<?xml version="1.0" encoding="UTF-8"?>
<bom serialNumber="urn:uuid:6bf9be94-950a-4d44-bac0-7f5bdc4cc6bf" version="1" xmlns="http://cyclonedx.org/schema/bom/1.4">
  <metadata>
    <timestamp>2025-12-09T12:03:14Z</timestamp>
    <tools>
      <tool>
        <vendor>OWASP Foundation</vendor>
        <name>CycloneDX Maven plugin</name>
        <version>2.7.7</version>
        <hashes>
          <hash alg="MD5">436dfb24c63a322708e4a5143d8543af</hash>
          <hash alg="SHA-1">3ef2e8728dc9eff2f129c34057e46e9d2b10629a</hash>
          <hash alg="SHA-256">c185b79bf0f9264f43bc8c222c44db67bea275bb727e3327cf9aea6bf45292c9</hash>
          <hash alg="SHA-512">41488733e31e6c5315327dcc86187c2b9a6b96cd08f7e2157ce130688afde29c313fc6a73edb8a76333a930c78874aa2eac874448920030c0f7af0ac05e65ced</hash>
          <hash alg="SHA-384">f9462f86240fd9fc0942f34981e6d2371f252aa1a4e5e8c3c14e7f0f1a4e4de69ef972e51cf09a749afb6d97c13e67ed</hash>
          <hash alg="SHA3-384">c755af6239348bc7dd1e1e6b5f14f7cf7e1560d689b252d9610cd865fa4b419d0b8e26260731dfc5da2176b6e706b414</hash>
          <hash alg="SHA3-256">309aac91005470c9c834354ab918759e2ae7ec52fc1676002621a5bbdf3b7827</hash>
          <hash alg="SHA3-512">c634570dcf8302e61005e5fa91a9a0d9b81542f731967b3c9f6d3ef89e3b945bd36d7ab69e2ebad8124b9c05da504361c8b36a8ce528d844409eeb7df4eea6ce</hash>
        </hashes>
      </tool>
    </tools>
    <component type="library" bom-ref="pkg:maven/io.confluent.flink/flink-examples-streaming@1.20.3-cp1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>io.confluent.flink</group>
      <name>flink-examples-streaming</name>
      <version>1.20.3-cp1</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.confluent.flink/flink-examples-streaming@1.20.3-cp1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://flink.apache.org/flink-examples/flink-examples-streaming</url></reference><reference type="distribution"><url>s3://cp-flink-staging-654654529379-us-west-2/maven-staging/76e4707483101b3d7bce888caf8e381a47bc45f4</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink/flink-examples/flink-examples-streaming</url></reference></externalReferences>
    </component>
    <properties>
      <property name="maven.goal">makeBom</property>
      <property name="maven.scopes">compile,provided,runtime,system</property>
    </properties>
  </metadata>
  <components>
    <component type="library" bom-ref="pkg:maven/io.confluent.flink/flink-streaming-java@1.20.3-cp1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>io.confluent.flink</group>
      <name>flink-streaming-java</name>
      <version>1.20.3-cp1</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">057136d1c3d1cca334939ff28cc6ac27</hash>
        <hash alg="SHA-1">d5bd4dd330148b19ad85272cef9f1fb5c3fee375</hash>
        <hash alg="SHA-256">1674d405e9e4664d8b64cb24fd189561cfbadf4b8f16d4cbbc1f1f47c48b1a70</hash>
        <hash alg="SHA-512">147a286fd0cf0c25bcd22a188518de55b3fec4bbc03ea28094cd01abab0154c9883f644382ebff3f4fcbf6714c9ce2b4d265eaef70ca80860ec1e0e8e0e30f45</hash>
        <hash alg="SHA-384">f0c477577b3531414d298fdeef742f0d81bbc0e376b0e3c3d31a3869e6b2e6e6ae1aff9e6b7cb344bb7022202ff74d36</hash>
        <hash alg="SHA3-384">fa616fa892906c181396001e68efff1e0afcc564b9a23f0319114edde56f53b7fa11b70b93e10b8ee83a152e214813fc</hash>
        <hash alg="SHA3-256">9e5d24845cbc43d058874931136fc2aa2397d97cb8a967927458fcf1f511ec2f</hash>
        <hash alg="SHA3-512">50dd284ae5f97cce8838dc1ef906b324e52b34fa54a17774ee425ad3d2af3a46b0b59f7bd66f3582ffebc0b5dfe7e501e6fd17ee37f8dd741ee762353d3e34ee</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.confluent.flink/flink-streaming-java@1.20.3-cp1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://flink.apache.org/flink-streaming-java</url></reference><reference type="distribution"><url>s3://cp-flink-staging-654654529379-us-west-2/maven-staging/76e4707483101b3d7bce888caf8e381a47bc45f4</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink/flink-streaming-java</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.confluent.flink/flink-file-sink-common@1.20.3-cp1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>io.confluent.flink</group>
      <name>flink-file-sink-common</name>
      <version>1.20.3-cp1</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">b626b0370260171c984a4cb1988e07c2</hash>
        <hash alg="SHA-1">745782ebc25ef33637bb5bc07d56b34f0f66fedb</hash>
        <hash alg="SHA-256">3c3907540e8b34c22509d02a051bd924788f94c0efcbc686b49f691f9611d9a6</hash>
        <hash alg="SHA-512">7ad21de75e8261b3be32df8191e4cb9db75e4f5f05ca4bbc6b18412b0f3c7e8cb821cff463ad32fb08be5cc932917eb3d59894f4dbb1e3e869d17137174d9170</hash>
        <hash alg="SHA-384">b56006eab628d7fdf22e3d3e9d7af8c6671820fc869d78f12e98860b92fe551544165e837f0c8b4b578535e83e49ed25</hash>
        <hash alg="SHA3-384">d9c13ecc952b15f56ab614db1f3593c6f200442fda528f326f2a7bf32907ed516551e4e7f86a89b3c0c26278d424da01</hash>
        <hash alg="SHA3-256">24467aba0c054adc864fa436a6960c9a8c0fcef452dc9f15df3c615153d6a03d</hash>
        <hash alg="SHA3-512">8349292f0704dd92173241e850c41c041b1291676c82dfae4c25bbae750f3e0ca7c3878678c29d7e5ed003ec933f7ae3c0be0fa724b9d857636bc76d55a8298c</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.confluent.flink/flink-file-sink-common@1.20.3-cp1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://flink.apache.org/flink-connectors/flink-file-sink-common</url></reference><reference type="distribution"><url>s3://cp-flink-staging-654654529379-us-west-2/maven-staging/76e4707483101b3d7bce888caf8e381a47bc45f4</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink/flink-connectors/flink-file-sink-common</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.confluent.flink/flink-runtime@1.20.3-cp1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>io.confluent.flink</group>
      <name>flink-runtime</name>
      <version>1.20.3-cp1</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <hashes>
        <hash alg="MD5">b55b7f1d9f833dfee6316e17288218f5</hash>
        <hash alg="SHA-1">17fcb28d85a83fa93aead5e5a7a2d4a6227d9947</hash>
        <hash alg="SHA-256">398ddeeb549ca50ead78a407544aa07471f2559a708faf665c5d746eec162783</hash>
        <hash alg="SHA-512">60aa39dd4fd51636569f8c2a2f8400892e8b4155c2bea7d55a76570e97d150f354ed947631400b180da85e20bdd2b1157d3d1e7aae141d1c31f2274f5223613e</hash>
        <hash alg="SHA-384">f37554688a8c53c5ae963c44c62b28e8fe4344dfbac1784cd251cc448d5c670766da16cf797572e25823b7b62efe0702</hash>
        <hash alg="SHA3-384">a9f56109010ad9412a99ba97ea1d95d10f1af19392470669320a45fd3b2e2c169a84e785aa761244b6241ef3d9a2951d</hash>
        <hash alg="SHA3-256">1d7fc9b9c0e767194a4e38b12c1f2ba62a3a040b12afcc5347da438646e53863</hash>
        <hash alg="SHA3-512">b250dc6ef6e61817aaa965719be204161d4809019485d5c423ae815a818df9289a65e0e3e4c9a944968b8241c40f3b3ecb85599d618b06b4694be2110eadc805</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.confluent.flink/flink-runtime@1.20.3-cp1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://flink.apache.org/flink-runtime</url></reference><reference type="distribution"><url>s3://cp-flink-staging-654654529379-us-west-2/maven-staging/76e4707483101b3d7bce888caf8e381a47bc45f4</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink/flink-runtime</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.confluent.flink/flink-rpc-core@1.20.3-cp1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>io.confluent.flink</group>
      <name>flink-rpc-core</name>
      <version>1.20.3-cp1</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <hashes>
        <hash alg="MD5">fd462fb081960f791180d748a03a0c9f</hash>
        <hash alg="SHA-1">7af6d21ec3b694449c79c34b27dd19fa6c2e1f20</hash>
        <hash alg="SHA-256">bb1e25da7fdb6ad722f6531d2bd1543c552ee19c56393a49170d53191077e083</hash>
        <hash alg="SHA-512">247ed8a594176c968480d6a1d0aaf4823d7fdb0bde164a6e298e76c69155b8c96d430381a67f366c1f4f91d9bfa13219be7ca0530c82c94198b13a75cb641d1d</hash>
        <hash alg="SHA-384">1715f35a68b50b1f45137fbdd68908a87edc73ebfba887ae18c991addcc31885aca2359bc8e3598319202af68e849395</hash>
        <hash alg="SHA3-384">895f8862d8c3ffb1eb032d29193a15826ffcb4231c133ca4df0981ac04fb5d9165f70f22ce5ef9a5cd8423f541e44206</hash>
        <hash alg="SHA3-256">3573228a5ee324c991b77e9771f67a409258f57a57f71b61ff79aea37ac63706</hash>
        <hash alg="SHA3-512">cfbe48a051f72ce8efbff84a1690c384770937fdd000e7e3a9b9318b9e67f4f6ee1f8abeaa76d0f83adcceef778f5c98c6e159436cf37660a43ac8059286e68e</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.confluent.flink/flink-rpc-core@1.20.3-cp1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://flink.apache.org/flink-rpc/flink-rpc-core</url></reference><reference type="distribution"><url>s3://cp-flink-staging-654654529379-us-west-2/maven-staging/76e4707483101b3d7bce888caf8e381a47bc45f4</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink/flink-rpc/flink-rpc-core</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.confluent.flink/flink-rpc-akka-loader@1.20.3-cp1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>io.confluent.flink</group>
      <name>flink-rpc-akka-loader</name>
      <version>1.20.3-cp1</version>
      <description>This module contains the mechanism for loading flink-rpc-akka through a separate classloader.</description>
      <hashes>
        <hash alg="MD5">2999abc8613c2fe843d28449125b8613</hash>
        <hash alg="SHA-1">7036381f25b59cc4b6e9e1d69151bf78677188a4</hash>
        <hash alg="SHA-256">3d0f8d1c8a67c48ac0c74de7e4e99195d5b73c496a7b41abc229982a6ea0a117</hash>
        <hash alg="SHA-512">a04065b3bf84ea5beb19560e1da3e0f87c4c443f0e03747d32e7aa9805127700c655fab7c4f399bedc4577f77779919ed2b177c7d08d93fc6d7d01b180a49fe6</hash>
        <hash alg="SHA-384">70f737c397e2b8a612c9ad6022278e2bfcdd2062beea717acf4e73b5577060f4b564c9a1550474c395e0724c82f9b2e5</hash>
        <hash alg="SHA3-384">06d3b7c10cd86ffd6922b696f05e6e8a447ed1ab5565964f1fb4e991b289707c7a8ac74d8ae9138408ed58f9e65bc921</hash>
        <hash alg="SHA3-256">5540a9f94e5c8085018afab635ee610926230804106a44f2aca0edb8320c5ce6</hash>
        <hash alg="SHA3-512">dcf8be33e2d4a518952207ba932000ce19f1fc705d6a818500de530a7d5afed92ea65e107715512fba56bbc8b8fe721dfc4c375183abb0964f0ac5f926d71fad</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.confluent.flink/flink-rpc-akka-loader@1.20.3-cp1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://flink.apache.org/flink-rpc/flink-rpc-akka-loader</url></reference><reference type="distribution"><url>s3://cp-flink-staging-654654529379-us-west-2/maven-staging/76e4707483101b3d7bce888caf8e381a47bc45f4</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink/flink-rpc/flink-rpc-akka-loader</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.confluent.flink/flink-queryable-state-client-java@1.20.3-cp1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>io.confluent.flink</group>
      <name>flink-queryable-state-client-java</name>
      <version>1.20.3-cp1</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <hashes>
        <hash alg="MD5">240e133e381d2815c7a39b25ab9a456d</hash>
        <hash alg="SHA-1">93997c03eb28782b7fc1d408a799b83441b94beb</hash>
        <hash alg="SHA-256">a6ad375cc9fe9545d874ffdae8300bc0837b2f8a7cfc905fd24a246591804b38</hash>
        <hash alg="SHA-512">9f9e3472c28f9078348ce360df8cbe610f40a09a0a5975e8ee3d778c115fd879c1b6dfd501d20577badaaa0056584f3271c2427de0f96de0a8fbcc51261f1430</hash>
        <hash alg="SHA-384">a907c580231c80f7b83ef11809da3b8d3dcbad2f8b5982c4495fe5d78b8f4a2aa6d0a759e594286d75ea443229cc4fe9</hash>
        <hash alg="SHA3-384">ddeee84c244c0556bfb415c9d09d8ca2ecd8967181782a52095b4b3f3681b24d10c500b1774ad6b8d95b4d40886fb1c8</hash>
        <hash alg="SHA3-256">c0356b2acb1560d71ce5987599468bebf1f808dc3511b79ab6c230ddfac2064e</hash>
        <hash alg="SHA3-512">bb35f96a2f7dbf93af3d28a8864d9ae46457651c7ff0faa97457c195f3e8967de1d570d664af4dd183549a509b162972b73261ba0f9ea1e8fa5a2bac380111c8</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.confluent.flink/flink-queryable-state-client-java@1.20.3-cp1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://flink.apache.org/flink-queryable-state/flink-queryable-state-client-java</url></reference><reference type="distribution"><url>s3://cp-flink-staging-654654529379-us-west-2/maven-staging/76e4707483101b3d7bce888caf8e381a47bc45f4</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink/flink-queryable-state/flink-queryable-state-client-java</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.confluent.flink/flink-hadoop-fs@1.20.3-cp1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>io.confluent.flink</group>
      <name>flink-hadoop-fs</name>
