2025-07-18T10:08:30Z OWASP Foundation CycloneDX Maven plugin 2.7.7 436dfb24c63a322708e4a5143d8543af 3ef2e8728dc9eff2f129c34057e46e9d2b10629a c185b79bf0f9264f43bc8c222c44db67bea275bb727e3327cf9aea6bf45292c9 41488733e31e6c5315327dcc86187c2b9a6b96cd08f7e2157ce130688afde29c313fc6a73edb8a76333a930c78874aa2eac874448920030c0f7af0ac05e65ced f9462f86240fd9fc0942f34981e6d2371f252aa1a4e5e8c3c14e7f0f1a4e4de69ef972e51cf09a749afb6d97c13e67ed c755af6239348bc7dd1e1e6b5f14f7cf7e1560d689b252d9610cd865fa4b419d0b8e26260731dfc5da2176b6e706b414 309aac91005470c9c834354ab918759e2ae7ec52fc1676002621a5bbdf3b7827 c634570dcf8302e61005e5fa91a9a0d9b81542f731967b3c9f6d3ef89e3b945bd36d7ab69e2ebad8124b9c05da504361c8b36a8ce528d844409eeb7df4eea6ce The Apache Software Foundation io.confluent.flink flink-sql-orc 1.20.2-cp1 The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users. Apache-2.0 pkg:maven/io.confluent.flink/flink-sql-orc@1.20.2-cp1?type=jar https://flink.apache.org/flink-formats/flink-sql-orcs3://cp-flink-staging-654654529379-us-west-2/maven-staging/e55b636f11a4647c949acc4150bd5ac5dd97337dhttps://mail-archives.apache.org/mod_mbox/www-announce/https://github.com/apache/flink/flink-formats/flink-sql-orc makeBom compile,provided,runtime,system The Apache Software Foundation io.confluent.flink flink-orc 1.20.2-cp1 The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users. optional 060b59bbaf075a61892b319a98f540ae dfb0cd860740514a58de20cbe2f02b1afe4b3c16 cafd7768319462c5e8742c740f5e32cf2c95f714cd05221e6d69f0526604ff95 cb7d7e3deb1c71f1213a2bafb795f01d3f4272cbd2274e15761b4e25af68e95b5a86a1efd4b421af6449ae233fc68eba09aafa62abe42395189b2ebe0e494903 31e6e4b8f62387d11a27da69ae6ec528bc7d5e473b6119dce9d1cdb41cd44c2751acd489adb8555097e97299ce14f62d 50fba582f5f2b209999e4139d05a672fbc1517567562649567eab56828784d5519821623625b24c74f351e5662485b6c a7ac8a837a77022a23146e44bae66fd89ae851056a62fefa0ac3fc76bdcaf3f1 3575015afb94ceda72a3f97f375f2ecec7da5620df4c8fa2681b39097feec13c8217cfae5432cc9302b77641bd20ca25086df529d15684a0424d5bb43352f7ca Apache-2.0 pkg:maven/io.confluent.flink/flink-orc@1.20.2-cp1?type=jar https://flink.apache.org/flink-formats/flink-orcs3://cp-flink-staging-654654529379-us-west-2/maven-staging/e55b636f11a4647c949acc4150bd5ac5dd97337dhttps://mail-archives.apache.org/mod_mbox/www-announce/https://github.com/apache/flink/flink-formats/flink-orc The Apache Software Foundation org.apache.orc orc-core 1.5.6 The core reader and writer for ORC files. Uses the vectorized column batch for the in memory representation. 