2025-12-09T11:38:06Z OWASP Foundation CycloneDX Maven plugin 2.7.7 436dfb24c63a322708e4a5143d8543af 3ef2e8728dc9eff2f129c34057e46e9d2b10629a c185b79bf0f9264f43bc8c222c44db67bea275bb727e3327cf9aea6bf45292c9 41488733e31e6c5315327dcc86187c2b9a6b96cd08f7e2157ce130688afde29c313fc6a73edb8a76333a930c78874aa2eac874448920030c0f7af0ac05e65ced f9462f86240fd9fc0942f34981e6d2371f252aa1a4e5e8c3c14e7f0f1a4e4de69ef972e51cf09a749afb6d97c13e67ed c755af6239348bc7dd1e1e6b5f14f7cf7e1560d689b252d9610cd865fa4b419d0b8e26260731dfc5da2176b6e706b414 309aac91005470c9c834354ab918759e2ae7ec52fc1676002621a5bbdf3b7827 c634570dcf8302e61005e5fa91a9a0d9b81542f731967b3c9f6d3ef89e3b945bd36d7ab69e2ebad8124b9c05da504361c8b36a8ce528d844409eeb7df4eea6ce The Apache Software Foundation io.confluent.flink fink-migration-test-utils 1.18.1-cp5 The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users. Apache-2.0 pkg:maven/io.confluent.flink/fink-migration-test-utils@1.18.1-cp5?type=jar https://flink.apache.org/flink-test-utils-parent/fink-migration-test-utilss3://cp-flink-staging-654654529379-us-west-2/maven-staging/617197503e0c7fe43a8ada2765f7f2eaacaa4b8ehttps://mail-archives.apache.org/mod_mbox/www-announce/https://github.com/apache/flink/flink-test-utils-parent/fink-migration-test-utils makeBom compile,provided,runtime,system The Apache Software Foundation io.confluent.flink flink-annotations 1.18.1-cp5 The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users. required 0a97f5d0595f95cced3ee1aa3ff8fd0c 55ab52267cb9e0f8ec2ca55de83ae2d4e4751806 729e7c331300e5fd2929b80aa2968e7af38686c2f8cea25e3b61595f2fa6b094 28d53267092e8a9a23275b5b0de121777c0916179f6d1a8a972a0b7935df4d19d4c1f9946d8d07c18616a66dcc35dd2f4ebfaf732e857208307c764524ccc868 f2bc362b8c2ec44022941d4e6f6c7e09a0ab258309e9fd121e21785beec3d534669c1c778cb926eb8a3c09a1647e468c 2b51ae3f0b9abd74128b6254deec59216ae8f8b3cba2e48663a98db06faa9118fb5b8b8fb549c8974c59e3a42eb22b85 461ef1961d258a2e35d4dd60f7ec799a219bcad6ff90f286872b77415c37bc5f c1ed64bcd9be8cb7c0d140f7bceb85cc62b1480e59deb110e74d4533d0cf1e6e57528002e88c0a69d9e7a7e6146908a73745edfe764ef0f8a1ebb0ca9d232017 Apache-2.0 pkg:maven/io.confluent.flink/flink-annotations@1.18.1-cp5?type=jar https://flink.apache.org/flink-annotationss3://cp-flink-staging-654654529379-us-west-2/maven-staging/617197503e0c7fe43a8ada2765f7f2eaacaa4b8ehttps://mail-archives.apache.org/mod_mbox/www-announce/https://github.com/apache/flink/flink-annotations org.junit.vintage junit-vintage-engine 5.9.1 Module "junit-vintage-engine" of JUnit 5. optional 067bf6cefc410143924bdcd88762d101 4c97e4ce083cb5fc5ff59f66d62896b30da0853b b97de493877c9ba5e4f03b44bd348a53e5fc9df2df5b1a048923e0204f7d7178 fc9e7ef80d426cab1397372ebeab739dad3c2fbac4c98f71027007c3ac730a664e3e63a8aa1087d26787014aaa5e26af95520d09603104be2982be807e101312 1af2b96c99063e949fc7ad7249538e02149cb072105dd0513c4947ec048b801638f3e5b51adf144a455d630052566537 58fff20fa04007ea535e12d7a39f2c1cdab30c0709365f3087e47ddc364d90578c349276479ff4aee235f2949b00b3e5 5341dd1e9cc0371c671ce4f7c21b2077573ea99a93411a29ee5d9066cc26db20 75cfde203376df05065cb1d405d7b04a7eaa62943217cc32d846a57e7715a7918717ac7f236a00a14792dd8554244fb299e2915bb9a423256dbe036df5e3e656 EPL-2.0 pkg:maven/org.junit.vintage/junit-vintage-engine@5.9.1?type=jar