<?xml version="1.0" encoding="UTF-8"?>
<bom serialNumber="urn:uuid:6b7e568e-04b5-47ad-8e77-d0f02e193b90" version="1" xmlns="http://cyclonedx.org/schema/bom/1.4">
  <metadata>
    <timestamp>2025-12-09T11:57:59Z</timestamp>
    <tools>
      <tool>
        <vendor>OWASP Foundation</vendor>
        <name>CycloneDX Maven plugin</name>
        <version>2.7.7</version>
        <hashes>
          <hash alg="MD5">436dfb24c63a322708e4a5143d8543af</hash>
          <hash alg="SHA-1">3ef2e8728dc9eff2f129c34057e46e9d2b10629a</hash>
          <hash alg="SHA-256">c185b79bf0f9264f43bc8c222c44db67bea275bb727e3327cf9aea6bf45292c9</hash>
          <hash alg="SHA-512">41488733e31e6c5315327dcc86187c2b9a6b96cd08f7e2157ce130688afde29c313fc6a73edb8a76333a930c78874aa2eac874448920030c0f7af0ac05e65ced</hash>
          <hash alg="SHA-384">f9462f86240fd9fc0942f34981e6d2371f252aa1a4e5e8c3c14e7f0f1a4e4de69ef972e51cf09a749afb6d97c13e67ed</hash>
          <hash alg="SHA3-384">c755af6239348bc7dd1e1e6b5f14f7cf7e1560d689b252d9610cd865fa4b419d0b8e26260731dfc5da2176b6e706b414</hash>
          <hash alg="SHA3-256">309aac91005470c9c834354ab918759e2ae7ec52fc1676002621a5bbdf3b7827</hash>
          <hash alg="SHA3-512">c634570dcf8302e61005e5fa91a9a0d9b81542f731967b3c9f6d3ef89e3b945bd36d7ab69e2ebad8124b9c05da504361c8b36a8ce528d844409eeb7df4eea6ce</hash>
        </hashes>
      </tool>
    </tools>
    <component type="library" bom-ref="pkg:maven/io.confluent.flink/flink-sql-parquet@2.1.1-cp1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>io.confluent.flink</group>
      <name>flink-sql-parquet</name>
      <version>2.1.1-cp1</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.confluent.flink/flink-sql-parquet@2.1.1-cp1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://flink.apache.org/flink-formats/flink-sql-parquet</url></reference><reference type="distribution"><url>s3://cp-flink-staging-654654529379-us-west-2/maven-staging/6eaf7284b1dd84057957aba21b9037030085a3fe</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink/flink-formats/flink-sql-parquet</url></reference></externalReferences>
    </component>
    <properties>
      <property name="maven.goal">makeBom</property>
      <property name="maven.scopes">compile,provided,runtime,system</property>
    </properties>
  </metadata>
  <components>
    <component type="library" bom-ref="pkg:maven/io.confluent.flink/flink-parquet@2.1.1-cp1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>io.confluent.flink</group>
      <name>flink-parquet</name>
      <version>2.1.1-cp1</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">9f1eeefe75761292fe712dab59ace581</hash>
        <hash alg="SHA-1">94a39e5e5b824ae114170c975a21879dbd3d302c</hash>
        <hash alg="SHA-256">0c04c912d2c198015428e669930599023d5d19527184e64425f24e2514719a5e</hash>
        <hash alg="SHA-512">df6256e65d8131fc816e2713f2a76d1486d2d3e85e44c13bfb9d2f3dd7aa33a6cf563ad81827ceadc6aa09e88918e5baf7a08eb1e7d5bbb633f4ba48c0ea1c29</hash>
        <hash alg="SHA-384">5a6cbd2f79cee7b285dc33cc8556045381e20bf0a9508d1d8a1852b8ca454d2985b4be5c3519f0968c67e6f1462ee400</hash>
        <hash alg="SHA3-384">6ac1e3820b98a086411ea89dcd4aa5f5ea675fe570a30d4badba52386318a96f53ac3156a3dfb9e4b6f1407abf461ed3</hash>
        <hash alg="SHA3-256">100fbc41c360321db41057c2d87bf61c605f50fd91ee42d26f4d691df925b098</hash>
        <hash alg="SHA3-512">cb8e7ae72fd1ce5216508e35e34f804e780862b7f72f8b66eeb71088b35dfe929ed1c9393abda2a698d3282996ebbef49b6d34e280623f30e9bc8326b2f3c30d</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.confluent.flink/flink-parquet@2.1.1-cp1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://flink.apache.org/flink-formats/flink-parquet</url></reference><reference type="distribution"><url>s3://cp-flink-staging-654654529379-us-west-2/maven-staging/6eaf7284b1dd84057957aba21b9037030085a3fe</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink/flink-formats/flink-parquet</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.parquet/parquet-hadoop@1.15.2?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.parquet</group>
