{
  "bomFormat" : "CycloneDX",
  "specVersion" : "1.4",
  "serialNumber" : "urn:uuid:10ea4774-561e-479d-9fdc-7b66b32288b9",
  "version" : 1,
  "metadata" : {
    "timestamp" : "2026-05-14T10:20:43Z",
    "tools" : [
      {
        "vendor" : "OWASP Foundation",
        "name" : "CycloneDX Maven plugin",
        "version" : "2.7.7",
        "hashes" : [
          {
            "alg" : "MD5",
            "content" : "436dfb24c63a322708e4a5143d8543af"
          },
          {
            "alg" : "SHA-1",
            "content" : "3ef2e8728dc9eff2f129c34057e46e9d2b10629a"
          },
          {
            "alg" : "SHA-256",
            "content" : "c185b79bf0f9264f43bc8c222c44db67bea275bb727e3327cf9aea6bf45292c9"
          },
          {
            "alg" : "SHA-512",
            "content" : "41488733e31e6c5315327dcc86187c2b9a6b96cd08f7e2157ce130688afde29c313fc6a73edb8a76333a930c78874aa2eac874448920030c0f7af0ac05e65ced"
          },
          {
            "alg" : "SHA-384",
            "content" : "f9462f86240fd9fc0942f34981e6d2371f252aa1a4e5e8c3c14e7f0f1a4e4de69ef972e51cf09a749afb6d97c13e67ed"
          },
          {
            "alg" : "SHA3-384",
            "content" : "c755af6239348bc7dd1e1e6b5f14f7cf7e1560d689b252d9610cd865fa4b419d0b8e26260731dfc5da2176b6e706b414"
          },
          {
            "alg" : "SHA3-256",
            "content" : "309aac91005470c9c834354ab918759e2ae7ec52fc1676002621a5bbdf3b7827"
          },
          {
            "alg" : "SHA3-512",
            "content" : "c634570dcf8302e61005e5fa91a9a0d9b81542f731967b3c9f6d3ef89e3b945bd36d7ab69e2ebad8124b9c05da504361c8b36a8ce528d844409eeb7df4eea6ce"
          }
        ]
      }
    ],
    "component" : {
      "publisher" : "The Apache Software Foundation",
      "group" : "io.confluent.flink",
      "name" : "flink-rpc-akka",
      "version" : "2.0.2-cp1",
      "description" : "Pekko-based RPC implementation. Pekko is the Apache fork of Akka. For compatibility/git reasons not all mentions of Akka have been replaced.",
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.confluent.flink/flink-rpc-akka@2.0.2-cp1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://flink.apache.org/flink-rpc/flink-rpc-akka"
        },
        {
          "type" : "distribution",
          "url" : "s3://cp-flink-staging-654654529379-us-west-2/maven-staging/9c4d461f467b12b5a4b0a51ef8641aa85a31fd0a"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink/flink-rpc/flink-rpc-akka"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.confluent.flink/flink-rpc-akka@2.0.2-cp1?type=jar"
    },
    "properties" : [
      {
        "name" : "maven.goal",
        "value" : "makeBom"
      },
      {
        "name" : "maven.scopes",
        "value" : "compile,provided,runtime,system"
      }
    ]
  },
  "components" : [
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "io.confluent.flink",
      "name" : "flink-core",
      "version" : "2.0.2-cp1",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "ca4559e196c32587f9271d0c121dcc52"
        },
        {
          "alg" : "SHA-1",
          "content" : "20fbd223b1740a011cb09e38b0027fe9fc497427"
        },
        {
          "alg" : "SHA-256",
          "content" : "82c9713a70f0b83016ce8491ff676c2051e9ed38119483369b99030a73178efc"
        },
        {
          "alg" : "SHA-512",
          "content" : "27d82398186ef5fd659f204d8ccca60724b19b91e6979147873cbff2a4f95e14d67bf48d549732c30e52194b262630e55221f0b763de15f2a4d1607d3b3dfcfe"
        },
        {
          "alg" : "SHA-384",
          "content" : "6a440428ced57bc0128cd6458730407ea4d069ad38a8f6bdfdc1aa069af15d7190ae0322e0aca9b531d3acbc3f1388ef"
        },
        {
          "alg" : "SHA3-384",
          "content" : "5bd4d8b450d1ede5538c6982e6ddb2c35c8b7d651a960918e6c1f954d42754d7cbe140a50f7a286bcade29402729f9bd"
        },
        {
          "alg" : "SHA3-256",
          "content" : "d23af8f76e2fe955ebaebe933b4b005b30bfad42a69bbc7f225c227478846961"
        },
        {
          "alg" : "SHA3-512",
          "content" : "d565be9dd0a5c32c1a7a28400ad1b09771720bdc957394d484d948ef2b1735340951ee918b48217a60177d2e709d28d42081f72d091a53453aef6164ff409810"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.confluent.flink/flink-core@2.0.2-cp1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://flink.apache.org/flink-core"
        },
        {
          "type" : "distribution",
          "url" : "s3://cp-flink-staging-654654529379-us-west-2/maven-staging/9c4d461f467b12b5a4b0a51ef8641aa85a31fd0a"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink/flink-core"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.confluent.flink/flink-core@2.0.2-cp1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "io.confluent.flink",
      "name" : "flink-core-api",
      "version" : "2.0.2-cp1",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "b47c389142d052e1fa3ddc0c9cad5816"
        },
        {
          "alg" : "SHA-1",
          "content" : "3d3fb97d0e6380d548b57cd281c2aea41e7f2401"
        },
        {
          "alg" : "SHA-256",
          "content" : "8c4a1d1a179467a63a6e777426ee6d31e558ef76187efc8518818afac95a51a1"
        },
        {
          "alg" : "SHA-512",
          "content" : "d01ca20b26f0d1a2631d619add3392bacda4ac9a476800e16c9445bd9b58b03d02e37880bfe44bbfa93351131ea63278f49007b3ffb6f9c6bed0f59b6f008d34"
        },
        {
          "alg" : "SHA-384",
          "content" : "c0139d27bce58b39524f316811bb36aaf1e8b3ee15186ff60b4a8989a8d2bbb5441d81193d61ca2595c21782a72eabf9"
        },
        {
          "alg" : "SHA3-384",
          "content" : "e10250d6761a4277756fc27d82cb61149452ad87b5e110bca116ca61a3582a3358be29cffdbb1bc982a83d39d8357d17"
        },
        {
          "alg" : "SHA3-256",
          "content" : "b518f33b89a0c3c660c08ab85c09e80697faeaa9fafb8c2f8d4051028da95621"
        },
        {
          "alg" : "SHA3-512",
          "content" : "ee73aa6fd4a72396cdd753376e3cd0dd73ef72f7db515279662beff54893bea45744f07cd881eacee6359cbebe24edfe9970a913d6dca850847ad580926b1486"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.confluent.flink/flink-core-api@2.0.2-cp1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://flink.apache.org/flink-core-api"
        },
        {
          "type" : "distribution",
          "url" : "s3://cp-flink-staging-654654529379-us-west-2/maven-staging/9c4d461f467b12b5a4b0a51ef8641aa85a31fd0a"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink/flink-core-api"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.confluent.flink/flink-core-api@2.0.2-cp1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "io.confluent.flink",
      "name" : "flink-metrics-core",
      "version" : "2.0.2-cp1",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "3b01f21e43bbc0e1e0700568356a2be5"
        },
        {
          "alg" : "SHA-1",
          "content" : "82476e17b8d7297a99e414014b3319a50ffc99eb"
        },
        {
          "alg" : "SHA-256",
          "content" : "98d1bd7e9cd1e6e3f7423b5234426f292ff2642ac547ce242fc1134f87a52859"
        },
        {
          "alg" : "SHA-512",
          "content" : "c5900711f35556d1223153b607ca6c006707302c14a69e59c0b790e79e0e4a59ba56184d9ebe76f3f79744f57f040e63236d23f5ad7745bb66c2ac83b999bb42"
        },
        {
          "alg" : "SHA-384",
          "content" : "9c68a5d50022c2343fa53319646d3cac3c4914126797c68409fb8213be54737b038545c42417dd4c9ced0cc6a4ab9e61"
        },
        {
          "alg" : "SHA3-384",
          "content" : "fa291eaa3be196a2f911e53da486ef045b6aa3fd5ca93e5e8f29f1562dbe8eeeebd6aebcdc3937453150805bcf13f5ec"
        },
        {
          "alg" : "SHA3-256",
          "content" : "d48bab775123f3e66ba7c5b65e1c26900e8bcb8b84942db9f9959689c32cb0ec"
        },
        {
          "alg" : "SHA3-512",
          "content" : "627dbffd6684ab573ea30d7b26d9558a1584f61ba1ad149dafc48552bcb4eb183db5f1121ade1bc98de8c0c261ee654d01118e18de4ba39f8040c595b1e151a6"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.confluent.flink/flink-metrics-core@2.0.2-cp1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://flink.apache.org/flink-metrics/flink-metrics-core"
        },
        {
          "type" : "distribution",
          "url" : "s3://cp-flink-staging-654654529379-us-west-2/maven-staging/9c4d461f467b12b5a4b0a51ef8641aa85a31fd0a"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink/flink-metrics/flink-metrics-core"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.confluent.flink/flink-metrics-core@2.0.2-cp1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "io.confluent.flink",
      "name" : "flink-annotations",
      "version" : "2.0.2-cp1",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "d3ba7eecc4278aee151bd9bf00ed97b4"
        },
        {
          "alg" : "SHA-1",
          "content" : "96ee68e2a9d4aaf03215014df9653e212588f5cc"
        },
        {
          "alg" : "SHA-256",
          "content" : "21e213f54a60a09e9f369d48f1df5c515bfde876a3098738d822d10c8e3280e8"
        },
        {
          "alg" : "SHA-512",
