{
  "bomFormat" : "CycloneDX",
  "specVersion" : "1.4",
  "serialNumber" : "urn:uuid:e54f8817-2680-4184-afc8-1365aaff93f0",
  "version" : 1,
  "metadata" : {
    "timestamp" : "2026-05-04T05:01:25Z",
    "tools" : [
      {
        "vendor" : "OWASP Foundation",
        "name" : "CycloneDX Maven plugin",
        "version" : "2.7.7",
        "hashes" : [
          {
            "alg" : "MD5",
            "content" : "436dfb24c63a322708e4a5143d8543af"
          },
          {
            "alg" : "SHA-1",
            "content" : "3ef2e8728dc9eff2f129c34057e46e9d2b10629a"
          },
          {
            "alg" : "SHA-256",
            "content" : "c185b79bf0f9264f43bc8c222c44db67bea275bb727e3327cf9aea6bf45292c9"
          },
          {
            "alg" : "SHA-512",
            "content" : "41488733e31e6c5315327dcc86187c2b9a6b96cd08f7e2157ce130688afde29c313fc6a73edb8a76333a930c78874aa2eac874448920030c0f7af0ac05e65ced"
          },
          {
            "alg" : "SHA-384",
            "content" : "f9462f86240fd9fc0942f34981e6d2371f252aa1a4e5e8c3c14e7f0f1a4e4de69ef972e51cf09a749afb6d97c13e67ed"
          },
          {
            "alg" : "SHA3-384",
            "content" : "c755af6239348bc7dd1e1e6b5f14f7cf7e1560d689b252d9610cd865fa4b419d0b8e26260731dfc5da2176b6e706b414"
          },
          {
            "alg" : "SHA3-256",
            "content" : "309aac91005470c9c834354ab918759e2ae7ec52fc1676002621a5bbdf3b7827"
          },
          {
            "alg" : "SHA3-512",
            "content" : "c634570dcf8302e61005e5fa91a9a0d9b81542f731967b3c9f6d3ef89e3b945bd36d7ab69e2ebad8124b9c05da504361c8b36a8ce528d844409eeb7df4eea6ce"
          }
        ]
      }
    ],
    "component" : {
      "publisher" : "The Apache Software Foundation",
      "group" : "io.confluent.flink",
      "name" : "flink-sql-avro-confluent-registry",
      "version" : "1.19.3-cp4",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.confluent.flink/flink-sql-avro-confluent-registry@1.19.3-cp4?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://flink.apache.org/flink-formats/flink-sql-avro-confluent-registry"
        },
        {
          "type" : "distribution",
          "url" : "s3://cp-flink-staging-654654529379-us-west-2/maven-staging/3c60fad5c7cced2ddfc1c6aa703a2faeefae486c"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink/flink-formats/flink-sql-avro-confluent-registry"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.confluent.flink/flink-sql-avro-confluent-registry@1.19.3-cp4?type=jar"
    },
    "properties" : [
      {
        "name" : "maven.goal",
        "value" : "makeBom"
      },
      {
        "name" : "maven.scopes",
        "value" : "compile,provided,runtime,system"
      }
    ]
  },
  "components" : [
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "io.confluent.flink",
      "name" : "flink-avro-confluent-registry",
      "version" : "1.19.3-cp4",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "4bd666ecb3cf631ef16656d69043edf1"
        },
        {
          "alg" : "SHA-1",
          "content" : "b82e335124b2be9f772f4d84141979ec18320121"
        },
        {
          "alg" : "SHA-256",
          "content" : "91d0df6e95afd41dd699f79f71ad1da704e5756a83cc898b5bfec543d4049a3b"
        },
        {
          "alg" : "SHA-512",
          "content" : "71c8edab406c04d188b37e5f11d9d4fac55b57f46aac9c5b23f6ca9494151316600d1b7104bde8b8b2a7ecd4056c22e3418aeb863fa502f21a9bc7e5ec9d43b8"
        },
        {
          "alg" : "SHA-384",
          "content" : "41e041ad16b9228e09600d7fa08e94f14b61200d3c3111d23b2584d3eb573a148c37aa47d827c1d0e85b60c64a089568"
        },
        {
          "alg" : "SHA3-384",
          "content" : "e1d11d8979c144bc83787aa92799e6c2a540706b46a037d27e0026a5d8dc9078e8afab26f20a5131c042d5d675a9d122"
        },
        {
          "alg" : "SHA3-256",
          "content" : "c8dee537017a437c73daf3449d48ebf50612b2261571a85cd658d63ff3e79530"
        },
        {
          "alg" : "SHA3-512",
          "content" : "db216a300056466e03642f88f40ef41dce847b92fd834297744a3c9a97dde77dba37870e07f56ad7c462ca5adfaa6ee97c7ee9d106965733b0c7ccbb46519216"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.confluent.flink/flink-avro-confluent-registry@1.19.3-cp4?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://flink.apache.org/flink-formats/flink-avro-confluent-registry"
        },
        {
          "type" : "distribution",
          "url" : "s3://cp-flink-staging-654654529379-us-west-2/maven-staging/3c60fad5c7cced2ddfc1c6aa703a2faeefae486c"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink/flink-formats/flink-avro-confluent-registry"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.confluent.flink/flink-avro-confluent-registry@1.19.3-cp4?type=jar"
    },
    {
      "publisher" : "Confluent, Inc.",
      "group" : "io.confluent",
      "name" : "kafka-schema-registry-client",
      "version" : "7.2.2",
