<?xml version="1.0" encoding="UTF-8"?>
<bom serialNumber="urn:uuid:f493466b-bd70-4368-afe9-970d748a0b41" version="1" xmlns="http://cyclonedx.org/schema/bom/1.4">
  <metadata>
    <timestamp>2024-06-25T07:18:00Z</timestamp>
    <tools>
      <tool>
        <vendor>OWASP Foundation</vendor>
        <name>CycloneDX Maven plugin</name>
        <version>2.7.7</version>
        <hashes>
          <hash alg="MD5">436dfb24c63a322708e4a5143d8543af</hash>
          <hash alg="SHA-1">3ef2e8728dc9eff2f129c34057e46e9d2b10629a</hash>
          <hash alg="SHA-256">c185b79bf0f9264f43bc8c222c44db67bea275bb727e3327cf9aea6bf45292c9</hash>
          <hash alg="SHA-512">41488733e31e6c5315327dcc86187c2b9a6b96cd08f7e2157ce130688afde29c313fc6a73edb8a76333a930c78874aa2eac874448920030c0f7af0ac05e65ced</hash>
          <hash alg="SHA-384">f9462f86240fd9fc0942f34981e6d2371f252aa1a4e5e8c3c14e7f0f1a4e4de69ef972e51cf09a749afb6d97c13e67ed</hash>
          <hash alg="SHA3-384">c755af6239348bc7dd1e1e6b5f14f7cf7e1560d689b252d9610cd865fa4b419d0b8e26260731dfc5da2176b6e706b414</hash>
          <hash alg="SHA3-256">309aac91005470c9c834354ab918759e2ae7ec52fc1676002621a5bbdf3b7827</hash>
          <hash alg="SHA3-512">c634570dcf8302e61005e5fa91a9a0d9b81542f731967b3c9f6d3ef89e3b945bd36d7ab69e2ebad8124b9c05da504361c8b36a8ce528d844409eeb7df4eea6ce</hash>
        </hashes>
      </tool>
    </tools>
    <component type="library" bom-ref="pkg:maven/io.confluent.flink/flink-rpc-akka@1.18.1-cp1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>io.confluent.flink</group>
      <name>flink-rpc-akka</name>
      <version>1.18.1-cp1</version>
      <description>Pekko-based RPC implementation. Pekko is the Apache fork of Akka.
		For compatibility/git reasons not all mentions of Akka have been replaced.</description>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.confluent.flink/flink-rpc-akka@1.18.1-cp1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://flink.apache.org/flink-rpc/flink-rpc-akka</url></reference><reference type="distribution"><url>s3://cp-flink-staging-654654529379-us-west-2/maven-staging/129f20ae94cc020d633e29da819f45870d79b743</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink/flink-rpc/flink-rpc-akka</url></reference></externalReferences>
    </component>
    <properties>
      <property name="maven.goal">makeBom</property>
      <property name="maven.scopes">compile,provided,runtime,system</property>
    </properties>
  </metadata>
  <components>
    <component type="library" bom-ref="pkg:maven/io.confluent.flink/flink-core@1.18.1-cp1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>io.confluent.flink</group>
      <name>flink-core</name>
      <version>1.18.1-cp1</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">bbd8d0d456a51de4afb09721e3e9cf31</hash>
        <hash alg="SHA-1">4e7a019ceb89a8ff681bfcb7d75b65225d085b05</hash>
        <hash alg="SHA-256">32975712581e9f6e6a771520053c63e55e6b30e9ff51266f48230f4ba0a9c718</hash>
        <hash alg="SHA-512">786ebb81a52d57342c61e1b3ff2a8c01a322426c11f7c43ce767da4a87ea3af2e7ff88f5ccd8360d06a7c2dff900ad0609169ae550e7b1a78a94b4097c373fe3</hash>
        <hash alg="SHA-384">7f4959c84b619aadbd0ad1f7ff51df58b459027c7bb1e00240314149e1363be9f0fa8274a2ebaa526c5aa4a88aa25f0c</hash>
        <hash alg="SHA3-384">efa5bc8d2b95eee0dc1f7b18a64a44cbac2a6c2a2c06583b6ef48ac83c88f0dd3f93761d960b4c88515a51aab90c626b</hash>
        <hash alg="SHA3-256">16db1142398839c60c66a3d76ce880068e4a47dc9aa92d492d6e02bbd8930c88</hash>
        <hash alg="SHA3-512">20bf40f4b18684197d623723703ec82f9e3b622c925167fcc66fa76c09ba1d1659c0fd9a1ceb8305af3d54949d416343264ae37eb1131b31b0714c83d8d79b92</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.confluent.flink/flink-core@1.18.1-cp1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://flink.apache.org/flink-core</url></reference><reference type="distribution"><url>s3://cp-flink-staging-654654529379-us-west-2/maven-staging/129f20ae94cc020d633e29da819f45870d79b743</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink/flink-core</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.confluent.flink/flink-annotations@1.18.1-cp1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>io.confluent.flink</group>
      <name>flink-annotations</name>
      <version>1.18.1-cp1</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">231ce9b3145b05f73b7d0259d8215a6a</hash>
        <hash alg="SHA-1">646e174f86e6e7c4c0b8c3220f17ae3fb30b8afe</hash>
        <hash alg="SHA-256">211f8d9932b3e9798275009d7dfd49c0c52a420be6275ba16ea1e7392922d962</hash>
        <hash alg="SHA-512">a8560e4dbf42a8e9186fc0d2f257f9e84f6e15f714b764b586b37f1fd7a9645849739dfd6126a0983141d387a78251f7aeb1af194545692222755a7d3ae4c169</hash>
        <hash alg="SHA-384">64c2e772cdbac918d99adb389cb953ba4c334de4e791bef20cdaedef3d9ad4e014217c3e71c8e8474ad559a78d0834ef</hash>
        <hash alg="SHA3-384">ce482d630f550ff43f1b5d1ed7431abc00301a93f1af4d589b36ec1761f51b0d4880e265c1817924e99f3d3496961e9c</hash>
        <hash alg="SHA3-256">42c9c2864a7a6136b53fea0598e7900f2b2389a1ee6d8fe62a925c23986de575</hash>
        <hash alg="SHA3-512">4c29587f61b36c473a1a2b9c5fec1d58b1d31d95a01b590af15fa00a602e97f2516c20a4b99e35a656b278f906bc4253dee8a6b0462cc12b38bdae4a4eb3c9c8</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.confluent.flink/flink-annotations@1.18.1-cp1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://flink.apache.org/flink-annotations</url></reference><reference type="distribution"><url>s3://cp-flink-staging-654654529379-us-west-2/maven-staging/129f20ae94cc020d633e29da819f45870d79b743</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink/flink-annotations</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.confluent.flink/flink-metrics-core@1.18.1-cp1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>io.confluent.flink</group>
      <name>flink-metrics-core</name>
      <version>1.18.1-cp1</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <hashes>
        <hash alg="MD5">34836d9c520ad67c2a135a6c5bd4e454</hash>
        <hash alg="SHA-1">56929fa8f749edae651f97654ec96712a24394f2</hash>
        <hash alg="SHA-256">a31d7764fca3a2472161ba66bff03866b55437b904d70709ba72d7318dc8921a</hash>
        <hash alg="SHA-512">481b702d6f780c8c3092c81e18adc886640d4a7ee21ab9f6575b91040982f16a80fcd0ba98247d03db1681568025c1de537381a9a781426e78a4f0ce1ce265d3</hash>
        <hash alg="SHA-384">d155b271e18f6309b13fac36e30ce0f228ba37df6d9fc53aecf1359128c33331503eb02a000be0bd764265a1d52cdacb</hash>
        <hash alg="SHA3-384">0d00327e6c4195961f1eb4c36f4328bc85c5b33c26a573f3cb45c9b30654b8dcb7959183be8fc6a6f08715be93c0c9b5</hash>
        <hash alg="SHA3-256">ebbbcb3b6df4294317cc51643e483f8188ee0b282689af18cf1fc5e51d6e5365</hash>
        <hash alg="SHA3-512">648c8ac9f396f7eed6fbddfc4cc1a421a3b8abcb79710e3776e151b1ae2156f439cc8276c6f6b6a7e65b9a440464bea49fba2678648b14611035e490a26aa3b2</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.confluent.flink/flink-metrics-core@1.18.1-cp1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://flink.apache.org/flink-metrics/flink-metrics-core</url></reference><reference type="distribution"><url>s3://cp-flink-staging-654654529379-us-west-2/maven-staging/129f20ae94cc020d633e29da819f45870d79b743</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink/flink-metrics/flink-metrics-core</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-shaded-asm-9@9.5-17.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-shaded-asm-9</name>
