{
  "bomFormat" : "CycloneDX",
  "specVersion" : "1.4",
  "serialNumber" : "urn:uuid:70efc712-2b8f-4575-ac8d-04684ef6c43e",
  "version" : 1,
  "metadata" : {
    "timestamp" : "2026-04-01T14:18:51Z",
    "tools" : [
      {
        "vendor" : "OWASP Foundation",
        "name" : "CycloneDX Maven plugin",
        "version" : "2.7.7",
        "hashes" : [
          {
            "alg" : "MD5",
            "content" : "436dfb24c63a322708e4a5143d8543af"
          },
          {
            "alg" : "SHA-1",
            "content" : "3ef2e8728dc9eff2f129c34057e46e9d2b10629a"
          },
          {
            "alg" : "SHA-256",
            "content" : "c185b79bf0f9264f43bc8c222c44db67bea275bb727e3327cf9aea6bf45292c9"
          },
          {
            "alg" : "SHA-512",
            "content" : "41488733e31e6c5315327dcc86187c2b9a6b96cd08f7e2157ce130688afde29c313fc6a73edb8a76333a930c78874aa2eac874448920030c0f7af0ac05e65ced"
          },
          {
            "alg" : "SHA-384",
            "content" : "f9462f86240fd9fc0942f34981e6d2371f252aa1a4e5e8c3c14e7f0f1a4e4de69ef972e51cf09a749afb6d97c13e67ed"
          },
          {
            "alg" : "SHA3-384",
            "content" : "c755af6239348bc7dd1e1e6b5f14f7cf7e1560d689b252d9610cd865fa4b419d0b8e26260731dfc5da2176b6e706b414"
          },
          {
            "alg" : "SHA3-256",
            "content" : "309aac91005470c9c834354ab918759e2ae7ec52fc1676002621a5bbdf3b7827"
          },
          {
            "alg" : "SHA3-512",
            "content" : "c634570dcf8302e61005e5fa91a9a0d9b81542f731967b3c9f6d3ef89e3b945bd36d7ab69e2ebad8124b9c05da504361c8b36a8ce528d844409eeb7df4eea6ce"
          }
        ]
      }
    ],
    "component" : {
      "publisher" : "The Apache Software Foundation",
      "group" : "io.confluent.flink",
      "name" : "flink-sql-avro-confluent-registry",
      "version" : "2.1.1-cp2",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.confluent.flink/flink-sql-avro-confluent-registry@2.1.1-cp2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://flink.apache.org/flink-formats/flink-sql-avro-confluent-registry"
        },
        {
          "type" : "distribution",
          "url" : "s3://cp-flink-staging-654654529379-us-west-2/maven-staging/adfd7d6c2734d3ce8ae8760b1f9047c1d45ed6d6"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink/flink-formats/flink-sql-avro-confluent-registry"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.confluent.flink/flink-sql-avro-confluent-registry@2.1.1-cp2?type=jar"
    },
    "properties" : [
      {
        "name" : "maven.goal",
        "value" : "makeBom"
      },
      {
        "name" : "maven.scopes",
        "value" : "compile,provided,runtime,system"
      }
    ]
  },
  "components" : [
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "io.confluent.flink",
      "name" : "flink-avro-confluent-registry",
      "version" : "2.1.1-cp2",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "85be3eb1d6351e69e639384831c56f81"
        },
        {
          "alg" : "SHA-1",
          "content" : "dcde62c8a4f3430b9b32a059ee51393cfb22edbb"
        },
        {
          "alg" : "SHA-256",
          "content" : "e6a76dfe55204dd1ee2dbfe0e1e2894f8f40a466d3ec01763d9a44c02ad02035"
        },
        {
          "alg" : "SHA-512",
          "content" : "6e87c8da5c1a8152cf65bea8e9809deb81dce7646f4a0235ff45eb7581d8548f5c253f67c14a160abf24a346f9085eba24894e1c812cf71a2cc8f3f55ccc625b"
        },
        {
          "alg" : "SHA-384",
          "content" : "83d6ed67defaa52dfc292b8dd5251af47f6efec4fe78aa9b65c47c8bee9f53d4cb81afcb561e6631c5a2ebff4ffe8e61"
        },
        {
          "alg" : "SHA3-384",
          "content" : "b76740677a5ad11cf46eb5896ad333c4120d9293d7888a1fac486a350e3d9d69e6000ea394ccac3d9d7bc84007babad8"
        },
        {
          "alg" : "SHA3-256",
          "content" : "817d0ffef2462468df60ced7600d6f6811298aad1ec72c16eb22baa07aaec2eb"
        },
        {
          "alg" : "SHA3-512",
          "content" : "1bf92e0a7fbcd52e209533ee06991e724da2b2201df1c99dd7cc18f76f413d22f4a039ad4e844bd2f4a3c0500a0411285719353c78bfa1dd0710c12e67c46913"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.confluent.flink/flink-avro-confluent-registry@2.1.1-cp2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://flink.apache.org/flink-formats/flink-avro-confluent-registry"
        },
        {
          "type" : "distribution",
          "url" : "s3://cp-flink-staging-654654529379-us-west-2/maven-staging/adfd7d6c2734d3ce8ae8760b1f9047c1d45ed6d6"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink/flink-formats/flink-avro-confluent-registry"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.confluent.flink/flink-avro-confluent-registry@2.1.1-cp2?type=jar"
    },
    {
      "publisher" : "Confluent, Inc.",
      "group" : "io.confluent",
      "name" : "kafka-schema-registry-client",
      "version" : "7.5.3",
      "description" : "Schema Registry provides a RESTful interface for storing and retrieving versioned Avro schemas for use with Kafka.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "620efc0633530b8e6dd5c0a7f7380b41"
        },
        {
