{
  "bomFormat" : "CycloneDX",
  "specVersion" : "1.4",
  "serialNumber" : "urn:uuid:ee3d76c6-ceb7-404c-acc9-52bbdc980897",
  "version" : 1,
  "metadata" : {
    "timestamp" : "2026-07-21T13:43:09Z",
    "tools" : [
      {
        "vendor" : "OWASP Foundation",
        "name" : "CycloneDX Maven plugin",
        "version" : "2.7.7",
        "hashes" : [
          {
            "alg" : "MD5",
            "content" : "436dfb24c63a322708e4a5143d8543af"
          },
          {
            "alg" : "SHA-1",
            "content" : "3ef2e8728dc9eff2f129c34057e46e9d2b10629a"
          },
          {
            "alg" : "SHA-256",
            "content" : "c185b79bf0f9264f43bc8c222c44db67bea275bb727e3327cf9aea6bf45292c9"
          },
          {
            "alg" : "SHA-512",
            "content" : "41488733e31e6c5315327dcc86187c2b9a6b96cd08f7e2157ce130688afde29c313fc6a73edb8a76333a930c78874aa2eac874448920030c0f7af0ac05e65ced"
          },
          {
            "alg" : "SHA-384",
            "content" : "f9462f86240fd9fc0942f34981e6d2371f252aa1a4e5e8c3c14e7f0f1a4e4de69ef972e51cf09a749afb6d97c13e67ed"
          },
          {
            "alg" : "SHA3-384",
            "content" : "c755af6239348bc7dd1e1e6b5f14f7cf7e1560d689b252d9610cd865fa4b419d0b8e26260731dfc5da2176b6e706b414"
          },
          {
            "alg" : "SHA3-256",
            "content" : "309aac91005470c9c834354ab918759e2ae7ec52fc1676002621a5bbdf3b7827"
          },
          {
            "alg" : "SHA3-512",
            "content" : "c634570dcf8302e61005e5fa91a9a0d9b81542f731967b3c9f6d3ef89e3b945bd36d7ab69e2ebad8124b9c05da504361c8b36a8ce528d844409eeb7df4eea6ce"
          }
        ]
      }
    ],
    "component" : {
      "publisher" : "The Apache Software Foundation",
      "group" : "io.confluent.flink",
      "name" : "flink-python",
      "version" : "1.20.5-cp2",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.confluent.flink/flink-python@1.20.5-cp2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://flink.apache.org/flink-python"
        },
        {
          "type" : "distribution",
          "url" : "s3://cp-flink-staging-654654529379-us-west-2/maven-staging/12a166280c02d658ecafa7650035d3389f69bb81"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink/flink-python"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.confluent.flink/flink-python@1.20.5-cp2?type=jar"
    },
    "properties" : [
      {
        "name" : "maven.goal",
        "value" : "makeBom"
      },
      {
        "name" : "maven.scopes",
        "value" : "compile,provided,runtime,system"
      }
    ]
  },
  "components" : [
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-io",
      "name" : "commons-io",
      "version" : "2.15.1",
      "description" : "The Apache Commons IO library contains utility classes, stream implementations, file filters, file comparators, endian transformation classes, and much more.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "84351f7991a0e6722f00e96a4ccc376f"
        },
        {
          "alg" : "SHA-1",
          "content" : "f11560da189ab563a5c8e351941415430e9304ea"
        },
        {
          "alg" : "SHA-256",
          "content" : "a58af12ee1b68cfd2ebb0c27caef164f084381a00ec81a48cc275fd7ea54e154"
        },
        {
          "alg" : "SHA-512",
          "content" : "e9adaeed2d715ac0ae44de056ba165a743a92acbeb9871b535f7e58e0b3bc4fba276495b50429be195098a559f3adb7294048479754a0ee4d397da2efda5f81c"
        },
        {
          "alg" : "SHA-384",
          "content" : "028c72b59373d3894da22f9eb2c731aabd00f670993973f71a354d722670c12ca659686b83bbf8db32d060ca180f50b2"
        },
        {
          "alg" : "SHA3-384",
          "content" : "73cd585ab3736b4be50ec0f10dfe5ebfc3390eea8d56f07f29055f1fddb2dff8084310eaa6fb9f97ea639ed1abd7bc33"
        },
        {
          "alg" : "SHA3-256",
          "content" : "daf39bc99f1a3dc0075714a4a342a58d69a4cd62c25bc39a581f657ca72b1044"
        },
        {
          "alg" : "SHA3-512",
          "content" : "b003f8971d1536ea0fc4320dbfe17d7259d49e59314739f9fc83134e511facbff048b0ef4f86a9d0893781ca09c95cebc3b181a6c89a2d41e851870b96e76839"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-io/commons-io@2.15.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-io/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-parent/actions"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/IO"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-io.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-io/commons-io@2.15.1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "io.confluent.flink",
      "name" : "flink-core",
      "version" : "1.20.5-cp2",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "fe324134ef3de30348691726d562f67b"
        },
        {
          "alg" : "SHA-1",
          "content" : "8bb6594bcdb3c4ee39dc642d45c227f817329c24"
        },
        {
          "alg" : "SHA-256",
          "content" : "c9edd81cbbb9a502cec93409d5991a1cad426456aa37be34c06c6988eda34c34"
        },
        {
          "alg" : "SHA-512",
          "content" : "ca51672b0b14751e9fd5b8e7f5e70ff8d314da0fcb3bb4a60ea13822b6dccd37fc1e1e0e20089c9d96615810493ec47c39bd3d6a1d91b81ff6fd76c2a07af36d"
        },
        {
          "alg" : "SHA-384",
          "content" : "9bb77136f398dd3bbfb1a4f14384dab0cdba22e3727030b1eca7ca48370edb5aecfa1ccb5faecd87711ca26637ee6d7a"
        },
        {
          "alg" : "SHA3-384",
          "content" : "58073cf343e5067331aedf934746cba3a7f452a86be068b5f4611d8f00489f6b89e89710b0cc5a5c5f88ad88b0fe32c2"
        },
        {
          "alg" : "SHA3-256",
          "content" : "2cb92419619de01ccf4faaeeeb169ca108f048ff0caa9c8177d87e5c1b0286b8"
        },
        {
          "alg" : "SHA3-512",
          "content" : "ee16827ab964b924ecb3d204609f3bffa262e65e28178a6d344e34936e7c0a219f2c746963abbecb1d814d8d154e8f2a2f41b45bca06ec23fd88ea3a409e47f0"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.confluent.flink/flink-core@1.20.5-cp2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://flink.apache.org/flink-core"
        },
        {
          "type" : "distribution",
          "url" : "s3://cp-flink-staging-654654529379-us-west-2/maven-staging/12a166280c02d658ecafa7650035d3389f69bb81"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink/flink-core"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.confluent.flink/flink-core@1.20.5-cp2?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "io.confluent.flink",
      "name" : "flink-core-api",
      "version" : "1.20.5-cp2",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "d3f60046cef4fba73d103958b878c9d7"
        },
        {
          "alg" : "SHA-1",
          "content" : "fc195cfc5befa4e8b104c894677a3ef69a015b17"
        },
        {
          "alg" : "SHA-256",
          "content" : "bcb7b364d9f56748e0cb6e102ccddc175794165d8b9077e791e2af8939a691c4"
        },
        {
          "alg" : "SHA-512",
          "content" : "af82ab50954e4d86ebf1296a080401bd78e5ab24b6c67bf6ec26a9e6cb913a1db84160e310b06ee5663b80d7bbc00e6c20c973212c2d7afea7ef1098f8f6557f"
        },
        {
          "alg" : "SHA-384",
          "content" : "6705fec4bfa27a1b6b9da46ceb2f25b49d99d9293953a9697212ba13aa0926f698025f55156cf6c2874b06ef101d530e"
        },
        {
          "alg" : "SHA3-384",
          "content" : "f6794d13801393ccc734172d09160fb92bec760c7b3500cee7df660495bf6029374096e67b78c570a1ade044c9433309"
        },
        {
          "alg" : "SHA3-256",
          "content" : "185557af727c3d9189a2414457dc2047dc232b4ecec6c45c61c476725beffcd0"
        },
        {
          "alg" : "SHA3-512",
          "content" : "c8c0b96e99b9a289f72b6a050575c20ccee781e4f2f36cba4bd24a13c8c0242ee343f11fe09e0f5e9e4b2d45f624705174afc334f8dc28789e4c731b47bebbc0"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.confluent.flink/flink-core-api@1.20.5-cp2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://flink.apache.org/flink-core-api"
        },
        {
          "type" : "distribution",
          "url" : "s3://cp-flink-staging-654654529379-us-west-2/maven-staging/12a166280c02d658ecafa7650035d3389f69bb81"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink/flink-core-api"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.confluent.flink/flink-core-api@1.20.5-cp2?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "io.confluent.flink",
      "name" : "flink-metrics-core",
      "version" : "1.20.5-cp2",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "b81e01688e078e118e95a98a91c3a3ff"
        },
        {
          "alg" : "SHA-1",
          "content" : "c33d18d84c117f64b65743d608d400264044f649"
        },
        {
          "alg" : "SHA-256",
          "content" : "b59fa29b3f839e52f4d9fee49412fbf40890f1393f18ea5e02ecab4a64e20ba6"
        },
        {
          "alg" : "SHA-512",
          "content" : "96d13a83c3474201137e73d64d14dcaca4266e5f5b9e8e273663b88a99e85ca5b9ffe7e0ffd9c1e84059a98d808e959445048214a941350ccbb42de0499d80c0"
        },
        {
          "alg" : "SHA-384",
          "content" : "f0351189cede2bd6fa536e8822bd6820aa82fe687de93c6c31f25d81433d8bb2c7be18dbd0c45a4691dcb08be65686ce"
        },
        {
          "alg" : "SHA3-384",
          "content" : "ace69b30691b1cc20eacecc08e2c9bbc29fa04cc5d1783a6429142bdb10c4508ade8f6190f320db4a188823578af97c1"
        },
        {
          "alg" : "SHA3-256",
          "content" : "ef98f6cd18f73d214d0d19fec4471333e7a6913cf9447b5bb13d286adbe6776d"
        },
        {
          "alg" : "SHA3-512",
          "content" : "0d52cf3659aaedf1b07aa0d7e5dcc248f136549eaa65f1205935f0e65327e3e01660f2fd3f58a7c3b2bc22f33ba6ae559ca9a0fc113642ab428b364abd2dbb5c"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.confluent.flink/flink-metrics-core@1.20.5-cp2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://flink.apache.org/flink-metrics/flink-metrics-core"
        },
        {
          "type" : "distribution",
          "url" : "s3://cp-flink-staging-654654529379-us-west-2/maven-staging/12a166280c02d658ecafa7650035d3389f69bb81"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink/flink-metrics/flink-metrics-core"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.confluent.flink/flink-metrics-core@1.20.5-cp2?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "io.confluent.flink",
      "name" : "flink-annotations",
      "version" : "1.20.5-cp2",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "0053ff313c6c99cfc748d44276d52d19"
        },
        {
          "alg" : "SHA-1",
          "content" : "b500abfd1648b3bf075ae8d11328cfb83d55f3f0"
        },
        {
          "alg" : "SHA-256",
          "content" : "59c9110f6211a3579c5c4a5646bed4a2f2685d7fd18e2c22398cdcca43f65d58"
        },
        {
          "alg" : "SHA-512",
          "content" : "72cc217bf3fefa47faca45c460076899b02630a6ed57e3f87fe3da7fe9f3577dcfafcc5c6dec9937cde15889ec338e317d83e697d7e43afc491399588404c7fd"
        },
        {
          "alg" : "SHA-384",
          "content" : "c92a208103167b8ca0b280ba5d2b1a68c10a2529e7b324b5f5afd4f3cc81fbfa26cd2ab30f9e4e4914d11500b6ec9518"
        },
        {
          "alg" : "SHA3-384",
          "content" : "a48532c24c798fb8164bede70201140178f6debdf2a1fbc021564a8b663af172596081f389467507110bef3570ec0bb6"
        },
        {
          "alg" : "SHA3-256",
          "content" : "8ae9069653090dd6c693c80d1c05967b5bb48a7b42ecece22ae8702ba5018551"
        },
        {
          "alg" : "SHA3-512",
          "content" : "0e6b9c0ffe7c71162d587d7c3618c304afe0278de98da09549c76251689b50c79bb38b03d3353e7c38d6dd559e446e62cfa4460c069b11ea23df2876b127429b"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.confluent.flink/flink-annotations@1.20.5-cp2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://flink.apache.org/flink-annotations"
        },
        {
          "type" : "distribution",
          "url" : "s3://cp-flink-staging-654654529379-us-west-2/maven-staging/12a166280c02d658ecafa7650035d3389f69bb81"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink/flink-annotations"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.confluent.flink/flink-annotations@1.20.5-cp2?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.flink",
      "name" : "flink-shaded-asm-9",
      "version" : "9.6-20.0",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "a4a5c6b334d66e9da09de1898229fa87"
        },
        {
          "alg" : "SHA-1",
          "content" : "a525b5d84cd529973633605dee9452512d5d3299"
        },
        {
          "alg" : "SHA-256",
          "content" : "d2cd34487ee0e67e2a4ccd4d30b73f8ffc09e33b43dcad10a8797815c2ebcca0"
        },
        {
          "alg" : "SHA-512",
          "content" : "1d99a84254fcc5631bc90575d2da3dc6b3471c6d3be3c4bf4d95e053f04e230425fd4a4ef4a2c9c9f23633f7c1a8893e63e7b3960cb32ead5820997e02e13ebf"
        },
        {
          "alg" : "SHA-384",
          "content" : "15e383b500f480560b0a7e543be678014868937bab6624125360e63242a6fe8a13dd51e1d5a7ece5ab33a729714cc30f"
        },
        {
          "alg" : "SHA3-384",
          "content" : "bf558740e47de9f6a88876428db7306e272901ec420950ca494451bae2f5c99a38247a7c856df996a60d016f7aa1ad9d"
        },
        {
          "alg" : "SHA3-256",
          "content" : "804c5c1de76a4d49b5fac3383196729db86367405a287e02127c21e5d185ce7a"
        },
        {
          "alg" : "SHA3-512",
          "content" : "a4aae40c0aa2b6b097fb41feba6a3b248cbdf7d03cf25cc47454395fdc39b28b76c774fcb7b55f51a5b8de875496168f7f1d8a1ad961166a8523a3771f2418d2"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.flink/flink-shaded-asm-9@9.6-20.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://flink.apache.org/flink-shaded-asm-9"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink-shaded/flink-shaded-asm-9"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.flink/flink-shaded-asm-9@9.6-20.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.flink",
      "name" : "flink-shaded-jackson",
      "version" : "2.18.2-20.0",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "5dd27e2ce3b833428a8073fb65841543"
        },
        {
          "alg" : "SHA-1",
          "content" : "6fbdfd65d8b31a97bee087cff2bde14936a6ef8a"
        },
        {
          "alg" : "SHA-256",
          "content" : "0097d25dd95604e660b6df3b96255661c53e98e3d14e6a88c09b1e63e5603297"
        },
        {
          "alg" : "SHA-512",
          "content" : "4ab372182e050e5b2ea9c7b3053fb46c788d5bcc378bc7174de4e34783af6dda2c8b15ea195ac6a1ca0ffc032a36e7b69c24bf4ab94ab1ba09d4e6ef6a6cd8d4"
        },
        {
          "alg" : "SHA-384",
          "content" : "59f2d0daedfcb5e128cfd46da9b256e226cd9a90eddc8787410d6a71333b6b974a1f4f468af0a210a580cc3147fe4370"
        },
        {
          "alg" : "SHA3-384",
          "content" : "aff04078014631fd7eba89d20beee5ff4df3f1c4d77f69aa22c6619ab2bc2fdfe051fa9900805fde1e8d33cb76d20982"
        },
        {
          "alg" : "SHA3-256",
          "content" : "c87e27d3d15f5116edc24405b8e4a07b77ee4f029c1d6303f242700b9014c1e0"
        },
        {
          "alg" : "SHA3-512",
          "content" : "8c6a1d32a32e29f7e8265fa673877477e3182c010fe955da3b79fd7cdac6f007f67bd9bfb7985560daefeb475021a8825909ca83ce175463be995cdbeab0fb48"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.flink/flink-shaded-jackson@2.18.2-20.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://flink.apache.org/flink-shaded-jackson-parent/flink-shaded-jackson"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink-shaded/flink-shaded-jackson-parent/flink-shaded-jackson"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.flink/flink-shaded-jackson@2.18.2-20.0?type=jar"
    },
    {
      "group" : "org.snakeyaml",
      "name" : "snakeyaml-engine",
      "version" : "2.6",
      "description" : "Core YAML 1.2 parser and emitter for Java",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "719bcfb9f917992d0a99a6f7106d8466"
        },
        {
          "alg" : "SHA-1",
          "content" : "235a7e571b33eda1a81e0f73a3173ef95dd020e5"
        },
        {
          "alg" : "SHA-256",
          "content" : "2652199af40c9aa2f1782400d2dfbbf4e5226208c4e05ddd4059c3d6d9cd1505"
        },
        {
          "alg" : "SHA-512",
          "content" : "c3b5e87ce323b37bcd9e65d060157ebb26d116b5dac30c6eaa185b30aa24c0be8dfd0ad604a9a12ce7010acadee54a9cea9f065cd2f434eeaed7bccce2e14a7d"
        },
        {
          "alg" : "SHA-384",
          "content" : "edfc3c9a95cc2fa524a322f20ec034ec16b3fad950a58bfd1ed774eaaab946304cddc5e9ea4e117a899ec568ba7fa620"
        },
        {
          "alg" : "SHA3-384",
          "content" : "63b9e0ed448431a1d4b34a4b0b97b65c2c7be6ef46f1ce3b10191373e3339422f9c06bc846ae861a982c3c3618abd9c6"
        },
        {
          "alg" : "SHA3-256",
          "content" : "19ce75167267903be79122e149ede2916c3e07bab0658db21ab40864e8c920cd"
        },
        {
          "alg" : "SHA3-512",
          "content" : "7777f37097a6951dafe18fb038d087e7fe0924bfb2a10c66a76a57d95aa65341d4b674c6ff1d9d453c436ffcb50e281c2bedc854ce687fefc30c9595b7352c8a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.snakeyaml/snakeyaml-engine@2.6?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://bitbucket.org/snakeyaml/snakeyaml-engine"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://bitbucket.org/snakeyaml/snakeyaml-engine/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://bitbucket.org/snakeyaml/snakeyaml-engine/src"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.snakeyaml/snakeyaml-engine@2.6?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-text",
      "version" : "1.10.0",
      "description" : "Apache Commons Text is a library focused on algorithms working on strings.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "4afc9bfa2d31dbf7330c98fcc954b892"
        },
        {
          "alg" : "SHA-1",
          "content" : "3363381aef8cef2dbc1023b3e3a9433b08b64e01"
        },
        {
          "alg" : "SHA-256",
          "content" : "770cd903fa7b604d1f7ef7ba17f84108667294b2b478be8ed1af3bffb4ae0018"
        },
        {
          "alg" : "SHA-512",
          "content" : "afd836a1094449e0a791fee67363666c47b6d24acff353a5089b837b332c0f4af89565c354682521e37062d20e6b52d70c77bb4f24cca9b9532c274fc708a831"
        },
        {
          "alg" : "SHA-384",
          "content" : "06c56e6e513dd77cf10d0da46cdea08c34e220e81fa024735b668c6650df4234e564fe865ff5cafea963f56b1e8ffd4a"
        },
        {
          "alg" : "SHA3-384",
          "content" : "f09065ed066c25debf8c78cbb0bcc738e1ea283302ec992dcfb649acb90091cff879465c65a162e94534d454e3b4e9bb"
        },
        {
          "alg" : "SHA3-256",
          "content" : "0b59c567164bb755f2353b78ba66744000a8c4b35e1df05255b080a21c3a3dd5"
        },
        {
          "alg" : "SHA3-512",
          "content" : "f0fbce02a862b70f472a27d0722c54ac111ca2eb94584b8b0b73d1926aec26047cd92542ad0b3cf980a6825077587f41b194aa93d6f6350d1b87e59e8df1be7c"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-text"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-parent/actions"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/TEXT"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-text.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar"
    },
    {
      "group" : "com.esotericsoftware.kryo",
      "name" : "kryo",
      "version" : "2.24.0",
      "description" : "Fast, efficient Java serialization",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "6cf0fa5b5d4f6b8226fd4a4bfb7532b8"
        },
        {
          "alg" : "SHA-1",
          "content" : "0c6b206e80cfd97e66a1364003724491c757b92f"
        },
        {
          "alg" : "SHA-256",
          "content" : "7e56b32c635058f9aa2820f88919ab702d029cbcd15285da9992e36cc0ae52f2"
        },
        {
          "alg" : "SHA-512",
          "content" : "a4c6ce768528a03c219cc6a41b22293f78e433c849c90391b64dda3f2376fd79951a89c5f4e6701bcbcb6eee9abffe2390cfb12dba3b885e4a3d411a26b78f40"
        },
        {
          "alg" : "SHA-384",
          "content" : "678ad1b7f4d99910b8ff44a6c8f78ccae91f823161ce23de39077397352919b7257e1e6e0dea90900be973291ea19282"
        },
        {
          "alg" : "SHA3-384",
          "content" : "671fc6aa9905f8131482e1d0f3fe26126562b13777893d51a66d0f84fc6f2aa3f13947e488ffba8f09c31a2cc0e9758a"
        },
        {
          "alg" : "SHA3-256",
          "content" : "46e89d8f12cbead0fe29ad707d5dba96e880dacce2a6b374ac4bf1ced9f36a79"
        },
        {
          "alg" : "SHA3-512",
          "content" : "c7cde437eef8343eccd4c5ecb8de5683529e3d4d8262e8cd1f7b7d0df9c632253b979737fd1b486314ec2728aee3a3782dee5d2032621485db4aa3b2a8262741"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/com.esotericsoftware.kryo/kryo@2.24.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/EsotericSoftware/kryo"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/EsotericSoftware/kryo"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.esotericsoftware.kryo/kryo@2.24.0?type=jar"
    },
    {
      "group" : "com.esotericsoftware.minlog",
      "name" : "minlog",
      "version" : "1.2",
      "description" : "Minimal overhead Java logging",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f7cfbdf63b67df0bbfa4c7cb260885bc"
        },
        {
          "alg" : "SHA-1",
          "content" : "59bfcd171d82f9981a5e242b9e840191f650e209"
        },
        {
          "alg" : "SHA-256",
          "content" : "a678cb1aa8f5d03d901c992c75741841d98a9bc3d55dad02e84d65315c4e60f2"
        },
        {
          "alg" : "SHA-512",
          "content" : "7b4082766ad740d86708783f3b08780ed72dd18062aa9ba422c4b9016b332d2334ae511f50ef7d89e4eedbdac5cebc51ab6ddaf4d1eea857a3250eb5962f0d08"
        },
        {
          "alg" : "SHA-384",
          "content" : "932a282a9c06864001f8212199e4be05543609adbd985c5f4517ee6eba734acd3fd8812213bc0c98af264637cbf9c78d"
        },
        {
          "alg" : "SHA3-384",
          "content" : "f36e9f494611c85f59febfef9ce93fc68f1f17db881400456204c1f099e623e334d2f10b41018392877c8af13de7f59a"
        },
        {
          "alg" : "SHA3-256",
          "content" : "37422ef85dce86abd8b14b4c9f7ad77261d728a472126c8eca38f356c98da395"
        },
        {
          "alg" : "SHA3-512",
          "content" : "74ba47271899706a284e942482ff41649ffd93e57a29320732e57864c47f3f0431377130ca7afb5e64cc6b68d4e5a5cdfc38027966cda4b5e512e3ce02bd8a99"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/com.esotericsoftware.minlog/minlog@1.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://code.google.com/p/minlog/"
        },
        {
          "type" : "vcs",
          "url" : "http://minlog.googlecode.com/svn/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.esotericsoftware.minlog/minlog@1.2?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-collections",
      "name" : "commons-collections",
      "version" : "3.2.2",
      "description" : "Types that extend and augment the Java Collections Framework.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f54a8510f834a1a57166970bfc982e94"
        },
        {
          "alg" : "SHA-1",
          "content" : "8ad72fe39fa8c91eaaf12aadb21e0c3661fe26d5"
        },
        {
          "alg" : "SHA-256",
          "content" : "eeeae917917144a68a741d4c0dff66aa5c5c5fd85593ff217bced3fc8ca783b8"
        },
        {
          "alg" : "SHA-512",
          "content" : "51c72f9aca7726f3c387095e66be85a6df97c74b00a25434b89188c1b8eab6e2b55accf7b9bd412430d22bd09324dec076e300b3d1fa39fccad471f0f2a3da16"
        },
        {
          "alg" : "SHA-384",
          "content" : "dd4e99b3314bd3c1a1ee26296615d9e44dadf7a1f8a7bbba44fb95121803d331e36d4cca4260e7609af78a47ba3e4073"
        },
        {
          "alg" : "SHA3-384",
          "content" : "8ce03528e4a6e95c44283b56eca87e6a6d3bf1363411a55b538f4f9110cf7470581ea5c73925e877ddab08dba0603f40"
