b2babd73ff2894b7497c400097aea668433156d992d5cb742c03dc37109c52642049d0e7eaa0130f0a792b58fe56062" }, { "alg" : "SHA-384", "content" : "13ac3ccaca988eae0a70e6b0a9addf28a57262cb10de784672b1ca3df2dcda60f78ae6b8881bb82d630ae64fda3b6f51" }, { "alg" : "SHA3-384", "content" : "69ea0e4468b851d58ded6df1f9371a6b331533dcfe0127598bfdb67a8635bf33a2c6583cb37d1edac4b07635a60de09a" }, { "alg" : "SHA3-256", "content" : "ec9a60f59e662b435896845001be3b5df94f5e566f8c7a22075f2db2d517be96" }, { "alg" : "SHA3-512", "content" : "10ca93f2987ddac1986b26619afc0f69293a28d814d04258afaebc3685ab96cf7512e437a88a06f0b39e43e29a8e5e58c1075c16410cce5042378605be88c660" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0", "url" : "https://www.apache.org/licenses/LICENSE-2.0" } } ], "purl" : "pkg:maven/io.confluent/kafka-schema-registry-client@8.2.0?type=jar", "externalReferences" : [ { "type" : "website", "url" : "http://confluent.io/kafka-schema-registry-client" }, { "type" : "distribution-intake", "url" : "s3://staging-confluent-packages-maven-654654529379-us-west-2/v8.2.0-rc260224095616/maven" }, { "type" : "vcs", "url" : "https://github.com/confluentinc/schema-registry/kafka-schema-registry-client" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/org.yaml/snakeyaml@2.0?type=jar", "group" : "org.yaml", "name" : "snakeyaml", "version" : "2.0", "description" : "YAML 1.1 parser and emitter for Java", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "caf24b81b9d57e6d4f68b1ccd36e00a3" }, { "alg" : "SHA-1", "content" : "3aab2116756442bf0d4cd1c089b24d34c3baa253" }, { "alg" : "SHA-256", "content" : "880c9d896e4b74a06c549c15ca496450165d6909fa15d7e662bee8f6a66d7afa" }, { "alg" : "SHA-512", "content" : "93567558444365c436027bd1064b67ae99abde77fa89b33ac7c586ab83e4dbf02b7610669fd00ccd258bca6ba3fa078954c92d918b989317dce7bf9ce18836b8" }, { "alg" : "SHA-384", "content" : "63c0ec40f4e3f24786031fb8a9477071c86e69247dce283ff725e328e26fba7bdfbb0ab52027b9b0988b3978703a95fe" }, { "alg" : "SHA3-384", "content" : "fedd091de2b63c38fb04cb8e2d657bc7b37193ef065b18058be892d6b816d7cb68e5445819c3f3f8fca116311adc9760" }, { "alg" : "SHA3-256", "content" : "66264c5c5f4703942a959310c14f22df9c2b1c304ddca1d1c211da58af5623f4" }, { "alg" : "SHA3-512", "content" : "0c4c5807880025a22791114253443d2166218760d63b80cd72eb3fdd71a19fdadb27d392b47de9c6b7ca2a2dc312273f0b8c97012ff277d2cab0fd06f3902573" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/org.yaml/snakeyaml@2.0?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://bitbucket.org/snakeyaml/snakeyaml" }, { "type" : "distribution-intake", "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type" : "issue-tracker", "url" : "https://bitbucket.org/snakeyaml/snakeyaml/issues" }, { "type" : "vcs", "url" : "https://bitbucket.org/snakeyaml/snakeyaml/src" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/org.apache.kafka/kafka-clients@8.2.0-ccs?type=jar", "group" : "org.apache.kafka", "name" : "kafka-clients", "version" : "8.2.0-ccs", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "1ad3fd2d5749ac82bc4dfe953a18089e" }, { "alg" : "SHA-1", "content" : "1c82f7e440f787c3903dcb8048bdf8a213020b0c" }, { "alg" : "SHA-256", "content" : "be4a742568abf22d68b828221e64dcce64ff3722ae08818dd71c35b9fd9795a3" }, { "alg" : "SHA-512", "content" : "906b6f582d366a1861a45b6f1c5f5c0647568bc240af920c6b88b554dfca75803ad947a0a3524f44125cb27b1ac2e75c9822df65ee242700595a28ac7f92fbf7" }, { "alg" : "SHA-384", "content" : "3b4880d5efb74deeb508b1f9951cbfd4798d10f0554def75aecbb4af75683dbd0f68024c96821a0821a269404d0b1272" }, { "alg" : "SHA3-384", "content" : "bdf6cb047a6a97f02c79d3bb46565c794e90711846ea063c494118b0c841ec93caae7453505699f139ee1f6e2c5b563f" }, { "alg" : "SHA3-256", "content" : "47abd251a38e63be1afd42e6469d84976650f7c839cfc60a60d9ece3baaddad1" }, { "alg" : "SHA3-512", "content" : "f047cee348cb354176e94aed8eff4be644ccfa0e6f6d647b30c88046ef96e2863d4ad2bc58327013f37b6cb5b26c1bece3a12ec25c7b3b88d5093e6c8aff9dd4" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/org.apache.kafka/kafka-clients@8.2.0-ccs?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://kafka.apache.org" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/com.github.luben/zstd-jni@1.5.6-10?type=jar", "publisher" : "com.github.luben", "group" : "com.github.luben", "name" : "zstd-jni", "version" : "1.5.6-10", "description" : "JNI bindings for Zstd native library that provides fast and high compression lossless algorithm for Java and all JVM languages.", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "93299f5422c91c08b9e4b7c5e401dd56" }, { "alg" : "SHA-1", "content" : "7e146ecb598af55d1f64d1c118af27569a848558" }, { "alg" : "SHA-256", "content" : "b6c3237e24b8252a5a9c3a0e1ae30ef8f323412e74bd358548b7a9e527d676df" }, { "alg" : "SHA-512", "content" : "fdc73c64ba40b3a89c14b3cd2313c19e2867b9e202ed0dadcf33de37fb904bd1b6ba73abd754794acad3a81c6e43852cdc0f850b6b090d414ba65598eda6f47e" }, { "alg" : "SHA-384", "content" : "1faf411461ce2faf634b16e43ece8998abbe5aaec1727c03a7debb6e2d6a7c8d47a12e208a7bd20d308e82f7f0821002" }, { "alg" : "SHA3-384", "content" : "b49963bf539e44c97c3850cc50f4e27e3b5e84a3da43be366f2a6b1e24875d64d7503fab9499268c004362d05a7eef14" }, { "alg" : "SHA3-256", "content" : "54f687bd0d7bbf8591320422bdd19965a271334a9cc84abc62d85db82cddd99e" }, { "alg" : "SHA3-512", "content" : "df813ddd37a46911723bb79736ff68e70a561ce6bf7553430ef6f2eda3aa350f038c1b98d3ba5494a4d0db52ce6a05271e278c3a6d8ab13683bccf149644a277" } ], "licenses" : [ { "license" : { "id" : "BSD-2-Clause" } } ], "purl" : "pkg:maven/com.github.luben/zstd-jni@1.5.6-10?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://github.com/luben/zstd-jni" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/at.yawk.lz4/lz4-java@1.10.1?type=jar", "group" : "at.yawk.lz4", "name" : "lz4-java", "version" : "1.10.1", "description" : "Java bindings and pure Java implementations of LZ4 and XXHash", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "8ea4d77e6a652da0162a69b6aea6e4a9" }, { "alg" : "SHA-1", "content" : "f541d7f910fe3d76f38f799c507c48cc81b12ecb" }, { "alg" : "SHA-256", "content" : "a58a84c4271e50df4c96ed916ccb7e48a869f8ed9cdcda1ad5d3d4c33b0214a3" }, { "alg" : "SHA-512", "content" : "6930598c1c27a247de88a0db74aa14e90d7837832b61042edde7f954f55c8382b505aa35a21d3e69a3dc333b013866a98a7c3570c34aeea3ab1c1ef1c05d0048" }, { "alg" : "SHA-384", "content" : "f266dbead14988f5b05d11628bb55b5266c6e1d10578356f9a25967310c301d20fab78d46d6dfe8a31b641c2844ba2f9" }, { "alg" : "SHA3-384", "content" : "a35fd2201de77821293560ca5dcbbc4f831ee0a1ae056b0511847370091402c1433fd7e0ff18d4fc26f217b613d6f0e9" }, { "alg" : "SHA3-256", "content" : "cd5bc0d64595fc34b50d830be6d61a5e537389368a9c50136d76100ff17c9727" }, { "alg" : "SHA3-512", "content" : "d3da038eca828202ecccc8ccb0ba3355839723369ebf9e42ab0ed9d564671bad25b3559decf20673381a30c43da7b70af0a440d155021932cd6b1dc39bb43da5" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/at.yawk.lz4/lz4-java@1.10.1?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://github.com/yawkat/lz4-java" }, { "type" : "vcs", "url" : "https://github.com/yawkat/lz4-java" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/org.xerial.snappy/snappy-java@1.1.10.5?type=jar", "publisher" : "xerial.org", "group" : "org.xerial.snappy", "name" : "snappy-java", "version" : "1.1.10.5", "description" : "snappy-java: A fast compression/decompression library", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "a52ffcdbbe525b486237a7098e5c5ff7" }, { "alg" : "SHA-1", "content" : "ac605269f3598506196e469f1fb0d7ed5c55059e" }, { "alg" : "SHA-256", "content" : "0f3f1857ed33116583f480b4df5c0218836c47bfbc9c6221c0d73f356decf37b" }, { "alg" : "SHA-512", "content" : "36c288aa84017b52362a49a20d1702151a16b9f58518b6877f11122941a549d94fab8d515f7f1ad6384fb94be569328abf862edaf970c10a16832498dfda853b" }, { "alg" : "SHA-384", "content" : "693a542ca2471dec4da5fe582563aff1bf5238e1a8d1a1f79cd8138334f94f1112094fbd270b1637d983c9290084a6e1" }, { "alg" : "SHA3-384", "content" : "41cbbb20b4bc0bd9a80521904568335fb131602a6931783f5bf6a1c8287b8ccd92c8169b8bb2399d27208fc067ef2321" }, { "alg" : "SHA3-256", "content" : "38dc41c5a0d827c58e1409a63e902d0568a03d67cdb99708ccc63921000ddc55" }, { "alg" : "SHA3-512", "content" : "b07d178cc94f6385d5f09d7730d2dd161c6f7d6815ae779e742421c0c1fb92043c8ec8ce5ee67660760f5287bd959eba1028924257a6ff36fb5439d8f81bd049" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0", "url" : "https://www.apache.org/licenses/LICENSE-2.0" } } ], "purl" : "pkg:maven/org.xerial.snappy/snappy-java@1.1.10.5?