      <version>9.5-17.0</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <hashes>
        <hash alg="MD5">443601ddd70625d741be1d3382dcf012</hash>
        <hash alg="SHA-1">d09e84a77ad8258d26f6be6bbb31fe81e3f98658</hash>
        <hash alg="SHA-256">a79273d4fbea1683b5fe81bce25d7fe552a542690481132f7ded034a8f00169e</hash>
        <hash alg="SHA-512">b1414e5cd4cd63e1e8a2f4a18198834910a360dac22392e298458049d7bf05e74cea2a4206751026ad7dc2348112aa7f223d0ca6178a859cf343cf306a6bd4c8</hash>
        <hash alg="SHA-384">ff6195b15060e725158aa6c8406e441576c38318fa5ea26e27ffd09f4ed4596b5198579d69ef0192dbb6edb3fda79d40</hash>
        <hash alg="SHA3-384">2b29ecee21e6bf39e6a913cb1bb41d455ade8ec169b7574b6052972f4cf571fb5374d4dde1a24be0ec4d08246359348f</hash>
        <hash alg="SHA3-256">353458e2d9919279b41a1b74791b984fef6586f07232d2e71e42892a790052c9</hash>
        <hash alg="SHA3-512">e491cdd687aaa88d8d84e792caedc02a4ef27d2bdd78e4e9bf286876ce06518c03f0340ff984ffcd507d7982391e5a6f3c4c61e05fbf0e07bd9d5683d493393e</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-shaded-asm-9@9.5-17.0?type=jar</purl>
      <externalReferences><reference type="website"><url>http://flink.apache.org/flink-shaded-asm-9</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink-shaded/flink-shaded-asm-9</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-shaded-jackson@2.14.2-17.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-shaded-jackson</name>
      <version>2.14.2-17.0</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <hashes>
        <hash alg="MD5">492259ac7642687cc959257a5512542f</hash>
        <hash alg="SHA-1">689daca4a6fc14e361831e15abd96283166d0f62</hash>
        <hash alg="SHA-256">37e87311498ae8da80adb2aa09ab6e9739d8611e09868e7220822206c739231e</hash>
        <hash alg="SHA-512">3f4434cf93f2cd12b686aa84c4b1910d7e0191b2ddad7ba8de6d2c3805d3b49afcf5da06e1052faf01b6cb0dda554594f78e39db69d83208119c1f4f2cd5dc8f</hash>
        <hash alg="SHA-384">9e689ab8b7e7f7db269fd5b1b0fc1dc5f13fed06b283c9b8ceec5c500fc9f6a4200674eef2bb884a9e67133de32e9a77</hash>
        <hash alg="SHA3-384">a67fd2fe9cfd6e8ef51ab3c0217fcaf0a9420178a8c4025770b86d6b590db65c8bb4d96acf05b4212d2661073e4409cc</hash>
        <hash alg="SHA3-256">e47b2c93363ff5d65ae47d619f3caa605b5d996e4e765811b4b7117f1c58c90e</hash>
        <hash alg="SHA3-512">af2b026aebfa279ca42602c04a8db054a12c9f39c5640a0e7804cfa5d06124a52099aea56e9dfc25d018da9baa742b274c5914aa98814dbdd0e9c5ebfa7035b6</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-shaded-jackson@2.14.2-17.0?type=jar</purl>
      <externalReferences><reference type="website"><url>http://flink.apache.org/flink-shaded-jackson-parent/flink-shaded-jackson</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink-shaded/flink-shaded-jackson-parent/flink-shaded-jackson</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.commons</group>
      <name>commons-lang3</name>
      <version>3.12.0</version>
      <description>Apache Commons Lang, a package of Java utility classes for the
  classes that are in java.lang's hierarchy, or are considered to be so
  standard as to justify existence in java.lang.</description>
      <hashes>
        <hash alg="MD5">19fe50567358922bdad277959ea69545</hash>
        <hash alg="SHA-1">c6842c86792ff03b9f1d1fe2aab8dc23aa6c6f0e</hash>
        <hash alg="SHA-256">d919d904486c037f8d193412da0c92e22a9fa24230b9d67a57855c5c31c7e94e</hash>
        <hash alg="SHA-512">fbdbc0943cb3498b0148e86a39b773f97c8e6013740f72dbc727faeabea402073e2cc8c4d68198e5fc6b08a13b7700236292e99d4785f2c9989f2e5fac11fd81</hash>
        <hash alg="SHA-384">c34b8a0e0eba2168ad56fedeb7a1d710b6f1d3f1ce6aae99a4e0247bd120efbbadc8dcb2f731045b8a16e3efd30604dc</hash>
        <hash alg="SHA3-384">8ad6ebe7754bf0caa8cda7e59c0e95360d76e06a7ad6aeec5637985519dbd1dd06e7eed04711039f36ec4c49de280def</hash>
        <hash alg="SHA3-256">18ef639b2aeeb5aedffb18dbf20c79f33e300d99fb31b131689639cc470e6e4c</hash>
        <hash alg="SHA3-512">fbea96114dcf4f31cfaaa99987be756ddda3a6c74f8c835461997df794d54b92da1f60fe5c3f1f2a43cb8c5f5db7f4048bef77c70993673c7a93f3660fffc8da</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://commons.apache.org/proper/commons-lang/</url></reference><reference type="build-system"><url>https://builds.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/LANG</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=commons-lang.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.commons</group>
      <name>commons-text</name>
      <version>1.10.0</version>
      <description>Apache Commons Text is a library focused on algorithms working on strings.</description>
      <hashes>
        <hash alg="MD5">4afc9bfa2d31dbf7330c98fcc954b892</hash>
        <hash alg="SHA-1">3363381aef8cef2dbc1023b3e3a9433b08b64e01</hash>
        <hash alg="SHA-256">770cd903fa7b604d1f7ef7ba17f84108667294b2b478be8ed1af3bffb4ae0018</hash>
        <hash alg="SHA-512">afd836a1094449e0a791fee67363666c47b6d24acff353a5089b837b332c0f4af89565c354682521e37062d20e6b52d70c77bb4f24cca9b9532c274fc708a831</hash>
        <hash alg="SHA-384">06c56e6e513dd77cf10d0da46cdea08c34e220e81fa024735b668c6650df4234e564fe865ff5cafea963f56b1e8ffd4a</hash>
        <hash alg="SHA3-384">f09065ed066c25debf8c78cbb0bcc738e1ea283302ec992dcfb649acb90091cff879465c65a162e94534d454e3b4e9bb</hash>
        <hash alg="SHA3-256">0b59c567164bb755f2353b78ba66744000a8c4b35e1df05255b080a21c3a3dd5</hash>
        <hash alg="SHA3-512">f0fbce02a862b70f472a27d0722c54ac111ca2eb94584b8b0b73d1926aec26047cd92542ad0b3cf980a6825077587f41b194aa93d6f6350d1b87e59e8df1be7c</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://commons.apache.org/proper/commons-text</url></reference><reference type="build-system"><url>https://github.com/apache/commons-parent/actions</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/TEXT</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=commons-text.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.esotericsoftware.kryo/kryo@2.24.0?type=jar">
      <group>com.esotericsoftware.kryo</group>
      <name>kryo</name>
      <version>2.24.0</version>
      <description>Fast, efficient Java serialization</description>
      <hashes>
        <hash alg="MD5">6cf0fa5b5d4f6b8226fd4a4bfb7532b8</hash>
        <hash alg="SHA-1">0c6b206e80cfd97e66a1364003724491c757b92f</hash>
        <hash alg="SHA-256">7e56b32c635058f9aa2820f88919ab702d029cbcd15285da9992e36cc0ae52f2</hash>
        <hash alg="SHA-512">a4c6ce768528a03c219cc6a41b22293f78e433c849c90391b64dda3f2376fd79951a89c5f4e6701bcbcb6eee9abffe2390cfb12dba3b885e4a3d411a26b78f40</hash>
        <hash alg="SHA-384">678ad1b7f4d99910b8ff44a6c8f78ccae91f823161ce23de39077397352919b7257e1e6e0dea90900be973291ea19282</hash>
        <hash alg="SHA3-384">671fc6aa9905f8131482e1d0f3fe26126562b13777893d51a66d0f84fc6f2aa3f13947e488ffba8f09c31a2cc0e9758a</hash>
        <hash alg="SHA3-256">46e89d8f12cbead0fe29ad707d5dba96e880dacce2a6b374ac4bf1ced9f36a79</hash>
