2026-04-01T14:11:42Z OWASP Foundation CycloneDX Maven plugin 2.7.7 436dfb24c63a322708e4a5143d8543af 3ef2e8728dc9eff2f129c34057e46e9d2b10629a c185b79bf0f9264f43bc8c222c44db67bea275bb727e3327cf9aea6bf45292c9 41488733e31e6c5315327dcc86187c2b9a6b96cd08f7e2157ce130688afde29c313fc6a73edb8a76333a930c78874aa2eac874448920030c0f7af0ac05e65ced f9462f86240fd9fc0942f34981e6d2371f252aa1a4e5e8c3c14e7f0f1a4e4de69ef972e51cf09a749afb6d97c13e67ed c755af6239348bc7dd1e1e6b5f14f7cf7e1560d689b252d9610cd865fa4b419d0b8e26260731dfc5da2176b6e706b414 309aac91005470c9c834354ab918759e2ae7ec52fc1676002621a5bbdf3b7827 c634570dcf8302e61005e5fa91a9a0d9b81542f731967b3c9f6d3ef89e3b945bd36d7ab69e2ebad8124b9c05da504361c8b36a8ce528d844409eeb7df4eea6ce The Apache Software Foundation io.confluent.flink flink-sql-avro 1.18.1-cp6 The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users. Apache-2.0 pkg:maven/io.confluent.flink/flink-sql-avro@1.18.1-cp6?type=jar https://flink.apache.org/flink-formats/flink-sql-avros3://cp-flink-staging-654654529379-us-west-2/maven-staging/e264363095c14d00bed012cfd48992029a5d3f63https://mail-archives.apache.org/mod_mbox/www-announce/https://github.com/apache/flink/flink-formats/flink-sql-avro makeBom compile,provided,runtime,system The Apache Software Foundation io.confluent.flink flink-avro 1.18.1-cp6 The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users. optional cbd0bd3ad3bcca5b43edef349cc88bbc c85daf298c686418454256f206564bb9a4122280 4f3b0081467a041f4cff4a24d241f5c1a08b6dc0cc62e1b2c071b22e213bb93a 362ce27ff1d5ca766125b49705a6cb1055aab7dbf063cba6215bda5cf6e2ce9c9a47c0e938e8ce17ca5d6b5722717c692637a799dc38ba5911121028669d8c38 ed0866c24ae005eefbb2121da046cc6f80dd216ecca8743dc9ade8783fa8e18a7285d5b9367cbe9a0bfca3d81005449c b26ceb3bdd5e7ff7eb11a5347bea69d19bbdc3b8520bbea5ec88e28483361e71e4179cd78d0d646f618acda09ca0ad58 ea4e74580058e78a740a40fca9846c096500b94c34b8ec3c57b2c4b7537b8ff3 8438fb5703440a501deec44cedf4d37596af15e483c9786bfbb214c2e72a29c3f0655a6d6b9ea8a6974ae030792e47b51b844398ac174d95cfe60c819732da77 Apache-2.0 pkg:maven/io.confluent.flink/flink-avro@1.18.1-cp6?type=jar https://flink.apache.org/flink-formats/flink-avros3://cp-flink-staging-654654529379-us-west-2/maven-staging/e264363095c14d00bed012cfd48992029a5d3f63https://mail-archives.apache.org/mod_mbox/www-announce/https://github.com/apache/flink/flink-formats/flink-avro The Apache Software Foundation org.apache.avro avro 1.11.5 Avro core components b4e9758699f388a661d564c5d26a83a1 39b03945fc96f8e6146849aa49b516cf3657b151 b3c55da4c58304f823f4a2161a308888b9e7b8bc1c7387a4fa3ca1cd48617f93 c3f8b87cd0caf4064b039d2a66273a5f5c22f38d71ef9ffebbe25953bc0fcb2f48d5e4fbac0777630ad410d3506255d6d74a3a1ef961a02f7d4d7a17c9c4c17e 37357433b72e3fa4d9db3616018922d0299c8e0edd2df244b2d591909c40f0308999de02513e71ec113a4f81576cf3c3 