        },
        {
          "alg" : "SHA3-256",
          "content" : "fd3d6134b5f07077b82ccf93d148dacf7c4ce5c971209510edd0e77e3e38c19e"
        },
        {
          "alg" : "SHA3-512",
          "content" : "c2a523916fb7c7d55a05d5e3d9e9b33000733f4b20a71be174e4e093e3f06ea78ad831edd1505527da7388105f8647efb7d5666ba852c90b4e2d5bb74256efbc"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-collections/commons-collections@3.2.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://commons.apache.org/collections/"
        },
        {
          "type" : "build-system",
          "url" : "https://continuum-ci.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/COLLECTIONS"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/viewvc/commons/proper/collections/trunk"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-collections/commons-collections@3.2.2?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-compress",
      "version" : "1.26.0",
      "description" : "Apache Commons Compress defines an API for working with compression and archive formats. These include bzip2, gzip, pack200, LZMA, XZ, Snappy, traditional Unix Compress, DEFLATE, DEFLATE64, LZ4, Brotli, Zstandard and ar, cpio, jar, tar, zip, dump, 7z, arj.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "cbc0bb8eca12b747ca21bf998d736e60"
        },
        {
          "alg" : "SHA-1",
          "content" : "659feffdd12280201c8aacb8f7be94f9a883c824"
        },
        {
          "alg" : "SHA-256",
          "content" : "051aceb8bbcc62d0f5b2b8ac72c53767f9c59bfbd050151e65bef6f51c8ed9c9"
        },
        {
          "alg" : "SHA-512",
          "content" : "acbeaa2909b809cd561e7156df18340d96abacb179325622d73bdd6b82cb9b387d6fcb1a44d8195aad4e786da299289e17598a1d337b7c7d1c0bc610cc128714"
        },
        {
          "alg" : "SHA-384",
          "content" : "052d4d0cd1929c4299dd9d37dd36eaea6ed2be6b04d6d83a94f8608a6d1138aa81f7a34f25113ac267e7ba25ce948c9a"
        },
        {
          "alg" : "SHA3-384",
          "content" : "8b0bf441e8ce793fb6513bc07551cc48ab4507696c18e6037b0fcf35bc4e1eb3e44ed962e2d3765c86d4d912770aa53e"
        },
        {
          "alg" : "SHA3-256",
          "content" : "e441768e06092053f4703844ec0c8f2b437e06e7c190d48fec9d7682beb94c40"
        },
        {
          "alg" : "SHA3-512",
          "content" : "5984f9f08f83789555677f6800f25fa8e80a9eb2e4d46b5fb117b8efc24753644fa103a2f6b619827661a41677991bc827965172ef25f1313d8a59154e615e8d"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-compress@1.26.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-compress/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-parent/actions"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/COMPRESS"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-compress.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-compress@1.26.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.flink",
      "name" : "flink-shaded-guava",
      "version" : "31.1-jre-17.0",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "b8c5129f4164f8ee2086854bdb289690"
        },
        {
          "alg" : "SHA-1",
          "content" : "00fa393c1db1308f4fb920f010f79c4c774e2f39"
        },
        {
          "alg" : "SHA-256",
          "content" : "03442ae97c4ca34388568cbce0e67e9911b0137b2b3849dff7a550008d5a4336"
        },
        {
          "alg" : "SHA-512",
          "content" : "15bb65f24054768915fbc29a95dfa93307b0babc39a02a204ae65eff44f259357b471fef9967b864b7a78e07d266933ce8e3eda8a866fcc73643cc38bcc5653f"
        },
        {
          "alg" : "SHA-384",
          "content" : "c8e6f2630c0824bbd1902a25884f09c076efbbbe0265f5d3fb49370affcff81ee5dd8b7887ba4bf063915446b937117a"
        },
        {
          "alg" : "SHA3-384",
          "content" : "a2ffbdbcfb8be61c43891fa19275a765b71e6830b110fa9ab77d46ac35527d2be0943d895767a70591895916963048c6"
        },
        {
          "alg" : "SHA3-256",
          "content" : "5a73e8e370e9bb3d634495dade320f0b569f4ed307fc147cb8f3af547bb6b057"
        },
        {
          "alg" : "SHA3-512",
          "content" : "abd1618c0568eee546f5b32314085bef40f8de74ffa5e52f0aa7a5bed82713142af8a1bdaf79f18e2210b79f8c3592276c54b2356594d19d8f56185ec9a457d5"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.flink/flink-shaded-guava@31.1-jre-17.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://flink.apache.org/flink-shaded-guava"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink-shaded/flink-shaded-guava"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.flink/flink-shaded-guava@31.1-jre-17.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "io.confluent.flink",
      "name" : "flink-clients",
      "version" : "1.20.5-cp2",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "e9849be2fd19873503509a1d4d26585f"
        },
        {
          "alg" : "SHA-1",
          "content" : "f89872a654e933540564c44f645412468fe28e62"
        },
        {
          "alg" : "SHA-256",
          "content" : "bf2bbeb4067991a870237cd26043a531275c86baf4b26f8d2346f43b60e16c9e"
        },
        {
          "alg" : "SHA-512",
          "content" : "ed0ae6453bc985fd3adf059ae5ff3490810b330cd3bbf9834b0087916adb4269266cfa62e0511413f13693a3926285e91053e3a3bbd33ede9bd629d6e926eab5"
        },
        {
          "alg" : "SHA-384",
          "content" : "cb54ce30f3ea5951a4c9341f41dc22acfa24de387687a5f4e61a895ad56e9b84e5d5cf3a07712f6f9deea599c6782b75"
        },
        {
          "alg" : "SHA3-384",
          "content" : "a6a31e253d14633ab0192f8119e459ea243d8b4fea8cb651b9748c4ba152ee0c296f293697c01c81a5206e2a778aafbf"
        },
        {
          "alg" : "SHA3-256",
          "content" : "0f29e3834c13eb4b236bb7ba58e4df9eb8f8ba66353134efa7f9dee2fc4b3faf"
        },
        {
          "alg" : "SHA3-512",
          "content" : "017b6080707af8eb8e979221b3ca23c49101353a041d98deb996affde8a248f7513a35b9cea87d44128d428568c51c4c4363c7a368053cb9353470fcefbec568"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.confluent.flink/flink-clients@1.20.5-cp2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://flink.apache.org/flink-clients"
        },
        {
          "type" : "distribution",
          "url" : "s3://cp-flink-staging-654654529379-us-west-2/maven-staging/12a166280c02d658ecafa7650035d3389f69bb81"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink/flink-clients"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.confluent.flink/flink-clients@1.20.5-cp2?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "io.confluent.flink",
      "name" : "flink-runtime",
      "version" : "1.20.5-cp2",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "e40017862f017815b2b8e57d85fcb12b"
        },
        {
          "alg" : "SHA-1",
          "content" : "2f1aeb4fe91fe0bbd041224b1184a49ceb842fdb"
        },
        {
          "alg" : "SHA-256",
          "content" : "08255abf12592e09f885cda07f9d1ec4347eb3099de6428e8fb00783ae1687b5"
        },
        {
          "alg" : "SHA-512",
          "content" : "4f9c2ed092c5ba8711ff23e10b8cbe073a93b2a48ab63d2a36c314b4f1e0e9dabb7b9dc605e5ecd63fcaae3bae8f42d5d7d105d94abd4246f943dc23edb41179"
        },
        {
          "alg" : "SHA-384",
          "content" : "c4f5ff5701ea7e5476219a2dfb839606bc85913b5ff278954269fec879ad309f787112b63ca44a453be70b9d398f25fa"
        },
        {
          "alg" : "SHA3-384",
          "content" : "51b3782aef155365236339750f74b51ed81436db66cf154faa8478ba48511312a0beac61f657860a3e5d61872bf80ffa"
        },
        {
          "alg" : "SHA3-256",
          "content" : "5a9b15fb76aad00c5a8ce788c4f7ea0474b9edbd7acae53fc3dbfc0de6205435"
        },
        {
          "alg" : "SHA3-512",
          "content" : "d2ab98d5ed13323c55b3547cc87472a2a37672692f1e8a81398763f0b556c963c8632c40487ee126db0f20da5cc8ac72e8504499f50ec2b2d6c520414b9b6dc6"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.confluent.flink/flink-runtime@1.20.5-cp2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://flink.apache.org/flink-runtime"
        },
        {
          "type" : "distribution",
          "url" : "s3://cp-flink-staging-654654529379-us-west-2/maven-staging/12a166280c02d658ecafa7650035d3389f69bb81"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink/flink-runtime"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.confluent.flink/flink-runtime@1.20.5-cp2?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "io.confluent.flink",
      "name" : "flink-optimizer",
      "version" : "1.20.5-cp2",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "8995b0a26d936107e23088928b24d149"
        },
        {
          "alg" : "SHA-1",
          "content" : "062228475f91804d6674ae787f500cd69ad269f1"
        },
        {
          "alg" : "SHA-256",
          "content" : "1d2909962801644c997834c0f0a5d67b2ff257d01e22464310d3ae6588ccc32c"
        },
        {
          "alg" : "SHA-512",
          "content" : "1859ff6b3994facf9ccb08524e09ad3c87f37eeafb05c63c9f21d5b9073de072e90cd7d21ff1722d2fc46ba3edb39fd7b8429d7bc74d44ab0713d5fe4de5eb67"
        },
        {
          "alg" : "SHA-384",
          "content" : "4e208b3e1283562d82ecbb3fc76f6f1aaee49d418fbe5f2e68092eded4765a0b5e4094780f4ec4e868de5c9318392438"
        },
        {
          "alg" : "SHA3-384",
          "content" : "6da75a175c6f9b77b3516a42c4919dc81102f8535073841afedcf0c3103228bdd26038287b446458ec3216a828b40196"
        },
        {
          "alg" : "SHA3-256",
          "content" : "3914c275d230544b3da2c278f7c40821cb32e5b6690c5de7a8ea331186440f07"
        },
        {
          "alg" : "SHA3-512",
          "content" : "4fbc850a880cf67a0ac4903000e7ccd679d5bbf79f9b79adf726bfa723382af9f8131d2a72fb0316efd6c38a51e11aa17eb8492099dea04280f225cec21b8258"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.confluent.flink/flink-optimizer@1.20.5-cp2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://flink.apache.org/flink-optimizer"
        },
        {
          "type" : "distribution",
          "url" : "s3://cp-flink-staging-654654529379-us-west-2/maven-staging/12a166280c02d658ecafa7650035d3389f69bb81"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink/flink-optimizer"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.confluent.flink/flink-optimizer@1.20.5-cp2?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-cli",
      "name" : "commons-cli",
      "version" : "1.5.0",
      "description" : "Apache Commons CLI provides a simple API for presenting, processing and validating a Command Line Interface.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "6c3b2052160144196118b1f019504388"
        },
        {
          "alg" : "SHA-1",
          "content" : "dc98be5d5390230684a092589d70ea76a147925c"
        },
        {
          "alg" : "SHA-256",
          "content" : "bc8bb01fc0fad250385706e20f927ddcff6173f6339b387dc879237752567ac6"
        },
        {
          "alg" : "SHA-512",
          "content" : "b78ac2b418e9e9e7d0bc866664577199d320408a6f03151b3789bac365c986dd526df853599e633d7e50fe136cbf3eb9ce50c9cfa0ad38c3cc8d8ee416f61c40"
        },
        {
          "alg" : "SHA-384",
          "content" : "a7a2daa807c4007c506b5100f0a9b526c0052c4e1f6b699904ef9d2aba8195b6003dc4d47ca133b15e2f3e830bdbe6c4"
        },
        {
          "alg" : "SHA3-384",
          "content" : "44ca97514a2e34b5bf3de9b5d45c8e871f6eee517db7f3c4b4476eb3e8dfe9a9d8760f3181114708288c373727b42475"
        },
        {
          "alg" : "SHA3-256",
          "content" : "a0a47001d3a293f129ffc21f17f575a9d23ce5b88b440e651e4cd01edd0cc421"
        },
        {
          "alg" : "SHA3-512",
          "content" : "483dae23d6827a105d17847c8c813527f19042b65c4d09635dfc4bfd25990fe3ba2a997540460fd5b1d72ca3add9a38ca8b32004680764db972a9bb62f7f68d8"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-cli/commons-cli@1.5.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-cli/"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/CLI"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-cli.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-cli/commons-cli@1.5.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "io.confluent.flink",
      "name" : "flink-datastream",
      "version" : "1.20.5-cp2",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "2f98834a406ab2c8834ab6c8501b94d7"
        },
        {
          "alg" : "SHA-1",
          "content" : "97e49478e54c38871d5ae1e58a85c6a12cf7e060"
        },
        {
          "alg" : "SHA-256",
          "content" : "392afd267ce512ca56c9cf898b7aaf9ea0735b219ac74f2f81e72fe9da97d281"
        },
        {
          "alg" : "SHA-512",
          "content" : "48b86d637ebecbfe2f179dc2b41919367ac65ea79799f1d25f9af4278c2c495760cb87c66b28339a68bb3941c213efc00abc026f758c0f86a36900d048548d31"
        },
        {
          "alg" : "SHA-384",
          "content" : "1d10bcec505bca94b3bf6495d32820e2dd34dac5afbd080c7ea5b323ab76faf4f8a982137f2ebd46f44746aff770baf5"
        },
        {
          "alg" : "SHA3-384",
          "content" : "8bc9e3343738d48892db27ad6d99471cbb3035e10bf44c6327d2153448d36ba3eb5c8d028c8c40d5683df1181b8d0467"
        },
        {
          "alg" : "SHA3-256",
          "content" : "0e7ba775283c8eda57e6c1fc7b3ae7a1700f3d8c3706217e4d5bad544e94b220"
        },
        {
          "alg" : "SHA3-512",
          "content" : "1d4b8251dc480aa14ddafe559ca632f22ec9dbcfbbb97994521d179ef680d7375d20c1e43ad3c9dededdcf1640bfe75a6b1e65d5a203e77ee492a23642a851e2"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.confluent.flink/flink-datastream@1.20.5-cp2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://flink.apache.org/flink-datastream"
        },
        {
          "type" : "distribution",
          "url" : "s3://cp-flink-staging-654654529379-us-west-2/maven-staging/12a166280c02d658ecafa7650035d3389f69bb81"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink/flink-datastream"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.confluent.flink/flink-datastream@1.20.5-cp2?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "io.confluent.flink",
      "name" : "flink-datastream-api",
      "version" : "1.20.5-cp2",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "57d96696f479f693814e804d6c7d0678"
        },
        {
          "alg" : "SHA-1",
          "content" : "ef85603fc711eca870c1e2b52aef9174713a2ff9"
        },
        {
          "alg" : "SHA-256",
          "content" : "4bdad5a0c53cbae5db724153688889e2a8be777c7a4a8cbb25f1f463f5690f01"
        },
        {
          "alg" : "SHA-512",
          "content" : "28ebe43223d2a625d8296d59d11fc5f1f43f2f568d766a6bceb253abdaffab199fa5b7fe5036516be75da458a06c8145a8f6c01e502b500b8e7f5c580a7bfac3"
        },
        {
          "alg" : "SHA-384",
          "content" : "b43cdd736fdfa3b738dc23007f3d0ed0604c7690b1680c724b3c8958be1e9e875a28c4cc72c7d6ed6e6a8ddd811215b2"
        },
        {
          "alg" : "SHA3-384",
          "content" : "5d5035c13559f2a080a3018ebd1e9f3a80785dacedfc2fc0e2c6f6a0297a47d36a262b89b882e0e3a5fd8cbedd615bef"
        },
        {
          "alg" : "SHA3-256",
          "content" : "0aa2fad4812623fc256e11299c4491fa48dfa56120fb7eba8b521820a17986d6"
        },
        {
          "alg" : "SHA3-512",
          "content" : "66b9d1c5b404520d9e8212457b9afe6f1e8cfff763c7d9c41c68c722853fd54c66d2371e53d5d69dcc131e23b48bb61b1b595befd1fb7856a13de2792ac01f1c"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.confluent.flink/flink-datastream-api@1.20.5-cp2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://flink.apache.org/flink-datastream-api"
        },
        {
          "type" : "distribution",
          "url" : "s3://cp-flink-staging-654654529379-us-west-2/maven-staging/12a166280c02d658ecafa7650035d3389f69bb81"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink/flink-datastream-api"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.confluent.flink/flink-datastream-api@1.20.5-cp2?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "io.confluent.flink",
      "name" : "flink-java",
      "version" : "1.20.5-cp2",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "04f69cabdd99dbacd16d5e14fd806c92"
        },
        {
          "alg" : "SHA-1",
          "content" : "28aeb52d73468ac20f2aba9a26a789c6e1719a87"
        },
        {
          "alg" : "SHA-256",
          "content" : "fe62cc925361600ee9bf896aff0dad172898170378e1525e0dad2c68ae0f1685"
        },
        {
          "alg" : "SHA-512",
          "content" : "37fa838c36acb2dc39964aac463e8d30e9e52e1b4d6f525d36c73963a21f349c909ef1784af509fad33963402c7f0986f2ee5b570c08e3b4ce1354f252115a7c"
        },
        {
          "alg" : "SHA-384",
          "content" : "4929ac30b6e4baa139d43c998856568f947277eedfd39ea80655bdf30443bb09137f9f65f4663372fcaab2b6af70d7c2"
        },
        {
          "alg" : "SHA3-384",
          "content" : "00c0585fbcc7c842dd964a4afd528dc3eb8a5005a085aa8f8eb8b749433e91d7cac95e39ff296f4a292c71738feca2b2"
        },
        {
          "alg" : "SHA3-256",
          "content" : "ef09aa736c1d96c8026e74598ea65b4bba566470aa2b1d3afcc4838ac9af2f35"
        },
        {
          "alg" : "SHA3-512",
          "content" : "019dfcb8e3246bdd959aba14c285bcba76ff6b973b9136dc23dcb41ae58f6541ffa4576d25decd2e44f33c2e57683655f6f4c3db20eaac2e05eaab08d3c29238"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.confluent.flink/flink-java@1.20.5-cp2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://flink.apache.org/flink-java"
        },
        {
          "type" : "distribution",
          "url" : "s3://cp-flink-staging-654654529379-us-west-2/maven-staging/12a166280c02d658ecafa7650035d3389f69bb81"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink/flink-java"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.confluent.flink/flink-java@1.20.5-cp2?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-math3",
      "version" : "3.6.1",
      "description" : "The Apache Commons Math project is a library of lightweight, self-contained mathematics and statistics components addressing the most common practical problems not immediately available in the Java programming language or commons-lang.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "5b730d97e4e6368069de1983937c508e"
        },
        {
          "alg" : "SHA-1",
          "content" : "e4ba98f1d4b3c80ec46392f25e094a6a2e58fcbf"
        },
        {
          "alg" : "SHA-256",
          "content" : "1e56d7b058d28b65abd256b8458e3885b674c1d588fa43cd7d1cbb9c7ef2b308"
        },
        {
          "alg" : "SHA-512",
          "content" : "8bc2438b3b4d9a6be4a47a58410b2d4d0e56e05787ab24badab8cbc9075d61857e8d2f0bffedad33f18f8a356541d00f80a8597b5dedb995be8480d693d03226"
        },
        {
          "alg" : "SHA-384",
          "content" : "95d1186d9ca06a3ea2e6437ddec3a55698e2493d3e72f6f554746b74fa929892bd71a2ab501a4e7b1ce56b7cd64e7ab4"
        },
        {
          "alg" : "SHA3-384",
          "content" : "f85bb3e46a00fc4940a3be1331301302b0eb728e2d1fe2c1842d4761e5a0bc7a420c0c705ae60250ca1c7b03d3694b9e"
        },
        {
          "alg" : "SHA3-256",
          "content" : "919c15ae4b1aef2a58aa6ea4b700bc5562e78dbc382f3393169425ca91ad368c"
        },
        {
          "alg" : "SHA3-512",
          "content" : "dbe54d586c898cdbd7df6c31c131ca3525db17fcea5c7f5da8cbfe617e2afc667289290c76771ec5c9567a56fb2b177b0a31d67abcc656410c90287da4d88999"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-math3@3.6.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://commons.apache.org/proper/commons-math/"
        },
        {
          "type" : "build-system",
          "url" : "https://continuum-ci.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/MATH"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://git-wip-us.apache.org/repos/asf?p=commons-math.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-math3@3.6.1?type=jar"
    },
    {
      "publisher" : "com.twitter",
      "group" : "com.twitter",
      "name" : "chill-java",
      "version" : "0.7.6",
      "description" : "chill-java",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "886eb8ef6db3880433f4a8e10ef37300"
        },
        {
          "alg" : "SHA-1",
          "content" : "a74b8d019d6941d82ff86d1612e382f4a0ae8259"
        },
        {
          "alg" : "SHA-256",
          "content" : "f7c41a2257be11e6c9bca97095c8f4b0299626941a3508469f90622eb8f8368e"
        },
        {
          "alg" : "SHA-512",
          "content" : "dc9973909b87cfb85ee45c90662612dd2bc137b7510172221eb47020f76b23eb3ea76c6b4fba4cee5d81e910f87aba71359136d33ae0f6424e3ce7123bf77dbf"
        },
        {
          "alg" : "SHA-384",
          "content" : "41e7faed7c2c22987868fba7cd6dac0d59d174d82d841ba4e5aa8675cc9265bf9d9df021553a781cfa24c4c9c7a35c5c"
        },
        {
          "alg" : "SHA3-384",
          "content" : "32751d6ecd77676ffa11a109dead8c8d19a6d1d78576b19ac5a8323d9446ba51fba87e0d60820dd2bac69fb705aa2061"
        },
        {
          "alg" : "SHA3-256",
          "content" : "6bdf2ed042c5b7f4f4d11bb52e448ce740e18563364f66730ca2b6b4eadf0401"
        },
        {
          "alg" : "SHA3-512",
          "content" : "0ab14bee65d85803d5080f3b0ad86183daafb61e3ca3a610e199bc04a11421b45436e405dc3c227b5d80a64178ca82739eccb5ad8ee157efa925d484d9daae28"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.twitter/chill-java@0.7.6?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/twitter/chill"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.twitter/chill-java@0.7.6?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "io.confluent.flink",
      "name" : "flink-streaming-java",
      "version" : "1.20.5-cp2",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "948c4d1d9a57768524797464f497b093"
        },
        {
          "alg" : "SHA-1",
          "content" : "5023739fb63f56e01864de52325c40c65e76d83d"
        },
        {
          "alg" : "SHA-256",
          "content" : "3395fe9e5bd09b8ab70e65f96275f2ad44f1567679398003b84c0115e14fa7b5"
        },
        {
          "alg" : "SHA-512",
          "content" : "db805504612d9a2dee7d15175d5d174e7bd96f196cc42ed3a3d3137d19ff8ea181175b6a5fef79d0a17c01d33a9a45dbed9fda04083fa34757219c977b3b00c0"
        },
        {
          "alg" : "SHA-384",
          "content" : "f850084f02c658aad39a124c7cbe5de072f2c8c0ebe4a677d8f425960289135c52d5b973f576aed4a2a8ba3954aee75b"
        },
        {
          "alg" : "SHA3-384",
          "content" : "bb8da90e7b8fb462cd17773cca31c0d699ba17c9a1c4b12934029216c0dbb934f2884bda6ac94cf9f62ae930137e00ba"
        },
        {
          "alg" : "SHA3-256",
          "content" : "4f333743c129389b9dcc2f53e5b7dec501b7d85f7d747d4c0e466a071f3260de"
        },
        {
          "alg" : "SHA3-512",
          "content" : "4f06fcde62f3581de6e2485f5416018dff09b7c4e0406084fee61e1024408245602f808280f2e2f2f9a34ec3cbd723aa89ce8b8c4ec352a0f09456b3f8173ac1"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.confluent.flink/flink-streaming-java@1.20.5-cp2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://flink.apache.org/flink-streaming-java"
        },
        {
          "type" : "distribution",
          "url" : "s3://cp-flink-staging-654654529379-us-west-2/maven-staging/12a166280c02d658ecafa7650035d3389f69bb81"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink/flink-streaming-java"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.confluent.flink/flink-streaming-java@1.20.5-cp2?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "io.confluent.flink",
      "name" : "flink-file-sink-common",
      "version" : "1.20.5-cp2",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "8c6c402fe02844acb1b28602ba12dfd8"
        },
        {
          "alg" : "SHA-1",
          "content" : "c5a708fd3e315ed5be43c4356a0fd0430ed7890b"
        },
        {
