{
  "bomFormat" : "CycloneDX",
  "specVersion" : "1.6",
  "serialNumber" : "urn:uuid:ba056417-234d-3e85-b087-bf1dbf302868",
  "version" : 1,
  "metadata" : {
    "timestamp" : "2026-07-21T15:17:09Z",
    "lifecycles" : [
      {
        "phase" : "build"
      }
    ],
    "tools" : {
      "components" : [
        {
          "type" : "library",
          "author" : "OWASP Foundation",
          "group" : "org.cyclonedx",
          "name" : "cyclonedx-maven-plugin",
          "version" : "2.9.1",
          "description" : "CycloneDX Maven plugin",
          "hashes" : [
            {
              "alg" : "MD5",
              "content" : "9c7a565cf28cce58557d0c621c5ea4b1"
            },
            {
              "alg" : "SHA-1",
              "content" : "be882d5a22050bfa9d19090b1420c188617d0e1c"
            },
            {
              "alg" : "SHA-256",
              "content" : "698e0f37184a5b28c245c4065fd036dfce253b52f82fbb7113d81d36326cc249"
            },
            {
              "alg" : "SHA-512",
              "content" : "c0f0b11026858166f872a2eb54719492e5cecaa0bc9cd6b30b3ecb4a174eed220f4a1b5829d18d6734128e778d3cb3db7ffed177c92866133129cb29081814a0"
            },
            {
              "alg" : "SHA-384",
              "content" : "d80964707dfe5caca8c70521d5066f57589304c0a657e6fbc7c0614ea0fc7b3b3dbe7778361eee0f54ba111e9cb0ffcb"
            },
            {
              "alg" : "SHA3-384",
              "content" : "80bc3a275d9514bc457461ff52a72add8c7ecbbc01d8912efce57139016c544ee776981851be0a58fa977ab4221f703f"
            },
            {
              "alg" : "SHA3-256",
              "content" : "142317d6f245390f4fd2d0c100b16281b8dfc5c0c2cff86943bdcc97039cb699"
            },
            {
              "alg" : "SHA3-512",
              "content" : "af0fb9137c90b65d1a07f72e4d51ae509956cdb8800f35c961b037cdda1fe4a14ce3b496cef71ba85f1621affcfe29cd42704ae4191ff0b090a9602087c8997b"
            }
          ]
        }
      ]
    },
    "component" : {
      "type" : "library",
      "bom-ref" : "pkg:maven/io.confluent.flink/flink-sql-orc@2.2.0-cp2?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "io.confluent.flink",
      "name" : "flink-sql-orc",
      "version" : "2.2.0-cp2",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.confluent.flink/flink-sql-orc@2.2.0-cp2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://flink.apache.org/flink-formats/flink-sql-orc"
        },
        {
          "type" : "distribution-intake",
          "url" : "s3://cp-flink-staging-654654529379-us-west-2/maven-staging/0d9fe610e2ad337c0730444d323b08049fdc1200"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink/flink-formats/flink-sql-orc"
        }
      ]
    },
    "properties" : [
      {
        "name" : "maven.goal",
        "value" : "makeBom"
      },
      {
        "name" : "maven.scopes",
        "value" : "compile,provided,runtime,system"
      }
    ]
  },
  "components" : [
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/io.confluent.flink/flink-orc@2.2.0-cp2?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "io.confluent.flink",
      "name" : "flink-orc",
      "version" : "2.2.0-cp2",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "a2e91eb491562339279f7c9e4feb9c0c"
        },
        {
          "alg" : "SHA-1",
          "content" : "fda9b2d216213d8a9b41a70753cbbf851b7745d1"
        },
        {
          "alg" : "SHA-256",
          "content" : "67a1bd2553bdb294909286097167549865202ec7eecabb09cfbd0b348888d821"
        },
        {
          "alg" : "SHA-512",
          "content" : "f49dc412e5af766e37e698df27a16d3dac40bcaf43eda3e031ba5f5ad0b21ca997cc42f616a80d92ce522e33ed84c69b9744d97e8da51840441afb2bbd32d91f"
        },
        {
          "alg" : "SHA-384",