      "description" : "Schema Registry provides a RESTful interface for storing and retrieving versioned Avro schemas for use with Kafka.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "70de5957a959ba1c0a4fcb90744c9d23"
        },
        {
          "alg" : "SHA-1",
          "content" : "5458c066627767f114b97ba7a2fcbf13f9bf4daa"
        },
        {
          "alg" : "SHA-256",
          "content" : "4b2405f374af26ae3556e983f44812090c6f2006c63de58ad161b8b2a51e025e"
        },
        {
          "alg" : "SHA-512",
          "content" : "e034df9dc16d1eb917085a4aa4bbb78cf1340cb88322c2d7eebf6acad9bb8964fcdc941dfa641829e6cec3a52c14f819c9ccf64f46b3e2ed3dc587805b4d6d30"
        },
        {
          "alg" : "SHA-384",
          "content" : "f74866d1e1e9cad90fb118650d2bf3cd64fc04afaec83da12fa6aaa1a0a29f09077f8c469325f000e73f9995efe6999b"
        },
        {
          "alg" : "SHA3-384",
          "content" : "e928e61d180dc332e8f545afe9222f1d352b97e25295677230fd698e04f6a1c9496ed39af3f44c8e3a460a5cd1c2752b"
        },
        {
          "alg" : "SHA3-256",
          "content" : "2cada969690118c6b8a7e522bf513d37fc97e1e92f334a534c1df9e915d6df25"
        },
        {
          "alg" : "SHA3-512",
          "content" : "926f7db5ed95acbcaf3b6f36789b1ea2733f64f451eb8f4f8b5d510096e4ded3436d0e2c4f4d195be5744d20bd4e41d32a4421793ece1eb48c175e3ae99e49e2"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.confluent/kafka-schema-registry-client@7.2.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://confluent.io/kafka-schema-registry-client"
        },
        {
          "type" : "distribution",
          "url" : "s3://cp-flink-staging-654654529379-us-west-2/maven-staging/3c60fad5c7cced2ddfc1c6aa703a2faeefae486c"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/confluentinc/schema-registry/kafka-schema-registry-client"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.confluent/kafka-schema-registry-client@7.2.2?type=jar"
    },
    {
      "group" : "org.apache.kafka",
      "name" : "kafka-clients",
      "version" : "7.2.2-ccs",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "77b6695aec559c5fe17f412c789767ad"
        },
        {
          "alg" : "SHA-1",
          "content" : "ca252a7e40f4a52846e0867b5bd334a2eacbdda5"
        },
        {
          "alg" : "SHA-256",
          "content" : "f4ad1f7dd43935883b846693af22785017d204528f167b82c42e09d5093f32d5"
        },
        {
          "alg" : "SHA-512",
          "content" : "f9bbc88289f52b19e026ea269e4a95d0c7043364c8d2490df05a2161c8b4ce0c20128963b1d0133921e457e36657705bd294b78459b0658cfaf4298ca9a5a752"
        },
        {
          "alg" : "SHA-384",
          "content" : "9987bf23a4c3f2f95dcab6c285102afbb96a34396d9438106b97bfb53552bdf4f1a63cf9aaa4e51dbbebee27f9e127e6"
        },
        {
          "alg" : "SHA3-384",
          "content" : "4f30f74743c4d2de662cf1bf9ee1141cb929098b4f5580dfd028b4d2da8ed384c2149efb6ee48054baefac0cbf685329"
        },
        {
          "alg" : "SHA3-256",
          "content" : "dad9d622b68f0816919d9614e1f9acbb23ae3575addc8f2de0d0aad5ad6b8387"
        },
        {
          "alg" : "SHA3-512",
          "content" : "7d72fee4aa91266383ccb60614685256743ba2f301cb43de8b9965dcb32a794b1be8183161400c1439c0de268a94419206f1ea80cf997b795313d8cdc01a147c"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.kafka/kafka-clients@7.2.2-ccs?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://kafka.apache.org"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.kafka/kafka-clients@7.2.2-ccs?type=jar"
    },
    {
      "publisher" : "com.github.luben",
      "group" : "com.github.luben",
      "name" : "zstd-jni",
      "version" : "1.5.2-1",
      "description" : "JNI bindings for Zstd native library that provides fast and high compression lossless algorithm for Java and all JVM languages.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "2909788860e8e3ee29d51b327a43ca24"
        },
        {
          "alg" : "SHA-1",
          "content" : "fad786abc1d1b81570e8d9a2fc8a1ef479bc27b6"
        },
        {
          "alg" : "SHA-256",
          "content" : "93f7e4cbc907c2650f89f9f0bec94873735a58f1e4b66a54973294e4ec1878e8"
        },
        {
          "alg" : "SHA-512",
          "content" : "92174059714b98d4275dca1b057c857766267afe6ae2b27bfdfe50395cb90a3ec973032977a074c5ce516a3769336e6bf63d3bbde95bea165c409f1c990a651d"
        },
        {
          "alg" : "SHA-384",
          "content" : "cdc9284a4537fcf83166bae1c4731463d94ad9615f91200c4da6368ddbd769314e87453e9114649c694966e6c77d4883"
        },
        {
          "alg" : "SHA3-384",
          "content" : "7fc38f70a3160e3a3e308c56e8b3bd5bcb42567f4739abdfd301f9e5ee74b1be0d1d072f6cf07270e61ac0a6ed6bf8d8"
        },
        {
          "alg" : "SHA3-256",
          "content" : "3d7fdef386e28e112621eea44bc6d6798dc68c8cf690acc2b74db5d221bc5faf"
        },
        {
          "alg" : "SHA3-512",