          "alg" : "SHA-256",
          "content" : "64fd4b2ac08fa24a24c47955b96a4da91b74cc1b84dea666d1086664c885ddab"
        },
        {
          "alg" : "SHA-512",
          "content" : "8994727b0a0390a865453807660bde7f9b3e48155ea5b87d88e65ac26f89091b6c951fbd47f794a9cc7ba53c67e617b6749cc0c1de1ca6e0cbfbae6448fc65f1"
        },
        {
          "alg" : "SHA-384",
          "content" : "a3f8eb9e82ceb65657c4656f8e6a3b79ee3ac117dfcf51156562c165f7b192198a68a2e7380ef4a46612f11d9480e701"
        },
        {
          "alg" : "SHA3-384",
          "content" : "c6521a75e481205948ce76ada63efaac62fc847011cc06694a71cb076e33990c4c933b56f5c14dac739aca34dfa5424c"
        },
        {
          "alg" : "SHA3-256",
          "content" : "4a0c184e1f50b5a5174b15c19124bdd4e06994bef88c0330e57804fef0d202ce"
        },
        {
          "alg" : "SHA3-512",
          "content" : "68c7aaea4077eba83cd45debd98ad616d48a034842153a59d0253e775a25653586ae13d126cf5115a017180e7712b203e4ae5ced280de78f7909d5ecb0100d04"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.confluent.flink/flink-file-sink-common@1.20.5-cp2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://flink.apache.org/flink-connectors/flink-file-sink-common"
        },
        {
          "type" : "distribution",
          "url" : "s3://cp-flink-staging-654654529379-us-west-2/maven-staging/12a166280c02d658ecafa7650035d3389f69bb81"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink/flink-connectors/flink-file-sink-common"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.confluent.flink/flink-file-sink-common@1.20.5-cp2?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "io.confluent.flink",
      "name" : "flink-connector-datagen",
      "version" : "1.20.5-cp2",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f73f2867d59dcaa411f78572eefa41f4"
        },
        {
          "alg" : "SHA-1",
          "content" : "0e340d6ad0533f98d6e6dc3c95493b21dac8a20c"
        },
        {
          "alg" : "SHA-256",
          "content" : "34311d38de2ed395a64a017815123ffbd6aa0ea3eeb630c246ba0c185976ab93"
        },
        {
          "alg" : "SHA-512",
          "content" : "2e69d968acce74c59a2c487f1dfd11e7208c49496d19b3868073e7495cf7e1e9f76434a9eae46309c76c012ddf0f897256a8f34af52a0b62cf8ba62ad1ffff93"
        },
        {
          "alg" : "SHA-384",
          "content" : "7eec26cc1bad0da12763a8e21f912db4ff668d8d60aee2edf3d5dd0daa660d9f4b31eb7791b0514e6d0b99b16f6c7ce3"
        },
        {
          "alg" : "SHA3-384",
          "content" : "debf3b62ed542b8b398208a3e852a224af2d3eae36695454eea734e4a75e15ece9fd6a59257db8487104b0a377d0c6fb"
        },
        {
          "alg" : "SHA3-256",
          "content" : "40f7be12e3edd3f6175b2ec1a520bb1b6a4788c30b8e39389808d6a3cc0e6c34"
        },
        {
          "alg" : "SHA3-512",
          "content" : "19f365e53cc4c9acb32bbd3883260652da194b6ebc481ccbe91369cd81ad81661f6fcaed15e826381830154c2889bfb25152d36c7198cc2e4135074c9aae90fa"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.confluent.flink/flink-connector-datagen@1.20.5-cp2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://flink.apache.org/flink-connectors/flink-connector-datagen"
        },
        {
          "type" : "distribution",
          "url" : "s3://cp-flink-staging-654654529379-us-west-2/maven-staging/12a166280c02d658ecafa7650035d3389f69bb81"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink/flink-connectors/flink-connector-datagen"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.confluent.flink/flink-connector-datagen@1.20.5-cp2?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "io.confluent.flink",
      "name" : "flink-table-common",
      "version" : "1.20.5-cp2",
      "description" : "This module contains extension points of the Table/SQL API. It allows for implementing user-defined functions, custom formats, etc. with minimal dependencies.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "02eebd1bac32695ce78548b769b0ba00"
        },
        {
          "alg" : "SHA-1",
          "content" : "0fc977bc1593fa8cc7450948d549e20eb889784d"
        },
        {
          "alg" : "SHA-256",
          "content" : "eb54bbb1027ffd34481045e15d28a8a290edb78607b04c181c598579099205d7"
        },
        {
          "alg" : "SHA-512",
          "content" : "a42a4a88fb6bda8312c11766ca63528fdc30be220dde25a44ad50f7d79b811c7f7a1342a5bea5159d9bdffeebb7bff6b8dc0def2979e6f84047bc2566c5b110c"
        },
        {
          "alg" : "SHA-384",
          "content" : "5fcda3b3db31062835a5b640fe93fde98ca82029ed59af6020b52582b52ac27878d53e9af660ce74875452f49d78da32"
        },
        {
          "alg" : "SHA3-384",
          "content" : "a0c9c70381e4d6b017c287d5d787e095c537d6551b9443e9be8ed874f5ddf75fc0d0e5552a97cfa8a374adfd6c6b943b"
        },
        {
          "alg" : "SHA3-256",
          "content" : "0f17b99d8fa95215d9a01867b35923508140d313ffdbebc7377efb7cadb50f12"
        },
        {
          "alg" : "SHA3-512",
          "content" : "d808f03c6984f39445907df2f760e85b43786976be5846827d2de19c9a5ddb12cb15eeb5f72e7591aa32f8f11363136444420def3432c9f4b5426b01669c9987"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.confluent.flink/flink-table-common@1.20.5-cp2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://flink.apache.org/flink-table/flink-table-common"
        },
        {
          "type" : "distribution",
          "url" : "s3://cp-flink-staging-654654529379-us-west-2/maven-staging/12a166280c02d658ecafa7650035d3389f69bb81"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink/flink-table/flink-table-common"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.confluent.flink/flink-table-common@1.20.5-cp2?type=jar"
    },
    {
      "group" : "com.ibm.icu",
      "name" : "icu4j",
      "version" : "67.1",
      "description" : "International Component for Unicode for Java (ICU4J) is a mature, widely used Java library providing Unicode and Globalization support",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "046a5f59abf6b67a464dea584d11e59d"
        },
        {
          "alg" : "SHA-1",
          "content" : "2e159807158095566726600534034030dddab6d0"
        },
        {
          "alg" : "SHA-256",
          "content" : "c4eb904caf5fba968a2f1a3b8aef14df801e9329b21697209ca30bfcf153867d"
        },
        {
          "alg" : "SHA-512",
          "content" : "b3036b162356a0a5dad39eee611dae27c6fbe53f9e5ec1f3529ab02d49d97093b58602f43dd855433a0bbe02f6253e46a9d1899911c8e2e73001ab2c9a79d68d"
        },
        {
          "alg" : "SHA-384",
          "content" : "c2b28649d0ef9bf68f258a9f432c627a553ead79670f0a7ada3d986091a0001c5ab9eca372f792734bff733370a61fb1"
        },
        {
          "alg" : "SHA3-384",
          "content" : "3726bfa8b77bd0cdd66564944044d82dca3ee1fcf2594ebf1a7acc6752faf4c11892a1744af27e5528dc4b991e4cd0c0"
        },
        {
          "alg" : "SHA3-256",
          "content" : "cb19cec2baad1dc610267b2c98325f5c742230caf2247ef6297dfe8d9be9f11d"
        },
        {
          "alg" : "SHA3-512",
          "content" : "f46e4ead1cc1c05c3825716485ce79c890500a5356f8e7ca578f3080c09fb2460fb1aed81d65d345c402706906ea4e96afc0ff03c50fb0ac5bbacd351a8f11ec"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "Unicode/ICU License",
            "url" : "https://raw.githubusercontent.com/unicode-org/icu/master/icu4c/LICENSE"
          }
        }
      ],
      "purl" : "pkg:maven/com.ibm.icu/icu4j@67.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://icu-project.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://unicode-org.atlassian.net/projects/ICU"
        },
        {
          "type" : "mailing-list",
          "url" : "http://sourceforge.net/mailarchive/forum.php?forum_name=icu-support"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/unicode-org/icu"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.ibm.icu/icu4j@67.1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "io.confluent.flink",
      "name" : "flink-table-runtime",
      "version" : "1.20.5-cp2",
      "description" : "This module contains classes that are required by a task manager for execution of table programs.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "e3a8bc5e050646e46fa7d4adbc85c742"
        },
        {
          "alg" : "SHA-1",
          "content" : "99b2df7ff9b39bff1ba3efec631c8c81dcce5412"
        },
        {
          "alg" : "SHA-256",
          "content" : "775be2d79f9aa916eb2da1c835b441cb00662ce56947206754d7d3f2b76c45cb"
        },
        {
          "alg" : "SHA-512",
          "content" : "f022f4bff62fe6280be6903226b811e961dba15e25286f27d324ed8a06eeed8864a2d0e0756240f6fb9ecf9a24ffd6918d00702062f20ac60a4d13fdc8054bab"
        },
        {
          "alg" : "SHA-384",
          "content" : "fcb5d3fb10430f3570d4b901f20c4afa3be7d99706dab43b88db69cdaded2630e0d231d9c27c51480e8ac3ec26039a06"
        },
        {
          "alg" : "SHA3-384",
          "content" : "7ddaa6814606deb8fe43adb1e9389c58f61bf355a6425d4fc25cdb686789ac5dc954372fef42433f2ebd03a60bd66f8d"
        },
        {
          "alg" : "SHA3-256",
          "content" : "cdaa2471f66873d3da2d360212e8aa05b03542b7bd0357c5ad9a5a71857b95bd"
        },
        {
          "alg" : "SHA3-512",
          "content" : "858acb405548c2b54ed8f67d2b44bc30cbc7fcaca1dd6b2938c89c933dbea2525865e342b890e32c32dd2914fb29ee070ab1abe36431cab19de44ee55bbc78cb"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.confluent.flink/flink-table-runtime@1.20.5-cp2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://flink.apache.org/flink-table/flink-table-runtime"
        },
        {
          "type" : "distribution",
          "url" : "s3://cp-flink-staging-654654529379-us-west-2/maven-staging/12a166280c02d658ecafa7650035d3389f69bb81"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink/flink-table/flink-table-runtime"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.confluent.flink/flink-table-runtime@1.20.5-cp2?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "io.confluent.flink",
      "name" : "flink-table-api-java",
      "version" : "1.20.5-cp2",
      "description" : "This module contains the Table/SQL API for writing table programs within the table ecosystem using the Java programming language.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "85fba0e7cafbb1e3dbf8119c32af927a"
        },
        {
          "alg" : "SHA-1",
          "content" : "5e401926cc7b52a390402a3d7e23c31d7771f81c"
        },
        {
          "alg" : "SHA-256",
          "content" : "5ccdc1fadebdd18b72744bcfbb37888e0449d273d0c145669d34728fbc6c713f"
        },
        {
          "alg" : "SHA-512",
          "content" : "4d110d97d68f74e821b038fdd1cd00351e1c7b7342e09fbd781d76b34b857af8a58a80d0daaa07799c5cffd90e93ce8315b059a7474cce77fdd226017043f2b3"
        },
        {
          "alg" : "SHA-384",
          "content" : "47ad8c38057c60b233afdcdf5e891cc166cff6a0a63cb40cdf4b14bc51e35f699af6341146113d811330c1b604d1e890"
        },
        {
          "alg" : "SHA3-384",
          "content" : "6fb34840f34b6aabbdab08cab1b4551b2163512e856a62f346e1a6d2874148264986e3566bc690b9a0e3c5503a881eec"
        },
        {
          "alg" : "SHA3-256",
          "content" : "33d96d874883762fda83c9d764331cf9c7f0f36eccf2fdb470287fd2d88f41cf"
        },
        {
          "alg" : "SHA3-512",
          "content" : "a2002255fa8009fe36f6366722c646ba81fdc32913df72c96d45a897598b6eac9c3667bbb80388b0a4dd3778f9c1203af054043caeaacd8eb7d7f4ea4a010b25"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.confluent.flink/flink-table-api-java@1.20.5-cp2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://flink.apache.org/flink-table/flink-table-api-java"
        },
        {
          "type" : "distribution",
          "url" : "s3://cp-flink-staging-654654529379-us-west-2/maven-staging/12a166280c02d658ecafa7650035d3389f69bb81"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink/flink-table/flink-table-api-java"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.confluent.flink/flink-table-api-java@1.20.5-cp2?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "io.confluent.flink",
      "name" : "flink-table-api-java-bridge",
      "version" : "1.20.5-cp2",
      "description" : "This module contains the Table/SQL API for writing table programs that interact with other Flink APIs using the Java programming language.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "926921986ca1b4c72ec7d685cc53ab23"
        },
        {
          "alg" : "SHA-1",
          "content" : "038828149dbd7cb754cfbd60ceeebe8d419ba8ff"
        },
        {
          "alg" : "SHA-256",
          "content" : "59768fe296e3eb8d8fae3b8dc43006e24463fba00758b71487dcc540b7d5bc79"
        },
        {
          "alg" : "SHA-512",
          "content" : "480b1095ac24161d7f1de220a7462c6cc9dc494b2a366ef3d69b504b62af1e7da860475fcdaea2d15878722a6c2f338dc0581c322355182d05e7c90589b0c8c5"
        },
        {
          "alg" : "SHA-384",
          "content" : "64d1a1f8fa2d7fc5c80c7e25f5306a1a0e906437bfbbe405612e92ebcc51b69434ae275b0cb4f8ae109af839e577f232"
        },
        {
          "alg" : "SHA3-384",
          "content" : "cf506bceae1ebbe56cbc04f3e1d70c51589f53b3188bb6ee345c1f023c60b8b99053c0793467daa796cbf465d1cc60a3"
        },
        {
          "alg" : "SHA3-256",
          "content" : "5bca0f369212158035cef8de16e82c5bd6194b0c148fb7a4fe8a5775ff224613"
        },
        {
          "alg" : "SHA3-512",
          "content" : "316bed38db0504803720dcdbd3c20799541f1368130b1dd08b3ffbe94decb036b367e2193905417b738fa5a526186de8244c92f432b302dff775892485820b78"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.confluent.flink/flink-table-api-java-bridge@1.20.5-cp2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://flink.apache.org/flink-table/flink-table-api-java-bridge"
        },
        {
          "type" : "distribution",
          "url" : "s3://cp-flink-staging-654654529379-us-west-2/maven-staging/12a166280c02d658ecafa7650035d3389f69bb81"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink/flink-table/flink-table-api-java-bridge"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.confluent.flink/flink-table-api-java-bridge@1.20.5-cp2?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "io.confluent.flink",
      "name" : "flink-table-api-bridge-base",
      "version" : "1.20.5-cp2",
      "description" : "This module contains the base code for bridging between Table API and DataStream API for both Java and Scala.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "acc9a249cd822d29c901dc245ea44a48"
        },
        {
          "alg" : "SHA-1",
          "content" : "8cd834fb43722c9bc171a67f97f7c66b6ddf71db"
        },
        {
          "alg" : "SHA-256",
          "content" : "7c5ff690c5dcc38c87e094a030886563219f3ff06646f3985fe7a08ec7177b3d"
        },
        {
          "alg" : "SHA-512",
          "content" : "de9513fb2bf2f0de93ede88285969db98877d7b9ee34bd51e2f4076584f487b5f338b1c4686bc53c94c7c7afd1bdc428e10f9e93bb701306c6c462f7a2ea3866"
        },
        {
          "alg" : "SHA-384",
          "content" : "898579c80763855c3a1c7ed29d25088076bcbc011804541ca54c998d6ef1e6ef176c5fde11ad06b86d9262b9a58a99d9"
        },
        {
          "alg" : "SHA3-384",
          "content" : "fc4300fb4cf7a6335e7a92e6e94cfda21548aecafbbf935fa77801d2f3160ca3996624da92d41ce58d58ec4161994385"
        },
        {
          "alg" : "SHA3-256",
          "content" : "5a4a4e2a83a85fee72d7060325de108939a239b96e3d516bdb953a9f2a8b01bf"
        },
        {
          "alg" : "SHA3-512",
          "content" : "4caf781084ca32b284f561eda2a4f3e1910dad6caca42f0b5c47bae3548a98f49989fcad0ff8e66369dcb36ecb583f980f8ad64b3186e8ea17d25d34eb6c81d8"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.confluent.flink/flink-table-api-bridge-base@1.20.5-cp2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://flink.apache.org/flink-table/flink-table-api-bridge-base"
        },
        {
          "type" : "distribution",
          "url" : "s3://cp-flink-staging-654654529379-us-west-2/maven-staging/12a166280c02d658ecafa7650035d3389f69bb81"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink/flink-table/flink-table-api-bridge-base"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.confluent.flink/flink-table-api-bridge-base@1.20.5-cp2?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "io.confluent.flink",
      "name" : "flink-cep",
      "version" : "1.20.5-cp2",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "d7603edb594a2c676b6d1ac015fbdfe4"
        },
        {
          "alg" : "SHA-1",
          "content" : "4a265428040521b9f994eed434c576e61136d39b"
        },
        {
          "alg" : "SHA-256",
          "content" : "dbc6993b3a2091f9ff8044c1fb1641b2b211701b1be8e16d7e5573cd9f6ad48e"
        },
        {
          "alg" : "SHA-512",
          "content" : "1ee9567f5676fbc21b53232e8997a5a890587a6dbb07b919bc6049670f40f4c7a380d14ca9574ae71766b950a2214dc368332f7fc90b1fe748e8bd20d77dfd5f"
        },
        {
          "alg" : "SHA-384",
          "content" : "c46220ff409c89cb1679e496c64ebf35935e2506a4351e6dfdfa1abc506369d068080010933810a6002e0eb4f666a548"
        },
        {
          "alg" : "SHA3-384",
          "content" : "7975f58fac4818db9bc99fe144b440f0be76e4b248f5bf4125bb476d77b1530b7b1fd96282347ed742d6d9332bf2d496"
        },
        {
          "alg" : "SHA3-256",
          "content" : "7dd37fe8b889ec718b6c889984acf25598d0133e7426bfb62b5233493e79178f"
        },
        {
          "alg" : "SHA3-512",
          "content" : "df99ce2bd2e067c5a9bdf4022344707e293d49a6d7d5652363c24623e495c4e527987bf353da4221e4204249e65c902d6afc7c04b61dc3a33a057cecdb4227b3"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.confluent.flink/flink-cep@1.20.5-cp2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://flink.apache.org/flink-libraries/flink-cep"
        },
        {
          "type" : "distribution",
          "url" : "s3://cp-flink-staging-654654529379-us-west-2/maven-staging/12a166280c02d658ecafa7650035d3389f69bb81"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink/flink-libraries/flink-cep"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.confluent.flink/flink-cep@1.20.5-cp2?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "io.confluent.flink",
      "name" : "flink-connector-files",
      "version" : "1.20.5-cp2",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "4ecf7cad88889a1ef1358ee8e6a0e900"
        },
        {
          "alg" : "SHA-1",
          "content" : "6161b823a0ebbfbe3337edadc971ee8c094e92cd"
        },
        {
          "alg" : "SHA-256",
          "content" : "5804e36e0783a30a8eed3fabc40d5f4eb3629d21516e3ae0dd5f991b7db219d9"
        },
        {
          "alg" : "SHA-512",
          "content" : "5f42cb88d84fa9241a7864c886f09bccbee20cded3277f17e2a591fcd25360df84c4ef8f934618bdf5c26d31e52c49a4507dfe7c09196314a113c5f4d45b28c9"
        },
        {
          "alg" : "SHA-384",
          "content" : "95e7a3b1d95f3c238638a39e0b8fd23f3585db4c2b2bc1c08d9711a1e24a8429f3b0758e1e6a36425e120d11bbf5382d"
        },
        {
          "alg" : "SHA3-384",
          "content" : "2756f85830b998c69ae548058351865cbb530fc1bb1c34549e3154e6fa639adb5f475c08412ce391f8865d543525f0ad"
        },
        {
          "alg" : "SHA3-256",
          "content" : "11a54e5da40f454f617cfb555c8aa0cd600ecbbb4bfe0f4e132f745217f77714"
        },
        {
          "alg" : "SHA3-512",
          "content" : "4b81b7ccbb5a61252bf75e18da29af4a11c2e44b5c26c128a6df3f4f836ae06cd9df19a9904d8d03203d4ebc417967763aa52c6162252d076fc28948c54cf838"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.confluent.flink/flink-connector-files@1.20.5-cp2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://flink.apache.org/flink-connectors/flink-connector-files"
        },
        {
          "type" : "distribution",
          "url" : "s3://cp-flink-staging-654654529379-us-west-2/maven-staging/12a166280c02d658ecafa7650035d3389f69bb81"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink/flink-connectors/flink-connector-files"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.confluent.flink/flink-connector-files@1.20.5-cp2?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "io.confluent.flink",
      "name" : "flink-csv",
      "version" : "1.20.5-cp2",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "3457a96d366f126685718c730fdcaa73"
        },
        {
          "alg" : "SHA-1",
          "content" : "12da228570beb977f1a3e554780b0e93792c3523"
        },
        {
          "alg" : "SHA-256",
          "content" : "0351ed79a9b7c933c200593068ecc7df79172c523b2847ca52f4e464bf90f472"
        },
        {
          "alg" : "SHA-512",
          "content" : "6f08802f9fa7d9a8c98113b671feb7ffa43dbfad44bae891ae87c90c043f16034e3946d0f37f8af644e61728d0a52be400b6606663ed3e4b2566ba2e75a26677"
        },
        {
          "alg" : "SHA-384",
          "content" : "dfb6ed24c048dc186fed22dd8179a390b5a9a6150728468dc181eac8f95ae13166f27d3443efdd735ae47986ff221bb4"
        },
        {
          "alg" : "SHA3-384",
          "content" : "0f25c61e0ebc299cc730b639fe2d6c33f6ae13a2fcd656ada45ac2b835bc70296d26770d346a65a920e60c419afb9fb8"
        },
        {
          "alg" : "SHA3-256",
          "content" : "1a903eb1a02db4b31e24ad38e93c16a439c1376fedfdf7867c4913b18d5e4a15"
        },
        {
          "alg" : "SHA3-512",
          "content" : "7ae6a61a59456f098ae506d6263b0fb545924b1e0000ad2e044a2df7f1ea5da450e6256049b5cfc4a89e1eedb6c5c3f53283f69402308a807a7dd609e5bfe0ce"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.confluent.flink/flink-csv@1.20.5-cp2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://flink.apache.org/flink-formats/flink-csv"
        },
        {
          "type" : "distribution",
          "url" : "s3://cp-flink-staging-654654529379-us-west-2/maven-staging/12a166280c02d658ecafa7650035d3389f69bb81"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink/flink-formats/flink-csv"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.confluent.flink/flink-csv@1.20.5-cp2?type=jar"
    },
    {
      "group" : "org.apache.beam",
      "name" : "beam-runners-java-fn-execution",
      "version" : "2.63.0",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "9bf5aa000dcdbe6815950e1a6cbb0a90"
        },
        {
          "alg" : "SHA-1",
          "content" : "d8b24fb490ba6d0c0137a83a593b9555b66d0145"
        },
        {
          "alg" : "SHA-256",
          "content" : "a1de625ef94710c042b7c83bb0d48e29ae38e5758a206f9f4778e7ece25f4e45"
        },
        {
          "alg" : "SHA-512",
          "content" : "f3d22d1ad39472d845fd104c21306787cd4bd8ba7d9a91e2610b8868123e9b655937bae51f625dbec2e065c89788528b2d710b661ac09c9e77f4eb9ab674116c"
        },
        {
          "alg" : "SHA-384",
          "content" : "916bebd74296135b35042692fbf0c7ed8ff0c24aff8b145a20c43b93e483491cd19e351aab60ba2a90132c9bcc971beb"
        },
        {
          "alg" : "SHA3-384",
          "content" : "e7e8bfc2c9cc7e0cf6d7e7fe09d94e42b4ba80f5c07f2950887edd5c84dc9a1d0be76b346034b5b5b9d3261cb50feee1"
        },
        {
          "alg" : "SHA3-256",
          "content" : "980ea7ee363c122300448de04635c042c504add8b413518fc7bfe348f3a4b74a"
        },
        {
          "alg" : "SHA3-512",
          "content" : "d663c448e209f80e1a87a3baadbc6dc8f91e2bc6c5dfc27f75535ab3bc27bbe6bcb950309e57e30e1060f90a3e44828989995f7aedd814dc2b1cdd240b8d8b47"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.beam/beam-runners-java-fn-execution@2.63.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://beam.apache.org"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/apache/beam/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "http://www.mail-archive.com/dev%beam.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=beam.git;a=summary"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.beam/beam-runners-java-fn-execution@2.63.0?type=jar"
