<?xml version="1.0" encoding="UTF-8"?>
<bom serialNumber="urn:uuid:90f12095-adca-41f2-8955-df325bb8ae71" version="1" xmlns="http://cyclonedx.org/schema/bom/1.4">
  <metadata>
    <timestamp>2025-04-08T11:04:36Z</timestamp>
    <tools>
      <tool>
        <vendor>OWASP Foundation</vendor>
        <name>CycloneDX Maven plugin</name>
        <version>2.7.7</version>
        <hashes>
          <hash alg="MD5">436dfb24c63a322708e4a5143d8543af</hash>
          <hash alg="SHA-1">3ef2e8728dc9eff2f129c34057e46e9d2b10629a</hash>
          <hash alg="SHA-256">c185b79bf0f9264f43bc8c222c44db67bea275bb727e3327cf9aea6bf45292c9</hash>
          <hash alg="SHA-512">41488733e31e6c5315327dcc86187c2b9a6b96cd08f7e2157ce130688afde29c313fc6a73edb8a76333a930c78874aa2eac874448920030c0f7af0ac05e65ced</hash>
          <hash alg="SHA-384">f9462f86240fd9fc0942f34981e6d2371f252aa1a4e5e8c3c14e7f0f1a4e4de69ef972e51cf09a749afb6d97c13e67ed</hash>
          <hash alg="SHA3-384">c755af6239348bc7dd1e1e6b5f14f7cf7e1560d689b252d9610cd865fa4b419d0b8e26260731dfc5da2176b6e706b414</hash>
          <hash alg="SHA3-256">309aac91005470c9c834354ab918759e2ae7ec52fc1676002621a5bbdf3b7827</hash>
          <hash alg="SHA3-512">c634570dcf8302e61005e5fa91a9a0d9b81542f731967b3c9f6d3ef89e3b945bd36d7ab69e2ebad8124b9c05da504361c8b36a8ce528d844409eeb7df4eea6ce</hash>
        </hashes>
      </tool>
    </tools>
    <component type="library" bom-ref="pkg:maven/io.confluent.flink/flink-s3-fs-hadoop@1.19.2-cp2?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>io.confluent.flink</group>
      <name>flink-s3-fs-hadoop</name>
      <version>1.19.2-cp2</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.confluent.flink/flink-s3-fs-hadoop@1.19.2-cp2?type=jar</purl>
      <externalReferences><reference type="website"><url>https://flink.apache.org/flink-filesystems/flink-s3-fs-hadoop</url></reference><reference type="distribution"><url>s3://cp-flink-staging-654654529379-us-west-2/maven-staging/e376491b71b31739887d29e34e6552860f69668d</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink/flink-filesystems/flink-s3-fs-hadoop</url></reference></externalReferences>
    </component>
    <properties>
      <property name="maven.goal">makeBom</property>
      <property name="maven.scopes">compile,provided,runtime,system</property>
    </properties>
  </metadata>
  <components>
    <component type="library" bom-ref="pkg:maven/io.confluent.flink/flink-core@1.19.2-cp2?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>io.confluent.flink</group>
      <name>flink-core</name>
      <version>1.19.2-cp2</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">0359367380bd211d6038b82cf3f025e6</hash>
        <hash alg="SHA-1">47b60aef575636b92e61cc13760513d44860ce74</hash>
        <hash alg="SHA-256">c86624d00fd1878253b28c185d19ce4eb676f358bc89949594e384f5917c54d3</hash>
        <hash alg="SHA-512">aeb595854b04df66bf95d7f1e70d6b9ec5cc314e58ee9301a2ea55e1a6df45f0fe2ba9eab86b789f759c30171f2f988b79716d089dddfde41f4f13fc5608bd34</hash>
        <hash alg="SHA-384">78dd7df1bb52fc545afab630286d22815fdfaa036b574c1d775e9139f490dee96a02f8428883632262f441f83ba4beb6</hash>
        <hash alg="SHA3-384">550e39af694d3f673d97af02dd549edcafc36c0f7d057c5a0c804f1ccbd7ff979cd919003d04b0c4122e71f9ee531ce0</hash>
        <hash alg="SHA3-256">9572742e28f591a1b726bc2f9449a78ceab64d04ae235be71464fa64d22c32c6</hash>
        <hash alg="SHA3-512">7d50ccaab9d2c0d092ed6d467ff89318cf6b9869a45280ec4a3f11df14997f728e361451ceaa765d663c2ebe95fcdb9b66400ef47da4c8b90991cdb03a475d5e</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.confluent.flink/flink-core@1.19.2-cp2?type=jar</purl>
      <externalReferences><reference type="website"><url>https://flink.apache.org/flink-core</url></reference><reference type="distribution"><url>s3://cp-flink-staging-654654529379-us-west-2/maven-staging/e376491b71b31739887d29e34e6552860f69668d</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink/flink-core</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.confluent.flink/flink-annotations@1.19.2-cp2?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>io.confluent.flink</group>
      <name>flink-annotations</name>
      <version>1.19.2-cp2</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">da359822fc8733286c9bbf4d16dd5293</hash>
        <hash alg="SHA-1">a889d438d12b954df02c5e777f11e2af28c2b08c</hash>
        <hash alg="SHA-256">536b55b5bef646e0014b1ff65cc82a6967b33a03885ff21ddbe60629a6466e6d</hash>
        <hash alg="SHA-512">c926fbfa229d13390a87f2a70db9fee3a3a53f999a521fb3e239e9cdf4646468b66ea9912c6c90d22c391f1e3b8d514ec91d4093ea8d5159222e5403df61b949</hash>
        <hash alg="SHA-384">0715267131e5138cc8b218bec33ca3607b202a4b3ace620b09c667610cd5d2b34183487df639490c904fa3b91d075c50</hash>
        <hash alg="SHA3-384">7b3bdd0440f45ebb86889f49820cfac75b82673312adcfac9ea06dd29ec9088bf89b1b318f69077f128bbe69ce8197c7</hash>
        <hash alg="SHA3-256">031afd88ab29c01b099237be1ed2063b575e8bccfe5887cdac52ec692970742c</hash>
        <hash alg="SHA3-512">422e502e6502ba2f5534991849076e83e1320d1341392ecdd0b7419c7aea77752cb6bc93633aa4c2b5db2862e95c5b3b5495f5875b227fdf99333c11600eece8</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.confluent.flink/flink-annotations@1.19.2-cp2?type=jar</purl>
      <externalReferences><reference type="website"><url>https://flink.apache.org/flink-annotations</url></reference><reference type="distribution"><url>s3://cp-flink-staging-654654529379-us-west-2/maven-staging/e376491b71b31739887d29e34e6552860f69668d</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink/flink-annotations</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.confluent.flink/flink-metrics-core@1.19.2-cp2?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>io.confluent.flink</group>
      <name>flink-metrics-core</name>
      <version>1.19.2-cp2</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <hashes>
        <hash alg="MD5">173ffb6346116e700288337e8e7409fe</hash>
        <hash alg="SHA-1">e0a2e3d0d93710e7f518e131c46d39d03c160f19</hash>
        <hash alg="SHA-256">fcc9ce6b456cfa2ed93dfbf4c66369a2f4143ee6da2b16c03c23881b238b4fdc</hash>
        <hash alg="SHA-512">79a0341fdcfb20dc7d00c4397c4c266c2dcbd688b7272a6b3aacf2eeb4e88f5b47210d5b3d543bc343e4b8ef7ef005518ba4e632c98713176035c2aa413d83ab</hash>
        <hash alg="SHA-384">4b9b6fbf563acc9c93cb897f4da9d4336c8f75920a7972c34da8ec103c75b49208e9287263c92d5d976e9c69d3718df2</hash>
        <hash alg="SHA3-384">5e0b837b44eb6c69d06681b031486a2934f7cbb2c5ec6ccc985875d5b566c2393a149dc89aba180e5967f4d0b05c4df4</hash>
        <hash alg="SHA3-256">d3a8ef2e222fe991f1a9b864cbf36a72a0c7b59b1103b1de5af1e3dc720b394d</hash>
        <hash alg="SHA3-512">f08e349a2eda8e3597272637840dc89f817841f946aee75219ff1d1c89d0e10d929c10d1ab3733f80a36924c21f195e8e75c168801bdde11a092aef6266af813</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.confluent.flink/flink-metrics-core@1.19.2-cp2?type=jar</purl>
      <externalReferences><reference type="website"><url>https://flink.apache.org/flink-metrics/flink-metrics-core</url></reference><reference type="distribution"><url>s3://cp-flink-staging-654654529379-us-west-2/maven-staging/e376491b71b31739887d29e34e6552860f69668d</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink/flink-metrics/flink-metrics-core</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-shaded-asm-9@9.5-17.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-shaded-asm-9</name>
      <version>9.5-17.0</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <hashes>
        <hash alg="MD5">443601ddd70625d741be1d3382dcf012</hash>
        <hash alg="SHA-1">d09e84a77ad8258d26f6be6bbb31fe81e3f98658</hash>
        <hash alg="SHA-256">a79273d4fbea1683b5fe81bce25d7fe552a542690481132f7ded034a8f00169e</hash>
        <hash alg="SHA-512">b1414e5cd4cd63e1e8a2f4a18198834910a360dac22392e298458049d7bf05e74cea2a4206751026ad7dc2348112aa7f223d0ca6178a859cf343cf306a6bd4c8</hash>
        <hash alg="SHA-384">ff6195b15060e725158aa6c8406e441576c38318fa5ea26e27ffd09f4ed4596b5198579d69ef0192dbb6edb3fda79d40</hash>
        <hash alg="SHA3-384">2b29ecee21e6bf39e6a913cb1bb41d455ade8ec169b7574b6052972f4cf571fb5374d4dde1a24be0ec4d08246359348f</hash>
        <hash alg="SHA3-256">353458e2d9919279b41a1b74791b984fef6586f07232d2e71e42892a790052c9</hash>
        <hash alg="SHA3-512">e491cdd687aaa88d8d84e792caedc02a4ef27d2bdd78e4e9bf286876ce06518c03f0340ff984ffcd507d7982391e5a6f3c4c61e05fbf0e07bd9d5683d493393e</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-shaded-asm-9@9.5-17.0?type=jar</purl>
      <externalReferences><reference type="website"><url>http://flink.apache.org/flink-shaded-asm-9</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink-shaded/flink-shaded-asm-9</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-shaded-jackson@2.14.2-17.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-shaded-jackson</name>
      <version>2.14.2-17.0</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <hashes>
        <hash alg="MD5">492259ac7642687cc959257a5512542f</hash>
        <hash alg="SHA-1">689daca4a6fc14e361831e15abd96283166d0f62</hash>
        <hash alg="SHA-256">37e87311498ae8da80adb2aa09ab6e9739d8611e09868e7220822206c739231e</hash>
        <hash alg="SHA-512">3f4434cf93f2cd12b686aa84c4b1910d7e0191b2ddad7ba8de6d2c3805d3b49afcf5da06e1052faf01b6cb0dda554594f78e39db69d83208119c1f4f2cd5dc8f</hash>
        <hash alg="SHA-384">9e689ab8b7e7f7db269fd5b1b0fc1dc5f13fed06b283c9b8ceec5c500fc9f6a4200674eef2bb884a9e67133de32e9a77</hash>
        <hash alg="SHA3-384">a67fd2fe9cfd6e8ef51ab3c0217fcaf0a9420178a8c4025770b86d6b590db65c8bb4d96acf05b4212d2661073e4409cc</hash>
        <hash alg="SHA3-256">e47b2c93363ff5d65ae47d619f3caa605b5d996e4e765811b4b7117f1c58c90e</hash>
        <hash alg="SHA3-512">af2b026aebfa279ca42602c04a8db054a12c9f39c5640a0e7804cfa5d06124a52099aea56e9dfc25d018da9baa742b274c5914aa98814dbdd0e9c5ebfa7035b6</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-shaded-jackson@2.14.2-17.0?type=jar</purl>
      <externalReferences><reference type="website"><url>http://flink.apache.org/flink-shaded-jackson-parent/flink-shaded-jackson</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink-shaded/flink-shaded-jackson-parent/flink-shaded-jackson</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.commons</group>
      <name>commons-lang3</name>
      <version>3.12.0</version>
      <description>Apache Commons Lang, a package of Java utility classes for the
  classes that are in java.lang's hierarchy, or are considered to be so
  standard as to justify existence in java.lang.</description>
      <hashes>
        <hash alg="MD5">19fe50567358922bdad277959ea69545</hash>
        <hash alg="SHA-1">c6842c86792ff03b9f1d1fe2aab8dc23aa6c6f0e</hash>
        <hash alg="SHA-256">d919d904486c037f8d193412da0c92e22a9fa24230b9d67a57855c5c31c7e94e</hash>
        <hash alg="SHA-512">fbdbc0943cb3498b0148e86a39b773f97c8e6013740f72dbc727faeabea402073e2cc8c4d68198e5fc6b08a13b7700236292e99d4785f2c9989f2e5fac11fd81</hash>
        <hash alg="SHA-384">c34b8a0e0eba2168ad56fedeb7a1d710b6f1d3f1ce6aae99a4e0247bd120efbbadc8dcb2f731045b8a16e3efd30604dc</hash>
        <hash alg="SHA3-384">8ad6ebe7754bf0caa8cda7e59c0e95360d76e06a7ad6aeec5637985519dbd1dd06e7eed04711039f36ec4c49de280def</hash>
        <hash alg="SHA3-256">18ef639b2aeeb5aedffb18dbf20c79f33e300d99fb31b131689639cc470e6e4c</hash>
        <hash alg="SHA3-512">fbea96114dcf4f31cfaaa99987be756ddda3a6c74f8c835461997df794d54b92da1f60fe5c3f1f2a43cb8c5f5db7f4048bef77c70993673c7a93f3660fffc8da</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://commons.apache.org/proper/commons-lang/</url></reference><reference type="build-system"><url>https://builds.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/LANG</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=commons-lang.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.snakeyaml/snakeyaml-engine@2.6?type=jar">
      <group>org.snakeyaml</group>
      <name>snakeyaml-engine</name>
      <version>2.6</version>
      <description>Core YAML 1.2 parser and emitter for Java</description>
      <hashes>
        <hash alg="MD5">719bcfb9f917992d0a99a6f7106d8466</hash>
        <hash alg="SHA-1">235a7e571b33eda1a81e0f73a3173ef95dd020e5</hash>
        <hash alg="SHA-256">2652199af40c9aa2f1782400d2dfbbf4e5226208c4e05ddd4059c3d6d9cd1505</hash>
        <hash alg="SHA-512">c3b5e87ce323b37bcd9e65d060157ebb26d116b5dac30c6eaa185b30aa24c0be8dfd0ad604a9a12ce7010acadee54a9cea9f065cd2f434eeaed7bccce2e14a7d</hash>
        <hash alg="SHA-384">edfc3c9a95cc2fa524a322f20ec034ec16b3fad950a58bfd1ed774eaaab946304cddc5e9ea4e117a899ec568ba7fa620</hash>
        <hash alg="SHA3-384">63b9e0ed448431a1d4b34a4b0b97b65c2c7be6ef46f1ce3b10191373e3339422f9c06bc846ae861a982c3c3618abd9c6</hash>
        <hash alg="SHA3-256">19ce75167267903be79122e149ede2916c3e07bab0658db21ab40864e8c920cd</hash>
        <hash alg="SHA3-512">7777f37097a6951dafe18fb038d087e7fe0924bfb2a10c66a76a57d95aa65341d4b674c6ff1d9d453c436ffcb50e281c2bedc854ce687fefc30c9595b7352c8a</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.snakeyaml/snakeyaml-engine@2.6?type=jar</purl>
      <externalReferences><reference type="website"><url>https://bitbucket.org/snakeyaml/snakeyaml-engine</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://bitbucket.org/snakeyaml/snakeyaml-engine/issues</url></reference><reference type="vcs"><url>https://bitbucket.org/snakeyaml/snakeyaml-engine/src</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.commons</group>
      <name>commons-text</name>
      <version>1.10.0</version>
      <description>Apache Commons Text is a library focused on algorithms working on strings.</description>
      <hashes>
        <hash alg="MD5">4afc9bfa2d31dbf7330c98fcc954b892</hash>
        <hash alg="SHA-1">3363381aef8cef2dbc1023b3e3a9433b08b64e01</hash>
        <hash alg="SHA-256">770cd903fa7b604d1f7ef7ba17f84108667294b2b478be8ed1af3bffb4ae0018</hash>
        <hash alg="SHA-512">afd836a1094449e0a791fee67363666c47b6d24acff353a5089b837b332c0f4af89565c354682521e37062d20e6b52d70c77bb4f24cca9b9532c274fc708a831</hash>
        <hash alg="SHA-384">06c56e6e513dd77cf10d0da46cdea08c34e220e81fa024735b668c6650df4234e564fe865ff5cafea963f56b1e8ffd4a</hash>
        <hash alg="SHA3-384">f09065ed066c25debf8c78cbb0bcc738e1ea283302ec992dcfb649acb90091cff879465c65a162e94534d454e3b4e9bb</hash>
        <hash alg="SHA3-256">0b59c567164bb755f2353b78ba66744000a8c4b35e1df05255b080a21c3a3dd5</hash>
        <hash alg="SHA3-512">f0fbce02a862b70f472a27d0722c54ac111ca2eb94584b8b0b73d1926aec26047cd92542ad0b3cf980a6825077587f41b194aa93d6f6350d1b87e59e8df1be7c</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://commons.apache.org/proper/commons-text</url></reference><reference type="build-system"><url>https://github.com/apache/commons-parent/actions</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/TEXT</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=commons-text.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.esotericsoftware.kryo/kryo@2.24.0?type=jar">