          "content" : "693b3b3d29e63690ae9c1215cc84d8e77f4de28e664eb184bf9ad4697389b8230f75f490ba653feb191b3e039eeab9415f3c56b5d2786d85e48dfd8035df4e14"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-2-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/com.github.luben/zstd-jni@1.5.2-1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/luben/zstd-jni"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.github.luben/zstd-jni@1.5.2-1?type=jar"
    },
    {
      "publisher" : "xerial.org",
      "group" : "org.xerial.snappy",
      "name" : "snappy-java",
      "version" : "1.1.10.4",
      "description" : "snappy-java: A fast compression/decompression library",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "d1d3b91e925c46a1a0f68b87298bafe8"
        },
        {
          "alg" : "SHA-1",
          "content" : "50d0390056017158bdc75c063efd5c2a898d5f0c"
        },
        {
          "alg" : "SHA-256",
          "content" : "55b30c94e5c4cc2d4b6976916098d0678a8a6cc7427fa8c875621bd94e731ac8"
        },
        {
          "alg" : "SHA-512",
          "content" : "9e52bad4eaa0d0a2e0083cdd3433d84c4bb44c4d3f0314a48c3d6eacbb64d0f4fb2d71197944115618a598eb4a4941c13af2a9ec676b003fb3462ddac58bbe41"
        },
        {
          "alg" : "SHA-384",
          "content" : "9539e8eb2dea244f07a7216db38970e3f336b5dc9d132cbe54e201c818dba3e02a1fc467b4529a18eca7127f86d742dd"
        },
        {
          "alg" : "SHA3-384",
          "content" : "d5d5ef5d8b050f200ae29855a4b6f5e278215d0a97a69d3653dc1aa716f9847b3c305312a3c994d46721615ba02fc7c8"
        },
        {
          "alg" : "SHA3-256",
          "content" : "bbbb3ff43a24094bf2c77dd8c8f94b06d62d158da0d2c3399de3a2993df9986e"
        },
        {
          "alg" : "SHA3-512",
          "content" : "de2aa7e7fada466f24ccda07123e2877446733dd48e4b914d25b0d296f677e17a24f182a0e9216e77b261143b774ccaadcfd2854dde1bf36cb2c6db6cdf78b3c"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.xerial.snappy/snappy-java@1.1.10.4?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/xerial/snappy-java"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/xerial/snappy-java"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.xerial.snappy/snappy-java@1.1.10.4?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-compress",
      "version" : "1.26.0",
      "description" : "Apache Commons Compress defines an API for working with compression and archive formats. These include bzip2, gzip, pack200, LZMA, XZ, Snappy, traditional Unix Compress, DEFLATE, DEFLATE64, LZ4, Brotli, Zstandard and ar, cpio, jar, tar, zip, dump, 7z, arj.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "cbc0bb8eca12b747ca21bf998d736e60"
        },
        {
          "alg" : "SHA-1",
          "content" : "659feffdd12280201c8aacb8f7be94f9a883c824"
        },
        {
          "alg" : "SHA-256",
          "content" : "051aceb8bbcc62d0f5b2b8ac72c53767f9c59bfbd050151e65bef6f51c8ed9c9"
        },
        {
          "alg" : "SHA-512",
          "content" : "acbeaa2909b809cd561e7156df18340d96abacb179325622d73bdd6b82cb9b387d6fcb1a44d8195aad4e786da299289e17598a1d337b7c7d1c0bc610cc128714"
        },
        {
          "alg" : "SHA-384",
          "content" : "052d4d0cd1929c4299dd9d37dd36eaea6ed2be6b04d6d83a94f8608a6d1138aa81f7a34f25113ac267e7ba25ce948c9a"
        },
        {
          "alg" : "SHA3-384",
          "content" : "8b0bf441e8ce793fb6513bc07551cc48ab4507696c18e6037b0fcf35bc4e1eb3e44ed962e2d3765c86d4d912770aa53e"
        },
        {
          "alg" : "SHA3-256",
          "content" : "e441768e06092053f4703844ec0c8f2b437e06e7c190d48fec9d7682beb94c40"
        },
        {
          "alg" : "SHA3-512",
          "content" : "5984f9f08f83789555677f6800f25fa8e80a9eb2e4d46b5fb117b8efc24753644fa103a2f6b619827661a41677991bc827965172ef25f1313d8a59154e615e8d"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-compress@1.26.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-compress/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-parent/actions"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/COMPRESS"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-compress.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-compress@1.26.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-io",
      "name" : "commons-io",
      "version" : "2.15.1",
      "description" : "The Apache Commons IO library contains utility classes, stream implementations, file filters, file comparators, endian transformation classes, and much more.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "84351f7991a0e6722f00e96a4ccc376f"
        },
        {
          "alg" : "SHA-1",
          "content" : "f11560da189ab563a5c8e351941415430e9304ea"
        },
        {
          "alg" : "SHA-256",
          "content" : "a58af12ee1b68cfd2ebb0c27caef164f084381a00ec81a48cc275fd7ea54e154"
        },
        {
          "alg" : "SHA-512",
          "content" : "e9adaeed2d715ac0ae44de056ba165a743a92acbeb9871b535f7e58e0b3bc4fba276495b50429be195098a559f3adb7294048479754a0ee4d397da2efda5f81c"