          "alg" : "SHA-1",
          "content" : "9834e35bd685d2bec552155a89fa0a828a40f28e"
        },
        {
          "alg" : "SHA-256",
          "content" : "4884c713f69365a1e857d496c0e1f8fe99f2d20260624022aedd7f008119c9c5"
        },
        {
          "alg" : "SHA-512",
          "content" : "02eb78a1596d7b61820d06dbea97e7d15e85698391af1b373ce88b3ba11ca743293f4861a5f5d24d47a2b16bf0aee165c90928e3870551a7601dc66700147857"
        },
        {
          "alg" : "SHA-384",
          "content" : "5a6a6d86f1b35008c303363e4d9c1f78e0ded765470ce28af666f5159bace5b6fb84b6bbad7aba65beeeca4ab94a377f"
        },
        {
          "alg" : "SHA3-384",
          "content" : "8a832d373c82ba38a056a56204518c4856bd5981d3ae50bbb55b98f5bc313ffc03c8b85a7a97dddc6e04c4f384666b78"
        },
        {
          "alg" : "SHA3-256",
          "content" : "79271313e8370909484227dc0ff65d3ff7cbbaea07b8d95010ed167d013b7c81"
        },
        {
          "alg" : "SHA3-512",
          "content" : "62638a749232923b2df45ef9ac8b9503dfe710a562ed066d6f35dc5ad51d4fd9d294b47aee3713894e5370da6b0ca2c3b61b0dd6cf296a433149a8ed09ecefff"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.confluent/kafka-schema-registry-client@7.5.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://confluent.io/kafka-schema-registry-client"
        },
        {
          "type" : "distribution",
          "url" : "s3://cp-flink-staging-654654529379-us-west-2/maven-staging/adfd7d6c2734d3ce8ae8760b1f9047c1d45ed6d6"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/confluentinc/schema-registry/kafka-schema-registry-client"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.confluent/kafka-schema-registry-client@7.5.3?type=jar"
    },
    {
      "group" : "org.yaml",
      "name" : "snakeyaml",
      "version" : "2.3",
      "description" : "YAML 1.1 parser and emitter for Java",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "2a1c2ee8923dcd6bd6d025751af5df37"
        },
        {
          "alg" : "SHA-1",
          "content" : "936b36210e27320f920536f695cf1af210c44586"
        },
        {
          "alg" : "SHA-256",
          "content" : "63a76fe66b652360bd4c2c107e6f0258daa7d4bb492008ba8c26fcd230ff9146"
        },
        {
          "alg" : "SHA-512",
          "content" : "1c9c78f0d102ae49a7c06f9e20c6a79a4fb9a2af962230ee6e136bda0caf10dcbb9deadc1c3ab15f74a4982ec8f8266217115e357329fde5b3f4f1858882de0c"
        },
        {
          "alg" : "SHA-384",
          "content" : "77b1d06e83fd51b83b13372d5ef2eb43c5a66f193db857cee947ae4e900e4a4a0c66a8074435984b9a0b007a69cc2b4f"
        },
        {
          "alg" : "SHA3-384",
          "content" : "550c4e7a119fd690f750317dc0e20ad7bfc7fa28fa0409fc572bc745d51340a60e9e2ce2af97f458daa561155130bb97"
        },
        {
          "alg" : "SHA3-256",
          "content" : "d1b540ee39c34ab1484be27d2dd56a14aa48f88668905f9ad176932f4b2cd5d6"
        },
        {
          "alg" : "SHA3-512",
          "content" : "879ccb34343ebd4ac4888091d97f393c5f75cbb066cf8cf1b9b3eb03a3442cb17326c60bd0db1403aa66ed1f0a5a0d548c96dbce74ebc5c3d6d93950f24b417f"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.yaml/snakeyaml@2.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://bitbucket.org/snakeyaml/snakeyaml"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://bitbucket.org/snakeyaml/snakeyaml/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://bitbucket.org/snakeyaml/snakeyaml/src"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.yaml/snakeyaml@2.3?type=jar"
    },
    {
      "group" : "org.apache.kafka",
      "name" : "kafka-clients",
      "version" : "7.5.3-ccs",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "239b3bfe421cba4341a39b4e7c654061"
        },
        {
          "alg" : "SHA-1",
          "content" : "c7f185d7adffa173d4481aa3e3becd9160b25301"
        },
        {
          "alg" : "SHA-256",
          "content" : "a339f320f1fe12d72cde4eefd21856272a78f04a9de7f70e068c1e3f95dfc3c7"
        },
        {
          "alg" : "SHA-512",
          "content" : "caec3801322d15dfe179a609eae5845873c3d221901c081b5a207fa468a2bed8a23fae38c5011204e88249bce1e3806fcab22d976e0164c49bb8d3e9b1886093"
        },
        {
          "alg" : "SHA-384",
          "content" : "25c673e7320092fe666ba406cc6c25a150f8e6457e4f05f0cca2c676d08c416ae7e4de40292d707b2212901226d4e38f"
        },
        {
          "alg" : "SHA3-384",
          "content" : "498dfaa70e118f6f4e6b392ea5cd9d711bfbddb1a3db28ac52c29bdef4c9fc1f5abbc6fd4af2241addbf6be6085dda0c"
        },
        {
          "alg" : "SHA3-256",
          "content" : "33fec06745623242df3b4c53892ae110988d2bab3bdc792a8891d6a862c0d368"
        },
        {
          "alg" : "SHA3-512",
          "content" : "29a01e0a0738250ef8a8c86a273ffc061d1220853f22e1c3dc9087b1df8cb26b183ad8d01acaa32ee7ce40f0104c9c0b454f3f1249b2dc1e1d15d9f5aa1b7dcb"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.kafka/kafka-clients@7.5.3-ccs?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://kafka.apache.org"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.kafka/kafka-clients@7.5.3-ccs?type=jar"
    },
    {
      "publisher" : "com.github.luben",