    },
    {
      "group" : "org.checkerframework",
      "name" : "checker-qual",
      "version" : "3.42.0",
      "description" : "checker-qual contains annotations (type qualifiers) that a programmer writes to specify Java code for type-checking by the Checker Framework.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "4c55448dcbfe9c3702f7758fc8fe0086"
        },
        {
          "alg" : "SHA-1",
          "content" : "638ec33f363a94d41a4f03c3e7d3dcfba64e402d"
        },
        {
          "alg" : "SHA-256",
          "content" : "ccaedd33af0b7894d9f2f3b644f4d19e43928e32902e61ac4d10777830f5aac7"
        },
        {
          "alg" : "SHA-512",
          "content" : "85f66a42a079b4578256b5b6daa4b1ba5aa684614982cab2c9cd83324f2c3fcdde420de6ad51b2f439c4c809be10b376f80f5a45110a1ee6caa59e6298c0ec95"
        },
        {
          "alg" : "SHA-384",
          "content" : "1ee2061f8da04e77b577030edc21904b0700aceb241fcb5a549767d44c9b71267217850dc89aca41e65d188e148f8d58"
        },
        {
          "alg" : "SHA3-384",
          "content" : "5d89ffdcafb432d84503340827bc6fae5f6fc290fde59c1eb491996c15fd92ad00dfd1e781d8c9d6ef4ca9c4f3e5b264"
        },
        {
          "alg" : "SHA3-256",
          "content" : "25c061a632fc0263f974761afad7f4209dd6582a461f3049e39d260640308393"
        },
        {
          "alg" : "SHA3-512",
          "content" : "75a743fb2577bb3252de16a86cf10922626689e75918136c83caa3a26db669f7c770779cfb9b9003ba5b181ffc9f7d871ab250cccfc4ff19e587a0384b448929"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT"
          }
        }
      ],
      "purl" : "pkg:maven/org.checkerframework/checker-qual@3.42.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://checkerframework.org/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/typetools/checker-framework.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.checkerframework/checker-qual@3.42.0?type=jar"
    },
    {
      "group" : "org.apache.beam",
      "name" : "beam-vendor-guava-32_1_2-jre",
      "version" : "0.1",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "1b58910e0e700cc7f54bc7016630ec8b"
        },
        {
          "alg" : "SHA-1",
          "content" : "30a09412a47c4d79a18fa7996c7d4909efbfcdd3"
        },
        {
          "alg" : "SHA-256",
          "content" : "44669a8f43cdef8ac20e02484ead0d1cf8199d47e00c7f1828b579b7dfb0f9a2"
        },
        {
          "alg" : "SHA-512",
          "content" : "1dce3a194935853ed6374dcd5500175bab6102703bbbeea08f2e02e89793c4f16fffc80a101bb57ea7ed8b1402535ce7318730c31e7728ed54fccf424f2b08b9"
        },
        {
          "alg" : "SHA-384",
          "content" : "c8529b05edfcf6e30f2f677afddccfc6c934d689f9e7c573408fb9907914618c32dca2443dc0cae706ae05151bada7ee"
        },
        {
          "alg" : "SHA3-384",
          "content" : "3be8404fd0d1b730afd9427ff01838d90091bfdc23e616b50e5d9021e0dc4651cc4935c3b53c0007ed69c91522f17137"
        },
        {
          "alg" : "SHA3-256",
          "content" : "f51b8d31b71aefa5d3084317b98d64135922349e3120d5d08704468c69aceaad"
        },
        {
          "alg" : "SHA3-512",
          "content" : "9bf93be4d828805b9500a6e1d1e3a8bb4bb0db9ae9a8da2be07487a5a6bb9e143db2e78966bfcdeec893c13f63b008f9c4d7260dfe9706917862e08d340437a2"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.beam/beam-vendor-guava-32_1_2-jre@0.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://beam.apache.org"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/apache/beam/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "http://www.mail-archive.com/dev%beam.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=beam.git;a=summary"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.beam/beam-vendor-guava-32_1_2-jre@0.1?type=jar"
    },
    {
      "group" : "org.apache.beam",
      "name" : "beam-model-pipeline",
      "version" : "2.63.0",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "6cb75e2dfc0f2e4015f6db4728b23dc1"
        },
        {
          "alg" : "SHA-1",
          "content" : "3eb650a7d1279c06438e0c6e713bb7d8f05ab43f"
        },
        {
          "alg" : "SHA-256",
          "content" : "bf5fffbd71c51ce51b9ea73bb904b4054ab37e668af68263495941ce6bb8a4cd"
        },
        {
          "alg" : "SHA-512",
          "content" : "d23fcdcbda0cf38730cac70209e8d260e2bd23736d513d656cb6744a6d12572aac3e4f890d899da6159d95b83b2ab6456391d6e1268609ada27e3353b25a47bd"
        },
        {
          "alg" : "SHA-384",
          "content" : "7de96e234688428a561c3683a20aad8941038d6cd651bdd5d7ceed15ce9ed1623d96361c39cc5d9ed766ae339ed06e26"
        },
        {
          "alg" : "SHA3-384",
          "content" : "80839e0fcb8170b48481d2dc1577196147ac76b925389e5aef5c3bdbf12157913b1427505079deeb2c3f3f017396acbf"
        },
        {
          "alg" : "SHA3-256",
          "content" : "5a6a0e92a04f21340c6e90ef435cd80b75784f379778c681580b679e9c6e0170"
        },
        {
          "alg" : "SHA3-512",
          "content" : "459f13eabf08050b767391c2f255bec7f77407eb4e8fc8d44f4691f12dc450b9963b250347e751f2ea00396f892d5caa404e265b92e6346f809aa0cf10da5380"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.beam/beam-model-pipeline@2.63.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://beam.apache.org"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/apache/beam/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "http://www.mail-archive.com/dev%beam.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=beam.git;a=summary"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.beam/beam-model-pipeline@2.63.0?type=jar"
    },
    {
      "publisher" : "Google LLC",
      "group" : "com.google.auto.value",
      "name" : "auto-value-annotations",
      "version" : "1.8.2",
      "description" : "Immutable value-type code generation for Java 1.6+.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "9b5f83eed1eaf5c5ae972d7024542d03"
        },
        {
          "alg" : "SHA-1",
          "content" : "546ae662e646e47a544ef68ebb43987a3146b692"
        },
        {
          "alg" : "SHA-256",
          "content" : "392a848fc611fff5fd317c2453a9a1bf7775e4f4de9c5af0d688bff57f691f6e"
        },
        {
          "alg" : "SHA-512",
          "content" : "631097ac187f39036a9ef807d1c69e0c43f8d65e2abd614d87a5a10f36a48b1ffb2fcc7127ecb1ad9591e7229a673cf302d7ea08d6a788e91462402b528dc798"
        },
        {
          "alg" : "SHA-384",
          "content" : "76854dd7e5d7f1167234f513dd8a6d40acbc79bdbc31b5d9a9af2d0ecb91758ce610b2dd0ea729d2489e5424d6f0783b"
        },
        {
          "alg" : "SHA3-384",
          "content" : "36afa7325214d8371ee1d37f0972f79c2e3a214cd6dfc0035ab8e5c2d99f291d1e7318033aa8fd4eefc99b3e7a5877e9"
        },
        {
          "alg" : "SHA3-256",
          "content" : "ef6ea70b38ceb0926f9d1deb137cd0b5d6c3437e4468032109eba7cd73966261"
        },
        {
          "alg" : "SHA3-512",
          "content" : "5176ff77d3482d45fee64743456c5a78e929146ad715bde0b4a02f0b2cabd0256c5bac30df9830327eab2475d157fb1e5c3188cefa66f8436353f07ea683338d"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.auto.value/auto-value-annotations@1.8.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/google/auto/tree/master/value"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://github.com/google/auto/issues"
        },
        {
          "type" : "vcs",
          "url" : "http://github.com/google/auto"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.auto.value/auto-value-annotations@1.8.2?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.httpcomponents",
      "name" : "httpclient",
      "version" : "4.5.13",
      "description" : "Apache HttpComponents Client",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "40d6b9075fbd28fa10292a45a0db9457"
        },
        {
          "alg" : "SHA-1",
          "content" : "e5f6cae5ca7ecaac1ec2827a9e2d65ae2869cada"
        },
        {
          "alg" : "SHA-256",
          "content" : "6fe9026a566c6a5001608cf3fc32196641f6c1e5e1986d1037ccdbd5f31ef743"
        },
        {
          "alg" : "SHA-512",
          "content" : "3567739186e551f84cad3e4b6b270c5b8b19aba297675a96bcdff3663ff7d20d188611d21f675fe5ff1bfd7d8ca31362070910d7b92ab1b699872a120aa6f089"
        },
        {
          "alg" : "SHA-384",
          "content" : "093ac3e2dde58e34aa70309c7305eb3c9b5be2509a9293f1672494da55479a86bd112e83326746dc7a32855472952b99"
        },
        {
          "alg" : "SHA3-384",
          "content" : "cd6882e7868624164e460f2f3ea01466f863c0dcb902b031c656b57356f563be83b29530df41d88d634ed3d01fc9964d"
        },
        {
          "alg" : "SHA3-256",
          "content" : "710b1d8d7dae0b8e4270756694ca9c83d64965f42d3b4170c609b14d47c2762c"
        },
        {
          "alg" : "SHA3-512",
          "content" : "276fa6a6599dc89382d658115695cf4da6b0d39b34e9c349c17a5dbd64122eaee553bb9ed75c0378ec4a83be157c8aa39370662de3c9b8fd55ebc1dd608383e6"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.httpcomponents/httpclient@4.5.13?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://hc.apache.org/httpcomponents-client"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/HTTPCLIENT"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/hc-httpclient-users/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/httpcomponents-client/tree/4.5.13/httpclient"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.httpcomponents/httpclient@4.5.13?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-logging",
      "name" : "commons-logging",
      "version" : "1.1.3",
      "description" : "Commons Logging is a thin adapter allowing configurable bridging to other, well known logging systems.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "92eb5aabc1b47287de53d45c086a435c"
        },
        {
          "alg" : "SHA-1",
          "content" : "f6f66e966c70a83ffbdb6f17a0919eaf7c8aca7f"
        },
        {
          "alg" : "SHA-256",
          "content" : "70903f6fc82e9908c8da9f20443f61d90f0870a312642991fe8462a0b9391784"
        },
        {
          "alg" : "SHA-512",
          "content" : "e5d1fc8ec4544e1fa0f7c4aae8dbcca466c4987bc92fbbc430b054b10d646b745add4a754b1be9d50edd64330c798c53173a97289db57a966312e16f934e9d1f"
        },
        {
          "alg" : "SHA-384",
          "content" : "00dc41783f4081585e20adcfe83fd4dbb6b5a27236ee633d7e53dedcbca83ba5e5f0ca68d31f95e9c724b365e4c67499"
        },
        {
          "alg" : "SHA3-384",
          "content" : "6915e597821aa2fed7f4b05f4de3476364074ab5cee7e13b4eb5b94a9d297b58cb391c6b730e6ea0d4e81e323a90d002"
        },
        {
          "alg" : "SHA3-256",
          "content" : "c49c80e2576bf037fc871e70df8708f5e35c0977a907e966c0334e9fac17b297"
        },
        {
          "alg" : "SHA3-512",
          "content" : "b74b6e6d771005014614774d059a4e1ceab929c0678839846d143e56e4724455242ffa3d5d411c6554a41e1f66fe1f94c51472d80c07d44c02a2f9a6715d8c7d"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-logging/commons-logging@1.1.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://commons.apache.org/proper/commons-logging/"
        },
        {
          "type" : "build-system",
          "url" : "http://vmbuild.apache.org/continuum/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/LOGGING"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/repos/asf/commons/proper/logging/trunk"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-logging/commons-logging@1.1.3?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-codec",
      "name" : "commons-codec",
      "version" : "1.15",
      "description" : "The Apache Commons Codec package contains simple encoder and decoders for various formats such as Base64 and Hexadecimal. In addition to these widely used encoders and decoders, the codec package also maintains a collection of phonetic encoding utilities.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "303baf002ce6d382198090aedd9d79a2"
        },
        {
          "alg" : "SHA-1",
          "content" : "49d94806b6e3dc933dacbd8acb0fdbab8ebd1e5d"
        },
        {
          "alg" : "SHA-256",
          "content" : "b3e9f6d63a790109bf0d056611fbed1cf69055826defeb9894a71369d246ed63"
        },
        {
          "alg" : "SHA-512",
          "content" : "da30a716770795fce390e4dd340a8b728f220c6572383ffef55bd5839655d5611fcc06128b2144f6cdcb36f53072a12ec80b04afee787665e7ad0b6e888a6787"
        },
        {
          "alg" : "SHA-384",
          "content" : "05d0506283716472175d44c2a4766523397bf8a007c18848f9c9a61718cc8aa437f9cb4b91771037ab29a960860b62a0"
        },
        {
          "alg" : "SHA3-384",
          "content" : "12fad4ef78274b06f97b1243cea6f970088abde082d2de9377d915a34b44f7d7d67807c03e59c849b69f1544e2a9a1be"
        },
        {
          "alg" : "SHA3-256",
          "content" : "87be248f33f241121f54aad61a9a460a79eabefbf1b5b0dd22aeb95b581f727e"
        },
        {
          "alg" : "SHA3-512",
          "content" : "8c992c9c569ebaa0bf956a4c5b34fbf5e1ed1c212c2dd896fa216183ee0bcd341e96698af4b9cec7e8880762faa081a3d3a27f51349aa457cb8e373e4f57c788"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-codec/commons-codec@1.15?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-codec/"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/CODEC"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/commons-codec"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-codec/commons-codec@1.15?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.httpcomponents",
      "name" : "httpcore",
      "version" : "4.4.14",
      "description" : "Apache HttpComponents Core (blocking I/O)",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "2b3991eda121042765a5ee299556c200"
        },
        {
          "alg" : "SHA-1",
          "content" : "9dd1a631c082d92ecd4bd8fd4cf55026c720a8c1"
        },
        {
          "alg" : "SHA-256",
          "content" : "f956209e450cb1d0c51776dfbd23e53e9dd8db9a1298ed62b70bf0944ba63b28"
        },
        {
          "alg" : "SHA-512",
          "content" : "f16a652f4a7b87dbf7cb16f8590d54a3f719c4c7b2f8883ce59db2d73be4701b64f2ca8a2c45aca6a5dbeaddeedff0c280a03722f70c076e239b645faa54eff9"
        },
        {
          "alg" : "SHA-384",
          "content" : "1cd0a3c120cfb4974573b0f499b2ac8a200aa43506777ed09f9806c6899541605fd355a3b5f44977517dd1cb463e808b"
        },
        {
          "alg" : "SHA3-384",
          "content" : "c771301cda89b2c102b76ba7b46222e0ee1898fa1e53fd4d43a7994e4a234a9804f7221feafe0259f0e9db164a5d4576"
        },
        {
          "alg" : "SHA3-256",
          "content" : "97a9e2fcd1946204dd8643e504c0ff73904957da5df605d703734f95345d5816"
        },
        {
          "alg" : "SHA3-512",
          "content" : "ee6045c3724c2a4983330cf9bc57a46c0fcfc252be455a864953ef5c538ea4aab399c4315f7e5b1a315a48bb8f11cc7492e0735615fd68aa3981fa3ddb4d0a98"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.httpcomponents/httpcore@4.4.14?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://hc.apache.org/httpcomponents-core-ga"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/HTTPCORE"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/hc-httpclient-users/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/httpcomponents-core/tree/4.4.14/httpcore"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.httpcomponents/httpcore@4.4.14?type=jar"
    },
    {
      "group" : "org.conscrypt",
      "name" : "conscrypt-openjdk-uber",
      "version" : "2.5.1",
      "description" : "Conscrypt: OpenJdk UberJAR",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "ee6de6e578762d474b2ca5418e16815b"
        },
        {
          "alg" : "SHA-1",
          "content" : "3658b276ab54bd600f754b3c8cf4b7cd77fc61e6"
        },
        {
          "alg" : "SHA-256",
          "content" : "01f9c742cb592a151e2e62bd5397a8980628a967001fcdacd4aa4744678685f3"
        },
        {
          "alg" : "SHA-512",
          "content" : "033a8e18eae24add9ed1eb2448c5b4adfff903e9b455a44d6aa5e0b39be6c0969b43b789f662564ed63bf6714b389410a531d158a70a886bf388960826a8af7a"
        },
        {
          "alg" : "SHA-384",
          "content" : "5374aaaaafa4897319b94e0360b14960d71f0de7c332d9226e8397c27d4ab81ce6b062a414b7d51fbc743b2d7bfd4ac3"
        },
        {
          "alg" : "SHA3-384",
          "content" : "bac701f38f16b135c7ccad4fd412961e9847159c66f9b0246fbefac1c56afa8a3af057b0e4e03131d00d7763e2b7b308"
        },
        {
          "alg" : "SHA3-256",
          "content" : "29ffa329d6e77edbd826f1478af8b1723d62ad245519c90c17040c7d124690ac"
        },
        {
          "alg" : "SHA3-512",
          "content" : "497b49477a145b2bd63614665e15077730c08493ab119e1d6ccf495f6300a44433758aa364319b23e6622ba3c7d3f591458b518d82124f60d6fe1ac76214312b"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.conscrypt/conscrypt-openjdk-uber@2.5.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://conscrypt.org/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/google/conscrypt"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.conscrypt/conscrypt-openjdk-uber@2.5.1?type=jar"
    },
    {
      "group" : "org.apache.beam",
      "name" : "beam-model-fn-execution",
      "version" : "2.63.0",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "58c65a4a7dc07cde6222e3266447edcd"
        },
        {
          "alg" : "SHA-1",
          "content" : "3923f05cb80f0f8f51d14fdf75be6a0a06b986b7"
        },
        {
          "alg" : "SHA-256",
          "content" : "64f641a98676b64d61e9cacd2ca84e85c769b6ab0052c7307253ae4ba57e91a8"
        },
        {
          "alg" : "SHA-512",
          "content" : "e47f5578729840872bbb2737c3620c4448342b9a4431787ee7d07f7fd545050e425885ec4c2645bb5c04fcd087b8430a8fbcab7f8654d4dcdb085c0743d39e61"
        },
        {
          "alg" : "SHA-384",
          "content" : "c3b34d160e4dc25e05d9a13d7acae2a04f2d7640c90b9757b149811be85777e3598d815a0cfb4718a28bdb2a6a11b930"
        },
        {
          "alg" : "SHA3-384",
          "content" : "2a477f3aaa033ff99c8691cd05ec8f40e84bcfc43187eb1195e3ba0f163eaad6d4bd1e032958fc663275bd6b34afd98a"
        },
        {
          "alg" : "SHA3-256",
          "content" : "de1415da711b1eaa3be3cc920f0f9463502d5d8782e6c8f0e81023869f79bac9"
        },
        {
          "alg" : "SHA3-512",
          "content" : "0053bb877fc5d88df0fd04e72e4117d1d6e56bbd07bfb196506d72b47e73432718196638608f5ffcab236c0736f49970ab1c88280fd6aeb87a4cc5b11c7131c3"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.beam/beam-model-fn-execution@2.63.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://beam.apache.org"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/apache/beam/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "http://www.mail-archive.com/dev%beam.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=beam.git;a=summary"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.beam/beam-model-fn-execution@2.63.0?type=jar"
    },
    {
      "group" : "org.apache.beam",
      "name" : "beam-sdks-java-core",
      "version" : "2.63.0",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "391774c8cf3fb127cf5f00f0f5f7ae13"
        },
        {
          "alg" : "SHA-1",
          "content" : "bd09448c93f3f79758fd1811dd60a16239a0d89f"
        },
        {
          "alg" : "SHA-256",
          "content" : "d2315dc36bf763afc91c7a7fff0b86082877161378680a4aaa7b0517f565ecee"
        },
        {
          "alg" : "SHA-512",
          "content" : "a277377a25097fcb8dcc87708b6724016052dbe5dfda8f8e844f0f075e4421dd2c6ee869e0ab7a71f0a710ed869c58e5e6743e6bdf230c74fcad22bf7be24000"
        },
        {
          "alg" : "SHA-384",
          "content" : "bbdc159b1004f2cf5af3de62b4ebb33eca6bd81f6c7a8e9c20f7b65c7a3c3aabba1fbaf1423ed648c0521efb077d4739"
        },
        {
          "alg" : "SHA3-384",
          "content" : "6ce42e3db4c1fcea62fd7856deb0bf52ffaccddb0cabc4af8e32a5e60b17570d04b3ff612ba9d78094de9a6ac380bf0f"
        },
        {
          "alg" : "SHA3-256",
          "content" : "925e1be6b55247965e02574b01b7bc8f4e4ae1e8b598dc8c33e174f0740a7d2b"
        },
        {
          "alg" : "SHA3-512",
          "content" : "2a230d2c248c0c9fad14e15d3a890f0792fbed6ab3725529f7580f127b68df0b6f3decddf4c1c16a552558042f877d9c1662182a44779e1f58af336f75bc60b5"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.beam/beam-sdks-java-core@2.63.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://beam.apache.org"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/apache/beam/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "http://www.mail-archive.com/dev%beam.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=beam.git;a=summary"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.beam/beam-sdks-java-core@2.63.0?type=jar"
    },
    {
      "group" : "org.apache.beam",
      "name" : "beam-sdks-java-transform-service-launcher",
      "version" : "2.63.0",
      "description" : "Contains core code of the transform service.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "e0fc83f3803a81e8a5b0cea18210a54f"
        },
        {
          "alg" : "SHA-1",
          "content" : "882eba78ba8b4e3b394c16b1e9e91a8f1ba751d0"
        },
        {
          "alg" : "SHA-256",
          "content" : "46eeabbb4f4e16d0622a558124dd45b6307d068b3f9545ce5b848e70d786eab1"
        },
        {
          "alg" : "SHA-512",
          "content" : "ce2b16f2bcbcea3d60e6c505e924c2705b281f248770f5a574fecc41771f289933eac4aa31902001f6fd3da757439786043502e1b72f40fa361ecca748a7e0fd"
        },
        {
          "alg" : "SHA-384",
          "content" : "37310cb41292819edab079b3f9fd6f682614551da6c4ddecd565ed3da21f3da733171f15dc073a4ba735275127c928ce"
        },
        {
          "alg" : "SHA3-384",
          "content" : "4bff092fa447593befe9405e31c4f54ba84a1aedfadf19f4b26a75481f0a2d62712aec2acc167452feed6be612210c03"
        },
        {
          "alg" : "SHA3-256",
          "content" : "ad5472748c8f614dea95d546baff25b0ced69a85fc150565ec57849d87c66113"
        },
        {
          "alg" : "SHA3-512",
          "content" : "2054d44e7fa3cb3ef6b1014e0c7ba3b842186dbbaed98960ca35b3a81a7af45fd789c76affd800ecccd1b8d10cb20e5b8a7b706a439114d80c60e0724e818e90"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.beam/beam-sdks-java-transform-service-launcher@2.63.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://beam.apache.org"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/apache/beam/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "http://www.mail-archive.com/dev%beam.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=beam.git;a=summary"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.beam/beam-sdks-java-transform-service-launcher@2.63.0?type=jar"
    },
    {
      "publisher" : "Kohsuke Kawaguchi",
      "group" : "args4j",
      "name" : "args4j",
      "version" : "2.33",
      "description" : "args4j : Java command line arguments parser",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "0a6d515f76b15d29e3cd529de9319739"
        },
        {
          "alg" : "SHA-1",
          "content" : "bd87a75374a6d6523de82fef51fc3cfe9baf9fc9"
        },
        {
          "alg" : "SHA-256",
          "content" : "91ddeaba0b24adce72291c618c00bbdce1c884755f6c4dba9c5c46e871c69ed6"
        },
        {
          "alg" : "SHA-512",
          "content" : "89bd7cb2cfeef19e5019982aef225b0e4cedbaa1e56786dc71fd277f560d2ddb37026fc5ba723d7469f2ea9e06944aff7e9890319954e4c6f0c147c65ca30b81"
        },
        {
          "alg" : "SHA-384",
          "content" : "d747f1f7f299416a4957c80a696e1f8c4b85f736ab55e684ed5f7b7b67b11ef10a1ffe800442b5e6038c0c7cd301882c"
        },
        {
          "alg" : "SHA3-384",