      <version>1.20.3-cp1</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <hashes>
        <hash alg="MD5">4fc9319731358fb6e57670e2bf5608c7</hash>
        <hash alg="SHA-1">c318b2eeb41213663280156d88fc28d31955fb43</hash>
        <hash alg="SHA-256">d7735cba01ff3ac63a2303a6f8785a0429199a1242e6a39f5e22a9d542bb3a53</hash>
        <hash alg="SHA-512">f4d7ea86e5c50468c78c648017cbd44d5fc6c267508b8e0c6540280a8ac91b073035e0b02c0ce35e85390e1d54009188f17af713e261f77510cb4cbfd6776ca6</hash>
        <hash alg="SHA-384">9fea6c4a46f44774e1dd5b8764875604aa5d21ca0e68288e1cf903c94fee48f4f350a6b91886c5bd32943c3de233ed60</hash>
        <hash alg="SHA3-384">a8142d38841dc6d0ba67f826ca646c1ff75b2d2e2bbe75d791b2e471401c646436acac4cd102df12e2888aa7996a732b</hash>
        <hash alg="SHA3-256">29f84ab6e2525a3b92e22b7a59e6ee02dc3a684e9e78c8b5e258752b5e93d310</hash>
        <hash alg="SHA3-512">a18b43962e4dc80d41c9bcf6d7a75ad7d28a111aec168d9b8e737cbba35e378bfc1534b92e1e3c4f97591ecfa7175a468a209df5ab6e04b1cbdd43c975618e7a</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.confluent.flink/flink-hadoop-fs@1.20.3-cp1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://flink.apache.org/flink-filesystems/flink-hadoop-fs</url></reference><reference type="distribution"><url>s3://cp-flink-staging-654654529379-us-west-2/maven-staging/76e4707483101b3d7bce888caf8e381a47bc45f4</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink/flink-filesystems/flink-hadoop-fs</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-io/commons-io@2.15.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>commons-io</group>
      <name>commons-io</name>
      <version>2.15.1</version>
      <description>The Apache Commons IO library contains utility classes, stream implementations, file filters,
file comparators, endian transformation classes, and much more.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">84351f7991a0e6722f00e96a4ccc376f</hash>
        <hash alg="SHA-1">f11560da189ab563a5c8e351941415430e9304ea</hash>
        <hash alg="SHA-256">a58af12ee1b68cfd2ebb0c27caef164f084381a00ec81a48cc275fd7ea54e154</hash>
        <hash alg="SHA-512">e9adaeed2d715ac0ae44de056ba165a743a92acbeb9871b535f7e58e0b3bc4fba276495b50429be195098a559f3adb7294048479754a0ee4d397da2efda5f81c</hash>
        <hash alg="SHA-384">028c72b59373d3894da22f9eb2c731aabd00f670993973f71a354d722670c12ca659686b83bbf8db32d060ca180f50b2</hash>
        <hash alg="SHA3-384">73cd585ab3736b4be50ec0f10dfe5ebfc3390eea8d56f07f29055f1fddb2dff8084310eaa6fb9f97ea639ed1abd7bc33</hash>
        <hash alg="SHA3-256">daf39bc99f1a3dc0075714a4a342a58d69a4cd62c25bc39a581f657ca72b1044</hash>
        <hash alg="SHA3-512">b003f8971d1536ea0fc4320dbfe17d7259d49e59314739f9fc83134e511facbff048b0ef4f86a9d0893781ca09c95cebc3b181a6c89a2d41e851870b96e76839</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/commons-io/commons-io@2.15.1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://commons.apache.org/proper/commons-io/</url></reference><reference type="build-system"><url>https://github.com/apache/commons-parent/actions</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/IO</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=commons-io.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-shaded-netty@4.1.91.Final-17.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-shaded-netty</name>
      <version>4.1.91.Final-17.0</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <hashes>
        <hash alg="MD5">f3e6fd4f43c7a8647604df2a9b712dab</hash>
        <hash alg="SHA-1">81b6e0b28e0309946cb6d03792199fabfc0d9f09</hash>
        <hash alg="SHA-256">c4d370f1b2bda0b55686fdec840c8a047950b9448f26cd01f1594a3bf0fde75b</hash>
        <hash alg="SHA-512">7f2010cda152f6baecc2a0c9d79f8bb2b7eee8a88f80dd8ed5bf2f723885cf3f9f60e373db77bd591225f3037f33f4a7c08d05e807356899a6af818225b6aa4c</hash>
        <hash alg="SHA-384">d1d99aee334155d4c2dfddcc63dfd1b8ce9d7e4a67bba29be0b6b5a54a717ea95decb0fa300ef9e05b589d273952e22e</hash>
        <hash alg="SHA3-384">3a4bcd8d36c45ef4e8d2fd5d1774fe2ba0913851e6034ec770c3af962db9bd9ef084aa3e2a94b83d4c098059f37800a2</hash>
        <hash alg="SHA3-256">8a9bde99e2876e545b7fbc0400a9980381162b7a51596132cff27d49caff7e55</hash>
        <hash alg="SHA3-512">9109ab1275822d476cb5dcde1d329625be51953ef07af0b586cac9040221a1cd65bcb98f7aa02d7b07372676960697ccb04f751c31150ba9b6b8b0e5e5b6b4a9</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-shaded-netty@4.1.91.Final-17.0?type=jar</purl>
      <externalReferences><reference type="website"><url>http://flink.apache.org/flink-shaded-netty</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink-shaded/flink-shaded-netty</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-shaded-zookeeper-3@3.7.1-17.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-shaded-zookeeper-3</name>
      <version>3.7.1-17.0</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <hashes>
        <hash alg="MD5">a2737bcfc729e776a7d4dd3a13067999</hash>
        <hash alg="SHA-1">6206880a4f471a7f560fa824d1ad8b0596d7e59c</hash>
        <hash alg="SHA-256">e91cb263c67631a27e7a6cee147b75a9a638f3c52fcd053106fc4584feb6e585</hash>
        <hash alg="SHA-512">62cba94bbd87bd678f6cbbee07168dba3f2d1bac21371c4b5c1d035ef2596711bc46b1a273f4b89fe8110b2b855dc425614ca42fc866340a9edb89226f093c6a</hash>
        <hash alg="SHA-384">ee4a3d27059c35a13559599d5b00267b9db9514ea4c04b2b3432ade93d71fe4d8510fe2c3416fac2dada3b218019e454</hash>
        <hash alg="SHA3-384">501df884bf117eb9f420d9ccf92ccbae8d1833d1bb52314ff21bbcc99d9c262eb99b5941ed5da2aabdd1ee953a1320e1</hash>
        <hash alg="SHA3-256">8ba0e15658af1b2451f6e180ab4778930cf0a30ca4fe0b5a9156eac095118f1f</hash>
        <hash alg="SHA3-512">c604d9a6a533e806ed3779c328326ce0935c9e8d2f30922289755d35e91e5fe7152a7f1a29b082442e625a35f1217f6bb38021a94dec1c23818715653cef00ef</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-shaded-zookeeper-3@3.7.1-17.0?type=jar</purl>
      <externalReferences><reference type="website"><url>http://flink.apache.org/flink-shaded-zookeeper-parent/flink-shaded-zookeeper-3</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink-shaded/flink-shaded-zookeeper-parent/flink-shaded-zookeeper-3</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.javassist/javassist@3.24.0-GA?type=jar">
      <publisher>Shigeru Chiba, www.javassist.org</publisher>
      <group>org.javassist</group>
      <name>javassist</name>
      <version>3.24.0-GA</version>
      <description>Javassist (JAVA programming ASSISTant) makes Java bytecode manipulation
    simple.  It is a class library for editing bytecodes in Java.</description>
      <hashes>
        <hash alg="MD5">23fd22d0d089ddfac567a39ce0cb1a91</hash>
        <hash alg="SHA-1">d7466fc2e3af7c023e95c510f06448ad29b225b3</hash>
        <hash alg="SHA-256">aba81efa678b621203fb89aeff81d6f126f7a9dd709401e5609c42976684ae23</hash>
        <hash alg="SHA-512">e57dad74a3edef837ece841d06e4a7c96ffecab8fbcba56fe5f7eccd662f0c0d757880a6073793a8c75ad7a0a1d146346b75cdbfe4fd8a271048a54446e5d1a2</hash>
        <hash alg="SHA-384">4867afdb7522b3dbfa10a51264ac6c15a2a8083d16c8dbef318275d24687768f35130b1c17d8407ca8ecf855abd83dff</hash>
        <hash alg="SHA3-384">a52be891987d4fc7d319e6417e0cd9a28f189d8623b803d72b5429e118da73b9937899231825e793d37b434d7522d283</hash>
        <hash alg="SHA3-256">0cf8db7d2a5f7e1a70827538cb4b0b446fcc239f05ca55d9bf8f2a50f1e08af3</hash>
        <hash alg="SHA3-512">ed9675f9f070203801eb762092ac99636d376b7ef563f99508283006a65a0d2dfce38e1ba7ff2ccfebcede0376ba0724b76b459ca112477234aed8208807f785</hash>
      </hashes>
      <licenses>
        <license>
          <id>MPL-1.1</id>
        </license>
        <license>
          <id>LGPL-2.1-only</id>
        </license>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.javassist/javassist@3.24.0-GA?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.javassist.org/</url></reference><reference type="distribution"><url>https://repository.jboss.org/nexus/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://jira.jboss.org/jira/browse/JASSIST/</url></reference><reference type="vcs"><url>scm:git:git@github.com:jboss-javassist/javassist.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.xerial.snappy/snappy-java@1.1.10.4?type=jar">
      <publisher>xerial.org</publisher>
      <group>org.xerial.snappy</group>
      <name>snappy-java</name>
      <version>1.1.10.4</version>
      <description>snappy-java: A fast compression/decompression library</description>
      <hashes>
        <hash alg="MD5">d1d3b91e925c46a1a0f68b87298bafe8</hash>
        <hash alg="SHA-1">50d0390056017158bdc75c063efd5c2a898d5f0c</hash>
        <hash alg="SHA-256">55b30c94e5c4cc2d4b6976916098d0678a8a6cc7427fa8c875621bd94e731ac8</hash>
        <hash alg="SHA-512">9e52bad4eaa0d0a2e0083cdd3433d84c4bb44c4d3f0314a48c3d6eacbb64d0f4fb2d71197944115618a598eb4a4941c13af2a9ec676b003fb3462ddac58bbe41</hash>
        <hash alg="SHA-384">9539e8eb2dea244f07a7216db38970e3f336b5dc9d132cbe54e201c818dba3e02a1fc467b4529a18eca7127f86d742dd</hash>
        <hash alg="SHA3-384">d5d5ef5d8b050f200ae29855a4b6f5e278215d0a97a69d3653dc1aa716f9847b3c305312a3c994d46721615ba02fc7c8</hash>
        <hash alg="SHA3-256">bbbb3ff43a24094bf2c77dd8c8f94b06d62d158da0d2c3399de3a2993df9986e</hash>
        <hash alg="SHA3-512">de2aa7e7fada466f24ccda07123e2877446733dd48e4b914d25b0d296f677e17a24f182a0e9216e77b261143b774ccaadcfd2854dde1bf36cb2c6db6cdf78b3c</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.xerial.snappy/snappy-java@1.1.10.4?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/xerial/snappy-java</url></reference><reference type="vcs"><url>https://github.com/xerial/snappy-java</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/tools.profiler/async-profiler@2.9?type=jar">
      <group>tools.profiler</group>
      <name>async-profiler</name>
      <version>2.9</version>
      <description>Low overhead sampling profiler for Java</description>
      <hashes>
        <hash alg="MD5">4df6477a255b88e99f2ed4daa3c713cc</hash>
        <hash alg="SHA-1">4ed20e2a4640ee672e7cf23b1512dbdeb9a4b7e6</hash>
        <hash alg="SHA-256">6c4e993c28cf2882964cac82a0f96e81a325840043884526565017b2f62c5ba4</hash>
        <hash alg="SHA-512">60ba593a0cf529397e73e38ef71bc2e5def44f1111a60f40a724ac3472ef7afe92e02a61b0ad18c373122cd92216f49268d335e1150dc3a99ff2431c598aeb5c</hash>
        <hash alg="SHA-384">65107ddcd2a06b69ac4cdb9bd93452045c4e08b843826666a890816abe0486966599cf6a4b07ff87c5d95e86551bb115</hash>
        <hash alg="SHA3-384">4989b467a4791464d50c51782ccc60547bfc8105aebc0764656c67405bbd7d023a9d405a1fd864f86dbd186af8624928</hash>
        <hash alg="SHA3-256">225998977421a87839be6c09f49f9ebd972b063a65f53d374e61fc3d68416ca4</hash>
        <hash alg="SHA3-512">723c0651f61ae6a119624b11bc9d3959ae44de0bcef51f0a341c5d7ebdc6a0e677f3c43399db9a4a657334f46a1092ee55d45f92344b7e31e6e26669ffe41823</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/tools.profiler/async-profiler@2.9?type=jar</purl>
      <externalReferences><reference type="website"><url>https://profiler.tools</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2</url></reference><reference type="vcs"><url>https://github.com/jvm-profiling-tools/async-profiler</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.lz4/lz4-java@1.8.0?type=jar">
      <group>org.lz4</group>
      <name>lz4-java</name>
      <version>1.8.0</version>
      <description>Java ports and bindings of the LZ4 compression algorithm and the xxHash hashing algorithm</description>
      <hashes>
        <hash alg="MD5">936a927700aa8fc3b75d21d7571171f6</hash>
        <hash alg="SHA-1">4b986a99445e49ea5fbf5d149c4b63f6ed6c6780</hash>
        <hash alg="SHA-256">d74a3334fb35195009b338a951f918203d6bbca3d1d359033dc33edd1cadc9ef</hash>
        <hash alg="SHA-512">98d59086a6021ca571d9c1d64b715e43044c730e1ac563f514c40cf44302615d30378b6d5cc69990446522de6260dc8e7b303e3990a3139dc326d058dfb6dbd9</hash>
        <hash alg="SHA-384">8e3f2acdbb41a00c4d9cc5f328e63fb626ac7c6c84e1bf9502e2fcc76a591b2b819b2d27b29925ff986b95c297b30e2c</hash>
        <hash alg="SHA3-384">ec0d6a00760d0a4ecba13a41785d6ae57a64552b1687eaa3e292b3054bb1348e49ab8a938197ff126f9218c6cb96ee1c</hash>
        <hash alg="SHA3-256">7be684c102891105f66d378b61ea1297a392c1618b5aebf7e0b281f55217c206</hash>
        <hash alg="SHA3-512">0b2294570ea2bfbb50ced21dfa4bad956467ca447e9ab2dd602a3478371bcd0e9f13d2dff74d06827a28882409612cdde00bd91267be05bd3510c68268bf3166</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.lz4/lz4-java@1.8.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/lz4/lz4-java</url></reference><reference type="vcs"><url>git://github.com/lz4/lz4-java.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.confluent.flink/flink-java@1.20.3-cp1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>io.confluent.flink</group>