      <name>parquet-hadoop</name>
      <version>1.15.2</version>
      <description>Parquet is a columnar storage format that supports nested data. This provides the java implementation.</description>
      <hashes>
        <hash alg="MD5">96eee89cf6f14943ccaf773827607f7c</hash>
        <hash alg="SHA-1">b68b561099a3c18eb47618cfd1b070afb254f34f</hash>
        <hash alg="SHA-256">a9015cbd8548a43bed459d1ee5cbc2748110f1cf484fdab785e5171e515d810f</hash>
        <hash alg="SHA-512">d7f4293d5f266d2cd9555dfadb52895bd894787d2fdeb476077d85dab7cad784abf7418d9748a51118be91b2cb72c8775710e0938c7e0995041755dddd9f7855</hash>
        <hash alg="SHA-384">41a220da2a407cdf7eef9d5213aeb1d9999cad5a0745948928e45d13cda3402ed5c57c23ec1a1a225e66085dd7fc8cd7</hash>
        <hash alg="SHA3-384">c17c72d79fe5b8599b9a6b0ded4b0273973effa3ae827cf5583fb957659196a4382b5907d4701b1669c14c9852af631f</hash>
        <hash alg="SHA3-256">082fb07cc17264c8f4f9a6b63a1377b5674b613c2fb66d316093a04ae7a6f66b</hash>
        <hash alg="SHA3-512">3d9661ffb7a0e29396b65199db4f26b35572bcecbfd03cfe873095b532cebf2bf7d780e8f6785d38c7f51afa1a37e580f36917ddbdce115503bad54d4dadce32</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.parquet/parquet-hadoop@1.15.2?type=jar</purl>
      <externalReferences><reference type="website"><url>https://parquet.apache.org</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://github.com/apache/parquet-java/issues</url></reference><reference type="mailing-list"><url>dev-subscribe@parquet.apache.org</url></reference><reference type="vcs"><url>scm:git:git@github.com:apache/parquet-mr.git/parquet-hadoop</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.parquet/parquet-format-structures@1.15.2?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.parquet</group>
      <name>parquet-format-structures</name>
      <version>1.15.2</version>
      <description>Parquet-mr related java classes to use the parquet-format thrift structures.</description>
      <hashes>
        <hash alg="MD5">d80e52c29b76d2bd0eed96fd3e958c5e</hash>
        <hash alg="SHA-1">235614fcd44b7e0f348744fcc914d82d73607970</hash>
        <hash alg="SHA-256">417175f24f18e50f82873d604f36532c6b1c924611c4357dff5851c631d87a45</hash>
        <hash alg="SHA-512">837da2ca1a85dad0cad29040a15f51f2cf0ba953e9e2fc1e9a4279e06af7f8d9966adc733d3ab4092359f836b315be0f04d9925498fc73b00e7e91e776c5aeda</hash>
        <hash alg="SHA-384">208f01dd7f813dc1b8f48e71194d9c5fa870d0379f2389d88265392b1ccfd954460cc58165fe170c125257356cd73b0a</hash>
        <hash alg="SHA3-384">4cce054c951bf353935aa1b68cf046de3a2a1ee8dfa08b70b8ede9bc5c95b7733148c2b7d37589ce811df470cf32ecbc</hash>
        <hash alg="SHA3-256">7bb806c4fbd3578af0af3e7666af404a19207373c2e3fe0e2767cd9508257994</hash>
        <hash alg="SHA3-512">6bec16f1ed552ba58cc677ba0ff25cd4a1fc5adef085b982bd562d31a3d0d687ae653a727e483ff79f09664fd511cfec02ba6e9f862dd954b198f3a614dd0ab7</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.parquet/parquet-format-structures@1.15.2?type=jar</purl>
      <externalReferences><reference type="website"><url>https://parquet.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://github.com/apache/parquet-java/issues</url></reference><reference type="mailing-list"><url>dev-subscribe@parquet.apache.org</url></reference><reference type="vcs"><url>scm:git:git@github.com:apache/parquet-mr.git/parquet-format-structures</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/javax.annotation/javax.annotation-api@1.3.2?type=jar">
      <publisher>GlassFish Community</publisher>
      <group>javax.annotation</group>
      <name>javax.annotation-api</name>
      <version>1.3.2</version>
      <description>Common Annotations for the JavaTM Platform API</description>