      <group>com.esotericsoftware.kryo</group>
      <name>kryo</name>
      <version>2.24.0</version>
      <description>Fast, efficient Java serialization</description>
      <hashes>
        <hash alg="MD5">6cf0fa5b5d4f6b8226fd4a4bfb7532b8</hash>
        <hash alg="SHA-1">0c6b206e80cfd97e66a1364003724491c757b92f</hash>
        <hash alg="SHA-256">7e56b32c635058f9aa2820f88919ab702d029cbcd15285da9992e36cc0ae52f2</hash>
        <hash alg="SHA-512">a4c6ce768528a03c219cc6a41b22293f78e433c849c90391b64dda3f2376fd79951a89c5f4e6701bcbcb6eee9abffe2390cfb12dba3b885e4a3d411a26b78f40</hash>
        <hash alg="SHA-384">678ad1b7f4d99910b8ff44a6c8f78ccae91f823161ce23de39077397352919b7257e1e6e0dea90900be973291ea19282</hash>
        <hash alg="SHA3-384">671fc6aa9905f8131482e1d0f3fe26126562b13777893d51a66d0f84fc6f2aa3f13947e488ffba8f09c31a2cc0e9758a</hash>
        <hash alg="SHA3-256">46e89d8f12cbead0fe29ad707d5dba96e880dacce2a6b374ac4bf1ced9f36a79</hash>
        <hash alg="SHA3-512">c7cde437eef8343eccd4c5ecb8de5683529e3d4d8262e8cd1f7b7d0df9c632253b979737fd1b486314ec2728aee3a3782dee5d2032621485db4aa3b2a8262741</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.esotericsoftware.kryo/kryo@2.24.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/EsotericSoftware/kryo</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/EsotericSoftware/kryo</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.esotericsoftware.minlog/minlog@1.2?type=jar">
      <group>com.esotericsoftware.minlog</group>
      <name>minlog</name>
      <version>1.2</version>
      <description>Minimal overhead Java logging</description>
      <hashes>
        <hash alg="MD5">f7cfbdf63b67df0bbfa4c7cb260885bc</hash>
        <hash alg="SHA-1">59bfcd171d82f9981a5e242b9e840191f650e209</hash>
        <hash alg="SHA-256">a678cb1aa8f5d03d901c992c75741841d98a9bc3d55dad02e84d65315c4e60f2</hash>
        <hash alg="SHA-512">7b4082766ad740d86708783f3b08780ed72dd18062aa9ba422c4b9016b332d2334ae511f50ef7d89e4eedbdac5cebc51ab6ddaf4d1eea857a3250eb5962f0d08</hash>
        <hash alg="SHA-384">932a282a9c06864001f8212199e4be05543609adbd985c5f4517ee6eba734acd3fd8812213bc0c98af264637cbf9c78d</hash>
        <hash alg="SHA3-384">f36e9f494611c85f59febfef9ce93fc68f1f17db881400456204c1f099e623e334d2f10b41018392877c8af13de7f59a</hash>
        <hash alg="SHA3-256">37422ef85dce86abd8b14b4c9f7ad77261d728a472126c8eca38f356c98da395</hash>
        <hash alg="SHA3-512">74ba47271899706a284e942482ff41649ffd93e57a29320732e57864c47f3f0431377130ca7afb5e64cc6b68d4e5a5cdfc38027966cda4b5e512e3ce02bd8a99</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.esotericsoftware.minlog/minlog@1.2?type=jar</purl>
      <externalReferences><reference type="website"><url>http://code.google.com/p/minlog/</url></reference><reference type="vcs"><url>http://minlog.googlecode.com/svn/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-collections/commons-collections@3.2.2?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>commons-collections</group>
      <name>commons-collections</name>
      <version>3.2.2</version>
      <description>Types that extend and augment the Java Collections Framework.</description>
      <hashes>
        <hash alg="MD5">f54a8510f834a1a57166970bfc982e94</hash>
        <hash alg="SHA-1">8ad72fe39fa8c91eaaf12aadb21e0c3661fe26d5</hash>
        <hash alg="SHA-256">eeeae917917144a68a741d4c0dff66aa5c5c5fd85593ff217bced3fc8ca783b8</hash>
        <hash alg="SHA-512">51c72f9aca7726f3c387095e66be85a6df97c74b00a25434b89188c1b8eab6e2b55accf7b9bd412430d22bd09324dec076e300b3d1fa39fccad471f0f2a3da16</hash>
        <hash alg="SHA-384">dd4e99b3314bd3c1a1ee26296615d9e44dadf7a1f8a7bbba44fb95121803d331e36d4cca4260e7609af78a47ba3e4073</hash>
        <hash alg="SHA3-384">8ce03528e4a6e95c44283b56eca87e6a6d3bf1363411a55b538f4f9110cf7470581ea5c73925e877ddab08dba0603f40</hash>
        <hash alg="SHA3-256">fd3d6134b5f07077b82ccf93d148dacf7c4ce5c971209510edd0e77e3e38c19e</hash>
        <hash alg="SHA3-512">c2a523916fb7c7d55a05d5e3d9e9b33000733f4b20a71be174e4e093e3f06ea78ad831edd1505527da7388105f8647efb7d5666ba852c90b4e2d5bb74256efbc</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/commons-collections/commons-collections@3.2.2?type=jar</purl>
      <externalReferences><reference type="website"><url>http://commons.apache.org/collections/</url></reference><reference type="build-system"><url>https://continuum-ci.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/COLLECTIONS</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>http://svn.apache.org/viewvc/commons/proper/collections/trunk</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-compress@1.26.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.commons</group>
      <name>commons-compress</name>
      <version>1.26.0</version>
      <description>Apache Commons Compress defines an API for working with
compression and archive formats. These include bzip2, gzip, pack200,
LZMA, XZ, Snappy, traditional Unix Compress, DEFLATE, DEFLATE64, LZ4,
Brotli, Zstandard and ar, cpio, jar, tar, zip, dump, 7z, arj.</description>
      <hashes>
        <hash alg="MD5">cbc0bb8eca12b747ca21bf998d736e60</hash>
        <hash alg="SHA-1">659feffdd12280201c8aacb8f7be94f9a883c824</hash>
        <hash alg="SHA-256">051aceb8bbcc62d0f5b2b8ac72c53767f9c59bfbd050151e65bef6f51c8ed9c9</hash>
        <hash alg="SHA-512">acbeaa2909b809cd561e7156df18340d96abacb179325622d73bdd6b82cb9b387d6fcb1a44d8195aad4e786da299289e17598a1d337b7c7d1c0bc610cc128714</hash>
        <hash alg="SHA-384">052d4d0cd1929c4299dd9d37dd36eaea6ed2be6b04d6d83a94f8608a6d1138aa81f7a34f25113ac267e7ba25ce948c9a</hash>
        <hash alg="SHA3-384">8b0bf441e8ce793fb6513bc07551cc48ab4507696c18e6037b0fcf35bc4e1eb3e44ed962e2d3765c86d4d912770aa53e</hash>
        <hash alg="SHA3-256">e441768e06092053f4703844ec0c8f2b437e06e7c190d48fec9d7682beb94c40</hash>
        <hash alg="SHA3-512">5984f9f08f83789555677f6800f25fa8e80a9eb2e4d46b5fb117b8efc24753644fa103a2f6b619827661a41677991bc827965172ef25f1313d8a59154e615e8d</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.commons/commons-compress@1.26.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://commons.apache.org/proper/commons-compress/</url></reference><reference type="build-system"><url>https://github.com/apache/commons-parent/actions</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/COMPRESS</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=commons-compress.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-shaded-guava@31.1-jre-17.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-shaded-guava</name>
      <version>31.1-jre-17.0</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <hashes>
        <hash alg="MD5">b8c5129f4164f8ee2086854bdb289690</hash>
        <hash alg="SHA-1">00fa393c1db1308f4fb920f010f79c4c774e2f39</hash>
        <hash alg="SHA-256">03442ae97c4ca34388568cbce0e67e9911b0137b2b3849dff7a550008d5a4336</hash>
        <hash alg="SHA-512">15bb65f24054768915fbc29a95dfa93307b0babc39a02a204ae65eff44f259357b471fef9967b864b7a78e07d266933ce8e3eda8a866fcc73643cc38bcc5653f</hash>
        <hash alg="SHA-384">c8e6f2630c0824bbd1902a25884f09c076efbbbe0265f5d3fb49370affcff81ee5dd8b7887ba4bf063915446b937117a</hash>
        <hash alg="SHA3-384">a2ffbdbcfb8be61c43891fa19275a765b71e6830b110fa9ab77d46ac35527d2be0943d895767a70591895916963048c6</hash>
        <hash alg="SHA3-256">5a73e8e370e9bb3d634495dade320f0b569f4ed307fc147cb8f3af547bb6b057</hash>
        <hash alg="SHA3-512">abd1618c0568eee546f5b32314085bef40f8de74ffa5e52f0aa7a5bed82713142af8a1bdaf79f18e2210b79f8c3592276c54b2356594d19d8f56185ec9a457d5</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-shaded-guava@31.1-jre-17.0?type=jar</purl>
      <externalReferences><reference type="website"><url>http://flink.apache.org/flink-shaded-guava</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink-shaded/flink-shaded-guava</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.confluent.flink/flink-s3-fs-base@1.19.2-cp2?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>io.confluent.flink</group>
      <name>flink-s3-fs-base</name>
      <version>1.19.2-cp2</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">085f8d1c378e31dde8ca4f829ce61d7b</hash>
        <hash alg="SHA-1">20d7f2566f98c7220eeb74c907025e52a74ea41e</hash>
        <hash alg="SHA-256">79eb718630b6547a5ffc615db35947314c7597ba9d3c8b1df9061c5d7d527d09</hash>
        <hash alg="SHA-512">51fc6bd4198a5b2c2692579b16371db93c4f4c8e67fd03fc82e7cdaa17a79062c0ace97aa861ec8818adc8b22abb74e829309a0d733a8c590b1b9e2028d47f4b</hash>
        <hash alg="SHA-384">a6069365ef21032aee9a46bafd46f6565ecd4c52a14451fe5d2a6794b7ab42b0a4ba684101906abb224cedc4a1a937c1</hash>
        <hash alg="SHA3-384">b3ba4feadd4dbce98fece12b080de0b1a33dab22b38e736b36f476cc2ec9092c37a050bc1923707ea88a4625c40c4995</hash>
        <hash alg="SHA3-256">cc06264b37c7316998702095f1936abb4e8ba94e273217fd2f96e894c57b0df9</hash>
        <hash alg="SHA3-512">0cee67db97dbac73662ffd632cdd96b3376904af0616998b5b5ac8a3b9fb3d655da5d9ceca95cdeb197f6e4ccc41be916673084bfee7896ba4ca30058b0b3d79</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.confluent.flink/flink-s3-fs-base@1.19.2-cp2?type=jar</purl>
      <externalReferences><reference type="website"><url>https://flink.apache.org/flink-filesystems/flink-s3-fs-base</url></reference><reference type="distribution"><url>s3://cp-flink-staging-654654529379-us-west-2/maven-staging/e376491b71b31739887d29e34e6552860f69668d</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink/flink-filesystems/flink-s3-fs-base</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.hadoop/hadoop-common@3.3.4?type=jar">
      <publisher>Apache Software Foundation</publisher>
      <group>org.apache.hadoop</group>
      <name>hadoop-common</name>
      <version>3.3.4</version>
      <description>Apache Hadoop Common</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">809e2244cb9f9b28ab3c18fed8498eac</hash>
        <hash alg="SHA-1">07bf7af4349da68e1afd1310c61de04eec0a001c</hash>
        <hash alg="SHA-256">33063df556740a6a93c22b39874411230b19d856388ec966574e045fdeb36213</hash>
        <hash alg="SHA-512">bd6e7ae98c1110b84587c87e551ffda9d00c31a9e010076e7692a0b64e6121e5a39b7700049dc4578fe9a73b58efae78c0e804f0af23ebd9a377f1d8e6d473c0</hash>
        <hash alg="SHA-384">b782b497e2c0bc06bdd116b7ad175802a482d604f4946f3d0d091075ebaa079203e3b208ea1345e034f4d3093d7ef2ce</hash>
        <hash alg="SHA3-384">03a5448e2e7a8cb3a71767d7c70b5d4d9171395ee564ef1d0b536e253b60df72733550b38b78a27786704df74fe492cc</hash>
        <hash alg="SHA3-256">51a203b1ecf4db5a3225030249b4c26db151c0191214561bd1a7f76602e1f74f</hash>
        <hash alg="SHA3-512">f046cacb801f786e515378e22eb8411d2298d96a1eac041d174ac62101f4da83f7642129a6c73e1baf9a16c78543f078427467598c42f32fbb3dbf0f249569b3</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.hadoop/hadoop-common@3.3.4?type=jar</purl>
      <externalReferences><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.hadoop.thirdparty/hadoop-shaded-protobuf_3_7@1.1.1?type=jar">
      <publisher>Apache Software Foundation</publisher>
      <group>org.apache.hadoop.thirdparty</group>
      <name>hadoop-shaded-protobuf_3_7</name>
      <version>1.1.1</version>
      <description>Packaging of relocated (renamed, shaded) third-party libraries used by Hadoop.</description>
      <hashes>
        <hash alg="MD5">7f71c684735b54e4d7adb82407614bf8</hash>
        <hash alg="SHA-1">57b7ba0ca94313c342b03bd31830fe4a8f34bc1a</hash>
        <hash alg="SHA-256">4b4f70f14576cabec34607a035b58aaefa6c042d693328d90de79db581966f8b</hash>
        <hash alg="SHA-512">4dae7fe9feb432588fa245b920db74700e921ca2c0c4cbe33060d1023b8cc66eca0c1e979672758cdcf21fa406a7f80cb3d84a51d03a69d21e8c802ffa9ff7ae</hash>
        <hash alg="SHA-384">b6fc5cd3fd614f63446bc929a70e9c287ce2546c7547246406a079edb584011959d56aff149a968732e7b6f55dd93e17</hash>
        <hash alg="SHA3-384">ac524302eb812afab2900dd191cd1f21bbef2d9d2661699846226421deab94996ad878ab1482cbeea973007faec8da50</hash>
        <hash alg="SHA3-256">c8ea9d3f32bd66258fc5e88a0a6904d66b741439885b13a0b513cf5347845521</hash>
        <hash alg="SHA3-512">1faadb03ca9da23885bbdbba4dc0caffbaad65909bc3e7e14a8b81546e10df5c6eba83256ed31e45a393efff23cb704e1c2702a5499efe7c8adfcc08e92cc87c</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.hadoop.thirdparty/hadoop-shaded-protobuf_3_7@1.1.1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://www.apache.org/hadoop-thirdparty/hadoop-shaded-protobuf_3_7/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/maven-apache-parent/tree/apache-21/hadoop-thirdparty/hadoop-shaded-protobuf_3_7</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.hadoop/hadoop-annotations@3.3.4?type=jar">
      <publisher>Apache Software Foundation</publisher>
      <group>org.apache.hadoop</group>
      <name>hadoop-annotations</name>
      <version>3.3.4</version>
      <description>Apache Hadoop Annotations</description>
      <hashes>
        <hash alg="MD5">92515b2d5ba99a758cfa4ea08eab4c22</hash>
        <hash alg="SHA-1">fad1f131ac30d56061bc1aab3dc3c7ea4b89b50e</hash>
        <hash alg="SHA-256">2b7c53a23a8e14097fd89417978871f5ef0629c5dfdafe20d8546a63be8880ba</hash>
        <hash alg="SHA-512">4d7601ab0c4d3ddbb79b6ef0a099084abc6c37f10eecb6d112bf36919d26d73ffa339b87d28cdf167c06792cd0e444c364ffca8e3d92d38c86cfd007aa38f3ca</hash>
        <hash alg="SHA-384">ea30401614ddf502a5657205701401a3a92e6d68f8f8970fbd6ce827ef43892fc69db25fa122dea01d9dca2faf1378bd</hash>
        <hash alg="SHA3-384">755b6290be2c4d66e7b8722b194f5f82178fb5e0266454d172c8e066a8424e78ef6b7e4a37418e337c5a78262d462cc3</hash>
        <hash alg="SHA3-256">6dc3c6854f70dd434e38fc145dae9f26d8a131e1737214757c4bcee0ab2a89e2</hash>
        <hash alg="SHA3-512">22d5161a96e5724b75b8345355209f05c2b7e543234be6bdc2fd287158fc9d14f32562054d8e93aa8fe34a3d9c69946da769c6893fe0415cdfdc73e1cdbb1ee4</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.hadoop/hadoop-annotations@3.3.4?type=jar</purl>
      <externalReferences><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.hadoop.thirdparty/hadoop-shaded-guava@1.1.1?type=jar">
      <publisher>Apache Software Foundation</publisher>
      <group>org.apache.hadoop.thirdparty</group>
      <name>hadoop-shaded-guava</name>
      <version>1.1.1</version>
      <description>Packaging of relocated (renamed, shaded) third-party libraries used by Hadoop.</description>
      <hashes>
        <hash alg="MD5">50e10b8500468cc0360cd406fd600bbc</hash>
        <hash alg="SHA-1">02419d851c01139edf9e19b81056382163d9bfab</hash>