      <name>flink-java</name>
      <version>1.20.3-cp1</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">ce4b78b346ef2260d0b5ef1652ba1525</hash>
        <hash alg="SHA-1">631174ed84b1d3e7ec7c211417c555b001938338</hash>
        <hash alg="SHA-256">8d29616309f4bceae0a57a5d3f63ace16eb2740553b3a24b5a4d06afae3e3059</hash>
        <hash alg="SHA-512">8a693c006d8a6120dabd2e92fcd69f64724754a4ce36368be409ac02d784fb38f88fb34aefcaa9015936614104e9320e493b121742362f82e403984db2fec269</hash>
        <hash alg="SHA-384">b54690c9bec3e8aa8c7a76c76ae9a3217f3322378b8eac42cf1d77c9f497f9bbd624e4ec9365d624bd4812a0302f397b</hash>
        <hash alg="SHA3-384">e8e78755119c46a430a26f1673dd2d7fe100a60a56ec1de812b3ae99ba0ef823c4bfbd08c535ccf9322ab2ea6b55b3f9</hash>
        <hash alg="SHA3-256">a7cde7071f3f5e0bb28e05d0071bdeac8ca55afd30b4a15745ef23a70fe7e3a9</hash>
        <hash alg="SHA3-512">4eaab30ab5ea77b09c548b0b7d0dfbabdd82bbe8221875a17d7506e03d031c3910035d1e932cd55024fec415869ce6d2deab1b298256c5064e5a1743e163530c</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.confluent.flink/flink-java@1.20.3-cp1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://flink.apache.org/flink-java</url></reference><reference type="distribution"><url>s3://cp-flink-staging-654654529379-us-west-2/maven-staging/76e4707483101b3d7bce888caf8e381a47bc45f4</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink/flink-java</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.twitter/chill-java@0.7.6?type=jar">
      <publisher>com.twitter</publisher>
      <group>com.twitter</group>
      <name>chill-java</name>
      <version>0.7.6</version>
      <description>chill-java</description>
      <hashes>
        <hash alg="MD5">886eb8ef6db3880433f4a8e10ef37300</hash>
        <hash alg="SHA-1">a74b8d019d6941d82ff86d1612e382f4a0ae8259</hash>
        <hash alg="SHA-256">f7c41a2257be11e6c9bca97095c8f4b0299626941a3508469f90622eb8f8368e</hash>
        <hash alg="SHA-512">dc9973909b87cfb85ee45c90662612dd2bc137b7510172221eb47020f76b23eb3ea76c6b4fba4cee5d81e910f87aba71359136d33ae0f6424e3ce7123bf77dbf</hash>
        <hash alg="SHA-384">41e7faed7c2c22987868fba7cd6dac0d59d174d82d841ba4e5aa8675cc9265bf9d9df021553a781cfa24c4c9c7a35c5c</hash>
        <hash alg="SHA3-384">32751d6ecd77676ffa11a109dead8c8d19a6d1d78576b19ac5a8323d9446ba51fba87e0d60820dd2bac69fb705aa2061</hash>
        <hash alg="SHA3-256">6bdf2ed042c5b7f4f4d11bb52e448ce740e18563364f66730ca2b6b4eadf0401</hash>
        <hash alg="SHA3-512">0ab14bee65d85803d5080f3b0ad86183daafb61e3ca3a610e199bc04a11421b45436e405dc3c227b5d80a64178ca82739eccb5ad8ee157efa925d484d9daae28</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.twitter/chill-java@0.7.6?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/twitter/chill</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-shaded-guava@31.1-jre-17.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-shaded-guava</name>
      <version>31.1-jre-17.0</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <hashes>
        <hash alg="MD5">b8c5129f4164f8ee2086854bdb289690</hash>
        <hash alg="SHA-1">00fa393c1db1308f4fb920f010f79c4c774e2f39</hash>
        <hash alg="SHA-256">03442ae97c4ca34388568cbce0e67e9911b0137b2b3849dff7a550008d5a4336</hash>
        <hash alg="SHA-512">15bb65f24054768915fbc29a95dfa93307b0babc39a02a204ae65eff44f259357b471fef9967b864b7a78e07d266933ce8e3eda8a866fcc73643cc38bcc5653f</hash>
        <hash alg="SHA-384">c8e6f2630c0824bbd1902a25884f09c076efbbbe0265f5d3fb49370affcff81ee5dd8b7887ba4bf063915446b937117a</hash>
        <hash alg="SHA3-384">a2ffbdbcfb8be61c43891fa19275a765b71e6830b110fa9ab77d46ac35527d2be0943d895767a70591895916963048c6</hash>
        <hash alg="SHA3-256">5a73e8e370e9bb3d634495dade320f0b569f4ed307fc147cb8f3af547bb6b057</hash>
        <hash alg="SHA3-512">abd1618c0568eee546f5b32314085bef40f8de74ffa5e52f0aa7a5bed82713142af8a1bdaf79f18e2210b79f8c3592276c54b2356594d19d8f56185ec9a457d5</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-shaded-guava@31.1-jre-17.0?type=jar</purl>
      <externalReferences><reference type="website"><url>http://flink.apache.org/flink-shaded-guava</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink-shaded/flink-shaded-guava</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-math3@3.6.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.commons</group>
      <name>commons-math3</name>
      <version>3.6.1</version>
      <description>The Apache Commons Math project is a library of lightweight, self-contained mathematics and statistics components addressing the most common practical problems not immediately available in the Java programming language or commons-lang.</description>
      <hashes>
        <hash alg="MD5">5b730d97e4e6368069de1983937c508e</hash>
        <hash alg="SHA-1">e4ba98f1d4b3c80ec46392f25e094a6a2e58fcbf</hash>
        <hash alg="SHA-256">1e56d7b058d28b65abd256b8458e3885b674c1d588fa43cd7d1cbb9c7ef2b308</hash>
        <hash alg="SHA-512">8bc2438b3b4d9a6be4a47a58410b2d4d0e56e05787ab24badab8cbc9075d61857e8d2f0bffedad33f18f8a356541d00f80a8597b5dedb995be8480d693d03226</hash>
        <hash alg="SHA-384">95d1186d9ca06a3ea2e6437ddec3a55698e2493d3e72f6f554746b74fa929892bd71a2ab501a4e7b1ce56b7cd64e7ab4</hash>
        <hash alg="SHA3-384">f85bb3e46a00fc4940a3be1331301302b0eb728e2d1fe2c1842d4761e5a0bc7a420c0c705ae60250ca1c7b03d3694b9e</hash>
        <hash alg="SHA3-256">919c15ae4b1aef2a58aa6ea4b700bc5562e78dbc382f3393169425ca91ad368c</hash>
        <hash alg="SHA3-512">dbe54d586c898cdbd7df6c31c131ca3525db17fcea5c7f5da8cbfe617e2afc667289290c76771ec5c9567a56fb2b177b0a31d67abcc656410c90287da4d88999</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.commons/commons-math3@3.6.1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://commons.apache.org/proper/commons-math/</url></reference><reference type="build-system"><url>https://continuum-ci.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/MATH</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>https://git-wip-us.apache.org/repos/asf?p=commons-math.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.confluent.flink/flink-clients@1.20.3-cp1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>io.confluent.flink</group>
      <name>flink-clients</name>
      <version>1.20.3-cp1</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">c0e92a3cf823ccd56d12d3a037510946</hash>
        <hash alg="SHA-1">70970d99a2ec0ee9035d95fa88893893d2c09f38</hash>
        <hash alg="SHA-256">8f6c3a735811961773be5d3a0bb51a51449e3213552bda2a17a0aa148e25f25d</hash>
        <hash alg="SHA-512">99af687148a84617b91b5fa04025d7e21d36204eb1d7c57a479c31905bd4e07b8a14e6a42841c2297a6da2b5d9201248cb232fa9ad876abbd11751ac99cee579</hash>
        <hash alg="SHA-384">3225b1432247f96c9c1889b6f5a9070edf22cbb309c6c782cf9c512890c39a0adf0d86fd71002bf64becdd0be0da91be</hash>
        <hash alg="SHA3-384">2afae5b200984e2fcff1244193d64337b904389a76a032dd1bc88693f695808c886c8f2c97169f2ec9608d3cfd494d62</hash>
        <hash alg="SHA3-256">fa5063d2884397ee9866f17be2c30eb05fcd1d61e020ffa02d4b5e585de067f8</hash>
        <hash alg="SHA3-512">c3bf77a7f695b757c6044cfcbba40ec0a096f9be2fb5c08d5d9598af31cbc3a5468c1b403da7d47311212e85ae5c93e4f8f5807b17c48c66d1ed645ecd2ab2c1</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.confluent.flink/flink-clients@1.20.3-cp1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://flink.apache.org/flink-clients</url></reference><reference type="distribution"><url>s3://cp-flink-staging-654654529379-us-west-2/maven-staging/76e4707483101b3d7bce888caf8e381a47bc45f4</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink/flink-clients</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.confluent.flink/flink-optimizer@1.20.3-cp1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>io.confluent.flink</group>
      <name>flink-optimizer</name>
      <version>1.20.3-cp1</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <hashes>
        <hash alg="MD5">192b7e0aa3edb8facdcfa0df88ff7fb8</hash>
        <hash alg="SHA-1">d42e35c6e65d4e054c81863a0fffa8814d59edf2</hash>
        <hash alg="SHA-256">549327894734d14a481fc65caa831091a732333b05e637700edbfb601a4ae8fb</hash>
        <hash alg="SHA-512">358ebb9bcaed91a5a03a1e30fe4f7de29b335a1c638182bd3c64346dffd73b2b25c0d76c64be5fbb5de6b1ba0ca69442dc0d32a16a492bd031d8082fa070f5ae</hash>
        <hash alg="SHA-384">4991d78b10f2ae77b16089961163470ecd08340c3fb179b591adf1d179a4477998d10b1598a0346f581fde3eb7cc9111</hash>
        <hash alg="SHA3-384">974a7ef79112cbd1f23daa64aa56bafa90d52cabe7774558e6f187f1c5e44043cb8486ca827906362a40e35320882a06</hash>
        <hash alg="SHA3-256">05406e292286dbd3ee815df5c77cf094f6159008203183853af5e5243af801e5</hash>
        <hash alg="SHA3-512">89b5bb6e6eff5104bb94d3fa2dfb29a9b908cdeaa6fad6ee1999d411fa7254a52bfd538d07fb252dd04040a87598f45f885b670df15fbc15cb3de6ff9d4c9b50</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.confluent.flink/flink-optimizer@1.20.3-cp1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://flink.apache.org/flink-optimizer</url></reference><reference type="distribution"><url>s3://cp-flink-staging-654654529379-us-west-2/maven-staging/76e4707483101b3d7bce888caf8e381a47bc45f4</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink/flink-optimizer</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-cli/commons-cli@1.5.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>commons-cli</group>
      <name>commons-cli</name>
      <version>1.5.0</version>
      <description>Apache Commons CLI provides a simple API for presenting, processing and validating a Command Line Interface.</description>
      <hashes>
        <hash alg="MD5">6c3b2052160144196118b1f019504388</hash>
        <hash alg="SHA-1">dc98be5d5390230684a092589d70ea76a147925c</hash>
        <hash alg="SHA-256">bc8bb01fc0fad250385706e20f927ddcff6173f6339b387dc879237752567ac6</hash>
        <hash alg="SHA-512">b78ac2b418e9e9e7d0bc866664577199d320408a6f03151b3789bac365c986dd526df853599e633d7e50fe136cbf3eb9ce50c9cfa0ad38c3cc8d8ee416f61c40</hash>
        <hash alg="SHA-384">a7a2daa807c4007c506b5100f0a9b526c0052c4e1f6b699904ef9d2aba8195b6003dc4d47ca133b15e2f3e830bdbe6c4</hash>
        <hash alg="SHA3-384">44ca97514a2e34b5bf3de9b5d45c8e871f6eee517db7f3c4b4476eb3e8dfe9a9d8760f3181114708288c373727b42475</hash>
        <hash alg="SHA3-256">a0a47001d3a293f129ffc21f17f575a9d23ce5b88b440e651e4cd01edd0cc421</hash>
        <hash alg="SHA3-512">483dae23d6827a105d17847c8c813527f19042b65c4d09635dfc4bfd25990fe3ba2a997540460fd5b1d72ca3add9a38ca8b32004680764db972a9bb62f7f68d8</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/commons-cli/commons-cli@1.5.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://commons.apache.org/proper/commons-cli/</url></reference><reference type="build-system"><url>https://builds.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/CLI</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=commons-cli.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.confluent.flink/flink-datastream@1.20.3-cp1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>io.confluent.flink</group>
      <name>flink-datastream</name>
      <version>1.20.3-cp1</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <hashes>
        <hash alg="MD5">3b757526e49b89c07d8e792238d9f38c</hash>
        <hash alg="SHA-1">d1565c45833df21b57c059b54a383b6862453aaf</hash>
        <hash alg="SHA-256">5571eabb2f5c10b3ef6c049b98abb8bd793f41c63a7dae6b56efea7e2892d25f</hash>
        <hash alg="SHA-512">114b9e1523ae303413ab4420555bd81e77d84ece362f9f3cefcf2df238e8ea7a580c9774c71853efebab21bfbe469b5a66cd95e2f2f96f62a0e9af0c1b33e611</hash>
        <hash alg="SHA-384">3cfa1fdd0a61ce32a0a143d7238003dfebc9cb22741f0f92ed44819817834ce838ec7ed52690e0fdcbb3b4dadc9f99bc</hash>
        <hash alg="SHA3-384">006d1d41fef42a80aa944a1d094b85655766344aa53d76015ce77cc3ba4cdd0a4c4d938572e524864942a49d264efb7f</hash>
        <hash alg="SHA3-256">33733fa158279b1d516043e47e23ae682b74913075501e8dba86508323b8d311</hash>
        <hash alg="SHA3-512">b25c828a90e6e99b9fb67e38000fcdd117c42fbb571820833f57e5ceb5e51c204b1dcd022f737629961a73f7255661a62db8b1825bfb5c9c0c0b6bd95dc85462</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.confluent.flink/flink-datastream@1.20.3-cp1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://flink.apache.org/flink-datastream</url></reference><reference type="distribution"><url>s3://cp-flink-staging-654654529379-us-west-2/maven-staging/76e4707483101b3d7bce888caf8e381a47bc45f4</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink/flink-datastream</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.confluent.flink/flink-datastream-api@1.20.3-cp1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>io.confluent.flink</group>