        <hash alg="SHA3-512">c7cde437eef8343eccd4c5ecb8de5683529e3d4d8262e8cd1f7b7d0df9c632253b979737fd1b486314ec2728aee3a3782dee5d2032621485db4aa3b2a8262741</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.esotericsoftware.kryo/kryo@2.24.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/EsotericSoftware/kryo</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/EsotericSoftware/kryo</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.esotericsoftware.minlog/minlog@1.2?type=jar">
      <group>com.esotericsoftware.minlog</group>
      <name>minlog</name>
      <version>1.2</version>
      <description>Minimal overhead Java logging</description>
      <hashes>
        <hash alg="MD5">f7cfbdf63b67df0bbfa4c7cb260885bc</hash>
        <hash alg="SHA-1">59bfcd171d82f9981a5e242b9e840191f650e209</hash>
        <hash alg="SHA-256">a678cb1aa8f5d03d901c992c75741841d98a9bc3d55dad02e84d65315c4e60f2</hash>
        <hash alg="SHA-512">7b4082766ad740d86708783f3b08780ed72dd18062aa9ba422c4b9016b332d2334ae511f50ef7d89e4eedbdac5cebc51ab6ddaf4d1eea857a3250eb5962f0d08</hash>
        <hash alg="SHA-384">932a282a9c06864001f8212199e4be05543609adbd985c5f4517ee6eba734acd3fd8812213bc0c98af264637cbf9c78d</hash>
        <hash alg="SHA3-384">f36e9f494611c85f59febfef9ce93fc68f1f17db881400456204c1f099e623e334d2f10b41018392877c8af13de7f59a</hash>
        <hash alg="SHA3-256">37422ef85dce86abd8b14b4c9f7ad77261d728a472126c8eca38f356c98da395</hash>
        <hash alg="SHA3-512">74ba47271899706a284e942482ff41649ffd93e57a29320732e57864c47f3f0431377130ca7afb5e64cc6b68d4e5a5cdfc38027966cda4b5e512e3ce02bd8a99</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.esotericsoftware.minlog/minlog@1.2?type=jar</purl>
      <externalReferences><reference type="website"><url>http://code.google.com/p/minlog/</url></reference><reference type="vcs"><url>http://minlog.googlecode.com/svn/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-collections/commons-collections@3.2.2?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>commons-collections</group>
      <name>commons-collections</name>
      <version>3.2.2</version>
      <description>Types that extend and augment the Java Collections Framework.</description>
      <hashes>
        <hash alg="MD5">f54a8510f834a1a57166970bfc982e94</hash>
        <hash alg="SHA-1">8ad72fe39fa8c91eaaf12aadb21e0c3661fe26d5</hash>
        <hash alg="SHA-256">eeeae917917144a68a741d4c0dff66aa5c5c5fd85593ff217bced3fc8ca783b8</hash>
        <hash alg="SHA-512">51c72f9aca7726f3c387095e66be85a6df97c74b00a25434b89188c1b8eab6e2b55accf7b9bd412430d22bd09324dec076e300b3d1fa39fccad471f0f2a3da16</hash>
        <hash alg="SHA-384">dd4e99b3314bd3c1a1ee26296615d9e44dadf7a1f8a7bbba44fb95121803d331e36d4cca4260e7609af78a47ba3e4073</hash>
        <hash alg="SHA3-384">8ce03528e4a6e95c44283b56eca87e6a6d3bf1363411a55b538f4f9110cf7470581ea5c73925e877ddab08dba0603f40</hash>
        <hash alg="SHA3-256">fd3d6134b5f07077b82ccf93d148dacf7c4ce5c971209510edd0e77e3e38c19e</hash>
        <hash alg="SHA3-512">c2a523916fb7c7d55a05d5e3d9e9b33000733f4b20a71be174e4e093e3f06ea78ad831edd1505527da7388105f8647efb7d5666ba852c90b4e2d5bb74256efbc</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/commons-collections/commons-collections@3.2.2?type=jar</purl>
      <externalReferences><reference type="website"><url>http://commons.apache.org/collections/</url></reference><reference type="build-system"><url>https://continuum-ci.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/COLLECTIONS</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>http://svn.apache.org/viewvc/commons/proper/collections/trunk</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-compress@1.21?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.commons</group>
      <name>commons-compress</name>
      <version>1.21</version>
      <description>Apache Commons Compress software defines an API for working with
compression and archive formats.  These include: bzip2, gzip, pack200,
lzma, xz, Snappy, traditional Unix Compress, DEFLATE, DEFLATE64, LZ4,
Brotli, Zstandard and ar, cpio, jar, tar, zip, dump, 7z, arj.</description>
      <hashes>
        <hash alg="MD5">2a713d10331bc4e13459a3dc0463f16f</hash>
        <hash alg="SHA-1">4ec95b60d4e86b5c95a0e919cb172a0af98011ef</hash>
        <hash alg="SHA-256">6aecfd5459728a595601cfa07258d131972ffc39b492eb48bdd596577a2f244a</hash>
        <hash alg="SHA-512">c92d9a12547aab475e057955ad815fdfe92ff44c78383fa5af54b089f1bff5525126ef6aef93334f3bfc22e2fef4ad0d969f69384e978a83a55f011a53e7e471</hash>
        <hash alg="SHA-384">da56f95d420cd7278cee646f4cd0e7a5ee12b6a2894efaec12f0ff7b56c3d43e5db736fe1ed66ff91118b16f2d64ebef</hash>
        <hash alg="SHA3-384">6d3dc0198dd523a49fa94e054841aece853577b5c3ea1029fc288ad9ff580ab1b65ea99ddbe58c42125054e8c43be461</hash>
        <hash alg="SHA3-256">37d4a014b50393793d35c70431bd8a1842c197d854c6f174dfa946b9edc2b841</hash>
        <hash alg="SHA3-512">61609f60746406a7cb1ef3f979488beca6674fde208c9025d3fdee115de4767e8a4a1ee38f5bf79ac0104505ddb3558f1feeba5e318d6545647120ac60db6b89</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.commons/commons-compress@1.21?type=jar</purl>
      <externalReferences><reference type="website"><url>https://commons.apache.org/proper/commons-compress/</url></reference><reference type="build-system"><url>https://builds.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/COMPRESS</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=commons-compress.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-shaded-guava@31.1-jre-17.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-shaded-guava</name>
      <version>31.1-jre-17.0</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <hashes>
        <hash alg="MD5">b8c5129f4164f8ee2086854bdb289690</hash>
        <hash alg="SHA-1">00fa393c1db1308f4fb920f010f79c4c774e2f39</hash>
        <hash alg="SHA-256">03442ae97c4ca34388568cbce0e67e9911b0137b2b3849dff7a550008d5a4336</hash>
        <hash alg="SHA-512">15bb65f24054768915fbc29a95dfa93307b0babc39a02a204ae65eff44f259357b471fef9967b864b7a78e07d266933ce8e3eda8a866fcc73643cc38bcc5653f</hash>
        <hash alg="SHA-384">c8e6f2630c0824bbd1902a25884f09c076efbbbe0265f5d3fb49370affcff81ee5dd8b7887ba4bf063915446b937117a</hash>
        <hash alg="SHA3-384">a2ffbdbcfb8be61c43891fa19275a765b71e6830b110fa9ab77d46ac35527d2be0943d895767a70591895916963048c6</hash>
        <hash alg="SHA3-256">5a73e8e370e9bb3d634495dade320f0b569f4ed307fc147cb8f3af547bb6b057</hash>
        <hash alg="SHA3-512">abd1618c0568eee546f5b32314085bef40f8de74ffa5e52f0aa7a5bed82713142af8a1bdaf79f18e2210b79f8c3592276c54b2356594d19d8f56185ec9a457d5</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-shaded-guava@31.1-jre-17.0?type=jar</purl>
      <externalReferences><reference type="website"><url>http://flink.apache.org/flink-shaded-guava</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink-shaded/flink-shaded-guava</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.confluent.flink/flink-rpc-core@1.18.1-cp1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>io.confluent.flink</group>
      <name>flink-rpc-core</name>
      <version>1.18.1-cp1</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">126e5643ab727d4c0dded21af2c6a1ca</hash>
        <hash alg="SHA-1">95dbfa5e22bbfc812cf4d043c0c6c5b987c02cad</hash>
        <hash alg="SHA-256">9e49484cc129cd26ff226a4a8aab07afd93cde48d7bdcae94777e844d19c08b6</hash>
        <hash alg="SHA-512">9b3527418a1a9e06cf112d4801a2570ca8c88d0c1c726a831f05e807209cf453c56877067e37b1fb354ea868b9793d9373da5182475e023f4c5848eb64e3ec6a</hash>