https://junit.org/junit5/https://github.com/junit-team/junit5 org.junit.platform junit-platform-engine 1.9.1 Module "junit-platform-engine" of JUnit 5. e5be12dda4695a67bd5768fc396bbe25 83591e5089d6cea5f324aa3ecca9b19d5a275803 f59c3a67087f2b9bbb17a9c06dd416697989b2c53b38843874ebbbbcb0afc23f 94bd8ab00658b25335d0eb8134de587438a3cb5171fcad648f15d4f1d5a03e87b09187b97acfd7f6a18bc55237b5a3183a1eeca3b605c94cccb0c763aa93d739 b56f50d18587ca719db02be06b3993e7ceac6cd3ebeab015a94702f1f46f6d119cdbeffbf0f4b4dd9bc026afc1ec9753 71737df6eeecb61c398ad19c6a321fba6ec1016d2636fc7d04c706ef7a93dd1961074dbf5ac149fcdd542a9f1e1445f2 355f0aa536d49564cd295e700a6aa892c197794f310b7e06c0ddeb24ef4b82d2 fd67706e46ee16dfe950aae20dc97127af19164c73f40938c18253a1ed553db30af03aab782d3e5c1e8ce88a7c5084507ed21c305eb53e931de9f5ebe3ad8f3e EPL-2.0 pkg:maven/org.junit.platform/junit-platform-engine@1.9.1?type=jar https://junit.org/junit5/https://github.com/junit-team/junit5 org.opentest4j opentest4j 1.2.0 Open Test Alliance for the JVM 45c9a837c21f68e8c93e85b121e2fb90 28c11eb91f9b6d8e200631d46e20a7f407f2a046 58812de60898d976fb81ef3b62da05c6604c18fd4a249f5044282479fc286af2 17f77797a260eb2bd1666a90e25efc79a5413afa9df1c1cb6c4cd1949d61c38b241e3bb20956396b5f54d144720303d72a2ac00bc5bf245a260a3c3099e01c74 ef25f5dd948c9ab7256e896da994871c1645b22a8d2d83f1e9ff7c6562b62acb70fcf0bb976a9580fb955a8e8b9c43dd c8ae5d803f34d54150681490afaa595a607e31c15c82765fb24eb7035f3310a4db71832d4ea1840d5281c4fb15e25a91 874b139216e546b33623c53452aea25f36d6c5ec64446aa27be1e60c6838e5c3 58368f990cb11d2965129b32986edd007f909b1187f8fe6842306aa5179fa74d7593bca2042776f6deb68921069719ee4f2bc54e609f87b974a885d7aa7fc05f Apache-2.0 pkg:maven/org.opentest4j/opentest4j@1.2.0?type=jar https://github.com/ota4j-team/opentest4jhttps://github.com/ota4j-team/opentest4j org.junit.platform junit-platform-commons 1.9.1 Module "junit-platform-commons" of JUnit 5. 5d39e33ed6c2275c75f3ad4d204a9f1f 3145f821b5cd10abcdc5f925baa5fffa6f1b628f a8e82d510bbbce5fe1777b2ecf7bc68401e9ae8327009e029b2db5798403d25e 750576c1887d1e3595e538ade132f58e510ce225e41cb12a8d3e264b8fd2c37bbc3d089d5ee0aa918d97797fc606ac5b337b6c99c631718a3c5f16ebcd2e8715 407ccefa66c444476839f6534a4ded641b8a30c94f019c7677403176a3849ee010d4c1427007faa36f73758423790d12 65461e8d181cf71618bad97a779d74f207a679b2f6c5e0223586a86cbfde181d285fb5395c805b68c203f7ebcf02c349 c358f062ad19c63282ce577d46ca6b71b2f4d7c76846d5a1bcc0ec3e6f4507fc aa0b26d73d761994161a1da6e07369c453d23da5c6d6bc795cae6b3fd0d8a4d285766e65b966fafd39a56ae3ff85912938f5027be8ab7cf3316cc97e4ab15302 EPL-2.0 pkg:maven/org.junit.platform/junit-platform-commons@1.9.1?type=jar https://junit.org/junit5/https://github.com/junit-team/junit5 JUnit junit junit 4.13.2 JUnit is a unit testing framework for Java, created by Erich Gamma and Kent Beck. required d98a9a02a99a9acd22d7653cbcc1f31f 8ac9e16d933b6fb43bc7f576336b8f4d7eb5ba12 8e495b634469d64fb8acfa3495a065cbacc8a0fff55ce1e31007be4c16dc57d3 a31b9950f929a7e5a600d89787ef40e42a8a8e2392e210d0c0f45b3572937670a18a524f1815508cd1152cd1eaa7275cb7430ba45c053be365c83c231bccd3f0 9f85c56a77c699eb87630b9e8224068a34c296bcd9aadb52248dd4665036f5bf1048fe75e5cb590b59e7855ca716acae 590cfd9396424583879ca8ad732870406bab18325ac72fb2bbe188b9611278d6341700badf7cfc32525b8ff42900c905 