          "content" : "ed0ca2e4e130bc3671bad3ded955281cf7ae244e690d30ad5e5c9a01a8b8f650a7f0414d3f9416718af47882200739a5"
        },
        {
          "alg" : "SHA3-256",
          "content" : "7e7a423d0e9da1753ca2df7b424226f7ffbe38f74035c5112236b3938571dfb4"
        },
        {
          "alg" : "SHA3-512",
          "content" : "189ec81ab77531d4a10b35b2dd1358b2e7738abd1c121e8b818cd4bd421fe65d8332eb6340024c7a0f60bb171147c151b51ca99c8558c55926850ce78c5efb00"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl" : "pkg:maven/args4j/args4j@2.33?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://args4j.kohsuke.org/args4j/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://args4j.dev.java.net/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://args4j.dev.java.net/servlets/SummarizeList?listName=users"
        },
        {
          "type" : "vcs",
          "url" : "http://args4j.kohsuke.org/args4j/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/args4j/args4j@2.33?type=jar"
    },
    {
      "group" : "io.github.classgraph",
      "name" : "classgraph",
      "version" : "4.8.162",
      "description" : "The uber-fast, ultra-lightweight classpath and module scanner for JVM languages.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "3ded56585fa8cb2900b1abc98386553f"
        },
        {
          "alg" : "SHA-1",
          "content" : "85bc1625bc8aac51ad32971ebb26a3e35cb97356"
        },
        {
          "alg" : "SHA-256",
          "content" : "ea30b2d5e29e89d52706bcecf7a6ae3b44682d4a1566a5f22b9453f9be2a970c"
        },
        {
          "alg" : "SHA-512",
          "content" : "a117092f4ab77ef89b3b83a45b9e33c0360cb18098df17da77e5d765a6b5cea1fae6190399217236c0d970f2b3603bc8f408c2471cf8854de1282dba7525c335"
        },
        {
          "alg" : "SHA-384",
          "content" : "2e7c901ee92224d5229213d1301b25fa8e3998dd53b709a848b53d74dbde5bfc6eb0b0d76e692046652f4f6376f5ff81"
        },
        {
          "alg" : "SHA3-384",
          "content" : "66a3e28f6098449cf4bebc02e90d8c392dbf84f0efa27766ab4ddb684e2b5592b87cab87cefc390b4716b948c7875c02"
        },
        {
          "alg" : "SHA3-256",
          "content" : "a5d97a1dd197a393c56641984d385265dd517e9014434e5d32d1f40cda684f90"
        },
        {
          "alg" : "SHA3-512",
          "content" : "0c1328544e1778aba3724768052b20af1bba39cedd17d0324a58778987dbc0c766fe1ac7c59d11331dbe07951f478edb5a40e68c77f8a64654d4b9bb4456c75b"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT"
          }
        }
      ],
      "purl" : "pkg:maven/io.github.classgraph/classgraph@4.8.162?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/classgraph/classgraph"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/classgraph/classgraph/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/classgraph/classgraph"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.github.classgraph/classgraph@4.8.162?type=jar"
    },
    {
      "group" : "org.apache.beam",
      "name" : "beam-vendor-grpc-1_69_0",
      "version" : "0.1",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "260cead243fef1cc524ac54b67cafba2"
        },
        {
          "alg" : "SHA-1",
          "content" : "3ec373061977bbb5e2fe6a09bfd41422de9ec5c0"
        },
        {
          "alg" : "SHA-256",
          "content" : "5ce988f3020b4c0b07e68168205906c932f5871ecc5fce6f520f335f2859dbef"
        },
        {
          "alg" : "SHA-512",
          "content" : "19b8e055aea956df3aca121361f131f23be57bcac80f1dd0b656c639c5b2ec882f8ce8816d65b58f7ff4f8c2920f89c9530cc6516516a9a4320a725a22ba5dd5"
        },
        {
          "alg" : "SHA-384",
          "content" : "e2e21b95d1e1f6cd1db595c9617fcf91d576ddc88d1a5e0d044334b55d060412db068b98de9fa8a5ad2f2ea4f306cc92"
        },
        {
          "alg" : "SHA3-384",
          "content" : "54705c995e7fa93b57ce444e71816bab12aee0870fd0d942e99a344ea2d5b1314df0858c26016751db710a7546c8efcd"
        },
        {
          "alg" : "SHA3-256",
          "content" : "80e953b83a4fa357978901e9ebddca3c8e23f1dcd53176d33dcc8e49f32e5de8"
        },
        {
          "alg" : "SHA3-512",
          "content" : "444899d65c29f5fdf5f0e88f0a5d6287a32ae2e01853986be67f00e63199a4ea866b8544b5b17a752750a7b14549224f6d46d7fabc450f63039b16bc29f3b033"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.beam/beam-vendor-grpc-1_69_0@0.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://beam.apache.org"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/apache/beam/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "http://www.mail-archive.com/dev%beam.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=beam.git;a=summary"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.beam/beam-vendor-grpc-1_69_0@0.1?type=jar"
    },
    {
      "group" : "org.apache.beam",
      "name" : "beam-model-job-management",
      "version" : "2.63.0",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "c8d6685c6f3638c28fa5a7daa3de7e4d"
        },
        {
          "alg" : "SHA-1",
          "content" : "d2d6b2d0eb0159dd72b1207ab0066469bbcfa5c0"
        },
        {
          "alg" : "SHA-256",
          "content" : "3c69c2490ed9f7f7f76e53667ad7e6b9650a629f04126d346320ddb1e7cad4ce"
        },
        {
          "alg" : "SHA-512",
          "content" : "4fd4a0c4277d048deab81f46423bb36ab5ceac2f8ef453e3188530e5e196e29868c5815de31ce6fc7aee455d6a5f01d6461997516e873c060d1af8e51bdff383"
        },
        {
          "alg" : "SHA-384",
          "content" : "eb745a4940826c5aa353aabb6dd02de9c635c89fa45c827212488632441857e7faf61ca708e6ecc269041670537cb57d"
        },
        {
          "alg" : "SHA3-384",
          "content" : "1cfdbcbae4f3eb41aa15064486df28169c1135e7b908d7a09a347e0012a80a478bebb77383d9810c210f78131a14497a"
        },
        {
          "alg" : "SHA3-256",
          "content" : "127c8389c6717edacf0b8982e5359b98bb6a28ef7be7103bc0d3a713cde0dd65"
        },
        {
          "alg" : "SHA3-512",
          "content" : "8ebc16fabe3c1c4936cef72fe5b82e9265452448e4b8d2a6602fbde7a5a5d3d7e0fa57e424afa627523b7203ea9251f45f33bbd1b33163a2ac1f5d158a1ce391"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.beam/beam-model-job-management@2.63.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://beam.apache.org"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/apache/beam/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "http://www.mail-archive.com/dev%beam.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=beam.git;a=summary"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.beam/beam-model-job-management@2.63.0?type=jar"
    },
    {
      "publisher" : "Joda.org",
      "group" : "joda-time",
      "name" : "joda-time",
      "version" : "2.5",
      "description" : "Date and time library to replace JDK date handling",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "c18e34f88c183cb21bbb693b3505e7d2"
        },
        {
          "alg" : "SHA-1",
          "content" : "c73038a3688525aad5cf33409df483178290cd64"
        },
        {
          "alg" : "SHA-256",
          "content" : "f75a29b82613411c9be37d419658e044179f1bf6b91d8786a4a49407531425b6"
        },
        {
          "alg" : "SHA-512",
          "content" : "77ebe5b92875140002fda1e4d7b05893fe603b019aa1257c44cf09c920fee8998b538bc0d8fb0d76171d65b8b3d752e95d1667db2d0cf21e2250fa9e09b822f6"
        },
        {
          "alg" : "SHA-384",
          "content" : "e5d4f8119f1feeb3dd15d2a1b3f02646629ecad98db64f084ac76a2143d324f489ad0558f2d6530490bbc9e9e172d4e3"
        },
        {
          "alg" : "SHA3-384",
          "content" : "dfa7953c96932762988727d71ed4518f26c77a2f3ffb8fb871a48307240afcd09fa7209ab62f15b1b9018a91d6f1a348"
        },
        {
          "alg" : "SHA3-256",
          "content" : "e2c4322160dd78f49245b7191a2bfc7c920cc7609450b5b63c0ea31e493a69b5"
        },
        {
          "alg" : "SHA3-512",
          "content" : "bb66cfe4a4107075cdf5d1dd13ea6174eb89701d82d831805480b22fd95e5648b867763268e4d67e006b2ac85589a1c32a0258dc82f693f4acd6cd9f2499c263"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/joda-time/joda-time@2.5?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.joda.org/joda-time/"
        },
        {
          "type" : "distribution",
          "url" : "http://oss.sonatype.org/content/repositories/joda-releases"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/JodaOrg/joda-time/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "http://sourceforge.net/mailarchive/forum.php?forum_name=joda-interest"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/JodaOrg/joda-time"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/joda-time/joda-time@2.5?type=jar"
    },
    {
      "group" : "org.apache.beam",
      "name" : "beam-runners-core-java",
      "version" : "2.63.0",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "8fb262aa09021694ea220343aa502cce"
        },
        {
          "alg" : "SHA-1",
          "content" : "1c9ee7fbb2414caa4a64954d44e7f676be8e8fa5"
        },
        {
          "alg" : "SHA-256",
          "content" : "4e2de0a3dc84a6ba53fba4c7c3b91541504ada05ce569cacb7a956ec863b7a34"
        },
        {
          "alg" : "SHA-512",
          "content" : "e061140e2e255af88768444dd4008faf7078e6621817a831cc9fff9768313145cd30bdd9f2ce3777d29dcf46cef17792920ed6feadcf6240290546bf4e5c2c95"
        },
        {
          "alg" : "SHA-384",
          "content" : "b0705b8aa8d2dcce1a5c866eef4ad6b826bdaa7f1a0c07cdc9b31a886dcba7a8a9e9a34902be78d3a26b25983d501c6c"
        },
        {
          "alg" : "SHA3-384",
          "content" : "002e73640b25f57e8edb6372029e80fbabde6ba2bd4ef53cef458d60830c549620c897f5883072e8e2e1a16ed2af6d05"
        },
        {
          "alg" : "SHA3-256",
          "content" : "bda9d9bfcd59c883a3adf089b9659b5811196075c7a5dca64e7e8a43022cf80d"
        },
        {
          "alg" : "SHA3-512",
          "content" : "15584082af491028385619746d6338ebbb4dc1705accde36aec773cb50dc086bd4506a62a105fa295631031615c2a01e40ee7eaf9a5a8393db8613f0a859dd4d"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.beam/beam-runners-core-java@2.63.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://beam.apache.org"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/apache/beam/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "http://www.mail-archive.com/dev%beam.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=beam.git;a=summary"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.beam/beam-runners-core-java@2.63.0?type=jar"
    },
    {
      "publisher" : "FasterXML",
      "group" : "com.fasterxml.jackson.core",
      "name" : "jackson-core",
      "version" : "2.18.6",
      "description" : "Core Jackson processing abstractions (aka Streaming API), implementation for JSON",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "95746cd6a85d0296d6986b14787a6bee"
        },
        {
          "alg" : "SHA-1",
          "content" : "f7171732c04c97ff373bed60d2eba22ec4bab8e0"
        },
        {
          "alg" : "SHA-256",
          "content" : "e7e1bfa50f0a79db37e6aa37db111cf03aebf4a484b359d21127ab43ab2398c6"
        },
        {
          "alg" : "SHA-512",
          "content" : "56ad5272272418a3864335b7cc9323bee496993bb317a35ad7c7f6bc001376feaecfa357ed2b737e36ae9ea738433906c2db05b4cda471463329e6909712f377"
        },
        {
          "alg" : "SHA-384",
          "content" : "f7d8f2175068c0b3f79d300672059502f14be699fb6ca3979b256ff53a0a9c8fa797a288990278db49d8b566e9635b6c"
        },
        {
          "alg" : "SHA3-384",
          "content" : "7c899c0bad1755db144cee72ec96961e186b47ba2229a2aac893091ddb338c6e4b7dbbec61f5998a1a9becf06b973bff"
        },
        {
          "alg" : "SHA3-256",
          "content" : "33f6bd5f2b9f80f758851629eab6425c2a3dee7bee62bc5113a7073242b49d2a"
        },
        {
          "alg" : "SHA3-512",
          "content" : "a301262a6c54d5e905715a27588836df86ce2945d447dcd4bcd17e36315d62a50d1a33ae1e379c35f837ee5decb9ac29419b8abec65cebe54d8d14fbcf714e86"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.18.6?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/FasterXML/jackson-core"
        },
        {
          "type" : "distribution",
          "url" : "https://central.sonatype.com/api/v1/publisher"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/FasterXML/jackson-core/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/FasterXML/jackson-core"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.18.6?type=jar"
    },
    {
      "publisher" : "FasterXML",
      "group" : "com.fasterxml.jackson.core",
      "name" : "jackson-databind",
      "version" : "2.18.6",
      "description" : "General data-binding functionality for Jackson: works on core streaming API",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "0199275814d930ae615971749d009490"
        },
        {
          "alg" : "SHA-1",
          "content" : "7c2dd5a1a41c315150158557896096b484562417"
        },
        {
          "alg" : "SHA-256",
          "content" : "45d124736ea29dc374171fc1a8a9958e0f44407c1e0aae0297d8eee267fb592e"
        },
        {
          "alg" : "SHA-512",
          "content" : "c67c64f941fc916b80787b71b74dfa3c9137a3765c648266ff29dbaf427484d2ee7ab47e6080a9be1dd28d361cc987840d4415b597aa4ead69b5e23b20a533b2"
        },
        {
          "alg" : "SHA-384",
          "content" : "27515e5d81dbd113c3d9d13b62871066fc1ef829352dfcab2718c522c83b2f30eaf318d9a8ebb215286ff30fc83c2c7a"
        },
        {
          "alg" : "SHA3-384",
          "content" : "7a312b73ac433b2c76166e537013aeed46fb81b0b1637c9dc275bfcabe14c92fe30b7a9c6903cebf803c5f313500091b"
        },
        {
          "alg" : "SHA3-256",
          "content" : "592598bffc53b3b095a0d513dffc414a25f1d73b79679527eb31c3b1a752d517"
        },
        {
          "alg" : "SHA3-512",
          "content" : "c7be7e7e7057d6aad7e5beaab769d2ad412baaf84dc105c6c06dbff81c591b796e14fa9bddf4a2a7ead869e319a67aad0585c718502c1ae5cd47ac8abdb3caac"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.18.6?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/FasterXML/jackson"
        },
        {
          "type" : "distribution",
          "url" : "https://central.sonatype.com/api/v1/publisher"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/FasterXML/jackson-databind/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/FasterXML/jackson-databind"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.18.6?type=jar"
    },
    {
      "group" : "com.alibaba",
      "name" : "pemja",
      "version" : "0.5.7",
      "description" : "PemJa is an open source cross language call framework based on FFI",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "06eb69c8b4d839913c394d4b767c90c3"
        },
        {
          "alg" : "SHA-1",
          "content" : "3be1e175389bfc6a51bf3b6819a640bc6169c31c"
        },
        {
          "alg" : "SHA-256",
          "content" : "5b207f83c8e820a81f4d05c770954355700d7bf02162ac03f2a71e10965ad889"
        },
        {
          "alg" : "SHA-512",
          "content" : "cea288380ab81bc962b3f27218f15192679400bd32e854234de56dc695b0bcfc4a7f3974894d189af66c87df2aada29242e943e3f3b1d5bf6e0d33e38bbf1d23"
        },
        {
          "alg" : "SHA-384",
          "content" : "ece7806f50b7c1ee826ed8767229a44a50e7d11583a130222e9550e45ee0e48d94eb2f1e98d9c118f26aa236275b7079"
        },
        {
          "alg" : "SHA3-384",
          "content" : "e546858158590abde3a9ce90e6ad8decd16f22047d58e1b562c93fb8d48b06d9f237bcef055e0eb5c26aa9ec53dbabd0"
        },
        {
          "alg" : "SHA3-256",
          "content" : "0ce796d9dc1bde7b74d69e96663f5fb4c3f356645d3fd0bbc5b244839713d5e3"
        },
        {
          "alg" : "SHA3-512",
          "content" : "85dc39c180c649c5de37d54bf1a610586ca28f24ac05ece1dc04c2296c9d799ac402a9bbbfd1b8d4fd05ad5a98713b06a22ec3a883771d8cfa6a3ff744129b32"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-1.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.alibaba/pemja@0.5.7?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/alibaba/pemja"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/alibaba/pemja/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/alibaba/pemja"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.alibaba/pemja@0.5.7?type=jar"
    },
    {
      "group" : "com.google.protobuf",
      "name" : "protobuf-java",
      "version" : "3.25.5",
      "description" : "Core Protocol Buffers library. Protocol Buffers are a way of encoding structured data in an efficient yet extensible format.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "639cfcf9717cf4e4dd9e808e6f8d24a4"
        },
        {
          "alg" : "SHA-1",
          "content" : "5ae5c9ec39930ae9b5a61b32b93288818ec05ec1"
        },
        {
          "alg" : "SHA-256",
          "content" : "8540247fad9e06baefa8fb45eb313802d019f485f14300e0f9d6b556ed88e753"
        },
        {
          "alg" : "SHA-512",
          "content" : "432d8a9359e614d38fe416b7a4564aed3e358fd5f3c2c4f22caf97945a0f3e5cbd2220b690d6b822504e7bcbbd67458eb12d232232dd113f804683a172f8eb71"
        },
        {
          "alg" : "SHA-384",
          "content" : "e78be1eae5721143fa31d5e13b2219158b7cec75e88d24fbfcafadf1315bcefa0baed312ef6e3943ce32e6c388a4a318"
        },
        {
          "alg" : "SHA3-384",
          "content" : "04d20fb39ede3e4336e7d7df1f5184ebeab7571ac573b5195316e4e91629f9260b72114fee796d7b19a7a6bbcbe6fa6e"
        },
        {
          "alg" : "SHA3-256",
          "content" : "62dde953206322549fce7e1119bd50c11bbf4d436677be18c29251220a453d48"
        },
        {
          "alg" : "SHA3-512",
          "content" : "6c7ca39134591c7c75dbee3774ada68feda14b0dea53e3fc4e249bd2d2f9d82e86ec062340aa1961cfdabe6a7a707796f6a6e03b219e29b6d3b661b2ab966d5e"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause",
            "url" : "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.protobuf/protobuf-java@3.25.5?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://developers.google.com/protocol-buffers/protobuf-java/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/protocolbuffers/protobuf/protobuf-java"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.protobuf/protobuf-java@3.25.5?type=jar"
    },
    {
      "group" : "net.sf.py4j",
      "name" : "py4j",
      "version" : "0.10.9.7",
      "description" : "Py4J enables Python programs running in a Python interpreter to dynamically access Java objects in a Java Virtual Machine. Methods are called as if the Java objects resided in the Python interpreter and Java collections can be accessed through standard Python collection methods. Py4J also enables Java programs to call back Python objects.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "7afcbc30fa3c00d5febfbc522235f2a5"
        },
        {
          "alg" : "SHA-1",
          "content" : "e444374109f6f3ffdfdbd4e7dc5a89122b0c9134"
        },
        {
          "alg" : "SHA-256",
          "content" : "4d67d584e7b0f456deedffbd3f43047efd6748ff3d13b443abb61ec54cf7af13"
        },
        {
          "alg" : "SHA-512",
          "content" : "8e3bb548cea719e4ab0d3d559f1cdb8401c74606036c93f93b6519942994432786a800ce57b6d04fd090dfdea0359cf78e4d899021c5559f4f2f558fb09dc1be"
        },
        {
          "alg" : "SHA-384",
          "content" : "b7d117caa8c2269807f1ad4335fab2f9f6d99b93ee68ec548f3ff3d520f8d11ce8ecb2c2798f8fd86fb19606be60187f"
        },
        {
          "alg" : "SHA3-384",
          "content" : "fce16b76566caacf22235a624015191a15eb130477aca32c7304d2ee5f606087ebeaaa8ffd76ddc26f592d757e950539"
        },
        {
          "alg" : "SHA3-256",
          "content" : "6fa284586e7f9d363201e05b5fed5eb35ee97f3329cff838c2e7d0eb8cc7e054"
        },
        {
          "alg" : "SHA3-512",
          "content" : "60ce18c81477d87dad03519fdf353593a601fd40c533b2585faa669d9d06d5165ea77451a73e7189c4e662e72aad282b0af13b2dbed64f765bc92a43621f55e3"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/net.sf.py4j/py4j@0.10.9.7?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://nexus.sonatype.org/oss-repository-hosting.html/py4j"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/net.sf.py4j/py4j@0.10.9.7?type=jar"
    },
    {
      "group" : "net.razorvine",
      "name" : "pyrolite",
      "version" : "4.13",
      "description" : "This library allows your Java program to interface very easily with the Python world. It uses the Pyro protocol to call methods on remote objects. (See https://github.com/irmen/Pyro4). To that end, it also contains and uses a feature complete pickle protocol implementation -read and write- to exchange data with Pyro/Python. Pyrolite only implements part of the client side Pyro library, hence its name 'lite'... But because Pyrolite has no dependencies, it is a much lighter way to use Pyro from Java/.NET than a solution with jython+pyro or IronPython+Pyro would provide. So if you don't need Pyro's full feature set, and don't require your Java/.NET code to host Pyro objects itself, Pyrolite may be a good choice to connect java or .NET and python. Version 4.13 can now register a custom pickler for inheritance tree of interfaces or abstract base class.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "b4ab074cb07e995bcbd203c72e5efa1d"
        },
        {
          "alg" : "SHA-1",
          "content" : "b71a4668b0c4194486832fe7ce161eed2d0d12cb"
        },
        {
          "alg" : "SHA-256",
          "content" : "4ba424d328cbd7a6ff73108cce40d3cc376eef602b947e57fdc782171d92e463"
        },
        {
          "alg" : "SHA-512",
          "content" : "a25804a42355b24978ed47516a4a05a3ea35cf1f3773e1e46df0abd8a4b52e38ecdacbcaadc224e2a7ee62d0b183e46a63aae2154bef790306d752d65bd2491f"
        },
        {
          "alg" : "SHA-384",
          "content" : "bec0930daf4d20cee74051875feb9172601d8e7f2c052284805d2c5c9efe5953f41a122807d57d795a8cdde27f402a4e"
        },
        {
          "alg" : "SHA3-384",
          "content" : "814ff621e477d9a55f42ac2248b60d6abbdab24da32417bb0b86ed6118a30175d390f3f41fb98e4a962d9baa6702b921"
        },
        {
          "alg" : "SHA3-256",
          "content" : "af8184c258c3ada75447b4ca388f8acc54cc68b34cc743c1860c3761981d9dd4"
        },
        {
          "alg" : "SHA3-512",
          "content" : "fd26dd85c3c28eb40becb17867cc0306c12097e05d2b6f1242be996b6af81332dcb67051cad2f63ae4146e8a2f2f349507ba3d0531fa96ffd1f03c44013cf32f"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl" : "pkg:maven/net.razorvine/pyrolite@4.13?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/irmen/Pyrolite"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/irmen/Pyrolite/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/irmen/Pyrolite"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/net.razorvine/pyrolite@4.13?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.arrow",
      "name" : "arrow-vector",
      "version" : "18.3.0",
      "description" : "An off-heap reference implementation for Arrow columnar data format.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "da1a43b8b4fba046b03a560b35a8fa63"
        },
        {
          "alg" : "SHA-1",
          "content" : "a51efb8471503ab184ce6fa75bf1b21922b04073"
        },
        {
          "alg" : "SHA-256",
          "content" : "b37eda92daccaffc12abf5ed425db1d0bdb3edea150a6ca856f1cf4292442299"
        },
        {
          "alg" : "SHA-512",
          "content" : "f09fe6d5f605c90e5268d59982d22292d6c1c215d7c333f24d9a969b8af769184b521d4f37b6676672ee8701ce2e71af138fac578d9e327fbed3577ebfb66106"
        },
        {
          "alg" : "SHA-384",
          "content" : "297c9f81dc7de56aa667b821b79948a40aa65142e59212414e384abfe4857ecec3d2473e8b0feabefe229b38582276bb"
        },
        {
          "alg" : "SHA3-384",