        <hash alg="SHA-384">e225e0de7fddd08e3765f7364440de2df6dd0d51d58df65f88f4e03fe3b8f47dc489bbdeea5632f79fcd651379c5269f</hash>
        <hash alg="SHA3-384">0532b81f5337f5d2c0a1dac41334739d9cea71d42bef96da9cd055b73109f5a5dfe0cb7108ed7038b30090bf941126c0</hash>
        <hash alg="SHA3-256">148a345436ae27cb44a929b9482886b6ca9692427dae4472c6e7811bb3581cac</hash>
        <hash alg="SHA3-512">3fe5a21bfe8c0c40034e4aeb24b759ffcc01360e47cdeb4d8060a7181b0aabb94b427ba75c05bfad721d6cc2356825390086c349d374321bd24ca7514934e444</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.confluent.flink/flink-rpc-core@1.18.1-cp1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://flink.apache.org/flink-rpc/flink-rpc-core</url></reference><reference type="distribution"><url>s3://cp-flink-staging-654654529379-us-west-2/maven-staging/129f20ae94cc020d633e29da819f45870d79b743</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink/flink-rpc/flink-rpc-core</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-shaded-netty@4.1.91.Final-17.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-shaded-netty</name>
      <version>4.1.91.Final-17.0</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">f3e6fd4f43c7a8647604df2a9b712dab</hash>
        <hash alg="SHA-1">81b6e0b28e0309946cb6d03792199fabfc0d9f09</hash>
        <hash alg="SHA-256">c4d370f1b2bda0b55686fdec840c8a047950b9448f26cd01f1594a3bf0fde75b</hash>
        <hash alg="SHA-512">7f2010cda152f6baecc2a0c9d79f8bb2b7eee8a88f80dd8ed5bf2f723885cf3f9f60e373db77bd591225f3037f33f4a7c08d05e807356899a6af818225b6aa4c</hash>
        <hash alg="SHA-384">d1d99aee334155d4c2dfddcc63dfd1b8ce9d7e4a67bba29be0b6b5a54a717ea95decb0fa300ef9e05b589d273952e22e</hash>
        <hash alg="SHA3-384">3a4bcd8d36c45ef4e8d2fd5d1774fe2ba0913851e6034ec770c3af962db9bd9ef084aa3e2a94b83d4c098059f37800a2</hash>
        <hash alg="SHA3-256">8a9bde99e2876e545b7fbc0400a9980381162b7a51596132cff27d49caff7e55</hash>
        <hash alg="SHA3-512">9109ab1275822d476cb5dcde1d329625be51953ef07af0b586cac9040221a1cd65bcb98f7aa02d7b07372676960697ccb04f751c31150ba9b6b8b0e5e5b6b4a9</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-shaded-netty@4.1.91.Final-17.0?type=jar</purl>
      <externalReferences><reference type="website"><url>http://flink.apache.org/flink-shaded-netty</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink-shaded/flink-shaded-netty</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.pekko/pekko-actor_2.12@1.0.1?type=jar">
      <publisher>Apache Software Foundation</publisher>
      <group>org.apache.pekko</group>
      <name>pekko-actor_2.12</name>
      <version>1.0.1</version>
      <description>Apache Pekko is a toolkit for building highly concurrent, distributed, and resilient message-driven applications for Java and Scala.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">2a77264e0f1d703e3b6a8cd432428096</hash>
        <hash alg="SHA-1">a42ea87e0a149ca296940839fa89ef964f6b7d8a</hash>
        <hash alg="SHA-256">c2f6323f5a6588b2ce21fda7132c790afca70df40e7bbdd7c0664f98676d0ef2</hash>
        <hash alg="SHA-512">0b0de3e531faf0ec3bb3ba27302f59e3f9e437d02f78db0a0fbb3d053bc145ac9fe11483f8a9b7827be82708e83ddc47cfed3277610abb8cc465a1973d563a4d</hash>
        <hash alg="SHA-384">fe8fc524aeb170ca21a3c4e03f2d0f8bfd195529117f0261bcea1566bad4339e29a48d0d5832796efe4013a586fd845f</hash>
        <hash alg="SHA3-384">8950e9eee30bcaa2f17368b650a8f145486c2928d061dea743ea40edaa570c65453b9a2c7957505774a7debdb4a0e394</hash>
        <hash alg="SHA3-256">4aea14c7fba8b002e8a3983e806be55b5752c609efa2962ff1b0609fe13c2e33</hash>
        <hash alg="SHA3-512">41359ee7df28ae959fa8edf40c4170ca8a46da1c6d43173519d95d53a0b78e33ec4006a55367215d994954ce041e1f70e9b9fe6c43aa8a95ab9ada68b1f079da</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.pekko/pekko-actor_2.12@1.0.1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://pekko.apache.org/</url></reference><reference type="vcs"><url>https://github.com/apache/incubator-pekko</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.scala-lang/scala-library@2.12.16?type=jar">
      <publisher>LAMP/EPFL</publisher>
      <group>org.scala-lang</group>
      <name>scala-library</name>
      <version>2.12.16</version>
      <description>Standard library for the Scala Programming Language</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">71aa1c4f22118738c9f5d01cf8253fab</hash>
        <hash alg="SHA-1">2b154d8ce179db26cbf3a3a36a996c0ea511a8e0</hash>
        <hash alg="SHA-256">55d371aa1568bb00a6ecd3f18946692be61cb975f6cb6d717d884bb62a68c159</hash>
        <hash alg="SHA-512">0d5c583879ba8343b8d9e0eab4ca037ba824a0f2521d0d714354f1e6097bb32fcf4ad539300b6385fe44a3e2a0b6f8affc93f955335060544c05b3a419612e4a</hash>
        <hash alg="SHA-384">047836cf79ae3f745533eacedc717204710a68c4cc3d27c194cf5af66065ac0c29534da5a98b609ef4d0f744e5b054fb</hash>
        <hash alg="SHA3-384">e4e35eeee22fd9a55616ef252de169c7e3837b60e829da6628d92141211fb48d633b8cdf4234f1643ad79e9042ddda25</hash>
        <hash alg="SHA3-256">1bd01839898ab017ff303f8bcdc08a9bd218fc3a24c30c2c21d85c12b8940511</hash>
        <hash alg="SHA3-512">aebe6d811039cc528847275eddbb7de008cac2ee8a82db88ae890eb0eba9d9bdaff3669de49e84659c797a975e784368c878083029ed203e66e61308907d0aa2</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.scala-lang/scala-library@2.12.16?type=jar</purl>
      <externalReferences><reference type="website"><url>https://www.scala-lang.org/</url></reference><reference type="issue-tracker"><url>https://github.com/scala/bug/issues</url></reference><reference type="vcs"><url>https://github.com/scala/scala</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.scala-lang.modules/scala-java8-compat_2.12@1.0.2?type=jar">
      <publisher>org.scala-lang.modules</publisher>
      <group>org.scala-lang.modules</group>
      <name>scala-java8-compat_2.12</name>
      <version>1.0.2</version>
      <description>scala-java8-compat</description>
      <hashes>
        <hash alg="MD5">1db8348e9863e71cb67bbb5779246150</hash>
        <hash alg="SHA-1">9aad6f5c7a5e9bba752f107b95f17071fb2651ec</hash>
        <hash alg="SHA-256">2f509b96ec69c130e6d062d6a6a25e293d23b1b411129480295999cc15d3febf</hash>
        <hash alg="SHA-512">7c5401f5865833426366e52f175fcf1de9d1da503d31347453e88cb2f71262353faad579ccfaaeb0d9ee41576c1f8d8fcd834bb04461311ef5bb4e7836909336</hash>
        <hash alg="SHA-384">6980e3bc6fb8f7754503ad60efa4b28be60b9f8b6b31b29ac706c3b736853c75a7b2649a06abc023ab029598499027d5</hash>
        <hash alg="SHA3-384">9d51baf44475d77a03e341d8873980baec6ced9765f0b6ffc5013f50ac61ee136493bfbddc33dd218fce794199d4de77</hash>
        <hash alg="SHA3-256">b75ae821813ea58cc7bb6849e3c0a0c03a39d97846f07af89132499b6d618c1e</hash>
        <hash alg="SHA3-512">8f6ca4355311b008f18eeec6ecd40c617db1b1b25e284c7b5ef90eb4727393563e6eb757551b174e2317ad96b1dc72cbd37dca1c8d52b678e7be67c5a4f73f4d</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.scala-lang.modules/scala-java8-compat_2.12@1.0.2?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.scala-lang.org/</url></reference><reference type="issue-tracker"><url>https://github.com/scala/scala-java8-compat/issues</url></reference><reference type="vcs"><url>https://github.com/scala/scala-java8-compat</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.typesafe/config@1.4.2?type=jar">