      <name>flink-datastream-api</name>
      <version>1.20.3-cp1</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <hashes>
        <hash alg="MD5">3ab990b5cfc46739f25961f3297bfa6e</hash>
        <hash alg="SHA-1">a061e7b9e7e778ffe45ebd0d1e773064e07a6f4c</hash>
        <hash alg="SHA-256">0a17582a76e8b0ac762a6e238ddd75c90345c3d731077c66b381cf883f86facd</hash>
        <hash alg="SHA-512">a74648ce995c653388f23578972bf6b711c0f4e4f59eb5d1cb719eb017782b04e2964a94ddc8167e43c6473e5d118938a4b2f3c0cbf9baf9872c9a26a1dfd311</hash>
        <hash alg="SHA-384">c7c04993783e1edcfe6d94949107480712f000a95118890189b3b7aad60594e2e0aadd68a37cbd5e51155d67170bcbbf</hash>
        <hash alg="SHA3-384">89c305f16ff96c43ad5d9cd5d4bc2118eedfb8134cf674c69d2b0e09527d3427c54b8f918db7c0f9e4e6aa4d41cba5b8</hash>
        <hash alg="SHA3-256">8e52af40fcd123eb4f5129dab30224b7687c2266916f4557e20a262892646c1f</hash>
        <hash alg="SHA3-512">a81e8cfe37668aa54eda20b98c4e54573e722e088a984499723e554badc006abb73c2ae5198195dd86cda88c14dd3b120240a77ba65fcf66b5bea5af998ce737</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.confluent.flink/flink-datastream-api@1.20.3-cp1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://flink.apache.org/flink-datastream-api</url></reference><reference type="distribution"><url>s3://cp-flink-staging-654654529379-us-west-2/maven-staging/76e4707483101b3d7bce888caf8e381a47bc45f4</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink/flink-datastream-api</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.confluent.flink/flink-connector-files@1.20.3-cp1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>io.confluent.flink</group>
      <name>flink-connector-files</name>
      <version>1.20.3-cp1</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">a888be44923c9f03542bdc931d5635f9</hash>
        <hash alg="SHA-1">ebc85fa45cc8d0d959fc21632d02dd420a12dd1f</hash>
        <hash alg="SHA-256">fab73a8b02c483493b48498b06367bbba0fa2d5bbd3721189521de681ce6a5b4</hash>
        <hash alg="SHA-512">64d3bc3e1fc9397e694707342ba082a6039e3fb97cb0f3caad8c75ed9c509af3287a9c6ca9c7b6724932c64dbc52117ec476cf0510280a884699904f7704c3a7</hash>
        <hash alg="SHA-384">7baa0db3fd29252417933437e576078d5ecd33c2d7b1c52f3fba4705185258e2d9aab06be4b68f1d85fc326f9b9de62b</hash>
        <hash alg="SHA3-384">af720bcc0a1cff3c8c751c2122721fdee006e9139123efdccd9e983296f77e103de2f1d5fac8bc8faa78e767beb8ebe7</hash>
        <hash alg="SHA3-256">0d58291d694f553f3df3156b99f26530bece10c16b17492cac0952ea5e52c312</hash>
        <hash alg="SHA3-512">d9a8c9b3a355db50b083781506ada52fa8c60a048e89e5f5f20c4d44b805bb32f63b90571187708f4a18633c914ebdf63cf361b0fb8dc0b548971d18ba13d5b4</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.confluent.flink/flink-connector-files@1.20.3-cp1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://flink.apache.org/flink-connectors/flink-connector-files</url></reference><reference type="distribution"><url>s3://cp-flink-staging-654654529379-us-west-2/maven-staging/76e4707483101b3d7bce888caf8e381a47bc45f4</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink/flink-connectors/flink-connector-files</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-connector-kafka@3.0.0-1.17?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-connector-kafka</name>
      <version>3.0.0-1.17</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">6700d9dab35e48db07b95b9c9387a801</hash>
        <hash alg="SHA-1">8248457e6915ca0c657aa97212e92675cfa3d584</hash>
        <hash alg="SHA-256">4dfd1f7208dadd43e43866636edbae25ad2534b54904824c05392cd7ec14a854</hash>
        <hash alg="SHA-512">ef40c3c650c4f8d93f77536ac77e14b37a9dd89dcd3c56b96ad9804d35bccc4f3d0eb54b2015526b16a1c04c2da0cc7868d0da5421987570f1e9662d8e51b04a</hash>
        <hash alg="SHA-384">f8f6d0f83fcf10e1f201182515bbed5e2f097bce7a80173e3af77265fd349078b4114eba86daa783abb2c09e65ad0998</hash>
        <hash alg="SHA3-384">1f6536fd1eddbc06cf4a11e569e2ed603e6b9069e856b58072c3bd7bf0fe28db4ab2b68df6934fefd8fe1ecb21fcd918</hash>
        <hash alg="SHA3-256">f4babe460cd69ac245d3ea611bfb7b57540733575f5766bf190d67d46d355d11</hash>
        <hash alg="SHA3-512">c2849a853d7287c5a3265dfe75051806a795c151c9174b5d6fc2644349b74e9e9d5abc5afdb41e8f697266099cb309b2d2074346221c1e649abf7e340c108bca</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-connector-kafka@3.0.0-1.17?type=jar</purl>
      <externalReferences><reference type="website"><url>https://flink.apache.org/flink-connector-kafka-parent/flink-connector-kafka</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink-connector-kafka/flink-connector-kafka</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-connector-base@1.17.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-connector-base</name>
      <version>1.17.0</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <hashes>
        <hash alg="MD5">37c788a48fb71f8983f0576b20ef9548</hash>
        <hash alg="SHA-1">30d75a3f7040655a170f9f5158be9d16bde40b0f</hash>
        <hash alg="SHA-256">74357e8c229f690fc4f8489746e03436250864677081de5e76b45c260cb25ac4</hash>
        <hash alg="SHA-512">6c7f5073a4becdac5256653493c41f06587f206feec252d5f4f700a3c929a5bc93f101eea365c66e18e580abc362c0c9204f4eb36a24cbf2c40facb02b683ea4</hash>
        <hash alg="SHA-384">bba10094ee36e8fd9fee029c35b608151508e4c7a7dddd3010fe851af09d90811d644c5a56b731c2ef1f41784ad60ed9</hash>
        <hash alg="SHA3-384">f094d73ff8767267daa3a24cdacbe150e67da9baf22e4021079aa45d4b1233a50a7b8ab57f2a25e27d5ac2117a0debac</hash>
        <hash alg="SHA3-256">b9aa6ad62fa4f2f5e7d2c2874b4ab9dd9f161a2c50170fbefeb33f19e79292ad</hash>
        <hash alg="SHA3-512">d9339c1d50ac2826ae110b5855ad1d2b3e6d589e2a30e14e593513297d17fcd1cb8c40cecc3d67faa7fd86c1f10ed01ec278c167b2f58accfb4c6c2d395aa327</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-connector-base@1.17.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://flink.apache.org/flink-connectors/flink-connector-base</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink/flink-connectors/flink-connector-base</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.kafka/kafka-clients@3.2.3?type=jar">
      <group>org.apache.kafka</group>
      <name>kafka-clients</name>
      <version>3.2.3</version>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">bbf72049c30950ebb63e001b2f21fc0c</hash>
        <hash alg="SHA-1">ec1c16f07f8e5b99542a295a1034d9f71ecfef1f</hash>
        <hash alg="SHA-256">8d924a5105962e0df89752dd6d1732639f009c9cdefb8148908a8607158ceb67</hash>
        <hash alg="SHA-512">16424b53282b9126a9154fb02b772240f6262ad5b7100dc5b62e1173c9a2f431a2a0cb5168e6ed54d089c4e500ad8b808b09d99a121e718f316591a637635985</hash>
        <hash alg="SHA-384">8bf9cc6e1ef8efa938ad568135545aab6ffff277b0835232d232eae65ec154cda5850ce4dbdb55a83b94369b1fe1e70d</hash>
        <hash alg="SHA3-384">0486e253f270ad71071e1d4a0187e953a1dd2a41590baf57742a0cbb055bf1c368825792e9281faddc5c0ba9e9970f2c</hash>
        <hash alg="SHA3-256">2d860d90292fdf609d1446fcbbdd928d0f4a78fb0c8c2631eaf05c0648270cf3</hash>
        <hash alg="SHA3-512">d8c70b41159d038ac2afaec1b6b7c7695953424e152550d6eaa4c48780ef1bb1fde51a334c9cef791262f73b2399d0d4b6e51249b491d445cbce98a0b09cd6c0</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.kafka/kafka-clients@3.2.3?type=jar</purl>
      <externalReferences><reference type="website"><url>https://kafka.apache.org</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.github.luben/zstd-jni@1.5.2-1?type=jar">
      <publisher>com.github.luben</publisher>
      <group>com.github.luben</group>
      <name>zstd-jni</name>
      <version>1.5.2-1</version>
      <description>JNI bindings for Zstd native library that provides fast and high compression lossless algorithm for Java and all JVM languages.</description>
      <hashes>
        <hash alg="MD5">2909788860e8e3ee29d51b327a43ca24</hash>
        <hash alg="SHA-1">fad786abc1d1b81570e8d9a2fc8a1ef479bc27b6</hash>
        <hash alg="SHA-256">93f7e4cbc907c2650f89f9f0bec94873735a58f1e4b66a54973294e4ec1878e8</hash>
        <hash alg="SHA-512">92174059714b98d4275dca1b057c857766267afe6ae2b27bfdfe50395cb90a3ec973032977a074c5ce516a3769336e6bf63d3bbde95bea165c409f1c990a651d</hash>
        <hash alg="SHA-384">cdc9284a4537fcf83166bae1c4731463d94ad9615f91200c4da6368ddbd769314e87453e9114649c694966e6c77d4883</hash>
        <hash alg="SHA3-384">7fc38f70a3160e3a3e308c56e8b3bd5bcb42567f4739abdfd301f9e5ee74b1be0d1d072f6cf07270e61ac0a6ed6bf8d8</hash>
        <hash alg="SHA3-256">3d7fdef386e28e112621eea44bc6d6798dc68c8cf690acc2b74db5d221bc5faf</hash>
        <hash alg="SHA3-512">693b3b3d29e63690ae9c1215cc84d8e77f4de28e664eb184bf9ad4697389b8230f75f490ba653feb191b3e039eeab9415f3c56b5d2786d85e48dfd8035df4e14</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-2-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.github.luben/zstd-jni@1.5.2-1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/luben/zstd-jni</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.confluent.flink/flink-connector-datagen@1.20.3-cp1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>io.confluent.flink</group>
      <name>flink-connector-datagen</name>
      <version>1.20.3-cp1</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">7fb4fe209a67c961430b5bc86b016ad6</hash>
        <hash alg="SHA-1">9165ae149e330d1e89cbee68d325b344a221ecf1</hash>
        <hash alg="SHA-256">40f09ffd6b80e760706faea4234433ce9adf7d0028277b3190e1afe86833f879</hash>
        <hash alg="SHA-512">7126007c69ef153059198b62dfbf5c6d62c2e0a76132d553efdf3c087c2a6a12bdadb2b0072d668eba3ee94b314f3cb40a0fcbd8ff8517b2eeac4652b0b2f527</hash>
        <hash alg="SHA-384">edf65b0a23f2a117bc263b11403c8d72381028af89b5dd28a1a15f7c82cbcf5eadf152666c0ff734c8ab30aac355e38b</hash>
        <hash alg="SHA3-384">b770dacc7c090ed3f55fd4c6d673f336ba366221df88c9c48eecc52af4687311d6997d437f9729dc19ac28bb3e3b5930</hash>
        <hash alg="SHA3-256">241d7ae75f01c03ae410ef38fd8f517cec4d1c73ea42e90f0232da03bb0fee04</hash>
        <hash alg="SHA3-512">c50d47d5f2cca4cfc4e9042bbc7c16703c618835b8d2933a352d86e77253dfc3bb9356b42c4a659c8b82f4839ad49bfd10c4e4f9a01a2200936e91398cabfb83</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.confluent.flink/flink-connector-datagen@1.20.3-cp1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://flink.apache.org/flink-connectors/flink-connector-datagen</url></reference><reference type="distribution"><url>s3://cp-flink-staging-654654529379-us-west-2/maven-staging/76e4707483101b3d7bce888caf8e381a47bc45f4</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink/flink-connectors/flink-connector-datagen</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-shaded-jackson@2.14.2-17.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-shaded-jackson</name>
      <version>2.14.2-17.0</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">492259ac7642687cc959257a5512542f</hash>
        <hash alg="SHA-1">689daca4a6fc14e361831e15abd96283166d0f62</hash>
        <hash alg="SHA-256">37e87311498ae8da80adb2aa09ab6e9739d8611e09868e7220822206c739231e</hash>
        <hash alg="SHA-512">3f4434cf93f2cd12b686aa84c4b1910d7e0191b2ddad7ba8de6d2c3805d3b49afcf5da06e1052faf01b6cb0dda554594f78e39db69d83208119c1f4f2cd5dc8f</hash>
        <hash alg="SHA-384">9e689ab8b7e7f7db269fd5b1b0fc1dc5f13fed06b283c9b8ceec5c500fc9f6a4200674eef2bb884a9e67133de32e9a77</hash>
        <hash alg="SHA3-384">a67fd2fe9cfd6e8ef51ab3c0217fcaf0a9420178a8c4025770b86d6b590db65c8bb4d96acf05b4212d2661073e4409cc</hash>
        <hash alg="SHA3-256">e47b2c93363ff5d65ae47d619f3caa605b5d996e4e765811b4b7117f1c58c90e</hash>
        <hash alg="SHA3-512">af2b026aebfa279ca42602c04a8db054a12c9f39c5640a0e7804cfa5d06124a52099aea56e9dfc25d018da9baa742b274c5914aa98814dbdd0e9c5ebfa7035b6</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-shaded-jackson@2.14.2-17.0?type=jar</purl>
      <externalReferences><reference type="website"><url>http://flink.apache.org/flink-shaded-jackson-parent/flink-shaded-jackson</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink-shaded/flink-shaded-jackson-parent/flink-shaded-jackson</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.confluent.flink/flink-statebackend-rocksdb@1.20.3-cp1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>io.confluent.flink</group>
      <name>flink-statebackend-rocksdb</name>
      <version>1.20.3-cp1</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">494ad7faabda56f51e747f9e19f2bcd7</hash>
        <hash alg="SHA-1">8d143bbb16d28155978c75ec7c82a18c2710fd97</hash>