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://github.com/xerial/snappy-java" }, { "type" : "vcs", "url" : "https://github.com/xerial/snappy-java" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/org.apache.avro/avro@1.12.1?type=jar", "publisher" : "The Apache Software Foundation", "group" : "org.apache.avro", "name" : "avro", "version" : "1.12.1", "description" : "Avro core components", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "83a5127156dbc59c024d8e76302161e7" }, { "alg" : "SHA-1", "content" : "1c6294ac1d67ce396f51827c87ba2e01de304500" }, { "alg" : "SHA-256", "content" : "72600f057bfbe2efe35fa55433e7756d45667dc938934be38a6e2be368aca237" }, { "alg" : "SHA-512", "content" : "1d3ea16d6f374724728660f02fbbb20a42a6f380404cce092d3ab6c143e4e3b8ae9353040ba409af21b06e4a1a1456098020509bed6c12aa9ab6974d52ea8c5f" }, { "alg" : "SHA-384", "content" : "fbe691d8500a239ba2a4370235f66fd4e53895489181258ecee2a45fa5dc5cfaf191b5973d702f96e17284f96562675c" }, { "alg" : "SHA3-384", "content" : "2a945cd2245ee74ecba3760b2767abe6b105b4557cc3ab97298dcae75044cd2fa077705b48371ee9ba580c9112ff942c" }, { "alg" : "SHA3-256", "content" : "1d2f7bbd2ed2e57097bbe760f4c392ea46de7870547170c43b12ddcfa731140b" }, { "alg" : "SHA3-512", "content" : "c163eca320d4e66751b2e08bc06f1a659059c009e3f98074da2404d4e58994fbaf4ccadb14f3631bf6fdd270c711e4f320a7f83f519f6269afe89b1eb425adc4" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0", "url" : "https://www.apache.org/licenses/LICENSE-2.0" } } ], "purl" : "pkg:maven/org.apache.avro/avro@1.12.1?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://avro.apache.org" }, { "type" : "distribution-intake", "url" : "https://repository.apache.org/service/local/staging/deploy/maven2" }, { "type" : "issue-tracker", "url" : "https://issues.apache.org/jira/browse/AVRO" }, { "type" : "mailing-list", "url" : "https://mail-archives.apache.org/mod_mbox/avro-dev/" }, { "type" : "vcs", "url" : "scm:git:https://github.com/apache/avro/avro-parent/avro" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/org.apache.commons/commons-compress@1.26.1?type=jar", "publisher" : "The Apache Software Foundation", "group" : "org.apache.commons", "name" : "commons-compress", "version" : "1.26.1", "description" : "Apache Commons Compress defines an API for working with compression and archive formats. These include bzip2, gzip, pack200, LZMA, XZ, Snappy, traditional Unix Compress, DEFLATE, DEFLATE64, LZ4, Brotli, Zstandard and ar, cpio, jar, tar, zip, dump, 7z, arj.", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "7af7d22a7280508327d809b183114a92" }, { "alg" : "SHA-1", "content" : "44331c1130c370e726a2e1a3e6fba6d2558ef04a" }, { "alg" : "SHA-256", "content" : "27bb5d40f37c3bb7205b4a0540247df057715e9f6cbbd97d626ab8b50318bb04" }, { "alg" : "SHA-512", "content" : "ef18a2e3abbf249b95bc5dc95d276fd66e495a74f8f1ce02e9e388048c5a0684f07bbf6924fcc1fc3943b95f30d908fee8778f1e4c6293431172e31f5ddc5f02" }, { "alg" : "SHA-384", "content" : "c37e35684971b436dc7a6bc428b306804302f99ef46c5df44b6826e267427e6146580b5cda1a96472b65ef12ef7fa6e9" }, { "alg" : "SHA3-384", "content" : "9a6a43bc19652007a0a61c8007dc5e67c98bade39f0c8b567e10ec82dc95f2288fcac53ec7d31ca793f4c3edf8ef9fbe" }, { "alg" : "SHA3-256", "content" : "c2bddb71dcfe84e98754a1e0f0b16ec60a8e4c5761cd4db210477fcd3a3bf595" }, { "alg" : "SHA3-512", "content" : "2636e83c2274019d7c1742477e5c641d0348afe5179e4a8316f28f41c51ca0f609a8e9a41fdaf0b68f7830d2e0fc74268fcee43d9c7cf49b57d74a426295f4ee" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0", "url" : "https://www.apache.org/licenses/LICENSE-2.0" } } ], "purl" : "pkg:maven/org.apache.commons/commons-compress@1.26.1?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://commons.apache.org/proper/commons-compress/" }, { "type" : "build-system", "url" : "https://github.com/apache/commons-parent/actions" }, { "type" : "distribution-intake", "url" : "https://repository.apache.org/service/local/staging/deploy/maven2" }, { "type" : "issue-tracker", "url" : "https://issues.apache.org/jira/browse/COMPRESS" }, { "type" : "mailing-list", "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/" }, { "type" : "vcs", "url" : "https://gitbox.apache.org/repos/asf?p=commons-compress.git" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/commons-codec/commons-codec@1.16.1?type=jar", "publisher" : "The Apache Software Foundation", "group" : "commons-codec", "name" : "commons-codec", "version" : "1.16.1", "description" : "The Apache Commons Codec component contains encoder and decoders for various formats such as Base16, Base32, Base64, digest, and Hexadecimal. In addition to these widely used encoders and decoders, the codec package also maintains a collection of phonetic encoding utilities.", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "6c5be822d8d3fa61c3b54c4c8978dfdc" }, { "alg" : "SHA-1", "content" : "47bd4d333fba53406f6c6c51884ddbca435c8862" }, { "alg" : "SHA-256", "content" : "ec87bfb55f22cbd1b21e2190eeda28b2b312ed2a431ee49fbdcc01812d04a5e4" }, { "alg" : "SHA-512", "content" : "bd33fd5340757ea0616a8c2a48760cfc9932f93b8e067701f4a122fd59735083468a016d8c0fd65973dd3fa4fc3537855e71a1fae7d14e1777e31ff1c47708ce" }, { "alg" : "SHA-384", "content" : "ee7f4c3e5c01cf77f4d82b09c358087738e6e79507ced9f2c82fdce3b32825bb62b2d66b30ef897e2972d3253478c525" }, { "alg" : "SHA3-384", "content" : "c200875af6359f6a584b108ecae3d83496942e1216dfacbd86e3c22e54b90b9519a9b01a229e71552111b10c8734c327" }, { "alg" : "SHA3-256", "content" : "81cd8a4c12e0b7ac84222e33b159cbd6f658b3e0f48e5fd8075d50cd03b05837" }, { "alg" : "SHA3-512", "content" : "c821b99a5b4a3fbf052f562d60479bc252aafa8057fcbe095e09e96cf01594a23455658f9c666866e1937910ff44a1a891760d04c22d5187cb98be9d0d58952b" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0", "url" : "https://www.apache.org/licenses/LICENSE-2.0" } } ], "purl" : "pkg:maven/commons-codec/commons-codec@1.16.1?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://commons.apache.org/proper/commons-codec/" }, { "type" : "build-system", "url" : "https://github.com/apache/commons-parent/actions" }, { "type" : "distribution-intake", "url" : "https://repository.apache.org/service/local/staging/deploy/maven2" }, { "type" : "issue-tracker", "url" : "https://issues.apache.org/jira/browse/CODEC" }, { "type" : "mailing-list", "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/" }, { "type" : "vcs", "url" : "https://github.com/apache/commons-codec" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/commons-io/commons-io@2.16.0?type=jar", "publisher" : "The Apache Software Foundation", "group" : "commons-io", "name" : "commons-io", "version" : "2.16.0", "description" : "The Apache Commons IO library contains utility classes, stream implementations, file filters, file comparators, endian transformation classes, and much more.", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "4e115587dca5dd3c178e7c8f17a371b3" }, { "alg" : "SHA-1", "content" : "27875a7935f1ddcc13267eb6fae1f719e0409572" }, { "alg" : "SHA-256", "content" : "d1e417901235fae3aa0cb9736baeaf5b74de7349817d1c72390d82e3d83d3a97" }, { "alg" : "SHA-512", "content" : "afba6cc8fdef9d347aaccb3bff327ba8e2c17135989cf01179fdb2e3ca8d0afdce37defb08659eb1e99b8730e2baaaec95c7d3599f7ebf526c97c8edc477b852" }, { "alg" : "SHA-384", "content" : "0413eda39746809f3c7ce44336f6d88d8d72e2781db4b74c98a206f34b94639a39024697fde25f310edda8cf628fd376" }, { "alg" : "SHA3-384", "content" : "386bee9245d0ef901c3010be3603d4cd083c2745737fdf852f3c7024b295aa74d006f0d1a3e7cbc2b09b6023b42d41b5" }, { "alg" : "SHA3-256", "content" : "22054f3faf8d31b9bdb010e1341cf74dfcb40860e50eaf238991c784a9a8b4ae" }, { "alg" : "SHA3-512", "content" : "c7e76ce4a2177ea7898931e180cca6463bf5eab34199c6a9a0146474262f16c30d99a05eb02a86f37870ba83b1b413e78949582add25aa87c5f39462444be6ea" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0", "url" : "https://www.apache.org/licenses/LICENSE-2.0" } } ], "purl" : "pkg:maven/commons-io/commons-io@2.16.0?