        },
        {
          "alg" : "SHA-384",
          "content" : "028c72b59373d3894da22f9eb2c731aabd00f670993973f71a354d722670c12ca659686b83bbf8db32d060ca180f50b2"
        },
        {
          "alg" : "SHA3-384",
          "content" : "73cd585ab3736b4be50ec0f10dfe5ebfc3390eea8d56f07f29055f1fddb2dff8084310eaa6fb9f97ea639ed1abd7bc33"
        },
        {
          "alg" : "SHA3-256",
          "content" : "daf39bc99f1a3dc0075714a4a342a58d69a4cd62c25bc39a581f657ca72b1044"
        },
        {
          "alg" : "SHA3-512",
          "content" : "b003f8971d1536ea0fc4320dbfe17d7259d49e59314739f9fc83134e511facbff048b0ef4f86a9d0893781ca09c95cebc3b181a6c89a2d41e851870b96e76839"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-io/commons-io@2.15.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-io/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-parent/actions"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/IO"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-io.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-io/commons-io@2.15.1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-lang3",
      "version" : "3.19.0",
      "description" : "Apache Commons Lang, a package of Java utility classes for the classes that are in java.lang's hierarchy, or are considered to be so standard as to justify existence in java.lang. The code is tested using the latest revision of the JDK for supported LTS releases: 8, 11, 17 and 21 currently. See https://github.com/apache/commons-lang/blob/master/.github/workflows/maven.yml Please ensure your build environment is up-to-date and kindly report any build issues.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "2ac2db154e365d55d167ec1215125a3a"
        },
        {
          "alg" : "SHA-1",
          "content" : "d6524b169a6574cd253760c472d419b47bfd37e6"
        },
        {
          "alg" : "SHA-256",
          "content" : "32733ab4bc90b45b63eb72677d886961003fd4ed113e07b1028f9877cb2ac735"
        },
        {
          "alg" : "SHA-512",
          "content" : "24cf9bfc7c32736277d2a1e82a455d004ec7d4989e8d0dc2831c910a04b6ff8b30ca9c49ec25562cf0b7f1ffc27726e7510a54bb99e75a3be83ddf6030c37978"
        },
        {
          "alg" : "SHA-384",
          "content" : "90c567c8f42b58d0f3f24233260258e7e3bae1f8284ee33f9730e1cecc4fe2c98b7d6ebbba2a6598b50d444ddfa70722"
        },
        {
          "alg" : "SHA3-384",
          "content" : "397a7aafd4f66cdec80cf4682a72db0873b3fc6a3db3cdd7be747b24ae13804dfc290e2441a115d50b0add9ce76af2dd"
        },
        {
          "alg" : "SHA3-256",
          "content" : "4c0809e7ff0474603b0a1bcdf2f745cec9233ffdc6c652b077d93f2630d52f8b"
        },
        {
          "alg" : "SHA3-512",
          "content" : "25564027878618e00dc24ea5caf8365a9396c25597aaf4ea8a37997fd699dabdf4b6f9ce4c1c9f86abedb4afa26041ac234d238c63ffecc207ce2068a6271956"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-lang3@3.19.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-lang/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-lang/actions"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/LANG"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf/commons-lang.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-lang3@3.19.0?type=jar"
    },
    {
      "publisher" : "FasterXML",
      "group" : "com.fasterxml.jackson.core",
      "name" : "jackson-databind",
      "version" : "2.18.6",
      "description" : "General data-binding functionality for Jackson: works on core streaming API",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "0199275814d930ae615971749d009490"
        },
        {
          "alg" : "SHA-1",
          "content" : "7c2dd5a1a41c315150158557896096b484562417"
        },
        {
          "alg" : "SHA-256",
          "content" : "45d124736ea29dc374171fc1a8a9958e0f44407c1e0aae0297d8eee267fb592e"
        },
        {
          "alg" : "SHA-512",
          "content" : "c67c64f941fc916b80787b71b74dfa3c9137a3765c648266ff29dbaf427484d2ee7ab47e6080a9be1dd28d361cc987840d4415b597aa4ead69b5e23b20a533b2"
        },
        {
          "alg" : "SHA-384",
          "content" : "27515e5d81dbd113c3d9d13b62871066fc1ef829352dfcab2718c522c83b2f30eaf318d9a8ebb215286ff30fc83c2c7a"
        },
        {
          "alg" : "SHA3-384",
          "content" : "7a312b73ac433b2c76166e537013aeed46fb81b0b1637c9dc275bfcabe14c92fe30b7a9c6903cebf803c5f313500091b"
        },
        {
          "alg" : "SHA3-256",
          "content" : "592598bffc53b3b095a0d513dffc414a25f1d73b79679527eb31c3b1a752d517"
        },
        {
          "alg" : "SHA3-512",
          "content" : "c7be7e7e7057d6aad7e5beaab769d2ad412baaf84dc105c6c06dbff81c591b796e14fa9bddf4a2a7ead869e319a67aad0585c718502c1ae5cd47ac8abdb3caac"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.18.6?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/FasterXML/jackson"
        },