          "content" : "3214b3870e65a8dd684132d6fcd1b482791517bb12ca32782e2fdd52d8723312cbf4306ca080072e6472dcbb917dcefc91e32c78c2851b4e6531489ae6b1b260"
        },
        {
          "alg" : "SHA-384",
          "content" : "04be236704272cefdbd32c76236bd1bf6fc5ff0a62ff5e1816c2d41426350b16d1d19240a824b68a56ecdfd7e9cee720"
        },
        {
          "alg" : "SHA3-384",
          "content" : "1e1a5abee18679b28bab8219720edd75f6f3091029a29d144e56ea782556a05022679d9a4bbaef620c23b0c604c0b432"
        },
        {
          "alg" : "SHA3-256",
          "content" : "d2133298d8bc41a9c9c86756359d331ca7a90900f17621fc8a4f9ad5db9db495"
        },
        {
          "alg" : "SHA3-512",
          "content" : "55180bb83f5e8957e09e7d41e7606c34a9b5e54cd8c1952ec800b460cfdf411145a079935e291ab1fde892554e9510e4d4a7d284f6c5a262f294c771c3e10193"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.confluent.flink/flink-annotations@2.0.2-cp1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://flink.apache.org/flink-annotations"
        },
        {
          "type" : "distribution",
          "url" : "s3://cp-flink-staging-654654529379-us-west-2/maven-staging/9c4d461f467b12b5a4b0a51ef8641aa85a31fd0a"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink/flink-annotations"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.confluent.flink/flink-annotations@2.0.2-cp1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.flink",
      "name" : "flink-shaded-asm-9",
      "version" : "9.6-19.0",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "5daaece634972b44bf938ba985a39b12"
        },
        {
          "alg" : "SHA-1",
          "content" : "0f241fed933bfce1983394a8f3047a7be0d7ea5c"
        },
        {
          "alg" : "SHA-256",
          "content" : "88dd78a114ebd8371faef106ecc0df697483c4824d591d0ab5de6230523fcbe6"
        },
        {
          "alg" : "SHA-512",
          "content" : "b9a81a66060982de3d78ab907c484bac01892874312e28bc5e7bd35d28a4665410cdfa2aa1c22761b27eeade4a77485634c0cdd989836c27075950527fbf28c5"
        },
        {
          "alg" : "SHA-384",
          "content" : "e418d5091c0ec6707c5b63ac0cf8dfe92798819dee6875fde6bf6f8f20488b9a5620b4ae311d631d7bad346113be8fed"
        },
        {
          "alg" : "SHA3-384",
          "content" : "773c9b058a4cbe56a5dce139b7820063b22acf8596a7f1abeed19a5c9f2d74e958c18b5de1733e7ecdb189ef8517af19"
        },
        {
          "alg" : "SHA3-256",
          "content" : "4018dda18d4a7e6f0dafef4ed3efc8beed6ad86de8f5db2efe6790340b4de35d"
        },
        {
          "alg" : "SHA3-512",
          "content" : "2f5cf1620ac561e63bfc8ac0f26e7f7057031549d6de2acf3eb588d20a224e9ee7123a97bc899838c3853974e9f63659e3b763faa87ddc2b8cfa2562ab2a68fb"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.flink/flink-shaded-asm-9@9.6-19.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://flink.apache.org/flink-shaded-asm-9"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink-shaded/flink-shaded-asm-9"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.flink/flink-shaded-asm-9@9.6-19.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.flink",
      "name" : "flink-shaded-jackson",
      "version" : "2.15.3-19.0",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "3fa7a83ad139b1b89c8a81a1a67432f1"
        },
        {
          "alg" : "SHA-1",
          "content" : "643f98fb0f7485c00519b070b9d42ba1965f2f70"
        },
        {
          "alg" : "SHA-256",
          "content" : "c77feeffce308d5e5de7b40cda5e1ff6ab083bc677a6471ecf177053a13613d8"
        },
        {
          "alg" : "SHA-512",
          "content" : "e3125ad07bbbefa0e1fdbdeb8f938b17c6ba0b2bb6d9e687a1fb4cc3567d99e4f8668fa816602dc1a5decf0f79bd8254a8c5cedbeda00b486b285d1d39a90b4f"
        },
        {
          "alg" : "SHA-384",
          "content" : "5034bfc31e7e029f0d6306e3e40778ef9fd896dbc8d996feb5ab380ac2de5663c110c4b4453b60bdc5c7cbccd583392e"
        },
        {
          "alg" : "SHA3-384",
          "content" : "71eb99dc309c1b4f5dacc9974283fd712d154e0341400710533a82c9beaa36867eeeaf2c8a9fdbe38adc1e03f4a34380"
        },
        {
          "alg" : "SHA3-256",
          "content" : "85cf25001563a0e8ef51f88369ef40c204abc559c94a1bf410a78cab87eb7422"
        },
        {
          "alg" : "SHA3-512",
          "content" : "9735f91a654019f0f2691a2e0c1b63b005c2dd7743eb544b7dc68b48998e054d71f9bbc61d054bb20e29458e8b361a60cb8032ab22109fb5748750c42dc7f00f"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.flink/flink-shaded-jackson@2.15.3-19.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://flink.apache.org/flink-shaded-jackson-parent/flink-shaded-jackson"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink-shaded/flink-shaded-jackson-parent/flink-shaded-jackson"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.flink/flink-shaded-jackson@2.15.3-19.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-lang3",
      "version" : "3.18.0",
      "description" : "Apache Commons Lang, a package of Java utility classes for the classes that are in java.lang's hierarchy, or are considered to be so standard as to justify existence in java.lang. The code is tested using the latest revision of the JDK for supported LTS releases: 8, 11, 17 and 21 currently. See https://github.com/apache/commons-lang/blob/master/.github/workflows/maven.yml Please ensure your build environment is up-to-date and kindly report any build issues.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "48b9886957920a4cdb602780ca345087"
        },
        {
          "alg" : "SHA-1",
          "content" : "fb14946f0e39748a6571de0635acbe44e7885491"
        },
        {
          "alg" : "SHA-256",
          "content" : "4eeeae8d20c078abb64b015ec158add383ac581571cddc45c68f0c9ae0230720"
        },
        {
          "alg" : "SHA-512",
          "content" : "c2c9d497fc1be411050f4011b2407764b78aa098eb42925af8a197eabdbc25b507f09fb898805e9bed4815f35236a508ee5b096e36f363df4d407232d50fc832"
        },
        {
          "alg" : "SHA-384",
          "content" : "4fb3f101106e4ce3666d5c15d276ba86f7683a0ef35f0384edfcd579ea454275edbb7400795d265ec3a38e39997e79b8"
        },
        {
          "alg" : "SHA3-384",
          "content" : "aada7e3612cf3f6190a19fa7c3db74df1e13ec56b300be9bb4317d261d5877c84ab59ba9a09168becdbd82cd41961395"
        },
        {
          "alg" : "SHA3-256",
          "content" : "306d286d0bd7549c203cc802fd755d354c4f7926fa023f4e83623ba1a6261250"
        },
        {
          "alg" : "SHA3-512",
          "content" : "f6f1ecc684e309d7b9fc5c343792508fee935cd2119d962721662c5af88e4864ba6f47a863e083714f315f926c156de1970cd2fb577449bdfdc7bf98a4a451fa"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-lang/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-lang/actions"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/LANG"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf/commons-lang.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar"
    },
    {
      "group" : "org.snakeyaml",
      "name" : "snakeyaml-engine",
      "version" : "2.6",
      "description" : "Core YAML 1.2 parser and emitter for Java",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "719bcfb9f917992d0a99a6f7106d8466"
        },
        {
          "alg" : "SHA-1",
          "content" : "235a7e571b33eda1a81e0f73a3173ef95dd020e5"
        },
        {
          "alg" : "SHA-256",
          "content" : "2652199af40c9aa2f1782400d2dfbbf4e5226208c4e05ddd4059c3d6d9cd1505"
        },
        {
          "alg" : "SHA-512",
          "content" : "c3b5e87ce323b37bcd9e65d060157ebb26d116b5dac30c6eaa185b30aa24c0be8dfd0ad604a9a12ce7010acadee54a9cea9f065cd2f434eeaed7bccce2e14a7d"
        },
        {
          "alg" : "SHA-384",
          "content" : "edfc3c9a95cc2fa524a322f20ec034ec16b3fad950a58bfd1ed774eaaab946304cddc5e9ea4e117a899ec568ba7fa620"
        },
        {
          "alg" : "SHA3-384",
          "content" : "63b9e0ed448431a1d4b34a4b0b97b65c2c7be6ef46f1ce3b10191373e3339422f9c06bc846ae861a982c3c3618abd9c6"
        },
        {
          "alg" : "SHA3-256",
          "content" : "19ce75167267903be79122e149ede2916c3e07bab0658db21ab40864e8c920cd"
        },
        {
          "alg" : "SHA3-512",
          "content" : "7777f37097a6951dafe18fb038d087e7fe0924bfb2a10c66a76a57d95aa65341d4b674c6ff1d9d453c436ffcb50e281c2bedc854ce687fefc30c9595b7352c8a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.snakeyaml/snakeyaml-engine@2.6?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://bitbucket.org/snakeyaml/snakeyaml-engine"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://bitbucket.org/snakeyaml/snakeyaml-engine/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://bitbucket.org/snakeyaml/snakeyaml-engine/src"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.snakeyaml/snakeyaml-engine@2.6?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-text",
      "version" : "1.10.0",
      "description" : "Apache Commons Text is a library focused on algorithms working on strings.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "4afc9bfa2d31dbf7330c98fcc954b892"
        },
        {
          "alg" : "SHA-1",