        <hash alg="SHA-256">939d37632a552ac54e8edeabf9b3bb490758aab6476913f3a52cb347b37e55b6</hash>
        <hash alg="SHA-512">c2334b92b653cd0a53663d7dfeb24c2ec145b1e55f51068f46b762d9894c4090e514138b4abfa6f23047235e8d9abc6ec9642dee17181cedb9e9f74a39edc9c3</hash>
        <hash alg="SHA-384">9c61c3966643a61fad0e53849055bbb47579ab92500c1fc7b814fb03967a6e21a52aff187c86417afefa988a97f66e5b</hash>
        <hash alg="SHA3-384">6256e2d93bd9afd822b19d750b14b1156e89fcc8e90dbf13d74c5b00c8343ea4de19f8d17ead7d53e2a6452056acb61a</hash>
        <hash alg="SHA3-256">f29497aee25634272c2f7db26e157a57a365944701837857f16434393dc2e08e</hash>
        <hash alg="SHA3-512">96555472f0a737918864ace296f561a587cfd805028ec19f72b4b8953732b5fc23098c01fd539d5e891e3a4aec2ae3bfda442097001497aa24ba15c108336eed</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.confluent.flink/flink-statebackend-rocksdb@1.20.3-cp1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://flink.apache.org/flink-state-backends/flink-statebackend-rocksdb</url></reference><reference type="distribution"><url>s3://cp-flink-staging-654654529379-us-west-2/maven-staging/76e4707483101b3d7bce888caf8e381a47bc45f4</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink/flink-state-backends/flink-statebackend-rocksdb</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.confluent.flink/frocksdbjni@6.20.3-confluent-2.0-cp1?type=jar">
      <publisher>Facebook</publisher>
      <group>io.confluent.flink</group>
      <name>frocksdbjni</name>
      <version>6.20.3-confluent-2.0-cp1</version>
      <description>RocksDB fat jar with modifications specific for Apache Flink that contains .so files for linux32 and linux64 (glibc and musl-libc), jnilib files
        for Mac OSX, and a .dll for Windows x64.</description>
      <hashes>
        <hash alg="MD5">9456f8a0cf50a0d9b4d6901ed2bc2d17</hash>
        <hash alg="SHA-1">848220ce6168b8f2301fbf9c2dd6baefe69cd485</hash>
        <hash alg="SHA-256">d4e1b374fe7036cdb364252b3489211eafdc922bf6fa5b6cc41f892371e61fb0</hash>
        <hash alg="SHA-512">494e3339945b2cb3a8207953c3e99fbbeeede9c962fafe393c6c5e842d6e6f0c6beb6e9000a7452f6a08c7cdf6bb04ce3e9322293f540c4a6bbb29d5b575a810</hash>
        <hash alg="SHA-384">bf775a6fa1c8a7ae10a5229818ddc4354147ec0a47149b5098e288c0036372c84044297d4bc3f18550a76d618bac7b55</hash>
        <hash alg="SHA3-384">f766365dd40d952667b2f5c0fa9142af303f440849e98c46dca193d15f34459f7481982c4a877432c00ada90bbd92f32</hash>
        <hash alg="SHA3-256">d82ba6fe1c1617e226cfacfa82a3d47381cf225c4a48271d975dce259f1487cb</hash>
        <hash alg="SHA3-512">ad285a66287ad98d7bc45b5765125ee71b6f4dc5c9b675ae99460f0281ab0b936d4e91c5cf0cf51864262beee785ca304779a9ad506fa269443692f4565e2754</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/io.confluent.flink/frocksdbjni@6.20.3-confluent-2.0-cp1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://rocksdb.org</url></reference><reference type="mailing-list"><url>https://groups.google.com/forum/#!forum/rocksdb</url></reference><reference type="vcs"><url>scm:git:https://github.com/ververica/frocksdb.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.jcuda/jcuda@10.0.0?type=jar">
      <group>org.jcuda</group>
      <name>jcuda</name>
      <version>10.0.0</version>
      <description>Java bindings for CUDA</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">f30d8c2d418ba86f36558f5b1fe89867</hash>
        <hash alg="SHA-1">f80a9f073a331f51b9869ee60ccabf69ea6f2c9e</hash>
        <hash alg="SHA-256">fbde1c0773b90ef32edb8e42f2b973df8f0c3f441b35621e3ba0f6c6e0526338</hash>
        <hash alg="SHA-512">f090adb1041d4f447adfa0580ea7633dc2e60f24546014e96a8591c87d87f1a60179bafbb354077a042cc3c4c09e74eceee0736a86a3439eca26434ccf53424b</hash>
        <hash alg="SHA-384">773087fc53f9448b9120063218aa6cb96139253b741271a5839311df54661d475e39a9c7c6478afd523426ebd28d2559</hash>
        <hash alg="SHA3-384">74ba8a3641e5731118042c39eb6a1bb92a9035b76749070d21135a9c07e3f6119d15fe75352527dea83258386469603e</hash>
        <hash alg="SHA3-256">62c0f13fb6827884a45fe4b6eef8c0de87954946a26f656ba43d65de032c1b16</hash>
        <hash alg="SHA3-512">44973ba40060ef1d9fd0764d9eeae8b729d5f45b1efaf2dac0a2678376cc4d54b37ab27c8e2a748e7a4dd80480855f91cd5040021e8363e46ac847185f9ce6d9</hash>
      </hashes>
      <licenses>
        <license>
          <id>MIT</id>
          <url>https://opensource.org/licenses/MIT</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.jcuda/jcuda@10.0.0?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.jcuda.org/jcuda</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.jcuda/jcublas@10.0.0?type=jar">
      <group>org.jcuda</group>
      <name>jcublas</name>
      <version>10.0.0</version>
      <description>Java bindings for CUDA</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">641c2fef92c39ea60f0ea155d1d36597</hash>
        <hash alg="SHA-1">c902aa5f894a43446657994f26251e4aad484fe4</hash>
        <hash alg="SHA-256">3f81d61542f7e518a49985e347514609ed3e2131c0d761ae1bcae7553a86ffb4</hash>
        <hash alg="SHA-512">342d2e391a6e795dd0614d7c9bd423a7ec252d2fe76de40d436831c6b7b3eef12723388413af23aaa3f298a8f09cba5ae236898b384f8cf630276b7382d01079</hash>
        <hash alg="SHA-384">ef532562fb4ab7dcfb325e39b30bc7756745928d7c4d1f1662eee1220a831fa041174cb3eef5d52e2fe6897fa40c99e6</hash>
        <hash alg="SHA3-384">5aba6357223d49c9f76acbbfeedf7c8094a810a7a1b923312b2882e8171cbc98e96169b1bc9e2ed5620a0e9c6bea74f3</hash>
        <hash alg="SHA3-256">0900cdc5596dc7da6faae7dd685f3f43206a6b15b1cda0bf68ee4a3eed8eb287</hash>
        <hash alg="SHA3-512">afcbca77da0269fe5c4f34c9c0e3130cf567d95aa7862dc469beffcfd8122d09f0fb1c569ba113f13097546dd9a002cde57600b48e1affc11f712ba41f27f395</hash>
      </hashes>
      <licenses>
        <license>
          <id>MIT</id>
          <url>https://opensource.org/licenses/MIT</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.jcuda/jcublas@10.0.0?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.jcuda.org/jcublas</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.confluent.flink/flink-core@1.20.3-cp1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>io.confluent.flink</group>
      <name>flink-core</name>
      <version>1.20.3-cp1</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">b4b211918e8a868195c0566a086411ae</hash>
        <hash alg="SHA-1">ff2a44b44afa8984df2046213c26f1e4c9588de0</hash>
        <hash alg="SHA-256">d3a2049d0144deef203420c8bd6c8c17a61767db6796e4820aa832ba0f33f95b</hash>
        <hash alg="SHA-512">a5369ac90a904bf8682b852fdea3be82498e98210758bc0d68f614255bfc8a796e4f97260a529814939b9c85acc4d72517b0ab850911af91bb5aa2af6cca448f</hash>
        <hash alg="SHA-384">b6a58bdae4b482e1f02d752e25b52c8d6824ab551aec2340d88dbd147566dde4e634b44037201caf14b70ff1361e5c9a</hash>
        <hash alg="SHA3-384">274a54f50018b8da933389caa37d59532b17cfc418667830874e6365eae1b276617b814132a45242177e5568e8aa3415</hash>
        <hash alg="SHA3-256">73f25a5d5d7de5e406c43b3a24880348119d5808f423b4887cc05018f9deae8f</hash>
        <hash alg="SHA3-512">e51a357baacc490ba3239a85d453dabc784be1fe0ea8f130662972f01254ddc523f5901da25640be47eb821fcaa4bd309353fce6253207b183e9cc4cfa34b3fb</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.confluent.flink/flink-core@1.20.3-cp1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://flink.apache.org/flink-core</url></reference><reference type="distribution"><url>s3://cp-flink-staging-654654529379-us-west-2/maven-staging/76e4707483101b3d7bce888caf8e381a47bc45f4</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink/flink-core</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.confluent.flink/flink-core-api@1.20.3-cp1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>io.confluent.flink</group>
      <name>flink-core-api</name>
      <version>1.20.3-cp1</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">77866f60c5f9068533102f2f707bfa6a</hash>
        <hash alg="SHA-1">e7d8f27460c78eb673edb6fda9ace5d03c61d514</hash>
        <hash alg="SHA-256">652061290e137dbf0e2e6b5050af65408f7ccfb82149f0f796118e2947b1118a</hash>
        <hash alg="SHA-512">7e96e58d34f5846967d5507f3b4f46a1a50d7810449fa61bd6afa6437866da7e0ef7c920dd4763e030a362d1c0be59faef7a696721e2fcee3b6af8ff84c7c6ce</hash>
        <hash alg="SHA-384">4365cebb6f568c0416ac8d7a0acfc79a201a15292af36ed2bd7fefa06fc389aff34b8adbb3a5b4c8b9077d3cd2f544c8</hash>
        <hash alg="SHA3-384">a2f0315bea6f8f1d6fcc1cdc7c887736ca4271d6af0bd8fd866098eabd64ed29eba779c362be7e3ee611371dfe59d87f</hash>
        <hash alg="SHA3-256">4589e65757c27293f7e26610928476a939077f1a3c9acd4b78689d1ee36bdf0a</hash>
        <hash alg="SHA3-512">f932f42ccb7632f85394627556cb439d74edd359cc03a76812138d391c29a56bef77b9dddb424c7d1c16c687ee8bab17e2881363ef4c3013a83ee4fa41506d24</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.confluent.flink/flink-core-api@1.20.3-cp1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://flink.apache.org/flink-core-api</url></reference><reference type="distribution"><url>s3://cp-flink-staging-654654529379-us-west-2/maven-staging/76e4707483101b3d7bce888caf8e381a47bc45f4</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink/flink-core-api</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.confluent.flink/flink-metrics-core@1.20.3-cp1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>io.confluent.flink</group>
      <name>flink-metrics-core</name>
      <version>1.20.3-cp1</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <hashes>
        <hash alg="MD5">9995f2a0556139f98572eea0e650466a</hash>
        <hash alg="SHA-1">eba64c2eb4b6d1210fff82b7c8e5a411c8072ba0</hash>
        <hash alg="SHA-256">b2a6a130e63fdef7bbff96fe61e83f046e5103dc2f3a4be40f28aab343cbd5f6</hash>
        <hash alg="SHA-512">3282c1ec098c535808f67de9aefa22617d405455ec8171b4b4b60e722101799adba415ac247ef69aae584559558ff948cac209d4e84843782cc5c9e2b99e36af</hash>
        <hash alg="SHA-384">86ad1982ae0e5d199b40c079bb87515db7abf383942ced451898f48decc97c8ff5fc25ea353d67a56f00ebf0f1b6abfd</hash>
        <hash alg="SHA3-384">293870532cf10fb9a3b568d5685ebb5f41be5b866e08bc6ac5e898f1d3f813090a5b8ffe1552d4e163f96701861cfc02</hash>
        <hash alg="SHA3-256">69a91b8f4e1a24878eb1369114f7533105344101a013ad99b1f2cce80721f0de</hash>
        <hash alg="SHA3-512">91d641293e4d547caca23cadaa4ab67417f71ccd89df4399749eee8aa01a19e4b601a6f4c091c62e1be812733f345105be974d8a819f355804a8981a8ca23c39</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.confluent.flink/flink-metrics-core@1.20.3-cp1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://flink.apache.org/flink-metrics/flink-metrics-core</url></reference><reference type="distribution"><url>s3://cp-flink-staging-654654529379-us-west-2/maven-staging/76e4707483101b3d7bce888caf8e381a47bc45f4</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink/flink-metrics/flink-metrics-core</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.confluent.flink/flink-annotations@1.20.3-cp1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>io.confluent.flink</group>
      <name>flink-annotations</name>
      <version>1.20.3-cp1</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <hashes>
        <hash alg="MD5">1c9750aaa01f22c61bca3d7bad5f8d37</hash>
        <hash alg="SHA-1">693c957a493c9ac09d7a17e270c830eb0be0ef2b</hash>
        <hash alg="SHA-256">aa25d65cf0f8bd60840e478dc338df2e1a7735f960893cc615230c6ebdf517aa</hash>
        <hash alg="SHA-512">00a8baa4f723d7854600b332c792a82a95ad6209989417b0328f4038f89df0606fe34a867c437ceef6a8795e2f1676ac576552ff1718625ed4e7824fc2e919dc</hash>
        <hash alg="SHA-384">049d843cc9c6c8f716d4af5ba27187bc343f172581293d453b1c0b0688e54083daf1b893fb28583353d9679dbb382a17</hash>
        <hash alg="SHA3-384">4d1e177f88f56db6337ffee519aa620d70daf3d22d8b74a8c891e872b3f045b1706e7d36661c874584c9221242b7b430</hash>
        <hash alg="SHA3-256">c9f21987c408397d962e41230b7918f54d9ae15c4c80e39b69548db45b7f267d</hash>
        <hash alg="SHA3-512">380a3cb3d7801f4779c1f949cce84f6bab5d14ee5eae89aa91548f9d3c734d3d8311f12ace8bd9ed3377893b90127e2bcaf89009fcd6d09bf85ca9d153dc1daa</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.confluent.flink/flink-annotations@1.20.3-cp1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://flink.apache.org/flink-annotations</url></reference><reference type="distribution"><url>s3://cp-flink-staging-654654529379-us-west-2/maven-staging/76e4707483101b3d7bce888caf8e381a47bc45f4</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink/flink-annotations</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-shaded-asm-9@9.5-17.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-shaded-asm-9</name>
      <version>9.5-17.0</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <hashes>