      "group" : "com.github.luben",
      "name" : "zstd-jni",
      "version" : "1.5.5-1",
      "description" : "JNI bindings for Zstd native library that provides fast and high compression lossless algorithm for Java and all JVM languages.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "16ede3375b6c900abafd95b600b512b9"
        },
        {
          "alg" : "SHA-1",
          "content" : "fda1d6278299af27484e1cc3c79a060e41b7ef7e"
        },
        {
          "alg" : "SHA-256",
          "content" : "f779fcd068ad91ac77aa0239104bd42793b0dce807fb1d73b51c635e0ea1e293"
        },
        {
          "alg" : "SHA-512",
          "content" : "15762f4bab9bf89211fd1a59f40bfc15e8d4041ad8be29966d93b4a2272059b57cacb97483eeb3ba9a63f2d78210d194591d0e7db923a6b5e754ef6f28c0d72e"
        },
        {
          "alg" : "SHA-384",
          "content" : "b6db1222eb674bc743f85b768d585f75b30d7db70c70d75ec1fab33b3aa343ea05e59b906d7c2784d844911f05f792b6"
        },
        {
          "alg" : "SHA3-384",
          "content" : "c87e5e4dc3a2daf1ccfc1346df09fd58ed2cb71accd35a1a175df21533540670c8200d234ae41ddb444ffa35822d98b2"
        },
        {
          "alg" : "SHA3-256",
          "content" : "3d55d45a6304256d3119bd1d0828b1c29be838dde82af51a51faaffdf25078f1"
        },
        {
          "alg" : "SHA3-512",
          "content" : "98589aaafe83b33af917076b162231a491b226b4972f6f526fb7afad24a27209d656b197d1e6f315c4aba1b40d60cea39ef3028e4b8b77e8ce99c30696b8a22c"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-2-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/com.github.luben/zstd-jni@1.5.5-1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/luben/zstd-jni"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.github.luben/zstd-jni@1.5.5-1?type=jar"
    },
    {
      "publisher" : "xerial.org",
      "group" : "org.xerial.snappy",
      "name" : "snappy-java",
      "version" : "1.1.10.7",
      "description" : "snappy-java: A fast compression/decompression library",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "d74bb2e2857f965683c9de931b71fc86"
        },
        {
          "alg" : "SHA-1",
          "content" : "3049f95640f4625a945cfab85715f603fa4c8f80"
        },
        {
          "alg" : "SHA-256",
          "content" : "4c766cb3f855415ee734b2392949a0b6f12a60879334a74518deaf6270d32e36"
        },
        {
          "alg" : "SHA-512",
          "content" : "22a6ebb8e8ad4d8a149b0c67d8658ac1535d7014857064c4f7ed4999e29c6186de8a80b50dd9b59f631fa1c24970524fdbbb84083c80c59eb0c72d4efb041fef"
        },
        {
          "alg" : "SHA-384",
          "content" : "b7ea971de5e286b4bdb8b96063f0ffe611ef82f5887fa6845fc2721bf0e71a88b0c754ba010816596f0b6c178160c0c5"
        },
        {
          "alg" : "SHA3-384",
          "content" : "9ef6c5ad194027c8b4be0f756dfeb958ae3daa5ad942b34c4e9e570ce7516ba91fad298929e4d716f6a091d0b274bbc9"
        },
        {
          "alg" : "SHA3-256",
          "content" : "83f4ede80f49271566745463652e3cdebbe4e2112174400ddf082bf9b39d09cd"
        },
        {
          "alg" : "SHA3-512",
          "content" : "3c1ffb884ac57e812f997357f9501afbffec3aaac2aa2bb87b0dd8ec2e7e43d922c250dfc658920ade2014aa138440d2d9cdfce8e453812d089898d10390a6db"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.xerial.snappy/snappy-java@1.1.10.7?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/xerial/snappy-java"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/xerial/snappy-java"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.xerial.snappy/snappy-java@1.1.10.7?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-compress",
      "version" : "1.26.0",
      "description" : "Apache Commons Compress defines an API for working with compression and archive formats. These include bzip2, gzip, pack200, LZMA, XZ, Snappy, traditional Unix Compress, DEFLATE, DEFLATE64, LZ4, Brotli, Zstandard and ar, cpio, jar, tar, zip, dump, 7z, arj.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "cbc0bb8eca12b747ca21bf998d736e60"
        },
        {
          "alg" : "SHA-1",
          "content" : "659feffdd12280201c8aacb8f7be94f9a883c824"
        },
        {
          "alg" : "SHA-256",
          "content" : "051aceb8bbcc62d0f5b2b8ac72c53767f9c59bfbd050151e65bef6f51c8ed9c9"
        },
        {
          "alg" : "SHA-512",
          "content" : "acbeaa2909b809cd561e7156df18340d96abacb179325622d73bdd6b82cb9b387d6fcb1a44d8195aad4e786da299289e17598a1d337b7c7d1c0bc610cc128714"
        },
        {
          "alg" : "SHA-384",
          "content" : "052d4d0cd1929c4299dd9d37dd36eaea6ed2be6b04d6d83a94f8608a6d1138aa81f7a34f25113ac267e7ba25ce948c9a"
        },
        {
          "alg" : "SHA3-384",
          "content" : "8b0bf441e8ce793fb6513bc07551cc48ab4507696c18e6037b0fcf35bc4e1eb3e44ed962e2d3765c86d4d912770aa53e"
        },
        {
          "alg" : "SHA3-256",
          "content" : "e441768e06092053f4703844ec0c8f2b437e06e7c190d48fec9d7682beb94c40"
        },
        {
          "alg" : "SHA3-512",