          "content" : "3363381aef8cef2dbc1023b3e3a9433b08b64e01"
        },
        {
          "alg" : "SHA-256",
          "content" : "770cd903fa7b604d1f7ef7ba17f84108667294b2b478be8ed1af3bffb4ae0018"
        },
        {
          "alg" : "SHA-512",
          "content" : "afd836a1094449e0a791fee67363666c47b6d24acff353a5089b837b332c0f4af89565c354682521e37062d20e6b52d70c77bb4f24cca9b9532c274fc708a831"
        },
        {
          "alg" : "SHA-384",
          "content" : "06c56e6e513dd77cf10d0da46cdea08c34e220e81fa024735b668c6650df4234e564fe865ff5cafea963f56b1e8ffd4a"
        },
        {
          "alg" : "SHA3-384",
          "content" : "f09065ed066c25debf8c78cbb0bcc738e1ea283302ec992dcfb649acb90091cff879465c65a162e94534d454e3b4e9bb"
        },
        {
          "alg" : "SHA3-256",
          "content" : "0b59c567164bb755f2353b78ba66744000a8c4b35e1df05255b080a21c3a3dd5"
        },
        {
          "alg" : "SHA3-512",
          "content" : "f0fbce02a862b70f472a27d0722c54ac111ca2eb94584b8b0b73d1926aec26047cd92542ad0b3cf980a6825077587f41b194aa93d6f6350d1b87e59e8df1be7c"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-text"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-parent/actions"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/TEXT"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-text.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar"
    },
    {
      "group" : "com.esotericsoftware",
      "name" : "kryo",
      "version" : "5.6.2",
      "description" : "Fast, efficient Java serialization. This is the main Kryo artifact.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "972ea0c598accd90d33ed5c31bd004b3"
        },
        {
          "alg" : "SHA-1",
          "content" : "c20a8ba517e93cb78001fd64da796f1ac5cd8214"
        },
        {
          "alg" : "SHA-256",
          "content" : "4e8b1d2f4977187af8a51a957329722dc1cdc56a7c94fbb5a791e82897629cff"
        },
        {
          "alg" : "SHA-512",
          "content" : "0095bf5998f1b45c1e2dd25f22af11b619277d544cd9f4a3a355de7f118b5a9312d261c2f70e9b0691f3bec4212dea60dae191c3f1cab939ce7802472ef9f906"
        },
        {
          "alg" : "SHA-384",
          "content" : "b3dc68596ff6341a7cc285fa5db7237c90d46baa2425c20cc1a23686140152c6d0a245881032762e813d70cfdc007364"
        },
        {
          "alg" : "SHA3-384",
          "content" : "80dde34c5740a4a0fa3c2886b289eb3f9e34d2c54ad2e4aa3b025c308f2c35a75e3e3ff8a5e0700f9a7732aa89c12f6a"
        },
        {
          "alg" : "SHA3-256",
          "content" : "b1e7e4ef6c1aa0f4d4aad9cd3434ad003b4b1b0612417538f8da01c87ce81cb8"
        },
        {
          "alg" : "SHA3-512",
          "content" : "cebfb63a44efaadae598d615cd21b8bf67216b3c7b6b5e97a7027026366c8750ce8bd69d39062a5dcc609461896d44def05e8a8e227044951b0d04927b54a966"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/com.esotericsoftware/kryo@5.6.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/EsotericSoftware/kryo/kryo"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/EsotericSoftware/kryo/kryo"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.esotericsoftware/kryo@5.6.2?type=jar"
    },
    {
      "group" : "com.esotericsoftware",
      "name" : "reflectasm",
      "version" : "1.11.9",
      "description" : "High performance Java reflection using code generation",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "602377b51e9843ef87ed48b790945c3e"
        },
        {
          "alg" : "SHA-1",
          "content" : "fd51ad1705d5e27d8785550172a4ab0cb9b8ad23"
        },
        {
          "alg" : "SHA-256",
          "content" : "712b44da79a5b7f47a28cbfcb3d8ecfc872fae349c48aa4d3e38a5d69956afce"
        },
        {
          "alg" : "SHA-512",
          "content" : "c9386a11540853c965b5821771a0e99e97a5701c27e47c39b23c32fd9dd05af8231bf680541195625839eafb3471b835613a7cc734c616e571ef2f62aef84fc0"
        },
        {
          "alg" : "SHA-384",
          "content" : "f0461aaaa75079737a10ae9f3fcf24e74828715bd4f334140c0a9d68395a84c37c6df81d4d7392ac9e51f8ac253367ec"
        },
        {
          "alg" : "SHA3-384",
          "content" : "9115f84613808dbf555e36ea18f9ca84ddabb76e5f030b6c02132ecc3cc0a529fe501d0548cf768b041a2af5833073fd"
        },
        {
          "alg" : "SHA3-256",
          "content" : "e3a5cea0f269206b22975f9b4d459da5a3d2d903b075ffbedecd307ccaa2cfb5"
        },
        {
          "alg" : "SHA3-512",
          "content" : "8d7e00302607e264e0199db0508771106a291023139307012ee0a7d5a380195494832b6e0087c8892ef70bba290b5a1398194f7ef8e378c8cec8fc385097c870"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/com.esotericsoftware/reflectasm@1.11.9?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/EsotericSoftware/reflectasm"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/EsotericSoftware/reflectasm"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.esotericsoftware/reflectasm@1.11.9?type=jar"
    },
    {
      "group" : "com.esotericsoftware",
      "name" : "minlog",
      "version" : "1.3.1",
      "description" : "Minimal overhead Java logging",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "46908e11b408080d53246e4be44e66db"
        },
        {
          "alg" : "SHA-1",
          "content" : "a406e29d3a44d5f020d7b3218aee6d0952db4f73"
        },
        {
          "alg" : "SHA-256",
          "content" : "5d4d632cfbebfe0a7644501cc303570b691406181bee65e9916b921c767d7c72"
        },
        {
          "alg" : "SHA-512",
          "content" : "9a817f66222f9c612ef863b63ad7c1ccd38f2591d80ab9116e675ec52dfc5bba6989b3499c0c95afa42df762584cf0524dbc5a960b3c5dfb126068e446df0eeb"
        },
        {
          "alg" : "SHA-384",
          "content" : "d0bc3e4b93edc1519e89d7ac4dcb78fd5240c1b3e61cd5f2ba19ad0133bc0e79298da54a7f5011e64be6f12a26a487dd"
        },
        {
          "alg" : "SHA3-384",
          "content" : "995751217162b866f1e69c10607e777a4f5b571fa6c9098bc63933df5754e13e2328b149820c88a30a103fc9d938432b"
        },
        {
          "alg" : "SHA3-256",
          "content" : "a799557343159261e72d72f5762262981c16d0e5aa08b16cbf4b989a912bfe81"
        },
        {
          "alg" : "SHA3-512",
          "content" : "b333a0eab8cbdce12ab2d9163ccb8b8d3c8138b35bcf4ff1c69f79844272a9666771ae5017519d3301b8d98aaff6a6bc8655e4b636d2949d285a0d386f64d1d7"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/com.esotericsoftware/minlog@1.3.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/EsotericSoftware/minlog"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/EsotericSoftware/minlog"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.esotericsoftware/minlog@1.3.1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-collections",
      "name" : "commons-collections",
      "version" : "3.2.2",
      "description" : "Types that extend and augment the Java Collections Framework.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f54a8510f834a1a57166970bfc982e94"
        },
        {
          "alg" : "SHA-1",
          "content" : "8ad72fe39fa8c91eaaf12aadb21e0c3661fe26d5"
        },
        {
          "alg" : "SHA-256",
          "content" : "eeeae917917144a68a741d4c0dff66aa5c5c5fd85593ff217bced3fc8ca783b8"
        },
        {
          "alg" : "SHA-512",
          "content" : "51c72f9aca7726f3c387095e66be85a6df97c74b00a25434b89188c1b8eab6e2b55accf7b9bd412430d22bd09324dec076e300b3d1fa39fccad471f0f2a3da16"
        },
        {
          "alg" : "SHA-384",
          "content" : "dd4e99b3314bd3c1a1ee26296615d9e44dadf7a1f8a7bbba44fb95121803d331e36d4cca4260e7609af78a47ba3e4073"
        },
        {
          "alg" : "SHA3-384",
          "content" : "8ce03528e4a6e95c44283b56eca87e6a6d3bf1363411a55b538f4f9110cf7470581ea5c73925e877ddab08dba0603f40"
        },
        {
          "alg" : "SHA3-256",
          "content" : "fd3d6134b5f07077b82ccf93d148dacf7c4ce5c971209510edd0e77e3e38c19e"
        },
        {
          "alg" : "SHA3-512",
          "content" : "c2a523916fb7c7d55a05d5e3d9e9b33000733f4b20a71be174e4e093e3f06ea78ad831edd1505527da7388105f8647efb7d5666ba852c90b4e2d5bb74256efbc"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-collections/commons-collections@3.2.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://commons.apache.org/collections/"
        },
        {
          "type" : "build-system",
          "url" : "https://continuum-ci.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/COLLECTIONS"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/viewvc/commons/proper/collections/trunk"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-collections/commons-collections@3.2.2?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-compress",
      "version" : "1.26.0",
      "description" : "Apache Commons Compress defines an API for working with compression and archive formats. These include bzip2, gzip, pack200, LZMA, XZ, Snappy, traditional Unix Compress, DEFLATE, DEFLATE64, LZ4, Brotli, Zstandard and ar, cpio, jar, tar, zip, dump, 7z, arj.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "cbc0bb8eca12b747ca21bf998d736e60"
        },
        {