a06b3fd2fd1d9f4306b58125484e3605a395afe5ffe2c801e43ae462f366a430 a6d25ce3c14f9065f06dfd0e68e1dad5c03bd5de0a302c44ca4733d2cb87ec1bc6f0abd36d65aeee8caf328b6881432c4b682fa4b4b1fa931c3c950de5129fb2 EPL-1.0 http://www.eclipse.org/legal/epl-v10.html pkg:maven/junit/junit@4.13.2?type=jar http://junit.orghttps://github.com/junit-team/junit4/actionshttps://github.com/junit-team/junit4/wiki/Download-and-Installhttps://github.com/junit-team/junit4/issueshttps://github.com/junit-team/junit4 org.hamcrest hamcrest-core 1.3 This is the core API of hamcrest matcher framework to be used by third-party framework providers. This includes the a foundation set of matcher implementations for common operations. 6393363b47ddcbba82321110c3e07519 42a25dc3219429f0e5d060061f71acb49bf010a0 66fdef91e9739348df7a096aa384a5685f4e875584cce89386a7a47251c4d8e9 e237ae735aac4fa5a7253ec693191f42ef7ddce384c11d29fbf605981c0be077d086757409acad53cb5b9e53d86a07cc428d459ff0f5b00d32a8cbbca390be49 4b5297d2a12cc32b824153afc83f1ba9f1869ca288330f0a2f759659d09e4c420eb6ba4a1efbfa0657b625edd41293d5 b14d34985c0a78cf0ba19b5a18bffd403e08adcb2afde228ddef6e16121c7046dbebf58c04d3419311c4496c48aa93be f679af77deedf69b3c3066f7916583848c6fd32a950f9c0b0e2ef1da121717ba bca821931e438a1977b7b4356b5f8cebf485634f82159d505c48267c34e6a0f4fde9c2917331365f66dc0e52e2ca3a2db5256863584110c27ecebefc28741f63 BSD-3-Clause pkg:maven/org.hamcrest/hamcrest-core@1.3?type=jar https://github.com/hamcrest/JavaHamcrest/hamcrest-corehttps://github.com/hamcrest/JavaHamcrest/hamcrest-core org.apiguardian apiguardian-api 1.1.2 @API Guardian 8c7de3f82037fa4a2e8be2a2f13092af a231e0d844d2721b0fa1b238006d15c6ded6842a b509448ac506d607319f182537f0b35d71007582ec741832a1f111e5b5b70b38 d7ccd0e7019f1a997de39d66dc0ad4efe150428fdd7f4c743c93884f1602a3e90135ad34baea96d5b6d925ad6c0c8487c8e78304f0a089a12383d4a62e2c9a61 5ae11cfedcee7da43a506a67946ddc8a7a2622284a924ba78f74541e9a22db6868a15f5d84edb91a541e38afded734ea c146116b3dfd969200b2ce52d96b92dd02d6f5a45a86e7e85edf35600ddbc2f3c6e8a1ad7e2db4dcd2c398c09fad0927 b4b436d7f615fc0b820204e69f83c517d1c1ccc5f6b99e459209ede4482268de 7b95b7ac68a6891b8901b5507acd2c24a0c1e20effa63cd513764f513eab4eb55f8de5178edbe0a400c11f3a18d3f56243569d6d663100f06dd98288504c09c5 Apache-2.0 pkg:maven/org.apiguardian/apiguardian-api@1.1.2?type=jar https://github.com/apiguardian-team/apiguardianhttps://github.com/apiguardian-team/apiguardian The Apache Software Foundation commons-cli commons-cli 1.5.0 Apache Commons CLI provides a simple API for presenting, processing and validating a Command Line Interface. required 6c3b2052160144196118b1f019504388 dc98be5d5390230684a092589d70ea76a147925c bc8bb01fc0fad250385706e20f927ddcff6173f6339b387dc879237752567ac6 b78ac2b418e9e9e7d0bc866664577199d320408a6f03151b3789bac365c986dd526df853599e633d7e50fe136cbf3eb9ce50c9cfa0ad38c3cc8d8ee416f61c40 a7a2daa807c4007c506b5100f0a9b526c0052c4e1f6b699904ef9d2aba8195b6003dc4d47ca133b15e2f3e830bdbe6c4 44ca97514a2e34b5bf3de9b5d45c8e871f6eee517db7f3c4b4476eb3e8dfe9a9d8760f3181114708288c373727b42475 a0a47001d3a293f129ffc21f17f575a9d23ce5b88b440e651e4cd01edd0cc421 483dae23d6827a105d17847c8c813527f19042b65c4d09635dfc4bfd25990fe3ba2a997540460fd5b1d72ca3add9a38ca8b32004680764db972a9bb62f7f68d8 Apache-2.0 