{ "bomFormat" : "CycloneDX", "specVersion" : "1.4", "serialNumber" : "urn:uuid:d8fb830e-d995-464e-b422-2035ece3778c", "version" : 1, "metadata" : { "timestamp" : "2026-09-30T10:03:11Z", "tools" : [ { "vendor" : "OWASP Foundation", "name" : "CycloneDX Maven plugin", "version" : "2.7.7", "hashes" : [ { "alg" : "MD5", "content" : "436dfb24c63a322708e4a5143d8543af" }, { "alg" : "SHA-1", "content" : "3ef2e8728dc9eff2f129c34057e46e9d2b10629a" }, { "alg" : "SHA-256", "content" : "c185b79bf0f9264f43bc8c222c44db67bea275bb727e3327cf9aea6bf45292c9" }, { "alg" : "SHA-512", "content" : "41488733e31e6c5315327dcc86187c2b9a6b96cd08f7e2157ce130688afde29c313fc6a73edb8a76333a930c78874aa2eac874448920030c0f7af0ac05e65ced" }, { "alg" : "SHA-384", "content" : "f9462f86240fd9fc0942f34981e6d2371f252aa1a4e5e8c3c14e7f0f1a4e4de69ef972e51cf09a749afb6d97c13e67ed" }, { "alg" : "SHA3-384", "content" : "c755af6239348bc7dd1e1e6b5f14f7cf7e1560d689b252d9610cd865fa4b419d0b8e26260731dfc5da2176b6e706b414" }, { "alg" : "SHA3-256", "content" : "309aac91005470c9c834354ab918759e2ae7ec52fc1676002621a5bbdf3b7827" }, { "alg" : "SHA3-512", "content" : "c634570dcf8302e61005e5fa91a9a0d9b81542f731967b3c9f6d3ef89e3b945bd36d7ab69e2ebad8124b9c05da504361c8b36a8ce528d844409eeb7df4eea6ce" } ] } ], "component" : { "publisher" : "The Apache Software Foundation", "group" : "io.confluent.flink", "name" : "flink-metrics-prometheus", "version" : "1.20.5-cp3", "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.", "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/io.confluent.flink/flink-metrics-prometheus@1.20.5-cp3?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://flink.apache.org/flink-metrics/flink-metrics-prometheus" }, { "type" : "distribution", "url" : "s3://cp-flink-staging-654654529379-us-west-2/maven-staging/7e31a2bb240685e814d38ceb5aab9211f88e5660" }, { "type" : "mailing-list", "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/" }, { "type" : "vcs", "url" : "https://github.com/apache/flink/flink-metrics/flink-metrics-prometheus" } ], "type" : "library", "bom-ref" : "pkg:maven/io.confluent.flink/flink-metrics-prometheus@1.20.5-cp3?type=jar" }, "properties" : [ { "name" : "maven.goal", "value" : "makeBom" }, { "name" : "maven.scopes", "value" : "compile,provided,runtime,system" } ] }, "components" : [ { "publisher" : "The Apache Software Foundation", "group" : "io.confluent.flink", "name" : "flink-annotations", "version" : "1.20.5-cp3", "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "bd495be2268e10ff7682841288a50468" }, { "alg" : "SHA-1", "content" : "016b69ec63ac321d43c87558c046f492d969e850" }, { "alg" : "SHA-256", "content" : "fd5603cdb6e0a8fc1b749917c9db36ec708490140ccffc357efb6480590fd721" }, { "alg" : "SHA-512", "content" : "20cad49470802ce2b41a284f321b48e3e3dbbb15214adf35e3227a534f50bdd9dbe321ef0a265ea5d3117c2ef5706287169e68ab633509e90d9318e08e60138b" }, { "alg" : "SHA-384", "content" : "6ca2e21e95d963f2f186ce5c8c4d981ea3e85caa646c7cd648419fbe9ca67c2710577c68249ed1f121b0ae23492fa7f7" }, { "alg" : "SHA3-384", "content" : "966bb0bfe30958cfb71152c09125267b61476422df230c69420bf98c7cdbc855c1faade59eccfa78203b866e33897adc" }, { "alg" : "SHA3-256", "content" : "0156398c8f8253c357117bc3033186ed54ffa21c016f73196842f02c27f7d8c4" }, { "alg" : "SHA3-512", "content" : "e7c8da4562e6dd584fd5d8f87507be0343ead4c6f861eb82cb56652beb10371b2e374af3046c98258a73015e55e2f73a280d871d46ec5b5273044b4e102f2652" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/io.confluent.flink/flink-annotations@1.20.5-cp3?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://flink.apache.org/flink-annotations" }, { "type" : "distribution", "url" : "s3://cp-flink-staging-654654529379-us-west-2/maven-staging/7e31a2bb240685e814d38ceb5aab9211f88e5660" }, { "type" : "mailing-list", "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/" }, { "type" : "vcs", "url" : "https://github.com/apache/flink/flink-annotations" } ], "type" : "library", "bom-ref" : "pkg:maven/io.confluent.flink/flink-annotations@1.20.5-cp3?type=jar" }, { "publisher" : "The Apache Software Foundation", "group" : "io.confluent.flink", "name" : "flink-core", "version" : "1.20.5-cp3", "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "3e994eab502d75b1f6dadd3bc5cc045c" }, { "alg" : "SHA-1", "content" : "f9253d2842f82e3d575fbabb1dcfaacd592d69bb" }, { "alg" : "SHA-256", "content" : "ff32b909f0329f4763ea7b76137fa868e24dac98d4d33cceb79e10c262f2f3d7" }, { "alg" : "SHA-512", "content" : "5de21363bf1f0a25a576d3f58ffbef8f2da676420f4df96d946830c7ea0a7acfd89bf5c56df0b8440ab17185c0bc2a5946894687fcd08b90b588994d792d614c" }, { "alg" : "SHA-384", "content" : "156bda0061f26e2c365d0df2ae6f296a868f7cf44b31047c0280e6ef00189348edcf63a39870119e8c7ac5ca2478bf43" }, { "alg" : "SHA3-384", "content" : "60ea7d766cd16ebad18c7d6662ae63620b44dd6085cbaf087e0726280efb734f409c7d03b8a0b290b0619c3533bd981c" }, { "alg" : "SHA3-256", "content" : "3e4ce3ab406f8d649ba6e3909aed5553537d54e729cc423564e349d7fd5eb5d5" }, { "alg" : "SHA3-512", "content" : "251eb50c562eae0e83c580d23616cd95df54b92743a6173c6d6b3a5073a17661fff59d1efa82cc2b1357b6fe18f979a1856317366da69163f890ad5d49e93ad1" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/io.confluent.flink/flink-core@1.20.5-cp3?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://flink.apache.org/flink-core" }, { "type" : "distribution", "url" : "s3://cp-flink-staging-654654529379-us-west-2/maven-staging/7e31a2bb240685e814d38ceb5aab9211f88e5660" }, { "type" : "mailing-list", "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/" }, { "type" : "vcs", "url" : "https://github.com/apache/flink/flink-core" } ], "type" : "library", "bom-ref" : "pkg:maven/io.confluent.flink/flink-core@1.20.5-cp3?type=jar" }, { "publisher" : "The Apache Software Foundation", "group" : "io.confluent.flink", "name" : "flink-core-api", "version" : "1.20.5-cp3", "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.", "hashes" : [ { "alg" : "MD5", "content" : "30932ceec85725c90eb71fb22c88d2b3" }, { "alg" : "SHA-1", "content" : "e7725544cab598a8f81a0c9a73386fff3dadd833" }, { "alg" : "SHA-256", "content" : "d4fdea5a9f26409509de88c874007082063fb9c94cf94abd1fdd3a03f3a7ed95" }, { "alg" : "SHA-512", "content" : "ecf8b09b01609cd871c0513eba84573f6765b3403b2684a088a07997a9a844eb3f54c676fb8f456d157e66441336902c1766d4670e699d7c85dd6666457c01d5" }, { "alg" : "SHA-384", "content" : "6d540983fdfc587f36fb13d973136289adb3140fe1ad638ce91460ec870e922b26d8a1072c3026b60f1529d12948e41c" }, { "alg" : "SHA3-384", "content" : "a478a2ea23899966dd47e7ef197f6557d54990c5f7ad2d3b908014eafcfda3d86a5f1dad1cae33840d8efd5ae1be86e4" }, { "alg" : "SHA3-256", "content" : "df9aa7a4f86e14dccfb2e926071cf97274ded3eea508923aa6bc2a4e64791cef" }, { "alg" : "SHA3-512", "content" : "ecaf6ae30f71cf89197e87a8ba59b81a8938fb244f460622be32f58c83379503233bed5cae45ee941f8680c8513603dda1ffb5caeafd03ff321db8b67cffb68e" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/io.confluent.flink/flink-core-api@1.20.5-cp3?