          "alg" : "SHA-1",
          "content" : "659feffdd12280201c8aacb8f7be94f9a883c824"
        },
        {
          "alg" : "SHA-256",
          "content" : "051aceb8bbcc62d0f5b2b8ac72c53767f9c59bfbd050151e65bef6f51c8ed9c9"
        },
        {
          "alg" : "SHA-512",
          "content" : "acbeaa2909b809cd561e7156df18340d96abacb179325622d73bdd6b82cb9b387d6fcb1a44d8195aad4e786da299289e17598a1d337b7c7d1c0bc610cc128714"
        },
        {
          "alg" : "SHA-384",
          "content" : "052d4d0cd1929c4299dd9d37dd36eaea6ed2be6b04d6d83a94f8608a6d1138aa81f7a34f25113ac267e7ba25ce948c9a"
        },
        {
          "alg" : "SHA3-384",
          "content" : "8b0bf441e8ce793fb6513bc07551cc48ab4507696c18e6037b0fcf35bc4e1eb3e44ed962e2d3765c86d4d912770aa53e"
        },
        {
          "alg" : "SHA3-256",
          "content" : "e441768e06092053f4703844ec0c8f2b437e06e7c190d48fec9d7682beb94c40"
        },
        {
          "alg" : "SHA3-512",
          "content" : "5984f9f08f83789555677f6800f25fa8e80a9eb2e4d46b5fb117b8efc24753644fa103a2f6b619827661a41677991bc827965172ef25f1313d8a59154e615e8d"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-compress@1.26.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-compress/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-parent/actions"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/COMPRESS"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-compress.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-compress@1.26.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-io",
      "name" : "commons-io",
      "version" : "2.15.1",
      "description" : "The Apache Commons IO library contains utility classes, stream implementations, file filters, file comparators, endian transformation classes, and much more.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "84351f7991a0e6722f00e96a4ccc376f"
        },
        {
          "alg" : "SHA-1",
          "content" : "f11560da189ab563a5c8e351941415430e9304ea"
        },
        {
          "alg" : "SHA-256",
          "content" : "a58af12ee1b68cfd2ebb0c27caef164f084381a00ec81a48cc275fd7ea54e154"
        },
        {
          "alg" : "SHA-512",
          "content" : "e9adaeed2d715ac0ae44de056ba165a743a92acbeb9871b535f7e58e0b3bc4fba276495b50429be195098a559f3adb7294048479754a0ee4d397da2efda5f81c"
        },
        {
          "alg" : "SHA-384",
          "content" : "028c72b59373d3894da22f9eb2c731aabd00f670993973f71a354d722670c12ca659686b83bbf8db32d060ca180f50b2"
        },
        {
          "alg" : "SHA3-384",
          "content" : "73cd585ab3736b4be50ec0f10dfe5ebfc3390eea8d56f07f29055f1fddb2dff8084310eaa6fb9f97ea639ed1abd7bc33"
        },
        {
          "alg" : "SHA3-256",
          "content" : "daf39bc99f1a3dc0075714a4a342a58d69a4cd62c25bc39a581f657ca72b1044"
        },
        {
          "alg" : "SHA3-512",
          "content" : "b003f8971d1536ea0fc4320dbfe17d7259d49e59314739f9fc83134e511facbff048b0ef4f86a9d0893781ca09c95cebc3b181a6c89a2d41e851870b96e76839"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-io/commons-io@2.15.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-io/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-parent/actions"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/IO"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-io.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-io/commons-io@2.15.1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.flink",
      "name" : "flink-shaded-guava",
      "version" : "32.1.3-jre-19.0",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "eefe4cdbc39deed31d53410ad9ad97c5"
        },
        {
          "alg" : "SHA-1",
          "content" : "7c197ead6922cd83ff550d372d07592e3f51b586"
        },
        {
          "alg" : "SHA-256",
          "content" : "d325a265bae4b256287c5be3821200b67b7075d18d0eed05bb0a0275ca101029"
        },
        {
          "alg" : "SHA-512",
          "content" : "28365b9f49ff013b82e809863c852f4728768fd08a8f7be7fcd734afb657ac69ecb38d9712505f101ac91a2f6575abb29c7190c13e99cd3ae513c54d69476d07"
        },
        {
          "alg" : "SHA-384",
          "content" : "af00f6b96c91d347c1b572da3784ddab6b84138fc99b3c0933f1e0a36daeb34ddf50b4d26b16fb39dcd1c42102348c9c"
        },
        {
          "alg" : "SHA3-384",
          "content" : "5d1914c122016dfa826a31dbe7413955c034957052a41553f05404f3fd17ab7ed5740f36879004c7db9c727d2ab2570d"
        },
        {
          "alg" : "SHA3-256",
          "content" : "5d749b1e21f790cb440348e9f221e2ad397e237900b38a83cadd9372f8ef2543"
        },
        {
          "alg" : "SHA3-512",
          "content" : "5aeedc6fc2289be12958afb5ebb441f432141cfe08b1967110d0789c5c458aaf4e5e4e28e915d0529be897362ac8f4ca5c3267b31da8c827fe40cd01a5690529"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.flink/flink-shaded-guava@32.1.3-jre-19.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://flink.apache.org/flink-shaded-guava"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink-shaded/flink-shaded-guava"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.flink/flink-shaded-guava@32.1.3-jre-19.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "io.confluent.flink",
      "name" : "flink-rpc-core",
      "version" : "2.0.2-cp1",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "c76795a74801ac6c786e47f1a26534d3"
        },
        {
          "alg" : "SHA-1",
          "content" : "c60bd29025f05f174320015680f56f99da4d311e"
        },
        {
          "alg" : "SHA-256",
          "content" : "344a10e7f5c59124c70b0043c6fbed426df09c20e77ca3a925541af1456433b8"
        },
        {
          "alg" : "SHA-512",
          "content" : "a613f8510ffbb3108bac257a613b43843635bd59194be539473e5f508eede5484e99d30309e68e5aa2b0d970d2b5cb29da2cd4591fbc1560f1ab91f5afa073b6"
        },
        {
          "alg" : "SHA-384",
          "content" : "e11037be460a88e58dd34dfbff1c148f59f72ae46341ba4afa40b27dc1be9db438acd36139c160e4bfba87d82a2efdcf"
        },
        {
          "alg" : "SHA3-384",
          "content" : "dd60f0e27a5497d50300989ed3385c5c5515aff5bd5bcc639a10fce9e2f3512b08a547751a2b3f2a169b6960d94baa41"
        },
        {
          "alg" : "SHA3-256",
          "content" : "0bbc9b4426b436f03e6ce9ffdb7f36bd758af947884efc9d7ebd9d7886d2c910"
        },
        {
          "alg" : "SHA3-512",
          "content" : "1e93ad28c76991a3458b37e5365739c328d3331600190ce7580d305355809a0ede99582f34d8b9e31e8014977922cb83af5b9ac22af36621717d953cd49372ea"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.confluent.flink/flink-rpc-core@2.0.2-cp1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://flink.apache.org/flink-rpc/flink-rpc-core"
        },
        {
          "type" : "distribution",
          "url" : "s3://cp-flink-staging-654654529379-us-west-2/maven-staging/9c4d461f467b12b5a4b0a51ef8641aa85a31fd0a"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink/flink-rpc/flink-rpc-core"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.confluent.flink/flink-rpc-core@2.0.2-cp1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.flink",
      "name" : "flink-shaded-netty",
      "version" : "4.1.100.Final-19.0",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "53b5a094b779da693fcb848ab6cc1544"
        },
        {
          "alg" : "SHA-1",
          "content" : "c2eb08778d6532f0bd64c4c3c3483b221543f958"
        },
        {
          "alg" : "SHA-256",
          "content" : "dcd521f7a40e462636df3655e9a0d3069661432dd17b8f6bfaaee49ce60cef4d"
        },
        {
          "alg" : "SHA-512",
          "content" : "d7f81de1b7e3f3acbb2e0d48bc27565054a5f84a302fddad26841efb18f34088d7e456d900cae14ce4a8a8033d67841fcf59837b1be1ab7744b2299d7510ca1a"
        },
        {
          "alg" : "SHA-384",
          "content" : "28af9de0d977b5a348fcecb53361c1d03aa3530bcce96d7ee3b9da5e6d19d3768c983c80da9269ec0020a699fec24d6f"
        },
        {
          "alg" : "SHA3-384",
          "content" : "6295ef198c6e0e5e04c8888ae1070699e42980626595c8e59d0b27a8e3dba07f38b570ffecc89434c002dc26b1032a2e"
        },
        {
          "alg" : "SHA3-256",
          "content" : "ec93452f36e22656aaa3aa7f65b07ee3cc480fab49ee03d84a42ae424381f8ca"
        },
        {
          "alg" : "SHA3-512",
          "content" : "2cf24dc1b8f03b8dbaa6cfa3bdbee74787623baf2c82e80d5104ccc9b994d1c014682a1b87df5419d7abfbe32f4b25421d0b65426c7fc7341304ded6b40c273c"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.flink/flink-shaded-netty@4.1.100.Final-19.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://flink.apache.org/flink-shaded-netty"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink-shaded/flink-shaded-netty"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.flink/flink-shaded-netty@4.1.100.Final-19.0?type=jar"
    },
    {
      "publisher" : "Apache Software Foundation",
      "group" : "org.apache.pekko",
      "name" : "pekko-actor_2.12",
      "version" : "1.1.2",
      "description" : "Apache Pekko is a toolkit for building highly concurrent, distributed, and resilient message-driven applications for Java and Scala.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "9d25f2c0dc221de049c271fafc940c6f"