pkg:maven/commons-cli/commons-cli@1.5.0?type=jar https://commons.apache.org/proper/commons-cli/https://builds.apache.org/https://repository.apache.org/service/local/staging/deploy/maven2https://issues.apache.org/jira/browse/CLIhttps://mail-archives.apache.org/mod_mbox/commons-user/https://gitbox.apache.org/repos/asf?p=commons-cli.git The Apache Software Foundation org.apache.flink flink-shaded-force-shading 17.0 The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users. optional 6890ff555c82f3bb156cf9c73bf09cf9 345c153973a17fb8a98d368352e14893edcbd610 dcc7dff160a40b74fa5db2805b2004153ffd0517968f3c7843a8ee43be82e710 9de23513832248618b78e279c0e3900f5cafb7193254ef6818b4f0b6f3b70045dd9cc4fdd13caeeca8b70a44f38201ce055f07248cdf08930a20e1b7a73997ff 063611872b4b1a1718e0472e32198bded0d74fa656e5c47a7b20038cd5ff70106e3109b60fe882880feea486e1ef83bf 26f9225d2c401391133dabc97340d1048504deaaae3c6b02ba20b83d4efe8c53a6d4f4e63a04e4317f9bce6b1a1ee013 aae3e6da763019cc2fd4919df572a3653b46aedaf60a3adb3d28bc7f94023523 e616e089fb70dc79503b6c235bd8d14c6e7c8e608c87bb4fcd02fe86d6ba27985bac4f144843af9fc7a7c495de7057320ccddea9f571c42bdcaa1c73966f265f Apache-2.0 pkg:maven/org.apache.flink/flink-shaded-force-shading@17.0?type=jar http://flink.apache.org/flink-shaded-force-shadinghttps://repository.apache.org/service/local/staging/deploy/maven2https://mail-archives.apache.org/mod_mbox/www-announce/https://github.com/apache/flink-shaded/flink-shaded-force-shading QOS.ch org.slf4j slf4j-api 1.7.36 The slf4j API required 872da51f5de7f3923da4de871d57fd85 6c62681a2f655b49963a5983b8b0950a6120ae14 d3ef575e3e4979678dc01bf1dcce51021493b4d11fb7f1be8ad982877c16a1c0 f9b033fc019a44f98b16048da7e2b59edd4a6a527ba60e358f65ab88e0afae03a9340f1b3e8a543d49fa542290f499c5594259affa1ff3e6e7bf3b428d4c610b 2b14ad035877087157e379d3277dcdcd79e58d6bdb147c47d29e377d75ce53ad42cafbf22f5fb7827c7e946ff4876b9a 3bc3110dafb8d5be16a39f3b2671a466463cd99eb39610c0e4719a7bf2d928f2ea213c734887c6926a07c4cca7769e4b ba2608179fcf46e2291a90b9cbb4aa30d718e481f59c350cc21c73b88d826881 14c4edcd19702ef607d78826839d8a6d3a39157df54b89a801d3d3cbbe1307131a77671b041c761122730fb1387888c5ec2e46bdd80e1cb07f8f144676441824 MIT https://opensource.org/licenses/MIT pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar http://www.slf4j.orghttps://oss.sonatype.org/service/local/staging/deploy/maven2/https://github.com/qos-ch/slf4j/slf4j-api com.google.code.findbugs jsr305 1.3.9 JSR305 Annotations for Findbugs optional 1d5a772e400b04bb67a7ef4a0e0996d8 40719ea6961c0cb6afaeb6a921eaa1f6afd4cfdf 905721a0eea90a81534abb7ee6ef4ea2e5e645fa1def0a5cd88402df1b46c9ed 06da282cfd8e30d9f8cf17702b8709172b00e22b75a627a1d85f8989615b8a1a401bc25d9aee7b14aed1d9b5df73bf2ea8d66f9c8468d9577c29f0ccfa2cc70a 56e6b41ef62eb5edfed0203802cefae9c2df86388148e420bb0c687abb2b80e14d5c2a82d5b35dce4badaf148f94eada 58c3bf89fa1afa75c2c5078159fd28e27b2273d437f26aaaa7391310b6f0823f3cf476a24f5631c0881f3f7e946d99be c333ea5faedfa78e0614a2620438d5724eab093df4e960918391b6a44c2915b0 67ec31448e156cc72dd036060b460bb2667a13b1cbe500b6b7eed3235b1994b44c39f440ebd07b21ec9595b166ad61121d4f6a132b5b313c558ab21b72599425 Apache-2.0 pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar http://findbugs.sourceforge.net/http://findbugs.googlecode.com/svn/trunk/