        <hash alg="MD5">443601ddd70625d741be1d3382dcf012</hash>
        <hash alg="SHA-1">d09e84a77ad8258d26f6be6bbb31fe81e3f98658</hash>
        <hash alg="SHA-256">a79273d4fbea1683b5fe81bce25d7fe552a542690481132f7ded034a8f00169e</hash>
        <hash alg="SHA-512">b1414e5cd4cd63e1e8a2f4a18198834910a360dac22392e298458049d7bf05e74cea2a4206751026ad7dc2348112aa7f223d0ca6178a859cf343cf306a6bd4c8</hash>
        <hash alg="SHA-384">ff6195b15060e725158aa6c8406e441576c38318fa5ea26e27ffd09f4ed4596b5198579d69ef0192dbb6edb3fda79d40</hash>
        <hash alg="SHA3-384">2b29ecee21e6bf39e6a913cb1bb41d455ade8ec169b7574b6052972f4cf571fb5374d4dde1a24be0ec4d08246359348f</hash>
        <hash alg="SHA3-256">353458e2d9919279b41a1b74791b984fef6586f07232d2e71e42892a790052c9</hash>
        <hash alg="SHA3-512">e491cdd687aaa88d8d84e792caedc02a4ef27d2bdd78e4e9bf286876ce06518c03f0340ff984ffcd507d7982391e5a6f3c4c61e05fbf0e07bd9d5683d493393e</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-shaded-asm-9@9.5-17.0?type=jar</purl>
      <externalReferences><reference type="website"><url>http://flink.apache.org/flink-shaded-asm-9</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink-shaded/flink-shaded-asm-9</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.commons</group>
      <name>commons-lang3</name>
      <version>3.12.0</version>
      <description>Apache Commons Lang, a package of Java utility classes for the
  classes that are in java.lang's hierarchy, or are considered to be so
  standard as to justify existence in java.lang.</description>
      <hashes>
        <hash alg="MD5">19fe50567358922bdad277959ea69545</hash>
        <hash alg="SHA-1">c6842c86792ff03b9f1d1fe2aab8dc23aa6c6f0e</hash>
        <hash alg="SHA-256">d919d904486c037f8d193412da0c92e22a9fa24230b9d67a57855c5c31c7e94e</hash>
        <hash alg="SHA-512">fbdbc0943cb3498b0148e86a39b773f97c8e6013740f72dbc727faeabea402073e2cc8c4d68198e5fc6b08a13b7700236292e99d4785f2c9989f2e5fac11fd81</hash>
        <hash alg="SHA-384">c34b8a0e0eba2168ad56fedeb7a1d710b6f1d3f1ce6aae99a4e0247bd120efbbadc8dcb2f731045b8a16e3efd30604dc</hash>
        <hash alg="SHA3-384">8ad6ebe7754bf0caa8cda7e59c0e95360d76e06a7ad6aeec5637985519dbd1dd06e7eed04711039f36ec4c49de280def</hash>
        <hash alg="SHA3-256">18ef639b2aeeb5aedffb18dbf20c79f33e300d99fb31b131689639cc470e6e4c</hash>
        <hash alg="SHA3-512">fbea96114dcf4f31cfaaa99987be756ddda3a6c74f8c835461997df794d54b92da1f60fe5c3f1f2a43cb8c5f5db7f4048bef77c70993673c7a93f3660fffc8da</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://commons.apache.org/proper/commons-lang/</url></reference><reference type="build-system"><url>https://builds.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/LANG</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=commons-lang.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.snakeyaml/snakeyaml-engine@2.6?type=jar">
      <group>org.snakeyaml</group>
      <name>snakeyaml-engine</name>
      <version>2.6</version>
      <description>Core YAML 1.2 parser and emitter for Java</description>
      <hashes>
        <hash alg="MD5">719bcfb9f917992d0a99a6f7106d8466</hash>
        <hash alg="SHA-1">235a7e571b33eda1a81e0f73a3173ef95dd020e5</hash>
        <hash alg="SHA-256">2652199af40c9aa2f1782400d2dfbbf4e5226208c4e05ddd4059c3d6d9cd1505</hash>
        <hash alg="SHA-512">c3b5e87ce323b37bcd9e65d060157ebb26d116b5dac30c6eaa185b30aa24c0be8dfd0ad604a9a12ce7010acadee54a9cea9f065cd2f434eeaed7bccce2e14a7d</hash>
        <hash alg="SHA-384">edfc3c9a95cc2fa524a322f20ec034ec16b3fad950a58bfd1ed774eaaab946304cddc5e9ea4e117a899ec568ba7fa620</hash>
        <hash alg="SHA3-384">63b9e0ed448431a1d4b34a4b0b97b65c2c7be6ef46f1ce3b10191373e3339422f9c06bc846ae861a982c3c3618abd9c6</hash>
        <hash alg="SHA3-256">19ce75167267903be79122e149ede2916c3e07bab0658db21ab40864e8c920cd</hash>
        <hash alg="SHA3-512">7777f37097a6951dafe18fb038d087e7fe0924bfb2a10c66a76a57d95aa65341d4b674c6ff1d9d453c436ffcb50e281c2bedc854ce687fefc30c9595b7352c8a</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.snakeyaml/snakeyaml-engine@2.6?type=jar</purl>
      <externalReferences><reference type="website"><url>https://bitbucket.org/snakeyaml/snakeyaml-engine</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://bitbucket.org/snakeyaml/snakeyaml-engine/issues</url></reference><reference type="vcs"><url>https://bitbucket.org/snakeyaml/snakeyaml-engine/src</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.commons</group>
      <name>commons-text</name>
      <version>1.10.0</version>
      <description>Apache Commons Text is a library focused on algorithms working on strings.</description>
      <hashes>
        <hash alg="MD5">4afc9bfa2d31dbf7330c98fcc954b892</hash>
        <hash alg="SHA-1">3363381aef8cef2dbc1023b3e3a9433b08b64e01</hash>
        <hash alg="SHA-256">770cd903fa7b604d1f7ef7ba17f84108667294b2b478be8ed1af3bffb4ae0018</hash>
        <hash alg="SHA-512">afd836a1094449e0a791fee67363666c47b6d24acff353a5089b837b332c0f4af89565c354682521e37062d20e6b52d70c77bb4f24cca9b9532c274fc708a831</hash>
        <hash alg="SHA-384">06c56e6e513dd77cf10d0da46cdea08c34e220e81fa024735b668c6650df4234e564fe865ff5cafea963f56b1e8ffd4a</hash>
        <hash alg="SHA3-384">f09065ed066c25debf8c78cbb0bcc738e1ea283302ec992dcfb649acb90091cff879465c65a162e94534d454e3b4e9bb</hash>
        <hash alg="SHA3-256">0b59c567164bb755f2353b78ba66744000a8c4b35e1df05255b080a21c3a3dd5</hash>
        <hash alg="SHA3-512">f0fbce02a862b70f472a27d0722c54ac111ca2eb94584b8b0b73d1926aec26047cd92542ad0b3cf980a6825077587f41b194aa93d6f6350d1b87e59e8df1be7c</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://commons.apache.org/proper/commons-text</url></reference><reference type="build-system"><url>https://github.com/apache/commons-parent/actions</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/TEXT</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=commons-text.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.esotericsoftware.kryo/kryo@2.24.0?type=jar">
      <group>com.esotericsoftware.kryo</group>
      <name>kryo</name>
      <version>2.24.0</version>
      <description>Fast, efficient Java serialization</description>
      <hashes>
        <hash alg="MD5">6cf0fa5b5d4f6b8226fd4a4bfb7532b8</hash>
        <hash alg="SHA-1">0c6b206e80cfd97e66a1364003724491c757b92f</hash>
        <hash alg="SHA-256">7e56b32c635058f9aa2820f88919ab702d029cbcd15285da9992e36cc0ae52f2</hash>
        <hash alg="SHA-512">a4c6ce768528a03c219cc6a41b22293f78e433c849c90391b64dda3f2376fd79951a89c5f4e6701bcbcb6eee9abffe2390cfb12dba3b885e4a3d411a26b78f40</hash>
        <hash alg="SHA-384">678ad1b7f4d99910b8ff44a6c8f78ccae91f823161ce23de39077397352919b7257e1e6e0dea90900be973291ea19282</hash>
        <hash alg="SHA3-384">671fc6aa9905f8131482e1d0f3fe26126562b13777893d51a66d0f84fc6f2aa3f13947e488ffba8f09c31a2cc0e9758a</hash>
        <hash alg="SHA3-256">46e89d8f12cbead0fe29ad707d5dba96e880dacce2a6b374ac4bf1ced9f36a79</hash>
        <hash alg="SHA3-512">c7cde437eef8343eccd4c5ecb8de5683529e3d4d8262e8cd1f7b7d0df9c632253b979737fd1b486314ec2728aee3a3782dee5d2032621485db4aa3b2a8262741</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.esotericsoftware.kryo/kryo@2.24.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/EsotericSoftware/kryo</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/EsotericSoftware/kryo</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.esotericsoftware.minlog/minlog@1.2?type=jar">
      <group>com.esotericsoftware.minlog</group>
      <name>minlog</name>
      <version>1.2</version>
      <description>Minimal overhead Java logging</description>
      <hashes>
        <hash alg="MD5">f7cfbdf63b67df0bbfa4c7cb260885bc</hash>
        <hash alg="SHA-1">59bfcd171d82f9981a5e242b9e840191f650e209</hash>
        <hash alg="SHA-256">a678cb1aa8f5d03d901c992c75741841d98a9bc3d55dad02e84d65315c4e60f2</hash>
        <hash alg="SHA-512">7b4082766ad740d86708783f3b08780ed72dd18062aa9ba422c4b9016b332d2334ae511f50ef7d89e4eedbdac5cebc51ab6ddaf4d1eea857a3250eb5962f0d08</hash>
        <hash alg="SHA-384">932a282a9c06864001f8212199e4be05543609adbd985c5f4517ee6eba734acd3fd8812213bc0c98af264637cbf9c78d</hash>
        <hash alg="SHA3-384">f36e9f494611c85f59febfef9ce93fc68f1f17db881400456204c1f099e623e334d2f10b41018392877c8af13de7f59a</hash>
        <hash alg="SHA3-256">37422ef85dce86abd8b14b4c9f7ad77261d728a472126c8eca38f356c98da395</hash>
        <hash alg="SHA3-512">74ba47271899706a284e942482ff41649ffd93e57a29320732e57864c47f3f0431377130ca7afb5e64cc6b68d4e5a5cdfc38027966cda4b5e512e3ce02bd8a99</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.esotericsoftware.minlog/minlog@1.2?type=jar</purl>
      <externalReferences><reference type="website"><url>http://code.google.com/p/minlog/</url></reference><reference type="vcs"><url>http://minlog.googlecode.com/svn/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-collections/commons-collections@3.2.2?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>commons-collections</group>
      <name>commons-collections</name>
      <version>3.2.2</version>
      <description>Types that extend and augment the Java Collections Framework.</description>
      <hashes>
        <hash alg="MD5">f54a8510f834a1a57166970bfc982e94</hash>
        <hash alg="SHA-1">8ad72fe39fa8c91eaaf12aadb21e0c3661fe26d5</hash>
        <hash alg="SHA-256">eeeae917917144a68a741d4c0dff66aa5c5c5fd85593ff217bced3fc8ca783b8</hash>
        <hash alg="SHA-512">51c72f9aca7726f3c387095e66be85a6df97c74b00a25434b89188c1b8eab6e2b55accf7b9bd412430d22bd09324dec076e300b3d1fa39fccad471f0f2a3da16</hash>
        <hash alg="SHA-384">dd4e99b3314bd3c1a1ee26296615d9e44dadf7a1f8a7bbba44fb95121803d331e36d4cca4260e7609af78a47ba3e4073</hash>
        <hash alg="SHA3-384">8ce03528e4a6e95c44283b56eca87e6a6d3bf1363411a55b538f4f9110cf7470581ea5c73925e877ddab08dba0603f40</hash>
        <hash alg="SHA3-256">fd3d6134b5f07077b82ccf93d148dacf7c4ce5c971209510edd0e77e3e38c19e</hash>
        <hash alg="SHA3-512">c2a523916fb7c7d55a05d5e3d9e9b33000733f4b20a71be174e4e093e3f06ea78ad831edd1505527da7388105f8647efb7d5666ba852c90b4e2d5bb74256efbc</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/commons-collections/commons-collections@3.2.2?type=jar</purl>
      <externalReferences><reference type="website"><url>http://commons.apache.org/collections/</url></reference><reference type="build-system"><url>https://continuum-ci.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/COLLECTIONS</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>http://svn.apache.org/viewvc/commons/proper/collections/trunk</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-compress@1.26.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.commons</group>
      <name>commons-compress</name>
      <version>1.26.0</version>
      <description>Apache Commons Compress defines an API for working with
compression and archive formats. These include bzip2, gzip, pack200,
LZMA, XZ, Snappy, traditional Unix Compress, DEFLATE, DEFLATE64, LZ4,
Brotli, Zstandard and ar, cpio, jar, tar, zip, dump, 7z, arj.</description>
      <hashes>
        <hash alg="MD5">cbc0bb8eca12b747ca21bf998d736e60</hash>
        <hash alg="SHA-1">659feffdd12280201c8aacb8f7be94f9a883c824</hash>
        <hash alg="SHA-256">051aceb8bbcc62d0f5b2b8ac72c53767f9c59bfbd050151e65bef6f51c8ed9c9</hash>
        <hash alg="SHA-512">acbeaa2909b809cd561e7156df18340d96abacb179325622d73bdd6b82cb9b387d6fcb1a44d8195aad4e786da299289e17598a1d337b7c7d1c0bc610cc128714</hash>
        <hash alg="SHA-384">052d4d0cd1929c4299dd9d37dd36eaea6ed2be6b04d6d83a94f8608a6d1138aa81f7a34f25113ac267e7ba25ce948c9a</hash>
        <hash alg="SHA3-384">8b0bf441e8ce793fb6513bc07551cc48ab4507696c18e6037b0fcf35bc4e1eb3e44ed962e2d3765c86d4d912770aa53e</hash>
        <hash alg="SHA3-256">e441768e06092053f4703844ec0c8f2b437e06e7c190d48fec9d7682beb94c40</hash>
        <hash alg="SHA3-512">5984f9f08f83789555677f6800f25fa8e80a9eb2e4d46b5fb117b8efc24753644fa103a2f6b619827661a41677991bc827965172ef25f1313d8a59154e615e8d</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.commons/commons-compress@1.26.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://commons.apache.org/proper/commons-compress/</url></reference><reference type="build-system"><url>https://github.com/apache/commons-parent/actions</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/COMPRESS</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=commons-compress.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.logging.log4j/log4j-slf4j-impl@2.24.3?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.logging.log4j</group>
      <name>log4j-slf4j-impl</name>
      <version>2.24.3</version>
      <description>SLF4J 1 binding (provider) for the Log4j API.