        },
        {
          "alg" : "SHA-1",
          "content" : "69394067fb15191b74919b67aa2c1e22786480e0"
        },
        {
          "alg" : "SHA-256",
          "content" : "30118e8c995005d61e5bb409dc9668339c860d49a6ea7615959c17f95fbcd6c4"
        },
        {
          "alg" : "SHA-512",
          "content" : "c1916ad71d591b95714854e3196f9b6c746736e243a11b1b0766513fd0f07546dc9a1c0759267314397acd5111be453a35d16e50a24153cb8f71bd2a0e90e2cb"
        },
        {
          "alg" : "SHA-384",
          "content" : "503db50fd94b38f791dd9d499e214ab653ae4ef573329d23b02bb0f1a979a68c43b895734e5e31cece351ba1a9d43654"
        },
        {
          "alg" : "SHA3-384",
          "content" : "a9fa6fc20f0b38ec9e7bf1904a46deb82d239832662986843303e3a03823b70361b3fffd3773ddd5f437103cec11211f"
        },
        {
          "alg" : "SHA3-256",
          "content" : "419d515034032c9d83257289070c42fdc714ff05ed455d4c1e75f32e552eb842"
        },
        {
          "alg" : "SHA3-512",
          "content" : "b1c1fcb4a619c32504b89065fe08f9b2149614233856a3629a22b7f320a700d7d610ea420d3fdfe5a57a68eb9186d9650408a113873cbaeb2f40a298d8fafe07"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.pekko/pekko-actor_2.12@1.1.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://pekko.apache.org/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/pekko"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.pekko/pekko-actor_2.12@1.1.2?type=jar"
    },
    {
      "publisher" : "LAMP/EPFL",
      "group" : "org.scala-lang",
      "name" : "scala-library",
      "version" : "2.12.20",
      "description" : "Standard library for the Scala Programming Language",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "6c78ebf7399f0bb5f449b72322453eb6"
        },
        {
          "alg" : "SHA-1",
          "content" : "562dc9629943eec010e27898c3be65ffa9210558"
        },
        {
          "alg" : "SHA-256",
          "content" : "4d8a8f984cce31a329a24f10b0bf336f042cb62aeb435290a1b20243154cfccb"
        },
        {
          "alg" : "SHA-512",
          "content" : "32f566686e83ba54e24d6679667f9e699485ce360b2513def7be69b91122ac6c1f40b08411cfb933c64a6a92985ca719190e2cf3825eb68ffdffe47348f40b89"
        },
        {
          "alg" : "SHA-384",
          "content" : "d5f770f83025aabf1257f043692dc4a942112313e878f12f495e76cb6715a06462a98e67e9c934797f1efeda8eec172f"
        },
        {
          "alg" : "SHA3-384",
          "content" : "2b1110558eeb3cc009fe49874822082def0e6da49da572b7f423fbdc88c6faf8d435f41931562ec496d99775a46d3751"
        },
        {
          "alg" : "SHA3-256",
          "content" : "fc7ae16bcbda65c93dab61d7e2452285d18350b7b0c4d5d1f173b0c68759c15e"
        },
        {
          "alg" : "SHA3-512",
          "content" : "92dd1edf0254ac3ec8555dd1ec194113990c6ff221f815ea7fada462c5bb6894af42f4a41915e7003078cbe95e7c2cee4a4775d9ba9ceacec37845cda904174b"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.scala-lang/scala-library@2.12.20?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.scala-lang.org/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/scala/bug/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/scala/scala"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.scala-lang/scala-library@2.12.20?type=jar"
    },
    {
      "publisher" : "org.scala-lang.modules",
      "group" : "org.scala-lang.modules",
      "name" : "scala-java8-compat_2.12",
      "version" : "1.0.2",
      "description" : "scala-java8-compat",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "1db8348e9863e71cb67bbb5779246150"
        },
        {
          "alg" : "SHA-1",
          "content" : "9aad6f5c7a5e9bba752f107b95f17071fb2651ec"
        },
        {
          "alg" : "SHA-256",
          "content" : "2f509b96ec69c130e6d062d6a6a25e293d23b1b411129480295999cc15d3febf"
        },
        {
          "alg" : "SHA-512",
          "content" : "7c5401f5865833426366e52f175fcf1de9d1da503d31347453e88cb2f71262353faad579ccfaaeb0d9ee41576c1f8d8fcd834bb04461311ef5bb4e7836909336"
        },
        {
          "alg" : "SHA-384",
          "content" : "6980e3bc6fb8f7754503ad60efa4b28be60b9f8b6b31b29ac706c3b736853c75a7b2649a06abc023ab029598499027d5"
        },
        {
          "alg" : "SHA3-384",
          "content" : "9d51baf44475d77a03e341d8873980baec6ced9765f0b6ffc5013f50ac61ee136493bfbddc33dd218fce794199d4de77"
        },
        {
          "alg" : "SHA3-256",
          "content" : "b75ae821813ea58cc7bb6849e3c0a0c03a39d97846f07af89132499b6d618c1e"
        },
        {
          "alg" : "SHA3-512",
          "content" : "8f6ca4355311b008f18eeec6ecd40c617db1b1b25e284c7b5ef90eb4727393563e6eb757551b174e2317ad96b1dc72cbd37dca1c8d52b678e7be67c5a4f73f4d"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.scala-lang.modules/scala-java8-compat_2.12@1.0.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.scala-lang.org/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/scala/scala-java8-compat/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/scala/scala-java8-compat"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.scala-lang.modules/scala-java8-compat_2.12@1.0.2?type=jar"
    },
    {
      "publisher" : "com.typesafe",
      "group" : "com.typesafe",
      "name" : "config",
      "version" : "1.4.2",
      "description" : "configuration library for JVM languages using HOCON files",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "bac1bde09507bbd53e4e8a6a270488b7"
        },
        {
          "alg" : "SHA-1",
          "content" : "4c40a633e7994cfb0354244efb6d03fcb11c3ecf"
        },
        {
          "alg" : "SHA-256",
          "content" : "0076c249b4387d8369146528fd5dacb3efba098dc02ecf9ac81debdfc2e12fd5"
        },
        {
          "alg" : "SHA-512",
          "content" : "830a85093ab23a7c147974e781e2e6847c8fae043bdb5135149906d96f15c8de24f878d37b41c45c0a41a66a2af08b7c26c69daa224f90eb6960cb6b65457be7"
        },
        {
          "alg" : "SHA-384",
          "content" : "3fde4d51dc42b0014d64a39b19bd79ed53cb4ee958488d87298f332e223fcada08cb95656526273331aa25a2da51e034"
        },
        {
          "alg" : "SHA3-384",
          "content" : "b1cbeba850eba05c5bbc95b3e5a13497a4b94eb5c91eac10305b404c50c9f2bba19c841c1db0ac23404c77098abf95fa"
        },
        {
          "alg" : "SHA3-256",
          "content" : "baf6f2a098798bc61304df459fca71f47aa71654869fb0f3c72c67f32b91d40e"
        },
        {
          "alg" : "SHA3-512",
          "content" : "ab5bb68d2515d8f305aa678cc6577589c35e79c79c10cd3c6c36c0488a4a46fb653448e64ff8cb69b956dfe3e7d75ad6b2e0fdcd8c29a6c35f69d33252d6bb96"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.typesafe/config@1.4.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/lightbend/config"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/lightbend/config"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.typesafe/config@1.4.2?type=jar"
    },
    {
      "publisher" : "Apache Software Foundation",
      "group" : "org.apache.pekko",
      "name" : "pekko-remote_2.12",
      "version" : "1.1.2",
      "description" : "Apache Pekko is a toolkit for building highly concurrent, distributed, and resilient message-driven applications for Java and Scala.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "c9d9ceeef3b699d9038ec44e88226f57"
        },
        {
          "alg" : "SHA-1",
          "content" : "69e14c816d13c02d43540fb6732c5fd9f41292dc"
        },
        {
          "alg" : "SHA-256",
          "content" : "2a7875ae86e95eed6f47745ca09be8815a8415abde6edc092f94d438aaf6feef"
        },
        {
          "alg" : "SHA-512",
          "content" : "1c6e4758d9a1bf1e38f4093c5ce578c5bbd05535fcc5f872f2712a5ae5e2c97cdc84c75cb4f9bea633e47de73b83910a01831343a79032c176d44a3e528d7b1c"
        },
        {
          "alg" : "SHA-384",
          "content" : "8658ded4d2390693900bd5fc29d94d8806fd1e5fac29c7430c780c68477952106a6d06c9f38b94323e0bb60c0db69846"
        },
        {
          "alg" : "SHA3-384",
          "content" : "01ea9076bed222bc2356746d61fb2ccc13098e77b1e6bd1ed33bbaf0621a5a403a62490eb3f918320407c3e56d577f68"
        },
        {
          "alg" : "SHA3-256",
          "content" : "759f73bb9731a01815f59b9fb895c9fd7278edfbbd0fedc7aee7519f0b25e2d8"
        },
        {
          "alg" : "SHA3-512",
          "content" : "2706e02418243591930b2fe684c76c758cbcecc098248d775f206930991ab9ba214de32929a4ae0f9ece70f52093328280cc47444f80e419fadde6d454563310"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.pekko/pekko-remote_2.12@1.1.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://pekko.apache.org/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/pekko"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.pekko/pekko-remote_2.12@1.1.2?type=jar"
    },
    {
      "publisher" : "Apache Software Foundation",
      "group" : "org.apache.pekko",
      "name" : "pekko-stream_2.12",
      "version" : "1.1.2",