252e39ceb4b752a88e34eec3b96f6c68 f9ccd73bb7fc3c69c8f0af59942d9b7df09a569f abc6efb4e33583ffc11c7e9938c2f4b48190e3b0bea9a2c82465aa25eff903ed b610205e34e8876d8bbe6c37e1b9d5a8446b90cfe6d85ea6ea09cc4eede18676a2b3c7f14921765f975f85470a8d56d1e58e268eaf04ea0f940afebd3d18bdcd 7e5ee63aad151c157a7ad66bbfc2e1166092b88f2dad94cafecb54d3ebef6167891bba348376199f43385fd1b66bcb65 57016fa871e6b391f627f0f257cbacab804fc3eb5df766009b4088f2c7c3d9653ba7fffc3b7a2ab06884ec3fe66ed774 6e744cc8d7ff848876c1b29f1171f49c4fa2742ac0358220fe7d7afd755aaaea fa03520f59fc3ba33bc2bcdbac4595f4019369dbe3dc9c373638def5516d35304777f5fe9244657c8eeac71a4ad71173abe3f6a11374294b01d793d5047882fa Apache-2.0 pkg:maven/org.apache.orc/orc-core@1.5.6?type=jar http://orc.apache.org/orc-corehttps://repository.apache.org/service/local/staging/deploy/maven2http://mail-archives.apache.org/mod_mbox/orc-user/https://svn.apache.org/viewvc/maven/pom/tags/apache-18/orc/orc-core The Apache Software Foundation org.apache.orc orc-shims 1.5.6 A shim layer for supporting various versions of Hadoop dynamically. This module uses a higher version of Hadoop so that we can create shims that let us use new features of Hadoop without having a hard dependency on the latest version. 2b8507183e5eac1cb7bdb1ebeae20a28 03e86861e74e80d1f5dcb55182e2466da86369d4 c85e474f3a3a388c467e5056ed23de5c8a23e6e353bbc132ac9e3c5b84e82370 c4c57aedd6a51b346fca6730e1f36c9ae61f847c060e70862ba1267136a3d47676998c7e62bf6f891a13c5ac9b695f5095cd27bc3608fe17b9f5cb14670f766f 294d23be9b554505ccbb637459614b513b8a2b57caded1cea7e4833cf165e95e17b968b9e52b73d75a63a421f718089c 51cafa20e5124ab3893a7e934416feb5b0ed5644bdf512179a355a279f49a8180b396491431152fb367eeae0213273dc f5ebf59da929538c04b729a6c2f170c70b27a712a38ea7d4a7c09d30cfa2efaa 5cd669de11fd190c5d00363249b9ca2233704f9dc9d4366d9da1c105c0bcd2490bfe8bb719837d947ae57491cf040db1fa0996e5e53e58ebe13b9dff2bf9013e Apache-2.0 pkg:maven/org.apache.orc/orc-shims@1.5.6?type=jar http://orc.apache.org/orc-shimshttps://repository.apache.org/service/local/staging/deploy/maven2http://mail-archives.apache.org/mod_mbox/orc-user/https://svn.apache.org/viewvc/maven/pom/tags/apache-18/orc/orc-shims Google com.google.protobuf protobuf-java 2.5.0 Protocol Buffers are a way of encoding structured data in an efficient yet extensible format. a44473b98947e2a54c54e0db1387d137 a10732c76bfacdbd633a7eb0f7968b1059a65dfa e0c1c64575c005601725e7c6a02cebf9e1285e888f756b2a1d73ffa8d725cc74 10ea0baf440c78598eee2bff3742bc2f41b7e67847f8bb43a1f154d7649853ebd9eb86288aab65f4d1a196f4586bab16b656ec7940ec92a57b1c117b8f59abac 33ad6e25b942b4076c8b9dfcc0aae8ca802b9028aa9939f86e4752b4847b35fb486f6d3efa81d38ad1edcbec6e614494 168deff9cc400e301fb783ec5f483237edf9b62eacb11df4e36c2660b1fc42f639df6f5fa155f468873fb899197c9fe8 73ec3c6d31eea7e1e5e4cc214b822c14887dcf908b5e700e206906a7555c571b a394427ca09c2807a376f982176984cfc2c4610e752ddee50d878091291cf4ef37de90c945c6b13e3c8c4db3397c296696ca68d3a7323388c863b8b69272bc8c BSD-3-Clause pkg:maven/com.google.protobuf/protobuf-java@2.5.0?type=jar http://code.google.com/p/protobufdav:https://google-maven-repository.googlecode.com/svn/repository/http://code.google.com/p/protobuf/source/browse The Apache Software Foundation commons-lang commons-lang 2.6 Commons Lang, a package of Java utility classes for the classes that are in java.lang's hierarchy, or are considered to be so standard as to justify existence in java.lang. 4d5c1693079575b362edf41500630bbd 