c13b67dc40b66c667901dc4216c1833d740f7685f1783217447b799738c38366f08947323b8bc72399b0d9e553da5754 65a72c91db569bff8a68f52a22b619938768537eaf587cdd22b8013ad241e9e8 30f5d464efb68d9653db56dabe5e6625c89e87392c0b666558572c04bb3f54721e68e16fc06999fcecf88ec823088d71221b2cb4eebd0c97bed635b5f337c8fd Apache-2.0 https://www.apache.org/licenses/LICENSE-2.0 pkg:maven/org.apache.avro/avro@1.11.5?type=jar https://avro.apache.orghttps://repository.apache.org/service/local/staging/deploy/maven2https://issues.apache.org/jira/browse/AVROhttps://mail-archives.apache.org/mod_mbox/avro-dev/scm:git:https://github.com/apache/avro/avro-parent/avro FasterXML com.fasterxml.jackson.core jackson-core 2.18.6 Core Jackson processing abstractions (aka Streaming API), implementation for JSON 95746cd6a85d0296d6986b14787a6bee f7171732c04c97ff373bed60d2eba22ec4bab8e0 e7e1bfa50f0a79db37e6aa37db111cf03aebf4a484b359d21127ab43ab2398c6 56ad5272272418a3864335b7cc9323bee496993bb317a35ad7c7f6bc001376feaecfa357ed2b737e36ae9ea738433906c2db05b4cda471463329e6909712f377 f7d8f2175068c0b3f79d300672059502f14be699fb6ca3979b256ff53a0a9c8fa797a288990278db49d8b566e9635b6c 7c899c0bad1755db144cee72ec96961e186b47ba2229a2aac893091ddb338c6e4b7dbbec61f5998a1a9becf06b973bff 33f6bd5f2b9f80f758851629eab6425c2a3dee7bee62bc5113a7073242b49d2a a301262a6c54d5e905715a27588836df86ce2945d447dcd4bcd17e36315d62a50d1a33ae1e379c35f837ee5decb9ac29419b8abec65cebe54d8d14fbcf714e86 Apache-2.0 pkg:maven/com.fasterxml.jackson.core/jackson-core@2.18.6?type=jar https://github.com/FasterXML/jackson-corehttps://central.sonatype.com/api/v1/publisherhttps://github.com/FasterXML/jackson-core/issueshttps://github.com/FasterXML/jackson-core FasterXML com.fasterxml.jackson.core jackson-databind 2.18.6 General data-binding functionality for Jackson: works on core streaming API 0199275814d930ae615971749d009490 7c2dd5a1a41c315150158557896096b484562417 45d124736ea29dc374171fc1a8a9958e0f44407c1e0aae0297d8eee267fb592e c67c64f941fc916b80787b71b74dfa3c9137a3765c648266ff29dbaf427484d2ee7ab47e6080a9be1dd28d361cc987840d4415b597aa4ead69b5e23b20a533b2 27515e5d81dbd113c3d9d13b62871066fc1ef829352dfcab2718c522c83b2f30eaf318d9a8ebb215286ff30fc83c2c7a 7a312b73ac433b2c76166e537013aeed46fb81b0b1637c9dc275bfcabe14c92fe30b7a9c6903cebf803c5f313500091b 592598bffc53b3b095a0d513dffc414a25f1d73b79679527eb31c3b1a752d517 c7be7e7e7057d6aad7e5beaab769d2ad412baaf84dc105c6c06dbff81c591b796e14fa9bddf4a2a7ead869e319a67aad0585c718502c1ae5cd47ac8abdb3caac Apache-2.0 pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.18.6?type=jar https://github.com/FasterXML/jacksonhttps://central.sonatype.com/api/v1/publisherhttps://github.com/FasterXML/jackson-databind/issueshttps://github.com/FasterXML/jackson-databind FasterXML com.fasterxml.jackson.core jackson-annotations 2.18.6 Core annotations used for value types, used by Jackson data binding package. 