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://flink.apache.org/flink-core-api" }, { "type" : "distribution", "url" : "s3://cp-flink-staging-654654529379-us-west-2/maven-staging/7e31a2bb240685e814d38ceb5aab9211f88e5660" }, { "type" : "mailing-list", "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/" }, { "type" : "vcs", "url" : "https://github.com/apache/flink/flink-core-api" } ], "type" : "library", "bom-ref" : "pkg:maven/io.confluent.flink/flink-core-api@1.20.5-cp3?type=jar" }, { "publisher" : "The Apache Software Foundation", "group" : "io.confluent.flink.shaded", "name" : "flink-shaded-asm-9", "version" : "9.6-20.0-cp3", "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.", "hashes" : [ { "alg" : "MD5", "content" : "ae4e82c0a22005a904be1abea935cab7" }, { "alg" : "SHA-1", "content" : "7aa7ebb1b9f9f44c223f446148aaf4ad3eb2cdd8" }, { "alg" : "SHA-256", "content" : "d94d64f424828729af896abd9a32beb33f4cdcd356763748624cf7c535cf0ac8" }, { "alg" : "SHA-512", "content" : "199c504ed84adb90ad7acfbdd653b0719de8d748b289e130c67a99a9bedde2eaf6442d01b7a5b8c2cf59aa9a73b63d581df9871a9bf1db33d261fd31884ed9f1" }, { "alg" : "SHA-384", "content" : "d2872d6a4556da13f03be0d563604b870b94e16dce467b724718b5bcdd67cd7793f76f538d8f5df570957a398770c6e0" }, { "alg" : "SHA3-384", "content" : "6ae173dcf8af5fb45567bcdfa141a3a392d62779a50c66b0c60ccf6a2cbe0900a69ad573d3862bdef841a69e68f785ca" }, { "alg" : "SHA3-256", "content" : "541a0f46cf8d213b8184305d275559fe7bfd64a119b86f98396529a334334f48" }, { "alg" : "SHA3-512", "content" : "b9e86b6fa980b028f17a53259f5bdfec71557f122a4b47b0603aed6c626e634976ac1fe923b5c4dd3c12cdaae74d979e8ef84906ea95adc977d7d43bb6a675f3" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/io.confluent.flink.shaded/flink-shaded-asm-9@9.6-20.0-cp3?type=jar", "externalReferences" : [ { "type" : "website", "url" : "http://flink.apache.org/flink-shaded-asm-9" }, { "type" : "distribution", "url" : "https://repository.apache.org/service/local/staging/deploy/maven2" }, { "type" : "mailing-list", "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/" }, { "type" : "vcs", "url" : "https://github.com/apache/flink-shaded/flink-shaded-asm-9" } ], "type" : "library", "bom-ref" : "pkg:maven/io.confluent.flink.shaded/flink-shaded-asm-9@9.6-20.0-cp3?type=jar" }, { "publisher" : "The Apache Software Foundation", "group" : "io.confluent.flink.shaded", "name" : "flink-shaded-jackson", "version" : "2.18.10-20.0-cp3", "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.", "hashes" : [ { "alg" : "MD5", "content" : "b197e67cae50c94157f513aa4f345d39" }, { "alg" : "SHA-1", "content" : "ffe1787c22849a05dcfd74054d771a3160c19018" }, { "alg" : "SHA-256", "content" : "1ac285974137de5f1565b97c5548b35532cbe90b749fbc5fcff26ceebfc61aec" }, { "alg" : "SHA-512", "content" : "f0f696b1ee2efd99e3c3ca8e48840c4c499bf2c6a1cf700417054b9696319324db4088cb9ee227c53684020478fcaadebf4173e59c7a29c744ee7bfe39857541" }, { "alg" : "SHA-384", "content" : "0382e77323583746e3de9d143506aff6a5ded88e3a0af29875acc27cfb068f2c6c53cff0efdb092342824428a2a9a820" }, { "alg" : "SHA3-384", "content" : "80c5c71f775a78ca1172a5f82f07b5207ab0e5eba4b211100c31f6d887b261435cc3b98f507695411fece80406edf565" }, { "alg" : "SHA3-256", "content" : "1f6f4dc0dd3bb7f0cee390fac88dfea70914a2dbc9d5a0ccefc2c9ab442076bf" }, { "alg" : "SHA3-512", "content" : "54504d2bce8014c1f8a632179d31e059a4ec5a058a3b30612e4af00030458902aa57c02e5a77e1d740edb3e35833f5243316076254f145cf8cd0d375bd1eb496" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/io.confluent.flink.shaded/flink-shaded-jackson@2.18.10-20.0-cp3?type=jar", "externalReferences" : [ { "type" : "website", "url" : "http://flink.apache.org/flink-shaded-jackson-parent/flink-shaded-jackson" }, { "type" : "distribution", "url" : "https://repository.apache.org/service/local/staging/deploy/maven2" }, { "type" : "mailing-list", "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/" }, { "type" : "vcs", "url" : "https://github.com/apache/flink-shaded/flink-shaded-jackson-parent/flink-shaded-jackson" } ], "type" : "library", "bom-ref" : "pkg:maven/io.confluent.flink.shaded/flink-shaded-jackson@2.18.10-20.0-cp3?type=jar" }, { "publisher" : "The Apache Software Foundation", "group" : "org.apache.commons", "name" : "commons-lang3", "version" : "3.19.0", "description" : "Apache Commons Lang, a package of Java utility classes for the classes that are in java.lang's hierarchy, or are considered to be so standard as to justify existence in java.lang. The code is tested using the latest revision of the JDK for supported LTS releases: 8, 11, 17 and 21 currently. See https://github.com/apache/commons-lang/blob/master/.github/workflows/maven.yml Please ensure your build environment is up-to-date and kindly report any build issues.", "hashes" : [ { "alg" : "MD5", "content" : "2ac2db154e365d55d167ec1215125a3a" }, { "alg" : "SHA-1", "content" : "d6524b169a6574cd253760c472d419b47bfd37e6" }, { "alg" : "SHA-256", "content" : "32733ab4bc90b45b63eb72677d886961003fd4ed113e07b1028f9877cb2ac735" }, { "alg" : "SHA-512", "content" : "24cf9bfc7c32736277d2a1e82a455d004ec7d4989e8d0dc2831c910a04b6ff8b30ca9c49ec25562cf0b7f1ffc27726e7510a54bb99e75a3be83ddf6030c37978" }, { "alg" : "SHA-384", "content" : "90c567c8f42b58d0f3f24233260258e7e3bae1f8284ee33f9730e1cecc4fe2c98b7d6ebbba2a6598b50d444ddfa70722" }, { "alg" : "SHA3-384", "content" : "397a7aafd4f66cdec80cf4682a72db0873b3fc6a3db3cdd7be747b24ae13804dfc290e2441a115d50b0add9ce76af2dd" }, { "alg" : "SHA3-256", "content" : "4c0809e7ff0474603b0a1bcdf2f745cec9233ffdc6c652b077d93f2630d52f8b" }, { "alg" : "SHA3-512", "content" : "25564027878618e00dc24ea5caf8365a9396c25597aaf4ea8a37997fd699dabdf4b6f9ce4c1c9f86abedb4afa26041ac234d238c63ffecc207ce2068a6271956" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0", "url" : "https://www.apache.org/licenses/LICENSE-2.0" } } ], "purl" : "pkg:maven/org.apache.commons/commons-lang3@3.19.0?