          "content" : "5984f9f08f83789555677f6800f25fa8e80a9eb2e4d46b5fb117b8efc24753644fa103a2f6b619827661a41677991bc827965172ef25f1313d8a59154e615e8d"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-compress@1.26.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-compress/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-parent/actions"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/COMPRESS"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-compress.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-compress@1.26.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-io",
      "name" : "commons-io",
      "version" : "2.15.1",
      "description" : "The Apache Commons IO library contains utility classes, stream implementations, file filters, file comparators, endian transformation classes, and much more.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "84351f7991a0e6722f00e96a4ccc376f"
        },
        {
          "alg" : "SHA-1",
          "content" : "f11560da189ab563a5c8e351941415430e9304ea"
        },
        {
          "alg" : "SHA-256",
          "content" : "a58af12ee1b68cfd2ebb0c27caef164f084381a00ec81a48cc275fd7ea54e154"
        },
        {
          "alg" : "SHA-512",
          "content" : "e9adaeed2d715ac0ae44de056ba165a743a92acbeb9871b535f7e58e0b3bc4fba276495b50429be195098a559f3adb7294048479754a0ee4d397da2efda5f81c"
        },
        {
          "alg" : "SHA-384",
          "content" : "028c72b59373d3894da22f9eb2c731aabd00f670993973f71a354d722670c12ca659686b83bbf8db32d060ca180f50b2"
        },
        {
          "alg" : "SHA3-384",
          "content" : "73cd585ab3736b4be50ec0f10dfe5ebfc3390eea8d56f07f29055f1fddb2dff8084310eaa6fb9f97ea639ed1abd7bc33"
        },
        {
          "alg" : "SHA3-256",
          "content" : "daf39bc99f1a3dc0075714a4a342a58d69a4cd62c25bc39a581f657ca72b1044"
        },
        {
          "alg" : "SHA3-512",
          "content" : "b003f8971d1536ea0fc4320dbfe17d7259d49e59314739f9fc83134e511facbff048b0ef4f86a9d0893781ca09c95cebc3b181a6c89a2d41e851870b96e76839"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-io/commons-io@2.15.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-io/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-parent/actions"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/IO"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-io.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-io/commons-io@2.15.1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-lang3",
      "version" : "3.18.0",
      "description" : "Apache Commons Lang, a package of Java utility classes for the classes that are in java.lang's hierarchy, or are considered to be so standard as to justify existence in java.lang. The code is tested using the latest revision of the JDK for supported LTS releases: 8, 11, 17 and 21 currently. See https://github.com/apache/commons-lang/blob/master/.github/workflows/maven.yml Please ensure your build environment is up-to-date and kindly report any build issues.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "48b9886957920a4cdb602780ca345087"
        },
        {
          "alg" : "SHA-1",
          "content" : "fb14946f0e39748a6571de0635acbe44e7885491"
        },
        {
          "alg" : "SHA-256",
          "content" : "4eeeae8d20c078abb64b015ec158add383ac581571cddc45c68f0c9ae0230720"
        },
        {
          "alg" : "SHA-512",
          "content" : "c2c9d497fc1be411050f4011b2407764b78aa098eb42925af8a197eabdbc25b507f09fb898805e9bed4815f35236a508ee5b096e36f363df4d407232d50fc832"
        },
        {
          "alg" : "SHA-384",
          "content" : "4fb3f101106e4ce3666d5c15d276ba86f7683a0ef35f0384edfcd579ea454275edbb7400795d265ec3a38e39997e79b8"
        },
        {
          "alg" : "SHA3-384",
          "content" : "aada7e3612cf3f6190a19fa7c3db74df1e13ec56b300be9bb4317d261d5877c84ab59ba9a09168becdbd82cd41961395"
        },
        {
          "alg" : "SHA3-256",
          "content" : "306d286d0bd7549c203cc802fd755d354c4f7926fa023f4e83623ba1a6261250"
        },
        {
          "alg" : "SHA3-512",
          "content" : "f6f1ecc684e309d7b9fc5c343792508fee935cd2119d962721662c5af88e4864ba6f47a863e083714f315f926c156de1970cd2fb577449bdfdc7bf98a4a451fa"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-lang/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-lang/actions"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/LANG"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf/commons-lang.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar"
    },
    {
      "publisher" : "FasterXML",
      "group" : "com.fasterxml.jackson.core",
      "name" : "jackson-databind",
      "version" : "2.18.6",
      "description" : "General data-binding functionality for Jackson: works on core streaming API",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "0199275814d930ae615971749d009490"
        },
        {
          "alg" : "SHA-1",
          "content" : "7c2dd5a1a41c315150158557896096b484562417"
        },
        {
          "alg" : "SHA-256",
          "content" : "45d124736ea29dc374171fc1a8a9958e0f44407c1e0aae0297d8eee267fb592e"
        },
        {
          "alg" : "SHA-512",
          "content" : "c67c64f941fc916b80787b71b74dfa3c9137a3765c648266ff29dbaf427484d2ee7ab47e6080a9be1dd28d361cc987840d4415b597aa4ead69b5e23b20a533b2"
