2026-09-30T10:11:22Z OWASP Foundation CycloneDX Maven plugin 2.7.7 436dfb24c63a322708e4a5143d8543af 3ef2e8728dc9eff2f129c34057e46e9d2b10629a c185b79bf0f9264f43bc8c222c44db67bea275bb727e3327cf9aea6bf45292c9 41488733e31e6c5315327dcc86187c2b9a6b96cd08f7e2157ce130688afde29c313fc6a73edb8a76333a930c78874aa2eac874448920030c0f7af0ac05e65ced f9462f86240fd9fc0942f34981e6d2371f252aa1a4e5e8c3c14e7f0f1a4e4de69ef972e51cf09a749afb6d97c13e67ed c755af6239348bc7dd1e1e6b5f14f7cf7e1560d689b252d9610cd865fa4b419d0b8e26260731dfc5da2176b6e706b414 309aac91005470c9c834354ab918759e2ae7ec52fc1676002621a5bbdf3b7827 c634570dcf8302e61005e5fa91a9a0d9b81542f731967b3c9f6d3ef89e3b945bd36d7ab69e2ebad8124b9c05da504361c8b36a8ce528d844409eeb7df4eea6ce The Apache Software Foundation io.confluent.flink flink-metrics-graphite 2.1.3-cp3 The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users. Apache-2.0 pkg:maven/io.confluent.flink/flink-metrics-graphite@2.1.3-cp3?type=jar https://flink.apache.org/flink-metrics/flink-metrics-graphites3://cp-flink-staging-654654529379-us-west-2/maven-staging/d188c4989bcdbf8e885c321b60c5fd3ad17a9ed1https://mail-archives.apache.org/mod_mbox/www-announce/https://github.com/apache/flink/flink-metrics/flink-metrics-graphite makeBom compile,provided,runtime,system The Apache Software Foundation io.confluent.flink flink-annotations 2.1.3-cp3 The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users. required cbe2e376d5f6c919543a9af295f81496 9a4ca90663cf1fe8c284b75dfe0c32fd7f81a9d1 3210e036fbda0ce2a7585f7a1d7371ef61acb7afc3d084fc645546f864cbe2a2 e415ef27c6dc40b01264995fb0163ac26e7faed2aec547a8e8ade1901086252ef883c877345bba964d170e9952689c99f1963e86bd30eb7389af5f9662709792 cf245bd79e4d4a1c1a305a297df633170fcc072a7487e5bb4d06da2e05e04db773291030c6226b41e0aa08719b739c17 d8b11f2d85a1b2f7e9629ff6b542c0bda618ea6f0d67531f2f567c9b8c419a7daeb234555d66f47c10f6afc2e0d4e790 6bc45e95c6df2acdaf76be960fe2785c693c33b4becdd7ad02c65249fd3bb297 f086ac672d97b384fd128f414375b223428f294324d6ffec3ba237cb395558398c7fd676a35256a45f765f4e19b5af2eab99057489ea410079ca722533ede1e5 Apache-2.0 pkg:maven/io.confluent.flink/flink-annotations@2.1.3-cp3?type=jar https://flink.apache.org/flink-annotationss3://cp-flink-staging-654654529379-us-west-2/maven-staging/d188c4989bcdbf8e885c321b60c5fd3ad17a9ed1https://mail-archives.apache.org/mod_mbox/www-announce/https://github.com/apache/flink/flink-annotations The Apache Software Foundation io.confluent.flink flink-metrics-core 2.1.3-cp3 The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users. required ec2267a1ae814856692286ac0a20e5db 3b8359b73f0bb219def335ca3d485bab24c7c133 f7be94d651eafdbec2b97dffeeaff2279eadceae846363f3acd5ad442a98a770 f474cc7b8520fbf9192a1bcad4c994dedbb052272c258e99bd0e79d4db4249836c06c1e0c62085975942094f7a085f5f95d9034b8818b8240de588ef39d6ba3a 21e17ed1f39a1f61b95c37779e1afa46be8a012a454179017d96558ce7319836c636e9ae766cd4d77e381487c6b9214a 008045650ef7c697095c3f791a401151bc349501be3dcdcbee5cfebdd555e0fcb3fd54d1b3d93c7eee116276c8b2cc61 0b8d4e107c4c6636e4cadd098b909c836e689c7a6553af3bbc0dafd6e5a79782 29748cad4d79706d1efd35594949d5bc471c031d69556060081f113174b70a6a3866444a14e506539bf2d86867938197ee218ce97c63b329b67e36fbeb940251 Apache-2.0 pkg:maven/io.confluent.flink/flink-metrics-core@2.1.3-cp3?type=jar