          "content" : "68457c8154b9068be21228e4f54d1905afa06101c886456ef2633391a590043868356145af3a2c5ed6e576bdd9dc7894"
        },
        {
          "alg" : "SHA3-256",
          "content" : "b928eab9e447204faacf246d2c79869274f0cc5efd3980f6565edcb10fbcff9d"
        },
        {
          "alg" : "SHA3-512",
          "content" : "8a7602ab9fd56c203f52fb2cc2c44ab6305f4fad47b5ae64a2a010ff9a8f3744490aae327a04647aa00f5de30c764c517e160e25d3a178640d99da218495a877"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.arrow/arrow-vector@18.3.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://arrow.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/apache/arrow-java/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?dev@arrow.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/arrow-java/tree/v18.3.0"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.arrow/arrow-vector@18.3.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.arrow",
      "name" : "arrow-format",
      "version" : "18.3.0",
      "description" : "Generated Java files from the IPC Flatbuffer definitions.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "213e8910c5b1fed8efe83cd2b740b544"
        },
        {
          "alg" : "SHA-1",
          "content" : "72528fdd5869baffb2d985cb5179f5bf63a1473d"
        },
        {
          "alg" : "SHA-256",
          "content" : "728297d7757d192053ce071cc59e76c8a03ff4f5e430177fa97e96b29dd2de1b"
        },
        {
          "alg" : "SHA-512",
          "content" : "3350e1719458065a7a60004064f475276ea58c4942199144acd9448d8360d3ef874fb7dfdf75b7cc041da3afcc8935d3cd2d6f243d4fe68bcae0a3638e28f6f0"
        },
        {
          "alg" : "SHA-384",
          "content" : "e03bbca9ef73a8361a1c458eac360846b89745802b9d0a6d0d9def28d91e2f43602e06ff1dbbe761fb67cca1a94a9eb7"
        },
        {
          "alg" : "SHA3-384",
          "content" : "aa256d3c37e8558adf671dfb19ec8c732082d527a091b0cfb286a2707813b6aeb6d80001ce40836b17c4f16c3d9bd5e8"
        },
        {
          "alg" : "SHA3-256",
          "content" : "fbce5672f9e58af49cf845d2fe9db6fbf0dcb1f04149bdff7eb89c894a33f68d"
        },
        {
          "alg" : "SHA3-512",
          "content" : "5502d6905dded6fbe1d53eacf726201510f99aac6229302a3c5a30feb70deab07b35840a43a869f3a226b0fa69aeec23edc03cbae89068c206bc0410e2bfdfb8"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.arrow/arrow-format@18.3.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://arrow.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/apache/arrow-java/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?dev@arrow.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/arrow-java/tree/v18.3.0"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.arrow/arrow-format@18.3.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.arrow",
      "name" : "arrow-memory-core",
      "version" : "18.3.0",
      "description" : "Core off-heap memory management libraries for Arrow ValueVectors.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "bf6788fa833ce6bf56fc9cb221490a0c"
        },
        {
          "alg" : "SHA-1",
          "content" : "1f5bc66deb7d2120ac01341241cb859cf3f17751"
        },
        {
          "alg" : "SHA-256",
          "content" : "32ed0719bf2ba42becc3a88c95722851cf1bb88b37d06c95654a1152bed6ef2e"
        },
        {
          "alg" : "SHA-512",
          "content" : "b53815c8663f24629df68871139bcefa6887628e8a528d6bb4ab4148a9d5cff951701545ac7af0fc3ebd1b9381be3b9fa52d0be384a0125fc66944fb214da287"
        },
        {
          "alg" : "SHA-384",
          "content" : "0f62cec2b61944320b07e833c6cbaddbd7dd8dc2568bfccae7c55496c8702413ba2924d991129150b0fb49a8b140fc4b"
        },
        {
          "alg" : "SHA3-384",
          "content" : "5284a1e44d7e76bc6fe291e35bdfcb0882ce7fd4b5ed1abf32aeb6998be4d3e844b8e7d5d07a5f8dd272dc71fb995a77"
        },
        {
          "alg" : "SHA3-256",
          "content" : "efe242ba8ccdc2c8dfd2b318a7cadc5ea36d43476b25bc0b66e8c9ea4708271b"
        },
        {
          "alg" : "SHA3-512",
          "content" : "180d7786f4832924b49bf9ca21b72db70d2cd13d9abfe3469026b2277b367afc21f553e982ebdc5b2dc558969840c4674a8ce838b2fd7b56862cf5ef871c0b89"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.arrow/arrow-memory-core@18.3.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://arrow.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/apache/arrow-java/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?dev@arrow.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/arrow-java/tree/v18.3.0"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.arrow/arrow-memory-core@18.3.0?type=jar"
    },
    {
      "publisher" : "FasterXML",
      "group" : "com.fasterxml.jackson.core",
      "name" : "jackson-annotations",
      "version" : "2.18.6",
      "description" : "Core annotations used for value types, used by Jackson data binding package.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "80f1abd97c7f0c93d6a199c92f9e870a"
        },
        {
          "alg" : "SHA-1",
          "content" : "d0d2f9e504c6fe443eb2785370c701f911fc87c6"
        },
        {
          "alg" : "SHA-256",
          "content" : "face5c37bee1f0768f5f198d077fc29d163becca95de9e0f13962c84d1047662"
        },
        {
          "alg" : "SHA-512",
          "content" : "e7671ba959d45c3943094e91d369df97af2990bdaa5ab1361c5f55dbb4171700ff9e0900f1376ba13afdbd9e24a708f7393ce01f0fef87e250de6bfa69500634"
        },
        {
          "alg" : "SHA-384",
          "content" : "8a1ee55f2b797feb1eff4f351d6ab7532ff6c6c23946cf22c7ecc7b54df71a2ab03c9aade8fbac01ee6d3be5a6015d17"
        },
        {
          "alg" : "SHA3-384",
          "content" : "0d1ce70acd038bdc95068909f579d2ed58411384e5c4438cd717e6e7cfbbe73a95d703bc9c71ae7f3031bc87758bc601"
        },
        {
          "alg" : "SHA3-256",
          "content" : "7f65b1e6e4202252cdfde7e49b141c3ab27f1dd63f3b80d44610435f4092c69d"
        },
        {
          "alg" : "SHA3-512",
          "content" : "85fd71a6a9f264f558727f9d07879fd76d6726061830e65c774a4911770a04e0a2aec41558b42094ba819b8ae0058bbe48c5dbce3d74be8729baf6d71f1aee4e"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.18.6?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/FasterXML/jackson"
        },
        {
          "type" : "distribution",
          "url" : "https://central.sonatype.com/api/v1/publisher"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/FasterXML/jackson-annotations/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/FasterXML/jackson-annotations"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.18.6?type=jar"
    },
    {
      "publisher" : "FasterXML",
      "group" : "com.fasterxml.jackson.datatype",
      "name" : "jackson-datatype-jsr310",
      "version" : "2.18.6",
      "description" : "Add-on module to support JSR-310 (Java 8 Date & Time API) data types.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "9145af1f409a21113c32f6757004639c"
        },
        {
          "alg" : "SHA-1",
          "content" : "c789b2c5b5111ebccda89e815c3210349f2d427a"
        },
        {
          "alg" : "SHA-256",
          "content" : "d600821e90b08353425d3fa31d6a5e08f38b190be93ed284097e6fa66cac1bb4"
        },
        {
          "alg" : "SHA-512",
          "content" : "918b960286138b45109c6df22fb27b53375c6411d9a1c2421aa013b41e64af2b114b278e1a5110627da86aeecd8f69764c786b6c6147ec020cf45d0c78c91fb4"
        },
        {
          "alg" : "SHA-384",
          "content" : "3389716ffc69806e93e8e77b2d5232c0e9933afe47f8dba16c541611e17adf18cc0e4dd3893a2098aec1c1110b4470bb"
        },
        {
          "alg" : "SHA3-384",
          "content" : "f50dd10f94ae51b973b6af64266b08ed588568157c092ed199077a190aa04e5515c80f3e79abff4ad2d8222ce2db79c0"
        },
        {
          "alg" : "SHA3-256",
          "content" : "fcc90361582da5ac40da027650bff3c493aff40c43651203b147b9ce10d534e0"
        },
        {
          "alg" : "SHA3-512",
          "content" : "b2f87fc5880fadb5d4dd3bd030fd91b175843ea48c5d140bc05780f1348a83ca78790e91d85c0b4901679d7078e4210cb5b0ee226afb2c433d2c261f13e828f2"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310@2.18.6?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/FasterXML/jackson-modules-java8/jackson-datatype-jsr310"
        },
        {
          "type" : "distribution",
          "url" : "https://central.sonatype.com/api/v1/publisher"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/FasterXML/jackson-modules-java8/issues"
        },
        {
          "type" : "vcs",
          "url" : "http://github.com/FasterXML/jackson-modules-java8/jackson-datatype-jsr310"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310@2.18.6?type=jar"
    },
    {
      "group" : "com.google.flatbuffers",
      "name" : "flatbuffers-java",
      "version" : "25.2.10",
      "description" : "Memory Efficient Serialization Library",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "cadad6a81a9f7dc532ab7a5cb97a50c7"
        },
        {
          "alg" : "SHA-1",
          "content" : "9bb1a149ec48588fc04a3d00a3cc4e0135273b4e"
        },
        {
          "alg" : "SHA-256",
          "content" : "587bd6c31cda747587493a113bec8602d3a0b0ca579b2b1b838ef71b19e6525d"
        },
        {
          "alg" : "SHA-512",
          "content" : "9c4b26d5554b7a6f9907f18033ec0fc060fd2af58d836d033e2b076319d782473f7f0a3ef4f9d16e859b2c5b15f73d83ac889323dbdcbd7563ea495c59b9c626"
        },
        {
          "alg" : "SHA-384",
          "content" : "d560b2c573b607ab3c34f7ef13887814204fabb0e49e5f98f28c5f0f8fa7a86feeeca5f7a830237a7d8e735ca0df8d8a"
        },
        {
          "alg" : "SHA3-384",
          "content" : "f70604f012c9f91eeb264fd4245dd3b1ac3a6039ca8d46ccd6a24e7f4d0976d92eb14097ef92595eb49aa8d7124a84ec"
        },
        {
          "alg" : "SHA3-256",
          "content" : "c5af0cdd09bdc4197104b03820b944e0a24193bcc7ecafdd621b711cec27999b"
        },
        {
          "alg" : "SHA3-512",
          "content" : "52291e71a8d81ce74519f7e5d2d7c3e8bcdd699e137d02ab3d620e848f4732c33dccd5cd670875cc3b4efb12ff80b34b987b5a634aac6f816fb7c80c48678c4a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.flatbuffers/flatbuffers-java@25.2.10?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/google/flatbuffers"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/google/flatbuffers"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.flatbuffers/flatbuffers-java@25.2.10?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.arrow",
      "name" : "arrow-memory-netty",
      "version" : "18.3.0",
      "description" : "Netty allocator and utils for allocating memory in Arrow",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "358a576835b93f7db806ea6775e5c6a8"
        },
        {
          "alg" : "SHA-1",
          "content" : "48e3c2bc75c062a3d585f740c8a20ba4b0bd6b48"
        },
        {
          "alg" : "SHA-256",
          "content" : "1ab5100b54ce57c2a72106206663ce1c2ed84c7e173b3dbc3a57af474ec42c73"
        },
        {
          "alg" : "SHA-512",
          "content" : "ceb4c94848eb0434c674be28e4904f6ddfa3b41c0b7dd7d156b9292d441aa049ff89ed0be81e9a8838fddb72f10c634a377860ca9f660d3acdb9227df777c6ae"
        },
        {
          "alg" : "SHA-384",
          "content" : "cf6988f70ed9f6978e6d06d290b5466b010bbfe411c59f29051b547c708f2d909620f6baf33167cc3943b7128dc553c6"
        },
        {
          "alg" : "SHA3-384",
          "content" : "203b2928c436bc0fcb215567b3bd46b686d87bf416c8651689a94258fbbce52f79781f5d2ea52f0be73005a5adf3e169"
        },
        {
          "alg" : "SHA3-256",
          "content" : "810e148071377411740d197561e5f52dfa1ff9f682d9c2a98099f7986e7e0304"
        },
        {
          "alg" : "SHA3-512",
          "content" : "a9cd26ab3ce7db5c7bbd28740888314a649aa1efef5747a0491d54c397205e0a02473ee5fa64efaa82106f257da39b5e6352df3c342d720fe37f0bbacc53ef57"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.arrow/arrow-memory-netty@18.3.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://arrow.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/apache/arrow-java/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?dev@arrow.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/arrow-java/tree/v18.3.0"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.arrow/arrow-memory-netty@18.3.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.arrow",
      "name" : "arrow-memory-netty-buffer-patch",
      "version" : "18.3.0",
      "description" : "Netty Buffer needed to patch that is consumed by Arrow Memory Netty",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "5f39dba4a3a4064e3b273ebb10629545"
        },
        {
          "alg" : "SHA-1",
          "content" : "66ffb49ec116865017346be7a27bb0d16454c80a"
        },
        {
          "alg" : "SHA-256",
          "content" : "465c7acdd254d7e3ee60946356959ca42aa0e389cc4d1ce78afd51c48126b050"
        },
        {
          "alg" : "SHA-512",
          "content" : "2d357642cbe8bc981671ae03c25fa2c47f2fcce556bddba95c4210834a82903e2d08f56ea0e64a100e5fde49d7d7cf6ad7efe8d6fb293a3fd317f1f2e647a93d"
        },
        {
          "alg" : "SHA-384",
          "content" : "04efe20cfb0d01a70302aa806c1856b88bc97650d5e067a428716b48906a5f474a6aaa03680c6d8001307bfc5bf88bed"
        },
        {
          "alg" : "SHA3-384",
          "content" : "3730ad78690ad0ff8bdbaccdc584209f705a0b22c1212c424a0fe6ab6b7c8dcb4beeba5cc8da310699a4ba3d7d459a51"
        },
        {
          "alg" : "SHA3-256",
          "content" : "28bb8327cf49d64874567884be019d190e50786c7015c281019376ea35440e36"
        },
        {
          "alg" : "SHA3-512",
          "content" : "9bd9debeef676c770be3e95773303461d9b39d7c5d3180299ba5a93c72175d8ac1cf59c79a2b08fae2c005875bd509251c97ae92de2b750acbea513823106571"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.arrow/arrow-memory-netty-buffer-patch@18.3.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://arrow.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/apache/arrow-java/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?dev@arrow.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/arrow-java/tree/v18.3.0"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.arrow/arrow-memory-netty-buffer-patch@18.3.0?type=jar"
    },
    {
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-buffer",
      "version" : "4.1.135.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "fcd9f423d78592d1ca785b68ee9b16ee"
        },
        {
          "alg" : "SHA-1",
          "content" : "6e60e222c27d3534e63e519fb1a9d66c485f62bd"
        },
        {
          "alg" : "SHA-256",
          "content" : "2a194f99fc93d07c4d442d04ac71bd2dc56d3188cd0e4270cdc2a953d1956bf9"
        },
        {
          "alg" : "SHA-512",
          "content" : "a839731d75317f515256c8340d73ea4344c9f488ce2cc31c99c2788d2a33a055482ebc438ebca63a27c0d49728fe778e7d0b06a031a0244728d0b0ccddfe6407"
        },
        {
          "alg" : "SHA-384",
          "content" : "ed107c69a75793161a6e3ade436cb564224b7bd58ea551b42c5b7d10dd6384fa25538a0064dba4521beb3ca69857c455"
        },
        {
          "alg" : "SHA3-384",
          "content" : "6f1c0b2b2c428e9fdbda3aa37558fa91330be87a7fda93eb2ba66d3b224feef63120216a06e3de2388bdf8648c549f28"
        },
        {
          "alg" : "SHA3-256",
          "content" : "bb6f4ce57de81fb991b78f4e6861088e46a3e8de176a84757d48d14a2ac1ce74"
        },
        {
          "alg" : "SHA3-512",
          "content" : "13f9bafd0b5534316b77170719aab58a46daf9d7303b5541887b9171522501fff7b1fbbe6ab887a2a94b2d8455aa42fa059fce9dc21db98309d02e6539e32835"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-buffer@4.1.135.Final?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/netty-buffer/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty/netty-buffer"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-buffer@4.1.135.Final?type=jar"
    },
    {
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-common",
      "version" : "4.1.135.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "bfa2258e927ec224143136eda472297c"
        },
        {
          "alg" : "SHA-1",
          "content" : "3f1fd5004102cd1146a53d29127804569b63c90f"
        },
        {
          "alg" : "SHA-256",
          "content" : "26775ca95820711403cf065fa2ec0134a0a04ff5417c688c0237aee68b55838d"
        },
        {
          "alg" : "SHA-512",
          "content" : "a4317485b0b1434b552c98bcb69a1e1fffdffcdee22c84e61c107dfa9752faff7f5799617c81ba80861f929fe7dcf4436d7bf2af95c4eddd550ebfb75df12cc6"
        },
        {
          "alg" : "SHA-384",
          "content" : "f6dbd09db24ddfbe0b0c7c4480eddbbfc29c9db89ecd38b56e4c9f0ca49907ea45a88479ec6d95ae83c98d490159ab58"
        },
        {
          "alg" : "SHA3-384",
          "content" : "151dc11ed193e806580144e00260c6e98f82e7716fe81d7181b923fb1f2656a07acf6e324c90c35cf066e90c023462ba"
        },
        {
          "alg" : "SHA3-256",
          "content" : "5c0286ab9cd98756e203f38d8172577ed184c8236478532bbd78f85d4a583ea2"
        },
        {
          "alg" : "SHA3-512",
          "content" : "d2f40345230b7f1d5b04b78fd82de5cb94134ca12510d0e53a22245f9c24dcb420c30e8a2cffb26b474782d09cf986c57f9f99df856a481c2fc7f8d066839c10"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-common@4.1.135.Final?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/netty-common/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty/netty-common"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-common@4.1.135.Final?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "io.confluent.flink",
      "name" : "flink-rpc-core",
      "version" : "1.20.5-cp2",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "ab91319dfbbddb0e66926b0db5d82d8c"
        },
        {
          "alg" : "SHA-1",
          "content" : "f667871d7f0b40d0b5e1c9cea7623b8f4dc3cbac"
        },
        {
          "alg" : "SHA-256",
          "content" : "d68f5904956256395f91c6888cdaf072a8e943f5da8e2c40de60bc2d669ac594"
        },
        {
          "alg" : "SHA-512",
          "content" : "ca854064e242df0768811c880bae944878789108386c1ee41ff0a11344f53f2bebe994cc028c402a636bc8f97c3b9bbcc05136bd542ca9902151718703576b47"
        },
        {
          "alg" : "SHA-384",
          "content" : "3e804e96cff0657087bceb1dc1e48bc08e17ddacfcdb64be0a4d90a31f7d8425223717ff528216f7c74e3a126dd351b5"
        },
        {
          "alg" : "SHA3-384",
          "content" : "0c6c4ebc8a784061d9d126ccee7c47e18755e388fea353c3064530fe93fc7d1494ee18c598d6dbdc562a23560f02a54c"
        },
        {
          "alg" : "SHA3-256",
          "content" : "a1af4a34be29bf7f28d4b6795dd49b0ec1ab2d228e9d74cad5f2a90a2ecce1ce"
        },
        {
          "alg" : "SHA3-512",
          "content" : "0b95209cc4af207f2d2f35c9ead5a0885dfb734848680a10f2221ace1f1953e369ef45d2521baeaaf8d4885f8feb9159705ffa789f51144275b5dfd6a002b79b"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.confluent.flink/flink-rpc-core@1.20.5-cp2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://flink.apache.org/flink-rpc/flink-rpc-core"
        },
        {
          "type" : "distribution",
          "url" : "s3://cp-flink-staging-654654529379-us-west-2/maven-staging/12a166280c02d658ecafa7650035d3389f69bb81"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink/flink-rpc/flink-rpc-core"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.confluent.flink/flink-rpc-core@1.20.5-cp2?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "io.confluent.flink",
      "name" : "flink-rpc-akka-loader",
      "version" : "1.20.5-cp2",
      "description" : "This module contains the mechanism for loading flink-rpc-akka through a separate classloader.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "e5dbc4787f29725a51e604e2f5eeb49d"
        },
        {
          "alg" : "SHA-1",
          "content" : "d2d0d5f75fdea3db1b59fe406dfab99acca777bf"
        },
        {
          "alg" : "SHA-256",
          "content" : "4dc5ca214078ffb93259aef2d1a92654caeb2c8711c53c24db0cbe723c616ac9"
        },
        {
          "alg" : "SHA-512",
          "content" : "e39744d60d7ae3fcc33c719cc75965956ac10bc05971fe45f91e82ad5697405490908ffca14f7ce1f4a6ccd39ffb008e7413115a312a8bc6bcf39fee4ed131e3"
        },
        {
          "alg" : "SHA-384",
          "content" : "002fec1c4178af26849db9d1333194c4803c47e1facea08ae0f9d6a521c2c1bbe847decae5d5c9c6fb985b8f595a22de"
        },
        {
          "alg" : "SHA3-384",
          "content" : "afc6d6a55b3a40d43841c044eec15437d7521cdc76d8132c23cddfcbc3332e5d2103a409dc4cd8b8d2ce96ed0e5e5225"
        },
        {
          "alg" : "SHA3-256",
          "content" : "f5c33d1938f8e1cd26786da591046a12d34a317590de68e464db914d12d3d5e3"
        },
        {
          "alg" : "SHA3-512",
          "content" : "d5375589c8064094ce106ebeb3e96b4632ea8999d590609feec6814794d7c8f87cdfe75c8b4159d771ec9a5717a665379683cff9c6ab790f872808fd69643d3c"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.confluent.flink/flink-rpc-akka-loader@1.20.5-cp2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://flink.apache.org/flink-rpc/flink-rpc-akka-loader"
        },
        {
          "type" : "distribution",
          "url" : "s3://cp-flink-staging-654654529379-us-west-2/maven-staging/12a166280c02d658ecafa7650035d3389f69bb81"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink/flink-rpc/flink-rpc-akka-loader"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.confluent.flink/flink-rpc-akka-loader@1.20.5-cp2?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "io.confluent.flink",
      "name" : "flink-queryable-state-client-java",
      "version" : "1.20.5-cp2",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "ea6c54ad7b87bafb5a8f6d2d0b1299ed"
        },
        {
          "alg" : "SHA-1",
          "content" : "e31a743f86777e88e07f9cd55ff29d080b7f0dad"
        },
        {
          "alg" : "SHA-256",
          "content" : "9f222233eead2fba943f61d7aee46d4dd074cc8424f34fc08cd5a9247776cb5a"
        },
        {
          "alg" : "SHA-512",
          "content" : "90ec2fa1a118a19fab89f53efa2335eb9a241ce608ef8e34e39ed6834c00c125cb27a249fb6df3c3c21d9c762ea97387531244f8ebedd2dbb967bacaa462295a"
        },
        {
          "alg" : "SHA-384",
          "content" : "4da5ae5822f6187b19a0d22f41c8ff5cd3fc2ce1df492fe4e6db0cef271b09bf51231607beaa344572209e69291cdc1a"
        },
        {
          "alg" : "SHA3-384",
          "content" : "cd9c59a68fea2eec40e63475b82e773a08eec0058259de6eb8fe8c55199d6442ce667a64ebfb48980ca58b0157163c4b"
        },
        {
          "alg" : "SHA3-256",
          "content" : "87b2e9e2327c39b94124290b10abd8eb6056fdc019227656684304d383b24ecc"
        },
        {
          "alg" : "SHA3-512",
          "content" : "9ea284dd3d6b53f1d741cf468d1f953436c80b73a4c97de0cb1fa9e1dc95fad50653fc5f32378382eb29e7102ae605b219d6c0e338d398400ae7f30fba48ef7a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.confluent.flink/flink-queryable-state-client-java@1.20.5-cp2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://flink.apache.org/flink-queryable-state/flink-queryable-state-client-java"
        },
        {
          "type" : "distribution",
          "url" : "s3://cp-flink-staging-654654529379-us-west-2/maven-staging/12a166280c02d658ecafa7650035d3389f69bb81"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink/flink-queryable-state/flink-queryable-state-client-java"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.confluent.flink/flink-queryable-state-client-java@1.20.5-cp2?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "io.confluent.flink",
      "name" : "flink-hadoop-fs",
      "version" : "1.20.5-cp2",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "df661f01c6c1f2cab35d60f4c09316b7"
        },
        {
          "alg" : "SHA-1",