        <hash alg="SHA-256">66711253edbb9a172efbf12e8b4511cd413627d069e0f5a62ea475b4e14093f8</hash>
        <hash alg="SHA-512">84c17f77f4d49c473996c6c447f170cc470d363c705f73dc75dee7f7be5d5b68dfbba5aa5df5d27d6137eb37d53c95536b020d2f8eb3fca8a4fe3553ba5b34e0</hash>
        <hash alg="SHA-384">cf32597b1537704ebcb10463f2c9186a6dff6ca246fa7c51c13399f7e31de366879958e3eb877236444820037afc810d</hash>
        <hash alg="SHA3-384">36b926ae5ec8c66b0b8c5e2dbee5fe100f56fb9a93c8cb818d49f6009d8538705798a1a2eacf1ef4f85ee112346d22b8</hash>
        <hash alg="SHA3-256">3df35bbfcfeb76c07611250427a5374fe3d7775af8ff10556170420662adb973</hash>
        <hash alg="SHA3-512">c2c20390e5bcc2ebafb813ece7558402e1882670f9cf3727c3206a97b7a38be3869e7ff68c924f12c301b3fcaa7b618d6d4f493116bcb950a25a014bb7b061b9</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.hadoop.thirdparty/hadoop-shaded-guava@1.1.1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://www.apache.org/hadoop-thirdparty/hadoop-shaded-guava/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/maven-apache-parent/tree/apache-21/hadoop-thirdparty/hadoop-shaded-guava</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.guava/guava@27.0-jre?type=jar">
      <group>com.google.guava</group>
      <name>guava</name>
      <version>27.0-jre</version>
      <description>Guava is a suite of core and expanded libraries that include
    utility classes, google's collections, io classes, and much
    much more.</description>
      <hashes>
        <hash alg="MD5">0dc595a4dfd1f0cf268203c5c3bed367</hash>
        <hash alg="SHA-1">c6ad87d2575af8ac8ec38e28e75aefa882cc3a1f</hash>
        <hash alg="SHA-256">63b09db6861011e7fb2481be7790c7fd4b03f0bb884b3de2ecba8823ad19bf3f</hash>
        <hash alg="SHA-512">44b4b7b7b988586e3ee133d38cff60e70ba4fae3c993fb47ecf2e0cb68910a6095b388c5a9f61b34b9da9425725ee731a3e3236b358d935112b7755e34cbd484</hash>
        <hash alg="SHA-384">9f0424d27ab3a0e29a29e4637325d7bfe8e841f2eb5ddbdaff9c657ab0a4b72f3053ce7dd3fb2b1672418fbb41dff8e7</hash>
        <hash alg="SHA3-384">bd8ef806eec225234a94e39322c414efe96384a7a3186ed4878173ab5160f9f97e68954dc7bf7c31bcb98dbc47a6af97</hash>
        <hash alg="SHA3-256">191396566cd75ae520329f1c365526190e05e652e5446d21f28eb61baa05adeb</hash>
        <hash alg="SHA3-512">06bb3675e52f3c6fc163cb7063251f55a1a929a30854dfc446b490cc5601a6abca5710c539b7c992a58a082f1d6d9e9873953d181f60f5ae130ee25154f4b11c</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.guava/guava@27.0-jre?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/google/guava/guava</url></reference><reference type="build-system"><url>https://travis-ci.org/google/guava</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/google/guava/issues</url></reference><reference type="vcs"><url>https://github.com/google/guava/guava</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.guava/failureaccess@1.0?type=jar">
      <group>com.google.guava</group>
      <name>failureaccess</name>
      <version>1.0</version>
      <description>Contains
    com.google.common.util.concurrent.internal.InternalFutureFailureAccess and
    InternalFutures. Most users will never need to use this artifact. Its
    classes is conceptually a part of Guava, but they're in this separate
    artifact so that Android libraries can use them without pulling in all of
    Guava (just as they can use ListenableFuture by depending on the
    listenablefuture artifact).</description>
      <hashes>
        <hash alg="MD5">5649f9c63537d7dd13bed8073624e37a</hash>
        <hash alg="SHA-1">50bacb0bdbbeeda25142aff57e2214c402e1193c</hash>
        <hash alg="SHA-256">d084bef9cd07a8537a1753e4850a69b7e8bab1d1e22e9f3a1e4826309a7a2336</hash>
        <hash alg="SHA-512">dcb0c05ba42eff6dcb0fbc51782a9369017c00a243d7afed2355fd69bdfe0464d746f780bacfd4cc232fcb325f5f246f540986882d44d1b33d1e79a4e0308a94</hash>
        <hash alg="SHA-384">b8cfc3267b72aa6aeb686287793440b2cb514a283107b31bda11d9d191bffa8f63419267fb851b4b9763f2d657ff800d</hash>
        <hash alg="SHA3-384">96487424706378189e82eeba120d066936a52dcf2a67f7709e66286f107e47cc39e9927e6c8baf074c8df40a4cd70ac5</hash>
        <hash alg="SHA3-256">8a357ffd257338f3ccfd70df029911423ce212850738df823716d293dff1c426</hash>
        <hash alg="SHA3-512">d85b1dd06ecb88861ddcea2dc4cb8e1c4361029850495f3d5770f9aa7bb369ca5c849575ddf60718c7f46d66ee9da2fd5bc4bdcf65f2f090db0b2475ec5b46dd</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.guava/failureaccess@1.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/google/guava/failureaccess</url></reference><reference type="build-system"><url>https://travis-ci.org/google/guava</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/google/guava/issues</url></reference><reference type="vcs"><url>https://github.com/google/guava/failureaccess</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar">
      <group>com.google.guava</group>
      <name>listenablefuture</name>
      <version>9999.0-empty-to-avoid-conflict-with-guava</version>
      <description>An empty artifact that Guava depends on to signal that it is providing
    ListenableFuture -- but is also available in a second "version" that
    contains com.google.common.util.concurrent.ListenableFuture class, without
    any other Guava classes. The idea is:

    - If users want only ListenableFuture, they depend on listenablefuture-1.0.

    - If users want all of Guava, they depend on guava, which, as of Guava
    27.0, depends on
    listenablefuture-9999.0-empty-to-avoid-conflict-with-guava. The 9999.0-...
    version number is enough for some build systems (notably, Gradle) to select
    that empty artifact over the "real" listenablefuture-1.0 -- avoiding a
    conflict with the copy of ListenableFuture in guava itself. If users are
    using an older version of Guava or a build system other than Gradle, they
    may see class conflicts. If so, they can solve them by manually excluding
    the listenablefuture artifact or manually forcing their build systems to
    use 9999.0-....</description>
      <hashes>
        <hash alg="MD5">d094c22570d65e132c19cea5d352e381</hash>
        <hash alg="SHA-1">b421526c5f297295adef1c886e5246c39d4ac629</hash>
        <hash alg="SHA-256">b372a037d4230aa57fbeffdef30fd6123f9c0c2db85d0aced00c91b974f33f99</hash>
        <hash alg="SHA-512">c5987a979174cbacae2e78b319f080420cc71bcdbcf7893745731eeb93c23ed13bff8d4599441f373f3a246023d33df03e882de3015ee932a74a774afdd0782f</hash>
        <hash alg="SHA-384">caff9b74079f95832ca7f6029346b34b606051cc8c5a4389fac263511d277ada0c55f28b0d43011055b268c6eb7184d5</hash>
        <hash alg="SHA3-384">e939f08df0545847ea0d3e4b04a114b08499ad069ba8ec9461d1779f87a56e0c37273630a0f4c14e78c348d3ac7eb97f</hash>
        <hash alg="SHA3-256">1f0a8b1177773b3a8ace839df5eed63cbf56b24a38714898a6e4ed065c42559f</hash>
        <hash alg="SHA3-512">6b495ecc2a18b17365cb08d124a0da47f04bcdde81927b5245edf3edd8e498c3c3fb92ce6a4127f660bac851bb1d3e4510e5c20d03be47ce99dc296d360db285</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/google/guava/listenablefuture</url></reference><reference type="build-system"><url>https://travis-ci.org/google/guava</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/google/guava/issues</url></reference><reference type="vcs"><url>https://github.com/google/guava/listenablefuture</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.checkerframework/checker-qual@2.5.2?type=jar">
      <group>org.checkerframework</group>
      <name>checker-qual</name>
      <version>2.5.2</version>
      <description>Checker Qual is the set of annotations (qualifiers) and supporting classes
        used by the Checker Framework to type check Java source code.  Please
        see artifact:
        org.checkerframework:checker</description>
      <hashes>
        <hash alg="MD5">04acc78b24bbd365423da357da003cf0</hash>
        <hash alg="SHA-1">cea74543d5904a30861a61b4643a5f2bb372efc4</hash>
        <hash alg="SHA-256">64b02691c8b9d4e7700f8ee2e742dce7ea2c6e81e662b7522c9ee3bf568c040a</hash>
        <hash alg="SHA-512">fb32e3893f9ebc956ef99066b219a8fc8049b47b80a7253cd89b7faadf0a2fa14d60b52dd5c2f4aaeb1db0359f49fec9e29d3616bd314ec8c82db1c657be8cd2</hash>
        <hash alg="SHA-384">62f90d15efb90c3691a577ca58c4b48209e294fda2cb9cf0873af5beb4f79dc4b33958474189d824853b768d2a19add9</hash>
        <hash alg="SHA3-384">506dd2e0c27cd480f0cb8775a3d9ba486d299ab6385c3c8354b94552531a47ccd379c2e68a63889d80474c287df657ea</hash>
        <hash alg="SHA3-256">381f414c86b36e9e843565b70cff4aa5ed4aea5f265bacb330343e46015b5135</hash>
        <hash alg="SHA3-512">b9bdbc3632eb85185408682e1107b886a374b21c77117d75cbecfb812b1c486daad89bd9461512c2b7bf853c82a4bd225d45846909934291dc75349ceb369e22</hash>
      </hashes>
      <licenses>
        <license>
          <id>MIT</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.checkerframework/checker-qual@2.5.2?type=jar</purl>
      <externalReferences><reference type="website"><url>https://checkerframework.org</url></reference><reference type="vcs"><url>https://github.com/typetools/checker-framework.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.j2objc/j2objc-annotations@1.1?type=jar">
      <group>com.google.j2objc</group>
      <name>j2objc-annotations</name>
      <version>1.1</version>
      <description>A set of annotations that provide additional information to the J2ObjC
    translator to modify the result of translation.</description>
      <hashes>
        <hash alg="MD5">49ae3204bb0bb9b2ac77062641f4a6d7</hash>
        <hash alg="SHA-1">ed28ded51a8b1c6b112568def5f4b455e6809019</hash>
        <hash alg="SHA-256">2994a7eb78f2710bd3d3bfb639b2c94e219cedac0d4d084d516e78c16dddecf6</hash>
        <hash alg="SHA-512">a4a0b58ffc2d9f9b516f571bcd0ac14e4d3eec15aacd6320a4a1a12045acce8c6081e8ce922c4e882221cedb2cc266399ab468487ae9a08124d65edc07ae30f0</hash>
        <hash alg="SHA-384">8942363710e7473635a2c77ff82db8af1915cb6ac8429851b4acfa04f059183f8e3444dedff75a7da02698f2ee22a181</hash>
        <hash alg="SHA3-384">a9906146d76704f64b1a1aad3d80be86e0d08a987fdb63d4d8d0399937e7e94076d9878a14593fb4465f3a5fccec0df5</hash>
        <hash alg="SHA3-256">275370eeb5f02c15358168ea134c4eab1afed8d27750a8a326b9f9f506dfc9f2</hash>
        <hash alg="SHA3-512">d9e2a3943373e1eab933b45f49997b24e01466eb99a177c40f21c7107c9f21ebb135e14d191b0a5b699e3985d20de8e87662e92c0bf59e5e054d3da85fd777dd</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.j2objc/j2objc-annotations@1.1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/google/j2objc/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>http://svn.sonatype.org/spice/tags/oss-parent-7/j2objc-annotations</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.codehaus.mojo/animal-sniffer-annotations@1.17?type=jar">
      <publisher>MojoHaus</publisher>
      <group>org.codehaus.mojo</group>
      <name>animal-sniffer-annotations</name>
      <version>1.17</version>
      <description>Animal Sniffer Parent POM.</description>
      <hashes>
        <hash alg="MD5">7ca108b790cf6ab5dbf5422cc79f0d89</hash>
        <hash alg="SHA-1">f97ce6decaea32b36101e37979f8b647f00681fb</hash>
        <hash alg="SHA-256">92654f493ecfec52082e76354f0ebf87648dc3d5cec2e3c3cdb947c016747a53</hash>
        <hash alg="SHA-512">94d0335cdf94aa547ad6c0c7e44b8e3bda736ce19d941dd0faa3a45390e5ab2d122022ff4e07bb9aaedd41ffbd9500f324e0a9e42f4c5441bce0774f44872f45</hash>
        <hash alg="SHA-384">58c3caa2ed13416384c519aa52b26c8b93cb43ca6921027c8ac9f321d77979a01634e42de4dd645edc687c266ac58748</hash>
        <hash alg="SHA3-384">6dc341f4b80b80da2751d9284ca61852333863a36373aed33a59b80c3771d3113fe4ac550923a282b1c4d3bd616ad8e7</hash>
        <hash alg="SHA3-256">022761cb42cb64b957756b985165ed9f7d3978c4670f770599aed938b100a46e</hash>
        <hash alg="SHA3-512">730314b9682777eb64897e6033db857d9924bb749c473fe2111e03b9c1ed2788359c983a07b0e262552b3390104239ac1df42cffc3d0053b14955d1a36ee3244</hash>
      </hashes>
      <licenses>
        <license>
          <id>MIT</id>
          <url>https://opensource.org/licenses/MIT</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.codehaus.mojo/animal-sniffer-annotations@1.17?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.mojohaus.org/animal-sniffer/animal-sniffer-annotations</url></reference><reference type="build-system"><url>https://travis-ci.org/mojohaus/animal-sniffer</url></reference><reference type="distribution"><url>http://oss.sonatype.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://github.com/mojohaus/animal-sniffer/issues</url></reference><reference type="mailing-list"><url>https://groups.google.com/forum/#!forum/mojohaus-dev</url></reference><reference type="vcs"><url>https://github.com/mojohaus/animal-sniffer/animal-sniffer-annotations</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/jakarta.activation/jakarta.activation-api@1.2.1?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>jakarta.activation</group>
      <name>jakarta.activation-api</name>
      <version>1.2.1</version>
      <description>JavaBeans Activation Framework API jar</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">9b647398add993324d3d9e5effa6005a</hash>
        <hash alg="SHA-1">562a587face36ec7eff2db7f2fc95425c6602bc1</hash>
        <hash alg="SHA-256">8b0a0f52fa8b05c5431921a063ed866efaa41dadf2e3a7ee3e1961f2b0d9645b</hash>
        <hash alg="SHA-512">c60edc99f119b9e0df0cf527e2512f2b7ab9db0e17c54e83850695f80f652c981eaae90a296db671cf7ed88a044c150224e030df333feb30f346e8a31fb794c6</hash>
        <hash alg="SHA-384">07422d64a103aacb8956c2067175f2cc257494d2cc8dbde29ddf8d93778a2d4b3903565b17173a0b5230b59d535bd474</hash>
        <hash alg="SHA3-384">fe6be5e1fb1c0ee5236b2866c1e5058c84043fb4dc3dd5ad8f04e61c01c019c96e92ffdf1de0eaf7e657b2c02c6d898e</hash>
        <hash alg="SHA3-256">880a91ff9e978ac9208c84babd820dc2ded42e601d8a17688eb30883b598dec0</hash>
        <hash alg="SHA3-512">91c0b8cb956bdb06e79738a9db624022887b3d83838b708dd3c654f231ab6f9b4a27be2556fd14683cd6158bf8534b96acd2481054e0c946d6e9f641cc5af55b</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/jakarta.activation/jakarta.activation-api@1.2.1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/eclipse-ee4j/jaf/jakarta.activation-api</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/eclipse-ee4j/jaf/issues/</url></reference><reference type="mailing-list"><url>https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/</url></reference><reference type="vcs"><url>https://github.com/eclipse-ee4j/jaf/jakarta.activation-api</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-logging/commons-logging@1.1.3?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>commons-logging</group>
      <name>commons-logging</name>
      <version>1.1.3</version>
      <description>Commons Logging is a thin adapter allowing configurable bridging to other,
    well known logging systems.</description>
      <hashes>