      <publisher>com.typesafe</publisher>
      <group>com.typesafe</group>
      <name>config</name>
      <version>1.4.2</version>
      <description>configuration library for JVM languages using HOCON files</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">bac1bde09507bbd53e4e8a6a270488b7</hash>
        <hash alg="SHA-1">4c40a633e7994cfb0354244efb6d03fcb11c3ecf</hash>
        <hash alg="SHA-256">0076c249b4387d8369146528fd5dacb3efba098dc02ecf9ac81debdfc2e12fd5</hash>
        <hash alg="SHA-512">830a85093ab23a7c147974e781e2e6847c8fae043bdb5135149906d96f15c8de24f878d37b41c45c0a41a66a2af08b7c26c69daa224f90eb6960cb6b65457be7</hash>
        <hash alg="SHA-384">3fde4d51dc42b0014d64a39b19bd79ed53cb4ee958488d87298f332e223fcada08cb95656526273331aa25a2da51e034</hash>
        <hash alg="SHA3-384">b1cbeba850eba05c5bbc95b3e5a13497a4b94eb5c91eac10305b404c50c9f2bba19c841c1db0ac23404c77098abf95fa</hash>
        <hash alg="SHA3-256">baf6f2a098798bc61304df459fca71f47aa71654869fb0f3c72c67f32b91d40e</hash>
        <hash alg="SHA3-512">ab5bb68d2515d8f305aa678cc6577589c35e79c79c10cd3c6c36c0488a4a46fb653448e64ff8cb69b956dfe3e7d75ad6b2e0fdcd8c29a6c35f69d33252d6bb96</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/com.typesafe/config@1.4.2?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/lightbend/config</url></reference><reference type="vcs"><url>https://github.com/lightbend/config</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.pekko/pekko-remote_2.12@1.0.1?type=jar">
      <publisher>Apache Software Foundation</publisher>
      <group>org.apache.pekko</group>
      <name>pekko-remote_2.12</name>
      <version>1.0.1</version>
      <description>Apache Pekko is a toolkit for building highly concurrent, distributed, and resilient message-driven applications for Java and Scala.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">677e95155281012bc2e188d4b5152f8a</hash>
        <hash alg="SHA-1">7dc9aace0b5ba5b8fbbcb1625f4a400046adde1e</hash>
        <hash alg="SHA-256">d2a980d35507a00c13de2ef47a5427f115598eb51763a6530908a3c351af6fdc</hash>
        <hash alg="SHA-512">316e5366cb654e76afc054fc48d18b19784fa1e671e3cd455900aff3ac923867e85e6057755430d8b3b11ef7905b6d4b2f5c1fccb8eea2cee7ab2cb27005ad75</hash>
        <hash alg="SHA-384">13efe0bbd29515da555364ef5955522b69f28b565cf864370b1c24e6357daae6b0afcd7a99c5c2531cc3c05d69648254</hash>
        <hash alg="SHA3-384">88679f77d6f89a8d9e92e3983a3b2bd0f4636033c96deb8657f25952774f153d0c8955e76b50e4755d5499408138d5e4</hash>
        <hash alg="SHA3-256">9d81672cef42b2b68155881d19c2c221735323e801c051798eaaa21c27e55b5f</hash>
        <hash alg="SHA3-512">ec3468d64e8434b534266cd65717a977fe8563d5bea47312c846bc290514dc612dd5877fbec257f9f5ae602294255df4d9b3475d6413ec8ee3d142f0b9c7184c</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.pekko/pekko-remote_2.12@1.0.1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://pekko.apache.org/</url></reference><reference type="vcs"><url>https://github.com/apache/incubator-pekko</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.pekko/pekko-stream_2.12@1.0.1?type=jar">
      <publisher>Apache Software Foundation</publisher>
      <group>org.apache.pekko</group>
      <name>pekko-stream_2.12</name>
      <version>1.0.1</version>
      <description>Apache Pekko is a toolkit for building highly concurrent, distributed, and resilient message-driven applications for Java and Scala.</description>
      <hashes>
        <hash alg="MD5">f13aef5d534319da9351cc493e70c6c9</hash>
        <hash alg="SHA-1">000af1a6473eb50df0084d50aaff58eb51518909</hash>
        <hash alg="SHA-256">81be7beccd1db1e17c3f561e23e92bce2c5e87f1769bc20af544628d0772745b</hash>
        <hash alg="SHA-512">407460bb8eb2f5d9bbaa093391cbe340eb2fcd1ab2acd0e9d49f27c6a3afa699f07306c62c2cec0672e5a255a660b7b2bf59f22792b690da59c09f23e8477c9f</hash>
        <hash alg="SHA-384">fce8e4287afa358a8200181078e8ab56aa47b7675c871798b9eb314b7d8c9613d79da925dee0fe9789b8704361f4de29</hash>
        <hash alg="SHA3-384">15687ff67757e1257a437917a7ec0bfc5aed3bc0d7eea61fc1b54f21fb9c9cd37f4815478ba91d0ad5ab63dace287653</hash>
        <hash alg="SHA3-256">d6103df8321a11f66839a481870e1d9be0070feeede7f851f558febb6b9cf0bc</hash>
        <hash alg="SHA3-512">5ddfc0ad3e88b9edc6cd3416330fcfc22115ed378c33887e6f1db62747315ee158445e95d1aa66699128e025949cfcd4f2f183292421dcdcf38d249c31de15cf</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.pekko/pekko-stream_2.12@1.0.1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://pekko.apache.org/</url></reference><reference type="vcs"><url>https://github.com/apache/incubator-pekko</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.pekko/pekko-protobuf-v3_2.12@1.0.1?type=jar">
      <publisher>Apache Software Foundation</publisher>
      <group>org.apache.pekko</group>
      <name>pekko-protobuf-v3_2.12</name>
      <version>1.0.1</version>
      <description>Apache Pekko Protobuf V3 is a shaded version of the protobuf runtime. Original POM: https://github.com/protocolbuffers/protobuf/blob/v3.9.0/java/pom.xml</description>
      <hashes>
        <hash alg="MD5">124ca54d2cc3618c6b876d6204800ea9</hash>
        <hash alg="SHA-1">5af2e7d26e7023d6bddab087031ec694c2362934</hash>
        <hash alg="SHA-256">b70072e224752b65cca4a8138ebcdbc473408653059bd718d1b5e7d3518e3292</hash>
        <hash alg="SHA-512">dfdb810cdfb7931deabd251cfcf261630ebbfa1127caffc23a1eab57ac5a9b58e1628eb3beeeb4607cc55ca251a54db8eb21e561d7d9505d79ad1778401a6fd6</hash>
        <hash alg="SHA-384">047fd4e9488a1bad77a9f07d395bcfc185e63f8b1faad3c234a1da235c47c72c1e135b077e8a6a03d22f53107a28c43c</hash>
        <hash alg="SHA3-384">259d124375b197f255a5550bcd036c88bbd6edef53218b622d91f7479953ed2bb50766b0867c973cfc5e9ac9981664a8</hash>
        <hash alg="SHA3-256">7e45bdd830b06def16e8ecaee66157bfd55b52e0c1474d54c804ede0fbcbf70b</hash>
        <hash alg="SHA3-512">5e3d559fb0c453bc396d169c04de8db1f06f18047ea8a4afcb824096fb6d3f2c65f2e7efaa6ad57a4c825a899c32213e013979fe5e7fb2cf1700aa04369883bd</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.pekko/pekko-protobuf-v3_2.12@1.0.1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://pekko.apache.org/</url></reference><reference type="vcs"><url>https://github.com/apache/incubator-pekko</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.reactivestreams/reactive-streams@1.0.4?type=jar">
      <group>org.reactivestreams</group>
      <name>reactive-streams</name>
      <version>1.0.4</version>
      <description>A Protocol for Asynchronous Non-Blocking Data Sequence</description>
      <hashes>
        <hash alg="MD5">eda7978509c32d99166745cc144c99cd</hash>
        <hash alg="SHA-1">3864a1320d97d7b045f729a326e1e077661f31b7</hash>
        <hash alg="SHA-256">f75ca597789b3dac58f61857b9ac2e1034a68fa672db35055a8fb4509e325f28</hash>
        <hash alg="SHA-512">cdab6bd156f39106cd6bbfd47df1f4b0a89dc4aa28c68c31ef12a463193c688897e415f01b8d7f0d487b0e6b5bd2f19044bf8605704b024f26d6aa1f4f9a2471</hash>
        <hash alg="SHA-384">ce787a93e3993dca02d7ccb8a65b2922bc94bfaf5a521ffb5567300a9abc3c222ebbfffed28f5219934ceb3da5b3e9c8</hash>
        <hash alg="SHA3-384">68daf9498232897989ee91c1ad47c28796c028658cfe023c2907152cd64ac303a3bd961e5d33d952be7441bee7ff5f14</hash>
        <hash alg="SHA3-256">0c2165ea39330d7cccf05aa60067dc8562a15db7f23690c8d4fc71cd3e49fdd8</hash>