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://commons.apache.org/proper/commons-lang/" }, { "type" : "build-system", "url" : "https://github.com/apache/commons-lang/actions" }, { "type" : "distribution", "url" : "https://repository.apache.org/service/local/staging/deploy/maven2" }, { "type" : "issue-tracker", "url" : "https://issues.apache.org/jira/browse/LANG" }, { "type" : "mailing-list", "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/" }, { "type" : "vcs", "url" : "https://gitbox.apache.org/repos/asf/commons-lang.git" } ], "type" : "library", "bom-ref" : "pkg:maven/org.apache.commons/commons-lang3@3.19.0?type=jar" }, { "group" : "org.snakeyaml", "name" : "snakeyaml-engine", "version" : "2.6", "description" : "Core YAML 1.2 parser and emitter for Java", "hashes" : [ { "alg" : "MD5", "content" : "719bcfb9f917992d0a99a6f7106d8466" }, { "alg" : "SHA-1", "content" : "235a7e571b33eda1a81e0f73a3173ef95dd020e5" }, { "alg" : "SHA-256", "content" : "2652199af40c9aa2f1782400d2dfbbf4e5226208c4e05ddd4059c3d6d9cd1505" }, { "alg" : "SHA-512", "content" : "c3b5e87ce323b37bcd9e65d060157ebb26d116b5dac30c6eaa185b30aa24c0be8dfd0ad604a9a12ce7010acadee54a9cea9f065cd2f434eeaed7bccce2e14a7d" }, { "alg" : "SHA-384", "content" : "edfc3c9a95cc2fa524a322f20ec034ec16b3fad950a58bfd1ed774eaaab946304cddc5e9ea4e117a899ec568ba7fa620" }, { "alg" : "SHA3-384", "content" : "63b9e0ed448431a1d4b34a4b0b97b65c2c7be6ef46f1ce3b10191373e3339422f9c06bc846ae861a982c3c3618abd9c6" }, { "alg" : "SHA3-256", "content" : "19ce75167267903be79122e149ede2916c3e07bab0658db21ab40864e8c920cd" }, { "alg" : "SHA3-512", "content" : "7777f37097a6951dafe18fb038d087e7fe0924bfb2a10c66a76a57d95aa65341d4b674c6ff1d9d453c436ffcb50e281c2bedc854ce687fefc30c9595b7352c8a" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/org.snakeyaml/snakeyaml-engine@2.6?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://bitbucket.org/snakeyaml/snakeyaml-engine" }, { "type" : "distribution", "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type" : "issue-tracker", "url" : "https://bitbucket.org/snakeyaml/snakeyaml-engine/issues" }, { "type" : "vcs", "url" : "https://bitbucket.org/snakeyaml/snakeyaml-engine/src" } ], "type" : "library", "bom-ref" : "pkg:maven/org.snakeyaml/snakeyaml-engine@2.6?type=jar" }, { "publisher" : "The Apache Software Foundation", "group" : "org.apache.commons", "name" : "commons-text", "version" : "1.10.0", "description" : "Apache Commons Text is a library focused on algorithms working on strings.", "hashes" : [ { "alg" : "MD5", "content" : "4afc9bfa2d31dbf7330c98fcc954b892" }, { "alg" : "SHA-1", "content" : "3363381aef8cef2dbc1023b3e3a9433b08b64e01" }, { "alg" : "SHA-256", "content" : "770cd903fa7b604d1f7ef7ba17f84108667294b2b478be8ed1af3bffb4ae0018" }, { "alg" : "SHA-512", "content" : "afd836a1094449e0a791fee67363666c47b6d24acff353a5089b837b332c0f4af89565c354682521e37062d20e6b52d70c77bb4f24cca9b9532c274fc708a831" }, { "alg" : "SHA-384", "content" : "06c56e6e513dd77cf10d0da46cdea08c34e220e81fa024735b668c6650df4234e564fe865ff5cafea963f56b1e8ffd4a" }, { "alg" : "SHA3-384", "content" : "f09065ed066c25debf8c78cbb0bcc738e1ea283302ec992dcfb649acb90091cff879465c65a162e94534d454e3b4e9bb" }, { "alg" : "SHA3-256", "content" : "0b59c567164bb755f2353b78ba66744000a8c4b35e1df05255b080a21c3a3dd5" }, { "alg" : "SHA3-512", "content" : "f0fbce02a862b70f472a27d0722c54ac111ca2eb94584b8b0b73d1926aec26047cd92542ad0b3cf980a6825077587f41b194aa93d6f6350d1b87e59e8df1be7c" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://commons.apache.org/proper/commons-text" }, { "type" : "build-system", "url" : "https://github.com/apache/commons-parent/actions" }, { "type" : "distribution", "url" : "https://repository.apache.org/service/local/staging/deploy/maven2" }, { "type" : "issue-tracker", "url" : "https://issues.apache.org/jira/browse/TEXT" }, { "type" : "mailing-list", "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/" }, { "type" : "vcs", "url" : "https://gitbox.apache.org/repos/asf?p=commons-text.git" } ], "type" : "library", "bom-ref" : "pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar" }, { "group" : "com.esotericsoftware.kryo", "name" : "kryo", "version" : "2.24.0", "description" : "Fast, efficient Java serialization", "hashes" : [ { "alg" : "MD5", "content" : "6cf0fa5b5d4f6b8226fd4a4bfb7532b8" }, { "alg" : "SHA-1", "content" : "0c6b206e80cfd97e66a1364003724491c757b92f" }, { "alg" : "SHA-256", "content" : "7e56b32c635058f9aa2820f88919ab702d029cbcd15285da9992e36cc0ae52f2" }, { "alg" : "SHA-512", "content" : "a4c6ce768528a03c219cc6a41b22293f78e433c849c90391b64dda3f2376fd79951a89c5f4e6701bcbcb6eee9abffe2390cfb12dba3b885e4a3d411a26b78f40" }, { "alg" : "SHA-384", "content" : "678ad1b7f4d99910b8ff44a6c8f78ccae91f823161ce23de39077397352919b7257e1e6e0dea90900be973291ea19282" }, { "alg" : "SHA3-384", "content" : "671fc6aa9905f8131482e1d0f3fe26126562b13777893d51a66d0f84fc6f2aa3f13947e488ffba8f09c31a2cc0e9758a" }, { "alg" : "SHA3-256", "content" : "46e89d8f12cbead0fe29ad707d5dba96e880dacce2a6b374ac4bf1ced9f36a79" }, { "alg" : "SHA3-512", "content" : "c7cde437eef8343eccd4c5ecb8de5683529e3d4d8262e8cd1f7b7d0df9c632253b979737fd1b486314ec2728aee3a3782dee5d2032621485db4aa3b2a8262741" } ], "licenses" : [ { "license" : { "id" : "BSD-3-Clause" } } ], "purl" : "pkg:maven/com.esotericsoftware.kryo/kryo@2.24.0?