        <hash alg="MD5">92eb5aabc1b47287de53d45c086a435c</hash>
        <hash alg="SHA-1">f6f66e966c70a83ffbdb6f17a0919eaf7c8aca7f</hash>
        <hash alg="SHA-256">70903f6fc82e9908c8da9f20443f61d90f0870a312642991fe8462a0b9391784</hash>
        <hash alg="SHA-512">e5d1fc8ec4544e1fa0f7c4aae8dbcca466c4987bc92fbbc430b054b10d646b745add4a754b1be9d50edd64330c798c53173a97289db57a966312e16f934e9d1f</hash>
        <hash alg="SHA-384">00dc41783f4081585e20adcfe83fd4dbb6b5a27236ee633d7e53dedcbca83ba5e5f0ca68d31f95e9c724b365e4c67499</hash>
        <hash alg="SHA3-384">6915e597821aa2fed7f4b05f4de3476364074ab5cee7e13b4eb5b94a9d297b58cb391c6b730e6ea0d4e81e323a90d002</hash>
        <hash alg="SHA3-256">c49c80e2576bf037fc871e70df8708f5e35c0977a907e966c0334e9fac17b297</hash>
        <hash alg="SHA3-512">b74b6e6d771005014614774d059a4e1ceab929c0678839846d143e56e4724455242ffa3d5d411c6554a41e1f66fe1f94c51472d80c07d44c02a2f9a6715d8c7d</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/commons-logging/commons-logging@1.1.3?type=jar</purl>
      <externalReferences><reference type="website"><url>http://commons.apache.org/proper/commons-logging/</url></reference><reference type="build-system"><url>http://vmbuild.apache.org/continuum/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/LOGGING</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>http://svn.apache.org/repos/asf/commons/proper/logging/trunk</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-beanutils/commons-beanutils@1.9.4?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>commons-beanutils</group>
      <name>commons-beanutils</name>
      <version>1.9.4</version>
      <description>Apache Commons BeanUtils provides an easy-to-use but flexible wrapper around reflection and introspection.</description>
      <hashes>
        <hash alg="MD5">07dc532ee316fe1f2f0323e9bd2f8df4</hash>
        <hash alg="SHA-1">d52b9abcd97f38c81342bb7e7ae1eee9b73cba51</hash>
        <hash alg="SHA-256">7d938c81789028045c08c065e94be75fc280527620d5bd62b519d5838532368a</hash>
        <hash alg="SHA-512">7762b348caecead49038a38a89754ff7d9be6199324315495ba47cf24f52c06faadf9306d925c8fe47c587589a939c82e491e1c730267fdf354243a68c0f96ff</hash>
        <hash alg="SHA-384">dcd3845917b8fb189cf4034b0d7c6d266ec7110f85ffbd2711cdea9eb94b4fa3e1cee9120b484c6a120b82769230ed3a</hash>
        <hash alg="SHA3-384">dfdb8845989be083de807184910124ad7e7e372959b34686cd5f5020f193a2997831ead497b0a5a0233f031aecdf55f6</hash>
        <hash alg="SHA3-256">127a81068335d6ca47f5f5e12d849dc1bc5300b2ad8d3f9b64ca30ff2a76d479</hash>
        <hash alg="SHA3-512">f67405d0a7667adf7cd35cd7416c54e1759380cdb9c8f179a10175058e40292808e17e69d48df4d4d6b5e268c314127cf3ab87af6920a271bb2e6e0df963940d</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/commons-beanutils/commons-beanutils@1.9.4?type=jar</purl>
      <externalReferences><reference type="website"><url>https://commons.apache.org/proper/commons-beanutils/</url></reference><reference type="build-system"><url>https://builds.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/BEANUTILS</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>http://svn.apache.org/viewvc/commons/proper/beanutils/tags/BEANUTILS_1_9_3_RC3</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-configuration2@2.1.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.commons</group>
      <name>commons-configuration2</name>
      <version>2.1.1</version>
      <description>Tools to assist in the reading of configuration/preferences files in
        various formats</description>
      <hashes>
        <hash alg="MD5">6c070e57bcd44ed93994f5a33102c277</hash>
        <hash alg="SHA-1">d97d5b3f8b58c52730d47e1a63c8d3258f41ca6c</hash>
        <hash alg="SHA-256">6471f4c4fb666960eba889b768164670097022d3084018affea555e6bf8d3d79</hash>
        <hash alg="SHA-512">182deb006bef6ff51b3f147c9b5c346919b0f94e30b6fc77292ffb3d77ce20e3ee72afbf7ab3db20030fb47e0bc62a0509b90c50292d8bd2dba0eedcf8f2a332</hash>
        <hash alg="SHA-384">e8bf3e999584f0dad8c814385cc38c0bda6ee9c083bc8152121c29899d728dc7cfde97933a98cf98ff1b91442fb07112</hash>
        <hash alg="SHA3-384">c6aed291085b3ad27871d949c2877d567723e9badf69465f5f1332d938184bf10d60afa0836f09784009f1b6478263da</hash>
        <hash alg="SHA3-256">cd6e6484936a8a48ca5ae9a3e4c53eacc7c269e59d2c2bce067f53bc5057e62c</hash>
        <hash alg="SHA3-512">abd52107093fdea0a0b1eeca833932b51217928c1d118d7c6e07d5f58a60e9120fdc5f3414fd3a64e6e80e9b00f8d66b3eb8d34319ca51c30f855c21d510063d</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.commons/commons-configuration2@2.1.1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://commons.apache.org/proper/commons-configuration/</url></reference><reference type="build-system"><url>https://builds.apache.org/job/Commons-configuration/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/CONFIGURATION</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>http://svn.apache.org/viewvc/commons/proper/configuration/trunk</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.re2j/re2j@1.1?type=jar">
      <group>com.google.re2j</group>
      <name>re2j</name>
      <version>1.1</version>
      <description>Sonatype helps open source projects to set up Maven repositories on https://oss.sonatype.org/</description>
      <hashes>
        <hash alg="MD5">229a629b4c09765733de88569f7c7f59</hash>
        <hash alg="SHA-1">d716952ab58aa4369ea15126505a36544d50a333</hash>
        <hash alg="SHA-256">24ada84d1b5de584e3e84b06f0c7dd562cee6eafe8dea8083bd8eb123823bbe7</hash>
        <hash alg="SHA-512">efea79d3ceb7ff34809c30ea9514d98637326241c888213c14294e7154bd306d3be7c9e2db82bd683aa7d4bbc3113c360eb0613ec513340d873c25e99ee912f8</hash>
        <hash alg="SHA-384">e6c9a2f02bec5e85bd1d1cc13b96721497b40b21056ae59f6305808a5ebb541e279456ad457bf6dcf01f3ae43d77fe16</hash>
        <hash alg="SHA3-384">1fa2acb9a323d2d7847ce6450ea66a253091e16c416d491178a2f3125c8df9a4315ae291f6741c9d8596c5035e807e41</hash>
        <hash alg="SHA3-256">fde6db7271f96843dccffe0f5306986289a7726fea97965384d040c6861d601e</hash>
        <hash alg="SHA3-512">999e8af506d50cafc03af0ba25f94ffcffb65637cdfd9b9f65c2f248f3b5ab1d457585f1039f595d8caa6a115614d54cce690042e5eca7a8dbebbb1f28ddc7a3</hash>
      </hashes>
      <licenses>
        <license>
          <name>The Go license</name>
          <url>https://golang.org/LICENSE</url>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.re2j/re2j@1.1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://github.com/google/re2j</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>http://github.com/google/re2j/issues</url></reference><reference type="vcs"><url>http://github.com/google/re2j.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.hadoop/hadoop-auth@3.3.4?type=jar">
      <publisher>Apache Software Foundation</publisher>
      <group>org.apache.hadoop</group>
      <name>hadoop-auth</name>
      <version>3.3.4</version>
      <description>Apache Hadoop Auth - Java HTTP SPNEGO</description>
      <hashes>
        <hash alg="MD5">2b41138db514467319833b606559a14f</hash>
        <hash alg="SHA-1">c5e22136356e17daac21873c730ea1435f761e9d</hash>
        <hash alg="SHA-256">14c23319d5ce872706998e9bd0f8671e0b6b01e3bfc782d3e89333a243cc8f6e</hash>
        <hash alg="SHA-512">097e24586130e14b96bb5be53acbab47417acd4f2683950d8265e509d22c0da409cebbbbbe42a8bb615fcc1ba4ca6553d90dd9a1db4e8b4050e747aee0757956</hash>
        <hash alg="SHA-384">e45b554789fa8e8b2e35d9487434b2d02d67dd1b8db90cc0c794a4f96cafeadc1c6bbf2c8af460631c074ea065619a11</hash>
        <hash alg="SHA3-384">5ffaa69944e06fec033eadd64137fe3731c1d5b44ee64a73172de762613df67d43ca54be9bc6246a7fc7a984eab17282</hash>
        <hash alg="SHA3-256">5f2d350f5ce1e4e62baf9962b99c3ddbdd5b57a5adaaa31ceb4617eda0d5f994</hash>
        <hash alg="SHA3-512">f6866dc01df6ee3147f4009a90f834bcb7d601f88a819f2286dbc7d070de6fc4bbc30a48a89fb883d1b26d768517498ce6d95748cc26f5c9a25ab70e5c8e39f4</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.hadoop/hadoop-auth@3.3.4?type=jar</purl>
      <externalReferences><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.kerby/kerb-core@1.0.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.kerby</group>
      <name>kerb-core</name>
      <version>1.0.1</version>
      <description>Kerby-kerb core facilities</description>
      <hashes>
        <hash alg="MD5">545c60f29fc4d57a1e50e3be72c88fe0</hash>
        <hash alg="SHA-1">82357e97a5c1b505beb0f6c227d9f39b2d7fdde0</hash>
        <hash alg="SHA-256">4db26bc4a106603044d8883f7280abc803b055b36f5c510a3fffc41e5de4c651</hash>
        <hash alg="SHA-512">76d63f27c1446c7e3394b7778f8839f19d86755b6aff2941526276bfa06b89c32c3dca1698b964cdc24a8b217a4ac4125a32f6aa051fce1183c37a3ac323fcd3</hash>
        <hash alg="SHA-384">85c6dc3fe4c582e5fdd3e084be158c67f31e93836ed7167205069f369884b1427fafef519182d0565bf92544aeabe626</hash>
        <hash alg="SHA3-384">87c952c555981cccd0523354d79dc072bd279eb1e276fcd94155f8fc72b982890c64cc7daff0f3d3b23a4abe0039c3aa</hash>
        <hash alg="SHA3-256">9287aea565531a53a6d4321c2a930ca6114277c09be70e01ca5e498edd7c24c9</hash>
        <hash alg="SHA3-512">7a53261c96600b7946fa3fc29f65566738cd4153b6fbe3c7551fef460d167c976174e3e2f8d2d4c6dd7be668804b84d09a916ec55165edce6a8389faa18e8b00</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.kerby/kerb-core@1.0.1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://directory.apache.org/kerby/kerby-kerb/kerb-core</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/directory-kerby/kerby-kerb/kerb-core</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.kerby/kerby-pkix@1.0.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.kerby</group>
      <name>kerby-pkix</name>
      <version>1.0.1</version>
      <description>Kerby PKIX Project</description>
      <hashes>
        <hash alg="MD5">4f99a872b054dead71460c3ed3bca6ac</hash>
        <hash alg="SHA-1">4c1fd1f78ba7c16cf6fcd663ddad7eed34b4d911</hash>
        <hash alg="SHA-256">0410bc1950b57f4792ea6b86df59a2ee87e4ad69b33a17ded438e6686894346a</hash>
        <hash alg="SHA-512">b54347dc0e3f56cf9a9068dc39c8838368067920291520ba4df59184faf3eee43898d6d0d50cbcfce3111bf2c3bd1a5cb31ef1bc2ac47f1bb1e216ae39444d2f</hash>
        <hash alg="SHA-384">9e66f1d910deb0eaa3dba289811423b23fdf2d362287b3dd3cad8a63737303ded842a2a7d67255900413b15ad82e2937</hash>
        <hash alg="SHA3-384">3a1c35a54c2419610a1ce91542e339f156497621c0b4ebeb2dcf63fb4ff2f5dd7545d88ae4a7de513fe5d6e226293bcc</hash>
        <hash alg="SHA3-256">8be36b331e2c1712ed835bc915edcc880d880951114c323b5d318408ce118b42</hash>
        <hash alg="SHA3-512">3366dbb93faa59ddc9c9dae72a05c8ad1a52a28cbfa7f42ddd6d243a2f6b5e2189d639f7507b26d955e37eeb9ea1feed769694a8b370dca995636995fe86c5ac</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.kerby/kerby-pkix@1.0.1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://directory.apache.org/kerby/kerby-pkix</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/directory-kerby/kerby-pkix</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.kerby/kerby-asn1@1.0.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.kerby</group>
      <name>kerby-asn1</name>
      <version>1.0.1</version>
      <description>Kerby ASN1 Project</description>
      <hashes>
        <hash alg="MD5">95c31186c0ec12b85bde99e286fe2f8c</hash>
        <hash alg="SHA-1">d54a9712c29c4e6d9d9ba483fad3d450be135fff</hash>
        <hash alg="SHA-256">010a3c33e5b652f11cb29a6e66826a24331e526cf58662dccb4d6695fc6ca59d</hash>
        <hash alg="SHA-512">db962f4aa3a8eb21c36badf1f268d1d68c2e95179f64f7d14fdaaa9b912af0edc989a58a79924c44a56f544b0b68df6de6d6e3bb4f8aa53aa37afc2767cb0684</hash>
        <hash alg="SHA-384">31997848a8dbae5fa350bcf6804603e4c24d3377d0d7ea2f8b07b250fc0cce9d8f7c7f5b7e08831b947e7e4a387c3d7a</hash>
        <hash alg="SHA3-384">65f9d92144d0995d68ab856c3098eeddaa9ee7eea7e753733f6ffa35a206795d6210e04900134e271be70016b2d92af0</hash>
        <hash alg="SHA3-256">46e0f7875638adf82fddcc92ec825c6bf252b11d4a2fcfe580ebed38e2f113fc</hash>
        <hash alg="SHA3-512">c81a17a79b83db92177df9fd2124acec97b8d838f3d146146ef1612d8797d2a4ee44a2b4284d8fa619d64799e064259c2828b37f1b20afb4282f2e475a8a4a4c</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.kerby/kerby-asn1@1.0.1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://directory.apache.org/kerby/kerby-common/kerby-asn1</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/directory-kerby/kerby-common/kerby-asn1</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.kerby/kerby-util@1.0.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.kerby</group>
      <name>kerby-util</name>
      <version>1.0.1</version>
      <description>Kerby common util, without any 3rd party dependency</description>
      <hashes>
        <hash alg="MD5">21974b90e4e4d096b526268712dfd4cb</hash>
        <hash alg="SHA-1">389b730dc4e454f70d72ec19ddac2528047f157e</hash>
        <hash alg="SHA-256">db7e2f329e160aaac305268ccb7287c16cf5542cffdd786a8592212df7c315aa</hash>
        <hash alg="SHA-512">30de762e56e57f3b3d54c71ce80046fbbeb67795b8d5cdc493ad239271f2cddc1a9c485d6b49d1b8b970af37bd45fc424adc85684540127a1b4d7da08f8a82b8</hash>
        <hash alg="SHA-384">95c1891ff1e817767106ac887357d20f37de0e905a4fd3aee8e726d38b842f95ed30988ab905dfcf194d727621c10eec</hash>
        <hash alg="SHA3-384">eb02124b464073942eb37e2661599c5f814ad0652f13395b39ef9d552f4ebd068f686e1cc617f02f4a0fdf4904e47a3a</hash>
        <hash alg="SHA3-256">83ecfb600dd3d0923f0229c2fc18a2deef12a5550ff961fc8bf149fc54f10524</hash>
        <hash alg="SHA3-512">7103c01f884bcbfb23f5c794007ad6f3b7f90e8a578e6545b178d6f787ece30ae98f605b5e5de6be78b5ccd3e9d421f1cfcc9b32a9242230a34a05425973bc11</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.kerby/kerby-util@1.0.1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://directory.apache.org/kerby/kerby-common/kerby-util</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/directory-kerby/kerby-common/kerby-util</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.15.3?type=jar">
      <publisher>FasterXML</publisher>
      <group>com.fasterxml.jackson.core</group>
      <name>jackson-databind</name>
      <version>2.15.3</version>
      <description>General data-binding functionality for Jackson: works on core streaming API</description>
      <hashes>
        <hash alg="MD5">5f453c55f127690fa8491ce347aa055c</hash>
        <hash alg="SHA-1">a734bc2c47a9453c4efa772461a3aeb273c010d9</hash>
        <hash alg="SHA-256">c3c53333a2172a80678bda1803e39cff45bec6ae3e9c7d4f44a81ec4e2ab18dc</hash>
        <hash alg="SHA-512">490ccc99a9c28238fe28455bae08196b83df034cae8a1947d27ff89e500a5d812cf4be36c61942e647c62ad540d8eb4428f49855f0cc8db0ee9e7a5b12ba2454</hash>
        <hash alg="SHA-384">b53f4a6fddbf677a8d02c65e9f0a96372140c68286d68740987fb462f946de878abaeea421d3e4716751f04d88c16ad1</hash>