      "description" : "Apache Pekko is a toolkit for building highly concurrent, distributed, and resilient message-driven applications for Java and Scala.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "68d45d19c6d1ce9a7a0136cc675491f0"
        },
        {
          "alg" : "SHA-1",
          "content" : "e713ee73bd8f55518185e076b8c8929c15fc2fc5"
        },
        {
          "alg" : "SHA-256",
          "content" : "31493d0b872e633b0ab317bd87eb324ef892eba02b0b967c0422e66e995911e7"
        },
        {
          "alg" : "SHA-512",
          "content" : "141f46b83945b290bb96f068dae47e57c4c23c1f8aa58f666a4b014f5286cd809d7d234cfc3166f1dcf02d24fadc3bb3f93a7170b3f84bf1bcb5b3adb1a63e93"
        },
        {
          "alg" : "SHA-384",
          "content" : "7189b841586ecf6ae65d16ad5b9a21f07b855d29fbf9b5975d6cc9b5ac90f25af71894b7142c7146c9ff32f453757420"
        },
        {
          "alg" : "SHA3-384",
          "content" : "679f74b53eb5ee511605f66ffd05ecd47b5cab018dc075c9509fcc0d5e0eabe4d228a0e21329e88ad8bc42b6ee4f8a9b"
        },
        {
          "alg" : "SHA3-256",
          "content" : "6d4f82703c53dad46697ac9dc08ef97fd0c2efe67c314e97d6df3de939ec0c53"
        },
        {
          "alg" : "SHA3-512",
          "content" : "cd425d6a895f9b24e63ad7479808b7f54fa12525b553f7b2e42369babfa0e6a3ebefebe6045a98056bc767f32268575996d2170b8de44cb80cd8e4ceaaf589a5"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.pekko/pekko-stream_2.12@1.1.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://pekko.apache.org/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/pekko"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.pekko/pekko-stream_2.12@1.1.2?type=jar"
    },
    {
      "publisher" : "Apache Software Foundation",
      "group" : "org.apache.pekko",
      "name" : "pekko-protobuf-v3_2.12",
      "version" : "1.1.2",
      "description" : "Apache Pekko Protobuf V3 is a shaded version of the protobuf runtime. Original POM: https://github.com/protocolbuffers/protobuf/blob/v3.9.0/java/pom.xml",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "e78aec75b3fb5a6cee82e92d0989e7aa"
        },
        {
          "alg" : "SHA-1",
          "content" : "7b4c9456dfef1f80bcd4d267bfd72ef79fb7e85a"
        },
        {
          "alg" : "SHA-256",
          "content" : "ea4edcf2554ea23ee045703739d4cb29be6f5156c64c045e287583d09540e178"
        },
        {
          "alg" : "SHA-512",
          "content" : "cb132a48e4e3afc9b5fc94c564f69fcaa0ed7cdc0b43b91f31336501c04e380bd83564a749de8841c8b4bcb265a081cdce4844e9a7d91a7502bab31fcb1f283a"
        },
        {
          "alg" : "SHA-384",
          "content" : "5795e76835fd41615078741401d84225236df00c69883125fc0b52a37a8fe4434a912a8f61f370697e88ba4ab27ba7db"
        },
        {
          "alg" : "SHA3-384",
          "content" : "d836dd16ba6d6f932ec4faf654602e9fbc599b430e2e46ebd186ad37da199b6ce5ed545706a742ae185c51ab8626191a"
        },
        {
          "alg" : "SHA3-256",
          "content" : "e56ae8a01a31ef95d047f1e7ebeda5893b4f44ef3fe949a091f361931a2aa8cc"
        },
        {
          "alg" : "SHA3-512",
          "content" : "5b99936acc291b252d222cebeb35d4091deb37ad373bc477465ba703152b3d6fde9d11a7d46ee99b30eca57da528604c1d8f47739c3b1ff26861212c7ee63897"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.pekko/pekko-protobuf-v3_2.12@1.1.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://pekko.apache.org/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/pekko"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.pekko/pekko-protobuf-v3_2.12@1.1.2?type=jar"
    },
    {
      "group" : "org.reactivestreams",
      "name" : "reactive-streams",
      "version" : "1.0.4",
      "description" : "A Protocol for Asynchronous Non-Blocking Data Sequence",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "eda7978509c32d99166745cc144c99cd"
        },
        {
          "alg" : "SHA-1",
          "content" : "3864a1320d97d7b045f729a326e1e077661f31b7"
        },
        {
          "alg" : "SHA-256",
          "content" : "f75ca597789b3dac58f61857b9ac2e1034a68fa672db35055a8fb4509e325f28"
        },
        {
          "alg" : "SHA-512",
          "content" : "cdab6bd156f39106cd6bbfd47df1f4b0a89dc4aa28c68c31ef12a463193c688897e415f01b8d7f0d487b0e6b5bd2f19044bf8605704b024f26d6aa1f4f9a2471"
        },
        {
          "alg" : "SHA-384",
          "content" : "ce787a93e3993dca02d7ccb8a65b2922bc94bfaf5a521ffb5567300a9abc3c222ebbfffed28f5219934ceb3da5b3e9c8"
        },
        {
          "alg" : "SHA3-384",
          "content" : "68daf9498232897989ee91c1ad47c28796c028658cfe023c2907152cd64ac303a3bd961e5d33d952be7441bee7ff5f14"
        },
        {
          "alg" : "SHA3-256",
          "content" : "0c2165ea39330d7cccf05aa60067dc8562a15db7f23690c8d4fc71cd3e49fdd8"
        },
        {
          "alg" : "SHA3-512",
          "content" : "19c2d866a6c4d7c61ceb63d3b98324928eac880c8f23d84202c1145b4779438b1b275f1d20c74b06ecb0fbfe83baaecce3b4366ead0f7cc8b7b6916a8910c944"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT-0",
            "url" : "https://github.com/aws/mit-0"
          }
        }
      ],
      "purl" : "pkg:maven/org.reactivestreams/reactive-streams@1.0.4?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.reactive-streams.org/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.reactivestreams/reactive-streams@1.0.4?type=jar"
    },
    {
      "publisher" : "Lightbend",
      "group" : "com.typesafe",
      "name" : "ssl-config-core_2.12",
      "version" : "0.6.1",
      "description" : "ssl-config-core",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "9ea8d212550e22ac7fce3ecc11e4f5bf"
        },
        {
          "alg" : "SHA-1",
          "content" : "ae098ad2155d228e70b002ac3d6099214ad4aa9e"
        },
        {
          "alg" : "SHA-256",
          "content" : "629166482eddd1c6e3d1af4d8cf5463067878426a221383accb4dca1fa33ec2e"
        },
        {
          "alg" : "SHA-512",
          "content" : "90294f0ea7a1f191cfcb5b7661b69663e57dd8c4a41f9bbd7a54883432a907828af65ed512fc2628adfbb11f8b2a10c2106be1de235ad6b3a479b54282b5c82a"
        },
        {
          "alg" : "SHA-384",
          "content" : "83aaf9924f33386a80e3d0429a4968f5de7da18eeab5fd0a583da11e141b6381c6a28c6f6af6ba9475b6c3a707361b6f"
        },
        {
          "alg" : "SHA3-384",
          "content" : "b4d3b41090e5352d15c77be20dfc31045ae6a8fb51565efb13d80bd90f1586c7c43f434200ac3d1cdddb04c5fe3b1f0a"
        },
        {
          "alg" : "SHA3-256",
          "content" : "d3867c0d0b0d75c77d77fb29a4d8fa2cd6f1aa8a9ce529ba28fd9b3c566b6b0c"
        },
        {
          "alg" : "SHA3-512",
          "content" : "b08ac63f435976791f82338b5e8035979d759dce6d299babe85a5966e4293f68cb1254bd5667e59529197be1bc474b260f2f77db229a6c02b5aab7538ee94aca"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.typesafe/ssl-config-core_2.12@0.6.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/lightbend/ssl-config"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/lightbend/ssl-config"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.typesafe/ssl-config-core_2.12@0.6.1?type=jar"
    },
    {
      "publisher" : "Apache Software Foundation",
      "group" : "org.apache.pekko",
      "name" : "pekko-pki_2.12",
      "version" : "1.1.2",
      "description" : "Apache Pekko is a toolkit for building highly concurrent, distributed, and resilient message-driven applications for Java and Scala.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "fa7374883b96cac6529b0b43d0958119"
        },
        {
          "alg" : "SHA-1",
          "content" : "38512f518a637f0256cedd10adea27d1064019f8"
        },
        {
          "alg" : "SHA-256",
          "content" : "50b2c975c90c8ac144634d1bb40862586963c7f49ab2e8c373b971137315d429"
        },
        {
          "alg" : "SHA-512",
          "content" : "c78567c035e49c59835e12462c63c6d6e0f9a3a5a1e40a770fc4ee55b986ba07b82205a5a1046aee0dca695219ea76e0e31d9fd2c1ccc6797510091da66243c5"
        },
        {
          "alg" : "SHA-384",
          "content" : "5d84d8fff3a31c79d96aef32670841d69863c2f8f219337574681474037aac626a43a6995f1f2ddbf0cb0682e5b1e29b"
        },
        {
          "alg" : "SHA3-384",
          "content" : "8fe60cdef91b322e78274596751905486dec415f7579e8ff4b08bb8c96c7eebff5aa7e152e46ba1a69771583be98601d"
        },
        {
          "alg" : "SHA3-256",
          "content" : "993a2a29fe95c4b56b1a5a013dee03216b76ca73a22efcfc5b6494ab88a5e6dd"
        },
        {
          "alg" : "SHA3-512",
          "content" : "d21464b4ef5ae83d46009d5bef3add64a6dc0391c35be511e31c536f113c62a1e6ba6b407af6d2459ab13518460ebf7d73170cfc960aee57eb1400ef31412820"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.pekko/pekko-pki_2.12@1.1.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://pekko.apache.org/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/pekko"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.pekko/pekko-pki_2.12@1.1.2?type=jar"
    },
    {
      "group" : "com.hierynomus",
      "name" : "asn-one",
      "version" : "0.6.0",
      "description" : "ASN.1 serialization and parsing library",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "5012b14a62f3369439ee0eb62c7d34f9"