        },
        {
          "alg" : "SHA-384",
          "content" : "27515e5d81dbd113c3d9d13b62871066fc1ef829352dfcab2718c522c83b2f30eaf318d9a8ebb215286ff30fc83c2c7a"
        },
        {
          "alg" : "SHA3-384",
          "content" : "7a312b73ac433b2c76166e537013aeed46fb81b0b1637c9dc275bfcabe14c92fe30b7a9c6903cebf803c5f313500091b"
        },
        {
          "alg" : "SHA3-256",
          "content" : "592598bffc53b3b095a0d513dffc414a25f1d73b79679527eb31c3b1a752d517"
        },
        {
          "alg" : "SHA3-512",
          "content" : "c7be7e7e7057d6aad7e5beaab769d2ad412baaf84dc105c6c06dbff81c591b796e14fa9bddf4a2a7ead869e319a67aad0585c718502c1ae5cd47ac8abdb3caac"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.18.6?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/FasterXML/jackson"
        },
        {
          "type" : "distribution",
          "url" : "https://central.sonatype.com/api/v1/publisher"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/FasterXML/jackson-databind/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/FasterXML/jackson-databind"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.18.6?type=jar"
    },
    {
      "publisher" : "FasterXML",
      "group" : "com.fasterxml.jackson.core",
      "name" : "jackson-annotations",
      "version" : "2.18.6",
      "description" : "Core annotations used for value types, used by Jackson data binding package.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "80f1abd97c7f0c93d6a199c92f9e870a"
        },
        {
          "alg" : "SHA-1",
          "content" : "d0d2f9e504c6fe443eb2785370c701f911fc87c6"
        },
        {
          "alg" : "SHA-256",
          "content" : "face5c37bee1f0768f5f198d077fc29d163becca95de9e0f13962c84d1047662"
        },
        {
          "alg" : "SHA-512",
          "content" : "e7671ba959d45c3943094e91d369df97af2990bdaa5ab1361c5f55dbb4171700ff9e0900f1376ba13afdbd9e24a708f7393ce01f0fef87e250de6bfa69500634"
        },
        {
          "alg" : "SHA-384",
          "content" : "8a1ee55f2b797feb1eff4f351d6ab7532ff6c6c23946cf22c7ecc7b54df71a2ab03c9aade8fbac01ee6d3be5a6015d17"
        },
        {
          "alg" : "SHA3-384",
          "content" : "0d1ce70acd038bdc95068909f579d2ed58411384e5c4438cd717e6e7cfbbe73a95d703bc9c71ae7f3031bc87758bc601"
        },
        {
          "alg" : "SHA3-256",
          "content" : "7f65b1e6e4202252cdfde7e49b141c3ab27f1dd63f3b80d44610435f4092c69d"
        },
        {
          "alg" : "SHA3-512",
          "content" : "85fd71a6a9f264f558727f9d07879fd76d6726061830e65c774a4911770a04e0a2aec41558b42094ba819b8ae0058bbe48c5dbce3d74be8729baf6d71f1aee4e"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.18.6?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/FasterXML/jackson"
        },
        {
          "type" : "distribution",
          "url" : "https://central.sonatype.com/api/v1/publisher"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/FasterXML/jackson-annotations/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/FasterXML/jackson-annotations"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.18.6?type=jar"
    },
    {
      "publisher" : "FasterXML",
      "group" : "com.fasterxml.jackson.core",
      "name" : "jackson-core",
      "version" : "2.18.6",
      "description" : "Core Jackson processing abstractions (aka Streaming API), implementation for JSON",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "95746cd6a85d0296d6986b14787a6bee"
        },
        {
          "alg" : "SHA-1",
          "content" : "f7171732c04c97ff373bed60d2eba22ec4bab8e0"
        },
        {
          "alg" : "SHA-256",
          "content" : "e7e1bfa50f0a79db37e6aa37db111cf03aebf4a484b359d21127ab43ab2398c6"
        },
        {
          "alg" : "SHA-512",
          "content" : "56ad5272272418a3864335b7cc9323bee496993bb317a35ad7c7f6bc001376feaecfa357ed2b737e36ae9ea738433906c2db05b4cda471463329e6909712f377"
        },
        {
          "alg" : "SHA-384",
          "content" : "f7d8f2175068c0b3f79d300672059502f14be699fb6ca3979b256ff53a0a9c8fa797a288990278db49d8b566e9635b6c"
        },
        {
          "alg" : "SHA3-384",
          "content" : "7c899c0bad1755db144cee72ec96961e186b47ba2229a2aac893091ddb338c6e4b7dbbec61f5998a1a9becf06b973bff"
        },
        {
          "alg" : "SHA3-256",
          "content" : "33f6bd5f2b9f80f758851629eab6425c2a3dee7bee62bc5113a7073242b49d2a"
        },
        {
          "alg" : "SHA3-512",
          "content" : "a301262a6c54d5e905715a27588836df86ce2945d447dcd4bcd17e36315d62a50d1a33ae1e379c35f837ee5decb9ac29419b8abec65cebe54d8d14fbcf714e86"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.18.6?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/FasterXML/jackson-core"
        },
        {
          "type" : "distribution",
          "url" : "https://central.sonatype.com/api/v1/publisher"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/FasterXML/jackson-core/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/FasterXML/jackson-core"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.18.6?type=jar"
    },