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://commons.apache.org/proper/commons-io/" }, { "type" : "build-system", "url" : "https://github.com/apache/commons-parent/actions" }, { "type" : "distribution-intake", "url" : "https://repository.apache.org/service/local/staging/deploy/maven2" }, { "type" : "issue-tracker", "url" : "https://issues.apache.org/jira/browse/IO" }, { "type" : "mailing-list", "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/" }, { "type" : "vcs", "url" : "https://gitbox.apache.org/repos/asf?p=commons-io.git" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar", "publisher" : "The Apache Software Foundation", "group" : "org.apache.commons", "name" : "commons-lang3", "version" : "3.18.0", "description" : "Apache Commons Lang, a package of Java utility classes for the classes that are in java.lang's hierarchy, or are considered to be so standard as to justify existence in java.lang. The code is tested using the latest revision of the JDK for supported LTS releases: 8, 11, 17 and 21 currently. See https://github.com/apache/commons-lang/blob/master/.github/workflows/maven.yml Please ensure your build environment is up-to-date and kindly report any build issues.", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "48b9886957920a4cdb602780ca345087" }, { "alg" : "SHA-1", "content" : "fb14946f0e39748a6571de0635acbe44e7885491" }, { "alg" : "SHA-256", "content" : "4eeeae8d20c078abb64b015ec158add383ac581571cddc45c68f0c9ae0230720" }, { "alg" : "SHA-512", "content" : "c2c9d497fc1be411050f4011b2407764b78aa098eb42925af8a197eabdbc25b507f09fb898805e9bed4815f35236a508ee5b096e36f363df4d407232d50fc832" }, { "alg" : "SHA-384", "content" : "4fb3f101106e4ce3666d5c15d276ba86f7683a0ef35f0384edfcd579ea454275edbb7400795d265ec3a38e39997e79b8" }, { "alg" : "SHA3-384", "content" : "aada7e3612cf3f6190a19fa7c3db74df1e13ec56b300be9bb4317d261d5877c84ab59ba9a09168becdbd82cd41961395" }, { "alg" : "SHA3-256", "content" : "306d286d0bd7549c203cc802fd755d354c4f7926fa023f4e83623ba1a6261250" }, { "alg" : "SHA3-512", "content" : "f6f1ecc684e309d7b9fc5c343792508fee935cd2119d962721662c5af88e4864ba6f47a863e083714f315f926c156de1970cd2fb577449bdfdc7bf98a4a451fa" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0", "url" : "https://www.apache.org/licenses/LICENSE-2.0" } } ], "purl" : "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://commons.apache.org/proper/commons-lang/" }, { "type" : "build-system", "url" : "https://github.com/apache/commons-lang/actions" }, { "type" : "distribution-intake", "url" : "https://repository.apache.org/service/local/staging/deploy/maven2" }, { "type" : "issue-tracker", "url" : "https://issues.apache.org/jira/browse/LANG" }, { "type" : "mailing-list", "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/" }, { "type" : "vcs", "url" : "https://gitbox.apache.org/repos/asf/commons-lang.git" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jdk8@2.19.0?type=jar", "publisher" : "FasterXML", "group" : "com.fasterxml.jackson.datatype", "name" : "jackson-datatype-jdk8", "version" : "2.19.0", "description" : "Add-on module for Jackson (https://github.com/FasterXML/jackson) to support JDK 8 data types.", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "94b14d916be05635991dfc380e73d86d" }, { "alg" : "SHA-1", "content" : "69312135ff6d6646203b9681fa48505f369210a6" }, { "alg" : "SHA-256", "content" : "04f1a3f9da8155995dd00098d6847cdb9b7af67f4a3028c94031eff017c8e3e5" }, { "alg" : "SHA-512", "content" : "f3db916bdd923307ba647b25708558b21916c324c0b02b000eb72982b7bc78f2ace61b542070f0bbba7b4451002919c0fc01c77f0f52c5d8b882b69b4eb92bd3" }, { "alg" : "SHA-384", "content" : "acf8859276a9d1f9cd6b25e09fde0c5465a87fe9bb95fa3fa72bff76fe5b826028cb0ed7cf4b7d55f918982e2281117d" }, { "alg" : "SHA3-384", "content" : "9003162b5d3864822a58c767038b4d380343bd66780b6cb18beac8ab3101763616c7f1efb404b144d3b730ff6cc58c91" }, { "alg" : "SHA3-256", "content" : "925970e38ab80cafa2eba749f7c3a68b0e76332beb8eb888dd4653e9bd441cbf" }, { "alg" : "SHA3-512", "content" : "49c022e5e2cfd5f890065987c266ccd8d7d35f450a51ca6857cf92b92c9bae24aeadf128a9ad3a131eebb03cadb122a55a4575599bf7333c0f82c53272dc7a78" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jdk8@2.19.0?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://github.com/FasterXML/jackson-modules-java8/jackson-datatype-jdk8" }, { "type" : "distribution-intake", "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type" : "issue-tracker", "url" : "https://github.com/FasterXML/jackson-modules-java8/issues" }, { "type" : "vcs", "url" : "http://github.com/FasterXML/jackson-modules-java8/jackson-datatype-jdk8" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/io.swagger.core.v3/swagger-annotations@2.2.29?type=jar", "group" : "io.swagger.core.v3", "name" : "swagger-annotations", "version" : "2.2.29", "description" : "swagger-annotations", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "3825eb7b2845c7abba9faeae42845c4e" }, { "alg" : "SHA-1", "content" : "07bbed78c1cf66bdcd674775dfe0dca4a073bba6" }, { "alg" : "SHA-256", "content" : "e224a6e11f16c525d8ad04090cc32b534a9ee10835b9f93457ba6ff00f117f34" }, { "alg" : "SHA-512", "content" : "a82ab3dc5048da1f7c8f7303cffe4827a98349c896d3949935e1f975c4db509669492ae5442ff56bcd3db5c3e05f2806a1920d44b1ea232a93907a9b76f8c77e" }, { "alg" : "SHA-384", "content" : "0d8ac35492816229ea0a75a4b19338b52dd9b06a2eeb675335c89dee62e52818cb8ac10464028d109d7bf5bcfc5d7b47" }, { "alg" : "SHA3-384", "content" : "af4282044be922d06828877db796b86e2d6b20a1cf0d1ec50c5b89d35acee0d857fe6851d47bc454099426f54bcedb75" }, { "alg" : "SHA3-256", "content" : "ebe0641a27c48a8c632846c919218af536d67dc9db588b093f9904b4e94de011" }, { "alg" : "SHA3-512", "content" : "bff9b74ec9b6d63e812914945783eba4b76ee65e4ba1ed401fcf7625c7e008a164f30b27ae7b33b73481fafa5acee063725f80f9d2992c1f41e7ede83e2fbb8d" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0", "url" : "https://www.apache.org/licenses/LICENSE-2.0" } } ], "purl" : "pkg:maven/io.swagger.core.v3/swagger-annotations@2.2.29?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://github.com/swagger-api/swagger-core/modules/swagger-annotations" }, { "type" : "distribution-intake", "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type" : "issue-tracker", "url" : "https://github.com/swagger-api/swagger-core/issues" }, { "type" : "mailing-list", "url" : "https://groups.google.com/forum/#!forum/swagger-swaggersocket" }, { "type" : "vcs", "url" : "https://github.com/swagger-api/swagger-core/modules/swagger-annotations" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/org.apache.httpcomponents.client5/httpclient5@5.5?type=jar", "publisher" : "The Apache Software Foundation", "group" : "org.apache.httpcomponents.client5", "name" : "httpclient5", "version" : "5.5", "description" : "Apache HttpComponents Client", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "26a991677cf91d4145aedf896b0b8a8e" }, { "alg" : "SHA-1", "content" : "4b3d253351cf74eb0ae8eb21ca5a5fb9815ef861" }, { "alg" : "SHA-256", "content" : "496b4b0e8d5f3a8139a5d2638486d304758bac3a9c39d76989f663cfd9354fc9" }, { "alg" : "SHA-512", "content" : "143d42160551a994e0ec4b7e8fbc0fe53ffaab008e2d2003b8239fa2178b82e78572589c53d5daa734cc2ce7dd33d890adb940b0ccf7bc5d0f64cd2ed761e3b8" }, { "alg" : "SHA-384", "content" : "7fb2810b30dcea689c7edab92bba6f8c216e564336c3f9e0152d692b78089877cb5946eae4dfd09cb727db67871f281f" }, { "alg" : "SHA3-384", "content" : "98bc2f69082bd07db1b1554d28429ffbe4263827b7caa5dfc4cc530112dd52b55a599484af28850abc5820bf93354b55" }, { "alg" : "SHA3-256", "content" : "c441fed9f7e6ab68cd08bf18c2451c5a5eee8f5534e6c6ae90d6320004a7e6c0" }, { "alg" : "SHA3-512", "content" : "11420f691b45a38a58e233675d364b3e0775eb199761c80f3de8cd22d6164b7cb6f9489f30355d1ef5b26be2534bd8a7283f9bedf6532a51e3cedd6341ceddac" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/org.apache.httpcomponents.client5/httpclient5@5.5?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://hc.apache.org/httpcomponents-client-5.5.x/5.5/httpclient5/" }, { "type" : "distribution-intake", "url" : "https://repository.apache.org/service/local/staging/deploy/maven2" }, { "type" : "issue-tracker", "url" : "https://issues.apache.org/jira/browse/HTTPCLIENT" }, { "type" : "mailing-list", "url" : "https://lists.apache.org/list.html?httpclient-users@hc.apache.org" }, { "type" : "vcs", "url" : "https://github.com/apache/httpcomponents-client/tree/5.5/httpclient5" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/org.apache.httpcomponents.core5/httpcore5@5.3.4?type=jar", "publisher" : "The Apache Software Foundation", "group" : "org.apache.httpcomponents.core5", "name" : "httpcore5", "version" : "5.3.4", "description" : "Apache HttpComponents HTTP/1.1 core components", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "7b20d8a28f51b648fb3e8e4303885609" }, { "alg" : "SHA-1", "content" : "ea47f0fe6e00ffb07cec3a0cb1bb801b1a9cc353" }, { "alg" : "SHA-256", "content" : "f2b2fd7a0164e8c3120cd8437bc9fea439239e165c17262b3e907daa7e979f80" }, { "alg" : "SHA-512", "content" : "a892b3458b9f7a9ee0e8b22121680994a78f70498ce22b3c26462538856b7f000e5807afa853c4c0fee638bca9148ba5b19a495bd9049da2023f077a11d567ac" }, { "alg" : "SHA-384", "content" : "581af0dff3b2b2916dbef5cbfd92b11d92b5134efcc347433994c8423885001a016eddc55857173e4e07b4f35eb2ed06" }, { "alg" : "SHA3-384", "content" : "ed24c76060d9ad575e2da80176c97a06c7266ed6e3ebc933f791c7a9d6bad3cfc487d36ae4d733ee7e4a1c9468350643" }, { "alg" : "SHA3-256", "content" : "9874cae80a78848318fb1ac9e0fb21b516ccc049a9abc267f6fd160c013d3641" }, { "alg" : "SHA3-512", "content" : "eb10d4e176d450202d5abcec5d0f754182ad94c4322373997836842790aef756de6b625a49c7d70fea3d432c8dfe892677b0965f70cd10d5ff66ba6be59e449c" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/org.apache.httpcomponents.core5/httpcore5@5.3.4?