      <hashes>
        <hash alg="MD5">2ab1973eefffaa2aeec47d50b9e40b9d</hash>
        <hash alg="SHA-1">934c04d3cfef185a8008e7bf34331b79730a9d43</hash>
        <hash alg="SHA-256">e04ba5195bcd555dc95650f7cc614d151e4bcd52d29a10b8aa2197f3ab89ab9b</hash>
        <hash alg="SHA-512">679cf44c3b9d635b43ed122a555d570292c3f0937c33871c40438a1a53e2058c80578694ec9466eac9e280e19bfb7a95b261594cc4c1161c85dc97df6235e553</hash>
        <hash alg="SHA-384">fc0058495e54efb6e05a34e3ff422e7c8347bcc77d6d9b87e9253424968dee6ef6a215c318d7e54f8705276be81f0682</hash>
        <hash alg="SHA3-384">ed6464b715de6ced0d9981a3f28140824946a4b7a02ffaff6116c833bb36e8f77a6282ce63c0d82cfe841d4fd6916891</hash>
        <hash alg="SHA3-256">ecfc9bef24ae28cf94c6775ecf6e2086d90a25d8d5476a4f6bb24001601b6cd0</hash>
        <hash alg="SHA3-512">f2b333527faedf504f60aa70a3d491972fa76f7e61e6351027f74613f41001157656824fe312b6e1df6dc4979704fe2a745b618d5368a97fe0bf8749739de9e2</hash>
      </hashes>
      <licenses>
        <expression>(CDDL-1.0 OR GPL-2.0-with-classpath-exception)</expression>
      </licenses>
      <purl>pkg:maven/javax.annotation/javax.annotation-api@1.3.2?type=jar</purl>
      <externalReferences><reference type="website"><url>http://jcp.org/en/jsr/detail?id=250</url></reference><reference type="distribution"><url>https://maven.java.net/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/javaee/javax.annotation/issues</url></reference><reference type="mailing-list"><url>javaee-spec@javaee.groups.io</url></reference><reference type="vcs"><url>https://github.com/javaee/javax.annotation</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.parquet/parquet-jackson@1.15.2?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.parquet</group>
      <name>parquet-jackson</name>
      <version>1.15.2</version>
      <description>Parquet is a columnar storage format that supports nested data. This provides the java implementation.</description>
      <hashes>
        <hash alg="MD5">70ecbb7e2c21e4c82e920f4d35ba062f</hash>
        <hash alg="SHA-1">554c04e1c5ab964288cc47aa1747a82abca945e2</hash>
        <hash alg="SHA-256">0df26fcc7958e155da758676cdcc1028702d1876e62e4f87c406cee42cffcfe4</hash>
        <hash alg="SHA-512">4622d76bae26e1a3e390eefa2bf43274f227342432ac81f91deff209425ef6935d7e3e7e5886a09f7827c50e23859e8d9fa878ad0388b4289a623c40047711f0</hash>
        <hash alg="SHA-384">705c2cee5b8f1455642b96b68244005d22a233bb56f7e3bb0c0737b92c78b86baef1724696e19a3dc4cb15d1c3b4eae3</hash>
        <hash alg="SHA3-384">8d38fc4cd15e6ef5accb43d5d284f0b11339c7a7864a46fb57322eb902ed9ef8099b804f91165e59f7886cc0ef6dd255</hash>
        <hash alg="SHA3-256">37166adf9d2ca24bac38b878f5df9844aa2201cefd5e1721b61fa8447b2c9ff3</hash>
        <hash alg="SHA3-512">2e4f49ed86cc95f661bb39d76a3d5481ecd1dca74809911f6fd3412bb089ef485044cc9f80192f798cda5ba7263f6d842a9d30865fa45b833890e0337e09ea18</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.parquet/parquet-jackson@1.15.2?type=jar</purl>
      <externalReferences><reference type="website"><url>https://parquet.apache.org</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://github.com/apache/parquet-java/issues</url></reference><reference type="mailing-list"><url>dev-subscribe@parquet.apache.org</url></reference><reference type="vcs"><url>scm:git:git@github.com:apache/parquet-mr.git/parquet-jackson</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.airlift/aircompressor@2.0.2?type=jar">
      <group>io.airlift</group>
      <name>aircompressor</name>
      <version>2.0.2</version>
      <description>Compression algorithms</description>
      <hashes>
        <hash alg="MD5">86ebd034828b5af24292c985370c360a</hash>
        <hash alg="SHA-1">527952aa21839e8664618e1fe73c5648173607ac</hash>
        <hash alg="SHA-256">0c2a96bf86d5fb24ff7f20c92483c61391cb10d440a4bd278c77365a2b165698</hash>