        {
          "type" : "distribution",
          "url" : "https://central.sonatype.com/api/v1/publisher"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/FasterXML/jackson-databind/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/FasterXML/jackson-databind"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.18.6?type=jar"
    },
    {
      "publisher" : "FasterXML",
      "group" : "com.fasterxml.jackson.core",
      "name" : "jackson-annotations",
      "version" : "2.18.6",
      "description" : "Core annotations used for value types, used by Jackson data binding package.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "80f1abd97c7f0c93d6a199c92f9e870a"
        },
        {
          "alg" : "SHA-1",
          "content" : "d0d2f9e504c6fe443eb2785370c701f911fc87c6"
        },
        {
          "alg" : "SHA-256",
          "content" : "face5c37bee1f0768f5f198d077fc29d163becca95de9e0f13962c84d1047662"
        },
        {
          "alg" : "SHA-512",
          "content" : "e7671ba959d45c3943094e91d369df97af2990bdaa5ab1361c5f55dbb4171700ff9e0900f1376ba13afdbd9e24a708f7393ce01f0fef87e250de6bfa69500634"
        },
        {
          "alg" : "SHA-384",
          "content" : "8a1ee55f2b797feb1eff4f351d6ab7532ff6c6c23946cf22c7ecc7b54df71a2ab03c9aade8fbac01ee6d3be5a6015d17"
        },
        {
          "alg" : "SHA3-384",
          "content" : "0d1ce70acd038bdc95068909f579d2ed58411384e5c4438cd717e6e7cfbbe73a95d703bc9c71ae7f3031bc87758bc601"
        },
        {
          "alg" : "SHA3-256",
          "content" : "7f65b1e6e4202252cdfde7e49b141c3ab27f1dd63f3b80d44610435f4092c69d"
        },
        {
          "alg" : "SHA3-512",
          "content" : "85fd71a6a9f264f558727f9d07879fd76d6726061830e65c774a4911770a04e0a2aec41558b42094ba819b8ae0058bbe48c5dbce3d74be8729baf6d71f1aee4e"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.18.6?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/FasterXML/jackson"
        },
        {
          "type" : "distribution",
          "url" : "https://central.sonatype.com/api/v1/publisher"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/FasterXML/jackson-annotations/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/FasterXML/jackson-annotations"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.18.6?type=jar"
    },
    {
      "publisher" : "FasterXML",
      "group" : "com.fasterxml.jackson.core",
      "name" : "jackson-core",
      "version" : "2.18.6",
      "description" : "Core Jackson processing abstractions (aka Streaming API), implementation for JSON",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "95746cd6a85d0296d6986b14787a6bee"
        },
        {
          "alg" : "SHA-1",
          "content" : "f7171732c04c97ff373bed60d2eba22ec4bab8e0"
        },
        {
          "alg" : "SHA-256",
          "content" : "e7e1bfa50f0a79db37e6aa37db111cf03aebf4a484b359d21127ab43ab2398c6"
        },
        {
          "alg" : "SHA-512",
          "content" : "56ad5272272418a3864335b7cc9323bee496993bb317a35ad7c7f6bc001376feaecfa357ed2b737e36ae9ea738433906c2db05b4cda471463329e6909712f377"
        },
        {
          "alg" : "SHA-384",
          "content" : "f7d8f2175068c0b3f79d300672059502f14be699fb6ca3979b256ff53a0a9c8fa797a288990278db49d8b566e9635b6c"
        },
        {
          "alg" : "SHA3-384",
          "content" : "7c899c0bad1755db144cee72ec96961e186b47ba2229a2aac893091ddb338c6e4b7dbbec61f5998a1a9becf06b973bff"
        },
        {
          "alg" : "SHA3-256",
          "content" : "33f6bd5f2b9f80f758851629eab6425c2a3dee7bee62bc5113a7073242b49d2a"
        },
        {
          "alg" : "SHA3-512",
          "content" : "a301262a6c54d5e905715a27588836df86ce2945d447dcd4bcd17e36315d62a50d1a33ae1e379c35f837ee5decb9ac29419b8abec65cebe54d8d14fbcf714e86"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.18.6?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/FasterXML/jackson-core"
        },
        {
          "type" : "distribution",
          "url" : "https://central.sonatype.com/api/v1/publisher"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/FasterXML/jackson-core/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/FasterXML/jackson-core"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.18.6?type=jar"
    },
    {
      "group" : "com.google.guava",
      "name" : "guava",
      "version" : "30.1.1-jre",
      "description" : "Guava is a suite of core and expanded libraries that include utility classes, Google's collections, I/O classes, and much more.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "05374f163d0a4141db672fff9df95b12"
        },
        {
          "alg" : "SHA-1",
          "content" : "87e0fd1df874ea3cbe577702fe6f17068b790fd8"
        },
        {
          "alg" : "SHA-256",
          "content" : "44ce229ce26d880bf3afc362bbfcec34d7e6903d195bbb1db9f3b6e0d9834f06"
        },
        {
          "alg" : "SHA-512",