          "content" : "40284cea56d26fb80948087642874e745704a8bfd02c7b5fa0883e8cc0fafef46550a0ade165111a4482a3f0874fc17c"
        },
        {
          "alg" : "SHA3-384",
          "content" : "9462c27cab48c5a4d6a3379c35c06817b87669713fd82ca234df176dcb82ca332bcd2eefc4cecb82083ae7b3bd153af0"
        },
        {
          "alg" : "SHA3-256",
          "content" : "467f27edceff28d6b2d46164594fcac03c77b55fedbe20fec2e6e00d0f49fbd3"
        },
        {
          "alg" : "SHA3-512",
          "content" : "5d79f1c18d601366a47ce9be773d57a30c12b13f562ee939e8591d586a42e9a9eae3808dd580384881510c7d9c4a7cd50188948fb2e88a5d0f3da1d0969dafaa"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.confluent.flink/flink-orc@2.2.0-cp2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://flink.apache.org/flink-formats/flink-orc"
        },
        {
          "type" : "distribution-intake",
          "url" : "s3://cp-flink-staging-654654529379-us-west-2/maven-staging/0d9fe610e2ad337c0730444d323b08049fdc1200"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink/flink-formats/flink-orc"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/io.airlift/aircompressor@0.27?type=jar",
      "group" : "io.airlift",
      "name" : "aircompressor",
      "version" : "0.27",
      "description" : "Compression algorithms",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "2c1137bd68ec7a65655fc1adca94742b"
        },
        {
          "alg" : "SHA-1",
          "content" : "5b3b5e7932a1d088ad1f13d109ffd688ab59ef9d"
        },
        {
          "alg" : "SHA-256",
          "content" : "fdbef3137a28f63bb0cb93487803080ede746a4ec3d421e36c6f0c305c35e5e4"
        },
        {
          "alg" : "SHA-512",
          "content" : "d6ef205c5e56b9ebc0c871fc8b523cde226d05d3531bc8932cb850e4607c8bf4ab554def0206994f55e2ae9245518af7a379e2282247cd8dce97b3612b84e13e"
        },
        {
          "alg" : "SHA-384",
          "content" : "d74e216442328fc9225e0d82622285bea8885bf7c14b7869b142305e2f727e8f4b4d4edac6ac18651580da0b58ca6dc8"
        },
        {
          "alg" : "SHA3-384",
          "content" : "ad5226ae1b1e2a1098ecf8560e3d1e1b9dd8e73c02bcca9dacc006d10d8d350920b25cd4f0b0e9a54913b2656fe76a9b"
        },
        {
          "alg" : "SHA3-256",
          "content" : "79de84ac231accb01352f6c408fe822fa3811774649ec7d3eec42e7539ddc126"
        },
        {
          "alg" : "SHA3-512",
          "content" : "b74e5e9d44921214ef8d8bd4bc9d747624bd677b9aa59073310d50f2d32a10440b4894787fe44349801a216a16a512c8fa1c9c81c0638e3ebb73e5022d2be165"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.airlift/aircompressor@0.27?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/airlift/aircompressor"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/airlift/aircompressor/tree/master"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.orc/orc-core@1.5.6?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.orc",
      "name" : "orc-core",
      "version" : "1.5.6",
      "description" : "The core reader and writer for ORC files. Uses the vectorized column batch for the in memory representation.",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "252e39ceb4b752a88e34eec3b96f6c68"
        },
        {
          "alg" : "SHA-1",
          "content" : "f9ccd73bb7fc3c69c8f0af59942d9b7df09a569f"
        },
        {
          "alg" : "SHA-256",
          "content" : "abc6efb4e33583ffc11c7e9938c2f4b48190e3b0bea9a2c82465aa25eff903ed"
        },
        {
          "alg" : "SHA-512",
          "content" : "b610205e34e8876d8bbe6c37e1b9d5a8446b90cfe6d85ea6ea09cc4eede18676a2b3c7f14921765f975f85470a8d56d1e58e268eaf04ea0f940afebd3d18bdcd"
        },
        {
          "alg" : "SHA-384",
          "content" : "7e5ee63aad151c157a7ad66bbfc2e1166092b88f2dad94cafecb54d3ebef6167891bba348376199f43385fd1b66bcb65"
        },