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://github.com/EsotericSoftware/kryo" }, { "type" : "distribution", "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type" : "vcs", "url" : "https://github.com/EsotericSoftware/kryo" } ], "type" : "library", "bom-ref" : "pkg:maven/com.esotericsoftware.kryo/kryo@2.24.0?type=jar" }, { "group" : "com.esotericsoftware.minlog", "name" : "minlog", "version" : "1.2", "description" : "Minimal overhead Java logging", "hashes" : [ { "alg" : "MD5", "content" : "f7cfbdf63b67df0bbfa4c7cb260885bc" }, { "alg" : "SHA-1", "content" : "59bfcd171d82f9981a5e242b9e840191f650e209" }, { "alg" : "SHA-256", "content" : "a678cb1aa8f5d03d901c992c75741841d98a9bc3d55dad02e84d65315c4e60f2" }, { "alg" : "SHA-512", "content" : "7b4082766ad740d86708783f3b08780ed72dd18062aa9ba422c4b9016b332d2334ae511f50ef7d89e4eedbdac5cebc51ab6ddaf4d1eea857a3250eb5962f0d08" }, { "alg" : "SHA-384", "content" : "932a282a9c06864001f8212199e4be05543609adbd985c5f4517ee6eba734acd3fd8812213bc0c98af264637cbf9c78d" }, { "alg" : "SHA3-384", "content" : "f36e9f494611c85f59febfef9ce93fc68f1f17db881400456204c1f099e623e334d2f10b41018392877c8af13de7f59a" }, { "alg" : "SHA3-256", "content" : "37422ef85dce86abd8b14b4c9f7ad77261d728a472126c8eca38f356c98da395" }, { "alg" : "SHA3-512", "content" : "74ba47271899706a284e942482ff41649ffd93e57a29320732e57864c47f3f0431377130ca7afb5e64cc6b68d4e5a5cdfc38027966cda4b5e512e3ce02bd8a99" } ], "licenses" : [ { "license" : { "id" : "BSD-3-Clause" } } ], "purl" : "pkg:maven/com.esotericsoftware.minlog/minlog@1.2?type=jar", "externalReferences" : [ { "type" : "website", "url" : "http://code.google.com/p/minlog/" }, { "type" : "vcs", "url" : "http://minlog.googlecode.com/svn/" } ], "type" : "library", "bom-ref" : "pkg:maven/com.esotericsoftware.minlog/minlog@1.2?type=jar" }, { "publisher" : "The Apache Software Foundation", "group" : "commons-collections", "name" : "commons-collections", "version" : "3.2.2", "description" : "Types that extend and augment the Java Collections Framework.", "hashes" : [ { "alg" : "MD5", "content" : "f54a8510f834a1a57166970bfc982e94" }, { "alg" : "SHA-1", "content" : "8ad72fe39fa8c91eaaf12aadb21e0c3661fe26d5" }, { "alg" : "SHA-256", "content" : "eeeae917917144a68a741d4c0dff66aa5c5c5fd85593ff217bced3fc8ca783b8" }, { "alg" : "SHA-512", "content" : "51c72f9aca7726f3c387095e66be85a6df97c74b00a25434b89188c1b8eab6e2b55accf7b9bd412430d22bd09324dec076e300b3d1fa39fccad471f0f2a3da16" }, { "alg" : "SHA-384", "content" : "dd4e99b3314bd3c1a1ee26296615d9e44dadf7a1f8a7bbba44fb95121803d331e36d4cca4260e7609af78a47ba3e4073" }, { "alg" : "SHA3-384", "content" : "8ce03528e4a6e95c44283b56eca87e6a6d3bf1363411a55b538f4f9110cf7470581ea5c73925e877ddab08dba0603f40" }, { "alg" : "SHA3-256", "content" : "fd3d6134b5f07077b82ccf93d148dacf7c4ce5c971209510edd0e77e3e38c19e" }, { "alg" : "SHA3-512", "content" : "c2a523916fb7c7d55a05d5e3d9e9b33000733f4b20a71be174e4e093e3f06ea78ad831edd1505527da7388105f8647efb7d5666ba852c90b4e2d5bb74256efbc" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/commons-collections/commons-collections@3.2.2?type=jar", "externalReferences" : [ { "type" : "website", "url" : "http://commons.apache.org/collections/" }, { "type" : "build-system", "url" : "https://continuum-ci.apache.org/" }, { "type" : "distribution", "url" : "https://repository.apache.org/service/local/staging/deploy/maven2" }, { "type" : "issue-tracker", "url" : "http://issues.apache.org/jira/browse/COLLECTIONS" }, { "type" : "mailing-list", "url" : "http://mail-archives.apache.org/mod_mbox/commons-user/" }, { "type" : "vcs", "url" : "http://svn.apache.org/viewvc/commons/proper/collections/trunk" } ], "type" : "library", "bom-ref" : "pkg:maven/commons-collections/commons-collections@3.2.2?type=jar" }, { "publisher" : "The Apache Software Foundation", "group" : "org.apache.commons", "name" : "commons-compress", "version" : "1.26.0", "description" : "Apache Commons Compress defines an API for working with compression and archive formats. These include bzip2, gzip, pack200, LZMA, XZ, Snappy, traditional Unix Compress, DEFLATE, DEFLATE64, LZ4, Brotli, Zstandard and ar, cpio, jar, tar, zip, dump, 7z, arj.", "hashes" : [ { "alg" : "MD5", "content" : "cbc0bb8eca12b747ca21bf998d736e60" }, { "alg" : "SHA-1", "content" : "659feffdd12280201c8aacb8f7be94f9a883c824" }, { "alg" : "SHA-256", "content" : "051aceb8bbcc62d0f5b2b8ac72c53767f9c59bfbd050151e65bef6f51c8ed9c9" }, { "alg" : "SHA-512", "content" : "acbeaa2909b809cd561e7156df18340d96abacb179325622d73bdd6b82cb9b387d6fcb1a44d8195aad4e786da299289e17598a1d337b7c7d1c0bc610cc128714" }, { "alg" : "SHA-384", "content" : "052d4d0cd1929c4299dd9d37dd36eaea6ed2be6b04d6d83a94f8608a6d1138aa81f7a34f25113ac267e7ba25ce948c9a" }, { "alg" : "SHA3-384", "content" : "8b0bf441e8ce793fb6513bc07551cc48ab4507696c18e6037b0fcf35bc4e1eb3e44ed962e2d3765c86d4d912770aa53e" }, { "alg" : "SHA3-256", "content" : "e441768e06092053f4703844ec0c8f2b437e06e7c190d48fec9d7682beb94c40" }, { "alg" : "SHA3-512", "content" : "5984f9f08f83789555677f6800f25fa8e80a9eb2e4d46b5fb117b8efc24753644fa103a2f6b619827661a41677991bc827965172ef25f1313d8a59154e615e8d" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0", "url" : "https://www.apache.org/licenses/LICENSE-2.0" } } ], "purl" : "pkg:maven/org.apache.commons/commons-compress@1.26.0?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://commons.apache.org/proper/commons-compress/" }, { "type" : "build-system", "url" : "https://github.com/apache/commons-parent/actions" }, { "type" : "distribution", "url" : "https://repository.apache.org/service/local/staging/deploy/maven2" }, { "type" : "issue-tracker", "url" : "https://issues.apache.org/jira/browse/COMPRESS" }, { "type" : "mailing-list", "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/" }, { "type" : "vcs", "url" : "https://gitbox.apache.org/repos/asf?p=commons-compress.git" } ], "type" : "library", "bom-ref" : "pkg:maven/org.apache.commons/commons-compress@1.26.0?type=jar" }, { "publisher" : "The Apache Software Foundation", "group" : "org.apache.flink", "name" : "flink-shaded-guava", "version" : "31.1-jre-17.0", "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.", "hashes" : [ { "alg" : "MD5", "content" : "b8c5129f4164f8ee2086854bdb289690" }, { "alg" : "SHA-1", "content" : "00fa393c1db1308f4fb920f010f79c4c774e2f39" }, { "alg" : "SHA-256", "content" : "03442ae97c4ca34388568cbce0e67e9911b0137b2b3849dff7a550008d5a4336" }, { "alg" : "SHA-512", "content" : "15bb65f24054768915fbc29a95dfa93307b0babc39a02a204ae65eff44f259357b471fef9967b864b7a78e07d266933ce8e3eda8a866fcc73643cc38bcc5653f" }, { "alg" : "SHA-384", "content" : "c8e6f2630c0824bbd1902a25884f09c076efbbbe0265f5d3fb49370affcff81ee5dd8b7887ba4bf063915446b937117a" }, { "alg" : "SHA3-384", "content" : "a2ffbdbcfb8be61c43891fa19275a765b71e6830b110fa9ab77d46ac35527d2be0943d895767a70591895916963048c6" }, { "alg" : "SHA3-256", "content" : "5a73e8e370e9bb3d634495dade320f0b569f4ed307fc147cb8f3af547bb6b057" }, { "alg" : "SHA3-512", "content" : "abd1618c0568eee546f5b32314085bef40f8de74ffa5e52f0aa7a5bed82713142af8a1bdaf79f18e2210b79f8c3592276c54b2356594d19d8f56185ec9a457d5" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/org.apache.flink/flink-shaded-guava@31.1-jre-17.0?type=jar", "externalReferences" : [ { "type" : "website", "url" : "http://flink.apache.org/flink-shaded-guava" }, { "type" : "distribution", "url" : "https://repository.apache.org/service/local/staging/deploy/maven2" }, { "type" : "mailing-list", "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/" }, { "type" : "vcs", "url" : "https://github.com/apache/flink-shaded/flink-shaded-guava" } ], "type" : "library", "bom-ref" : "pkg:maven/org.apache.flink/flink-shaded-guava@31.1-jre-17.0?type=jar" }, { "publisher" : "The Apache Software Foundation", "group" : "io.confluent.flink", "name" : "flink-metrics-core", "version" : "1.20.5-cp3", "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "51212aaf83edaa56d1b0c196fde03383" }, { "alg" : "SHA-1", "content" : "d3b1e5a85a758165527464c95b8d63d04bd2be77" }, { "alg" : "SHA-256", "content" : "c1448c005971ecffa4961eb5e978b800d04054f67338796ac40101f20b006baf" }, { "alg" : "SHA-512", "content" : "a2120a79866b59422a84c3f5ff9d83e20cc9c6fb652c80e117d5eec1b921a62998fe4dd92e76661ca87f4dc72aa3e3d81766dccaa7141be2fefef6249c901620" }, { "alg" : "SHA-384", "content" : "591dcb30482a083275b14d5cc18e8b2569f483c55e212cbd99090b2d9c6f6ef9e9baef89c150597811f6317c3ab84d52" }, { "alg" : "SHA3-384", "content" : "0ccfca1711346134901f0565ffefbca20305b3c7c5d374798bda68937efb9bf1ed935ef220f1479f18f7813e832e83b7" }, { "alg" : "SHA3-256", "content" : "e3022b7acc50af7b4ad1dc5e2019bc2636b2bbcf1c1ead75445b376d319b4292" }, { "alg" : "SHA3-512", "content" : "7ae50046fba16e4d7241efb514b19900767c8ec196c1228f9a4ec07abbc8edf0ea910923754b69d7823cd5a72822466168ec961a2fca83f909b510aa63e4bb9f" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/io.confluent.flink/flink-metrics-core@1.20.5-cp3?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://flink.apache.org/flink-metrics/flink-metrics-core" }, { "type" : "distribution", "url" : "s3://cp-flink-staging-654654529379-us-west-2/maven-staging/7e31a2bb240685e814d38ceb5aab9211f88e5660" }, { "type" : "mailing-list", "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/" }, { "type" : "vcs", "url" : "https://github.com/apache/flink/flink-metrics/flink-metrics-core" } ], "type" : "library", "bom-ref" : "pkg:maven/io.confluent.flink/flink-metrics-core@1.20.5-cp3?type=jar" }, { "group" : "io.prometheus", "name" : "simpleclient", "version" : "0.8.1", "description" : "Core instrumentation library for the simpleclient.", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "2b64368632d2b646056354c934da01df" }, { "alg" : "SHA-1", "content" : "1c63c919896a6055507e87d9742f9158d6ecccf1" }, { "alg" : "SHA-256", "content" : "83e82a52219ccce3946449bdfdcfa3556e172d542a6b4940ea36015afd6f8b33" }, { "alg" : "SHA-512", "content" : "83c30d0626668404a68c89a4f2d38131d506f3cded6036e0974178f963528291c5802215295be7cfdc8dd54487926c1a66f876d49c9295ea4b1b993f20d80b40" }, { "alg" : "SHA-384", "content" : "3c3ece026e740c9850070245a626fbbc78f6bdb5d66d57642f75f4ea7224dd26a869292bb17e07167ade4a13d82ae86b" }, { "alg" : "SHA3-384", "content" : "159886929735fa68611a159162037c39fcafed5abf7951ec16d14ac9a15ca13b49bd46f4ccfec7b542fd146ff3249774" }, { "alg" : "SHA3-256", "content" : "656df4782e32769c0056be15d43d248811129682ce18aac0b2269f518a174e3f" }, { "alg" : "SHA3-512", "content" : "5d9edd305c89fddee0c856c2d88679101b389980b5a94301b3ac1f65cd5b488d2dd2641b045de7e5c9efa9a21d891a9aa45625e3e4ba3d5e73a2f95fdcabc118" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/io.prometheus/simpleclient@0.8.1?type=jar", "externalReferences" : [ { "type" : "website", "url" : "http://github.com/prometheus/client_java/simpleclient" }, { "type" : "distribution", "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" } ], "type" : "library", "bom-ref" : "pkg:maven/io.prometheus/simpleclient@0.8.1?type=jar" }, { "group" : "io.prometheus", "name" : "simpleclient_httpserver", "version" : "0.8.1", "description" : "Httpserver exposition for the simpleclient.", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "655654dfb3b867c5b29b6dc5b523bb1b" }, { "alg" : "SHA-1", "content" : "8ab8dc19291e14751db33654c0891935a2ad08b9" }, { "alg" : "SHA-256", "content" : "bbc9cfe33e1b89d40590f9be8f5c1ad619a4970ad4c1ef54e886e293c505f567" }, { "alg" : "SHA-512", "content" : "c36989bc923403f6db739420c421dbbcc68c84ad0c80cc0171dcc6552c97dde76deb7c2c269920211a949db2c9bd79d3a1ee068ddc48e462af273c9804430357" }, { "alg" : "SHA-384", "content" : "9f580cdd14bdd4c354d145f02676f2fea8dd2faf701f6dd2a53c941f03e5a3a3a5ed2deec3782bed9dc804be84d98d8d" }, { "alg" : "SHA3-384", "content" : "5f7eef1fb8de8179fcb961fff6cb192e885b49691ba063c9778f286e5d5882cbeb4566738f037d0abc6c2582a5c8f120" }, { "alg" : "SHA3-256", "content" : "8b060fd880e745681e15cc1c09436b67a64643c55aa9deb1143bbeec2333bc96" }, { "alg" : "SHA3-512", "content" : "1f798a89556b40db67e5c1fbd8c404d9d5de65478b9bded63e4d4320d6dc47dcd66bf06872cb4944ced8a31270af8d347362b61db7442d414ccf621ce75f0e98" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/io.prometheus/simpleclient_httpserver@0.8.1?type=jar", "externalReferences" : [ { "type" : "website", "url" : "http://github.com/prometheus/client_java/simpleclient_httpserver" }, { "type" : "distribution", "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" } ], "type" : "library", "bom-ref" : "pkg:maven/io.prometheus/simpleclient_httpserver@0.8.1?type=jar" }, { "group" : "io.prometheus", "name" : "simpleclient_common", "version" : "0.8.1", "description" : "Common code used by various modules of the Simpleclient.", "hashes" : [ { "alg" : "MD5", "content" : "3ee1a73e56df123a4c30552cc9e3177e" }, { "alg" : "SHA-1", "content" : "51a4b2d2cb44e08ed4e79fbac80baa4bf65ab7fa" }, { "alg" : "SHA-256", "content" : "40da12fbb8cd6db164b536a9ae48131956782bdca13fb1f6126580aad494345d" }, { "alg" : "SHA-512", "content" : "a127afea318a9d49e9fc610ab57b7060ca31ab644a8abdde82a4d8fcef04e24959421f2bff2892ee27c9be179959e0f37d44315e07af4fceb156555bba7485be" }, { "alg" : "SHA-384", "content" : "3494f06cb45810ecd559fa797de9d4c817ef09d15f5fef73f554d773c10beb717f26312800abd2a818a2edc27d61121c" }, { "alg" : "SHA3-384", "content" : "388b9cd16b396cba65fff4750bfb82786cdf7ce833ac4af93e6529dd9cfdbff907c679ac547e59edb094f4246fec7f5d" }, { "alg" : "SHA3-256", "content" : "7f03f841478d6c2c8f91faeb2ef6c589364a18c65cfe8dd3d734a8b3cec337bf" }, { "alg" : "SHA3-512", "content" : "bff448ef464d8baeb37bf5ce71077e803d3341027a79a8dcdc09c7b11ab858d4e9f9055af0c349de1cff0f2ade1a611bf03ee9528576620ba109f8550e5a2a81" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/io.prometheus/simpleclient_common@0.8.1?type=jar", "externalReferences" : [ { "type" : "website", "url" : "http://github.com/prometheus/client_java/simpleclient_common" }, { "type" : "distribution", "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" } ], "type" : "library", "bom-ref" : "pkg:maven/io.prometheus/simpleclient_common@0.8.1?type=jar" }, { "group" : "io.prometheus", "name" : "simpleclient_pushgateway", "version" : "0.8.1", "description" : "Pushgateway exporter for the simpleclient.", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "73efb745f60869e2a50f450866b8227a" }, { "alg" : "SHA-1", "content" : "a8d82d960f0c43b17117fbea99f7a78ccefb7693" }, { "alg" : "SHA-256", "content" : "356e37581ed96f3cd74764673b0fcbae5de98d47d3d781e00c76012c536a9c37" }, { "alg" : "SHA-512", "content" : "de2831a8414fcfb8b0675c06a60b0ed6ba319c9e2201eff07100672e8769f9fd07988174fd2bc87c386c5bad550d2a0149f098ad40d59a1857970ed3b350ca9c" }, { "alg" : "SHA-384", "content" : "6e068a758a4f7ad465a4c68af1a75a88a1a1e603dac5b4c2f87baefc2feea1c9cbbb9eac54cf214bcd4af530bda64eae" }, { "alg" : "SHA3-384", "content" : "4fe42081aeb96fa315098d19bd02dafec8aad0accd134da9999dd8d19c307a54f68df1323f739c3fcff1140ff753f15c" }, { "alg" : "SHA3-256", "content" : "4ca35e4c6ff2c80cb0b0361f1d2b50beeb1c9998043522835de41fd40f9d605c" }, { "alg" : "SHA3-512", "content" : "679fceb320401e0f52b2bfa8486bb9dc78403838da31ae7a9caf6a8897e8c2ed9f7d21b16791cbf458690da5a8a1cd1e3efc6f0a9822925f514965047c62a09b" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/io.prometheus/simpleclient_pushgateway@0.8.1?type=jar", "externalReferences" : [ { "type" : "website", "url" : "http://github.com/prometheus/client_java/simpleclient_pushgateway" }, { "type" : "distribution", "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" } ], "type" : "library", "bom-ref" : "pkg:maven/io.prometheus/simpleclient_pushgateway@0.8.1?type=jar" }, { "publisher" : "Oracle Corporation", "group" : "javax.xml.bind", "name" : "jaxb-api", "version" : "2.3.1", "description" : "JAXB (JSR 222) API", "hashes" : [ { "alg" : "MD5", "content" : "bcf270d320f645ad19f5edb60091e87f" }, { "alg" : "SHA-1", "content" : "8531ad5ac454cc2deb9d4d32c40c4d7451939b5d" }, { "alg" : "SHA-256", "content" : "88b955a0df57880a26a74708bc34f74dcaf8ebf4e78843a28b50eae945732b06" }, { "alg" : "SHA-512", "content" : "93a47b245ab830d664a48c9d14e86198a38809ce94f72ca66b3d68746ae1d7b902f6fef2d1ac1a92c01701549ae80a07db69bd822ffd831a95d8dbffad435790" }, { "alg" : "SHA-384", "content" : "1eb2d7f307bda8cbf6a4ab5b2b97d830d33ca48ad94eb4bb1cbce860c54fca96285dbcb1ce9b164dbf37d4475f9a198f" }, { "alg" : "SHA3-384", "content" : "8df7409d3f60888f3a80f4d49af66c2cab6dc9f00e79c87c17703faad19d8ba6c8fc96ad897434170ce2686952921cdd" }, { "alg" : "SHA3-256", "content" : "41338683257d5ecead579ccc137bdef7bc4fea685d039a3d894e1d6730425e1d" }, { "alg" : "SHA3-512", "content" : "3371a96171f69876b0e6b8354674d252680e6d52c509a2645b1a0b0d7f9e176274bde6c89edb40986264733ffb6794cb7b2cba417666b1e82075bd4fd51197b6" } ], "licenses" : [ { "license" : { "id" : "CDDL-1.1" } }, { "license" : { "id" : "GPL-2.0-with-classpath-exception" } } ], "purl" : "pkg:maven/javax.xml.bind/jaxb-api@2.3.1?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://github.com/javaee/jaxb-spec/jaxb-api" }, { "type" : "distribution", "url" : "https://maven.java.net/service/local/staging/deploy/maven2/" }, { "type" : "issue-tracker", "url" : "https://github.com/javaee/jaxb-spec/issues" }, { "type" : "vcs", "url" : "https://github.com/javaee/jaxb-spec.git/jaxb-api" } ], "type" : "library", "bom-ref" : "pkg:maven/javax.xml.bind/jaxb-api@2.3.1?type=jar" }, { "publisher" : "Oracle", "group" : "javax.activation", "name" : "javax.activation-api", "version" : "1.2.0", "description" : "JavaBeans Activation Framework API jar", "hashes" : [ { "alg" : "MD5", "content" : "5e50e56bcf4a3ef3bc758f69f7643c3b" }, { "alg" : "SHA-1", "content" : "85262acf3ca9816f9537ca47d5adeabaead7cb16" }, { "alg" : "SHA-256", "content" : "43fdef0b5b6ceb31b0424b208b930c74ab58fac2ceeb7b3f6fd3aeb8b5ca4393" }, { "alg" : "SHA-512", "content" : "8ee0db43ae402f0079a836ef2bff5d15160e3ff9d585c3283f4cf474be4edd2fcc8714d8f032efd72cae77ec5f6d304fc24fa094d9cdba5cf72966cc964af6c9" }, { "alg" : "SHA-384", "content" : "d38a6af7ed00f13de8b46d49b9592af9b67adf3df47ddae5e4672f989f3f39101d446a77d1c11319acf8ff0a5b4feedf" }, { "alg" : "SHA3-384", "content" : "cfee76de5976d5994758a06113368092f09b0729d753b99969d6a5ec32919428bd7c270c98cbbc682ff8ebcf2b93fd8d" }, { "alg" : "SHA3-256", "content" : "aff48d0f28d8a99690c5a84c3fffdb3775452d5387e5698f4c9028c92a3b4888" }, { "alg" : "SHA3-512", "content" : "0507ece74b3147de60a830071bd434569c82e03f414a2b7f0d8a225dda36720d2e2194799cdc04def1909fdec21059b67c518bb9162f7f605764d542194e721d" } ], "licenses" : [ { "expression" : "(CDDL-1.0 OR GPL-2.0-with-classpath-exception)" } ], "purl" : "pkg:maven/javax.activation/javax.activation-api@1.2.0?type=jar", "externalReferences" : [ { "type" : "website", "url" : "http://java.net/all/javax.activation-api/" }, { "type" : "distribution", "url" : "https://maven.java.net/service/local/staging/deploy/maven2/" }, { "type" : "issue-tracker", "url" : "https://github.com/javaee/activation/issues" }, { "type" : "vcs", "url" : "https://github.com/javaee/activation/javax.activation-api" } ], "type" : "library", "bom-ref" : "pkg:maven/javax.activation/javax.activation-api@1.2.0?type=jar" }, { "publisher" : "The Apache Software Foundation", "group" : "commons-io", "name" : "commons-io", "version" : "2.15.1", "description" : "The Apache Commons IO library contains utility classes, stream implementations, file filters, file comparators, endian transformation classes, and much more.", "hashes" : [ { "alg" : "MD5", "content" : "84351f7991a0e6722f00e96a4ccc376f" }, { "alg" : "SHA-1", "content" : "f11560da189ab563a5c8e351941415430e9304ea" }, { "alg" : "SHA-256", "content" : "a58af12ee1b68cfd2ebb0c27caef164f084381a00ec81a48cc275fd7ea54e154" }, { "alg" : "SHA-512", "content" : "e9adaeed2d715ac0ae44de056ba165a743a92acbeb9871b535f7e58e0b3bc4fba276495b50429be195098a559f3adb7294048479754a0ee4d397da2efda5f81c" }, { "alg" : "SHA-384", "content" : "028c72b59373d3894da22f9eb2c731aabd00f670993973f71a354d722670c12ca659686b83bbf8db32d060ca180f50b2" }, { "alg" : "SHA3-384", "content" : "73cd585ab3736b4be50ec0f10dfe5ebfc3390eea8d56f07f29055f1fddb2dff8084310eaa6fb9f97ea639ed1abd7bc33" }, { "alg" : "SHA3-256", "content" : "daf39bc99f1a3dc0075714a4a342a58d69a4cd62c25bc39a581f657ca72b1044" }, { "alg" : "SHA3-512", "content" : "b003f8971d1536ea0fc4320dbfe17d7259d49e59314739f9fc83134e511facbff048b0ef4f86a9d0893781ca09c95cebc3b181a6c89a2d41e851870b96e76839" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0", "url" : "https://www.apache.org/licenses/LICENSE-2.0" } } ], "purl" : "pkg:maven/commons-io/commons-io@2.15.1?