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://hc.apache.org/httpcomponents-core-5.3.x/5.3.4/httpcore5/" }, { "type" : "distribution-intake", "url" : "https://repository.apache.org/service/local/staging/deploy/maven2" }, { "type" : "issue-tracker", "url" : "https://issues.apache.org/jira/browse/HTTPCORE" }, { "type" : "mailing-list", "url" : "https://lists.apache.org/list.html?httpclient-users@hc.apache.org" }, { "type" : "vcs", "url" : "https://github.com/apache/httpcomponents-core/tree/5.3.4/httpcore5" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/org.apache.httpcomponents.core5/httpcore5-h2@5.3.4?type=jar", "publisher" : "The Apache Software Foundation", "group" : "org.apache.httpcomponents.core5", "name" : "httpcore5-h2", "version" : "5.3.4", "description" : "Apache HttpComponents HTTP/2 Core Components", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "45cddb0e4be800806019ef8d9bfa7931" }, { "alg" : "SHA-1", "content" : "3742a9a9ba3a5a0d45be230093b52a1302a561e2" }, { "alg" : "SHA-256", "content" : "1fb4f34e4b612e7c127ad693335583587850b17ce9b1c366f9de1ca49fe2c781" }, { "alg" : "SHA-512", "content" : "ff6a6ffa1f6e4974011778ea8ffb6771c52c8b1ec161f7f411f7d6e0ec2988a36cf3c9636da956222a91a81f2718a215bc176b678cb6ef98ff44bc6cfe4b80e7" }, { "alg" : "SHA-384", "content" : "0e5a679b26abd8b170f7f5afded5a3923908dfd0fc92e90ab4757e561fa92a0e36cf2129313c355245810db9061fb309" }, { "alg" : "SHA3-384", "content" : "a203c70cd9e2d7f378b4745886ac8a25c2bcee599dc9f66f4be295deed81a70d68ba7b69d8a658a3a6fe9f14fda9dada" }, { "alg" : "SHA3-256", "content" : "cd90c09e8b92780fc77a197bea9f7a056ca79e80359d5f356727e1a132ac57fc" }, { "alg" : "SHA3-512", "content" : "e792b5a49e3b5dfd71de0130122cf5b52dac056bbc27aa67863d3b4877e721a0774a0483f41bae89016ddb1f8444e3a4cc2fda25213f38d008788ced76f14c18" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/org.apache.httpcomponents.core5/httpcore5-h2@5.3.4?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://hc.apache.org/httpcomponents-core-5.3.x/5.3.4/httpcore5-h2/" }, { "type" : "distribution-intake", "url" : "https://repository.apache.org/service/local/staging/deploy/maven2" }, { "type" : "issue-tracker", "url" : "https://issues.apache.org/jira/browse/HTTPCORE" }, { "type" : "mailing-list", "url" : "https://lists.apache.org/list.html?httpclient-users@hc.apache.org" }, { "type" : "vcs", "url" : "https://github.com/apache/httpcomponents-core/tree/5.3.4/httpcore5-h2" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/io.confluent/kafka-schema-registry-client-encryption-tink@8.2.0?type=jar", "publisher" : "Confluent, Inc.", "group" : "io.confluent", "name" : "kafka-schema-registry-client-encryption-tink", "version" : "8.2.0", "description" : "Schema Registry provides a RESTful interface for storing and retrieving versioned Avro schemas for use with Kafka.", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "d2670aeb28984da5e99e175961cd2d6b" }, { "alg" : "SHA-1", "content" : "d7b15b8e9dbf9f037ce6c6c528752a27d68f1a28" }, { "alg" : "SHA-256", "content" : "88275d27e211096f806183b9e95c13f7bb967a0c74658aa2986fdfd4a571d6e1" }, { "alg" : "SHA-512", "content" : "2aa6380d0c74ec4609c4f021bfd0d6b98da7f5d6f5d8a9d5f6076b13bcc18eb298c58c2a0ec80519ea7dab9a2c204de4b8598c2d92a7041cfe0f59e9a69c419b" }, { "alg" : "SHA-384", "content" : "1c854aee68333d96f25ac2174dc9fa7e8d726adf0fec22394f19eb555dc0bd8acca84b68001ea5717193c46dd7d1e675" }, { "alg" : "SHA3-384", "content" : "b970c0624cce75baaa82ff7f8d24106238874217ba2f51101411be2acac8f60272cc4e3888e620f155af07affa5adf0a" }, { "alg" : "SHA3-256", "content" : "0915736dda154cee19f197091c2cb5b55c0f23dac5ebdebf2f7ede99635478b5" }, { "alg" : "SHA3-512", "content" : "c3ffd0ea39bb31910111fed61994d677deb57c6aae3c103b81795c31b74229b24efb6e5155a9b5951775b75a0a7255e26f6bdc99713c10c2a9af10be67761877" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0", "url" : "https://www.apache.org/licenses/LICENSE-2.0" } } ], "purl" : "pkg:maven/io.confluent/kafka-schema-registry-client-encryption-tink@8.2.0?type=jar", "externalReferences" : [ { "type" : "website", "url" : "http://confluent.io/kafka-schema-registry-client-encryption-tink" }, { "type" : "distribution-intake", "url" : "s3://staging-confluent-packages-maven-654654529379-us-west-2/v8.2.0-rc260224095616/maven" }, { "type" : "vcs", "url" : "https://github.com/confluentinc/schema-registry/kafka-schema-registry-client-encryption-tink" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/com.google.protobuf/protobuf-java@4.32.1?type=jar", "group" : "com.google.protobuf", "name" : "protobuf-java", "version" : "4.32.1", "description" : "Core Protocol Buffers library. Protocol Buffers are a way of encoding structured data in an efficient yet extensible format.", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "57c0012599d0c1d3176675ca1ccee4a0" }, { "alg" : "SHA-1", "content" : "e757b7f2b21298e341a6fbe126a6919e539da2ef" }, { "alg" : "SHA-256", "content" : "8c99e4d971338bafb0b0b1d1cea9b1bbb3dc9630eb9c25109e4c7c27bca832cb" }, { "alg" : "SHA-512", "content" : "c15c854b0c40af3c5372a8ca526dc4f6412ee9391a1c32ee1a3b44862c48eafdf230ea0dbb30b09cf7fbb263cd9333532fd8c6009bac4a16ed1df1abc6988363" }, { "alg" : "SHA-384", "content" : "b64a725115d1afe2ccd48a32642817462de521d422629d5b24c738d4cd40151727942fcc0de19c7991e30ba185e2a485" }, { "alg" : "SHA3-384", "content" : "152cc2fd35b3efe4a92e942c6a1eb2b14247f3ff1d3748952c425de260694cb88eab7b141e592d261dd9c8b25fa6edba" }, { "alg" : "SHA3-256", "content" : "f936942f69681d77cfe49141d9e87030ccba22d9b419ee3d5d3f1426649b7d4a" }, { "alg" : "SHA3-512", "content" : "bff2adaaa9b9179d5703b0cd0c6ff8cae00b24b6f83bc1c3cbf1d7d79a0aa3e463614280d3c6d4a48f09daadd4aa3b62cae28af0847a5a4d8a4ebafdc5f12414" } ], "licenses" : [ { "license" : { "id" : "BSD-3-Clause", "url" : "https://opensource.org/licenses/BSD-3-Clause" } } ], "purl" : "pkg:maven/com.google.protobuf/protobuf-java@4.32.1?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://developers.google.com/protocol-buffers/protobuf-java/" }, { "type" : "distribution-intake", "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type" : "vcs", "url" : "https://github.com/protocolbuffers/protobuf/protobuf-java" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.19.0?type=jar", "publisher" : "FasterXML", "group" : "com.fasterxml.jackson.core", "name" : "jackson-annotations", "version" : "2.19.0", "description" : "Core annotations used for value types, used by Jackson data binding package.", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "59c24289bcb30ba31ef04c2cc0ff000d" }, { "alg" : "SHA-1", "content" : "fd1e7c56de1e5b658563c8c66d5074cceb4e3a0b" }, { "alg" : "SHA-256", "content" : "ead60e9cac0e42b57092b9e2d087ff43536e9477d4486ba393037a8cc156cda7" }, { "alg" : "SHA-512", "content" : "ca3b4c2e46e60aeee041e03879381819edd2d9309eda545caffeb99fff9506c83c42d6f578920661d2a2eca6a7d9aa7c13f7d850b7b697b1125b6ba37da9de97" }, { "alg" : "SHA-384", "content" : "fc0eea9870c458aca7d8c8e591094915606b62cfe59dd41b9043b4fff9856570dd5f96ec022b0497f5cd9b84d1e71b98" }, { "alg" : "SHA3-384", "content" : "a21c01c8925a0dab61ffa273f639cfa5eda806778ee646ed7a8279a456412a70a0ecd47fbb31faae3e10b17c0410aa8c" }, { "alg" : "SHA3-256", "content" : "36d2935f972151d7a9c192fe304ffcab98169b77bef85342073b5219d2497fb1" }, { "alg" : "SHA3-512", "content" : "91c30ac2087cd1995fec4283fa394d9d56d2a5fdbc74740432dcf65e74cab1857c7f7affaf2e1a799440c6ebd885f16cdeb89f9ef6f8fbfc37de115bd51f036e" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.19.0?