        },
        {
          "alg" : "SHA-1",
          "content" : "7f6141541e0a4d3ae0b02c901c2c1e9a772eb3d7"
        },
        {
          "alg" : "SHA-256",
          "content" : "e4f70fd92849b52240048b8ebace0c9a17d3bb7b9c882b3c7778cec3458495f5"
        },
        {
          "alg" : "SHA-512",
          "content" : "475e4b7d9ccdb347039e1cd06aba7e4ae8c009e85781eefcc5ca00f692084c7f1bbff51f2d8f8ba6e00bc6d9dba3d0cf6c22a9df03c42e3f29722b69de1d2101"
        },
        {
          "alg" : "SHA-384",
          "content" : "6dc0626cd44a83e7ff85064bd53e359530ffd97267deedc8071d78961a86855c1af3c64de33f8f694487376d3f34e8f9"
        },
        {
          "alg" : "SHA3-384",
          "content" : "fd7dd266ed905efc29ffd3a60324ecf4ae7ff84ad2e7a610a844702630f414de760a76664f1e6d4c02f39beb6dea9169"
        },
        {
          "alg" : "SHA3-256",
          "content" : "9dc9200a17356b8631862a1a6f16b164bc0678e2f3f5b3bd7b5d9c9a2242a0cf"
        },
        {
          "alg" : "SHA3-512",
          "content" : "e47d0d8ff9c6bb77654e3ca694c6f221d343a8f16ff75da7fbd22d5437693df182339ed1ca01b178e2a16d58567388249278eba8bd8678662ef92397307ef3cf"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.hierynomus/asn-one@0.6.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/hierynomus/asn-one"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/hierynomus/asn-one/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/hierynomus/asn-one"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.hierynomus/asn-one@0.6.0?type=jar"
    },
    {
      "group" : "org.agrona",
      "name" : "agrona",
      "version" : "1.22.0",
      "description" : "High performance primitives and utility library.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "b0fb723e27ef035a15bab969f8860337"
        },
        {
          "alg" : "SHA-1",
          "content" : "fef53f93f14d74fecb2a7cdbce9a62c7608c214c"
        },
        {
          "alg" : "SHA-256",
          "content" : "d422a57e89ccb6ae0f9482efa16f5dd0b993dac0db3860f54b033f21f45206cf"
        },
        {
          "alg" : "SHA-512",
          "content" : "1a094dad312ebfe78ac6d57c3bbd7fc582e35955cf47ff8877204ec9ccde27b4ef5a666a107df280f6041bd62343f3d8632d99875ee90cc2eccaa4f2eb53e97a"
        },
        {
          "alg" : "SHA-384",
          "content" : "2fa37a8d847a66a3e835d60064ddf9f249d3a08b5cdd321befa3e2779d122f94dcbc55b3404d39fc3434168a91b6266b"
        },
        {
          "alg" : "SHA3-384",
          "content" : "cb8fb5cd425904b1c701f07ad1b6b80069a64bfb7940c8223b9f41a6baf7a1598d9b205f5dfc812785f4646b5d7ba0c5"
        },
        {
          "alg" : "SHA3-256",
          "content" : "9a003e7675942279afafd3a0fe92a510067cc5f0bedaa09d33e204c77d34869d"
        },
        {
          "alg" : "SHA3-512",
          "content" : "6ec56d891b8ba2ced20c6bc1a3401e9f1fb07c10520576a79ea0d2732eecab0e438ec7a2b53aa80bd5e6734da2b68fea3d6be33fc0ff0d0749f05eafcb99f6f6"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.agrona/agrona@1.22.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/real-logic/agrona"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/real-logic/agrona.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.agrona/agrona@1.22.0?type=jar"
    },
    {
      "publisher" : "Apache Software Foundation",
      "group" : "org.apache.pekko",
      "name" : "pekko-slf4j_2.12",
      "version" : "1.1.2",
      "description" : "Apache Pekko is a toolkit for building highly concurrent, distributed, and resilient message-driven applications for Java and Scala.",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "57fbe0d9fb419ba7102c01f698458c77"
        },
        {
          "alg" : "SHA-1",
          "content" : "b96a7da1d2252693ee2268febccb2c3b213e9184"
        },
        {
          "alg" : "SHA-256",
          "content" : "1a701696c3e79171c08813fe8d6a03654830d43c0b33eef8b8eeb614be2352ef"
        },
        {
          "alg" : "SHA-512",
          "content" : "c45e70cf9d282a2c374892b1d1d394400b6a164db249701124bdcdbabe278d2056d15007baf06146a83c266afd9fa775bd13e82dd3933046a98cb977b83e5d45"
        },
        {
          "alg" : "SHA-384",
          "content" : "fcd575a121f00d7c5c4837b41de6b5cefe591a8bf67c4dbbf3a506548a21a9e97a25a3125e9e49d303abc1081a880da1"
        },
        {
          "alg" : "SHA3-384",
          "content" : "6d2ed5067e7482824165bdf28895e2c296da53a0a952298bf9194ab63412ce460dedd77d63ed403061e06b87ae046a2d"
        },
        {
          "alg" : "SHA3-256",
          "content" : "274d792726239f92a902500d8f3705ca6f22fe44566eb2ecec534a4f9c169342"
        },
        {
          "alg" : "SHA3-512",
          "content" : "b8daa5551c3bbac03bfb1adf5f4b056630830ab6407c44458029f6f0cfb5a54ff98e1f3789e67751693b359feb4651933e5e26d32503c20f58a269a03fcff14e"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.pekko/pekko-slf4j_2.12@1.1.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://pekko.apache.org/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/pekko"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.pekko/pekko-slf4j_2.12@1.1.2?type=jar"
    },
    {
      "publisher" : "QOS.ch",
      "group" : "org.slf4j",
      "name" : "slf4j-api",
      "version" : "1.7.36",
      "description" : "The slf4j API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "872da51f5de7f3923da4de871d57fd85"
        },
        {
          "alg" : "SHA-1",
          "content" : "6c62681a2f655b49963a5983b8b0950a6120ae14"
        },
        {
          "alg" : "SHA-256",
          "content" : "d3ef575e3e4979678dc01bf1dcce51021493b4d11fb7f1be8ad982877c16a1c0"
        },
        {
          "alg" : "SHA-512",
          "content" : "f9b033fc019a44f98b16048da7e2b59edd4a6a527ba60e358f65ab88e0afae03a9340f1b3e8a543d49fa542290f499c5594259affa1ff3e6e7bf3b428d4c610b"
        },
        {
          "alg" : "SHA-384",
          "content" : "2b14ad035877087157e379d3277dcdcd79e58d6bdb147c47d29e377d75ce53ad42cafbf22f5fb7827c7e946ff4876b9a"
        },
        {
          "alg" : "SHA3-384",
          "content" : "3bc3110dafb8d5be16a39f3b2671a466463cd99eb39610c0e4719a7bf2d928f2ea213c734887c6926a07c4cca7769e4b"
        },
        {
          "alg" : "SHA3-256",
          "content" : "ba2608179fcf46e2291a90b9cbb4aa30d718e481f59c350cc21c73b88d826881"
        },
        {
          "alg" : "SHA3-512",
          "content" : "14c4edcd19702ef607d78826839d8a6d3a39157df54b89a801d3d3cbbe1307131a77671b041c761122730fb1387888c5ec2e46bdd80e1cb07f8f144676441824"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.slf4j.org"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/qos-ch/slf4j/slf4j-api"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
    },
    {
      "group" : "com.google.code.findbugs",
      "name" : "jsr305",
      "version" : "1.3.9",
      "description" : "JSR305 Annotations for Findbugs",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "1d5a772e400b04bb67a7ef4a0e0996d8"
        },
        {
          "alg" : "SHA-1",
          "content" : "40719ea6961c0cb6afaeb6a921eaa1f6afd4cfdf"
        },
        {
          "alg" : "SHA-256",
          "content" : "905721a0eea90a81534abb7ee6ef4ea2e5e645fa1def0a5cd88402df1b46c9ed"
        },
        {
          "alg" : "SHA-512",
          "content" : "06da282cfd8e30d9f8cf17702b8709172b00e22b75a627a1d85f8989615b8a1a401bc25d9aee7b14aed1d9b5df73bf2ea8d66f9c8468d9577c29f0ccfa2cc70a"
        },
        {
          "alg" : "SHA-384",
          "content" : "56e6b41ef62eb5edfed0203802cefae9c2df86388148e420bb0c687abb2b80e14d5c2a82d5b35dce4badaf148f94eada"
        },
        {
          "alg" : "SHA3-384",
          "content" : "58c3bf89fa1afa75c2c5078159fd28e27b2273d437f26aaaa7391310b6f0823f3cf476a24f5631c0881f3f7e946d99be"
        },
        {
          "alg" : "SHA3-256",
          "content" : "c333ea5faedfa78e0614a2620438d5724eab093df4e960918391b6a44c2915b0"
        },
        {
          "alg" : "SHA3-512",
          "content" : "67ec31448e156cc72dd036060b460bb2667a13b1cbe500b6b7eed3235b1994b44c39f440ebd07b21ec9595b166ad61121d4f6a132b5b313c558ab21b72599425"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://findbugs.sourceforge.net/"
        },
        {
          "type" : "vcs",
          "url" : "http://findbugs.googlecode.com/svn/trunk/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.flink",
      "name" : "flink-shaded-force-shading",
      "version" : "19.0",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "edd575dca12a7a44b34f4b7cbda29da9"
        },
        {
          "alg" : "SHA-1",
          "content" : "753ccd73c890570a3d7294940f21acfb9ff05cf2"
        },
        {
          "alg" : "SHA-256",
          "content" : "3c6bcacdced16621d6bb9a01b831f37def9df5a9384f2bd83c66bdff00c83d85"
        },
        {
          "alg" : "SHA-512",
          "content" : "a481c637b1efe8a840be44007c70ab2ce6442ee536d609834586610b8773662f56ee836db1d41b76a7a887b79be387e509673fab8e3bbcc7b57d5287f76f3e68"
        },
        {
          "alg" : "SHA-384",
          "content" : "d161afd4c461ce46669212164ae3218eb1b6c574ca5e6888bf77d9f77fde6f76a0b6a0c13d256ad9f5b742b30537518f"