        <hash alg="SHA3-384">5a407605544e303abf8a212651bf5e5594fa313804a399bf03401f449c0baf26ef965def518b05c275b2f38f18457739</hash>
        <hash alg="SHA3-256">d0880002ac261d181e663499627fcce5763f3a9120bb76e758adfb9939d17c98</hash>
        <hash alg="SHA3-512">e97bfe0e9117dad82e0799cb2c105c4553c6aa5ce9abdefee4fd5b584876555309aafa9a19ca586e928e292e32f23452849a10da7364966e11e4f7afcc6aec78</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.15.3?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/FasterXML/jackson</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/FasterXML/jackson-databind/issues</url></reference><reference type="vcs"><url>https://github.com/FasterXML/jackson-databind</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.15.3?type=jar">
      <publisher>FasterXML</publisher>
      <group>com.fasterxml.jackson.core</group>
      <name>jackson-annotations</name>
      <version>2.15.3</version>
      <description>Core annotations used for value types, used by Jackson data binding package.</description>
      <hashes>
        <hash alg="MD5">f478f693731e4a2f0f0d3c7bba119b32</hash>
        <hash alg="SHA-1">79baf4e605eb3bbb60b1c475d44a7aecceea1d60</hash>
        <hash alg="SHA-256">aae865c3d88256d61b11523cb1e88bd48d5b9ad5855fa1fc859504fd2204708a</hash>
        <hash alg="SHA-512">c496afd736fa8acbf8126887e2ff375f162212f451326451fbb4b9194231d814e25bccacbaead9db98beec454f6b8d9ed706c5c88e2145bf7e1a37e13fd81af0</hash>
        <hash alg="SHA-384">13b4d153cc113a69008147974d8887f868f2f3f0a551ef0bacaccf0add17a3168465a94a471e075913f9c6649980a3cb</hash>
        <hash alg="SHA3-384">dcf8ed73f748eb32e1ab25eba3c294344cc0ddb2cc7bb4376814f1866df42c3093f1336291ce9ed9e1c8730663e0017c</hash>
        <hash alg="SHA3-256">59f42bc85ee3a8a5b422085b0462aed2a770cf52d7a3660f2cd6dd257ec6e694</hash>
        <hash alg="SHA3-512">1d1a6fd0e6851d419e79f82170f4060981c233ec8dc61656b84ce7988e9b71bbeecd7364cdadac066ddaf0b3de4dc8aa5acc411ebd1641f549a3af5ba214667b</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.15.3?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/FasterXML/jackson</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/FasterXML/jackson-annotations/issues</url></reference><reference type="vcs"><url>https://github.com/FasterXML/jackson-annotations</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.fasterxml.jackson.core/jackson-core@2.15.3?type=jar">
      <publisher>FasterXML</publisher>
      <group>com.fasterxml.jackson.core</group>
      <name>jackson-core</name>
      <version>2.15.3</version>
      <description>Core Jackson processing abstractions (aka Streaming API), implementation for JSON</description>
      <hashes>
        <hash alg="MD5">c86c75392bf138d54d2a219bb1d0cbcd</hash>
        <hash alg="SHA-1">60d600567c1862840397bf9ff5a92398edc5797b</hash>
        <hash alg="SHA-256">51fab7aad51ed588482edc507fd542747936c5094d1ab76ed21ddb63b96b610d</hash>
        <hash alg="SHA-512">112de40a31dc7d011f256f1d2fe0d9e2afc301a1f31974318f8d070c3e362b2ba96005167384244f630b915451db6694bd3cf6a9b793872351bc18f21c9de5e4</hash>
        <hash alg="SHA-384">9daaf08467525e462234c53ddbf7287bcef15d8df7fbc64bcd558a91d11e8335b3a79368d194b126d3c8fb846800025b</hash>
        <hash alg="SHA3-384">0b4fdc8d11fc060461e74e773fce2e64d1a98bed7db6edf51784bb1b801da4bae744a2958e81c2e24cb992fec892fb6c</hash>
        <hash alg="SHA3-256">751ad4f10a78cb36fccbbe1dfe208816f17619edd5adeabc86b7509201e03c3d</hash>
        <hash alg="SHA3-512">aa5807b7d92d150fada6a4ecdbfce998bbea825a09af8381127ba3736de029ae9923f54d770b2e5c3f5c85d9b4bcf21e6893a5a3089db2d02f1432b85dfa0fe7</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.fasterxml.jackson.core/jackson-core@2.15.3?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/FasterXML/jackson-core</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/FasterXML/jackson-core/issues</url></reference><reference type="vcs"><url>https://github.com/FasterXML/jackson-core</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.codehaus.woodstox/stax2-api@4.2.1?type=jar">
      <publisher>fasterxml.com</publisher>
      <group>org.codehaus.woodstox</group>
      <name>stax2-api</name>
      <version>4.2.1</version>
      <description>tax2 API is an extension to basic Stax 1.0 API that adds significant new functionality, such as full-featured bi-direction validation interface and high-performance Typed Access API.</description>
      <hashes>
        <hash alg="MD5">af8377bc7882332e22456616a9f164f6</hash>
        <hash alg="SHA-1">a3f7325c52240418c2ba257b103c3c550e140c83</hash>
        <hash alg="SHA-256">678567e48b51a42c65c699f266539ad3d676d4b1a5b0ad7d89ece8b9d5772579</hash>
        <hash alg="SHA-512">00efc5d4d17540fb180c5b20d456630a8b3262dff46676689ae916ba16f0fbd9b1a71c7badfb254faad6597f94fed1edb96f77c15f40178eaf4d8cd35cea5e8d</hash>
        <hash alg="SHA-384">97a6a9f0cc666776e4a4f08729c303d2a602ce5c25ee633cd6c54c72f12d11e9d43634ca6ca4ef7da5973a52030384da</hash>
        <hash alg="SHA3-384">683a1f110ab84333e7517dabe175b91d7ea2fbead2f9d02acf798c588a7508bc67580642afa8d57441bc56ce610d5b0f</hash>
        <hash alg="SHA3-256">5e8e54209fb6b580e928e703ef11645aff1a21dfd47cca2dc0e53d0befaef09c</hash>
        <hash alg="SHA3-512">d79338a481605c94e144c967cb7adbc6cfd06ee6a1182b5ebc8cd8ad3deedd707931e404aa197bc94d3b5a5d82a2e6dd6a2f6cc9dafc42ce3ad5061076b05199</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-4-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.codehaus.woodstox/stax2-api@4.2.1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://github.com/FasterXML/stax2-api</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/FasterXML/stax2-api/issues</url></reference><reference type="vcs"><url>http://github.com/FasterXML/stax2-api</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.fasterxml.woodstox/woodstox-core@5.3.0?type=jar">
      <publisher>FasterXML</publisher>
      <group>com.fasterxml.woodstox</group>
      <name>woodstox-core</name>
      <version>5.3.0</version>
      <description>Woodstox is a high-performance XML processor that
        implements Stax (JSR-173), SAX2 and Stax2 APIs</description>
      <hashes>
        <hash alg="MD5">89fb07387e448325eacc9c642e3d69af</hash>
        <hash alg="SHA-1">59a3a7fb46a364ee383ea7e8c67c152a224b3d99</hash>
        <hash alg="SHA-256">b2bd29c31fda49a9b28a22b9e5c2b26443bcfa99c1a28eab70ab9c7d349b5002</hash>
        <hash alg="SHA-512">a9e981b270cef762d2077522f158287141cc47a3d2705f7d03349390bfc12e2dc33641cab6278678e7225087d8e5a9a891f396e958ea1527628d7e8edf833ae2</hash>
        <hash alg="SHA-384">e653d5f0a2802aeb1e98e19d453850567c77fb31a3dfff41af953d2cd198d1a3fc374fb1c82f63a92bb5dd120b9f576a</hash>
        <hash alg="SHA3-384">e4608171de5487c5e33d11b46f72450f6773f650c89bead729ec0c87e34de27367b3fb739f0b8b6e476c2bfeed2bb2b9</hash>
        <hash alg="SHA3-256">5c95c04690fa6ea1614a08003e25a67cb184d4c983497ca9cd3171807e011515</hash>
        <hash alg="SHA3-512">1769c8c0efcdf1d893ba717e448b697d0c64ad1474997184f55cd65ca613b255288345dbc3e9a6dc569f07556209d6afdc2689b76d9b1b584a2d3b489767cbff</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.fasterxml.woodstox/woodstox-core@5.3.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/FasterXML/woodstox</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/FasterXML/woodstox/issues</url></reference><reference type="vcs"><url>https://github.com/FasterXML/woodstox</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/dnsjava/dnsjava@2.1.7?type=jar">
      <group>dnsjava</group>
      <name>dnsjava</name>
      <version>2.1.7</version>
      <description>dnsjava is an implementation of DNS in Java. It supports all defined record types (including the DNSSEC types), and unknown types. It can be used for queries, zone transfers, and dynamic updates. It includes a cache which can be used by clients, and a minimal implementation of a server. It supports TSIG authenticated messages, partial DNSSEC verification, and EDNS0.</description>
      <hashes>
        <hash alg="MD5">11363bd58696feae207a992da2ce7a90</hash>
        <hash alg="SHA-1">0a1ed0a251d22bf528cebfafb94c55e6f3f339cf</hash>
        <hash alg="SHA-256">2c52a6fabd5af9331d73fc7787dafc32a56bd8019c49f89749c2eeef244e303c</hash>
        <hash alg="SHA-512">894eba65ee1784d9f8094ad1abc6cf3ae60251fa40c634e1393943b86f95f59713b8e4ff124beb46da44b8c3649b5c2ff0f1bc9ba42d1a28a84470d5d1f5d745</hash>
        <hash alg="SHA-384">b969893293770c1f8082f9de012ad334d9c321f3a7a690c0a31df78ce3042fdd70c73c6bb1351aee88329d3d71632b61</hash>
        <hash alg="SHA3-384">8486358039cce8a470cc84c8004fbefedc7ba5a42a6b70e19eadb68fa8b55b482c4e39c7f9b417402f2f29165928dcc8</hash>
        <hash alg="SHA3-256">5ed0c9e3e71420c544f275bb7bfe88337fe6ee0bec3cee5765697c8a2c363f22</hash>
        <hash alg="SHA3-512">2ce433f6b979a463ce5a4499a09203ab3ac950a13b60bd5db2550eb67637274aa305f291aee31ee0cbd142960eca8bd3bc0d9f066ddf6f77408e1904b15851aa</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-2-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/dnsjava/dnsjava@2.1.7?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.dnsjava.org</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/dnsjava/dnsjava</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.confluent.flink/flink-hadoop-fs@1.19.2-cp2?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>io.confluent.flink</group>
      <name>flink-hadoop-fs</name>
      <version>1.19.2-cp2</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">d07efa137e472cd60e46f15915185317</hash>
        <hash alg="SHA-1">ad2684048bcfa752bdc12bb9b79097672a25c5a4</hash>
        <hash alg="SHA-256">4d00431ee5343ed34c245ed0d3989d2eeed7798ff31190ffadc209a5a6397e68</hash>
        <hash alg="SHA-512">10b8fd27a17369ece201e4785d2a144aad88e46b7a3d1f06e829a35ce5222518065156f7b7fac708b55febb18d1fc88d3b0373e0fda5eafbcb30c3024df9b4bb</hash>
        <hash alg="SHA-384">9e685e5a5e2c162681aa4a7f3e52e701fd98df5e7c6e1d4d64f0457cc5a3c20a82ab1b42705afcd21dc73f7a733dd575</hash>
        <hash alg="SHA3-384">668c6920ba2c7c4dceca62c4eeaae30bab2d8fe54adcbe840dc50ac2ea309c5659a23a46d30234094fc232f275b8f290</hash>
        <hash alg="SHA3-256">79a580768606c51dd0357d496e0e9b9a28feb2416cd7c7783b065f5bdad86f91</hash>
        <hash alg="SHA3-512">670e161cd79b5ce044fedc4ea9b5d38dc69b37a661551e8fb686c053dacb079dfd403245cd0bc67cce4328b0a643577878249be6c5a9e421296d780f032e1021</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.confluent.flink/flink-hadoop-fs@1.19.2-cp2?type=jar</purl>
      <externalReferences><reference type="website"><url>https://flink.apache.org/flink-filesystems/flink-hadoop-fs</url></reference><reference type="distribution"><url>s3://cp-flink-staging-654654529379-us-west-2/maven-staging/e376491b71b31739887d29e34e6552860f69668d</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink/flink-filesystems/flink-hadoop-fs</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.amazonaws/aws-java-sdk-core@1.12.779?type=jar">
      <group>com.amazonaws</group>
      <name>aws-java-sdk-core</name>
      <version>1.12.779</version>
      <description>The AWS SDK for Java - Core module holds the classes that are used by the individual service clients to interact with Amazon Web Services. Users need to depend on aws-java-sdk artifact for accessing individual client classes.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">9023eb9c01d46568e1f07774d538be9e</hash>
        <hash alg="SHA-1">d33131fafcee508aceb3b51c518adf26be03ec63</hash>
        <hash alg="SHA-256">6e6e659bf1ed737be1f2bfc5d144009ecb5c7842044da8d0a583990dfcdbb1cf</hash>
        <hash alg="SHA-512">32dc08f38845fbeb691252864cb83d123f148e6464de721113033bf77280eb718fbd46cd57344b31b49e49c82ada35e1c33ec09d1d3a4672c3e5c7cedb0ec01e</hash>
        <hash alg="SHA-384">177cf99c4202e639d23f479110a46bf395951f76710a83649d9062458cd16d6b784860c4ce24ca5b4979af03703a5eb4</hash>
        <hash alg="SHA3-384">255b3102a7893261681984b302854cb6fba592520ebb99c7db33bd4ce538595e92af6b24617a84a7991a313c76c75f78</hash>
        <hash alg="SHA3-256">1deab82fb96718e60aa0f89b33653056234cdffe125a150c5f1bd20043a784e0</hash>
        <hash alg="SHA3-512">99eb972ceee72777a21f9798a2fb4de267c5683cc56a360504ceff646eed52676c20b847b4c422f67387de86f2f9527cc717dc701d683ef12ec6f2222aba29eb</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.amazonaws/aws-java-sdk-core@1.12.779?type=jar</purl>
      <externalReferences><reference type="website"><url>https://aws.amazon.com/sdkforjava</url></reference><reference type="vcs"><url>https://github.com/aws/aws-sdk-java/aws-java-sdk-core</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-codec/commons-codec@1.15?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>commons-codec</group>
      <name>commons-codec</name>
      <version>1.15</version>
      <description>The Apache Commons Codec package contains simple encoder and decoders for
     various formats such as Base64 and Hexadecimal.  In addition to these
     widely used encoders and decoders, the codec package also maintains a
     collection of phonetic encoding utilities.</description>
      <hashes>
        <hash alg="MD5">303baf002ce6d382198090aedd9d79a2</hash>
        <hash alg="SHA-1">49d94806b6e3dc933dacbd8acb0fdbab8ebd1e5d</hash>
        <hash alg="SHA-256">b3e9f6d63a790109bf0d056611fbed1cf69055826defeb9894a71369d246ed63</hash>
        <hash alg="SHA-512">da30a716770795fce390e4dd340a8b728f220c6572383ffef55bd5839655d5611fcc06128b2144f6cdcb36f53072a12ec80b04afee787665e7ad0b6e888a6787</hash>
        <hash alg="SHA-384">05d0506283716472175d44c2a4766523397bf8a007c18848f9c9a61718cc8aa437f9cb4b91771037ab29a960860b62a0</hash>
        <hash alg="SHA3-384">12fad4ef78274b06f97b1243cea6f970088abde082d2de9377d915a34b44f7d7d67807c03e59c849b69f1544e2a9a1be</hash>
        <hash alg="SHA3-256">87be248f33f241121f54aad61a9a460a79eabefbf1b5b0dd22aeb95b581f727e</hash>
        <hash alg="SHA3-512">8c992c9c569ebaa0bf956a4c5b34fbf5e1ed1c212c2dd896fa216183ee0bcd341e96698af4b9cec7e8880762faa081a3d3a27f51349aa457cb8e373e4f57c788</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/commons-codec/commons-codec@1.15?type=jar</purl>
      <externalReferences><reference type="website"><url>https://commons.apache.org/proper/commons-codec/</url></reference><reference type="build-system"><url>https://builds.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/CODEC</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>https://github.com/apache/commons-codec</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.httpcomponents/httpclient@4.5.13?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.httpcomponents</group>
      <name>httpclient</name>
      <version>4.5.13</version>
      <description>Apache HttpComponents Client</description>
      <hashes>
        <hash alg="MD5">40d6b9075fbd28fa10292a45a0db9457</hash>
        <hash alg="SHA-1">e5f6cae5ca7ecaac1ec2827a9e2d65ae2869cada</hash>