    {
      "group" : "com.google.guava",
      "name" : "guava",
      "version" : "32.0.1-jre",
      "description" : "Guava is a suite of core and expanded libraries that include utility classes, Google's collections, I/O classes, and much more.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "6951895e804b36322214c95917e598d4"
        },
        {
          "alg" : "SHA-1",
          "content" : "6e5d51a72d142f2d40a57dfb897188b36a95b489"
        },
        {
          "alg" : "SHA-256",
          "content" : "bd7fa227591fb8509677d0d1122cf95158f3b8a9f45653f58281d879f6dc48c5"
        },
        {
          "alg" : "SHA-512",
          "content" : "5dbe7a697511cfbe44f3ffb954e32e997677ecc61f03bb7bb374f1b8fa4a931a95cd9d1f5288eb5d42e2aa380e3241b35059786c07edc48e5aa67c30cddad8a5"
        },
        {
          "alg" : "SHA-384",
          "content" : "abad4556e073fb38062c636b6599ceed992302c7d98150e3842d32ce92f6aac7d630633c56efa581523d591361fcf898"
        },
        {
          "alg" : "SHA3-384",
          "content" : "c7b02d77e04c567e8870674f71a60141e83ca9e5e9180138450ede78ad7f2be8b6636c514096e15ba2921c2889427852"
        },
        {
          "alg" : "SHA3-256",
          "content" : "17f18d8631c9bff9234c214522ce89eb1feef27a4dfe990760d4943ad3de710d"
        },
        {
          "alg" : "SHA3-512",
          "content" : "7cf7847812b47cc232ef3c27719457dd19610b3e3bb25c1be640821a3a2be67781047f41e34491b5c8ed68010bbb1d53c5f7706633f3a3f44f3f3133bb7635ec"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.guava/guava@32.0.1-jre?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/google/guava"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/google/guava/actions"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/google/guava/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/google/guava/guava"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.guava/guava@32.0.1-jre?type=jar"
    },
    {
      "publisher" : "Confluent, Inc.",
      "group" : "io.confluent",
      "name" : "common-utils",
      "version" : "7.5.3",
      "description" : "Common utilities, including metrics and config.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "6a58c0bf30b55b149a43eef524835921"
        },
        {
          "alg" : "SHA-1",
          "content" : "b404a85d5ccc70bc01df50c804fc244f4efbfd4b"
        },
        {
          "alg" : "SHA-256",
          "content" : "4cf780d3172c9a63a1eef89a3c739b315efb463d6c7c99dd8c438add44c7fa42"
        },
        {
          "alg" : "SHA-512",
          "content" : "ec5534f1a7ca725fa97fd28b2285f1fb5c79240bdb09fbc0ff22d2f8c9a46f1fe41df10c787ccde2c579d4d4ade08cc5fa3b3e58c2049b9476591f62d7ccc627"
        },
        {
          "alg" : "SHA-384",
          "content" : "9a209e9fce3060eeda78ec07af5e4b5e8e095226ae3837516f04759e5350ae1b9240bc462c91ca72447482d56437d4c4"
        },
        {
          "alg" : "SHA3-384",
          "content" : "d6567c8e605dad4a8f66ebf10862968b36de322e347c27cfb4c57812daebecaa9703d2462e3f4e347031b8e106565b04"
        },
        {
          "alg" : "SHA3-256",
          "content" : "45f56350511bb9977ffa81e40b31103f56434396173ed9fc2a859a421792db00"
        },
        {
          "alg" : "SHA3-512",
          "content" : "63f66b11d68627282738f3acf8a15636ae26e21ec7dec2312f62d502ade8d00dd64c9f01f34ee76119dbdfefde0f157eab72fe93352f22fcd07052582265e634"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.confluent/common-utils@7.5.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://confluent.io/common-utils"
        },
        {
          "type" : "distribution",
          "url" : "s3://cp-flink-staging-654654529379-us-west-2/maven-staging/adfd7d6c2734d3ce8ae8760b1f9047c1d45ed6d6"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/confluentinc/common/common-utils"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.confluent/common-utils@7.5.3?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "io.confluent.flink",
      "name" : "flink-avro",
      "version" : "2.1.1-cp2",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "1a6565058d02dbc6b02f5cedc4dc25ae"
        },
        {
          "alg" : "SHA-1",
          "content" : "41b236e530e82b93327b0bf2953cadf0e912b8e0"
        },
        {
          "alg" : "SHA-256",
          "content" : "e42cb0d7b58678f130775aa860c4312585e06dc5b35250c114d60fc3d01c19e3"
        },
        {
          "alg" : "SHA-512",
          "content" : "75b5e89e698c901631c1fae22d7f2ccc5d697d56ea16373ad95842a16a076cb4468ed8f8819c8ef0f107d39077be3b6fda69ea88585c5edbab9dea7e0877ea16"
        },
        {
          "alg" : "SHA-384",
          "content" : "1ee5b0e309782791379b1c80842b6cd9db14224060ad6dbaaad85b5516880e2e16d25e6bc1bd8307c1fa2a7990a6cd4e"
        },
        {
          "alg" : "SHA3-384",
          "content" : "1d6d5fe46f0c73cb915950ad081374b178fcaffba29da19a58f9bdbf7ad451c444a21579254e44f9750da2ec07332ab1"
        },
        {
          "alg" : "SHA3-256",
          "content" : "e58c60b0800d735a42ee49e7b21b253a1d49a73d5bc01196fcb7a262277c1f48"
        },
        {
          "alg" : "SHA3-512",