        {
          "alg" : "SHA3-384",
          "content" : "57016fa871e6b391f627f0f257cbacab804fc3eb5df766009b4088f2c7c3d9653ba7fffc3b7a2ab06884ec3fe66ed774"
        },
        {
          "alg" : "SHA3-256",
          "content" : "6e744cc8d7ff848876c1b29f1171f49c4fa2742ac0358220fe7d7afd755aaaea"
        },
        {
          "alg" : "SHA3-512",
          "content" : "fa03520f59fc3ba33bc2bcdbac4595f4019369dbe3dc9c373638def5516d35304777f5fe9244657c8eeac71a4ad71173abe3f6a11374294b01d793d5047882fa"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.orc/orc-core@1.5.6?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://orc.apache.org/orc-core"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/orc-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://svn.apache.org/viewvc/maven/pom/tags/apache-18/orc/orc-core"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.orc/orc-shims@1.5.6?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.orc",
      "name" : "orc-shims",
      "version" : "1.5.6",
      "description" : "A shim layer for supporting various versions of Hadoop dynamically. This module uses a higher version of Hadoop so that we can create shims that let us use new features of Hadoop without having a hard dependency on the latest version.",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "2b8507183e5eac1cb7bdb1ebeae20a28"
        },
        {
          "alg" : "SHA-1",
          "content" : "03e86861e74e80d1f5dcb55182e2466da86369d4"
        },
        {
          "alg" : "SHA-256",
          "content" : "c85e474f3a3a388c467e5056ed23de5c8a23e6e353bbc132ac9e3c5b84e82370"
        },
        {
          "alg" : "SHA-512",
          "content" : "c4c57aedd6a51b346fca6730e1f36c9ae61f847c060e70862ba1267136a3d47676998c7e62bf6f891a13c5ac9b695f5095cd27bc3608fe17b9f5cb14670f766f"
        },
        {
          "alg" : "SHA-384",
          "content" : "294d23be9b554505ccbb637459614b513b8a2b57caded1cea7e4833cf165e95e17b968b9e52b73d75a63a421f718089c"
        },
        {
          "alg" : "SHA3-384",
          "content" : "51cafa20e5124ab3893a7e934416feb5b0ed5644bdf512179a355a279f49a8180b396491431152fb367eeae0213273dc"
        },
        {
          "alg" : "SHA3-256",
          "content" : "f5ebf59da929538c04b729a6c2f170c70b27a712a38ea7d4a7c09d30cfa2efaa"
        },
        {
          "alg" : "SHA3-512",
          "content" : "5cd669de11fd190c5d00363249b9ca2233704f9dc9d4366d9da1c105c0bcd2490bfe8bb719837d947ae57491cf040db1fa0996e5e53e58ebe13b9dff2bf9013e"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.orc/orc-shims@1.5.6?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://orc.apache.org/orc-shims"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/orc-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://svn.apache.org/viewvc/maven/pom/tags/apache-18/orc/orc-shims"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.protobuf/protobuf-java@2.5.0?type=jar",
      "publisher" : "Google",
      "group" : "com.google.protobuf",
      "name" : "protobuf-java",
      "version" : "2.5.0",
      "description" : "Protocol Buffers are a way of encoding structured data in an efficient yet extensible format.",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "a44473b98947e2a54c54e0db1387d137"
        },
        {
          "alg" : "SHA-1",
          "content" : "a10732c76bfacdbd633a7eb0f7968b1059a65dfa"
        },
        {
          "alg" : "SHA-256",
          "content" : "e0c1c64575c005601725e7c6a02cebf9e1285e888f756b2a1d73ffa8d725cc74"
        },
        {
          "alg" : "SHA-512",
          "content" : "10ea0baf440c78598eee2bff3742bc2f41b7e67847f8bb43a1f154d7649853ebd9eb86288aab65f4d1a196f4586bab16b656ec7940ec92a57b1c117b8f59abac"
        },
        {
          "alg" : "SHA-384",