        <hash alg="SHA-256">6fe9026a566c6a5001608cf3fc32196641f6c1e5e1986d1037ccdbd5f31ef743</hash>
        <hash alg="SHA-512">3567739186e551f84cad3e4b6b270c5b8b19aba297675a96bcdff3663ff7d20d188611d21f675fe5ff1bfd7d8ca31362070910d7b92ab1b699872a120aa6f089</hash>
        <hash alg="SHA-384">093ac3e2dde58e34aa70309c7305eb3c9b5be2509a9293f1672494da55479a86bd112e83326746dc7a32855472952b99</hash>
        <hash alg="SHA3-384">cd6882e7868624164e460f2f3ea01466f863c0dcb902b031c656b57356f563be83b29530df41d88d634ed3d01fc9964d</hash>
        <hash alg="SHA3-256">710b1d8d7dae0b8e4270756694ca9c83d64965f42d3b4170c609b14d47c2762c</hash>
        <hash alg="SHA3-512">276fa6a6599dc89382d658115695cf4da6b0d39b34e9c349c17a5dbd64122eaee553bb9ed75c0378ec4a83be157c8aa39370662de3c9b8fd55ebc1dd608383e6</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.httpcomponents/httpclient@4.5.13?type=jar</purl>
      <externalReferences><reference type="website"><url>http://hc.apache.org/httpcomponents-client</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/HTTPCLIENT</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/hc-httpclient-users/</url></reference><reference type="vcs"><url>https://github.com/apache/httpcomponents-client/tree/4.5.13/httpclient</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.httpcomponents/httpcore@4.4.14?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.httpcomponents</group>
      <name>httpcore</name>
      <version>4.4.14</version>
      <description>Apache HttpComponents Core (blocking I/O)</description>
      <hashes>
        <hash alg="MD5">2b3991eda121042765a5ee299556c200</hash>
        <hash alg="SHA-1">9dd1a631c082d92ecd4bd8fd4cf55026c720a8c1</hash>
        <hash alg="SHA-256">f956209e450cb1d0c51776dfbd23e53e9dd8db9a1298ed62b70bf0944ba63b28</hash>
        <hash alg="SHA-512">f16a652f4a7b87dbf7cb16f8590d54a3f719c4c7b2f8883ce59db2d73be4701b64f2ca8a2c45aca6a5dbeaddeedff0c280a03722f70c076e239b645faa54eff9</hash>
        <hash alg="SHA-384">1cd0a3c120cfb4974573b0f499b2ac8a200aa43506777ed09f9806c6899541605fd355a3b5f44977517dd1cb463e808b</hash>
        <hash alg="SHA3-384">c771301cda89b2c102b76ba7b46222e0ee1898fa1e53fd4d43a7994e4a234a9804f7221feafe0259f0e9db164a5d4576</hash>
        <hash alg="SHA3-256">97a9e2fcd1946204dd8643e504c0ff73904957da5df605d703734f95345d5816</hash>
        <hash alg="SHA3-512">ee6045c3724c2a4983330cf9bc57a46c0fcfc252be455a864953ef5c538ea4aab399c4315f7e5b1a315a48bb8f11cc7492e0735615fd68aa3981fa3ddb4d0a98</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.httpcomponents/httpcore@4.4.14?type=jar</purl>
      <externalReferences><reference type="website"><url>http://hc.apache.org/httpcomponents-core-ga</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/HTTPCORE</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/hc-httpclient-users/</url></reference><reference type="vcs"><url>https://github.com/apache/httpcomponents-core/tree/4.4.14/httpcore</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-cbor@2.15.3?type=jar">
      <publisher>FasterXML</publisher>
      <group>com.fasterxml.jackson.dataformat</group>
      <name>jackson-dataformat-cbor</name>
      <version>2.15.3</version>
      <description>Support for reading and writing Concise Binary Object Representation
([CBOR](https://www.rfc-editor.org/info/rfc7049)
encoded data using Jackson abstractions (streaming API, data binding, tree model)</description>
      <hashes>
        <hash alg="MD5">0e6ec765d6473a48face5d8e36cf69c4</hash>
        <hash alg="SHA-1">c30a4e69e760401a98b9fa458a4f2db6fe392d7f</hash>
        <hash alg="SHA-256">b8c7ae4a9d82e3fd0aecfd4599f42eaf503d0faf99e2f97abfb8b2c33bc09da7</hash>
        <hash alg="SHA-512">51e980ef8e4f286ac5d1795a576f4795400944a781aa43405b44831b8ce51d9a92c8e1c9d1ab71a4a643aa6d7fe31552707ea73441bb95fd1fa8d994ff31d6dd</hash>
        <hash alg="SHA-384">6cf83a86dfe7713203e0999a41676881bc8b774d6a2be1bd408bafdaade21adefe886fd00ef7f563ae4fc8cdbf613214</hash>
        <hash alg="SHA3-384">d215c87c7ea5ca15a537079b06a5b377456172a3ea543604bb64a8a272dd61f91da06a4e471ac263aa3180da0e7f6d62</hash>
        <hash alg="SHA3-256">39a5084899dd2443f57baab7d0eae0ba8b4cae6f3f3118708edc5c8cc324738c</hash>
        <hash alg="SHA3-512">e6876a9cb6ffa6b60c51feb0b8a36c4b427841d6a2a640cfb0693083f8b4f8f4847bbc08b073d64fbf895c671a10b7842a24043e418e0c00fba5a620519b2447</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-cbor@2.15.3?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/FasterXML/jackson-dataformats-binary</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/FasterXML/jackson-dataformats-binary/issues</url></reference><reference type="vcs"><url>https://github.com/FasterXML/jackson-dataformats-binary/jackson-dataformat-cbor</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/joda-time/joda-time@2.5?type=jar">
      <publisher>Joda.org</publisher>
      <group>joda-time</group>
      <name>joda-time</name>
      <version>2.5</version>
      <description>Date and time library to replace JDK date handling</description>
      <hashes>
        <hash alg="MD5">c18e34f88c183cb21bbb693b3505e7d2</hash>
        <hash alg="SHA-1">c73038a3688525aad5cf33409df483178290cd64</hash>
        <hash alg="SHA-256">f75a29b82613411c9be37d419658e044179f1bf6b91d8786a4a49407531425b6</hash>
        <hash alg="SHA-512">77ebe5b92875140002fda1e4d7b05893fe603b019aa1257c44cf09c920fee8998b538bc0d8fb0d76171d65b8b3d752e95d1667db2d0cf21e2250fa9e09b822f6</hash>
        <hash alg="SHA-384">e5d4f8119f1feeb3dd15d2a1b3f02646629ecad98db64f084ac76a2143d324f489ad0558f2d6530490bbc9e9e172d4e3</hash>
        <hash alg="SHA3-384">dfa7953c96932762988727d71ed4518f26c77a2f3ffb8fb871a48307240afcd09fa7209ab62f15b1b9018a91d6f1a348</hash>
        <hash alg="SHA3-256">e2c4322160dd78f49245b7191a2bfc7c920cc7609450b5b63c0ea31e493a69b5</hash>
        <hash alg="SHA3-512">bb66cfe4a4107075cdf5d1dd13ea6174eb89701d82d831805480b22fd95e5648b867763268e4d67e006b2ac85589a1c32a0258dc82f693f4acd6cd9f2499c263</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/joda-time/joda-time@2.5?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.joda.org/joda-time/</url></reference><reference type="distribution"><url>http://oss.sonatype.org/content/repositories/joda-releases</url></reference><reference type="issue-tracker"><url>https://github.com/JodaOrg/joda-time/issues</url></reference><reference type="mailing-list"><url>http://sourceforge.net/mailarchive/forum.php?forum_name=joda-interest</url></reference><reference type="vcs"><url>https://github.com/JodaOrg/joda-time</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.amazonaws/aws-java-sdk-s3@1.12.779?type=jar">
      <group>com.amazonaws</group>
      <name>aws-java-sdk-s3</name>
      <version>1.12.779</version>
      <description>The AWS Java SDK for Amazon S3 module holds the client classes that are used for communicating with Amazon Simple Storage Service</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">334fa2e68244cc251f1097fa305da68f</hash>
        <hash alg="SHA-1">3280fa3c59817acdee6b06ea11fcd607c4386288</hash>
        <hash alg="SHA-256">729dfe21ec982c66e8377c705a7b744070ad3cbbd33693e9b14b9678c370abc5</hash>
        <hash alg="SHA-512">2bef3579da2e0f5c7aa6dfc4fab8d39b7c253044b7a30b29d8ef87866b08c544d3e70bf19d2f00d502c0415cb88160b305ae00f61d50b178800a5ed27bba51d0</hash>
        <hash alg="SHA-384">0d90cb2c54dc35d94fed96825b473c5e2e09c8087ff473eb81d9031b3619c9a022aaea7d024e289f5fd7a89ac31a691f</hash>
        <hash alg="SHA3-384">d6862986e0a5fa2812d51c0b768e4817e38fa2e4bb4d1284c34aef304413376262920826fc4bd0a8318eb8d05880597e</hash>
        <hash alg="SHA3-256">a4ac6602ddc5725c0bf436f05bc8371d0b879f0bf7f0dfd03f1d61b8dbda945c</hash>
        <hash alg="SHA3-512">6bf6510456bcc46cd66f90698aff74df618a6bc3b71f1cd1d3eb387ab25d39faa5c3bf9365991d65a5c0a4d5038a0da4a172547e2c9b549ecef3e6eff9699d1c</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.amazonaws/aws-java-sdk-s3@1.12.779?type=jar</purl>
      <externalReferences><reference type="website"><url>https://aws.amazon.com/sdkforjava</url></reference><reference type="vcs"><url>https://github.com/aws/aws-sdk-java/aws-java-sdk-s3</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.amazonaws/jmespath-java@1.12.779?type=jar">
      <group>com.amazonaws</group>
      <name>jmespath-java</name>
      <version>1.12.779</version>
      <description>Implementation of the JMES Path JSON Query langauge for Java.</description>
      <hashes>
        <hash alg="MD5">264bd39001803aa8300f014f693a162a</hash>
        <hash alg="SHA-1">56d4e644c5923b452ab7571fd1b71c709e504d72</hash>
        <hash alg="SHA-256">f8f99c27a9076395ebdc9563c3a11a9341267553eb66f01bf5f13a933f05ba63</hash>
        <hash alg="SHA-512">0fdef32b61636a3ad861226b2f85a1810175ee2fb5a3e065e8c368375f4dc80055d6ee731d6b5f9b89e183bcc50d6c17f7a95326bf59bd2a9eaa6b8087af726e</hash>
        <hash alg="SHA-384">1c3a8623cfafc935f5550d207796eadff65383c12d217d6afa6b686904782a41d03b2bd76dd11d1e6bfddb0704278d35</hash>
        <hash alg="SHA3-384">3e7e3980d2f893ec996a85731b168aed90d070b29baafd229c1ba7a05d17a5784f4278a84b85a84ab0e51cd37bf95913</hash>
        <hash alg="SHA3-256">1443f13f2d27d95bf8c3fc6781043a2a7471e881ebaa38f6e835867786dcc43e</hash>
        <hash alg="SHA3-512">a8a6217718a4a3a5d2c0b41a405370f7d90291b0e0ea99f99587e5c265c1c4337e3903b50ddba28942f58a64d57f0e5a05426e36cd27c3fa4fdb27e2f2ca5ba0</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.amazonaws/jmespath-java@1.12.779?type=jar</purl>
      <externalReferences><reference type="website"><url>https://aws.amazon.com/sdkforjava</url></reference><reference type="vcs"><url>https://github.com/aws/aws-sdk-java.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.amazonaws/aws-java-sdk-kms@1.12.779?type=jar">
      <group>com.amazonaws</group>
      <name>aws-java-sdk-kms</name>
      <version>1.12.779</version>
      <description>The AWS Java SDK for AWS KMS module holds the client classes that are used for communicating with AWS Key Management Service</description>
      <hashes>
        <hash alg="MD5">bd23d0de1d497b78e09398299e82d90c</hash>
        <hash alg="SHA-1">0120d00cd2b87e3fb8e47711d9873f78a9d90c9f</hash>
        <hash alg="SHA-256">ab381135f90c65aa0652bdd37ddbf5114b4e115e9cc584871e7d4ade952bff6e</hash>
        <hash alg="SHA-512">09fc53fa1fd990d36831025c1ebb5a3249d48a87bcc8cb65c7bafc5ae0189ae60f9f88c566f9e06722b665519f48a900bca79c6dd1d47b25be11aeaedee12cfe</hash>
        <hash alg="SHA-384">f51a567e1d0bd27332e9d20c02695457f20d0ae301290bb04160590b761302212394b57f906f3ec898f7555e58c51c56</hash>
        <hash alg="SHA3-384">794f6a40f3a92d211a76ad156148a476c72c26928b4a46027f71553eeeb0453c7efdf2095e3c03f5a8613e5077922cd9</hash>
        <hash alg="SHA3-256">e5383ef34148856e2bf43adc2951408288e918407f64d12f7416bc462ca64bb6</hash>
        <hash alg="SHA3-512">66b923f9c9e57e11e20d93084e7308d8455d7bbaac6cd49622ad0f13fe247edb9088cc02ec9165bd55bae53632bbe3e3ec95248b7fd307a0f558e0571eec0422</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.amazonaws/aws-java-sdk-kms@1.12.779?type=jar</purl>
      <externalReferences><reference type="website"><url>https://aws.amazon.com/sdkforjava</url></reference><reference type="vcs"><url>https://github.com/aws/aws-sdk-java/aws-java-sdk-kms</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.amazonaws/aws-java-sdk-dynamodb@1.12.779?type=jar">
      <group>com.amazonaws</group>
      <name>aws-java-sdk-dynamodb</name>
      <version>1.12.779</version>
      <description>The AWS Java SDK for Amazon DynamoDB module holds the client classes that are used for communicating with Amazon DynamoDB Service</description>
      <hashes>
        <hash alg="MD5">1ea4e27dfee7c6779e5805038b4997fb</hash>
        <hash alg="SHA-1">b0082ce7ac2f2c99486cf4b9bf95f02248f01d43</hash>
        <hash alg="SHA-256">9a21c6553144bd199a4d098fa6b73915690c9509859dc10a70a9b33d18cfd58c</hash>
        <hash alg="SHA-512">d58e729d5dec426ce55a0f83a5134750f49b9b1cac639437248c04369c128cfd417b79d3116c9cc7b20507e18f7e509ab7ccbbb4e82a8bdcb510875b9a78195c</hash>
        <hash alg="SHA-384">15aa254d63e6b3ced800c340c5e379f00982fca4d650e466595325abf1b15d193dadc36ef6b34a4f5276d84e9cb65792</hash>
        <hash alg="SHA3-384">79e51850918eaedb664342059ddb3976fd36de8a16e45c2402db4404d84010be425f591904415f6735b02ea9a408d746</hash>
        <hash alg="SHA3-256">dae6be41696e91e5acc98883e91c03324364cef0f06387be275453a40015121f</hash>
        <hash alg="SHA3-512">340ee298347f007dd583ea397b346878aa968eee0efd64c599b76631ad0c42b6c93533f2773c132642548be9e542207991508f4c95ad490aaac7c4b20c874c92</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.amazonaws/aws-java-sdk-dynamodb@1.12.779?type=jar</purl>
      <externalReferences><reference type="website"><url>https://aws.amazon.com/sdkforjava</url></reference><reference type="vcs"><url>https://github.com/aws/aws-sdk-java/aws-java-sdk-dynamodb</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.amazonaws/aws-java-sdk-sts@1.12.779?type=jar">
      <group>com.amazonaws</group>
      <name>aws-java-sdk-sts</name>
      <version>1.12.779</version>
      <description>The AWS Java SDK for AWS STS module holds the client classes that are used for communicating with AWS Security Token Service</description>
      <hashes>
        <hash alg="MD5">5f07860f66a67bee5dd67b371b41db5b</hash>
        <hash alg="SHA-1">ccad2a6f7d5691b739864ad7a2080797f96b1bde</hash>
        <hash alg="SHA-256">7eeee668580898ce7f94814d766fa7ce931105f6e82de98f452affb5f3041d3c</hash>
        <hash alg="SHA-512">e8e130a0474236242b09bc061e91dbac72a7ccaf4e0c280d932a1dac88966cad8edd02ddb1d801d7e3d00881514386d8c527c599a6d4a73b9a0840d1adab78d5</hash>
        <hash alg="SHA-384">26aabc25d8ae450ff3f56372286be186ac7a722e1d7b322cf40c36184aa101e04bb328134e384ada7d7c87a302d70208</hash>
        <hash alg="SHA3-384">2f09c0f978b918cbe98d04c7f3ad53b88da07a3faa5ccf1bbb6522349497862883ce608d3c67d4071282fd1705194c8c</hash>
        <hash alg="SHA3-256">27ba933a7beea3efbb7e7818f77feeeced6ce3e528f3db72cf8ed9bc3ae38182</hash>
        <hash alg="SHA3-512">6c76be776143669cbc4469198bf9b7d7ee464f72625b87e27cac45fd50e5812350d6a6cd13661029ca31fe531ad9d107bc0574d67d6754b902eebb6772dae5f4</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.amazonaws/aws-java-sdk-sts@1.12.779?type=jar</purl>
      <externalReferences><reference type="website"><url>https://aws.amazon.com/sdkforjava</url></reference><reference type="vcs"><url>https://github.com/aws/aws-sdk-java/aws-java-sdk-sts</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.hadoop/hadoop-aws@3.3.4?type=jar">
      <publisher>Apache Software Foundation</publisher>
      <group>org.apache.hadoop</group>
      <name>hadoop-aws</name>
      <version>3.3.4</version>
      <description>This module contains code to support integration with Amazon Web Services.