80f1abd97c7f0c93d6a199c92f9e870a d0d2f9e504c6fe443eb2785370c701f911fc87c6 face5c37bee1f0768f5f198d077fc29d163becca95de9e0f13962c84d1047662 e7671ba959d45c3943094e91d369df97af2990bdaa5ab1361c5f55dbb4171700ff9e0900f1376ba13afdbd9e24a708f7393ce01f0fef87e250de6bfa69500634 8a1ee55f2b797feb1eff4f351d6ab7532ff6c6c23946cf22c7ecc7b54df71a2ab03c9aade8fbac01ee6d3be5a6015d17 0d1ce70acd038bdc95068909f579d2ed58411384e5c4438cd717e6e7cfbbe73a95d703bc9c71ae7f3031bc87758bc601 7f65b1e6e4202252cdfde7e49b141c3ab27f1dd63f3b80d44610435f4092c69d 85fd71a6a9f264f558727f9d07879fd76d6726061830e65c774a4911770a04e0a2aec41558b42094ba819b8ae0058bbe48c5dbce3d74be8729baf6d71f1aee4e Apache-2.0 pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.18.6?type=jar https://github.com/FasterXML/jacksonhttps://central.sonatype.com/api/v1/publisherhttps://github.com/FasterXML/jackson-annotations/issueshttps://github.com/FasterXML/jackson-annotations The Apache Software Foundation org.apache.commons commons-compress 1.26.0 Apache Commons Compress defines an API for working with compression and archive formats. These include bzip2, gzip, pack200, LZMA, XZ, Snappy, traditional Unix Compress, DEFLATE, DEFLATE64, LZ4, Brotli, Zstandard and ar, cpio, jar, tar, zip, dump, 7z, arj. cbc0bb8eca12b747ca21bf998d736e60 659feffdd12280201c8aacb8f7be94f9a883c824 051aceb8bbcc62d0f5b2b8ac72c53767f9c59bfbd050151e65bef6f51c8ed9c9 acbeaa2909b809cd561e7156df18340d96abacb179325622d73bdd6b82cb9b387d6fcb1a44d8195aad4e786da299289e17598a1d337b7c7d1c0bc610cc128714 052d4d0cd1929c4299dd9d37dd36eaea6ed2be6b04d6d83a94f8608a6d1138aa81f7a34f25113ac267e7ba25ce948c9a 8b0bf441e8ce793fb6513bc07551cc48ab4507696c18e6037b0fcf35bc4e1eb3e44ed962e2d3765c86d4d912770aa53e e441768e06092053f4703844ec0c8f2b437e06e7c190d48fec9d7682beb94c40 5984f9f08f83789555677f6800f25fa8e80a9eb2e4d46b5fb117b8efc24753644fa103a2f6b619827661a41677991bc827965172ef25f1313d8a59154e615e8d Apache-2.0 https://www.apache.org/licenses/LICENSE-2.0 pkg:maven/org.apache.commons/commons-compress@1.26.0?type=jar https://commons.apache.org/proper/commons-compress/https://github.com/apache/commons-parent/actionshttps://repository.apache.org/service/local/staging/deploy/maven2https://issues.apache.org/jira/browse/COMPRESShttps://mail-archives.apache.org/mod_mbox/commons-user/https://gitbox.apache.org/repos/asf?p=commons-compress.git The Apache Software Foundation commons-io commons-io 2.15.1 The Apache Commons IO library contains utility classes, stream implementations, file filters, file comparators, endian transformation classes, and much more. 84351f7991a0e6722f00e96a4ccc376f f11560da189ab563a5c8e351941415430e9304ea