0ce1edb914c94ebc388f086c6827e8bdeec71ac2 50f11b09f877c294d56f24463f47d28f929cf5044f648661c0f0cfbae9a2f49c 4a5a3dbe4941c645e2cca068cca5c1882cfe988b02e7cd981d1e51784900767d1deab0e0e0566f559c9fcabb4a180e436d5bb948902d4f4106f37360466afb42 9725bc421adc1dbcd6f937eca0f3075d186a2b353ece4cef66b0fe81bb8d3f7d7641c43e86d657ef526c719f0c2a8c90 4bc4eaaf2580ded6d552b96ae5261c936de95f69a1d137c47279c51bf2aa1406ae44f69ccc94486267b8441e53c4bd74 b68d49ef037d428ea0c3e67a7a20f3d68a134bef30a1639ec08d28886b9f5629 2e9ffc0608827cffc0b48b7a0f35d371c66586c99fea2910f7c2a237c7c57d9ae4d65de7c8e018362c2e4f963c2f70a9196cebf35457f1dd0cea6c65c256f673 Apache-2.0 pkg:maven/commons-lang/commons-lang@2.6?type=jar http://commons.apache.org/lang/http://vmbuild.apache.org/continuum/https://repository.apache.org/service/local/staging/deploy/maven2http://issues.apache.org/jira/browse/LANGhttp://mail-archives.apache.org/mod_mbox/commons-user/http://svn.apache.org/viewvc/commons/proper/lang/branches/LANG_2_X io.airlift aircompressor 0.10 Compression algorithms f7530afc9741d3594cb9f86a2ab875c2 bf8305930ec675964bd68599c702ffb32df4d1e6 a5471abddc99a95939abfc0405cddb2213c4fba561de94f888d6e625566e826c ee562bfbccad7ff78c49dbc3a3d32675214a9d00133f57b249f2e6417a4bb77015e98a91c5fcf965a6427c1959836405bbacf8a29ffd9f91ce825feb74bc43aa 89bd15d77c0e4aedcdebb1ac87fd61c908becd12ef8d376be5e876a22984ac332ff9e47c9b327fa542bd2617ca613ff8 f0a50b2002536a1e4785396f0767ac5145e1fd5871274d1aa863179f29136435af3c42b03f616e4b64cc2a3195e0411e d2f1a724b93d336ceb2f2fbac5d538f3601251875695302d4e9f6daff7ed4c6b 58cf399abc8db8e0da7c5944aba59d930eb90e7f27c0641fe509080cbc5b37c43c3051c4b713b04a1b3c16ce65f1366561f197a86d5bc6e2cb7a887a448d93a8 Apache-2.0 https://www.apache.org/licenses/LICENSE-2.0 pkg:maven/io.airlift/aircompressor@0.10?type=jar http://github.com/airlift/aircompressorhttps://oss.sonatype.org/service/local/staging/deploy/maven2/http://github.com/airlift/aircompressor/tree/master The Apache Software Foundation org.apache.hive hive-storage-api 2.6.0 The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users. fd5484f4b2a5607c145224aa8fd0283f 0f278d89710827312db75d7c87315a917cbd0349 7221fc528bfee6385396b4ca05b1faedb658ef54253cd11f34a500883868c82e b3e7c3417d21335cd3a292b0c677d73b7d6462fcf3e11209fbda3b3bb2655b6608c792d8d8a6c0940413ccacd9d8486ff6467f35ab105b75c7271e2252a5a39a 7aaeddedf7cb29159976b42950bf5b1addc79bd11990432ee82897d59439961c7dbf9c668dad324d463ed6b9032c3d58 5b4157299297c3d7456f594300c6d241729261137ca647a7d6c79815769c37ed63ad818cfa686a695993a8aba02540b4 a14e7d90013293794ee4631544e8414819c1bf127e09b03d6e2fb28cd8a5788e 66cef86291edc48377d32184c6eeb601dd3e864163bfc07d53ab1b1e6c27281872e5a5292ea91b39bc781fcccd7adbcffde603a4a35e14a01d721454fe66b738 Apache-2.0 pkg:maven/org.apache.hive/hive-storage-api@2.6.0?type=jar https://www.apache.org/hive-storage-api/https://repository.apache.org/service/local/staging/deploy/maven2https://mail-archives.apache.org/mod_mbox/www-announce/https://svn.apache.org/viewvc/maven/pom/tags/apache-18/hive-storage-api