        <hash alg="SHA3-512">19c2d866a6c4d7c61ceb63d3b98324928eac880c8f23d84202c1145b4779438b1b275f1d20c74b06ecb0fbfe83baaecce3b4366ead0f7cc8b7b6916a8910c944</hash>
      </hashes>
      <licenses>
        <license>
          <id>MIT-0</id>
          <url>https://github.com/aws/mit-0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.reactivestreams/reactive-streams@1.0.4?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.reactive-streams.org/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.typesafe/ssl-config-core_2.12@0.6.1?type=jar">
      <publisher>Lightbend</publisher>
      <group>com.typesafe</group>
      <name>ssl-config-core_2.12</name>
      <version>0.6.1</version>
      <description>ssl-config-core</description>
      <hashes>
        <hash alg="MD5">9ea8d212550e22ac7fce3ecc11e4f5bf</hash>
        <hash alg="SHA-1">ae098ad2155d228e70b002ac3d6099214ad4aa9e</hash>
        <hash alg="SHA-256">629166482eddd1c6e3d1af4d8cf5463067878426a221383accb4dca1fa33ec2e</hash>
        <hash alg="SHA-512">90294f0ea7a1f191cfcb5b7661b69663e57dd8c4a41f9bbd7a54883432a907828af65ed512fc2628adfbb11f8b2a10c2106be1de235ad6b3a479b54282b5c82a</hash>
        <hash alg="SHA-384">83aaf9924f33386a80e3d0429a4968f5de7da18eeab5fd0a583da11e141b6381c6a28c6f6af6ba9475b6c3a707361b6f</hash>
        <hash alg="SHA3-384">b4d3b41090e5352d15c77be20dfc31045ae6a8fb51565efb13d80bd90f1586c7c43f434200ac3d1cdddb04c5fe3b1f0a</hash>
        <hash alg="SHA3-256">d3867c0d0b0d75c77d77fb29a4d8fa2cd6f1aa8a9ce529ba28fd9b3c566b6b0c</hash>
        <hash alg="SHA3-512">b08ac63f435976791f82338b5e8035979d759dce6d299babe85a5966e4293f68cb1254bd5667e59529197be1bc474b260f2f77db229a6c02b5aab7538ee94aca</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/com.typesafe/ssl-config-core_2.12@0.6.1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/lightbend/ssl-config</url></reference><reference type="vcs"><url>https://github.com/lightbend/ssl-config</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.pekko/pekko-pki_2.12@1.0.1?type=jar">
      <publisher>Apache Software Foundation</publisher>
      <group>org.apache.pekko</group>
      <name>pekko-pki_2.12</name>
      <version>1.0.1</version>
      <description>Apache Pekko is a toolkit for building highly concurrent, distributed, and resilient message-driven applications for Java and Scala.</description>
      <hashes>
        <hash alg="MD5">b10e7c57f19e2625d34703c185ca5cae</hash>
        <hash alg="SHA-1">05d6bd372460e85f4a7b96836a2e650f2431feec</hash>
        <hash alg="SHA-256">2a24d7568174798e447e2d4250f653483ca3a852877bfab3fbcee26adecd2594</hash>
        <hash alg="SHA-512">93c59bc7fe3c697b04566209f4c63974a5de5b6ea4c5619ba14f4d5dc0a8b2d264507b4e37b27bdda9b7295921190ede61324ca707236732d0bd3a6a93f0e04e</hash>
        <hash alg="SHA-384">25a182e804dc27eccc847918691141800b1ae8aa6adcf645cd8b8be301d1b92386593a2ae2bc5bebf851f7d2a68c9330</hash>
        <hash alg="SHA3-384">fbac7d837068cd8fa15ddc1594e84c470e8f16d9eef051c179740794b7c2923172514260b0cf954997d8284d41649c5f</hash>
        <hash alg="SHA3-256">d204c192ef616a1be2b5045074ec765aa91133385da5e39e80c8c4d8c84e148d</hash>
        <hash alg="SHA3-512">5e07c4b72dbc9c7c516d6bdc1c9e308c610ccaedfbfd9fa1c8654742d314099277034866c5e069cdd5629e66d6a17d36b14cb14fc62ebe55a2a0c5b854e346bc</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.pekko/pekko-pki_2.12@1.0.1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://pekko.apache.org/</url></reference><reference type="vcs"><url>https://github.com/apache/incubator-pekko</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.hierynomus/asn-one@0.5.0?type=jar">
      <group>com.hierynomus</group>
      <name>asn-one</name>
      <version>0.5.0</version>
      <description>ASN.1 serialization and parsing library</description>
      <hashes>
        <hash alg="MD5">6f6e591f25c041b0544d7a0b6916b52c</hash>
        <hash alg="SHA-1">0d107d6c57c0215ae1730b4b6cae21174391b45a</hash>
        <hash alg="SHA-256">6498a4b122c6d78207a63225407f971b8174be229c0221faf3975720cd357c35</hash>
        <hash alg="SHA-512">da00b7aa7357b313d87345d3f6d463ed043921bc6a4333b1853d31a32edcb62fedc5b1758f5a801a7d9624e2c91663835bc41a623b43024168f673aa217e6958</hash>
        <hash alg="SHA-384">3d840841c3b1804930f8c2679755806c6fde9e93dbc2d2addaa8044a3e73d05d414633f4baf6b11fc15f1727257aa208</hash>
        <hash alg="SHA3-384">c8e75fa38c1186da0038a54aa4ec4ace129920f47949fe9b80328375406b34877bf342a5351008f5f7121d713361ca85</hash>
        <hash alg="SHA3-256">068cfdb39dd7cef500f9e766a864b79d11daf020389c27dd4890862b330ff984</hash>
        <hash alg="SHA3-512">3da7736448a015c65d82ab78d3ae28e69e554e915a0f3855bd34f537de18de067d898fb79dfb171a811eb102acbc6895823bc45db79c5b549eac82e6e6dcbd31</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/com.hierynomus/asn-one@0.5.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://gitlab.com/hierynomus/asn-one</url></reference><reference type="issue-tracker"><url>https://gitlab.com/hierynomus/asn-one/issues</url></reference><reference type="vcs"><url>https://gitlab.com/hierynomus/asn-one</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.agrona/agrona@1.15.1?type=jar">
      <group>org.agrona</group>
      <name>agrona</name>
      <version>1.15.1</version>
      <description>High performance primitives and utility library.</description>
      <hashes>
        <hash alg="MD5">99037da5723029d211798f78313a1921</hash>
        <hash alg="SHA-1">3572a97a4579b316965206ea429bd611e4c451a1</hash>
        <hash alg="SHA-256">f4ec7bbab40cf5055377924c077cd8743ac91eb923c4a531492cdb779d94a2b1</hash>
        <hash alg="SHA-512">40dd9dfa23412b7608b43064de8f666f9f353681e788815b309c08d01d6a3a989611a624c80ad61753ae774ad2bf374000537c41727171013c6ff2fb9939abce</hash>
        <hash alg="SHA-384">716996d2f5c917f06403da29c3405a951d1281c147f52969a1b72604ca5fe6fa81f5c65c41bb6c9bbe868c0028a153fa</hash>
        <hash alg="SHA3-384">a27d14aed2748123e9ef84fd84c591d45279008afe1bedbf4ddbf422164330901785b933f8e8d1e65fd63ac49a138a60</hash>
        <hash alg="SHA3-256">323650758de0e4b7b86016ccaa151470ea8a5347c31d1092dfa93c25f455cc90</hash>
        <hash alg="SHA3-512">2a13169f045cac49c00696410d449d3ab6a5dc3ef670798192e9a3d3d755bd8d3992d7d29661461c91d40ee007fd7e5ebc03b12bff87eed4840e89464750d417</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.agrona/agrona@1.15.1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/real-logic/agrona</url></reference><reference type="vcs"><url>https://github.com/real-logic/agrona.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.pekko/pekko-slf4j_2.12@1.0.1?type=jar">
      <publisher>Apache Software Foundation</publisher>
      <group>org.apache.pekko</group>
      <name>pekko-slf4j_2.12</name>
      <version>1.0.1</version>
      <description>Apache Pekko is a toolkit for building highly concurrent, distributed, and resilient message-driven applications for Java and Scala.</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">638c2f356f7093e9fe44db733db49097</hash>
        <hash alg="SHA-1">573851276a4fe0bf41c3ddf2e0471960faa15bee</hash>
        <hash alg="SHA-256">732045e4400dfd647f3d907ce564c318ee9c2915a883b518a25cf03f5cf2b5b2</hash>
        <hash alg="SHA-512">de55571590d40ed938b8c4e6dc2e9b9d9cfadb62dc9579efbdcb3a99973948250678b080b22015ddee9383a916b7d5667e36088bcf9b97664e697837875873ac</hash>