          "content" : "025cdd70db7d896d57cc04a8a735ded609b393e8d56af23d454198b64a263147ab0d68fbdffabcb926b143433fccdc022f76aaed658b9448c5ce85f07c42140f"
        },
        {
          "alg" : "SHA-384",
          "content" : "5a7d9c9792f0912bf49ecc97fabbce703408e2009f84a827ca3ff3bc5a3e171f2759821a75da155b4e45e5ad87893053"
        },
        {
          "alg" : "SHA3-384",
          "content" : "f9870f5a878e7c21c70973b8c6269c7f11a81543c2318c4542e1f471276483d74694d3a80892e71eff34599c3dce8e12"
        },
        {
          "alg" : "SHA3-256",
          "content" : "6178c64bce389dd1a93d9c34fe5dc75e91d5af0c1f0d1956b0466e807ad6fa3c"
        },
        {
          "alg" : "SHA3-512",
          "content" : "06a197858dbccd9ae008a50224a1e94e2bb71197dde13ea9b95c014001bfd4730da2faca306103848666df5b696df28954f365645d19b38bb3b75244b0bf14ca"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.guava/guava@30.1.1-jre?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/google/guava/guava"
        },
        {
          "type" : "build-system",
          "url" : "https://travis-ci.org/google/guava"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/google/guava/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/google/guava/guava"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.guava/guava@30.1.1-jre?type=jar"
    },
    {
      "publisher" : "Confluent, Inc.",
      "group" : "io.confluent",
      "name" : "common-utils",
      "version" : "7.2.2",
      "description" : "Common utilities, including metrics and config.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f392fe6a12f3dfa8f66d3c5b3d5fc1bb"
        },
        {
          "alg" : "SHA-1",
          "content" : "8bfc0e7eed95e6d5d9a54cf0f542d7bc24ecdc30"
        },
        {
          "alg" : "SHA-256",
          "content" : "591847307715ec705d73c81db018d0a7d754a7e694e63472ce2ba5746002ca16"
        },
        {
          "alg" : "SHA-512",
          "content" : "882d83540ab701e593fd97a6cabc11cee02a6c017e440cded8a365ddd69eb7ce9459ad99f505e729caaffc4d7e1312d2f7e4769400f8d733d1abc07240981853"
        },
        {
          "alg" : "SHA-384",
          "content" : "d4ca10aae92a766dda9cbea71a69bde356ffa743b33b3d2e147c300e945d7099189af2deb66c4ff08841c02376e59480"
        },
        {
          "alg" : "SHA3-384",
          "content" : "015b8ca524814f3c9cb04739c814cacd7b559bbdb588a541da7aa9bfe512067f8b688d6c294bdbab90200f75470fd5b2"
        },
        {
          "alg" : "SHA3-256",
          "content" : "674b906307a3371a8d9e4bc53039515923d5ce9bc46c5112587a60eff2b834dc"
        },
        {
          "alg" : "SHA3-512",
          "content" : "5e5153f9177b8962a29e88dc35ffb3ab39f9fbb165bfa1d8760077e4befdc48d3cf941fcfe001c34916dd08d3193a2bb91c12fae8191b860f16747e6e09bf7e5"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.confluent/common-utils@7.2.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://confluent.io/common-utils"
        },
        {
          "type" : "distribution",
          "url" : "s3://cp-flink-staging-654654529379-us-west-2/maven-staging/3c60fad5c7cced2ddfc1c6aa703a2faeefae486c"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/confluentinc/common/common-utils"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.confluent/common-utils@7.2.2?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "io.confluent.flink",
      "name" : "flink-avro",
      "version" : "1.19.3-cp4",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "1f85f47c85d677f977a86822977daad4"
        },
        {
          "alg" : "SHA-1",
          "content" : "4ea6b686efdbe9feebb7f267007e1f5ed3096656"
        },
        {
          "alg" : "SHA-256",
          "content" : "499bf4c56117aae3436b168c051745c20d12cb94f947d5e62bcf52f2186cad42"
        },
        {
          "alg" : "SHA-512",
          "content" : "2e0ca0f1045ce7126aa1f1af0c69f8f36d26cf82694b7fe51f64819c455b865c6bb22db13f5f6f1f9103824c7cc3fa94e47c5da23ac89eecfcfa62ee2c0d9bee"
        },
        {
          "alg" : "SHA-384",
          "content" : "3b5e216fbd8b9aee0906b49b432cb5681bb6a854d5f0a4188b3839371f426066aba14207a3862392e8160512b9c57b9f"
        },
        {
          "alg" : "SHA3-384",
          "content" : "ffe0d060ad603bef5c34604ab4347386d9590b349acd70754d229217790a01d63a01b481de9bec359cd0f7afc56a8837"
        },
        {
          "alg" : "SHA3-256",
          "content" : "99fa6d7d39f904f6cfdb0e56bc72bf2bde1b270231cd7abfeb5ebe79ec0406b7"
        },
        {
          "alg" : "SHA3-512",
          "content" : "4f67ad76b31d4df424d716275be5a067f6616ca40d2c6bbe6b0ebb0efc3b71ae28596ad8ae02ea7d9478cd93005ccb39c9ab9e70be26ea361b1c446c4f1cfe9f"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.confluent.flink/flink-avro@1.19.3-cp4?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://flink.apache.org/flink-formats/flink-avro"
        },
        {
          "type" : "distribution",