          "content" : "33ad6e25b942b4076c8b9dfcc0aae8ca802b9028aa9939f86e4752b4847b35fb486f6d3efa81d38ad1edcbec6e614494"
        },
        {
          "alg" : "SHA3-384",
          "content" : "168deff9cc400e301fb783ec5f483237edf9b62eacb11df4e36c2660b1fc42f639df6f5fa155f468873fb899197c9fe8"
        },
        {
          "alg" : "SHA3-256",
          "content" : "73ec3c6d31eea7e1e5e4cc214b822c14887dcf908b5e700e206906a7555c571b"
        },
        {
          "alg" : "SHA3-512",
          "content" : "a394427ca09c2807a376f982176984cfc2c4610e752ddee50d878091291cf4ef37de90c945c6b13e3c8c4db3397c296696ca68d3a7323388c863b8b69272bc8c"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.protobuf/protobuf-java@2.5.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://code.google.com/p/protobuf"
        },
        {
          "type" : "distribution-intake",
          "url" : "dav:https://google-maven-repository.googlecode.com/svn/repository/"
        },
        {
          "type" : "vcs",
          "url" : "http://code.google.com/p/protobuf/source/browse"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-lang/commons-lang@2.6?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-lang",
      "name" : "commons-lang",
      "version" : "2.6",
      "description" : "Commons Lang, a package of Java utility classes for the classes that are in java.lang's hierarchy, or are considered to be so standard as to justify existence in java.lang.",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "4d5c1693079575b362edf41500630bbd"
        },
        {
          "alg" : "SHA-1",
          "content" : "0ce1edb914c94ebc388f086c6827e8bdeec71ac2"
        },
        {
          "alg" : "SHA-256",
          "content" : "50f11b09f877c294d56f24463f47d28f929cf5044f648661c0f0cfbae9a2f49c"
        },
        {
          "alg" : "SHA-512",
          "content" : "4a5a3dbe4941c645e2cca068cca5c1882cfe988b02e7cd981d1e51784900767d1deab0e0e0566f559c9fcabb4a180e436d5bb948902d4f4106f37360466afb42"
        },
        {
          "alg" : "SHA-384",
          "content" : "9725bc421adc1dbcd6f937eca0f3075d186a2b353ece4cef66b0fe81bb8d3f7d7641c43e86d657ef526c719f0c2a8c90"
        },
        {
          "alg" : "SHA3-384",
          "content" : "4bc4eaaf2580ded6d552b96ae5261c936de95f69a1d137c47279c51bf2aa1406ae44f69ccc94486267b8441e53c4bd74"
        },
        {
          "alg" : "SHA3-256",
          "content" : "b68d49ef037d428ea0c3e67a7a20f3d68a134bef30a1639ec08d28886b9f5629"
        },
        {
          "alg" : "SHA3-512",
          "content" : "2e9ffc0608827cffc0b48b7a0f35d371c66586c99fea2910f7c2a237c7c57d9ae4d65de7c8e018362c2e4f963c2f70a9196cebf35457f1dd0cea6c65c256f673"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-lang/commons-lang@2.6?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://commons.apache.org/lang/"
        },
        {
          "type" : "build-system",
          "url" : "http://vmbuild.apache.org/continuum/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/LANG"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/viewvc/commons/proper/lang/branches/LANG_2_X"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.hive/hive-storage-api@2.6.0?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.hive",
      "name" : "hive-storage-api",
      "version" : "2.6.0",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "fd5484f4b2a5607c145224aa8fd0283f"
        },
        {
          "alg" : "SHA-1",
          "content" : "0f278d89710827312db75d7c87315a917cbd0349"
        },
        {
          "alg" : "SHA-256",
          "content" : "7221fc528bfee6385396b4ca05b1faedb658ef54253cd11f34a500883868c82e"
        },
        {
          "alg" : "SHA-512",
          "content" : "b3e7c3417d21335cd3a292b0c677d73b7d6462fcf3e11209fbda3b3bb2655b6608c792d8d8a6c0940413ccacd9d8486ff6467f35ab105b75c7271e2252a5a39a"