QOS.ch org.slf4j slf4j-api 1.7.36 The slf4j API optional 872da51f5de7f3923da4de871d57fd85 6c62681a2f655b49963a5983b8b0950a6120ae14 d3ef575e3e4979678dc01bf1dcce51021493b4d11fb7f1be8ad982877c16a1c0 f9b033fc019a44f98b16048da7e2b59edd4a6a527ba60e358f65ab88e0afae03a9340f1b3e8a543d49fa542290f499c5594259affa1ff3e6e7bf3b428d4c610b 2b14ad035877087157e379d3277dcdcd79e58d6bdb147c47d29e377d75ce53ad42cafbf22f5fb7827c7e946ff4876b9a 3bc3110dafb8d5be16a39f3b2671a466463cd99eb39610c0e4719a7bf2d928f2ea213c734887c6926a07c4cca7769e4b ba2608179fcf46e2291a90b9cbb4aa30d718e481f59c350cc21c73b88d826881 14c4edcd19702ef607d78826839d8a6d3a39157df54b89a801d3d3cbbe1307131a77671b041c761122730fb1387888c5ec2e46bdd80e1cb07f8f144676441824 MIT https://opensource.org/licenses/MIT pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar http://www.slf4j.orghttps://oss.sonatype.org/service/local/staging/deploy/maven2/https://github.com/qos-ch/slf4j/slf4j-api The Apache Software Foundation org.apache.flink flink-shaded-force-shading 17.0 The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users. optional 6890ff555c82f3bb156cf9c73bf09cf9 345c153973a17fb8a98d368352e14893edcbd610 dcc7dff160a40b74fa5db2805b2004153ffd0517968f3c7843a8ee43be82e710 9de23513832248618b78e279c0e3900f5cafb7193254ef6818b4f0b6f3b70045dd9cc4fdd13caeeca8b70a44f38201ce055f07248cdf08930a20e1b7a73997ff 063611872b4b1a1718e0472e32198bded0d74fa656e5c47a7b20038cd5ff70106e3109b60fe882880feea486e1ef83bf 26f9225d2c401391133dabc97340d1048504deaaae3c6b02ba20b83d4efe8c53a6d4f4e63a04e4317f9bce6b1a1ee013 aae3e6da763019cc2fd4919df572a3653b46aedaf60a3adb3d28bc7f94023523 e616e089fb70dc79503b6c235bd8d14c6e7c8e608c87bb4fcd02fe86d6ba27985bac4f144843af9fc7a7c495de7057320ccddea9f571c42bdcaa1c73966f265f Apache-2.0 pkg:maven/org.apache.flink/flink-shaded-force-shading@17.0?type=jar http://flink.apache.org/flink-shaded-force-shadinghttps://repository.apache.org/service/local/staging/deploy/maven2https://mail-archives.apache.org/mod_mbox/www-announce/https://github.com/apache/flink-shaded/flink-shaded-force-shading com.google.code.findbugs jsr305 1.3.9 JSR305 Annotations for Findbugs optional 1d5a772e400b04bb67a7ef4a0e0996d8 40719ea6961c0cb6afaeb6a921eaa1f6afd4cfdf 905721a0eea90a81534abb7ee6ef4ea2e5e645fa1def0a5cd88402df1b46c9ed 06da282cfd8e30d9f8cf17702b8709172b00e22b75a627a1d85f8989615b8a1a401bc25d9aee7b14aed1d9b5df73bf2ea8d66f9c8468d9577c29f0ccfa2cc70a 56e6b41ef62eb5edfed0203802cefae9c2df86388148e420bb0c687abb2b80e14d5c2a82d5b35dce4badaf148f94eada 58c3bf89fa1afa75c2c5078159fd28e27b2273d437f26aaaa7391310b6f0823f3cf476a24f5631c0881f3f7e946d99be c333ea5faedfa78e0614a2620438d5724eab093df4e960918391b6a44c2915b0 67ec31448e156cc72dd036060b460bb2667a13b1cbe500b6b7eed3235b1994b44c39f440ebd07b21ec9595b166ad61121d4f6a132b5b313c558ab21b72599425 Apache-2.0 pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar http://findbugs.sourceforge.net/http://findbugs.googlecode.com/svn/trunk/