    It also declares the dependencies needed to work with AWS services.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">59907e790ce713441955015d79f670bc</hash>
        <hash alg="SHA-1">a65839fbf1869f81a1632e09f415e586922e4f80</hash>
        <hash alg="SHA-256">53f9ae03c681a30a50aa17524bd9790ab596b28481858e54efd989a826ed3a4a</hash>
        <hash alg="SHA-512">b48a67a6af0b9885c05459b81d97ec07c30e30f889f6730966771d6a6d70cb3e856c29661b17c16a62a07044a4655467d682147b52a89651a137d146181fc284</hash>
        <hash alg="SHA-384">a6eacb5f2e7c88fce177feaa0d936427be292bcc235f55ccb2088b0cedb5c21f8b31bac0a24ab41af103b3afea859652</hash>
        <hash alg="SHA3-384">e70883e43e46a3c7c1f461f4d3a4ded473d8463869865ca7d12639624da0f7855534abf69f099af3ac65f988acd441d6</hash>
        <hash alg="SHA3-256">997157e53c8b13a1a9b90b4e559f12512f3c9115e1041cc439868ea9a2f40f26</hash>
        <hash alg="SHA3-512">6c033b4ed389ae99bc8ef834a154391c962ba1bf3b2736abf4b75b3358e5d53a7cccc7fe4cae004ca1e342d5bea6a5dc77b1b4a688c2f62432ab6023dc8357ba</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.hadoop/hadoop-aws@3.3.4?type=jar</purl>
      <externalReferences><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.wildfly.openssl/wildfly-openssl@1.0.10.Final?type=jar">
      <publisher>JBoss by Red Hat</publisher>
      <group>org.wildfly.openssl</group>
      <name>wildfly-openssl</name>
      <version>1.0.10.Final</version>
      <description>Provides, via submodules, a base configuration for JBoss project builds, as well as a derived configuration supporting multi-release JARs</description>
      <hashes>
        <hash alg="MD5">9845d35ac510ed1a3bc5569a76b376d3</hash>
        <hash alg="SHA-1">e4488b778c2b335f333e691852a7d4a75f049eb1</hash>
        <hash alg="SHA-256">864776f583f4f38bd39841e1392c9d4f6f548b8261a15dcb709f62f53a0cabd2</hash>
        <hash alg="SHA-512">2bebc6e5c777f0eba95ea8d8734a453952d63f998a1a6f56ed32bfac664a3471af531feb1c37615abf5d574c38d534e2754ae60b0a4e3566ae277ff23b021010</hash>
        <hash alg="SHA-384">93f3836fffdc41b8b4f7ba613096365fc175163d691a7c8e9ee1691259ad9a606e4a219af2f6c4a3e92891848f056651</hash>
        <hash alg="SHA3-384">c1dbd065016a895d73c18828c26149d9bac23e980db2e9572e889f64f730feccd9979c36174504a3e8cbf748a0a72a71</hash>
        <hash alg="SHA3-256">22dafaea365165969640529d40a7022b29241a1b6b6d3699c749f894c2da493d</hash>
        <hash alg="SHA3-512">1528f1879548e8dfe2b6c86aa58e35c9fd4d51bbb0bcfb5a86ce1b59a2d492a738590e226c612d402ea90e7f96554d79c50fa1e5406aef596a4a1bcc6a21a4c5</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.wildfly.openssl/wildfly-openssl@1.0.10.Final?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.jboss.org/wildfly-openssl-parent/wildfly-openssl</url></reference><reference type="distribution"><url>https://repository.jboss.org/nexus/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://issues.jboss.org/</url></reference><reference type="mailing-list"><url>http://lists.jboss.org/pipermail/jboss-user/</url></reference><reference type="vcs"><url>http://github.com/jboss/jboss-parent-pom/wildfly-openssl-parent/wildfly-openssl</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.wildfly.openssl/wildfly-openssl-java@1.0.10.Final?type=jar">
      <publisher>JBoss by Red Hat</publisher>
      <group>org.wildfly.openssl</group>
      <name>wildfly-openssl-java</name>
      <version>1.0.10.Final</version>
      <description>Provides, via submodules, a base configuration for JBoss project builds, as well as a derived configuration supporting multi-release JARs</description>
      <hashes>
        <hash alg="MD5">a4ad5bc674e703f39fc25b95b1543f22</hash>
        <hash alg="SHA-1">6d11493d1202432f1d02fac6441281228729c948</hash>
        <hash alg="SHA-256">5068fa11d7557d507f17d3562b0d94b4fb4e1d89f55d48d807649f6f51dc054e</hash>
        <hash alg="SHA-512">bedac127dc591f70e4dba38e38c11ed3ac2bb7fae9f93ac7dce6925bb212b45b4c8ddcc6d6e9851f573ab906bfda9e588bcec687f6394f06cc5ab54aaf63d59f</hash>
        <hash alg="SHA-384">b7837f3713a64982ca84846e1d2a7a01f947322cf5cb5cceca9d0f98e9044fc72c7d562806fa8012f97e6f7df9a803ed</hash>
        <hash alg="SHA3-384">a54fe983ac07a5c816bb43f84e23356cc93b4138813582100004477569c7459f062d6687e233ed8cbb661abd2d7d1d00</hash>
        <hash alg="SHA3-256">63687e14dbbb10d4f2db7245b3490af3cf45c88088d43d98bcd7e62577e74d7f</hash>
        <hash alg="SHA3-512">eec2093b4acc33dd2e01df683562fbe306dc210dc6be18a547d18f6f6cc0e8ec4970e56e43984bb7afd7271b89f2d37a6f04cd53ae5f34990c03ded381ac1090</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.wildfly.openssl/wildfly-openssl-java@1.0.10.Final?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.jboss.org/wildfly-openssl-parent/wildfly-openssl-java</url></reference><reference type="distribution"><url>https://repository.jboss.org/nexus/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://issues.jboss.org/</url></reference><reference type="mailing-list"><url>http://lists.jboss.org/pipermail/jboss-user/</url></reference><reference type="vcs"><url>http://github.com/jboss/jboss-parent-pom/wildfly-openssl-parent/wildfly-openssl-java</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.wildfly.openssl/wildfly-openssl-linux-x86_64@1.0.10.Final?type=jar">
      <publisher>JBoss by Red Hat</publisher>
      <group>org.wildfly.openssl</group>
      <name>wildfly-openssl-linux-x86_64</name>
      <version>1.0.10.Final</version>
      <description>Provides, via submodules, a base configuration for JBoss project builds, as well as a derived configuration supporting multi-release JARs</description>
      <hashes>
        <hash alg="MD5">4d606ac34018aa5bc9e4d558870ce165</hash>
        <hash alg="SHA-1">ee554e1353f6bd91f1784dc039375c5da44e524f</hash>
        <hash alg="SHA-256">d8b2dd7325f984bfa14e2dcf82e824f78030e78c9baf70d8efdde0db81eebe40</hash>
        <hash alg="SHA-512">70555419dbea5a16a057dbd3f157e39d6fd04eaef9e1bd92703dac2db0047e83cc819c808a4ac71fc60efd8c65482cc1937504fee59ba5ddff24a3118283eb37</hash>
        <hash alg="SHA-384">a113f199308359fecc7545432c5807fdb6fbfe8606166a50fa7d3ab79e400f849718a3b05fce9cdb3989286aa67fc5a6</hash>
        <hash alg="SHA3-384">3071b2aec9097002649ef6c1059882b867fbef56e33b53f4b85aebb937f15850cfa05aefac7a1d04a37c173fdc19c830</hash>
        <hash alg="SHA3-256">79cf4341cd88e33bc84f75354b96fe0c33d9bcb5ead54a7e5421f8374d974296</hash>
        <hash alg="SHA3-512">67ee5264a21a794d7615307cb93d1e22f88003db921fc5a54dc3cd16d811cd40fc923c08700835bba97a91b60ba2d7dfb3c14ce763e810462a33214d29a6f9a8</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.wildfly.openssl/wildfly-openssl-linux-x86_64@1.0.10.Final?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.jboss.org/wildfly-openssl-parent/wildfly-openssl-linux-x86_64</url></reference><reference type="distribution"><url>https://repository.jboss.org/nexus/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://issues.jboss.org/</url></reference><reference type="mailing-list"><url>http://lists.jboss.org/pipermail/jboss-user/</url></reference><reference type="vcs"><url>http://github.com/jboss/jboss-parent-pom/wildfly-openssl-parent/wildfly-openssl-linux-x86_64</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/javax.xml.bind/jaxb-api@2.3.1?type=jar">
      <publisher>Oracle Corporation</publisher>
      <group>javax.xml.bind</group>
      <name>jaxb-api</name>
      <version>2.3.1</version>
      <description>JAXB (JSR 222) API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">bcf270d320f645ad19f5edb60091e87f</hash>
        <hash alg="SHA-1">8531ad5ac454cc2deb9d4d32c40c4d7451939b5d</hash>
        <hash alg="SHA-256">88b955a0df57880a26a74708bc34f74dcaf8ebf4e78843a28b50eae945732b06</hash>
        <hash alg="SHA-512">93a47b245ab830d664a48c9d14e86198a38809ce94f72ca66b3d68746ae1d7b902f6fef2d1ac1a92c01701549ae80a07db69bd822ffd831a95d8dbffad435790</hash>
        <hash alg="SHA-384">1eb2d7f307bda8cbf6a4ab5b2b97d830d33ca48ad94eb4bb1cbce860c54fca96285dbcb1ce9b164dbf37d4475f9a198f</hash>
        <hash alg="SHA3-384">8df7409d3f60888f3a80f4d49af66c2cab6dc9f00e79c87c17703faad19d8ba6c8fc96ad897434170ce2686952921cdd</hash>
        <hash alg="SHA3-256">41338683257d5ecead579ccc137bdef7bc4fea685d039a3d894e1d6730425e1d</hash>
        <hash alg="SHA3-512">3371a96171f69876b0e6b8354674d252680e6d52c509a2645b1a0b0d7f9e176274bde6c89edb40986264733ffb6794cb7b2cba417666b1e82075bd4fd51197b6</hash>
      </hashes>
      <licenses>
        <license>
          <id>CDDL-1.1</id>
        </license>
        <license>
          <id>GPL-2.0-with-classpath-exception</id>
        </license>
      </licenses>
      <purl>pkg:maven/javax.xml.bind/jaxb-api@2.3.1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/javaee/jaxb-spec/jaxb-api</url></reference><reference type="distribution"><url>https://maven.java.net/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/javaee/jaxb-spec/issues</url></reference><reference type="vcs"><url>https://github.com/javaee/jaxb-spec.git/jaxb-api</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/javax.activation/javax.activation-api@1.2.0?type=jar">
      <publisher>Oracle</publisher>
      <group>javax.activation</group>
      <name>javax.activation-api</name>
      <version>1.2.0</version>
      <description>JavaBeans Activation Framework API jar</description>
      <hashes>
        <hash alg="MD5">5e50e56bcf4a3ef3bc758f69f7643c3b</hash>
        <hash alg="SHA-1">85262acf3ca9816f9537ca47d5adeabaead7cb16</hash>
        <hash alg="SHA-256">43fdef0b5b6ceb31b0424b208b930c74ab58fac2ceeb7b3f6fd3aeb8b5ca4393</hash>
        <hash alg="SHA-512">8ee0db43ae402f0079a836ef2bff5d15160e3ff9d585c3283f4cf474be4edd2fcc8714d8f032efd72cae77ec5f6d304fc24fa094d9cdba5cf72966cc964af6c9</hash>
        <hash alg="SHA-384">d38a6af7ed00f13de8b46d49b9592af9b67adf3df47ddae5e4672f989f3f39101d446a77d1c11319acf8ff0a5b4feedf</hash>
        <hash alg="SHA3-384">cfee76de5976d5994758a06113368092f09b0729d753b99969d6a5ec32919428bd7c270c98cbbc682ff8ebcf2b93fd8d</hash>
        <hash alg="SHA3-256">aff48d0f28d8a99690c5a84c3fffdb3775452d5387e5698f4c9028c92a3b4888</hash>
        <hash alg="SHA3-512">0507ece74b3147de60a830071bd434569c82e03f414a2b7f0d8a225dda36720d2e2194799cdc04def1909fdec21059b67c518bb9162f7f605764d542194e721d</hash>
      </hashes>
      <licenses>
        <expression>(CDDL-1.0 OR GPL-2.0-with-classpath-exception)</expression>
      </licenses>
      <purl>pkg:maven/javax.activation/javax.activation-api@1.2.0?type=jar</purl>
      <externalReferences><reference type="website"><url>http://java.net/all/javax.activation-api/</url></reference><reference type="distribution"><url>https://maven.java.net/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/javaee/activation/issues</url></reference><reference type="vcs"><url>https://github.com/javaee/activation/javax.activation-api</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-io/commons-io@2.15.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>commons-io</group>
      <name>commons-io</name>
      <version>2.15.1</version>
      <description>The Apache Commons IO library contains utility classes, stream implementations, file filters,
file comparators, endian transformation classes, and much more.</description>
      <hashes>
        <hash alg="MD5">84351f7991a0e6722f00e96a4ccc376f</hash>
        <hash alg="SHA-1">f11560da189ab563a5c8e351941415430e9304ea</hash>
        <hash alg="SHA-256">a58af12ee1b68cfd2ebb0c27caef164f084381a00ec81a48cc275fd7ea54e154</hash>
        <hash alg="SHA-512">e9adaeed2d715ac0ae44de056ba165a743a92acbeb9871b535f7e58e0b3bc4fba276495b50429be195098a559f3adb7294048479754a0ee4d397da2efda5f81c</hash>
        <hash alg="SHA-384">028c72b59373d3894da22f9eb2c731aabd00f670993973f71a354d722670c12ca659686b83bbf8db32d060ca180f50b2</hash>
        <hash alg="SHA3-384">73cd585ab3736b4be50ec0f10dfe5ebfc3390eea8d56f07f29055f1fddb2dff8084310eaa6fb9f97ea639ed1abd7bc33</hash>
        <hash alg="SHA3-256">daf39bc99f1a3dc0075714a4a342a58d69a4cd62c25bc39a581f657ca72b1044</hash>
        <hash alg="SHA3-512">b003f8971d1536ea0fc4320dbfe17d7259d49e59314739f9fc83134e511facbff048b0ef4f86a9d0893781ca09c95cebc3b181a6c89a2d41e851870b96e76839</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/commons-io/commons-io@2.15.1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://commons.apache.org/proper/commons-io/</url></reference><reference type="build-system"><url>https://github.com/apache/commons-parent/actions</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/IO</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=commons-io.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.xerial.snappy/snappy-java@1.1.10.4?type=jar">
      <publisher>xerial.org</publisher>
      <group>org.xerial.snappy</group>
      <name>snappy-java</name>
      <version>1.1.10.4</version>
      <description>snappy-java: A fast compression/decompression library</description>
      <hashes>
        <hash alg="MD5">d1d3b91e925c46a1a0f68b87298bafe8</hash>
        <hash alg="SHA-1">50d0390056017158bdc75c063efd5c2a898d5f0c</hash>
        <hash alg="SHA-256">55b30c94e5c4cc2d4b6976916098d0678a8a6cc7427fa8c875621bd94e731ac8</hash>
        <hash alg="SHA-512">9e52bad4eaa0d0a2e0083cdd3433d84c4bb44c4d3f0314a48c3d6eacbb64d0f4fb2d71197944115618a598eb4a4941c13af2a9ec676b003fb3462ddac58bbe41</hash>
        <hash alg="SHA-384">9539e8eb2dea244f07a7216db38970e3f336b5dc9d132cbe54e201c818dba3e02a1fc467b4529a18eca7127f86d742dd</hash>
        <hash alg="SHA3-384">d5d5ef5d8b050f200ae29855a4b6f5e278215d0a97a69d3653dc1aa716f9847b3c305312a3c994d46721615ba02fc7c8</hash>
        <hash alg="SHA3-256">bbbb3ff43a24094bf2c77dd8c8f94b06d62d158da0d2c3399de3a2993df9986e</hash>
        <hash alg="SHA3-512">de2aa7e7fada466f24ccda07123e2877446733dd48e4b914d25b0d296f677e17a24f182a0e9216e77b261143b774ccaadcfd2854dde1bf36cb2c6db6cdf78b3c</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.xerial.snappy/snappy-java@1.1.10.4?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/xerial/snappy-java</url></reference><reference type="vcs"><url>https://github.com/xerial/snappy-java</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar">
      <publisher>QOS.ch</publisher>
      <group>org.slf4j</group>
      <name>slf4j-api</name>
      <version>1.7.36</version>
      <description>The slf4j API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">872da51f5de7f3923da4de871d57fd85</hash>
        <hash alg="SHA-1">6c62681a2f655b49963a5983b8b0950a6120ae14</hash>
        <hash alg="SHA-256">d3ef575e3e4979678dc01bf1dcce51021493b4d11fb7f1be8ad982877c16a1c0</hash>
        <hash alg="SHA-512">f9b033fc019a44f98b16048da7e2b59edd4a6a527ba60e358f65ab88e0afae03a9340f1b3e8a543d49fa542290f499c5594259affa1ff3e6e7bf3b428d4c610b</hash>
        <hash alg="SHA-384">2b14ad035877087157e379d3277dcdcd79e58d6bdb147c47d29e377d75ce53ad42cafbf22f5fb7827c7e946ff4876b9a</hash>
        <hash alg="SHA3-384">3bc3110dafb8d5be16a39f3b2671a466463cd99eb39610c0e4719a7bf2d928f2ea213c734887c6926a07c4cca7769e4b</hash>
        <hash alg="SHA3-256">ba2608179fcf46e2291a90b9cbb4aa30d718e481f59c350cc21c73b88d826881</hash>
        <hash alg="SHA3-512">14c4edcd19702ef607d78826839d8a6d3a39157df54b89a801d3d3cbbe1307131a77671b041c761122730fb1387888c5ec2e46bdd80e1cb07f8f144676441824</hash>
      </hashes>
      <licenses>
        <license>
          <id>MIT</id>
          <url>https://opensource.org/licenses/MIT</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.slf4j.org</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/qos-ch/slf4j/slf4j-api</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar">
      <group>com.google.code.findbugs</group>
      <name>jsr305</name>
      <version>1.3.9</version>
      <description>JSR305 Annotations for Findbugs</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">1d5a772e400b04bb67a7ef4a0e0996d8</hash>
        <hash alg="SHA-1">40719ea6961c0cb6afaeb6a921eaa1f6afd4cfdf</hash>
        <hash alg="SHA-256">905721a0eea90a81534abb7ee6ef4ea2e5e645fa1def0a5cd88402df1b46c9ed</hash>
        <hash alg="SHA-512">06da282cfd8e30d9f8cf17702b8709172b00e22b75a627a1d85f8989615b8a1a401bc25d9aee7b14aed1d9b5df73bf2ea8d66f9c8468d9577c29f0ccfa2cc70a</hash>
        <hash alg="SHA-384">56e6b41ef62eb5edfed0203802cefae9c2df86388148e420bb0c687abb2b80e14d5c2a82d5b35dce4badaf148f94eada</hash>