    It forwards SLF4J 1 calls to the Log4j API.
    (Refer to the `log4j-to-slf4j` artifact for forwarding the Log4j API to SLF4J.)</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">34cb2f29a9b5f6dd865663faebb1923e</hash>
        <hash alg="SHA-1">182894dfec8b730639c9ea065f1084ba85fcbaa3</hash>
        <hash alg="SHA-256">40dec251164d1576e000968cd02e56a1125f46b91fb694a06dfa168f1335da48</hash>
        <hash alg="SHA-512">2c5fa50fd69400330af946b380d3de9863dae2e53acf54ea13e53c679eb01aa9568e3f2cfee3ae70ed977779297aae74313b03afdebc9b283e8593aace0a7d12</hash>
        <hash alg="SHA-384">dd81db1695819cb829e77949819bda539e40497b74e1d4cbb1c8c1b4671e64f5f2f8f02dd4a783b4cdec5dcf8a994a9a</hash>
        <hash alg="SHA3-384">eb560e00705ac5c067f18e8742762fd0c3d7d25c0a98e2af144377f620a19e4143e3275ce1174ba737df3c6bac8c15d9</hash>
        <hash alg="SHA3-256">18b6019886485527a783f124ecd901ca28bb7469198b902967bcc700e327bf19</hash>
        <hash alg="SHA3-512">0f7a3c888a9b73d151aabdc685af8717663eb9573da07c423e1322fc783a14b617fe3b46459a13665ccba1d1ed08c6a192eec379ddb30830f9b301496d7c97d3</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.logging.log4j/log4j-slf4j-impl@2.24.3?type=jar</purl>
      <externalReferences><reference type="website"><url>https://logging.apache.org/log4j/2.x/log4j/log4j-slf4j-impl/</url></reference><reference type="build-system"><url>https://github.com/apache/logging-log4j2/actions</url></reference><reference type="distribution"><url>https://logging.apache.org/download.html</url></reference><reference type="issue-tracker"><url>https://github.com/apache/logging-log4j2/issues</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?log4j-user@logging.apache.org</url></reference><reference type="vcs"><url>https://github.com/apache/logging-log4j2</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.logging.log4j/log4j-api@2.24.3?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.logging.log4j</group>
      <name>log4j-api</name>
      <version>2.24.3</version>
      <description>The logging API of the Log4j project.
    Library and application code can log through this API.
    It contains a simple built-in implementation (`SimpleLogger`) for trivial use cases.
    Production applications are recommended to use Log4j API in combination with a fully-fledged implementation, such as Log4j Core.</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">d89516699543c5c21be87ee1760695f3</hash>
        <hash alg="SHA-1">b02c125db8b6d295adf72ae6e71af5d83bce2370</hash>
        <hash alg="SHA-256">5b4a0a0cd0e751ded431c162442bdbdd53328d1f8bb2bae5fc1bbeee0f66d80f</hash>
        <hash alg="SHA-512">d936ac37b3d7ca2e4370ef122629c5ceb0bef60a6c08a3bd8bb278204dbed84bb888aaa307c58e80e4e9d645b73792433f52adcccd30378fbac99b1d271042f7</hash>
        <hash alg="SHA-384">d376ab3673186a1a39ea8b3d3c8359bb16dbb3f5d3782c182a112ab19b61d7730434c6d0f631d43d6daae66005d1df4e</hash>
        <hash alg="SHA3-384">7ee1b17a329d90bf648d05defced8d79f7bfbca66cc7e90aa2e1b2d7622697d535969e50d1a03460447eda2fa008f86c</hash>
        <hash alg="SHA3-256">5d2ad18a3352c3d7269ecb8d52d6a5ac8bf0d0d937e4809f5023a45d0f8f50f3</hash>
        <hash alg="SHA3-512">7e964e6425a1198e2568a9e8c326f730b7d139f71e8d3b1b440aa90860f136f443e5ebd62aa022c1c7834e23995ed0992f68dfb1760140d469b85fed84815ae1</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.logging.log4j/log4j-api@2.24.3?type=jar</purl>
      <externalReferences><reference type="website"><url>https://logging.apache.org/log4j/2.x/log4j/log4j-api/</url></reference><reference type="build-system"><url>https://github.com/apache/logging-log4j2/actions</url></reference><reference type="distribution"><url>https://logging.apache.org/download.html</url></reference><reference type="issue-tracker"><url>https://github.com/apache/logging-log4j2/issues</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?log4j-user@logging.apache.org</url></reference><reference type="vcs"><url>https://github.com/apache/logging-log4j2</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.logging.log4j/log4j-core@2.24.3?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.logging.log4j</group>
      <name>log4j-core</name>
      <version>2.24.3</version>
      <description>A versatile, industrial-grade, and reference implementation of the Log4j API.
    It bundles a rich set of components to assist various use cases:
    Appenders targeting files, network sockets, databases, SMTP servers;
    Layouts that can render CSV, HTML, JSON, Syslog, etc. formatted outputs;
    Filters that can be configured using log event rates, regular expressions, scripts, time, etc.
    It contains several extension points to introduce custom components, if needed.</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">3f52ab7782fdd1349bd872b5dcf48bed</hash>
        <hash alg="SHA-1">7f6a261243ca767c7f38fd4b542bcde626c8894e</hash>
        <hash alg="SHA-256">7eb4084596ae25bd3c61698e48e8d0ab65a9260758884ed5cbb9c6e55c44a56a</hash>
        <hash alg="SHA-512">61332e92ea6ef6656994105a675eb8de85ec859f07cde9da5ef16a22cbf2e0d7695348e04e066dd1a1ff0146ec03a8884974319d4f71155db9c9ab0d073197ef</hash>
        <hash alg="SHA-384">fd3cd2ea5cdc84698b46833cbcdb10e3c1e507a2cba0293b487f45efa7f12f52bce9e2c0a96b0f1632e2ff2549ac2eb2</hash>
        <hash alg="SHA3-384">852c87ea21b50676f338fa423d203fa52845bb201b994afd963bbc8100ecc0f987136a21bf6a6bbd9ab13ee008de9822</hash>
        <hash alg="SHA3-256">fc5b8e9367369772309a23b9ba1c2384be7ace8f6dd6ce6a9c37c322b86e4f1b</hash>
        <hash alg="SHA3-512">c1de50e5cfa5a415ad97cff532d3d3df825ff97ee2c41ac11e50cbca86e37577b9d929e6675c2336008893686db1cdebe878234f15d0e4afc1309eea3f32020b</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.logging.log4j/log4j-core@2.24.3?type=jar</purl>
      <externalReferences><reference type="website"><url>https://logging.apache.org/log4j/2.x/log4j/log4j-core/</url></reference><reference type="build-system"><url>https://github.com/apache/logging-log4j2/actions</url></reference><reference type="distribution"><url>https://logging.apache.org/download.html</url></reference><reference type="issue-tracker"><url>https://github.com/apache/logging-log4j2/issues</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?log4j-user@logging.apache.org</url></reference><reference type="vcs"><url>https://github.com/apache/logging-log4j2</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-shaded-force-shading@17.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-shaded-force-shading</name>
      <version>17.0</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">6890ff555c82f3bb156cf9c73bf09cf9</hash>
        <hash alg="SHA-1">345c153973a17fb8a98d368352e14893edcbd610</hash>
        <hash alg="SHA-256">dcc7dff160a40b74fa5db2805b2004153ffd0517968f3c7843a8ee43be82e710</hash>
        <hash alg="SHA-512">9de23513832248618b78e279c0e3900f5cafb7193254ef6818b4f0b6f3b70045dd9cc4fdd13caeeca8b70a44f38201ce055f07248cdf08930a20e1b7a73997ff</hash>
        <hash alg="SHA-384">063611872b4b1a1718e0472e32198bded0d74fa656e5c47a7b20038cd5ff70106e3109b60fe882880feea486e1ef83bf</hash>
        <hash alg="SHA3-384">26f9225d2c401391133dabc97340d1048504deaaae3c6b02ba20b83d4efe8c53a6d4f4e63a04e4317f9bce6b1a1ee013</hash>
        <hash alg="SHA3-256">aae3e6da763019cc2fd4919df572a3653b46aedaf60a3adb3d28bc7f94023523</hash>
        <hash alg="SHA3-512">e616e089fb70dc79503b6c235bd8d14c6e7c8e608c87bb4fcd02fe86d6ba27985bac4f144843af9fc7a7c495de7057320ccddea9f571c42bdcaa1c73966f265f</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-shaded-force-shading@17.0?type=jar</purl>
      <externalReferences><reference type="website"><url>http://flink.apache.org/flink-shaded-force-shading</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink-shaded/flink-shaded-force-shading</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar">
      <publisher>QOS.ch</publisher>
      <group>org.slf4j</group>
      <name>slf4j-api</name>
      <version>1.7.36</version>
      <description>The slf4j API</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">872da51f5de7f3923da4de871d57fd85</hash>
        <hash alg="SHA-1">6c62681a2f655b49963a5983b8b0950a6120ae14</hash>
        <hash alg="SHA-256">d3ef575e3e4979678dc01bf1dcce51021493b4d11fb7f1be8ad982877c16a1c0</hash>
        <hash alg="SHA-512">f9b033fc019a44f98b16048da7e2b59edd4a6a527ba60e358f65ab88e0afae03a9340f1b3e8a543d49fa542290f499c5594259affa1ff3e6e7bf3b428d4c610b</hash>
        <hash alg="SHA-384">2b14ad035877087157e379d3277dcdcd79e58d6bdb147c47d29e377d75ce53ad42cafbf22f5fb7827c7e946ff4876b9a</hash>
        <hash alg="SHA3-384">3bc3110dafb8d5be16a39f3b2671a466463cd99eb39610c0e4719a7bf2d928f2ea213c734887c6926a07c4cca7769e4b</hash>
        <hash alg="SHA3-256">ba2608179fcf46e2291a90b9cbb4aa30d718e481f59c350cc21c73b88d826881</hash>
        <hash alg="SHA3-512">14c4edcd19702ef607d78826839d8a6d3a39157df54b89a801d3d3cbbe1307131a77671b041c761122730fb1387888c5ec2e46bdd80e1cb07f8f144676441824</hash>
      </hashes>
      <licenses>
        <license>
          <id>MIT</id>
          <url>https://opensource.org/licenses/MIT</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.slf4j.org</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/qos-ch/slf4j/slf4j-api</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar">
      <group>com.google.code.findbugs</group>
      <name>jsr305</name>
      <version>1.3.9</version>
      <description>JSR305 Annotations for Findbugs</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">1d5a772e400b04bb67a7ef4a0e0996d8</hash>
        <hash alg="SHA-1">40719ea6961c0cb6afaeb6a921eaa1f6afd4cfdf</hash>
        <hash alg="SHA-256">905721a0eea90a81534abb7ee6ef4ea2e5e645fa1def0a5cd88402df1b46c9ed</hash>
        <hash alg="SHA-512">06da282cfd8e30d9f8cf17702b8709172b00e22b75a627a1d85f8989615b8a1a401bc25d9aee7b14aed1d9b5df73bf2ea8d66f9c8468d9577c29f0ccfa2cc70a</hash>
        <hash alg="SHA-384">56e6b41ef62eb5edfed0203802cefae9c2df86388148e420bb0c687abb2b80e14d5c2a82d5b35dce4badaf148f94eada</hash>
        <hash alg="SHA3-384">58c3bf89fa1afa75c2c5078159fd28e27b2273d437f26aaaa7391310b6f0823f3cf476a24f5631c0881f3f7e946d99be</hash>
        <hash alg="SHA3-256">c333ea5faedfa78e0614a2620438d5724eab093df4e960918391b6a44c2915b0</hash>
        <hash alg="SHA3-512">67ec31448e156cc72dd036060b460bb2667a13b1cbe500b6b7eed3235b1994b44c39f440ebd07b21ec9595b166ad61121d4f6a132b5b313c558ab21b72599425</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar</purl>
      <externalReferences><reference type="website"><url>http://findbugs.sourceforge.net/</url></reference><reference type="vcs"><url>http://findbugs.googlecode.com/svn/trunk/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.objenesis/objenesis@2.1?type=jar">
      <publisher>Joe Walnes, Henri Tremblay, Leonardo Mesquita</publisher>
      <group>org.objenesis</group>
      <name>objenesis</name>
      <version>2.1</version>
      <description>A library for instantiating Java objects</description>
      <hashes>
        <hash alg="MD5">32ccb1d20a42b5aaaceb90c9082a2efa</hash>
        <hash alg="SHA-1">87c0ea803b69252868d09308b4618f766f135a96</hash>
        <hash alg="SHA-256">c74330cc6b806c804fd37e74487b4fe5d7c2750c5e15fbc6efa13bdee1bdef80</hash>
        <hash alg="SHA-512">1dec9ee30812b8006e536a2749c5781ccdc4b446539efb6fa534f22e70562033876bf2eb22c6946d617695729bd65f0f65b984f15f05ac63db5bed215e74427c</hash>
        <hash alg="SHA-384">657b8a3b80a5475f198425396f7264301f9e0f3ad5dc336ef0c7b46874f5544861a8a2fd48cdb5f672e199a6935c19d1</hash>
        <hash alg="SHA3-384">e526937d722aad1857869b2d2a0ba5c88815609308c00b776b51614e501de5d93d54978f5bb9cf496bdcc28b1dbd5775</hash>
        <hash alg="SHA3-256">436cfbb9c208dd03c951708fa4ba6525e2a0b26a873d594a6fbe93ab49082c97</hash>
        <hash alg="SHA3-512">1e7ee9411df7cfbf0669c38e4ef029155dd718b91db1d182841c740caf8c1057ed273a77f8e32d724c48aaf96815a26ab099c776511ffc5ef351d70ebfa70344</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.objenesis/objenesis@2.1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://objenesis.org</url></reference><reference type="distribution"><url>http://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/easymock/easymock/objenesis</url></reference></externalReferences>
    </component>