        },
        {
          "alg" : "SHA3-384",
          "content" : "196663f1098908b4bac1e34f072a596d46f4ac39983ca576a8645b17797e0d04604460708149469db4b4d409f40dbf11"
        },
        {
          "alg" : "SHA3-256",
          "content" : "0323706c3cc0b99dd14bbbdb3f1dfee96eb295c078910e2b46d77fda8bbaae4f"
        },
        {
          "alg" : "SHA3-512",
          "content" : "a3c0a55becb8af1270aed054a6b0dbd870bf3cc2fe9bfa679e863f89ad64a54f75d5c6e023f34e692af1177a0fe3680acfac1603ad5e469e152ca83d3a38b585"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.flink/flink-shaded-force-shading@19.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://flink.apache.org/flink-shaded-force-shading"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink-shaded/flink-shaded-force-shading"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.flink/flink-shaded-force-shading@19.0?type=jar"
    },
    {
      "publisher" : "Joe Walnes, Henri Tremblay, Leonardo Mesquita",
      "group" : "org.objenesis",
      "name" : "objenesis",
      "version" : "3.4",
      "description" : "A library for instantiating Java objects",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "51242320cb2bb25a3f36e2e21fa87de0"
        },
        {
          "alg" : "SHA-1",
          "content" : "675cbe121a68019235d27f6c34b4f0ac30e07418"
        },
        {
          "alg" : "SHA-256",
          "content" : "95488102feaf2e2858adf6b299353677dac6c15294006f8ed1c5556f8e3cd251"
        },
        {
          "alg" : "SHA-512",
          "content" : "951a01075a5462cc989b8d8fb1b7089848eb825ee4e563bab139f121f5f515fbb5cf2ac607a5528cbd3929e610910113346956a4448fa39bf41fd8147e5eac6f"
        },
        {
          "alg" : "SHA-384",
          "content" : "8865ca08b684b72d9dcb620f01974022d864e8e5e0e4b469287bf4720536ee51735f29c7f05da563c967e1e2f1c52589"
        },
        {
          "alg" : "SHA3-384",
          "content" : "730526cb3490fdb1770264395afdc3782fd3397617582dde8bc2807512672f624e2f5b2206d9f615524b92ccdfba191a"
        },
        {
          "alg" : "SHA3-256",
          "content" : "f22667e2f7f0f86b48015d3995e3edbec9e81929c6860e9af1063c629a114ae2"
        },
        {
          "alg" : "SHA3-512",
          "content" : "465202eb4e341003b66a38a36d676656d17adf66267dc87cfbc6bcd6ee6fd3914423160e01c38d3f505c7f358674dd9e9f08dd7df73196f04e56cae01d4fe91e"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.objenesis/objenesis@3.4?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://objenesis.org/objenesis"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/easymock/objenesis/objenesis"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.objenesis/objenesis@3.4?type=jar"
    }
  ],
  "dependencies" : [
    {
      "ref" : "pkg:maven/io.confluent.flink/flink-rpc-akka@2.0.2-cp1?type=jar",
      "dependsOn" : [
        "pkg:maven/io.confluent.flink/flink-core@2.0.2-cp1?type=jar",
        "pkg:maven/io.confluent.flink/flink-rpc-core@2.0.2-cp1?type=jar",
        "pkg:maven/org.apache.flink/flink-shaded-netty@4.1.100.Final-19.0?type=jar",
        "pkg:maven/org.apache.pekko/pekko-actor_2.12@1.1.2?type=jar",
        "pkg:maven/org.apache.pekko/pekko-remote_2.12@1.1.2?type=jar",
        "pkg:maven/org.apache.pekko/pekko-slf4j_2.12@1.1.2?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar",
        "pkg:maven/org.apache.flink/flink-shaded-force-shading@19.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.confluent.flink/flink-core@2.0.2-cp1?type=jar",
      "dependsOn" : [
        "pkg:maven/io.confluent.flink/flink-core-api@2.0.2-cp1?type=jar",
        "pkg:maven/io.confluent.flink/flink-annotations@2.0.2-cp1?type=jar",
        "pkg:maven/org.apache.flink/flink-shaded-asm-9@9.6-19.0?type=jar",
        "pkg:maven/org.apache.flink/flink-shaded-jackson@2.15.3-19.0?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar",
        "pkg:maven/org.snakeyaml/snakeyaml-engine@2.6?type=jar",
        "pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar",
        "pkg:maven/com.esotericsoftware/kryo@5.6.2?type=jar",
        "pkg:maven/commons-collections/commons-collections@3.2.2?type=jar",
        "pkg:maven/org.apache.commons/commons-compress@1.26.0?type=jar",
        "pkg:maven/org.apache.flink/flink-shaded-guava@32.1.3-jre-19.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.confluent.flink/flink-core-api@2.0.2-cp1?type=jar",
      "dependsOn" : [
        "pkg:maven/io.confluent.flink/flink-annotations@2.0.2-cp1?type=jar",
        "pkg:maven/io.confluent.flink/flink-metrics-core@2.0.2-cp1?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.confluent.flink/flink-annotations@2.0.2-cp1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.confluent.flink/flink-metrics-core@2.0.2-cp1?type=jar",
      "dependsOn" : [
        "pkg:maven/io.confluent.flink/flink-annotations@2.0.2-cp1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.flink/flink-shaded-asm-9@9.6-19.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.flink/flink-shaded-jackson@2.15.3-19.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.snakeyaml/snakeyaml-engine@2.6?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.esotericsoftware/kryo@5.6.2?type=jar",
      "dependsOn" : [
        "pkg:maven/com.esotericsoftware/reflectasm@1.11.9?type=jar",
        "pkg:maven/org.objenesis/objenesis@3.4?type=jar",
        "pkg:maven/com.esotericsoftware/minlog@1.3.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.esotericsoftware/reflectasm@1.11.9?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.objenesis/objenesis@3.4?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.esotericsoftware/minlog@1.3.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/commons-collections/commons-collections@3.2.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-compress@1.26.0?type=jar",
      "dependsOn" : [
        "pkg:maven/commons-io/commons-io@2.15.1?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/commons-io/commons-io@2.15.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.flink/flink-shaded-guava@32.1.3-jre-19.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.confluent.flink/flink-rpc-core@2.0.2-cp1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.flink/flink-shaded-netty@4.1.100.Final-19.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.pekko/pekko-actor_2.12@1.1.2?type=jar",
      "dependsOn" : [
        "pkg:maven/org.scala-lang/scala-library@2.12.20?type=jar",
        "pkg:maven/org.scala-lang.modules/scala-java8-compat_2.12@1.0.2?type=jar",
        "pkg:maven/com.typesafe/config@1.4.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.scala-lang/scala-library@2.12.20?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.scala-lang.modules/scala-java8-compat_2.12@1.0.2?type=jar",
      "dependsOn" : [
        "pkg:maven/org.scala-lang/scala-library@2.12.20?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.typesafe/config@1.4.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.pekko/pekko-remote_2.12@1.1.2?type=jar",
      "dependsOn" : [
        "pkg:maven/org.scala-lang/scala-library@2.12.20?type=jar",
        "pkg:maven/org.apache.pekko/pekko-actor_2.12@1.1.2?type=jar",
        "pkg:maven/org.apache.pekko/pekko-stream_2.12@1.1.2?type=jar",
        "pkg:maven/org.apache.pekko/pekko-pki_2.12@1.1.2?type=jar",
        "pkg:maven/org.agrona/agrona@1.22.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.pekko/pekko-stream_2.12@1.1.2?type=jar",
      "dependsOn" : [
        "pkg:maven/org.scala-lang/scala-library@2.12.20?type=jar",
        "pkg:maven/org.apache.pekko/pekko-actor_2.12@1.1.2?type=jar",
        "pkg:maven/org.apache.pekko/pekko-protobuf-v3_2.12@1.1.2?type=jar",
        "pkg:maven/org.reactivestreams/reactive-streams@1.0.4?type=jar",
        "pkg:maven/com.typesafe/ssl-config-core_2.12@0.6.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.pekko/pekko-protobuf-v3_2.12@1.1.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.reactivestreams/reactive-streams@1.0.4?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.typesafe/ssl-config-core_2.12@0.6.1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.scala-lang/scala-library@2.12.20?type=jar",
        "pkg:maven/com.typesafe/config@1.4.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.pekko/pekko-pki_2.12@1.1.2?type=jar",
      "dependsOn" : [
        "pkg:maven/org.scala-lang/scala-library@2.12.20?type=jar",
        "pkg:maven/org.apache.pekko/pekko-actor_2.12@1.1.2?type=jar",
        "pkg:maven/com.hierynomus/asn-one@0.6.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.hierynomus/asn-one@0.6.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.agrona/agrona@1.22.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.pekko/pekko-slf4j_2.12@1.1.2?type=jar",
      "dependsOn" : [
        "pkg:maven/org.scala-lang/scala-library@2.12.20?type=jar",
        "pkg:maven/org.apache.pekko/pekko-actor_2.12@1.1.2?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.flink/flink-shaded-force-shading@19.0?type=jar",
      "dependsOn" : [ ]
    }
  ]
}