          "content" : "1dbb5a536b8f6f620b1461ed88d81cb266c7b65e"
        },
        {
          "alg" : "SHA-256",
          "content" : "433a842d899bd3e16a54cd348f8c84867a36dbf9d4341e73bd713803cc3ca01d"
        },
        {
          "alg" : "SHA-512",
          "content" : "241c89405257f7208592fedfc4e71a8bf7e4109e2e3410bc7588a343838c8f95e326c2299aaeac170516f12d9910751e821ab39f190ecdd9358d88d0ea5fc547"
        },
        {
          "alg" : "SHA-384",
          "content" : "274094bc3e75842358c0e5be5beed759fece0ff216eaf1b19fb771d027b3b559da87ba3f41363e5adca4fe44c0616307"
        },
        {
          "alg" : "SHA3-384",
          "content" : "3a875ad31f761bb3b285414ddd1d3898ac378f754f9adaeefb2592af4cc5a94804778f2ca0d8420324fe1d797a2491cd"
        },
        {
          "alg" : "SHA3-256",
          "content" : "7902ab71dd8104a35cc0d8bca432f1dbcd5b46853fccac84461972a4c2225050"
        },
        {
          "alg" : "SHA3-512",
          "content" : "f70729b4dd848c1421f3bcbae18645e4581a0624fd63f38f064c00de9839da493536ad75b72ed34f3fc8c9b19bcbdca4bcef78e7b6b185494158c83dc693fd66"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.confluent.flink/flink-hadoop-fs@1.20.5-cp2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://flink.apache.org/flink-filesystems/flink-hadoop-fs"
        },
        {
          "type" : "distribution",
          "url" : "s3://cp-flink-staging-654654529379-us-west-2/maven-staging/12a166280c02d658ecafa7650035d3389f69bb81"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink/flink-filesystems/flink-hadoop-fs"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.confluent.flink/flink-hadoop-fs@1.20.5-cp2?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.flink",
      "name" : "flink-shaded-netty",
      "version" : "4.1.100.Final-20.0",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "6a86015758a9e48ecc6ca96620a2ba0b"
        },
        {
          "alg" : "SHA-1",
          "content" : "5880d365f7577f96bdbf29b8bca9cc645a5bd3e5"
        },
        {
          "alg" : "SHA-256",
          "content" : "dfe49f4e089640d8527814d85cd441d4f90b564996d81e5c905b0d282d5f1a21"
        },
        {
          "alg" : "SHA-512",
          "content" : "99914cf4ffc9804d41431d483521fdf054667e64c0d9f541a26e1fa48fd754fd3124c0e94063b09a3b4bb79de1d2e1ac0fa0dbaff66a9cfd681a2171d3d08518"
        },
        {
          "alg" : "SHA-384",
          "content" : "3105c95b13e444f2119d583ec3ed314f779016be39c30782000f1efafe8a43e5fd598a07235576a8db27dd34ee6ef158"
        },
        {
          "alg" : "SHA3-384",
          "content" : "06d8ee7b6da1cc62812c3ac7a5cbe0c6ca3e7db90e889ba7420c4c53ec42dddc60a652267f46c7d6fd2b192174a475eb"
        },
        {
          "alg" : "SHA3-256",
          "content" : "1e47d716f7d480bae32f9306725568c0dea2a70a690732c63d294c191ce5f693"
        },
        {
          "alg" : "SHA3-512",
          "content" : "5c9daa7dc98338fc5b6203f05264c114fc062fdca36d58cdf7588aaa20a51f230402fd66a5b607ffe1bc00d42d45613ebf23a66456787cfb33da31f5c15efe09"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.flink/flink-shaded-netty@4.1.100.Final-20.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://flink.apache.org/flink-shaded-netty"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink-shaded/flink-shaded-netty"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.flink/flink-shaded-netty@4.1.100.Final-20.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.flink",
      "name" : "flink-shaded-zookeeper-3",
      "version" : "3.8.4-20.0",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "2effd13ae46b0a720a8e65f88ee984c3"
        },
        {
          "alg" : "SHA-1",
          "content" : "38fe34fb05e74111482482aca6d42b490918d005"
        },
        {
          "alg" : "SHA-256",
          "content" : "a3f0c509bf4211ea30aaf284164eaeb55e8572c87aa219c11795de4c9d1aba23"
        },
        {
          "alg" : "SHA-512",
          "content" : "0052f59dfe9fc222047436c0c7986bd05694a8af27ce62ed1738836bf20fb0609d5d61b032f42429e3c2ed38ed0ac3929f791354311c1cc6e3314914b019a4f2"
        },
        {
          "alg" : "SHA-384",
          "content" : "f787b7e66e4e60191bb1f8c948e2392322da0c0b08ce2187e2a63030f43deb22b2bc12bf7ba80620d8eb8cb3fb315464"
        },
        {
          "alg" : "SHA3-384",
          "content" : "fbb7fa468f057844909a157ffc3d91d30ebe4a575df290e55ac96894f02ff1a40c2870a3d10d9519808570450b3767a4"
        },
        {
          "alg" : "SHA3-256",
          "content" : "b956b9912c46a03562596992f04bd6c9d81aa48ca14f59a786ee01164c46881d"
        },
        {
          "alg" : "SHA3-512",
          "content" : "912a364387b9524bdf2fd63ae887a4b4647493410b5d78542258ee67e95d149127d44923c23aa3a8aacb2bd285642314d348cefda6105d5086179f06d5ac6b87"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.flink/flink-shaded-zookeeper-3@3.8.4-20.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://flink.apache.org/flink-shaded-zookeeper-parent/flink-shaded-zookeeper-3"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink-shaded/flink-shaded-zookeeper-parent/flink-shaded-zookeeper-3"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.flink/flink-shaded-zookeeper-3@3.8.4-20.0?type=jar"
    },
    {
      "publisher" : "Shigeru Chiba, www.javassist.org",
      "group" : "org.javassist",
      "name" : "javassist",
      "version" : "3.24.0-GA",
      "description" : "Javassist (JAVA programming ASSISTant) makes Java bytecode manipulation simple. It is a class library for editing bytecodes in Java.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "23fd22d0d089ddfac567a39ce0cb1a91"
        },
        {
          "alg" : "SHA-1",
          "content" : "d7466fc2e3af7c023e95c510f06448ad29b225b3"
        },
        {
          "alg" : "SHA-256",
          "content" : "aba81efa678b621203fb89aeff81d6f126f7a9dd709401e5609c42976684ae23"
        },
        {
          "alg" : "SHA-512",
          "content" : "e57dad74a3edef837ece841d06e4a7c96ffecab8fbcba56fe5f7eccd662f0c0d757880a6073793a8c75ad7a0a1d146346b75cdbfe4fd8a271048a54446e5d1a2"
        },
        {
          "alg" : "SHA-384",
          "content" : "4867afdb7522b3dbfa10a51264ac6c15a2a8083d16c8dbef318275d24687768f35130b1c17d8407ca8ecf855abd83dff"
        },
        {
          "alg" : "SHA3-384",
          "content" : "a52be891987d4fc7d319e6417e0cd9a28f189d8623b803d72b5429e118da73b9937899231825e793d37b434d7522d283"
        },
        {
          "alg" : "SHA3-256",
          "content" : "0cf8db7d2a5f7e1a70827538cb4b0b446fcc239f05ca55d9bf8f2a50f1e08af3"
        },
        {
          "alg" : "SHA3-512",
          "content" : "ed9675f9f070203801eb762092ac99636d376b7ef563f99508283006a65a0d2dfce38e1ba7ff2ccfebcede0376ba0724b76b459ca112477234aed8208807f785"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MPL-1.1"
          }
        },
        {
          "license" : {
            "id" : "LGPL-2.1-only"
          }
        },
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.javassist/javassist@3.24.0-GA?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.javassist.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.jboss.org/nexus/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://jira.jboss.org/jira/browse/JASSIST/"
        },
        {
          "type" : "vcs",
          "url" : "scm:git:git@github.com:jboss-javassist/javassist.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.javassist/javassist@3.24.0-GA?type=jar"
    },
    {
      "publisher" : "xerial.org",
      "group" : "org.xerial.snappy",
      "name" : "snappy-java",
      "version" : "1.1.10.4",
      "description" : "snappy-java: A fast compression/decompression library",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "d1d3b91e925c46a1a0f68b87298bafe8"
        },
        {
          "alg" : "SHA-1",
          "content" : "50d0390056017158bdc75c063efd5c2a898d5f0c"
        },
        {
          "alg" : "SHA-256",
          "content" : "55b30c94e5c4cc2d4b6976916098d0678a8a6cc7427fa8c875621bd94e731ac8"
        },
        {
          "alg" : "SHA-512",
          "content" : "9e52bad4eaa0d0a2e0083cdd3433d84c4bb44c4d3f0314a48c3d6eacbb64d0f4fb2d71197944115618a598eb4a4941c13af2a9ec676b003fb3462ddac58bbe41"
        },
        {
          "alg" : "SHA-384",
          "content" : "9539e8eb2dea244f07a7216db38970e3f336b5dc9d132cbe54e201c818dba3e02a1fc467b4529a18eca7127f86d742dd"
        },
        {
          "alg" : "SHA3-384",
          "content" : "d5d5ef5d8b050f200ae29855a4b6f5e278215d0a97a69d3653dc1aa716f9847b3c305312a3c994d46721615ba02fc7c8"
        },
        {
          "alg" : "SHA3-256",
          "content" : "bbbb3ff43a24094bf2c77dd8c8f94b06d62d158da0d2c3399de3a2993df9986e"
        },
        {
          "alg" : "SHA3-512",
          "content" : "de2aa7e7fada466f24ccda07123e2877446733dd48e4b914d25b0d296f677e17a24f182a0e9216e77b261143b774ccaadcfd2854dde1bf36cb2c6db6cdf78b3c"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.xerial.snappy/snappy-java@1.1.10.4?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/xerial/snappy-java"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/xerial/snappy-java"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.xerial.snappy/snappy-java@1.1.10.4?type=jar"
    },
    {
      "group" : "tools.profiler",
      "name" : "async-profiler",
      "version" : "2.9",
      "description" : "Low overhead sampling profiler for Java",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "4df6477a255b88e99f2ed4daa3c713cc"
        },
        {
          "alg" : "SHA-1",
          "content" : "4ed20e2a4640ee672e7cf23b1512dbdeb9a4b7e6"
        },
        {
          "alg" : "SHA-256",
          "content" : "6c4e993c28cf2882964cac82a0f96e81a325840043884526565017b2f62c5ba4"
        },
        {
          "alg" : "SHA-512",
          "content" : "60ba593a0cf529397e73e38ef71bc2e5def44f1111a60f40a724ac3472ef7afe92e02a61b0ad18c373122cd92216f49268d335e1150dc3a99ff2431c598aeb5c"
        },
        {
          "alg" : "SHA-384",
          "content" : "65107ddcd2a06b69ac4cdb9bd93452045c4e08b843826666a890816abe0486966599cf6a4b07ff87c5d95e86551bb115"
        },
        {
          "alg" : "SHA3-384",
          "content" : "4989b467a4791464d50c51782ccc60547bfc8105aebc0764656c67405bbd7d023a9d405a1fd864f86dbd186af8624928"
        },
        {
          "alg" : "SHA3-256",
          "content" : "225998977421a87839be6c09f49f9ebd972b063a65f53d374e61fc3d68416ca4"
        },
        {
          "alg" : "SHA3-512",
          "content" : "723c0651f61ae6a119624b11bc9d3959ae44de0bcef51f0a341c5d7ebdc6a0e677f3c43399db9a4a657334f46a1092ee55d45f92344b7e31e6e26669ffe41823"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/tools.profiler/async-profiler@2.9?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://profiler.tools"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/jvm-profiling-tools/async-profiler"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/tools.profiler/async-profiler@2.9?type=jar"
    },
    {
      "group" : "at.yawk.lz4",
      "name" : "lz4-java",
      "version" : "1.10.3",
      "description" : "Java bindings and pure Java implementations of LZ4 and XXHash",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "7e7a36249617ebd6d8cb0e7b4f0170ee"
        },
        {
          "alg" : "SHA-1",
          "content" : "56c7a637a793e7dc5a369d24ebadf0d1b85196c4"
        },
        {
          "alg" : "SHA-256",
          "content" : "49753ae8a9b7dc3ce48cb2989cc6605e43eb8269748ad3466251836ec4cd02a8"
        },
        {
          "alg" : "SHA-512",
          "content" : "e20b0c13ed9c400d07b86f7e50815046e159021c8cebc710c479c3df7b90270fa9e580628efb5ab3ad399ad1664396c09c3af7004a82ae575934c30117f0562c"
        },
        {
          "alg" : "SHA-384",
          "content" : "75b6b7955de83ac838268b43b857041aa39e928b63539b0ba9df699a5dda44f423e48c4d7b460992c39279248e5f8268"
        },
        {
          "alg" : "SHA3-384",
          "content" : "4d07606222374ac42edc8ca03fccd894a20f3ac78b94adcc0c504309c13925c887e06151bc2d1ec7dd55da6c8152ea27"
        },
        {
          "alg" : "SHA3-256",
          "content" : "860a990a16c86bc2a25edbbfc40a4249bcef906309ab57fa70ef5726eddd5952"
        },
        {
          "alg" : "SHA3-512",
          "content" : "41842491b45ef050c48b3f2cd36899f472391061626a06437ea257395072078d5b664b5b55d6be41d612cc743c7e6bd16ef6de7ae3e2c546336764af2011c558"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/at.yawk.lz4/lz4-java@1.10.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/yawkat/lz4-java"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/yawkat/lz4-java"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/at.yawk.lz4/lz4-java@1.10.3?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-lang3",
      "version" : "3.19.0",
      "description" : "Apache Commons Lang, a package of Java utility classes for the classes that are in java.lang's hierarchy, or are considered to be so standard as to justify existence in java.lang. The code is tested using the latest revision of the JDK for supported LTS releases: 8, 11, 17 and 21 currently. See https://github.com/apache/commons-lang/blob/master/.github/workflows/maven.yml Please ensure your build environment is up-to-date and kindly report any build issues.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "2ac2db154e365d55d167ec1215125a3a"
        },
        {
          "alg" : "SHA-1",
          "content" : "d6524b169a6574cd253760c472d419b47bfd37e6"
        },
        {
          "alg" : "SHA-256",
          "content" : "32733ab4bc90b45b63eb72677d886961003fd4ed113e07b1028f9877cb2ac735"
        },
        {
          "alg" : "SHA-512",
          "content" : "24cf9bfc7c32736277d2a1e82a455d004ec7d4989e8d0dc2831c910a04b6ff8b30ca9c49ec25562cf0b7f1ffc27726e7510a54bb99e75a3be83ddf6030c37978"
        },
        {
          "alg" : "SHA-384",
          "content" : "90c567c8f42b58d0f3f24233260258e7e3bae1f8284ee33f9730e1cecc4fe2c98b7d6ebbba2a6598b50d444ddfa70722"
        },
        {
          "alg" : "SHA3-384",
          "content" : "397a7aafd4f66cdec80cf4682a72db0873b3fc6a3db3cdd7be747b24ae13804dfc290e2441a115d50b0add9ce76af2dd"
        },
        {
          "alg" : "SHA3-256",
          "content" : "4c0809e7ff0474603b0a1bcdf2f745cec9233ffdc6c652b077d93f2630d52f8b"
        },
        {
          "alg" : "SHA3-512",
          "content" : "25564027878618e00dc24ea5caf8365a9396c25597aaf4ea8a37997fd699dabdf4b6f9ce4c1c9f86abedb4afa26041ac234d238c63ffecc207ce2068a6271956"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-lang3@3.19.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-lang/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-lang/actions"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/LANG"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf/commons-lang.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-lang3@3.19.0?type=jar"
    },
    {
      "publisher" : "FasterXML",
      "group" : "com.fasterxml.jackson.datatype",
      "name" : "jackson-datatype-jdk8",
      "version" : "2.18.6",
      "description" : "Add-on module for Jackson (https://github.com/FasterXML/jackson) to support JDK 8 data types.",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "97d226dc36adf714a5cc7c9cff561f4a"
        },
        {
          "alg" : "SHA-1",
          "content" : "b84138f10a0f84077cd1516783beba7a81d65f27"
        },
        {
          "alg" : "SHA-256",
          "content" : "b3287d74a95741b95295922f64e35e9204825fdd950606613a706d045bdc7443"
        },
        {
          "alg" : "SHA-512",
          "content" : "f1ada9872f7c67488bfddad421cff9692a35d2e702b004dc953c123c2fcf9634df310ed60111db0671d8d3a5646b5726278d39f2caf7ef4d19b78080f6b7c0f5"
        },
        {
          "alg" : "SHA-384",
          "content" : "b72534ae343000f52dd5b635b39fe2bedf76254d9b944dbef4750203b57525258552c3f95211268bb113c06d028738c7"
        },
        {
          "alg" : "SHA3-384",
          "content" : "7f86d6cba98e493363d5fdd70198f13b4dd0491ea09274925581869878ce9931fbf3429d6e5fceff594d45d3493bfd09"
        },
        {
          "alg" : "SHA3-256",
          "content" : "8d2a899e2a12967501f7e52ba0182fe938a563450619f7dc2f973cc49bb67afb"
        },
        {
          "alg" : "SHA3-512",
          "content" : "96c2cc9de1725a8a3ff04786b48e131633a4801f3383295b954d5bd7cbf93dede4dc8699824c20e8ac38a0aabf238b893328fbb71b19335095abca15938f662d"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jdk8@2.18.6?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/FasterXML/jackson-modules-java8/jackson-datatype-jdk8"
        },
        {
          "type" : "distribution",
          "url" : "https://central.sonatype.com/api/v1/publisher"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/FasterXML/jackson-modules-java8/issues"
        },
        {
          "type" : "vcs",
          "url" : "http://github.com/FasterXML/jackson-modules-java8/jackson-datatype-jdk8"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jdk8@2.18.6?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.flink",
      "name" : "flink-shaded-force-shading",
      "version" : "20.0",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "9971c3d248dd2ea79add93f77fb0f24f"
        },
        {
          "alg" : "SHA-1",
          "content" : "4c21de8cf9ca8e93777e5d1c4a7a0a2f61852401"
        },
        {
          "alg" : "SHA-256",
          "content" : "50773dc0f2ab1831754513a8861374c0e47b077dbcc33956fe3a6cd02308d0f8"
        },
        {
          "alg" : "SHA-512",
          "content" : "5b7a0bc48a25e82da9d9f8f9a01afe30bc7411b04924d8af72f4120a937b0a3f3999a51e3a55718783d71b97000d1d18568cfb48cb609d33cd201dfe10a7f0b2"
        },
        {
          "alg" : "SHA-384",
          "content" : "3b04f01b51dda20aef349e623f6c8de4713b15f095f4af220ef77c22f0b815687bb60c9def912c2e4eff3513132d7cc7"
        },
        {
          "alg" : "SHA3-384",
          "content" : "b0378ce70a9f05966229d15f8a5f6682280f63b5494040e1002a210128878799c5761bfa1b1b5d4204a0dabb8687f90e"
        },
        {
          "alg" : "SHA3-256",
          "content" : "0e0b42aa42a5be9a215f4e893efabe6773e5c8d54299daf714e36984410c4549"
        },
        {
          "alg" : "SHA3-512",
          "content" : "e8754f8fec246e8de00e9634f8a2c9821af3ebcc194ef570328dcc6e1395b0263d5ae875a702aa69e5a9602616afc3ef51a4b63e70c6df00646b495df87ebd1d"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.flink/flink-shaded-force-shading@20.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://flink.apache.org/flink-shaded-force-shading"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink-shaded/flink-shaded-force-shading"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.flink/flink-shaded-force-shading@20.0?type=jar"
    },
    {
      "publisher" : "QOS.ch",
      "group" : "org.slf4j",
      "name" : "slf4j-api",
      "version" : "1.7.36",
      "description" : "The slf4j API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "872da51f5de7f3923da4de871d57fd85"
        },
        {
          "alg" : "SHA-1",
          "content" : "6c62681a2f655b49963a5983b8b0950a6120ae14"
        },
        {
          "alg" : "SHA-256",
          "content" : "d3ef575e3e4979678dc01bf1dcce51021493b4d11fb7f1be8ad982877c16a1c0"
        },
        {
          "alg" : "SHA-512",
          "content" : "f9b033fc019a44f98b16048da7e2b59edd4a6a527ba60e358f65ab88e0afae03a9340f1b3e8a543d49fa542290f499c5594259affa1ff3e6e7bf3b428d4c610b"
        },
        {
          "alg" : "SHA-384",
          "content" : "2b14ad035877087157e379d3277dcdcd79e58d6bdb147c47d29e377d75ce53ad42cafbf22f5fb7827c7e946ff4876b9a"
        },
        {
          "alg" : "SHA3-384",
          "content" : "3bc3110dafb8d5be16a39f3b2671a466463cd99eb39610c0e4719a7bf2d928f2ea213c734887c6926a07c4cca7769e4b"
        },
        {
          "alg" : "SHA3-256",
          "content" : "ba2608179fcf46e2291a90b9cbb4aa30d718e481f59c350cc21c73b88d826881"
        },
        {
          "alg" : "SHA3-512",
          "content" : "14c4edcd19702ef607d78826839d8a6d3a39157df54b89a801d3d3cbbe1307131a77671b041c761122730fb1387888c5ec2e46bdd80e1cb07f8f144676441824"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.slf4j.org"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/qos-ch/slf4j/slf4j-api"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
    },
    {
      "group" : "com.google.code.findbugs",
      "name" : "jsr305",
      "version" : "1.3.9",
      "description" : "JSR305 Annotations for Findbugs",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "1d5a772e400b04bb67a7ef4a0e0996d8"
        },
        {
          "alg" : "SHA-1",
          "content" : "40719ea6961c0cb6afaeb6a921eaa1f6afd4cfdf"
        },
        {
          "alg" : "SHA-256",
          "content" : "905721a0eea90a81534abb7ee6ef4ea2e5e645fa1def0a5cd88402df1b46c9ed"
        },
        {
          "alg" : "SHA-512",
          "content" : "06da282cfd8e30d9f8cf17702b8709172b00e22b75a627a1d85f8989615b8a1a401bc25d9aee7b14aed1d9b5df73bf2ea8d66f9c8468d9577c29f0ccfa2cc70a"
        },
        {
          "alg" : "SHA-384",
          "content" : "56e6b41ef62eb5edfed0203802cefae9c2df86388148e420bb0c687abb2b80e14d5c2a82d5b35dce4badaf148f94eada"
        },
        {
          "alg" : "SHA3-384",
          "content" : "58c3bf89fa1afa75c2c5078159fd28e27b2273d437f26aaaa7391310b6f0823f3cf476a24f5631c0881f3f7e946d99be"
        },
        {
          "alg" : "SHA3-256",
          "content" : "c333ea5faedfa78e0614a2620438d5724eab093df4e960918391b6a44c2915b0"
        },
        {
          "alg" : "SHA3-512",
          "content" : "67ec31448e156cc72dd036060b460bb2667a13b1cbe500b6b7eed3235b1994b44c39f440ebd07b21ec9595b166ad61121d4f6a132b5b313c558ab21b72599425"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://findbugs.sourceforge.net/"
        },
        {
          "type" : "vcs",
          "url" : "http://findbugs.googlecode.com/svn/trunk/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"
    },
    {
      "group" : "net.bytebuddy",
      "name" : "byte-buddy",
      "version" : "1.14.4",
      "description" : "Byte Buddy is a Java library for creating Java classes at run time. This artifact is a build of Byte Buddy with all ASM dependencies repackaged into its own name space.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "21117c3c69db9aa3080d611640a27bb9"
        },
        {
          "alg" : "SHA-1",
          "content" : "20498aaec9b00a5cfdb831e7bf68feafa833ce4b"
        },
        {
          "alg" : "SHA-256",
          "content" : "7ae2b39ac230be9e3e09ce020406c017ff8ceba06eaf078c62a88c218a0ff2b4"
        },
        {
          "alg" : "SHA-512",
          "content" : "70f33b8da6492db126d414779cda791f919a6aa7ef66b34f86938ba5d905b5b3d7cf2b0e9faf1edd362f1b18cec6a921094af076f3c5a3a390ff2bb4c6186772"
        },
        {
          "alg" : "SHA-384",
          "content" : "9a9543a284b412365b1547e2b284c12a758f67a9f41a11c3cd64db225594391d47f95c14675a0e3696ce5182d80c1949"
        },
        {
          "alg" : "SHA3-384",
          "content" : "1a288d8032cc36c888e62ce034aa3c40e7c8df70bf10d76f6a3ebec3b9c5d88da61ad66a8b9fc74ab2e514bb964f617e"
        },
        {
          "alg" : "SHA3-256",
          "content" : "b519cf5ef8fab6c011fe8ad68ed1bf32e993ad5f13de84cc79b91a9f885b55a5"
        },
        {
          "alg" : "SHA3-512",
          "content" : "b68a097a4914411ca6e631ed0f84bc73c65ff5a53b2e13fe9662f107b64d239fa0d218151712252a7a39cfcabc67bc9e084704b9cdd6103633a1d2ceb566d84e"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/net.bytebuddy/byte-buddy@1.14.4?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://bytebuddy.net/byte-buddy"
        },
        {
          "type" : "distribution",
          "url" : "https://s01.oss.sonatype.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/raphw/byte-buddy/issues"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/net.bytebuddy/byte-buddy@1.14.4?type=jar"