https://flink.apache.org/flink-metrics/flink-metrics-cores3://cp-flink-staging-654654529379-us-west-2/maven-staging/d188c4989bcdbf8e885c321b60c5fd3ad17a9ed1https://mail-archives.apache.org/mod_mbox/www-announce/https://github.com/apache/flink/flink-metrics/flink-metrics-core The Apache Software Foundation io.confluent.flink flink-metrics-dropwizard 2.1.3-cp3 The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users. required 08794c1c7a3f194fad12495a3be49eed 6dc49b6abddc2c11a3b9590ca0a255f2aa67a0ce 80e2e3a21d321cfcc5620104e48d760811a4753fc9d6d43327a27f3de033926e 83e6b4a5470f938be261456c89d26c914a7e1074998c8be4d283a7b966df8294a4fd99723d3412f2495ba26dea1de3e57577dfd772d4e53ffe8c86f7d62650b2 7720bccb479167db6e1aebf3d84aa7d8263bce22d14549e79ae78531ed06a433a5e6272f585bfeb19faf849a8daa2d12 4b74edf40f1da89ae2dd8d01c25ef576d2114dae6f98063cabc9772329cbb8cbb0c151b8d2c499e92f4c3c85f413fcce 203318aaab37f600bb2ed75ce082145d8d2bdf9b561eb23c0edcc575dbd571a4 c1b089c3075f135eca9c0b13ba1874c219faba0a1315dcb28373cbc371de7520448ed8b01a5e2d2021973d4e9b0ab9dc986751f6e6e2ca4fff63795be3a649a5 Apache-2.0 pkg:maven/io.confluent.flink/flink-metrics-dropwizard@2.1.3-cp3?type=jar https://flink.apache.org/flink-metrics/flink-metrics-dropwizards3://cp-flink-staging-654654529379-us-west-2/maven-staging/d188c4989bcdbf8e885c321b60c5fd3ad17a9ed1https://mail-archives.apache.org/mod_mbox/www-announce/https://github.com/apache/flink/flink-metrics/flink-metrics-dropwizard io.dropwizard.metrics metrics-core 3.2.6 Metrics is a Java library which gives you unparalleled insight into what your code does in production. Metrics provides a powerful toolkit of ways to measure the behavior of critical components in your production environment. required 641716ee081aeaa016415019c74fb447 62fe170cffeded1cef60e9e3402a93b45ce14327 891174c5230476e1950a286169672002978562ebdf5c85f0199ecae1bd030f9f 91b170d541e2da3cf2482e795422b8c0c2890e87823feed2d9e16ea22ccf61ec1cc759d974f66e987f884f699551997574fb6c26f377c1136d930bc10778e74c 47d7ba837dccb5596cbbce45c4514dc53c74ee9e0751954524bd437350574d375cb96a66a1175aae52296f58c401b142 edc589029f0f01e5a7f47395b338c5e594e2564050874fbe94bd032dc0fc7a0053972c4eb4a61324a1ba6a8eb71ee93e 0b8c9c0f8d1d5dac61aa1e8316acaafafb2406528fa836680262d0c3f48ccf8e c1da107b3cafb74efb522ab0ea6b8a931f094719340cfd33e7bfffe5809b89cf635e964d05a4081508dc40324836d29155307772464151c60498da33dd739fac Apache-2.0 https://www.apache.org/licenses/LICENSE-2.0 pkg:maven/io.dropwizard.metrics/metrics-core@3.2.6?type=jar http://metrics.dropwizard.io/metrics-core/http://oss.sonatype.org/service/local/staging/deploy/maven2/http://github.com/dropwizard/metrics/issues#issue/http://github.com/dropwizard/metrics/metrics-core/ io.dropwizard.metrics metrics-graphite 3.2.6 A reporter for Metrics which announces measurements to a Graphite server. required b11ba36a127846789cce9d847bba4094 ecbc470e9097bb3d7ff0232cca47f3badde2e20b 8c16d0546e8fc5ee7c149ce4e75bf6080d846d869d13130d9ade3b9b0df547ac 2e4445b97fc6cd7cc6b0cd0974e80c857faa8556c53de6727778e6c5037585e0e7d459248e78927a6bd14ed3acc2f965419a1519dca777e8bbe8d71aa7375d6b 8ec3a5866ef2ee679320ceda36d9b9a4f0a0442a0f51c25c92e36544f61c435d918c373a9c22ac0a8e21f48cf526f482 c143ab66f9ed4fab2db7f1971c19b83c6eb5d942e497b807b35cc31c25b545c5acb24c79cb3b13d6e31a5be229696e7a 62d454eaf5276ef76d464a4148e022eb6eb02e538105d9a53cbaae41392e2e3d 