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://commons.apache.org/proper/commons-io/" }, { "type" : "build-system", "url" : "https://github.com/apache/commons-parent/actions" }, { "type" : "distribution", "url" : "https://repository.apache.org/service/local/staging/deploy/maven2" }, { "type" : "issue-tracker", "url" : "https://issues.apache.org/jira/browse/IO" }, { "type" : "mailing-list", "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/" }, { "type" : "vcs", "url" : "https://gitbox.apache.org/repos/asf?p=commons-io.git" } ], "type" : "library", "bom-ref" : "pkg:maven/commons-io/commons-io@2.15.1?type=jar" }, { "publisher" : "QOS.ch", "group" : "org.slf4j", "name" : "slf4j-api", "version" : "1.7.36", "description" : "The slf4j API", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "872da51f5de7f3923da4de871d57fd85" }, { "alg" : "SHA-1", "content" : "6c62681a2f655b49963a5983b8b0950a6120ae14" }, { "alg" : "SHA-256", "content" : "d3ef575e3e4979678dc01bf1dcce51021493b4d11fb7f1be8ad982877c16a1c0" }, { "alg" : "SHA-512", "content" : "f9b033fc019a44f98b16048da7e2b59edd4a6a527ba60e358f65ab88e0afae03a9340f1b3e8a543d49fa542290f499c5594259affa1ff3e6e7bf3b428d4c610b" }, { "alg" : "SHA-384", "content" : "2b14ad035877087157e379d3277dcdcd79e58d6bdb147c47d29e377d75ce53ad42cafbf22f5fb7827c7e946ff4876b9a" }, { "alg" : "SHA3-384", "content" : "3bc3110dafb8d5be16a39f3b2671a466463cd99eb39610c0e4719a7bf2d928f2ea213c734887c6926a07c4cca7769e4b" }, { "alg" : "SHA3-256", "content" : "ba2608179fcf46e2291a90b9cbb4aa30d718e481f59c350cc21c73b88d826881" }, { "alg" : "SHA3-512", "content" : "14c4edcd19702ef607d78826839d8a6d3a39157df54b89a801d3d3cbbe1307131a77671b041c761122730fb1387888c5ec2e46bdd80e1cb07f8f144676441824" } ], "licenses" : [ { "license" : { "id" : "MIT", "url" : "https://opensource.org/licenses/MIT" } } ], "purl" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar", "externalReferences" : [ { "type" : "website", "url" : "http://www.slf4j.org" }, { "type" : "distribution", "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type" : "vcs", "url" : "https://github.com/qos-ch/slf4j/slf4j-api" } ], "type" : "library", "bom-ref" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar" }, { "group" : "com.google.code.findbugs", "name" : "jsr305", "version" : "1.3.9", "description" : "JSR305 Annotations for Findbugs", "scope" : "optional", "hashes" : [ { "alg" : "MD5", "content" : "1d5a772e400b04bb67a7ef4a0e0996d8" }, { "alg" : "SHA-1", "content" : "40719ea6961c0cb6afaeb6a921eaa1f6afd4cfdf" }, { "alg" : "SHA-256", "content" : "905721a0eea90a81534abb7ee6ef4ea2e5e645fa1def0a5cd88402df1b46c9ed" }, { "alg" : "SHA-512", "content" : "06da282cfd8e30d9f8cf17702b8709172b00e22b75a627a1d85f8989615b8a1a401bc25d9aee7b14aed1d9b5df73bf2ea8d66f9c8468d9577c29f0ccfa2cc70a" }, { "alg" : "SHA-384", "content" : "56e6b41ef62eb5edfed0203802cefae9c2df86388148e420bb0c687abb2b80e14d5c2a82d5b35dce4badaf148f94eada" }, { "alg" : "SHA3-384", "content" : "58c3bf89fa1afa75c2c5078159fd28e27b2273d437f26aaaa7391310b6f0823f3cf476a24f5631c0881f3f7e946d99be" }, { "alg" : "SHA3-256", "content" : "c333ea5faedfa78e0614a2620438d5724eab093df4e960918391b6a44c2915b0" }, { "alg" : "SHA3-512", "content" : "67ec31448e156cc72dd036060b460bb2667a13b1cbe500b6b7eed3235b1994b44c39f440ebd07b21ec9595b166ad61121d4f6a132b5b313c558ab21b72599425" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar", "externalReferences" : [ { "type" : "website", "url" : "http://findbugs.sourceforge.net/" }, { "type" : "vcs", "url" : "http://findbugs.googlecode.com/svn/trunk/" } ], "type" : "library", "bom-ref" : "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar" }, { "publisher" : "The Apache Software Foundation", "group" : "io.confluent.flink.shaded", "name" : "flink-shaded-force-shading", "version" : "20.0-cp3", "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.", "scope" : "optional", "hashes" : [ { "alg" : "MD5", "content" : "703852a2a4f9bbd6ab3cd717774ead30" }, { "alg" : "SHA-1", "content" : "e8a1205b878f171b60e6c96acfd7e7695f52d5fb" }, { "alg" : "SHA-256", "content" : "ec8cc080e167fd165babaa88606a44d56f8dfe96988254e14cbdc4bc61c17959" }, { "alg" : "SHA-512", "content" : "4108f6a343fc972707fe1c940216f630c39959e417f821321455def20376f2aee1797657cbd69f0eb9c5f5cca9f82297c4736feb67a08a192995924b8e5422cd" }, { "alg" : "SHA-384", "content" : "1797cfbe9f315123e1c9104cd28ff2a0f283db2185a150200e81e16c4f3bf2a933d54855fb29e7b3c95f79b228768233" }, { "alg" : "SHA3-384", "content" : "855d9938f3b14033fbb61de1679d0f452f40014ffc5f0a662a177d6469136d2df5c47496a02856c697a4b8672528f866" }, { "alg" : "SHA3-256", "content" : "2670a0179eff2c71dab16f02c43066c937a145a25f172eb730f761e9ed2c7a18" }, { "alg" : "SHA3-512", "content" : "a163da1cd000206420fe01d6cdf5df50925d65934cefb3c4e0329bfd47813ef2ba58f0cab563bac68ad054158227aa1f2a04cc8c3ab008455c21d573aedd6e21" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/io.confluent.flink.shaded/flink-shaded-force-shading@20.0-cp3?type=jar", "externalReferences" : [ { "type" : "website", "url" : "http://flink.apache.org/flink-shaded-force-shading" }, { "type" : "distribution", "url" : "https://repository.apache.org/service/local/staging/deploy/maven2" }, { "type" : "mailing-list", "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/" }, { "type" : "vcs", "url" : "https://github.com/apache/flink-shaded/flink-shaded-force-shading" } ], "type" : "library", "bom-ref" : "pkg:maven/io.confluent.flink.shaded/flink-shaded-force-shading@20.0-cp3?type=jar" }, { "publisher" : "Joe Walnes, Henri Tremblay, Leonardo Mesquita", "group" : "org.objenesis", "name" : "objenesis", "version" : "2.1", "description" : "A library