        },
        {
          "alg" : "SHA-384",
          "content" : "7aaeddedf7cb29159976b42950bf5b1addc79bd11990432ee82897d59439961c7dbf9c668dad324d463ed6b9032c3d58"
        },
        {
          "alg" : "SHA3-384",
          "content" : "5b4157299297c3d7456f594300c6d241729261137ca647a7d6c79815769c37ed63ad818cfa686a695993a8aba02540b4"
        },
        {
          "alg" : "SHA3-256",
          "content" : "a14e7d90013293794ee4631544e8414819c1bf127e09b03d6e2fb28cd8a5788e"
        },
        {
          "alg" : "SHA3-512",
          "content" : "66cef86291edc48377d32184c6eeb601dd3e864163bfc07d53ab1b1e6c27281872e5a5292ea91b39bc781fcccd7adbcffde603a4a35e14a01d721454fe66b738"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.hive/hive-storage-api@2.6.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.apache.org/hive-storage-api/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://svn.apache.org/viewvc/maven/pom/tags/apache-18/hive-storage-api"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
      "publisher" : "QOS.ch",
      "group" : "org.slf4j",
      "name" : "slf4j-api",
      "version" : "1.7.36",
      "description" : "The slf4j API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "872da51f5de7f3923da4de871d57fd85"
        },
        {
          "alg" : "SHA-1",
          "content" : "6c62681a2f655b49963a5983b8b0950a6120ae14"
        },
        {
          "alg" : "SHA-256",
          "content" : "d3ef575e3e4979678dc01bf1dcce51021493b4d11fb7f1be8ad982877c16a1c0"
        },
        {
          "alg" : "SHA-512",
          "content" : "f9b033fc019a44f98b16048da7e2b59edd4a6a527ba60e358f65ab88e0afae03a9340f1b3e8a543d49fa542290f499c5594259affa1ff3e6e7bf3b428d4c610b"
        },
        {
          "alg" : "SHA-384",
          "content" : "2b14ad035877087157e379d3277dcdcd79e58d6bdb147c47d29e377d75ce53ad42cafbf22f5fb7827c7e946ff4876b9a"
        },
        {
          "alg" : "SHA3-384",
          "content" : "3bc3110dafb8d5be16a39f3b2671a466463cd99eb39610c0e4719a7bf2d928f2ea213c734887c6926a07c4cca7769e4b"
        },
        {
          "alg" : "SHA3-256",
          "content" : "ba2608179fcf46e2291a90b9cbb4aa30d718e481f59c350cc21c73b88d826881"
        },
        {
          "alg" : "SHA3-512",
          "content" : "14c4edcd19702ef607d78826839d8a6d3a39157df54b89a801d3d3cbbe1307131a77671b041c761122730fb1387888c5ec2e46bdd80e1cb07f8f144676441824"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/license/mit/"
          }
        }
      ],
      "purl" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.slf4j.org"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/qos-ch/slf4j/slf4j-api"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.flink/flink-shaded-force-shading@20.0?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.flink",
      "name" : "flink-shaded-force-shading",
      "version" : "20.0",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "9971c3d248dd2ea79add93f77fb0f24f"
        },
        {
          "alg" : "SHA-1",
          "content" : "4c21de8cf9ca8e93777e5d1c4a7a0a2f61852401"
        },
        {
          "alg" : "SHA-256",
          "content" : "50773dc0f2ab1831754513a8861374c0e47b077dbcc33956fe3a6cd02308d0f8"
        },
        {
          "alg" : "SHA-512",
          "content" : "5b7a0bc48a25e82da9d9f8f9a01afe30bc7411b04924d8af72f4120a937b0a3f3999a51e3a55718783d71b97000d1d18568cfb48cb609d33cd201dfe10a7f0b2"
        },
        {
          "alg" : "SHA-384",
          "content" : "3b04f01b51dda20aef349e623f6c8de4713b15f095f4af220ef77c22f0b815687bb60c9def912c2e4eff3513132d7cc7"
        },
        {
          "alg" : "SHA3-384",
          "content" : "b0378ce70a9f05966229d15f8a5f6682280f63b5494040e1002a210128878799c5761bfa1b1b5d4204a0dabb8687f90e"
        },
        {