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://github.com/FasterXML/jackson" }, { "type" : "distribution-intake", "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type" : "issue-tracker", "url" : "https://github.com/FasterXML/jackson-annotations/issues" }, { "type" : "vcs", "url" : "https://github.com/FasterXML/jackson-annotations" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.19.0?type=jar", "publisher" : "FasterXML", "group" : "com.fasterxml.jackson.core", "name" : "jackson-core", "version" : "2.19.0", "description" : "Core Jackson processing abstractions (aka Streaming API), implementation for JSON", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "d741d9cff5a56cb6f1307abe947fb7c1" }, { "alg" : "SHA-1", "content" : "a90640e59ea42632a8e331ff1d6b706cf306050a" }, { "alg" : "SHA-256", "content" : "da8e859bac94874528116a25f20c68560e4287acbf27628711b8a4f96b028430" }, { "alg" : "SHA-512", "content" : "2528a8239e19956a67907a7f99db62a85c745535f67e393a7b323123c6488c9c8e7a083804aee9a4c0317d5eeba0b0990545f697b0a38bc0a60286c77caee556" }, { "alg" : "SHA-384", "content" : "251fec00db21cb056876b49152105a04a27a494ba46ecdfe10427fb9a4b8cd69387c9a6b0057953d74745db853ae1db9" }, { "alg" : "SHA3-384", "content" : "ca2dc9a3e73af60771559a9f94d936c1cd84f7deff6f2d797f6bda873d6fa87bf48a2e9a44d5909365c94d9cf304d5f5" }, { "alg" : "SHA3-256", "content" : "a75de4256551184e3920c457202526cd8b64cbed36e38a4eda6d37a11854aec2" }, { "alg" : "SHA3-512", "content" : "1737c56a27ee88b1017c8a4e5c583171f1d7f4bbc1cef5d462dd9bef78b82f2efdd564ab17ca59f6f0bd2b845a5357ad281818c73a747eba5091154fc4d57d54" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.19.0?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://github.com/FasterXML/jackson-core" }, { "type" : "distribution-intake", "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type" : "issue-tracker", "url" : "https://github.com/FasterXML/jackson-core/issues" }, { "type" : "vcs", "url" : "https://github.com/FasterXML/jackson-core" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.0?type=jar", "publisher" : "FasterXML", "group" : "com.fasterxml.jackson.core", "name" : "jackson-databind", "version" : "2.19.0", "description" : "General data-binding functionality for Jackson: works on core streaming API", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "0bf98314940eeb0cd056277e4bd377b5" }, { "alg" : "SHA-1", "content" : "b3f7506f6414fb04760561eec11a0880165c2a4a" }, { "alg" : "SHA-256", "content" : "ceda311f476c3b18e1d2b240c94e2dcb9c8d44e70f8afa9facab88bac4ddc03a" }, { "alg" : "SHA-512", "content" : "0e9229bd8641ae2297700b8997ca4a26dae50d8e3dfe89c84301112304484ca6551b5d578e5a7d23945d314cb31e84383a821b974be75484efadd301c89bb738" }, { "alg" : "SHA-384", "content" : "8dd4d4f8983abeadcdbf9700ca462cd04b31f5ee65d5a551a769ab2e1bdcecf9a25476cc84b776ee5a4f3c6a1b958dd8" }, { "alg" : "SHA3-384", "content" : "3ad31f3fdf96f6c1a337057084d8d3f7f06c30d8c067055f3a4d8ccc9742587417d96b1f1e2370b8ee55f61853273963" }, { "alg" : "SHA3-256", "content" : "53a458a0f6910b1cbec8c4e74302b8a8e24a92212f4df812ea9712b065b2bf44" }, { "alg" : "SHA3-512", "content" : "62c83edf90a68c3c9c54995a895a16c24d5d9edfe01ddf34e4612532c528f5e0e046d3589331dcbecc259b08a41b64ef0a24c3f3e09e4eab5ed6725fe44568f9" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.0?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://github.com/FasterXML/jackson" }, { "type" : "distribution-intake", "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type" : "issue-tracker", "url" : "https://github.com/FasterXML/jackson-databind/issues" }, { "type" : "vcs", "url" : "https://github.com/FasterXML/jackson-databind" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/com.google.guava/guava@32.0.1-jre?type=jar", "group" : "com.google.guava", "name" : "guava", "version" : "32.0.1-jre", "description" : "Guava is a suite of core and expanded libraries that include utility classes, Google's collections, I/O classes, and much more.", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "6951895e804b36322214c95917e598d4" }, { "alg" : "SHA-1", "content" : "6e5d51a72d142f2d40a57dfb897188b36a95b489" }, { "alg" : "SHA-256", "content" : "bd7fa227591fb8509677d0d1122cf95158f3b8a9f45653f58281d879f6dc48c5" }, { "alg" : "SHA-512", "content" : "5dbe7a697511cfbe44f3ffb954e32e997677ecc61f03bb7bb374f1b8fa4a931a95cd9d1f5288eb5d42e2aa380e3241b35059786c07edc48e5aa67c30cddad8a5" }, { "alg" : "SHA-384", "content" : "abad4556e073fb38062c636b6599ceed992302c7d98150e3842d32ce92f6aac7d630633c56efa581523d591361fcf898" }, { "alg" : "SHA3-384", "content" : "c7b02d77e04c567e8870674f71a60141e83ca9e5e9180138450ede78ad7f2be8b6636c514096e15ba2921c2889427852" }, { "alg" : "SHA3-256", "content" : "17f18d8631c9bff9234c214522ce89eb1feef27a4dfe990760d4943ad3de710d" }, { "alg" : "SHA3-512", "content" : "7cf7847812b47cc232ef3c27719457dd19610b3e3bb25c1be640821a3a2be67781047f41e34491b5c8ed68010bbb1d53c5f7706633f3a3f44f3f3133bb7635ec" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/com.google.guava/guava@32.0.1-jre?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://github.com/google/guava" }, { "type" : "build-system", "url" : "https://github.com/google/guava/actions" }, { "type" : "distribution-intake", "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type" : "issue-tracker", "url" : "https://github.com/google/guava/issues" }, { "type" : "vcs", "url" : "https://github.com/google/guava/guava" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/com.google.guava/failureaccess@1.0.1?type=jar", "group" : "com.google.guava", "name" : "failureaccess", "version" : "1.0.1", "description" : "Contains com.google.common.util.concurrent.internal.InternalFutureFailureAccess and InternalFutures. Most users will never need to use this artifact. Its classes is conceptually a part of Guava, but they're in this separate artifact so that Android libraries can use them without pulling in all of Guava (just as they can use ListenableFuture by depending on the listenablefuture artifact).", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "091883993ef5bfa91da01dcc8fc52236" }, { "alg" : "SHA-1", "content" : "1dcf1de382a0bf95a3d8b0849546c88bac1292c9" }, { "alg" : "SHA-256", "content" : "a171ee4c734dd2da837e4b16be9df4661afab72a41adaf31eb84dfdaf936ca26" }, { "alg" : "SHA-512", "content" : "f8d59b808d6ba617252305b66d5590937da9b2b843d492d06b8d0b1b1f397e39f360d5817707797b979a5bf20bf21987b35333e7a15c44ed7401fea2d2119cae" }, { "alg" : "SHA-384", "content" : "67659dbd9647ec303d7f15128dc9dba19b98fd8d74758ee3b602451e32c855e236ccaafe08edf4bbfa245f981268440f" }, { "alg" : "SHA3-384", "content" : "1460875f0331c5fa3791772a6a322a7db180261bc2adacf7271df1fbf3b088a587a755a604c039982cb593c5cfc1f101" }, { "alg" : "SHA3-256", "content" : "ea86406e75fcd93eafe3cde1b3135ba485f1bb9b75fed98894a0bf1f0aee04f0" }, { "alg" : "SHA3-512", "content" : "52ac0f487ab5dd27c9f2e54fd1d84c7a620cae9d49be4072aa2b11501787bf4391ddaa13d02eccdf19e8eea46aecbea5f6064b26777c1b836108a280652e04ac" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/com.google.guava/failureaccess@1.0.1?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://github.com/google/guava/failureaccess" }, { "type" : "build-system", "url" : "https://travis-ci.org/google/guava" }, { "type" : "distribution-intake", "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type" : "issue-tracker", "url" : "https://github.com/google/guava/issues" }, { "type" : "vcs", "url" : "https://github.com/google/guava/failureaccess" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar", "group" : "com.google.guava", "name" : "listenablefuture", "version" : "9999.0-empty-to-avoid-conflict-with-guava", "description" : "An empty artifact that Guava depends on to signal that it is providing ListenableFuture -- but is also available in a second \"version\" that contains com.google.common.util.concurrent.ListenableFuture class, without any other Guava classes. The idea is: - If users want only ListenableFuture, they depend on listenablefuture-1.0. - If users want all of Guava, they depend on guava, which, as of Guava 27.0, depends on listenablefuture-9999.0-empty-to-avoid-conflict-with-guava. The 9999.0-... version number is enough for some build systems (notably, Gradle) to select that empty artifact over the \"real\" listenablefuture-1.0 -- avoiding a conflict with the copy of ListenableFuture in guava itself. If users are using an older version of Guava or a build system other than Gradle, they may see class conflicts. If so, they can solve them by manually excluding the listenablefuture artifact or manually forcing their build systems to use 