          "url" : "s3://cp-flink-staging-654654529379-us-west-2/maven-staging/3c60fad5c7cced2ddfc1c6aa703a2faeefae486c"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink/flink-formats/flink-avro"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.confluent.flink/flink-avro@1.19.3-cp4?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.avro",
      "name" : "avro",
      "version" : "1.11.5",
      "description" : "Avro core components",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "b4e9758699f388a661d564c5d26a83a1"
        },
        {
          "alg" : "SHA-1",
          "content" : "39b03945fc96f8e6146849aa49b516cf3657b151"
        },
        {
          "alg" : "SHA-256",
          "content" : "b3c55da4c58304f823f4a2161a308888b9e7b8bc1c7387a4fa3ca1cd48617f93"
        },
        {
          "alg" : "SHA-512",
          "content" : "c3f8b87cd0caf4064b039d2a66273a5f5c22f38d71ef9ffebbe25953bc0fcb2f48d5e4fbac0777630ad410d3506255d6d74a3a1ef961a02f7d4d7a17c9c4c17e"
        },
        {
          "alg" : "SHA-384",
          "content" : "37357433b72e3fa4d9db3616018922d0299c8e0edd2df244b2d591909c40f0308999de02513e71ec113a4f81576cf3c3"
        },
        {
          "alg" : "SHA3-384",
          "content" : "c13b67dc40b66c667901dc4216c1833d740f7685f1783217447b799738c38366f08947323b8bc72399b0d9e553da5754"
        },
        {
          "alg" : "SHA3-256",
          "content" : "65a72c91db569bff8a68f52a22b619938768537eaf587cdd22b8013ad241e9e8"
        },
        {
          "alg" : "SHA3-512",
          "content" : "30f5d464efb68d9653db56dabe5e6625c89e87392c0b666558572c04bb3f54721e68e16fc06999fcecf88ec823088d71221b2cb4eebd0c97bed635b5f337c8fd"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.avro/avro@1.11.5?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://avro.apache.org"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/AVRO"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/avro-dev/"
        },
        {
          "type" : "vcs",
          "url" : "scm:git:https://github.com/apache/avro/avro-parent/avro"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.avro/avro@1.11.5?type=jar"
    },
    {
      "publisher" : "QOS.ch",
      "group" : "org.slf4j",
      "name" : "slf4j-api",
      "version" : "1.7.36",
      "description" : "The slf4j API",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "872da51f5de7f3923da4de871d57fd85"
        },
        {
          "alg" : "SHA-1",
          "content" : "6c62681a2f655b49963a5983b8b0950a6120ae14"
        },
        {
          "alg" : "SHA-256",
          "content" : "d3ef575e3e4979678dc01bf1dcce51021493b4d11fb7f1be8ad982877c16a1c0"
        },
        {
          "alg" : "SHA-512",
          "content" : "f9b033fc019a44f98b16048da7e2b59edd4a6a527ba60e358f65ab88e0afae03a9340f1b3e8a543d49fa542290f499c5594259affa1ff3e6e7bf3b428d4c610b"
        },
        {
          "alg" : "SHA-384",
          "content" : "2b14ad035877087157e379d3277dcdcd79e58d6bdb147c47d29e377d75ce53ad42cafbf22f5fb7827c7e946ff4876b9a"
        },
        {
          "alg" : "SHA3-384",
          "content" : "3bc3110dafb8d5be16a39f3b2671a466463cd99eb39610c0e4719a7bf2d928f2ea213c734887c6926a07c4cca7769e4b"
        },
        {
          "alg" : "SHA3-256",
          "content" : "ba2608179fcf46e2291a90b9cbb4aa30d718e481f59c350cc21c73b88d826881"
        },
        {
          "alg" : "SHA3-512",
          "content" : "14c4edcd19702ef607d78826839d8a6d3a39157df54b89a801d3d3cbbe1307131a77671b041c761122730fb1387888c5ec2e46bdd80e1cb07f8f144676441824"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.slf4j.org"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/qos-ch/slf4j/slf4j-api"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.flink",
      "name" : "flink-shaded-force-shading",
      "version" : "17.0",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "6890ff555c82f3bb156cf9c73bf09cf9"
        },
        {
          "alg" : "SHA-1",
          "content" : "345c153973a17fb8a98d368352e14893edcbd610"
        },
        {
          "alg" : "SHA-256",
          "content" : "dcc7dff160a40b74fa5db2805b2004153ffd0517968f3c7843a8ee43be82e710"
        },
        {
          "alg" : "SHA-512",
          "content" : "9de23513832248618b78e279c0e3900f5cafb7193254ef6818b4f0b6f3b70045dd9cc4fdd13caeeca8b70a44f38201ce055f07248cdf08930a20e1b7a73997ff"
        },
        {
          "alg" : "SHA-384",
          "content" : "063611872b4b1a1718e0472e32198bded0d74fa656e5c47a7b20038cd5ff70106e3109b60fe882880feea486e1ef83bf"
        },
        {
          "alg" : "SHA3-384",
          "content" : "26f9225d2c401391133dabc97340d1048504deaaae3c6b02ba20b83d4efe8c53a6d4f4e63a04e4317f9bce6b1a1ee013"
        },
        {
          "alg" : "SHA3-256",
          "content" : "aae3e6da763019cc2fd4919df572a3653b46aedaf60a3adb3d28bc7f94023523"
        },
        {
          "alg" : "SHA3-512",