        <hash alg="SHA-384">8c8c4ec67f1eac80a16d637c9eb9d80f6383dd932ec226c57f78b6c849d62e1c1da748943f792990f6949c483c91ccd2</hash>
        <hash alg="SHA3-384">f239b52d7c0e88b28a076dde4a2c40481ae7ba2203004d0f4196402c8a4a4aacc82f1261cebb87d3611dfd334d04492c</hash>
        <hash alg="SHA3-256">c824c10cd98926540c3e841263572691776f5722cd94a2a338992cfa1829cd50</hash>
        <hash alg="SHA3-512">6cfbb268ff2c700fcee9b490b86908a6c9281d5f7ad3fe41f6d17fbeddc593179392336eff05a8b07b2f134d2e5e2a6da9937fdc9a1350598f98440c8f6d5411</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.pekko/pekko-slf4j_2.12@1.0.1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://pekko.apache.org/</url></reference><reference type="vcs"><url>https://github.com/apache/incubator-pekko</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.netty/netty@3.10.6.Final?type=jar">
      <publisher>The Netty Project</publisher>
      <group>io.netty</group>
      <name>netty</name>
      <version>3.10.6.Final</version>
      <description>The Netty project is an effort to provide an asynchronous event-driven
    network application framework and tools for rapid development of
    maintainable high performance and high scalability protocol servers and
    clients.  In other words, Netty is a NIO client server framework which
    enables quick and easy development of network applications such as protocol
    servers and clients. It greatly simplifies and streamlines network
    programming such as TCP and UDP socket server.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">e9cdf01138257f48d796fb2cf67af53e</hash>
        <hash alg="SHA-1">18ed04a0e502896552854926e908509db2987a00</hash>
        <hash alg="SHA-256">8768a50fbe3d93a88d8e6000ea5d68e30f50dc915b3764c3c5870f70c4fb3b49</hash>
        <hash alg="SHA-512">37cdb98e11b42006fbb26a1c6871261d8e8cb3254183116a550d4971171f576417392395fa0168c68751078148d177af9374ee0f542af527f57531773c62cbc5</hash>
        <hash alg="SHA-384">7c445aae5d4dd35c2fc8e236589f5711496a4a7ca2a8a4eb47f9359d39db7789f20b0c67f1c28bacf75c2680ba7cbc1e</hash>
        <hash alg="SHA3-384">65e735913d97979be0c9364ca9c29501aeef15d582ab6bc523f3400ca38350b82b03177c85d918a20bb455711279299d</hash>
        <hash alg="SHA3-256">d15c13c07be1612c9ca6d8664be842bd67b48f91ddfb6e3a585f51c2042a499f</hash>
        <hash alg="SHA3-512">c4a6f985c7e55831a047a26ceeb3b78e7d1207854ab81733ecc11ae2e8da7fb7e7c23008b4dc6bd64658f881c457ef9aecde037b57ad108fc7bd5a521cc1af6b</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.netty/netty@3.10.6.Final?type=jar</purl>
      <externalReferences><reference type="website"><url>http://netty.io/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/netty/netty</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar">
      <publisher>QOS.ch</publisher>
      <group>org.slf4j</group>
      <name>slf4j-api</name>
      <version>1.7.36</version>
      <description>The slf4j API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">872da51f5de7f3923da4de871d57fd85</hash>
        <hash alg="SHA-1">6c62681a2f655b49963a5983b8b0950a6120ae14</hash>
        <hash alg="SHA-256">d3ef575e3e4979678dc01bf1dcce51021493b4d11fb7f1be8ad982877c16a1c0</hash>
        <hash alg="SHA-512">f9b033fc019a44f98b16048da7e2b59edd4a6a527ba60e358f65ab88e0afae03a9340f1b3e8a543d49fa542290f499c5594259affa1ff3e6e7bf3b428d4c610b</hash>
        <hash alg="SHA-384">2b14ad035877087157e379d3277dcdcd79e58d6bdb147c47d29e377d75ce53ad42cafbf22f5fb7827c7e946ff4876b9a</hash>
        <hash alg="SHA3-384">3bc3110dafb8d5be16a39f3b2671a466463cd99eb39610c0e4719a7bf2d928f2ea213c734887c6926a07c4cca7769e4b</hash>
        <hash alg="SHA3-256">ba2608179fcf46e2291a90b9cbb4aa30d718e481f59c350cc21c73b88d826881</hash>
        <hash alg="SHA3-512">14c4edcd19702ef607d78826839d8a6d3a39157df54b89a801d3d3cbbe1307131a77671b041c761122730fb1387888c5ec2e46bdd80e1cb07f8f144676441824</hash>
      </hashes>
      <licenses>
        <license>
          <id>MIT</id>
          <url>https://opensource.org/licenses/MIT</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.slf4j.org</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/qos-ch/slf4j/slf4j-api</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar">
      <group>com.google.code.findbugs</group>
      <name>jsr305</name>
      <version>1.3.9</version>
      <description>JSR305 Annotations for Findbugs</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">1d5a772e400b04bb67a7ef4a0e0996d8</hash>
        <hash alg="SHA-1">40719ea6961c0cb6afaeb6a921eaa1f6afd4cfdf</hash>
        <hash alg="SHA-256">905721a0eea90a81534abb7ee6ef4ea2e5e645fa1def0a5cd88402df1b46c9ed</hash>
        <hash alg="SHA-512">06da282cfd8e30d9f8cf17702b8709172b00e22b75a627a1d85f8989615b8a1a401bc25d9aee7b14aed1d9b5df73bf2ea8d66f9c8468d9577c29f0ccfa2cc70a</hash>
        <hash alg="SHA-384">56e6b41ef62eb5edfed0203802cefae9c2df86388148e420bb0c687abb2b80e14d5c2a82d5b35dce4badaf148f94eada</hash>
        <hash alg="SHA3-384">58c3bf89fa1afa75c2c5078159fd28e27b2273d437f26aaaa7391310b6f0823f3cf476a24f5631c0881f3f7e946d99be</hash>
        <hash alg="SHA3-256">c333ea5faedfa78e0614a2620438d5724eab093df4e960918391b6a44c2915b0</hash>
        <hash alg="SHA3-512">67ec31448e156cc72dd036060b460bb2667a13b1cbe500b6b7eed3235b1994b44c39f440ebd07b21ec9595b166ad61121d4f6a132b5b313c558ab21b72599425</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar</purl>
      <externalReferences><reference type="website"><url>http://findbugs.sourceforge.net/</url></reference><reference type="vcs"><url>http://findbugs.googlecode.com/svn/trunk/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-shaded-force-shading@17.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-shaded-force-shading</name>
      <version>17.0</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">6890ff555c82f3bb156cf9c73bf09cf9</hash>
        <hash alg="SHA-1">345c153973a17fb8a98d368352e14893edcbd610</hash>
        <hash alg="SHA-256">dcc7dff160a40b74fa5db2805b2004153ffd0517968f3c7843a8ee43be82e710</hash>
        <hash alg="SHA-512">9de23513832248618b78e279c0e3900f5cafb7193254ef6818b4f0b6f3b70045dd9cc4fdd13caeeca8b70a44f38201ce055f07248cdf08930a20e1b7a73997ff</hash>
        <hash alg="SHA-384">063611872b4b1a1718e0472e32198bded0d74fa656e5c47a7b20038cd5ff70106e3109b60fe882880feea486e1ef83bf</hash>
        <hash alg="SHA3-384">26f9225d2c401391133dabc97340d1048504deaaae3c6b02ba20b83d4efe8c53a6d4f4e63a04e4317f9bce6b1a1ee013</hash>
        <hash alg="SHA3-256">aae3e6da763019cc2fd4919df572a3653b46aedaf60a3adb3d28bc7f94023523</hash>
        <hash alg="SHA3-512">e616e089fb70dc79503b6c235bd8d14c6e7c8e608c87bb4fcd02fe86d6ba27985bac4f144843af9fc7a7c495de7057320ccddea9f571c42bdcaa1c73966f265f</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-shaded-force-shading@17.0?type=jar</purl>
      <externalReferences><reference type="website"><url>http://flink.apache.org/flink-shaded-force-shading</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink-shaded/flink-shaded-force-shading</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.objenesis/objenesis@2.1?type=jar">
      <publisher>Joe Walnes, Henri Tremblay, Leonardo Mesquita</publisher>
      <group>org.objenesis</group>
      <name>objenesis</name>
      <version>2.1</version>
      <description>A library for instantiating Java objects</description>