        <hash alg="SHA3-384">58c3bf89fa1afa75c2c5078159fd28e27b2273d437f26aaaa7391310b6f0823f3cf476a24f5631c0881f3f7e946d99be</hash>
        <hash alg="SHA3-256">c333ea5faedfa78e0614a2620438d5724eab093df4e960918391b6a44c2915b0</hash>
        <hash alg="SHA3-512">67ec31448e156cc72dd036060b460bb2667a13b1cbe500b6b7eed3235b1994b44c39f440ebd07b21ec9595b166ad61121d4f6a132b5b313c558ab21b72599425</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar</purl>
      <externalReferences><reference type="website"><url>http://findbugs.sourceforge.net/</url></reference><reference type="vcs"><url>http://findbugs.googlecode.com/svn/trunk/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-shaded-force-shading@17.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-shaded-force-shading</name>
      <version>17.0</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">6890ff555c82f3bb156cf9c73bf09cf9</hash>
        <hash alg="SHA-1">345c153973a17fb8a98d368352e14893edcbd610</hash>
        <hash alg="SHA-256">dcc7dff160a40b74fa5db2805b2004153ffd0517968f3c7843a8ee43be82e710</hash>
        <hash alg="SHA-512">9de23513832248618b78e279c0e3900f5cafb7193254ef6818b4f0b6f3b70045dd9cc4fdd13caeeca8b70a44f38201ce055f07248cdf08930a20e1b7a73997ff</hash>
        <hash alg="SHA-384">063611872b4b1a1718e0472e32198bded0d74fa656e5c47a7b20038cd5ff70106e3109b60fe882880feea486e1ef83bf</hash>
        <hash alg="SHA3-384">26f9225d2c401391133dabc97340d1048504deaaae3c6b02ba20b83d4efe8c53a6d4f4e63a04e4317f9bce6b1a1ee013</hash>
        <hash alg="SHA3-256">aae3e6da763019cc2fd4919df572a3653b46aedaf60a3adb3d28bc7f94023523</hash>
        <hash alg="SHA3-512">e616e089fb70dc79503b6c235bd8d14c6e7c8e608c87bb4fcd02fe86d6ba27985bac4f144843af9fc7a7c495de7057320ccddea9f571c42bdcaa1c73966f265f</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-shaded-force-shading@17.0?type=jar</purl>
      <externalReferences><reference type="website"><url>http://flink.apache.org/flink-shaded-force-shading</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink-shaded/flink-shaded-force-shading</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.objenesis/objenesis@2.1?type=jar">
      <publisher>Joe Walnes, Henri Tremblay, Leonardo Mesquita</publisher>
      <group>org.objenesis</group>
      <name>objenesis</name>
      <version>2.1</version>
      <description>A library for instantiating Java objects</description>
      <hashes>
        <hash alg="MD5">32ccb1d20a42b5aaaceb90c9082a2efa</hash>
        <hash alg="SHA-1">87c0ea803b69252868d09308b4618f766f135a96</hash>
        <hash alg="SHA-256">c74330cc6b806c804fd37e74487b4fe5d7c2750c5e15fbc6efa13bdee1bdef80</hash>
        <hash alg="SHA-512">1dec9ee30812b8006e536a2749c5781ccdc4b446539efb6fa534f22e70562033876bf2eb22c6946d617695729bd65f0f65b984f15f05ac63db5bed215e74427c</hash>
        <hash alg="SHA-384">657b8a3b80a5475f198425396f7264301f9e0f3ad5dc336ef0c7b46874f5544861a8a2fd48cdb5f672e199a6935c19d1</hash>
        <hash alg="SHA3-384">e526937d722aad1857869b2d2a0ba5c88815609308c00b776b51614e501de5d93d54978f5bb9cf496bdcc28b1dbd5775</hash>
        <hash alg="SHA3-256">436cfbb9c208dd03c951708fa4ba6525e2a0b26a873d594a6fbe93ab49082c97</hash>
        <hash alg="SHA3-512">1e7ee9411df7cfbf0669c38e4ef029155dd718b91db1d182841c740caf8c1057ed273a77f8e32d724c48aaf96815a26ab099c776511ffc5ef351d70ebfa70344</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.objenesis/objenesis@2.1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://objenesis.org</url></reference><reference type="distribution"><url>http://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/easymock/easymock/objenesis</url></reference></externalReferences>
    </component>
  </components>
  <dependencies>
    <dependency ref="pkg:maven/io.confluent.flink/flink-s3-fs-hadoop@1.19.2-cp2?type=jar">
      <dependency ref="pkg:maven/io.confluent.flink/flink-core@1.19.2-cp2?type=jar"/>
      <dependency ref="pkg:maven/io.confluent.flink/flink-s3-fs-base@1.19.2-cp2?type=jar"/>
      <dependency ref="pkg:maven/javax.xml.bind/jaxb-api@2.3.1?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-force-shading@17.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/io.confluent.flink/flink-core@1.19.2-cp2?type=jar">
      <dependency ref="pkg:maven/io.confluent.flink/flink-annotations@1.19.2-cp2?type=jar"/>
      <dependency ref="pkg:maven/io.confluent.flink/flink-metrics-core@1.19.2-cp2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-asm-9@9.5-17.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-jackson@2.14.2-17.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar"/>
      <dependency ref="pkg:maven/org.snakeyaml/snakeyaml-engine@2.6?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar"/>
      <dependency ref="pkg:maven/com.esotericsoftware.kryo/kryo@2.24.0?type=jar"/>
      <dependency ref="pkg:maven/commons-collections/commons-collections@3.2.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-compress@1.26.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-guava@31.1-jre-17.0?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/io.confluent.flink/flink-annotations@1.19.2-cp2?type=jar">
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"/>
    <dependency ref="pkg:maven/io.confluent.flink/flink-metrics-core@1.19.2-cp2?type=jar">
      <dependency ref="pkg:maven/io.confluent.flink/flink-annotations@1.19.2-cp2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.flink/flink-shaded-asm-9@9.5-17.0?type=jar"/>
    <dependency ref="pkg:maven/org.apache.flink/flink-shaded-jackson@2.14.2-17.0?type=jar"/>
    <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar"/>
    <dependency ref="pkg:maven/org.snakeyaml/snakeyaml-engine@2.6?type=jar"/>
    <dependency ref="pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar">
      <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.esotericsoftware.kryo/kryo@2.24.0?type=jar">
      <dependency ref="pkg:maven/com.esotericsoftware.minlog/minlog@1.2?type=jar"/>
      <dependency ref="pkg:maven/org.objenesis/objenesis@2.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.esotericsoftware.minlog/minlog@1.2?type=jar"/>
    <dependency ref="pkg:maven/org.objenesis/objenesis@2.1?type=jar"/>
    <dependency ref="pkg:maven/commons-collections/commons-collections@3.2.2?type=jar"/>
    <dependency ref="pkg:maven/org.apache.commons/commons-compress@1.26.0?type=jar">
      <dependency ref="pkg:maven/commons-io/commons-io@2.15.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/commons-io/commons-io@2.15.1?type=jar"/>
    <dependency ref="pkg:maven/org.apache.flink/flink-shaded-guava@31.1-jre-17.0?type=jar"/>
    <dependency ref="pkg:maven/io.confluent.flink/flink-s3-fs-base@1.19.2-cp2?type=jar">
      <dependency ref="pkg:maven/org.apache.hadoop/hadoop-common@3.3.4?type=jar"/>
      <dependency ref="pkg:maven/io.confluent.flink/flink-hadoop-fs@1.19.2-cp2?type=jar"/>
      <dependency ref="pkg:maven/com.amazonaws/aws-java-sdk-core@1.12.779?type=jar"/>
      <dependency ref="pkg:maven/com.amazonaws/aws-java-sdk-s3@1.12.779?type=jar"/>
      <dependency ref="pkg:maven/com.amazonaws/aws-java-sdk-kms@1.12.779?type=jar"/>
      <dependency ref="pkg:maven/com.amazonaws/aws-java-sdk-dynamodb@1.12.779?type=jar"/>
      <dependency ref="pkg:maven/com.amazonaws/aws-java-sdk-sts@1.12.779?type=jar"/>
      <dependency ref="pkg:maven/org.apache.hadoop/hadoop-aws@3.3.4?type=jar"/>
      <dependency ref="pkg:maven/org.wildfly.openssl/wildfly-openssl@1.0.10.Final?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.hadoop/hadoop-common@3.3.4?type=jar">
      <dependency ref="pkg:maven/org.apache.hadoop.thirdparty/hadoop-shaded-protobuf_3_7@1.1.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.hadoop/hadoop-annotations@3.3.4?type=jar"/>
      <dependency ref="pkg:maven/org.apache.hadoop.thirdparty/hadoop-shaded-guava@1.1.1?type=jar"/>
      <dependency ref="pkg:maven/com.google.guava/guava@27.0-jre?type=jar"/>
      <dependency ref="pkg:maven/commons-io/commons-io@2.15.1?type=jar"/>
      <dependency ref="pkg:maven/commons-collections/commons-collections@3.2.2?type=jar"/>
      <dependency ref="pkg:maven/jakarta.activation/jakarta.activation-api@1.2.1?type=jar"/>
      <dependency ref="pkg:maven/commons-logging/commons-logging@1.1.3?type=jar"/>
      <dependency ref="pkg:maven/commons-beanutils/commons-beanutils@1.9.4?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-configuration2@2.1.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/com.google.re2j/re2j@1.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.hadoop/hadoop-auth@3.3.4?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-compress@1.26.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.kerby/kerb-core@1.0.1?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.15.3?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.woodstox/stax2-api@4.2.1?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.woodstox/woodstox-core@5.3.0?type=jar"/>
      <dependency ref="pkg:maven/dnsjava/dnsjava@2.1.7?type=jar"/>
      <dependency ref="pkg:maven/org.xerial.snappy/snappy-java@1.1.10.4?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.hadoop.thirdparty/hadoop-shaded-protobuf_3_7@1.1.1?type=jar"/>
    <dependency ref="pkg:maven/org.apache.hadoop/hadoop-annotations@3.3.4?type=jar"/>
    <dependency ref="pkg:maven/org.apache.hadoop.thirdparty/hadoop-shaded-guava@1.1.1?type=jar"/>
    <dependency ref="pkg:maven/com.google.guava/guava@27.0-jre?type=jar">
      <dependency ref="pkg:maven/com.google.guava/failureaccess@1.0?type=jar"/>
      <dependency ref="pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"/>
      <dependency ref="pkg:maven/org.checkerframework/checker-qual@2.5.2?type=jar"/>
      <dependency ref="pkg:maven/com.google.j2objc/j2objc-annotations@1.1?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.mojo/animal-sniffer-annotations@1.17?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.google.guava/failureaccess@1.0?type=jar"/>
    <dependency ref="pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar"/>
    <dependency ref="pkg:maven/org.checkerframework/checker-qual@2.5.2?type=jar"/>
    <dependency ref="pkg:maven/com.google.j2objc/j2objc-annotations@1.1?type=jar"/>
    <dependency ref="pkg:maven/org.codehaus.mojo/animal-sniffer-annotations@1.17?type=jar"/>
    <dependency ref="pkg:maven/jakarta.activation/jakarta.activation-api@1.2.1?type=jar"/>
    <dependency ref="pkg:maven/commons-logging/commons-logging@1.1.3?type=jar"/>
    <dependency ref="pkg:maven/commons-beanutils/commons-beanutils@1.9.4?type=jar">
      <dependency ref="pkg:maven/commons-logging/commons-logging@1.1.3?type=jar"/>
      <dependency ref="pkg:maven/commons-collections/commons-collections@3.2.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.commons/commons-configuration2@2.1.1?type=jar">
      <dependency ref="pkg:maven/commons-logging/commons-logging@1.1.3?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.google.re2j/re2j@1.1?type=jar"/>
    <dependency ref="pkg:maven/org.apache.hadoop/hadoop-auth@3.3.4?type=jar">
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/org.apache.hadoop.thirdparty/hadoop-shaded-guava@1.1.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.kerby/kerb-core@1.0.1?type=jar">
      <dependency ref="pkg:maven/org.apache.kerby/kerby-pkix@1.0.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.kerby/kerby-pkix@1.0.1?type=jar">
      <dependency ref="pkg:maven/org.apache.kerby/kerby-asn1@1.0.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.kerby/kerby-util@1.0.1?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.kerby/kerby-asn1@1.0.1?type=jar"/>
    <dependency ref="pkg:maven/org.apache.kerby/kerby-util@1.0.1?type=jar"/>
    <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.15.3?type=jar">
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.15.3?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-core@2.15.3?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.15.3?type=jar"/>
    <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-core@2.15.3?type=jar"/>
    <dependency ref="pkg:maven/org.codehaus.woodstox/stax2-api@4.2.1?type=jar"/>
    <dependency ref="pkg:maven/com.fasterxml.woodstox/woodstox-core@5.3.0?type=jar">
      <dependency ref="pkg:maven/org.codehaus.woodstox/stax2-api@4.2.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/dnsjava/dnsjava@2.1.7?type=jar"/>
    <dependency ref="pkg:maven/org.xerial.snappy/snappy-java@1.1.10.4?type=jar"/>
    <dependency ref="pkg:maven/io.confluent.flink/flink-hadoop-fs@1.19.2-cp2?type=jar">
      <dependency ref="pkg:maven/io.confluent.flink/flink-core@1.19.2-cp2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.amazonaws/aws-java-sdk-core@1.12.779?type=jar">
      <dependency ref="pkg:maven/commons-logging/commons-logging@1.1.3?type=jar"/>
      <dependency ref="pkg:maven/commons-codec/commons-codec@1.15?type=jar"/>
      <dependency ref="pkg:maven/org.apache.httpcomponents/httpclient@4.5.13?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.15.3?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-cbor@2.15.3?type=jar"/>
      <dependency ref="pkg:maven/joda-time/joda-time@2.5?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/commons-codec/commons-codec@1.15?type=jar"/>
    <dependency ref="pkg:maven/org.apache.httpcomponents/httpclient@4.5.13?type=jar">
      <dependency ref="pkg:maven/org.apache.httpcomponents/httpcore@4.4.14?type=jar"/>
      <dependency ref="pkg:maven/commons-logging/commons-logging@1.1.3?type=jar"/>
      <dependency ref="pkg:maven/commons-codec/commons-codec@1.15?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.httpcomponents/httpcore@4.4.14?type=jar"/>
    <dependency ref="pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-cbor@2.15.3?type=jar">
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.15.3?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-core@2.15.3?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/joda-time/joda-time@2.5?type=jar"/>
    <dependency ref="pkg:maven/com.amazonaws/aws-java-sdk-s3@1.12.779?type=jar">
      <dependency ref="pkg:maven/com.amazonaws/aws-java-sdk-kms@1.12.779?type=jar"/>
      <dependency ref="pkg:maven/com.amazonaws/aws-java-sdk-core@1.12.779?type=jar"/>
      <dependency ref="pkg:maven/com.amazonaws/jmespath-java@1.12.779?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.amazonaws/aws-java-sdk-kms@1.12.779?type=jar">
      <dependency ref="pkg:maven/com.amazonaws/aws-java-sdk-core@1.12.779?type=jar"/>
      <dependency ref="pkg:maven/com.amazonaws/jmespath-java@1.12.779?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.amazonaws/jmespath-java@1.12.779?type=jar">
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.15.3?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.amazonaws/aws-java-sdk-dynamodb@1.12.779?type=jar">
      <dependency ref="pkg:maven/com.amazonaws/aws-java-sdk-s3@1.12.779?type=jar"/>
      <dependency ref="pkg:maven/com.amazonaws/aws-java-sdk-core@1.12.779?type=jar"/>
      <dependency ref="pkg:maven/com.amazonaws/jmespath-java@1.12.779?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.amazonaws/aws-java-sdk-sts@1.12.779?type=jar">
      <dependency ref="pkg:maven/com.amazonaws/aws-java-sdk-core@1.12.779?type=jar"/>
      <dependency ref="pkg:maven/com.amazonaws/jmespath-java@1.12.779?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.hadoop/hadoop-aws@3.3.4?type=jar">
      <dependency ref="pkg:maven/org.wildfly.openssl/wildfly-openssl@1.0.10.Final?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.wildfly.openssl/wildfly-openssl@1.0.10.Final?type=jar">
      <dependency ref="pkg:maven/org.wildfly.openssl/wildfly-openssl-java@1.0.10.Final?type=jar"/>
      <dependency ref="pkg:maven/org.wildfly.openssl/wildfly-openssl-linux-x86_64@1.0.10.Final?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.wildfly.openssl/wildfly-openssl-java@1.0.10.Final?type=jar"/>
    <dependency ref="pkg:maven/org.wildfly.openssl/wildfly-openssl-linux-x86_64@1.0.10.Final?type=jar"/>
    <dependency ref="pkg:maven/javax.xml.bind/jaxb-api@2.3.1?type=jar">
      <dependency ref="pkg:maven/javax.activation/javax.activation-api@1.2.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/javax.activation/javax.activation-api@1.2.0?type=jar"/>
    <dependency ref="pkg:maven/org.apache.flink/flink-shaded-force-shading@17.0?type=jar"/>
  </dependencies>
</bom>