  </components>
  <dependencies>
    <dependency ref="pkg:maven/io.confluent.flink/flink-examples-streaming@1.20.3-cp1?type=jar">
      <dependency ref="pkg:maven/io.confluent.flink/flink-streaming-java@1.20.3-cp1?type=jar"/>
      <dependency ref="pkg:maven/io.confluent.flink/flink-clients@1.20.3-cp1?type=jar"/>
      <dependency ref="pkg:maven/io.confluent.flink/flink-connector-files@1.20.3-cp1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-connector-kafka@3.0.0-1.17?type=jar"/>
      <dependency ref="pkg:maven/io.confluent.flink/flink-connector-datagen@1.20.3-cp1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-jackson@2.14.2-17.0?type=jar"/>
      <dependency ref="pkg:maven/io.confluent.flink/flink-statebackend-rocksdb@1.20.3-cp1?type=jar"/>
      <dependency ref="pkg:maven/org.jcuda/jcuda@10.0.0?type=jar"/>
      <dependency ref="pkg:maven/org.jcuda/jcublas@10.0.0?type=jar"/>
      <dependency ref="pkg:maven/io.confluent.flink/flink-core@1.20.3-cp1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-slf4j-impl@2.24.3?type=jar"/>
      <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-api@2.24.3?type=jar"/>
      <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-core@2.24.3?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-force-shading@17.0?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/io.confluent.flink/flink-streaming-java@1.20.3-cp1?type=jar">
      <dependency ref="pkg:maven/io.confluent.flink/flink-core@1.20.3-cp1?type=jar"/>
      <dependency ref="pkg:maven/io.confluent.flink/flink-file-sink-common@1.20.3-cp1?type=jar"/>
      <dependency ref="pkg:maven/io.confluent.flink/flink-runtime@1.20.3-cp1?type=jar"/>
      <dependency ref="pkg:maven/io.confluent.flink/flink-java@1.20.3-cp1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-guava@31.1-jre-17.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-math3@3.6.1?type=jar"/>
      <dependency ref="pkg:maven/io.confluent.flink/flink-connector-datagen@1.20.3-cp1?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/io.confluent.flink/flink-core@1.20.3-cp1?type=jar">
      <dependency ref="pkg:maven/io.confluent.flink/flink-core-api@1.20.3-cp1?type=jar"/>
      <dependency ref="pkg:maven/io.confluent.flink/flink-annotations@1.20.3-cp1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-asm-9@9.5-17.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-jackson@2.14.2-17.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar"/>
      <dependency ref="pkg:maven/org.snakeyaml/snakeyaml-engine@2.6?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar"/>
      <dependency ref="pkg:maven/com.esotericsoftware.kryo/kryo@2.24.0?type=jar"/>
      <dependency ref="pkg:maven/commons-collections/commons-collections@3.2.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-compress@1.26.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-guava@31.1-jre-17.0?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/io.confluent.flink/flink-core-api@1.20.3-cp1?type=jar">
      <dependency ref="pkg:maven/io.confluent.flink/flink-annotations@1.20.3-cp1?type=jar"/>
      <dependency ref="pkg:maven/io.confluent.flink/flink-metrics-core@1.20.3-cp1?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/io.confluent.flink/flink-annotations@1.20.3-cp1?type=jar">
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"/>
    <dependency ref="pkg:maven/io.confluent.flink/flink-metrics-core@1.20.3-cp1?type=jar">
      <dependency ref="pkg:maven/io.confluent.flink/flink-annotations@1.20.3-cp1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.flink/flink-shaded-asm-9@9.5-17.0?type=jar"/>
    <dependency ref="pkg:maven/org.apache.flink/flink-shaded-jackson@2.14.2-17.0?type=jar"/>
    <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar"/>
    <dependency ref="pkg:maven/org.snakeyaml/snakeyaml-engine@2.6?type=jar"/>
    <dependency ref="pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar">
      <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.esotericsoftware.kryo/kryo@2.24.0?type=jar">
      <dependency ref="pkg:maven/com.esotericsoftware.minlog/minlog@1.2?type=jar"/>
      <dependency ref="pkg:maven/org.objenesis/objenesis@2.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.esotericsoftware.minlog/minlog@1.2?type=jar"/>
    <dependency ref="pkg:maven/org.objenesis/objenesis@2.1?type=jar"/>
    <dependency ref="pkg:maven/commons-collections/commons-collections@3.2.2?type=jar"/>
    <dependency ref="pkg:maven/org.apache.commons/commons-compress@1.26.0?type=jar">
      <dependency ref="pkg:maven/commons-io/commons-io@2.15.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/commons-io/commons-io@2.15.1?type=jar"/>
    <dependency ref="pkg:maven/org.apache.flink/flink-shaded-guava@31.1-jre-17.0?type=jar"/>
    <dependency ref="pkg:maven/io.confluent.flink/flink-file-sink-common@1.20.3-cp1?type=jar"/>
    <dependency ref="pkg:maven/io.confluent.flink/flink-runtime@1.20.3-cp1?type=jar">
      <dependency ref="pkg:maven/io.confluent.flink/flink-core@1.20.3-cp1?type=jar"/>
      <dependency ref="pkg:maven/io.confluent.flink/flink-rpc-core@1.20.3-cp1?type=jar"/>
      <dependency ref="pkg:maven/io.confluent.flink/flink-rpc-akka-loader@1.20.3-cp1?type=jar"/>
      <dependency ref="pkg:maven/io.confluent.flink/flink-java@1.20.3-cp1?type=jar"/>
      <dependency ref="pkg:maven/io.confluent.flink/flink-queryable-state-client-java@1.20.3-cp1?type=jar"/>
      <dependency ref="pkg:maven/io.confluent.flink/flink-hadoop-fs@1.20.3-cp1?type=jar"/>
      <dependency ref="pkg:maven/commons-io/commons-io@2.15.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-netty@4.1.91.Final-17.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-guava@31.1-jre-17.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-jackson@2.14.2-17.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-zookeeper-3@3.7.1-17.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar"/>
      <dependency ref="pkg:maven/commons-cli/commons-cli@1.5.0?type=jar"/>
      <dependency ref="pkg:maven/org.javassist/javassist@3.24.0-GA?type=jar"/>
      <dependency ref="pkg:maven/org.xerial.snappy/snappy-java@1.1.10.4?type=jar"/>
      <dependency ref="pkg:maven/tools.profiler/async-profiler@2.9?type=jar"/>
      <dependency ref="pkg:maven/org.lz4/lz4-java@1.8.0?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/io.confluent.flink/flink-rpc-core@1.20.3-cp1?type=jar">
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/io.confluent.flink/flink-rpc-akka-loader@1.20.3-cp1?type=jar">
      <dependency ref="pkg:maven/io.confluent.flink/flink-core@1.20.3-cp1?type=jar"/>
      <dependency ref="pkg:maven/io.confluent.flink/flink-rpc-core@1.20.3-cp1?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/io.confluent.flink/flink-java@1.20.3-cp1?type=jar">
      <dependency ref="pkg:maven/io.confluent.flink/flink-core@1.20.3-cp1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-math3@3.6.1?type=jar"/>
      <dependency ref="pkg:maven/com.twitter/chill-java@0.7.6?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.commons/commons-math3@3.6.1?type=jar"/>
    <dependency ref="pkg:maven/com.twitter/chill-java@0.7.6?type=jar">
      <dependency ref="pkg:maven/com.esotericsoftware.kryo/kryo@2.24.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/io.confluent.flink/flink-queryable-state-client-java@1.20.3-cp1?type=jar">
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-netty@4.1.91.Final-17.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-guava@31.1-jre-17.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.flink/flink-shaded-netty@4.1.91.Final-17.0?type=jar"/>
    <dependency ref="pkg:maven/io.confluent.flink/flink-hadoop-fs@1.20.3-cp1?type=jar">
      <dependency ref="pkg:maven/io.confluent.flink/flink-core@1.20.3-cp1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.flink/flink-shaded-zookeeper-3@3.7.1-17.0?type=jar"/>
    <dependency ref="pkg:maven/commons-cli/commons-cli@1.5.0?type=jar"/>
    <dependency ref="pkg:maven/org.javassist/javassist@3.24.0-GA?type=jar"/>
    <dependency ref="pkg:maven/org.xerial.snappy/snappy-java@1.1.10.4?type=jar"/>
    <dependency ref="pkg:maven/tools.profiler/async-profiler@2.9?type=jar"/>
    <dependency ref="pkg:maven/org.lz4/lz4-java@1.8.0?type=jar"/>
    <dependency ref="pkg:maven/io.confluent.flink/flink-connector-datagen@1.20.3-cp1?type=jar"/>
    <dependency ref="pkg:maven/io.confluent.flink/flink-clients@1.20.3-cp1?type=jar">
      <dependency ref="pkg:maven/io.confluent.flink/flink-core@1.20.3-cp1?type=jar"/>
      <dependency ref="pkg:maven/io.confluent.flink/flink-runtime@1.20.3-cp1?type=jar"/>
      <dependency ref="pkg:maven/io.confluent.flink/flink-optimizer@1.20.3-cp1?type=jar"/>
      <dependency ref="pkg:maven/io.confluent.flink/flink-java@1.20.3-cp1?type=jar"/>
      <dependency ref="pkg:maven/commons-cli/commons-cli@1.5.0?type=jar"/>
      <dependency ref="pkg:maven/io.confluent.flink/flink-streaming-java@1.20.3-cp1?type=jar"/>
      <dependency ref="pkg:maven/io.confluent.flink/flink-datastream@1.20.3-cp1?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/io.confluent.flink/flink-optimizer@1.20.3-cp1?type=jar">
      <dependency ref="pkg:maven/io.confluent.flink/flink-core@1.20.3-cp1?type=jar"/>
      <dependency ref="pkg:maven/io.confluent.flink/flink-runtime@1.20.3-cp1?type=jar"/>
      <dependency ref="pkg:maven/io.confluent.flink/flink-java@1.20.3-cp1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-guava@31.1-jre-17.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-jackson@2.14.2-17.0?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/io.confluent.flink/flink-datastream@1.20.3-cp1?type=jar">
      <dependency ref="pkg:maven/io.confluent.flink/flink-datastream-api@1.20.3-cp1?type=jar"/>
      <dependency ref="pkg:maven/io.confluent.flink/flink-streaming-java@1.20.3-cp1?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/io.confluent.flink/flink-datastream-api@1.20.3-cp1?type=jar">
      <dependency ref="pkg:maven/io.confluent.flink/flink-core-api@1.20.3-cp1?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/io.confluent.flink/flink-connector-files@1.20.3-cp1?type=jar">
      <dependency ref="pkg:maven/io.confluent.flink/flink-file-sink-common@1.20.3-cp1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.flink/flink-connector-kafka@3.0.0-1.17?type=jar">
      <dependency ref="pkg:maven/org.apache.flink/flink-connector-base@1.17.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.kafka/kafka-clients@3.2.3?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-force-shading@17.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.flink/flink-connector-base@1.17.0?type=jar"/>
    <dependency ref="pkg:maven/org.apache.kafka/kafka-clients@3.2.3?type=jar">
      <dependency ref="pkg:maven/com.github.luben/zstd-jni@1.5.2-1?type=jar"/>
      <dependency ref="pkg:maven/org.lz4/lz4-java@1.8.0?type=jar"/>
      <dependency ref="pkg:maven/org.xerial.snappy/snappy-java@1.1.10.4?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.github.luben/zstd-jni@1.5.2-1?type=jar"/>
    <dependency ref="pkg:maven/org.apache.flink/flink-shaded-force-shading@17.0?type=jar"/>
    <dependency ref="pkg:maven/io.confluent.flink/flink-statebackend-rocksdb@1.20.3-cp1?type=jar">
      <dependency ref="pkg:maven/io.confluent.flink/frocksdbjni@6.20.3-confluent-2.0-cp1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-guava@31.1-jre-17.0?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/io.confluent.flink/frocksdbjni@6.20.3-confluent-2.0-cp1?type=jar"/>
    <dependency ref="pkg:maven/org.jcuda/jcuda@10.0.0?type=jar"/>
    <dependency ref="pkg:maven/org.jcuda/jcublas@10.0.0?type=jar">
      <dependency ref="pkg:maven/org.jcuda/jcuda@10.0.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-slf4j-impl@2.24.3?type=jar">
      <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-api@2.24.3?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-core@2.24.3?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-api@2.24.3?type=jar"/>
    <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-core@2.24.3?type=jar">
      <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-api@2.24.3?type=jar"/>
    </dependency>
  </dependencies>
</bom>