    },
    {
      "publisher" : "Joe Walnes, Henri Tremblay, Leonardo Mesquita",
      "group" : "org.objenesis",
      "name" : "objenesis",
      "version" : "2.1",
      "description" : "A library for instantiating Java objects",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "32ccb1d20a42b5aaaceb90c9082a2efa"
        },
        {
          "alg" : "SHA-1",
          "content" : "87c0ea803b69252868d09308b4618f766f135a96"
        },
        {
          "alg" : "SHA-256",
          "content" : "c74330cc6b806c804fd37e74487b4fe5d7c2750c5e15fbc6efa13bdee1bdef80"
        },
        {
          "alg" : "SHA-512",
          "content" : "1dec9ee30812b8006e536a2749c5781ccdc4b446539efb6fa534f22e70562033876bf2eb22c6946d617695729bd65f0f65b984f15f05ac63db5bed215e74427c"
        },
        {
          "alg" : "SHA-384",
          "content" : "657b8a3b80a5475f198425396f7264301f9e0f3ad5dc336ef0c7b46874f5544861a8a2fd48cdb5f672e199a6935c19d1"
        },
        {
          "alg" : "SHA3-384",
          "content" : "e526937d722aad1857869b2d2a0ba5c88815609308c00b776b51614e501de5d93d54978f5bb9cf496bdcc28b1dbd5775"
        },
        {
          "alg" : "SHA3-256",
          "content" : "436cfbb9c208dd03c951708fa4ba6525e2a0b26a873d594a6fbe93ab49082c97"
        },
        {
          "alg" : "SHA3-512",
          "content" : "1e7ee9411df7cfbf0669c38e4ef029155dd718b91db1d182841c740caf8c1057ed273a77f8e32d724c48aaf96815a26ab099c776511ffc5ef351d70ebfa70344"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.objenesis/objenesis@2.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://objenesis.org"
        },
        {
          "type" : "distribution",
          "url" : "http://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/easymock/easymock/objenesis"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.objenesis/objenesis@2.1?type=jar"
    }
  ],
  "dependencies" : [
    {
      "ref" : "pkg:maven/io.confluent.flink/flink-python@1.20.5-cp2?type=jar",
      "dependsOn" : [
        "pkg:maven/io.confluent.flink/flink-core@1.20.5-cp2?type=jar",
        "pkg:maven/io.confluent.flink/flink-clients@1.20.5-cp2?type=jar",
        "pkg:maven/io.confluent.flink/flink-java@1.20.5-cp2?type=jar",
        "pkg:maven/io.confluent.flink/flink-streaming-java@1.20.5-cp2?type=jar",
        "pkg:maven/io.confluent.flink/flink-table-common@1.20.5-cp2?type=jar",
        "pkg:maven/io.confluent.flink/flink-table-runtime@1.20.5-cp2?type=jar",
        "pkg:maven/io.confluent.flink/flink-connector-files@1.20.5-cp2?type=jar",
        "pkg:maven/io.confluent.flink/flink-csv@1.20.5-cp2?type=jar",
        "pkg:maven/org.apache.beam/beam-runners-java-fn-execution@2.63.0?type=jar",
        "pkg:maven/org.apache.beam/beam-runners-core-java@2.63.0?type=jar",
        "pkg:maven/com.alibaba/pemja@0.5.7?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java@3.25.5?type=jar",
        "pkg:maven/net.sf.py4j/py4j@0.10.9.7?type=jar",
        "pkg:maven/net.razorvine/pyrolite@4.13?type=jar",
        "pkg:maven/org.apache.arrow/arrow-vector@18.3.0?type=jar",
        "pkg:maven/org.apache.arrow/arrow-memory-netty@18.3.0?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.19.0?type=jar",
        "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jdk8@2.18.6?type=jar",
        "pkg:maven/org.apache.flink/flink-shaded-force-shading@20.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.confluent.flink/flink-core@1.20.5-cp2?type=jar",
      "dependsOn" : [
        "pkg:maven/io.confluent.flink/flink-core-api@1.20.5-cp2?type=jar",
        "pkg:maven/io.confluent.flink/flink-annotations@1.20.5-cp2?type=jar",
        "pkg:maven/org.apache.flink/flink-shaded-asm-9@9.6-20.0?type=jar",
        "pkg:maven/org.apache.flink/flink-shaded-jackson@2.18.2-20.0?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.19.0?type=jar",
        "pkg:maven/org.snakeyaml/snakeyaml-engine@2.6?type=jar",
        "pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar",
        "pkg:maven/com.esotericsoftware.kryo/kryo@2.24.0?type=jar",
        "pkg:maven/commons-collections/commons-collections@3.2.2?type=jar",
        "pkg:maven/org.apache.commons/commons-compress@1.26.0?type=jar",
        "pkg:maven/org.apache.flink/flink-shaded-guava@31.1-jre-17.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.confluent.flink/flink-core-api@1.20.5-cp2?type=jar",
      "dependsOn" : [
        "pkg:maven/io.confluent.flink/flink-annotations@1.20.5-cp2?type=jar",
        "pkg:maven/io.confluent.flink/flink-metrics-core@1.20.5-cp2?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.confluent.flink/flink-annotations@1.20.5-cp2?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.confluent.flink/flink-metrics-core@1.20.5-cp2?type=jar",
      "dependsOn" : [
        "pkg:maven/io.confluent.flink/flink-annotations@1.20.5-cp2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.flink/flink-shaded-asm-9@9.6-20.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.flink/flink-shaded-jackson@2.18.2-20.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-lang3@3.19.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.snakeyaml/snakeyaml-engine@2.6?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.commons/commons-lang3@3.19.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.esotericsoftware.kryo/kryo@2.24.0?type=jar",
      "dependsOn" : [
        "pkg:maven/com.esotericsoftware.minlog/minlog@1.2?type=jar",
        "pkg:maven/org.objenesis/objenesis@2.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.esotericsoftware.minlog/minlog@1.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.objenesis/objenesis@2.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/commons-collections/commons-collections@3.2.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-compress@1.26.0?type=jar",
      "dependsOn" : [
        "pkg:maven/commons-io/commons-io@2.15.1?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.19.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/commons-io/commons-io@2.15.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.flink/flink-shaded-guava@31.1-jre-17.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.confluent.flink/flink-clients@1.20.5-cp2?type=jar",
      "dependsOn" : [
        "pkg:maven/io.confluent.flink/flink-core@1.20.5-cp2?type=jar",
        "pkg:maven/io.confluent.flink/flink-runtime@1.20.5-cp2?type=jar",
        "pkg:maven/io.confluent.flink/flink-optimizer@1.20.5-cp2?type=jar",
        "pkg:maven/io.confluent.flink/flink-java@1.20.5-cp2?type=jar",
        "pkg:maven/commons-cli/commons-cli@1.5.0?type=jar",
        "pkg:maven/io.confluent.flink/flink-streaming-java@1.20.5-cp2?type=jar",
        "pkg:maven/io.confluent.flink/flink-datastream@1.20.5-cp2?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.confluent.flink/flink-runtime@1.20.5-cp2?type=jar",
      "dependsOn" : [
        "pkg:maven/io.confluent.flink/flink-core@1.20.5-cp2?type=jar",
        "pkg:maven/io.confluent.flink/flink-rpc-core@1.20.5-cp2?type=jar",
        "pkg:maven/io.confluent.flink/flink-rpc-akka-loader@1.20.5-cp2?type=jar",
        "pkg:maven/io.confluent.flink/flink-java@1.20.5-cp2?type=jar",
        "pkg:maven/io.confluent.flink/flink-queryable-state-client-java@1.20.5-cp2?type=jar",
        "pkg:maven/io.confluent.flink/flink-hadoop-fs@1.20.5-cp2?type=jar",
        "pkg:maven/commons-io/commons-io@2.15.1?type=jar",
        "pkg:maven/org.apache.flink/flink-shaded-netty@4.1.100.Final-20.0?type=jar",
        "pkg:maven/org.apache.flink/flink-shaded-guava@31.1-jre-17.0?type=jar",
        "pkg:maven/org.apache.flink/flink-shaded-jackson@2.18.2-20.0?type=jar",
        "pkg:maven/org.apache.flink/flink-shaded-zookeeper-3@3.8.4-20.0?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.19.0?type=jar",
        "pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar",
        "pkg:maven/commons-cli/commons-cli@1.5.0?type=jar",
        "pkg:maven/org.javassist/javassist@3.24.0-GA?type=jar",
        "pkg:maven/org.xerial.snappy/snappy-java@1.1.10.4?type=jar",
        "pkg:maven/tools.profiler/async-profiler@2.9?type=jar",
        "pkg:maven/at.yawk.lz4/lz4-java@1.10.3?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.confluent.flink/flink-rpc-core@1.20.5-cp2?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.confluent.flink/flink-rpc-akka-loader@1.20.5-cp2?type=jar",
      "dependsOn" : [
        "pkg:maven/io.confluent.flink/flink-core@1.20.5-cp2?type=jar",
        "pkg:maven/io.confluent.flink/flink-rpc-core@1.20.5-cp2?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.confluent.flink/flink-java@1.20.5-cp2?type=jar",
      "dependsOn" : [
        "pkg:maven/io.confluent.flink/flink-core@1.20.5-cp2?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.19.0?type=jar",
        "pkg:maven/org.apache.commons/commons-math3@3.6.1?type=jar",
        "pkg:maven/com.twitter/chill-java@0.7.6?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-math3@3.6.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.twitter/chill-java@0.7.6?type=jar",
      "dependsOn" : [
        "pkg:maven/com.esotericsoftware.kryo/kryo@2.24.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.confluent.flink/flink-queryable-state-client-java@1.20.5-cp2?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.flink/flink-shaded-netty@4.1.100.Final-20.0?type=jar",
        "pkg:maven/org.apache.flink/flink-shaded-guava@31.1-jre-17.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.flink/flink-shaded-netty@4.1.100.Final-20.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.confluent.flink/flink-hadoop-fs@1.20.5-cp2?type=jar",
      "dependsOn" : [
        "pkg:maven/io.confluent.flink/flink-core@1.20.5-cp2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.flink/flink-shaded-zookeeper-3@3.8.4-20.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/commons-cli/commons-cli@1.5.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.javassist/javassist@3.24.0-GA?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.xerial.snappy/snappy-java@1.1.10.4?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/tools.profiler/async-profiler@2.9?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/at.yawk.lz4/lz4-java@1.10.3?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.confluent.flink/flink-optimizer@1.20.5-cp2?type=jar",
      "dependsOn" : [
        "pkg:maven/io.confluent.flink/flink-core@1.20.5-cp2?type=jar",
        "pkg:maven/io.confluent.flink/flink-runtime@1.20.5-cp2?type=jar",
        "pkg:maven/io.confluent.flink/flink-java@1.20.5-cp2?type=jar",
        "pkg:maven/org.apache.flink/flink-shaded-guava@31.1-jre-17.0?type=jar",
        "pkg:maven/org.apache.flink/flink-shaded-jackson@2.18.2-20.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.confluent.flink/flink-streaming-java@1.20.5-cp2?type=jar",
      "dependsOn" : [
        "pkg:maven/io.confluent.flink/flink-core@1.20.5-cp2?type=jar",
        "pkg:maven/io.confluent.flink/flink-file-sink-common@1.20.5-cp2?type=jar",
        "pkg:maven/io.confluent.flink/flink-runtime@1.20.5-cp2?type=jar",
        "pkg:maven/io.confluent.flink/flink-java@1.20.5-cp2?type=jar",
        "pkg:maven/org.apache.flink/flink-shaded-guava@31.1-jre-17.0?type=jar",
        "pkg:maven/org.apache.commons/commons-math3@3.6.1?type=jar",
        "pkg:maven/io.confluent.flink/flink-connector-datagen@1.20.5-cp2?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.confluent.flink/flink-file-sink-common@1.20.5-cp2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.confluent.flink/flink-connector-datagen@1.20.5-cp2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.confluent.flink/flink-datastream@1.20.5-cp2?type=jar",
      "dependsOn" : [
        "pkg:maven/io.confluent.flink/flink-datastream-api@1.20.5-cp2?type=jar",
        "pkg:maven/io.confluent.flink/flink-streaming-java@1.20.5-cp2?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.confluent.flink/flink-datastream-api@1.20.5-cp2?type=jar",
      "dependsOn" : [
        "pkg:maven/io.confluent.flink/flink-core-api@1.20.5-cp2?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.confluent.flink/flink-table-common@1.20.5-cp2?type=jar",
      "dependsOn" : [
        "pkg:maven/io.confluent.flink/flink-core@1.20.5-cp2?type=jar",
        "pkg:maven/org.apache.flink/flink-shaded-asm-9@9.6-20.0?type=jar",
        "pkg:maven/com.ibm.icu/icu4j@67.1?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.ibm.icu/icu4j@67.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.confluent.flink/flink-table-runtime@1.20.5-cp2?type=jar",
      "dependsOn" : [
        "pkg:maven/io.confluent.flink/flink-table-common@1.20.5-cp2?type=jar",
        "pkg:maven/io.confluent.flink/flink-table-api-java@1.20.5-cp2?type=jar",
        "pkg:maven/io.confluent.flink/flink-table-api-java-bridge@1.20.5-cp2?type=jar",
        "pkg:maven/io.confluent.flink/flink-cep@1.20.5-cp2?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.confluent.flink/flink-table-api-java@1.20.5-cp2?type=jar",
      "dependsOn" : [
        "pkg:maven/io.confluent.flink/flink-table-common@1.20.5-cp2?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.confluent.flink/flink-table-api-java-bridge@1.20.5-cp2?type=jar",
      "dependsOn" : [
        "pkg:maven/io.confluent.flink/flink-table-api-java@1.20.5-cp2?type=jar",
        "pkg:maven/io.confluent.flink/flink-table-api-bridge-base@1.20.5-cp2?type=jar",
        "pkg:maven/io.confluent.flink/flink-java@1.20.5-cp2?type=jar",
        "pkg:maven/io.confluent.flink/flink-streaming-java@1.20.5-cp2?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.confluent.flink/flink-table-api-bridge-base@1.20.5-cp2?type=jar",
      "dependsOn" : [
        "pkg:maven/io.confluent.flink/flink-java@1.20.5-cp2?type=jar",
        "pkg:maven/io.confluent.flink/flink-streaming-java@1.20.5-cp2?type=jar",
        "pkg:maven/io.confluent.flink/flink-table-api-java@1.20.5-cp2?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.confluent.flink/flink-cep@1.20.5-cp2?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.flink/flink-shaded-guava@31.1-jre-17.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.confluent.flink/flink-connector-files@1.20.5-cp2?type=jar",
      "dependsOn" : [
        "pkg:maven/io.confluent.flink/flink-file-sink-common@1.20.5-cp2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.confluent.flink/flink-csv@1.20.5-cp2?type=jar",
      "dependsOn" : [
        "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.beam/beam-runners-java-fn-execution@2.63.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.checkerframework/checker-qual@3.42.0?type=jar",
        "pkg:maven/org.apache.beam/beam-vendor-guava-32_1_2-jre@0.1?type=jar",
        "pkg:maven/org.apache.beam/beam-runners-core-java@2.63.0?type=jar",
        "pkg:maven/org.apache.beam/beam-model-pipeline@2.63.0?type=jar",
        "pkg:maven/org.apache.beam/beam-model-fn-execution@2.63.0?type=jar",
        "pkg:maven/org.apache.beam/beam-sdks-java-core@2.63.0?type=jar",
        "pkg:maven/org.apache.beam/beam-vendor-grpc-1_69_0@0.1?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/org.apache.beam/beam-model-job-management@2.63.0?type=jar",
        "pkg:maven/joda-time/joda-time@2.5?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.checkerframework/checker-qual@3.42.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.beam/beam-vendor-guava-32_1_2-jre@0.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.beam/beam-runners-core-java@2.63.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.checkerframework/checker-qual@3.42.0?type=jar",
        "pkg:maven/org.apache.beam/beam-model-pipeline@2.63.0?type=jar",
        "pkg:maven/org.apache.beam/beam-sdks-java-core@2.63.0?type=jar",
        "pkg:maven/org.apache.beam/beam-model-job-management@2.63.0?type=jar",
        "pkg:maven/org.apache.beam/beam-vendor-guava-32_1_2-jre@0.1?type=jar",
        "pkg:maven/joda-time/joda-time@2.5?type=jar",
        "pkg:maven/org.apache.beam/beam-vendor-grpc-1_69_0@0.1?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.18.6?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.18.6?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.beam/beam-model-pipeline@2.63.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.beam/beam-vendor-grpc-1_69_0@0.1?type=jar",
        "pkg:maven/com.google.auto.value/auto-value-annotations@1.8.2?type=jar",
        "pkg:maven/org.apache.httpcomponents/httpclient@4.5.13?type=jar",
        "pkg:maven/org.apache.httpcomponents/httpcore@4.4.14?type=jar",
        "pkg:maven/org.conscrypt/conscrypt-openjdk-uber@2.5.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.beam/beam-vendor-grpc-1_69_0@0.1?type=jar",
      "dependsOn" : [
        "pkg:maven/com.google.auto.value/auto-value-annotations@1.8.2?type=jar",
        "pkg:maven/org.apache.httpcomponents/httpclient@4.5.13?type=jar",
        "pkg:maven/org.apache.httpcomponents/httpcore@4.4.14?type=jar",
        "pkg:maven/org.conscrypt/conscrypt-openjdk-uber@2.5.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.google.auto.value/auto-value-annotations@1.8.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.httpcomponents/httpclient@4.5.13?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.httpcomponents/httpcore@4.4.14?type=jar",
        "pkg:maven/commons-logging/commons-logging@1.1.3?type=jar",
        "pkg:maven/commons-codec/commons-codec@1.15?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.httpcomponents/httpcore@4.4.14?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/commons-logging/commons-logging@1.1.3?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/commons-codec/commons-codec@1.15?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.conscrypt/conscrypt-openjdk-uber@2.5.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.beam/beam-sdks-java-core@2.63.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.beam/beam-model-pipeline@2.63.0?type=jar",
        "pkg:maven/org.apache.beam/beam-model-fn-execution@2.63.0?type=jar",
        "pkg:maven/org.apache.beam/beam-model-job-management@2.63.0?type=jar",
        "pkg:maven/org.apache.beam/beam-sdks-java-transform-service-launcher@2.63.0?type=jar",
        "pkg:maven/org.apache.beam/beam-vendor-grpc-1_69_0@0.1?type=jar",
        "pkg:maven/org.apache.beam/beam-vendor-guava-32_1_2-jre@0.1?type=jar",
        "pkg:maven/net.bytebuddy/byte-buddy@1.14.4?type=jar",
        "pkg:maven/org.apache.commons/commons-compress@1.26.0?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.19.0?type=jar",
        "pkg:maven/io.github.classgraph/classgraph@4.8.162?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.18.6?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.18.6?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.18.6?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/org.xerial.snappy/snappy-java@1.1.10.4?type=jar",
        "pkg:maven/joda-time/joda-time@2.5?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.beam/beam-model-fn-execution@2.63.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.beam/beam-vendor-grpc-1_69_0@0.1?type=jar",
        "pkg:maven/com.google.auto.value/auto-value-annotations@1.8.2?type=jar",
        "pkg:maven/org.apache.httpcomponents/httpclient@4.5.13?type=jar",
        "pkg:maven/org.apache.httpcomponents/httpcore@4.4.14?type=jar",
        "pkg:maven/org.conscrypt/conscrypt-openjdk-uber@2.5.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.beam/beam-model-job-management@2.63.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.beam/beam-vendor-grpc-1_69_0@0.1?type=jar",
        "pkg:maven/com.google.auto.value/auto-value-annotations@1.8.2?type=jar",
        "pkg:maven/org.apache.httpcomponents/httpclient@4.5.13?type=jar",
        "pkg:maven/org.apache.httpcomponents/httpcore@4.4.14?type=jar",
        "pkg:maven/org.conscrypt/conscrypt-openjdk-uber@2.5.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.beam/beam-sdks-java-transform-service-launcher@2.63.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.checkerframework/checker-qual@3.42.0?type=jar",
        "pkg:maven/org.apache.beam/beam-vendor-guava-32_1_2-jre@0.1?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/args4j/args4j@2.33?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/args4j/args4j@2.33?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/net.bytebuddy/byte-buddy@1.14.4?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.github.classgraph/classgraph@4.8.162?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.18.6?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.18.6?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.18.6?type=jar",
      "dependsOn" : [
        "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.18.6?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.18.6?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/joda-time/joda-time@2.5?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.alibaba/pemja@0.5.7?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.google.protobuf/protobuf-java@3.25.5?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/net.sf.py4j/py4j@0.10.9.7?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/net.razorvine/pyrolite@4.13?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.arrow/arrow-vector@18.3.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.arrow/arrow-format@18.3.0?type=jar",
        "pkg:maven/org.apache.arrow/arrow-memory-core@18.3.0?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.18.6?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.18.6?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.18.6?type=jar",
        "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310@2.18.6?type=jar",
        "pkg:maven/com.google.flatbuffers/flatbuffers-java@25.2.10?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.arrow/arrow-format@18.3.0?type=jar",
      "dependsOn" : [
        "pkg:maven/com.google.flatbuffers/flatbuffers-java@25.2.10?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.google.flatbuffers/flatbuffers-java@25.2.10?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.arrow/arrow-memory-core@18.3.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310@2.18.6?type=jar",
      "dependsOn" : [
        "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.18.6?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.18.6?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.18.6?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.arrow/arrow-memory-netty@18.3.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.arrow/arrow-memory-core@18.3.0?type=jar",
        "pkg:maven/org.apache.arrow/arrow-memory-netty-buffer-patch@18.3.0?type=jar",
        "pkg:maven/io.netty/netty-common@4.1.135.Final?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.arrow/arrow-memory-netty-buffer-patch@18.3.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.arrow/arrow-memory-core@18.3.0?type=jar",
        "pkg:maven/io.netty/netty-buffer@4.1.135.Final?type=jar",
        "pkg:maven/io.netty/netty-common@4.1.135.Final?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.netty/netty-buffer@4.1.135.Final?type=jar",
      "dependsOn" : [
        "pkg:maven/io.netty/netty-common@4.1.135.Final?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.netty/netty-common@4.1.135.Final?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jdk8@2.18.6?type=jar",
      "dependsOn" : [
        "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.18.6?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.18.6?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.flink/flink-shaded-force-shading@20.0?type=jar",
      "dependsOn" : [ ]
    }
  ]
}