a58af12ee1b68cfd2ebb0c27caef164f084381a00ec81a48cc275fd7ea54e154 e9adaeed2d715ac0ae44de056ba165a743a92acbeb9871b535f7e58e0b3bc4fba276495b50429be195098a559f3adb7294048479754a0ee4d397da2efda5f81c 028c72b59373d3894da22f9eb2c731aabd00f670993973f71a354d722670c12ca659686b83bbf8db32d060ca180f50b2 73cd585ab3736b4be50ec0f10dfe5ebfc3390eea8d56f07f29055f1fddb2dff8084310eaa6fb9f97ea639ed1abd7bc33 daf39bc99f1a3dc0075714a4a342a58d69a4cd62c25bc39a581f657ca72b1044 b003f8971d1536ea0fc4320dbfe17d7259d49e59314739f9fc83134e511facbff048b0ef4f86a9d0893781ca09c95cebc3b181a6c89a2d41e851870b96e76839 Apache-2.0 https://www.apache.org/licenses/LICENSE-2.0 pkg:maven/commons-io/commons-io@2.15.1?type=jar https://commons.apache.org/proper/commons-io/https://github.com/apache/commons-parent/actionshttps://repository.apache.org/service/local/staging/deploy/maven2https://issues.apache.org/jira/browse/IOhttps://mail-archives.apache.org/mod_mbox/commons-user/https://gitbox.apache.org/repos/asf?p=commons-io.git The Apache Software Foundation org.apache.commons commons-lang3 3.19.0 Apache Commons Lang, a package of Java utility classes for the classes that are in java.lang's hierarchy, or are considered to be so standard as to justify existence in java.lang. The code is tested using the latest revision of the JDK for supported LTS releases: 8, 11, 17 and 21 currently. See https://github.com/apache/commons-lang/blob/master/.github/workflows/maven.yml Please ensure your build environment is up-to-date and kindly report any build issues. 2ac2db154e365d55d167ec1215125a3a d6524b169a6574cd253760c472d419b47bfd37e6 32733ab4bc90b45b63eb72677d886961003fd4ed113e07b1028f9877cb2ac735 24cf9bfc7c32736277d2a1e82a455d004ec7d4989e8d0dc2831c910a04b6ff8b30ca9c49ec25562cf0b7f1ffc27726e7510a54bb99e75a3be83ddf6030c37978 90c567c8f42b58d0f3f24233260258e7e3bae1f8284ee33f9730e1cecc4fe2c98b7d6ebbba2a6598b50d444ddfa70722 397a7aafd4f66cdec80cf4682a72db0873b3fc6a3db3cdd7be747b24ae13804dfc290e2441a115d50b0add9ce76af2dd 4c0809e7ff0474603b0a1bcdf2f745cec9233ffdc6c652b077d93f2630d52f8b 25564027878618e00dc24ea5caf8365a9396c25597aaf4ea8a37997fd699dabdf4b6f9ce4c1c9f86abedb4afa26041ac234d238c63ffecc207ce2068a6271956 Apache-2.0 https://www.apache.org/licenses/LICENSE-2.0 pkg:maven/org.apache.commons/commons-lang3@3.19.0?type=jar https://commons.apache.org/proper/commons-lang/https://github.com/apache/commons-lang/actionshttps://repository.apache.org/service/local/staging/deploy/maven2https://issues.apache.org/jira/browse/LANGhttps://mail-archives.apache.org/mod_mbox/commons-user/https://gitbox.apache.org/repos/asf/commons-lang.git QOS.ch org.slf4j slf4j-api 1.7.36 The slf4j API optional 872da51f5de7f3923da4de871d57fd85 6c62681a2f655b49963a5983b8b0950a6120ae14 