          "content" : "e616e089fb70dc79503b6c235bd8d14c6e7c8e608c87bb4fcd02fe86d6ba27985bac4f144843af9fc7a7c495de7057320ccddea9f571c42bdcaa1c73966f265f"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.flink/flink-shaded-force-shading@17.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://flink.apache.org/flink-shaded-force-shading"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink-shaded/flink-shaded-force-shading"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.flink/flink-shaded-force-shading@17.0?type=jar"
    },
    {
      "group" : "com.google.code.findbugs",
      "name" : "jsr305",
      "version" : "1.3.9",
      "description" : "JSR305 Annotations for Findbugs",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "1d5a772e400b04bb67a7ef4a0e0996d8"
        },
        {
          "alg" : "SHA-1",
          "content" : "40719ea6961c0cb6afaeb6a921eaa1f6afd4cfdf"
        },
        {
          "alg" : "SHA-256",
          "content" : "905721a0eea90a81534abb7ee6ef4ea2e5e645fa1def0a5cd88402df1b46c9ed"
        },
        {
          "alg" : "SHA-512",
          "content" : "06da282cfd8e30d9f8cf17702b8709172b00e22b75a627a1d85f8989615b8a1a401bc25d9aee7b14aed1d9b5df73bf2ea8d66f9c8468d9577c29f0ccfa2cc70a"
        },
        {
          "alg" : "SHA-384",
          "content" : "56e6b41ef62eb5edfed0203802cefae9c2df86388148e420bb0c687abb2b80e14d5c2a82d5b35dce4badaf148f94eada"
        },
        {
          "alg" : "SHA3-384",
          "content" : "58c3bf89fa1afa75c2c5078159fd28e27b2273d437f26aaaa7391310b6f0823f3cf476a24f5631c0881f3f7e946d99be"
        },
        {
          "alg" : "SHA3-256",
          "content" : "c333ea5faedfa78e0614a2620438d5724eab093df4e960918391b6a44c2915b0"
        },
        {
          "alg" : "SHA3-512",
          "content" : "67ec31448e156cc72dd036060b460bb2667a13b1cbe500b6b7eed3235b1994b44c39f440ebd07b21ec9595b166ad61121d4f6a132b5b313c558ab21b72599425"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://findbugs.sourceforge.net/"
        },
        {
          "type" : "vcs",
          "url" : "http://findbugs.googlecode.com/svn/trunk/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"
    }
  ],
  "dependencies" : [
    {
      "ref" : "pkg:maven/io.confluent.flink/flink-sql-avro-confluent-registry@1.19.3-cp4?type=jar",
      "dependsOn" : [
        "pkg:maven/io.confluent.flink/flink-avro-confluent-registry@1.19.3-cp4?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/org.apache.flink/flink-shaded-force-shading@17.0?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.confluent.flink/flink-avro-confluent-registry@1.19.3-cp4?type=jar",
      "dependsOn" : [
        "pkg:maven/io.confluent/kafka-schema-registry-client@7.2.2?type=jar",
        "pkg:maven/io.confluent.flink/flink-avro@1.19.3-cp4?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.confluent/kafka-schema-registry-client@7.2.2?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.kafka/kafka-clients@7.2.2-ccs?type=jar",
        "pkg:maven/org.apache.commons/commons-compress@1.26.0?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.18.6?type=jar",
        "pkg:maven/com.google.guava/guava@30.1.1-jre?type=jar",
        "pkg:maven/io.confluent/common-utils@7.2.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.kafka/kafka-clients@7.2.2-ccs?type=jar",
      "dependsOn" : [
        "pkg:maven/com.github.luben/zstd-jni@1.5.2-1?type=jar",
        "pkg:maven/org.xerial.snappy/snappy-java@1.1.10.4?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.github.luben/zstd-jni@1.5.2-1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.xerial.snappy/snappy-java@1.1.10.4?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-compress@1.26.0?type=jar",
      "dependsOn" : [
        "pkg:maven/commons-io/commons-io@2.15.1?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.19.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/commons-io/commons-io@2.15.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-lang3@3.19.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.18.6?type=jar",
      "dependsOn" : [
        "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.18.6?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.18.6?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.18.6?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.18.6?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.google.guava/guava@30.1.1-jre?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.confluent/common-utils@7.2.2?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.confluent.flink/flink-avro@1.19.3-cp4?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.avro/avro@1.11.5?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.avro/avro@1.11.5?type=jar",
      "dependsOn" : [
        "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.18.6?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.18.6?type=jar",
        "pkg:maven/org.apache.commons/commons-compress@1.26.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.flink/flink-shaded-force-shading@17.0?type=jar",
      "dependsOn" : [ ]
    }
  ]
}