for instantiating Java objects", "hashes" : [ { "alg" : "MD5", "content" : "32ccb1d20a42b5aaaceb90c9082a2efa" }, { "alg" : "SHA-1", "content" : "87c0ea803b69252868d09308b4618f766f135a96" }, { "alg" : "SHA-256", "content" : "c74330cc6b806c804fd37e74487b4fe5d7c2750c5e15fbc6efa13bdee1bdef80" }, { "alg" : "SHA-512", "content" : "1dec9ee30812b8006e536a2749c5781ccdc4b446539efb6fa534f22e70562033876bf2eb22c6946d617695729bd65f0f65b984f15f05ac63db5bed215e74427c" }, { "alg" : "SHA-384", "content" : "657b8a3b80a5475f198425396f7264301f9e0f3ad5dc336ef0c7b46874f5544861a8a2fd48cdb5f672e199a6935c19d1" }, { "alg" : "SHA3-384", "content" : "e526937d722aad1857869b2d2a0ba5c88815609308c00b776b51614e501de5d93d54978f5bb9cf496bdcc28b1dbd5775" }, { "alg" : "SHA3-256", "content" : "436cfbb9c208dd03c951708fa4ba6525e2a0b26a873d594a6fbe93ab49082c97" }, { "alg" : "SHA3-512", "content" : "1e7ee9411df7cfbf0669c38e4ef029155dd718b91db1d182841c740caf8c1057ed273a77f8e32d724c48aaf96815a26ab099c776511ffc5ef351d70ebfa70344" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/org.objenesis/objenesis@2.1?type=jar", "externalReferences" : [ { "type" : "website", "url" : "http://objenesis.org" }, { "type" : "distribution", "url" : "http://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type" : "vcs", "url" : "https://github.com/easymock/easymock/objenesis" } ], "type" : "library", "bom-ref" : "pkg:maven/org.objenesis/objenesis@2.1?type=jar" } ], "dependencies" : [ { "ref" : "pkg:maven/io.confluent.flink/flink-metrics-prometheus@1.20.5-cp3?type=jar", "dependsOn" : [ "pkg:maven/io.confluent.flink/flink-annotations@1.20.5-cp3?type=jar", "pkg:maven/io.confluent.flink/flink-core@1.20.5-cp3?type=jar", "pkg:maven/io.confluent.flink/flink-metrics-core@1.20.5-cp3?type=jar", "pkg:maven/io.prometheus/simpleclient@0.8.1?type=jar", "pkg:maven/io.prometheus/simpleclient_httpserver@0.8.1?type=jar", "pkg:maven/io.prometheus/simpleclient_pushgateway@0.8.1?type=jar", "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar", "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar", "pkg:maven/io.confluent.flink.shaded/flink-shaded-force-shading@20.0-cp3?type=jar" ] }, { "ref" : "pkg:maven/io.confluent.flink/flink-annotations@1.20.5-cp3?type=jar", "dependsOn" : [ "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar", "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar" ] }, { "ref" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/io.confluent.flink/flink-core@1.20.5-cp3?type=jar", "dependsOn" : [ "pkg:maven/io.confluent.flink/flink-core-api@1.20.5-cp3?type=jar", "pkg:maven/io.confluent.flink/flink-annotations@1.20.5-cp3?type=jar", "pkg:maven/io.confluent.flink.shaded/flink-shaded-asm-9@9.6-20.0-cp3?type=jar", "pkg:maven/io.confluent.flink.shaded/flink-shaded-jackson@2.18.10-20.0-cp3?type=jar", "pkg:maven/org.apache.commons/commons-lang3@3.19.0?type=jar", "pkg:maven/org.snakeyaml/snakeyaml-engine@2.6?type=jar", "pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar", "pkg:maven/com.esotericsoftware.kryo/kryo@2.24.0?type=jar", "pkg:maven/commons-collections/commons-collections@3.2.2?type=jar", "pkg:maven/org.apache.commons/commons-compress@1.26.0?type=jar", "pkg:maven/org.apache.flink/flink-shaded-guava@31.1-jre-17.0?type=jar", "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar", "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar" ] }, { "ref" : "pkg:maven/io.confluent.flink/flink-core-api@1.20.5-cp3?type=jar", "dependsOn" : [ "pkg:maven/io.confluent.flink/flink-annotations@1.20.5-cp3?type=jar", "pkg:maven/io.confluent.flink/flink-metrics-core@1.20.5-cp3?type=jar", "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar", "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar" ] }, { "ref" : "pkg:maven/io.confluent.flink/flink-metrics-core@1.20.5-cp3?type=jar", "dependsOn" : [ "pkg:maven/io.confluent.flink/flink-annotations@1.20.5-cp3?type=jar" ] }, { "ref" : "pkg:maven/io.confluent.flink.shaded/flink-shaded-asm-9@9.6-20.0-cp3?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/io.confluent.flink.shaded/flink-shaded-jackson@2.18.10-20.0-cp3?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/org.apache.commons/commons-lang3@3.19.0?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/org.snakeyaml/snakeyaml-engine@2.6?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar", "dependsOn" : [ "pkg:maven/org.apache.commons/commons-lang3@3.19.0?type=jar" ] }, { "ref" : "pkg:maven/com.esotericsoftware.kryo/kryo@2.24.0?type=jar", "dependsOn" : [ "pkg:maven/com.esotericsoftware.minlog/minlog@1.2?type=jar", "pkg:maven/org.objenesis/objenesis@2.1?type=jar" ] }, { "ref" : "pkg:maven/com.esotericsoftware.minlog/minlog@1.2?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/org.objenesis/objenesis@2.1?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/commons-collections/commons-collections@3.2.2?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/org.apache.commons/commons-compress@1.26.0?type=jar", "dependsOn" : [ "pkg:maven/commons-io/commons-io@2.15.1?type=jar", "pkg:maven/org.apache.commons/commons-lang3@3.19.0?type=jar" ] }, { "ref" : "pkg:maven/commons-io/commons-io@2.15.1?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/org.apache.flink/flink-shaded-guava@31.1-jre-17.0?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/io.prometheus/simpleclient@0.8.1?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/io.prometheus/simpleclient_httpserver@0.8.1?type=jar", "dependsOn" : [ "pkg:maven/io.prometheus/simpleclient@0.8.1?type=jar", "pkg:maven/io.prometheus/simpleclient_common@0.8.1?type=jar" ] }, { "ref" : "pkg:maven/io.prometheus/simpleclient_common@0.8.1?type=jar", "dependsOn" : [ "pkg:maven/io.prometheus/simpleclient@0.8.1?type=jar" ] }, { "ref" : "pkg:maven/io.prometheus/simpleclient_pushgateway@0.8.1?type=jar", "dependsOn" : [ "pkg:maven/io.prometheus/simpleclient@0.8.1?type=jar", "pkg:maven/io.prometheus/simpleclient_common@0.8.1?type=jar", "pkg:maven/javax.xml.bind/jaxb-api@2.3.1?type=jar" ] }, { "ref" : "pkg:maven/javax.xml.bind/jaxb-api@2.3.1?type=jar", "dependsOn" : [ "pkg:maven/javax.activation/javax.activation-api@1.2.0?type=jar" ] }, { "ref" : "pkg:maven/javax.activation/javax.activation-api@1.2.0?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/io.confluent.flink.shaded/flink-shaded-force-shading@20.0-cp3?type=jar", "dependsOn" : [ ] } ] }