      <hashes>
        <hash alg="MD5">32ccb1d20a42b5aaaceb90c9082a2efa</hash>
        <hash alg="SHA-1">87c0ea803b69252868d09308b4618f766f135a96</hash>
        <hash alg="SHA-256">c74330cc6b806c804fd37e74487b4fe5d7c2750c5e15fbc6efa13bdee1bdef80</hash>
        <hash alg="SHA-512">1dec9ee30812b8006e536a2749c5781ccdc4b446539efb6fa534f22e70562033876bf2eb22c6946d617695729bd65f0f65b984f15f05ac63db5bed215e74427c</hash>
        <hash alg="SHA-384">657b8a3b80a5475f198425396f7264301f9e0f3ad5dc336ef0c7b46874f5544861a8a2fd48cdb5f672e199a6935c19d1</hash>
        <hash alg="SHA3-384">e526937d722aad1857869b2d2a0ba5c88815609308c00b776b51614e501de5d93d54978f5bb9cf496bdcc28b1dbd5775</hash>
        <hash alg="SHA3-256">436cfbb9c208dd03c951708fa4ba6525e2a0b26a873d594a6fbe93ab49082c97</hash>
        <hash alg="SHA3-512">1e7ee9411df7cfbf0669c38e4ef029155dd718b91db1d182841c740caf8c1057ed273a77f8e32d724c48aaf96815a26ab099c776511ffc5ef351d70ebfa70344</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.objenesis/objenesis@2.1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://objenesis.org</url></reference><reference type="distribution"><url>http://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/easymock/easymock/objenesis</url></reference></externalReferences>
    </component>
  </components>
  <dependencies>
    <dependency ref="pkg:maven/io.confluent.flink/flink-rpc-akka@1.18.1-cp1?type=jar">
      <dependency ref="pkg:maven/io.confluent.flink/flink-core@1.18.1-cp1?type=jar"/>
      <dependency ref="pkg:maven/io.confluent.flink/flink-rpc-core@1.18.1-cp1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-netty@4.1.91.Final-17.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.pekko/pekko-actor_2.12@1.0.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.pekko/pekko-remote_2.12@1.0.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.pekko/pekko-slf4j_2.12@1.0.1?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty@3.10.6.Final?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-force-shading@17.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/io.confluent.flink/flink-core@1.18.1-cp1?type=jar">
      <dependency ref="pkg:maven/io.confluent.flink/flink-annotations@1.18.1-cp1?type=jar"/>
      <dependency ref="pkg:maven/io.confluent.flink/flink-metrics-core@1.18.1-cp1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-asm-9@9.5-17.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-jackson@2.14.2-17.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar"/>
      <dependency ref="pkg:maven/com.esotericsoftware.kryo/kryo@2.24.0?type=jar"/>
      <dependency ref="pkg:maven/commons-collections/commons-collections@3.2.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-compress@1.21?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-guava@31.1-jre-17.0?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/io.confluent.flink/flink-annotations@1.18.1-cp1?type=jar">
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"/>
    <dependency ref="pkg:maven/io.confluent.flink/flink-metrics-core@1.18.1-cp1?type=jar">
      <dependency ref="pkg:maven/io.confluent.flink/flink-annotations@1.18.1-cp1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.flink/flink-shaded-asm-9@9.5-17.0?type=jar"/>
    <dependency ref="pkg:maven/org.apache.flink/flink-shaded-jackson@2.14.2-17.0?type=jar"/>
    <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar"/>
    <dependency ref="pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar">
      <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.esotericsoftware.kryo/kryo@2.24.0?type=jar">
      <dependency ref="pkg:maven/com.esotericsoftware.minlog/minlog@1.2?type=jar"/>
      <dependency ref="pkg:maven/org.objenesis/objenesis@2.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.esotericsoftware.minlog/minlog@1.2?type=jar"/>
    <dependency ref="pkg:maven/org.objenesis/objenesis@2.1?type=jar"/>
    <dependency ref="pkg:maven/commons-collections/commons-collections@3.2.2?type=jar"/>
    <dependency ref="pkg:maven/org.apache.commons/commons-compress@1.21?type=jar"/>
    <dependency ref="pkg:maven/org.apache.flink/flink-shaded-guava@31.1-jre-17.0?type=jar"/>
    <dependency ref="pkg:maven/io.confluent.flink/flink-rpc-core@1.18.1-cp1?type=jar">
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.flink/flink-shaded-netty@4.1.91.Final-17.0?type=jar"/>
    <dependency ref="pkg:maven/org.apache.pekko/pekko-actor_2.12@1.0.1?type=jar">
      <dependency ref="pkg:maven/org.scala-lang/scala-library@2.12.16?type=jar"/>
      <dependency ref="pkg:maven/org.scala-lang.modules/scala-java8-compat_2.12@1.0.2?type=jar"/>
      <dependency ref="pkg:maven/com.typesafe/config@1.4.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.scala-lang/scala-library@2.12.16?type=jar"/>
    <dependency ref="pkg:maven/org.scala-lang.modules/scala-java8-compat_2.12@1.0.2?type=jar">
      <dependency ref="pkg:maven/org.scala-lang/scala-library@2.12.16?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.typesafe/config@1.4.2?type=jar"/>
    <dependency ref="pkg:maven/org.apache.pekko/pekko-remote_2.12@1.0.1?type=jar">
      <dependency ref="pkg:maven/org.scala-lang/scala-library@2.12.16?type=jar"/>
      <dependency ref="pkg:maven/org.apache.pekko/pekko-actor_2.12@1.0.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.pekko/pekko-stream_2.12@1.0.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.pekko/pekko-pki_2.12@1.0.1?type=jar"/>
      <dependency ref="pkg:maven/org.agrona/agrona@1.15.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.pekko/pekko-stream_2.12@1.0.1?type=jar">
      <dependency ref="pkg:maven/org.scala-lang/scala-library@2.12.16?type=jar"/>
      <dependency ref="pkg:maven/org.apache.pekko/pekko-actor_2.12@1.0.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.pekko/pekko-protobuf-v3_2.12@1.0.1?type=jar"/>
      <dependency ref="pkg:maven/org.reactivestreams/reactive-streams@1.0.4?type=jar"/>
      <dependency ref="pkg:maven/com.typesafe/ssl-config-core_2.12@0.6.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.pekko/pekko-protobuf-v3_2.12@1.0.1?type=jar"/>
    <dependency ref="pkg:maven/org.reactivestreams/reactive-streams@1.0.4?type=jar"/>
    <dependency ref="pkg:maven/com.typesafe/ssl-config-core_2.12@0.6.1?type=jar">
      <dependency ref="pkg:maven/org.scala-lang/scala-library@2.12.16?type=jar"/>
      <dependency ref="pkg:maven/com.typesafe/config@1.4.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.pekko/pekko-pki_2.12@1.0.1?type=jar">
      <dependency ref="pkg:maven/org.scala-lang/scala-library@2.12.16?type=jar"/>
      <dependency ref="pkg:maven/org.apache.pekko/pekko-actor_2.12@1.0.1?type=jar"/>
      <dependency ref="pkg:maven/com.hierynomus/asn-one@0.5.0?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.hierynomus/asn-one@0.5.0?type=jar"/>
    <dependency ref="pkg:maven/org.agrona/agrona@1.15.1?type=jar"/>
    <dependency ref="pkg:maven/org.apache.pekko/pekko-slf4j_2.12@1.0.1?type=jar">
      <dependency ref="pkg:maven/org.scala-lang/scala-library@2.12.16?type=jar"/>
      <dependency ref="pkg:maven/org.apache.pekko/pekko-actor_2.12@1.0.1?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/io.netty/netty@3.10.6.Final?type=jar"/>
    <dependency ref="pkg:maven/org.apache.flink/flink-shaded-force-shading@17.0?type=jar"/>
  </dependencies>
</bom>