          "content" : "f147ba2e664d3b2b03b9238e7db1278ff3c8cc1d6e2a1f14ee059b5390deb855af1856348800370dc911e7c944c18cc99c152eea1b3654fc5342d167beffc7d4"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.confluent.flink/flink-avro@2.1.1-cp2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://flink.apache.org/flink-formats/flink-avro"
        },
        {
          "type" : "distribution",
          "url" : "s3://cp-flink-staging-654654529379-us-west-2/maven-staging/adfd7d6c2734d3ce8ae8760b1f9047c1d45ed6d6"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink/flink-formats/flink-avro"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.confluent.flink/flink-avro@2.1.1-cp2?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.avro",
      "name" : "avro",
      "version" : "1.11.5",
      "description" : "Avro core components",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "b4e9758699f388a661d564c5d26a83a1"
        },
        {
          "alg" : "SHA-1",
          "content" : "39b03945fc96f8e6146849aa49b516cf3657b151"
        },
        {
          "alg" : "SHA-256",
          "content" : "b3c55da4c58304f823f4a2161a308888b9e7b8bc1c7387a4fa3ca1cd48617f93"
        },
        {
          "alg" : "SHA-512",
          "content" : "c3f8b87cd0caf4064b039d2a66273a5f5c22f38d71ef9ffebbe25953bc0fcb2f48d5e4fbac0777630ad410d3506255d6d74a3a1ef961a02f7d4d7a17c9c4c17e"
        },
        {
          "alg" : "SHA-384",
          "content" : "37357433b72e3fa4d9db3616018922d0299c8e0edd2df244b2d591909c40f0308999de02513e71ec113a4f81576cf3c3"
        },
        {
          "alg" : "SHA3-384",
          "content" : "c13b67dc40b66c667901dc4216c1833d740f7685f1783217447b799738c38366f08947323b8bc72399b0d9e553da5754"
        },
        {
          "alg" : "SHA3-256",
          "content" : "65a72c91db569bff8a68f52a22b619938768537eaf587cdd22b8013ad241e9e8"
        },
        {
          "alg" : "SHA3-512",
          "content" : "30f5d464efb68d9653db56dabe5e6625c89e87392c0b666558572c04bb3f54721e68e16fc06999fcecf88ec823088d71221b2cb4eebd0c97bed635b5f337c8fd"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.avro/avro@1.11.5?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://avro.apache.org"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/AVRO"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/avro-dev/"
        },
        {
          "type" : "vcs",
          "url" : "scm:git:https://github.com/apache/avro/avro-parent/avro"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.avro/avro@1.11.5?type=jar"
    },
    {
      "publisher" : "QOS.ch",
      "group" : "org.slf4j",
      "name" : "slf4j-api",
      "version" : "1.7.36",
      "description" : "The slf4j API",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "872da51f5de7f3923da4de871d57fd85"
        },
        {
          "alg" : "SHA-1",
          "content" : "6c62681a2f655b49963a5983b8b0950a6120ae14"
        },
        {
          "alg" : "SHA-256",
          "content" : "d3ef575e3e4979678dc01bf1dcce51021493b4d11fb7f1be8ad982877c16a1c0"
        },
        {
          "alg" : "SHA-512",
          "content" : "f9b033fc019a44f98b16048da7e2b59edd4a6a527ba60e358f65ab88e0afae03a9340f1b3e8a543d49fa542290f499c5594259affa1ff3e6e7bf3b428d4c610b"
        },
        {
          "alg" : "SHA-384",
          "content" : "2b14ad035877087157e379d3277dcdcd79e58d6bdb147c47d29e377d75ce53ad42cafbf22f5fb7827c7e946ff4876b9a"
        },
        {
          "alg" : "SHA3-384",
          "content" : "3bc3110dafb8d5be16a39f3b2671a466463cd99eb39610c0e4719a7bf2d928f2ea213c734887c6926a07c4cca7769e4b"
        },
        {
          "alg" : "SHA3-256",
          "content" : "ba2608179fcf46e2291a90b9cbb4aa30d718e481f59c350cc21c73b88d826881"
        },
        {
          "alg" : "SHA3-512",
          "content" : "14c4edcd19702ef607d78826839d8a6d3a39157df54b89a801d3d3cbbe1307131a77671b041c761122730fb1387888c5ec2e46bdd80e1cb07f8f144676441824"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.slf4j.org"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/qos-ch/slf4j/slf4j-api"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.flink",
      "name" : "flink-shaded-force-shading",
      "version" : "20.0",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "9971c3d248dd2ea79add93f77fb0f24f"
        },
        {
          "alg" : "SHA-1",
          "content" : "4c21de8cf9ca8e93777e5d1c4a7a0a2f61852401"
        },
        {
          "alg" : "SHA-256",
          "content" : "50773dc0f2ab1831754513a8861374c0e47b077dbcc33956fe3a6cd02308d0f8"
        },
        {
          "alg" : "SHA-512",
          "content" : "5b7a0bc48a25e82da9d9f8f9a01afe30bc7411b04924d8af72f4120a937b0a3f3999a51e3a55718783d71b97000d1d18568cfb48cb609d33cd201dfe10a7f0b2"
        },
        {
          "alg" : "SHA-384",
          "content" : "3b04f01b51dda20aef349e623f6c8de4713b15f095f4af220ef77c22f0b815687bb60c9def912c2e4eff3513132d7cc7"
        },
        {
          "alg" : "SHA3-384",
          "content" : "b0378ce70a9f05966229d15f8a5f6682280f63b5494040e1002a210128878799c5761bfa1b1b5d4204a0dabb8687f90e"
        },
        {
          "alg" : "SHA3-256",
          "content" : "0e0b42aa42a5be9a215f4e893efabe6773e5c8d54299daf714e36984410c4549"