9999.0-....", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "d094c22570d65e132c19cea5d352e381" }, { "alg" : "SHA-1", "content" : "b421526c5f297295adef1c886e5246c39d4ac629" }, { "alg" : "SHA-256", "content" : "b372a037d4230aa57fbeffdef30fd6123f9c0c2db85d0aced00c91b974f33f99" }, { "alg" : "SHA-512", "content" : "c5987a979174cbacae2e78b319f080420cc71bcdbcf7893745731eeb93c23ed13bff8d4599441f373f3a246023d33df03e882de3015ee932a74a774afdd0782f" }, { "alg" : "SHA-384", "content" : "caff9b74079f95832ca7f6029346b34b606051cc8c5a4389fac263511d277ada0c55f28b0d43011055b268c6eb7184d5" }, { "alg" : "SHA3-384", "content" : "e939f08df0545847ea0d3e4b04a114b08499ad069ba8ec9461d1779f87a56e0c37273630a0f4c14e78c348d3ac7eb97f" }, { "alg" : "SHA3-256", "content" : "1f0a8b1177773b3a8ace839df5eed63cbf56b24a38714898a6e4ed065c42559f" }, { "alg" : "SHA3-512", "content" : "6b495ecc2a18b17365cb08d124a0da47f04bcdde81927b5245edf3edd8e498c3c3fb92ce6a4127f660bac851bb1d3e4510e5c20d03be47ce99dc296d360db285" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://github.com/google/guava/listenablefuture" }, { "type" : "build-system", "url" : "https://travis-ci.org/google/guava" }, { "type" : "distribution-intake", "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type" : "issue-tracker", "url" : "https://github.com/google/guava/issues" }, { "type" : "vcs", "url" : "https://github.com/google/guava/listenablefuture" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar", "group" : "com.google.code.findbugs", "name" : "jsr305", "version" : "3.0.2", "description" : "JSR305 Annotations for Findbugs", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "dd83accb899363c32b07d7a1b2e4ce40" }, { "alg" : "SHA-1", "content" : "25ea2e8b0c338a877313bd4672d3fe056ea78f0d" }, { "alg" : "SHA-256", "content" : "766ad2a0783f2687962c8ad74ceecc38a28b9f72a2d085ee438b7813e928d0c7" }, { "alg" : "SHA-512", "content" : "bb09db62919a50fa5b55906013be6ca4fc7acb2e87455fac5eaf9ede2e41ce8bbafc0e5a385a561264ea4cd71bbbd3ef5a45e02d63277a201d06a0ae1636f804" }, { "alg" : "SHA-384", "content" : "ca0b169d3eb2d0922dc031133a021f861a043bb3e405a88728215fd6ff00fa52fdc7347842dcc2031472e3726164bdc4" }, { "alg" : "SHA3-384", "content" : "9903fd7505218999f8262efedb3d935d64bcef84aae781064ab5e1b24755466b269517cada562fa140cd1d417ede57a1" }, { "alg" : "SHA3-256", "content" : "223fda9a89a461afaae73b177a2dc20ed4a90f2f8757f5c65f3241b0510f00ff" }, { "alg" : "SHA3-512", "content" : "3996b5af57a5d5c6a0cd62b11773360fb051dd86a2ba968476806a2a5d32049b82d69a24a3c694e8fe4d735be6a28e41000cc500cc2a9fb577e058045855d2d6" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar", "externalReferences" : [ { "type" : "website", "url" : "http://findbugs.sourceforge.net/" }, { "type" : "distribution-intake", "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type" : "vcs", "url" : "https://code.google.com/p/jsr-305/" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/org.checkerframework/checker-qual@3.33.0?type=jar", "group" : "org.checkerframework", "name" : "checker-qual", "version" : "3.33.0", "description" : "checker-qual contains annotations (type qualifiers) that a programmer writes to specify Java code for type-checking by the Checker Framework.", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "fc9418b779d9d57dcd52197006cbdb9b" }, { "alg" : "SHA-1", "content" : "de2b60b62da487644fc11f734e73c8b0b431238f" }, { "alg" : "SHA-256", "content" : "e316255bbfcd9fe50d165314b85abb2b33cb2a66a93c491db648e498a82c2de1" }, { "alg" : "SHA-512", "content" : "049c446677b7b386f3fb501bf65e032bdf2b1b29a3f545848035fff2b683cd275380cf302e30eea641af7f0801f779bcda3d82a71d928e4176f564f796640a64" }, { "alg" : "SHA-384", "content" : "ddf7a0f70421d1ed75e93c0a30434a4862c3905e433223e19861323cf0994e843392b746003040f10a7db6fc960b8aa6" }, { "alg" : "SHA3-384", "content" : "edf079834fdd23317851318504b2fcc10b055cdb5cc4ada9c773d1b6c815ed6dd193c433d2b83103f070fd521021ff33" }, { "alg" : "SHA3-256", "content" : "56244f45b03fc2a472b35489324e392e6001fac088d19f33629a87adb74a0575" }, { "alg" : "SHA3-512", "content" : "e0516c11fe613f258bf9ad39358a8d9fb7c8df57ff9aaca5d6d16055c196fac4ed3b4185f2501a3bdf7aeb1fe142693b1d788bdaa73366be1af15762bb3591a4" } ], "licenses" : [ { "license" : { "id" : "MIT" } } ], "purl" : "pkg:maven/org.checkerframework/checker-qual@3.33.0?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://checkerframework.org/" }, { "type" : "vcs", "url" : "https://github.com/typetools/checker-framework.git" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.18.0?type=jar", "publisher" : "Google LLC", "group" : "com.google.errorprone", "name" : "error_prone_annotations", "version" : "2.18.0", "description" : "Error Prone is a static analysis tool for Java that catches common programming mistakes at compile-time.", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "64145d0e7fee5a69ed7b84cf402de998" }, { "alg" : "SHA-1", "content" : "89b684257096f548fa39a7df9fdaa409d4d4df91" }, { "alg" : "SHA-256", "content" : "9e6814cb71816988a4fd1b07a993a8f21bb7058d522c162b1de849e19bea54ae" }, { "alg" : "SHA-512", "content" : "3cea86be94bb8ae40d21ad4bf7d7f6b2233e89593b7b741ad84c78840cd3837bb5136f52e62fe9ae0953d7b190c46ad3edc102dfa97b4c7ea472a80206bf5db7" }, { "alg" : "SHA-384", "content" : "7622eb33f83f03ab32b710b36c2fe836e24c5318f65fb8c0631a99507ca3ae65c2df8e33b63a5ce853b9cab6d9cb32e5" }, { "alg" : "SHA3-384", "content" : "1ea52a5ce2a9ee1a960dc2a1bbe4b009d4d6a4448498e4cd76401605fa877662911e8c93b2b8bfda57bedc56c83f10a0" }, { "alg" : "SHA3-256", "content" : "ed53f4295da75753267f241315352c4a39e60796f04e1c0c12d29c3a38be48ed" }, { "alg" : "SHA3-512", "content" : "8266b313bd4e1170daf60642e838841370d99bc24b2a1f91825ca22037a6a30ff15cc76069f8e8770f1dc12772c277ee1320de67e815041697d93d6d7ba884fb" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.18.0?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://errorprone.info/error_prone_annotations" }, { "type" : "vcs", "url" : "https://github.com/google/error-prone/error_prone_annotations" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/com.google.j2objc/j2objc-annotations@2.8?type=jar", "group" : "com.google.j2objc", "name" : "j2objc-annotations", "version" : "2.8", "description" : "A set of annotations that provide additional information to the J2ObjC translator to modify the result of translation.", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "c50af69b704dc91050efb98e0dff66d1" }, { "alg" : "SHA-1", "content" : "c85270e307e7b822f1086b93689124b89768e273" }, { "alg" : "SHA-256", "content" : "f02a95fa1a5e95edb3ed859fd0fb7df709d121a35290eff8b74dce2ab7f4d6ed" }, { "alg" : "SHA-512", "content" : "f8263868a792b41707c9e7fe6fa5650a14cd93fbeafad20efe3772a3058fc933eb59782ec59e6eb9b9c569aa96da80134ae9fdf7547b69c44a97087efddceeff" }, { "alg" : "SHA-384", "content" : "e6087ec31fec8289158496ad2ed6ce8472d5d513808a312e0782cedac3b86c37a62a63c0b5ea3839491d109fe9e148a1" }, { "alg" : "SHA3-384", "content" : "10add34bfeb8612283eef89ac96747a3c9b755acd80ad526e1addaeb7efd6323c52b9bfa1a3d34adb40e1ccb963ee65d" }, { "alg" : "SHA3-256", "content" : "b3336f8abd6b1f73b9f06d306974557000a000073bfbae6b54fda26d17dbb072" }, { "alg" : "SHA3-512", "content" : "d376c184a6df071c4e93b913d175b5c2e63deac37105dc20342c19bdda62e4e9598ca1e8bfb4f4fd5cdee6dd5ac3b8af49e2c5193e324d59a59ce1f7adeab627" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/com.google.j2objc/j2objc-annotations@2.8?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://github.com/google/j2objc/" }, { "type" : "distribution-intake", "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type" : "vcs", "url" : "http://svn.sonatype.org/spice/trunk/oss/oss-parent-9/j2objc-annotations" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/com.google.crypto.tink/tink@1.20.0?type=jar", "group" : "com.google.crypto.tink", "name" : "tink", "version" : "1.20.0", "description" : "Tink is a small cryptographic library that provides a safe, simple, agile and fast way to accomplish some common cryptographic tasks.", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "6a457d00f8372aacfcb1d3766686d3ab" }, { "alg" : "SHA-1", "content" : "f08a7fc141591e12efa9538037cc793df53317e0" }, { "alg" : "SHA-256", "content" : "a8147cea556a34291be1fbc96975dd3006228b653bdfffb8a82c959419ab151f" }, { "alg" : "SHA-512", "content" : "005c70ba17fdde2a996facb1e930c822dd011be99834daae78beb010dc4bd82d70e81144211736f22d677f33f6623b263419d8cd2e3d9787448a1a849ec9bb44" }, { "alg" : "SHA-384", "content" : "1c78917d00c4644e2399729146d2e67ded6753101f16993e3c02a6995965af86679ec02b69432c6f503363604bc0462b" }, { "alg" : "SHA3-384", "content" : "aac771575c1ac5d45baaf889b44904696e2f4806e6412e51a8238965f5463f1024cb6fe5c996e4b07708a9ce1bf22954" }, { "alg" : "SHA3-256", "content" : "3a6519a6e7ee33be54417e7210b6cdfcd104ddab827737937c785bbb8dc4a135" }, { "alg" : "SHA3-512", "content" : "cf61dfc6a1fceaf23abb648bb42009aff2ee9ea39aa3b3f1f60d53f219cc433dba84a9af32f6004cdf704a90e3888dfed62f2bb8721535cd62bd56c6c0a0d82f" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/com.google.crypto.tink/tink@1.20.0?type=jar", "externalReferences" : [ { "type" : "website", "url" : "http://github.com/tink-crypto/tink-java" }, { "type" : "distribution-intake", "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type" : "issue-tracker", "url" : "https://github.com/tink-crypto/tink-java/issues" }, { "type" : "mailing-list", "url" : "https://groups.google.com/group/tink-users" }, { "type" : "vcs", "url" : "https://github.com/tink-crypto/tink-java.git" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/com.google.code.gson/gson@2.9.0?type=jar", "group" : "com.google.code.gson", "name" : "gson", "version" : "2.9.0", "description" : "Gson JSON library", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "53fa3e6753e90d931d62cb89580fde2f" }, { "alg" : "SHA-1", "content" : "8a1167e089096758b49f9b34066ef98b2f4b37aa" }, { "alg" : "SHA-256", "content" : "c96d60551331a196dac54b745aa642cd078ef89b6f267146b705f2c2cbef052d" }, { "alg" : "SHA-512", "content" : "13ff22a60ee6a72ba0c4e8fe3702b8f3f6be6b67ed4279079a9843f57ad0ca125d4ecc1564ac4e736eab10fb6254d2c011b2c08c514d708be7f8091332ed2c2c" }, { "alg" : "SHA-384", "content" : "fde5b61066a8cdd711874ed42f20cb914e4193f1477456c431fb0ca32d86324414e92b0b2c5696f56d0b9d69521d8dee" }, { "alg" : "SHA3-384", "content" : "314156bb766c2f792317763322a819ef968e5ecc7f1a236ab0bb383426d1bf396e18099edb16f85e572b42c85a6c89ba" }, { "alg" : "SHA3-256", "content" : "5e550f5f719c5f5c4ad04fbe6cd0d7868d6bf0e4184f386e4896e72c4839de3e" }, { "alg" : "SHA3-512", "content" : "a3db5a0129c42598b5ded96cdf75d69c75d4a6b317746c9b7fbf238b2ca78cfb48fb0023ae1a4178bc8da3727ceb0bad6930f8f24624e0be6dbbde00adbb0624" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0", "url" : "https://www.apache.org/licenses/LICENSE-2.0" } } ], "purl" : "pkg:maven/com.google.code.gson/gson@2.9.0?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://github.com/google/gson/gson" }, { "type" : "distribution-intake", "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type" : "issue-tracker", "url" : "https://github.com/google/gson/issues" }, { "type" : "vcs", "url" : "https://github.com/google/gson/gson/" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/junit/junit@4.13.2?type=jar", "publisher" : "JUnit", "group" : "junit", "name" : "junit", "version" : "4.13.2", "description" : "JUnit is a unit testing framework for Java, created by Erich Gamma and Kent Beck.", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "d98a9a02a99a9acd22d7653cbcc1f31f" }, { "alg" : "SHA-1", "content" : "8ac9e16d933b6fb43bc7f576336b8f4d7eb5ba12" }, { "alg" : "SHA-256", "content" : "8e495b634469d64fb8acfa3495a065cbacc8a0fff55ce1e31007be4c16dc57d3" }, { "alg" : "SHA-512", "content" : "a31b9950f929a7e5a600d89787ef40e42a8a8e2392e210d0c0f45b3572937670a18a524f1815508cd1152cd1eaa7275cb7430ba45c053be365c83c231bccd3f0" }, { "alg" : "SHA-384", "content" : "9f85c56a77c699eb87630b9e8224068a34c296bcd9aadb52248dd4665036f5bf1048fe75e5cb590b59e7855ca716acae" }, { "alg" : "SHA3-384", "content" : "590cfd9396424583879ca8ad732870406bab18325ac72fb2bbe188b9611278d6341700badf7cfc32525b8ff42900c905" }, { "alg" : "SHA3-256", "content" : "a06b3fd2fd1d9f4306b58125484e3605a395afe5ffe2c801e43ae462f366a430" }, { "alg" : "SHA3-512", "content" : "a6d25ce3c14f9065f06dfd0e68e1dad5c03bd5de0a302c44ca4733d2cb87ec1bc6f0abd36d65aeee8caf328b6881432c4b682fa4b4b1fa931c3c950de5129fb2" } ], "licenses" : [ { "license" : { "id" : "EPL-1.0", "url" : "http://www.eclipse.org/legal/epl-v10.html" } } ], "purl" : "pkg:maven/junit/junit@4.13.2?type=jar", "externalReferences" : [ { "type" : "website", "url" : "http://junit.org" }, { "type" : "build-system", "url" : "https://github.com/junit-team/junit4/actions" }, { "type" : "distribution", "url" : "https://github.com/junit-team/junit4/wiki/Download-and-Install" }, { "type" : "distribution-intake", "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type" : "issue-tracker", "url" : "https://github.com/junit-team/junit4/issues" }, { "type" : "vcs", "url" : "https://github.com/junit-team/junit4" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/org.hamcrest/hamcrest-core@1.3?type=jar", "group" : "org.hamcrest", "name" : "hamcrest-core", "version" : "1.3", "description" : "This is the core API of hamcrest matcher framework to be used by third-party framework providers. This includes the a foundation set of matcher implementations for common operations.", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "6393363b47ddcbba82321110c3e07519" }, { "alg" : "SHA-1", "content" : "42a25dc3219429f0e5d060061f71acb49bf010a0" }, { "alg" : "SHA-256", "content" : "66fdef91e9739348df7a096aa384a5685f4e875584cce89386a7a47251c4d8e9" }, { "alg" : "SHA-512", "content" : "e237ae735aac4fa5a7253ec693191f42ef7ddce384c11d29fbf605981c0be077d086757409acad53cb5b9e53d86a07cc428d459ff0f5b00d32a8cbbca390be49" }, { "alg" : "SHA-384", "content" : "4b5297d2a12cc32b824153afc83f1ba9f1869ca288330f0a2f759659d09e4c420eb6ba4a1efbfa0657b625edd41293d5" }, { "alg" : "SHA3-384", "content" : "b14d34985c0a78cf0ba19b5a18bffd403e08adcb2afde228ddef6e16121c7046dbebf58c04d3419311c4496c48aa93be" }, { "alg" : "SHA3-256", "content" : "f679af77deedf69b3c3066f7916583848c6fd32a950f9c0b0e2ef1da121717ba" }, { "alg" : "SHA3-512", "content" : "bca821931e438a1977b7b4356b5f8cebf485634f82159d505c48267c34e6a0f4fde9c2917331365f66dc0e52e2ca3a2db5256863584110c27ecebefc28741f63" } ], "licenses" : [ { "license" : { "id" : "BSD-3-Clause" } } ], "purl" : "pkg:maven/org.hamcrest/hamcrest-core@1.3?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://github.com/hamcrest/JavaHamcrest/hamcrest-core" }, { "type" : "vcs", "url" : "https://github.com/hamcrest/JavaHamcrest/hamcrest-core" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/io.confluent/common-utils@8.2.0?type=jar", "publisher" : "Confluent, Inc.", "group" : "io.confluent", "name" : "common-utils", "version" : "8.2.0", "description" : "Common utilities, including metrics and config.", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "0b555867dcbc5ac5e5166bd2cae52ca6" }, { "alg" : "SHA-1", "content" : "a543711b7abd9261e519d2ef2e4815478fbda315" }, { "alg" : "SHA-256", "content" : "c5828ad798d06005becd79bb7e6eb848357a8e1833f2487cc796621853e61564" }, { "alg" : "SHA-512", "content" : "c01c1948ad623e263ea02cdbbe98d69c756b1ac2c086933c2b95367620e8091dbe0477b1e1a9bae1c28783d1f659c89480a464d1ac73c563b33955dd1d47ffb5" }, { "alg" : "SHA-384", "content" : "519e4f96900ac5101790508ca06d296f03822e541a557fb7709ad47852e86125fb2fc952a7b3b5ac1d8273f3167d4ac2" }, { "alg" : "SHA3-384", "content" : "082435f25f95a399b2dd4b3290ac3538222a95ee0c3a4238c4a33a5c333d372347bd1ab5b2194ec1e7f919672ec2b2b3" }, { "alg" : "SHA3-256", "content" : "f5a7268845c60a04d6a07031e29553cbdcee99b511cb33c112d3c4cdb3df9769" }, { "alg" : "SHA3-512", "content" : "56061c784efb77357da0d26cafb83dec59140bb1d2fe96fa1c7881091cf93685d08aea6428e79aef7b08238452089ec05845ea472d2cc42dcf64ab9381551e7f" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0", "url" : "https://www.apache.org/licenses/LICENSE-2.0" } } ], "purl" : "pkg:maven/io.confluent/common-utils@8.2.0?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://confluent.io/common-utils" }, { "type" : "distribution-intake", "url" : "s3://staging-confluent-packages-maven-654654529379-us-west-2/v8.2.0-rc260224095616/maven" }, { "type" : "vcs", "url" : "https://github.com/confluentinc/common/common-utils" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar", "publisher" : "QOS.ch", "group" : "org.slf4j", "name" : "slf4j-api", "version" : "1.7.36", "description" : "The slf4j API", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "872da51f5de7f3923da4de871d57fd85" }, { "alg" : "SHA-1", "content" : "6c62681a2f655b49963a5983b8b0950a6120ae14" }, { "alg" : "SHA-256", "content" : "d3ef575e3e4979678dc01bf1dcce51021493b4d11fb7f1be8ad982877c16a1c0" }, { "alg" : "SHA-512", "content" : "f9b033fc019a44f98b16048da7e2b59edd4a6a527ba60e358f65ab88e0afae03a9340f1b3e8a543d49fa542290f499c5594259affa1ff3e6e7bf3b428d4c610b" }, { "alg" : "SHA-384", "content" : "2b14ad035877087157e379d3277dcdcd79e58d6bdb147c47d29e377d75ce53ad42cafbf22f5fb7827c7e946ff4876b9a" }, { "alg" : "SHA3-384", "content" : "3bc3110dafb8d5be16a39f3b2671a466463cd99eb39610c0e4719a7bf2d928f2ea213c734887c6926a07c4cca7769e4b" }, { "alg" : "SHA3-256", "content" : "ba2608179fcf46e2291a90b9cbb4aa30d718e481f59c350cc21c73b88d826881" }, { "alg" : "SHA3-512", "content" : "14c4edcd19702ef607d78826839d8a6d3a39157df54b89a801d3d3cbbe1307131a77671b041c761122730fb1387888c5ec2e46bdd80e1cb07f8f144676441824" } ], "licenses" : [ { "license" : { "id" : "MIT", "url" : "https://opensource.org/license/mit/" } } ], "purl" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar", "externalReferences" : [ { "type" : "website", "url" : "http://www.slf4j.org" }, { "type" : "distribution-intake", "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type" : "vcs", "url" : "https://github.com/qos-ch/slf4j/slf4j-api" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/io.confluent/assembly-plugin-boilerplate@8.2.0?classifier=resources&type=zip", "group" : "io.confluent", "name" : "assembly-plugin-boilerplate", "version" : "8.2.0", "description" : "Maven Assembly Plugin boilerplate for Dockerized projects", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "2c7975c4bd3d04ddaefaac39fc58c3d9" }, { "alg" : "SHA-1", "content" : "0e469ce8c91227bfe8bfda8ce97002f225f8f3db" }, { "alg" : "SHA-256", "content" : "295f88b644629767417e5847112d28f386013929df672641e402874cf047b99a" }, { "alg" : "SHA-512", "content" : "d44b4c1e96f82d8fe3e28410b5bdf75dc0437601af2378bb94ed86c2bca1c7b18fc752c2c4f63c46a3b43d26b6417cca59b71e4a55e02ad6714c8ef77aca6d8a" }, { "alg" : "SHA-384", "content" : "8647ace32e6be35f285f8c5a7f57a98aa18b92b8858caffc8459155542c93a32978c92c6c57fbfba8b199d55bb12ce3b" }, { "alg" : "SHA3-384", "content" : "758fae8bb4525f6b0327ec2cc74d3f622ee67f5ea8c62b0ff4a3d5a4cc88f11094aecea7a782081b0679f5250b3dbb77" }, { "alg" : "SHA3-256", "content" : "30b993d83d019752a2b91b4f7361f0cd714bba2e334eb69aac7f0d10a9fe5620" }, { "alg" : "SHA3-512", "content" : "a321e6f26fa5b171699750b56b6f033fbf63bfb74f5c0d9173438f7a2ba3a3c80ac6fdae9798b1acb1f26d3787c607668679cc882e02fdbc7bfd07c7587fc747" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0", "url" : "https://www.apache.org/licenses/LICENSE-2.0" } } ], "purl" : "pkg:maven/io.confluent/assembly-plugin-boilerplate@8.2.0?classifier=resources&type=zip", "externalReferences" : [ { "type" : "website", "url" : "https://github.com/confluentinc/common" }, { "type" : "distribution-intake", "url" : "s3://staging-confluent-packages-maven-654654529379-us-west-2/v8.2.0-rc260224095616/maven" } ] } ], "dependencies" : [ { "ref" : "pkg:maven/io.confluent/dek-registry-client@8.2.0?type=jar", "dependsOn" : [ "pkg:maven/io.confluent/kafka-schema-registry-client@8.2.0?type=jar", "pkg:maven/io.confluent/kafka-schema-registry-client-encryption-tink@8.2.0?type=jar", "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.19.0?type=jar", "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.19.0?type=jar", "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.0?type=jar", "pkg:maven/com.google.guava/guava@32.0.1-jre?type=jar", "pkg:maven/com.google.crypto.tink/tink@1.20.0?type=jar", "pkg:maven/junit/junit@4.13.2?type=jar", "pkg:maven/io.confluent/common-utils@8.2.0?type=jar", "pkg:maven/io.confluent/assembly-plugin-boilerplate@8.2.0?classifier=resources&type=zip" ] }, { "ref" : "pkg:maven/io.confluent/kafka-schema-registry-client@8.2.0?type=jar", "dependsOn" : [ "pkg:maven/org.yaml/snakeyaml@2.0?type=jar", "pkg:maven/org.apache.kafka/kafka-clients@8.2.0-ccs?type=jar", "pkg:maven/org.apache.avro/avro@1.12.1?type=jar", "pkg:maven/org.apache.commons/commons-compress@1.26.1?type=jar", "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.0?type=jar", "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jdk8@2.19.0?type=jar", "pkg:maven/io.swagger.core.v3/swagger-annotations@2.2.29?type=jar", "pkg:maven/com.google.guava/guava@32.0.1-jre?type=jar", "pkg:maven/org.apache.httpcomponents.client5/httpclient5@5.5?type=jar", "pkg:maven/io.confluent/common-utils@8.2.0?type=jar" ] }, { "ref" : "pkg:maven/org.yaml/snakeyaml@2.0?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/org.apache.kafka/kafka-clients@8.2.0-ccs?type=jar", "dependsOn" : [ "pkg:maven/com.github.luben/zstd-jni@1.5.6-10?type=jar", "pkg:maven/at.yawk.lz4/lz4-java@1.10.1?type=jar", "pkg:maven/org.xerial.snappy/snappy-java@1.1.10.5?type=jar", "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar" ] }, { "ref" : "pkg:maven/com.github.luben/zstd-jni@1.5.6-10?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/at.yawk.lz4/lz4-java@1.10.1?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/org.xerial.snappy/snappy-java@1.1.10.5?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/org.apache.avro/avro@1.12.1?type=jar", "dependsOn" : [ "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.19.0?type=jar", "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.0?type=jar", "pkg:maven/org.apache.commons/commons-compress@1.26.1?type=jar", "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar" ] }, { "ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.19.0?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.0?type=jar", "dependsOn" : [ "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.19.0?type=jar", "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.19.0?type=jar" ] }, { "ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.19.0?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/org.apache.commons/commons-compress@1.26.1?type=jar", "dependsOn" : [ "pkg:maven/commons-codec/commons-codec@1.16.1?type=jar", "pkg:maven/commons-io/commons-io@2.16.0?type=jar", "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar" ] }, { "ref" : "pkg:maven/commons-codec/commons-codec@1.16.1?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/commons-io/commons-io@2.16.0?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jdk8@2.19.0?type=jar", "dependsOn" : [ "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.19.0?type=jar", "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.0?type=jar" ] }, { "ref" : "pkg:maven/io.swagger.core.v3/swagger-annotations@2.2.29?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/com.google.guava/guava@32.0.1-jre?type=jar", "dependsOn" : [ "pkg:maven/com.google.guava/failureaccess@1.0.1?type=jar", "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar", "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar", "pkg:maven/org.checkerframework/checker-qual@3.33.0?type=jar", "pkg:maven/com.google.errorprone/error_prone_annotations@2.18.0?type=jar", "pkg:maven/com.google.j2objc/j2objc-annotations@2.8?type=jar" ] }, { "ref" : "pkg:maven/com.google.guava/failureaccess@1.0.1?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/org.checkerframework/checker-qual@3.33.0?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.18.0?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/com.google.j2objc/j2objc-annotations@2.8?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/org.apache.httpcomponents.client5/httpclient5@5.5?type=jar", "dependsOn" : [ "pkg:maven/org.apache.httpcomponents.core5/httpcore5@5.3.4?type=jar", "pkg:maven/org.apache.httpcomponents.core5/httpcore5-h2@5.3.4?type=jar", "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar" ] }, { "ref" : "pkg:maven/org.apache.httpcomponents.core5/httpcore5@5.3.4?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/org.apache.httpcomponents.core5/httpcore5-h2@5.3.4?type=jar", "dependsOn" : [ "pkg:maven/org.apache.httpcomponents.core5/httpcore5@5.3.4?type=jar" ] }, { "ref" : "pkg:maven/io.confluent/common-utils@8.2.0?type=jar", "dependsOn" : [ "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar" ] }, { "ref" : "pkg:maven/io.confluent/kafka-schema-registry-client-encryption-tink@8.2.0?type=jar", "dependsOn" : [ "pkg:maven/com.google.crypto.tink/tink@1.20.0?type=jar", "pkg:maven/com.google.guava/guava@32.0.1-jre?type=jar", "pkg:maven/com.google.protobuf/protobuf-java@4.32.1?type=jar", "pkg:maven/io.confluent/common-utils@8.2.0?type=jar" ] }, { "ref" : "pkg:maven/com.google.crypto.tink/tink@1.20.0?type=jar", "dependsOn" : [ "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar", "pkg:maven/com.google.code.gson/gson@2.9.0?type=jar", "pkg:maven/com.google.errorprone/error_prone_annotations@2.18.0?type=jar", "pkg:maven/com.google.protobuf/protobuf-java@4.32.1?type=jar" ] }, { "ref" : "pkg:maven/com.google.code.gson/gson@2.9.0?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/com.google.protobuf/protobuf-java@4.32.1?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/junit/junit@4.13.2?type=jar", "dependsOn" : [ "pkg:maven/org.hamcrest/hamcrest-core@1.3?type=jar" ] }, { "ref" : "pkg:maven/org.hamcrest/hamcrest-core@1.3?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/io.confluent/assembly-plugin-boilerplate@8.2.0?classifier=resources&type=zip", "dependsOn" : [ ] } ] }