284c5ccaf91cd554528a6e7c387bcdf4ceac2510359b90c6062424319f91a125a8827dc55c3a0a59247d8cb9f96550422ac6de3bf187b754925db67cd29d19fd Apache-2.0 https://www.apache.org/licenses/LICENSE-2.0 pkg:maven/io.dropwizard.metrics/metrics-graphite@3.2.6?type=jar http://metrics.dropwizard.io/metrics-graphite/http://oss.sonatype.org/service/local/staging/deploy/maven2/http://github.com/dropwizard/metrics/issues#issue/http://github.com/dropwizard/metrics/metrics-graphite/ QOS.ch org.slf4j slf4j-api 1.7.36 The slf4j API required 872da51f5de7f3923da4de871d57fd85 6c62681a2f655b49963a5983b8b0950a6120ae14 d3ef575e3e4979678dc01bf1dcce51021493b4d11fb7f1be8ad982877c16a1c0 f9b033fc019a44f98b16048da7e2b59edd4a6a527ba60e358f65ab88e0afae03a9340f1b3e8a543d49fa542290f499c5594259affa1ff3e6e7bf3b428d4c610b 2b14ad035877087157e379d3277dcdcd79e58d6bdb147c47d29e377d75ce53ad42cafbf22f5fb7827c7e946ff4876b9a 3bc3110dafb8d5be16a39f3b2671a466463cd99eb39610c0e4719a7bf2d928f2ea213c734887c6926a07c4cca7769e4b ba2608179fcf46e2291a90b9cbb4aa30d718e481f59c350cc21c73b88d826881 14c4edcd19702ef607d78826839d8a6d3a39157df54b89a801d3d3cbbe1307131a77671b041c761122730fb1387888c5ec2e46bdd80e1cb07f8f144676441824 MIT https://opensource.org/licenses/MIT pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar http://www.slf4j.orghttps://oss.sonatype.org/service/local/staging/deploy/maven2/https://github.com/qos-ch/slf4j/slf4j-api com.google.code.findbugs jsr305 1.3.9 JSR305 Annotations for Findbugs optional 1d5a772e400b04bb67a7ef4a0e0996d8 40719ea6961c0cb6afaeb6a921eaa1f6afd4cfdf 905721a0eea90a81534abb7ee6ef4ea2e5e645fa1def0a5cd88402df1b46c9ed 06da282cfd8e30d9f8cf17702b8709172b00e22b75a627a1d85f8989615b8a1a401bc25d9aee7b14aed1d9b5df73bf2ea8d66f9c8468d9577c29f0ccfa2cc70a 56e6b41ef62eb5edfed0203802cefae9c2df86388148e420bb0c687abb2b80e14d5c2a82d5b35dce4badaf148f94eada 58c3bf89fa1afa75c2c5078159fd28e27b2273d437f26aaaa7391310b6f0823f3cf476a24f5631c0881f3f7e946d99be c333ea5faedfa78e0614a2620438d5724eab093df4e960918391b6a44c2915b0 67ec31448e156cc72dd036060b460bb2667a13b1cbe500b6b7eed3235b1994b44c39f440ebd07b21ec9595b166ad61121d4f6a132b5b313c558ab21b72599425 Apache-2.0 pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar http://findbugs.sourceforge.net/http://findbugs.googlecode.com/svn/trunk/ The Apache Software Foundation io.confluent.flink.shaded flink-shaded-force-shading 20.0-cp3 The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users. optional 703852a2a4f9bbd6ab3cd717774ead30 e8a1205b878f171b60e6c96acfd7e7695f52d5fb ec8cc080e167fd165babaa88606a44d56f8dfe96988254e14cbdc4bc61c17959 4108f6a343fc972707fe1c940216f630c39959e417f821321455def20376f2aee1797657cbd69f0eb9c5f5cca9f82297c4736feb67a08a192995924b8e5422cd 1797cfbe9f315123e1c9104cd28ff2a0f283db2185a150200e81e16c4f3bf2a933d54855fb29e7b3c95f79b228768233 855d9938f3b14033fbb61de1679d0f452f40014ffc5f0a662a177d6469136d2df5c47496a02856c697a4b8672528f866 2670a0179eff2c71dab16f02c43066c937a145a25f172eb730f761e9ed2c7a18 a163da1cd000206420fe01d6cdf5df50925d65934cefb3c4e0329bfd47813ef2ba58f0cab563bac68ad054158227aa1f2a04cc8c3ab008455c21d573aedd6e21 Apache-2.0 pkg:maven/io.confluent.flink.shaded/flink-shaded-force-shading@20.0-cp3?type=jar http://flink.apache.org/flink-shaded-force-shadinghttps://repository.apache.org/service/local/staging/deploy/maven2https://mail-archives.apache.org/mod_mbox/www-announce/https://github.com/apache/flink-shaded/flink-shaded-force-shading