        },
        {
          "alg" : "SHA3-512",
          "content" : "e8754f8fec246e8de00e9634f8a2c9821af3ebcc194ef570328dcc6e1395b0263d5ae875a702aa69e5a9602616afc3ef51a4b63e70c6df00646b495df87ebd1d"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.flink/flink-shaded-force-shading@20.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://flink.apache.org/flink-shaded-force-shading"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink-shaded/flink-shaded-force-shading"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.flink/flink-shaded-force-shading@20.0?type=jar"
    },
    {
      "group" : "com.google.code.findbugs",
      "name" : "jsr305",
      "version" : "1.3.9",
      "description" : "JSR305 Annotations for Findbugs",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "1d5a772e400b04bb67a7ef4a0e0996d8"
        },
        {
          "alg" : "SHA-1",
          "content" : "40719ea6961c0cb6afaeb6a921eaa1f6afd4cfdf"
        },
        {
          "alg" : "SHA-256",
          "content" : "905721a0eea90a81534abb7ee6ef4ea2e5e645fa1def0a5cd88402df1b46c9ed"
        },
        {
          "alg" : "SHA-512",
          "content" : "06da282cfd8e30d9f8cf17702b8709172b00e22b75a627a1d85f8989615b8a1a401bc25d9aee7b14aed1d9b5df73bf2ea8d66f9c8468d9577c29f0ccfa2cc70a"
        },
        {
          "alg" : "SHA-384",
          "content" : "56e6b41ef62eb5edfed0203802cefae9c2df86388148e420bb0c687abb2b80e14d5c2a82d5b35dce4badaf148f94eada"
        },
        {
          "alg" : "SHA3-384",
          "content" : "58c3bf89fa1afa75c2c5078159fd28e27b2273d437f26aaaa7391310b6f0823f3cf476a24f5631c0881f3f7e946d99be"
        },
        {
          "alg" : "SHA3-256",
          "content" : "c333ea5faedfa78e0614a2620438d5724eab093df4e960918391b6a44c2915b0"
        },
        {
          "alg" : "SHA3-512",
          "content" : "67ec31448e156cc72dd036060b460bb2667a13b1cbe500b6b7eed3235b1994b44c39f440ebd07b21ec9595b166ad61121d4f6a132b5b313c558ab21b72599425"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://findbugs.sourceforge.net/"
        },
        {
          "type" : "vcs",
          "url" : "http://findbugs.googlecode.com/svn/trunk/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"
    }
  ],
  "dependencies" : [
    {
      "ref" : "pkg:maven/io.confluent.flink/flink-sql-avro-confluent-registry@2.1.1-cp2?type=jar",
      "dependsOn" : [
        "pkg:maven/io.confluent.flink/flink-avro-confluent-registry@2.1.1-cp2?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/org.apache.flink/flink-shaded-force-shading@20.0?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.confluent.flink/flink-avro-confluent-registry@2.1.1-cp2?type=jar",
      "dependsOn" : [
        "pkg:maven/io.confluent/kafka-schema-registry-client@7.5.3?type=jar",
        "pkg:maven/io.confluent.flink/flink-avro@2.1.1-cp2?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.confluent/kafka-schema-registry-client@7.5.3?type=jar",
      "dependsOn" : [
        "pkg:maven/org.yaml/snakeyaml@2.3?type=jar",
        "pkg:maven/org.apache.kafka/kafka-clients@7.5.3-ccs?type=jar",
        "pkg:maven/org.apache.commons/commons-compress@1.26.0?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.18.6?type=jar",
        "pkg:maven/com.google.guava/guava@32.0.1-jre?type=jar",
        "pkg:maven/io.confluent/common-utils@7.5.3?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.yaml/snakeyaml@2.3?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.kafka/kafka-clients@7.5.3-ccs?type=jar",
      "dependsOn" : [
        "pkg:maven/com.github.luben/zstd-jni@1.5.5-1?type=jar",
        "pkg:maven/org.xerial.snappy/snappy-java@1.1.10.7?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.github.luben/zstd-jni@1.5.5-1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.xerial.snappy/snappy-java@1.1.10.7?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-compress@1.26.0?type=jar",
      "dependsOn" : [
        "pkg:maven/commons-io/commons-io@2.15.1?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/commons-io/commons-io@2.15.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.18.6?type=jar",
      "dependsOn" : [
        "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.18.6?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.18.6?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.18.6?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.18.6?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.google.guava/guava@32.0.1-jre?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.confluent/common-utils@7.5.3?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.confluent.flink/flink-avro@2.1.1-cp2?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.avro/avro@1.11.5?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.avro/avro@1.11.5?type=jar",
      "dependsOn" : [
        "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.18.6?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.18.6?type=jar",
        "pkg:maven/org.apache.commons/commons-compress@1.26.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.flink/flink-shaded-force-shading@20.0?type=jar",
      "dependsOn" : [ ]
    }
  ]
}