          "alg" : "SHA3-256",
          "content" : "0e0b42aa42a5be9a215f4e893efabe6773e5c8d54299daf714e36984410c4549"
        },
        {
          "alg" : "SHA3-512",
          "content" : "e8754f8fec246e8de00e9634f8a2c9821af3ebcc194ef570328dcc6e1395b0263d5ae875a702aa69e5a9602616afc3ef51a4b63e70c6df00646b495df87ebd1d"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.flink/flink-shaded-force-shading@20.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://flink.apache.org/flink-shaded-force-shading"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink-shaded/flink-shaded-force-shading"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar",
      "group" : "com.google.code.findbugs",
      "name" : "jsr305",
      "version" : "1.3.9",
      "description" : "JSR305 Annotations for Findbugs",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "1d5a772e400b04bb67a7ef4a0e0996d8"
        },
        {
          "alg" : "SHA-1",
          "content" : "40719ea6961c0cb6afaeb6a921eaa1f6afd4cfdf"
        },
        {
          "alg" : "SHA-256",
          "content" : "905721a0eea90a81534abb7ee6ef4ea2e5e645fa1def0a5cd88402df1b46c9ed"
        },
        {
          "alg" : "SHA-512",
          "content" : "06da282cfd8e30d9f8cf17702b8709172b00e22b75a627a1d85f8989615b8a1a401bc25d9aee7b14aed1d9b5df73bf2ea8d66f9c8468d9577c29f0ccfa2cc70a"
        },
        {
          "alg" : "SHA-384",
          "content" : "56e6b41ef62eb5edfed0203802cefae9c2df86388148e420bb0c687abb2b80e14d5c2a82d5b35dce4badaf148f94eada"
        },
        {
          "alg" : "SHA3-384",
          "content" : "58c3bf89fa1afa75c2c5078159fd28e27b2273d437f26aaaa7391310b6f0823f3cf476a24f5631c0881f3f7e946d99be"
        },
        {
          "alg" : "SHA3-256",
          "content" : "c333ea5faedfa78e0614a2620438d5724eab093df4e960918391b6a44c2915b0"
        },
        {
          "alg" : "SHA3-512",
          "content" : "67ec31448e156cc72dd036060b460bb2667a13b1cbe500b6b7eed3235b1994b44c39f440ebd07b21ec9595b166ad61121d4f6a132b5b313c558ab21b72599425"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://findbugs.sourceforge.net/"
        },
        {
          "type" : "vcs",
          "url" : "http://findbugs.googlecode.com/svn/trunk/"
        }
      ]
    }
  ],
  "dependencies" : [
    {
      "ref" : "pkg:maven/io.confluent.flink/flink-sql-orc@2.2.0-cp2?type=jar",
      "dependsOn" : [
        "pkg:maven/io.confluent.flink/flink-orc@2.2.0-cp2?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/org.apache.flink/flink-shaded-force-shading@20.0?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.confluent.flink/flink-orc@2.2.0-cp2?type=jar",
      "dependsOn" : [
        "pkg:maven/io.airlift/aircompressor@0.27?type=jar",
        "pkg:maven/org.apache.orc/orc-core@1.5.6?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.airlift/aircompressor@0.27?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.orc/orc-core@1.5.6?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.orc/orc-shims@1.5.6?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java@2.5.0?type=jar",
        "pkg:maven/commons-lang/commons-lang@2.6?type=jar",
        "pkg:maven/io.airlift/aircompressor@0.27?type=jar",
        "pkg:maven/org.apache.hive/hive-storage-api@2.6.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.orc/orc-shims@1.5.6?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.google.protobuf/protobuf-java@2.5.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/commons-lang/commons-lang@2.6?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.hive/hive-storage-api@2.6.0?type=jar",
      "dependsOn" : [
        "pkg:maven/commons-lang/commons-lang@2.6?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.flink/flink-shaded-force-shading@20.0?type=jar",
      "dependsOn" : [ ]
    }
  ]
}