d3ef575e3e4979678dc01bf1dcce51021493b4d11fb7f1be8ad982877c16a1c0 f9b033fc019a44f98b16048da7e2b59edd4a6a527ba60e358f65ab88e0afae03a9340f1b3e8a543d49fa542290f499c5594259affa1ff3e6e7bf3b428d4c610b 2b14ad035877087157e379d3277dcdcd79e58d6bdb147c47d29e377d75ce53ad42cafbf22f5fb7827c7e946ff4876b9a 3bc3110dafb8d5be16a39f3b2671a466463cd99eb39610c0e4719a7bf2d928f2ea213c734887c6926a07c4cca7769e4b ba2608179fcf46e2291a90b9cbb4aa30d718e481f59c350cc21c73b88d826881 14c4edcd19702ef607d78826839d8a6d3a39157df54b89a801d3d3cbbe1307131a77671b041c761122730fb1387888c5ec2e46bdd80e1cb07f8f144676441824 MIT https://opensource.org/licenses/MIT pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar http://www.slf4j.orghttps://oss.sonatype.org/service/local/staging/deploy/maven2/https://github.com/qos-ch/slf4j/slf4j-api The Apache Software Foundation org.apache.flink flink-shaded-force-shading 17.0 The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users. optional 6890ff555c82f3bb156cf9c73bf09cf9 345c153973a17fb8a98d368352e14893edcbd610 dcc7dff160a40b74fa5db2805b2004153ffd0517968f3c7843a8ee43be82e710 9de23513832248618b78e279c0e3900f5cafb7193254ef6818b4f0b6f3b70045dd9cc4fdd13caeeca8b70a44f38201ce055f07248cdf08930a20e1b7a73997ff 063611872b4b1a1718e0472e32198bded0d74fa656e5c47a7b20038cd5ff70106e3109b60fe882880feea486e1ef83bf 26f9225d2c401391133dabc97340d1048504deaaae3c6b02ba20b83d4efe8c53a6d4f4e63a04e4317f9bce6b1a1ee013 aae3e6da763019cc2fd4919df572a3653b46aedaf60a3adb3d28bc7f94023523 e616e089fb70dc79503b6c235bd8d14c6e7c8e608c87bb4fcd02fe86d6ba27985bac4f144843af9fc7a7c495de7057320ccddea9f571c42bdcaa1c73966f265f Apache-2.0 pkg:maven/org.apache.flink/flink-shaded-force-shading@17.0?type=jar http://flink.apache.org/flink-shaded-force-shadinghttps://repository.apache.org/service/local/staging/deploy/maven2https://mail-archives.apache.org/mod_mbox/www-announce/https://github.com/apache/flink-shaded/flink-shaded-force-shading com.google.code.findbugs jsr305 1.3.9 JSR305 Annotations for Findbugs optional 1d5a772e400b04bb67a7ef4a0e0996d8 40719ea6961c0cb6afaeb6a921eaa1f6afd4cfdf 905721a0eea90a81534abb7ee6ef4ea2e5e645fa1def0a5cd88402df1b46c9ed 06da282cfd8e30d9f8cf17702b8709172b00e22b75a627a1d85f8989615b8a1a401bc25d9aee7b14aed1d9b5df73bf2ea8d66f9c8468d9577c29f0ccfa2cc70a 56e6b41ef62eb5edfed0203802cefae9c2df86388148e420bb0c687abb2b80e14d5c2a82d5b35dce4badaf148f94eada 58c3bf89fa1afa75c2c5078159fd28e27b2273d437f26aaaa7391310b6f0823f3cf476a24f5631c0881f3f7e946d99be c333ea5faedfa78e0614a2620438d5724eab093df4e960918391b6a44c2915b0 67ec31448e156cc72dd036060b460bb2667a13b1cbe500b6b7eed3235b1994b44c39f440ebd07b21ec9595b166ad61121d4f6a132b5b313c558ab21b72599425 Apache-2.0 pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar http://findbugs.sourceforge.net/http://findbugs.googlecode.com/svn/trunk/