        <hash alg="SHA-512">db5379867ff66f5570f48f42093f9172df23ef75f124fae4ec2dec74ee977ad081139f9dc0a663aae261439cb435a5c545edb7122d1bac40223401fe93fb431d</hash>
        <hash alg="SHA-384">117c41b463396e88a025f4bf3f1904dbe2f111dcb86e8e99b3960705bd92b205982df031b68d046bc65c3cab2d503fed</hash>
        <hash alg="SHA3-384">0558592618b70715c5308f6d3e5d2ba64126a9d521f2ed6f7dc1183dc0039ce88f3298a4462d3c3cfe3bf34f517db7c5</hash>
        <hash alg="SHA3-256">ab3d5a6f88eb30b9c32e90c7bb829774a5efe201fae82a5ebbf66f2c32267276</hash>
        <hash alg="SHA3-512">764f153c20a2ae0a3ddc90ca6a5b660709854171fe96cc2b5ab423de3da447b85b4329bab5054df41705becb2cb5da006585bdb64cc780a86f220bcce87621c8</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/io.airlift/aircompressor@2.0.2?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/airlift/aircompressor</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/airlift/aircompressor/tree/master</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-pool/commons-pool@1.6?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>commons-pool</group>
      <name>commons-pool</name>
      <version>1.6</version>
      <description>Commons Object Pooling Library</description>
      <hashes>
        <hash alg="MD5">5ca02245c829422176d23fa530e919cc</hash>
        <hash alg="SHA-1">4572d589699f09d866a226a14b7f4323c6d8f040</hash>
        <hash alg="SHA-256">46c42b4a38dc6b2db53a9ee5c92c63db103665d56694e2cfce2c95d51a6860cc</hash>
        <hash alg="SHA-512">3bf5bcdbd7342e794f95747421c510778d8656d7ca901eb9b0fd15b9edb5b470e799c76abce9fe5958355d0d6067565ab71897d02462232176a0145a7d546e69</hash>
        <hash alg="SHA-384">9dd327008604be77bad6fcf249f2806c9b6b6b9858ff35ceff74d6954ea5f66c162c92ba7a24f5da3ad9694b445a644a</hash>
        <hash alg="SHA3-384">c3295ce0994916658580fc046aa12e48559f43cde61a95aeb3ffe87d71b8b797ac9a2537825cc338ced5c09e37fe5285</hash>
        <hash alg="SHA3-256">5c20f6777fbb2221e461f2855a99d7761635a0eaaf0fd992f9aeb8042a185c95</hash>
        <hash alg="SHA3-512">a5294db60c04c0603d982af2c2b46f0052c5ff73f8a4298a01c378050f3476199e5c678b754604a76d68eb537ba4d4f30edddb16a8447b76b5b947922a00f5f2</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/commons-pool/commons-pool@1.6?type=jar</purl>
      <externalReferences><reference type="website"><url>http://commons.apache.org/pool/</url></reference><reference type="build-system"><url>http://vmbuild.apache.org/continuum/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/POOL</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>http://svn.apache.org/viewvc/commons/proper/pool/trunk</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.github.luben/zstd-jni@1.5.6-6?type=jar">
      <publisher>com.github.luben</publisher>
      <group>com.github.luben</group>
      <name>zstd-jni</name>
      <version>1.5.6-6</version>
      <description>JNI bindings for Zstd native library that provides fast and high compression lossless algorithm for Java and all JVM languages.</description>
      <hashes>
        <hash alg="MD5">a90336bc443a08521cbf6b8853c82921</hash>
        <hash alg="SHA-1">2fbdb6597ff51efa4a5bf12df18f27b5aa4f2625</hash>
        <hash alg="SHA-256">1f85db623bf653860d10e13e7b1ca6609301f66994dc93784c92a66019516bb9</hash>
        <hash alg="SHA-512">e78b0dd951cdb8eb2d506d80e894df520c8c241192e2ab7a2db45d5bef6185fae1cf74bc0da5f074f93c0893f77192e55fc9258e83d24527fb18764286c1bc3e</hash>
        <hash alg="SHA-384">e7912607a4c98da551433a2a1a0ffb84cf024dd97d36625d937ab0eb0fc14b98bcf29adaaadfe44eddfd7f889ba6004f</hash>
        <hash alg="SHA3-384">05bee204911011f16001b96f435ab22e54074948ce80cf466e857641991cbc7527f44fbb7eae0c5291aedf27635da5df</hash>
        <hash alg="SHA3-256">0830dc76be96ac3fcd2cdbe886884cacef6cb2ae25bc47140a42b13f3fcf12f5</hash>
        <hash alg="SHA3-512">145678086eadff805f2b695ab9464ebb1aa3fe0094ddab558ac03c0bff3cd9604a6f9f62fa884e3446dc9ac6eec016f50bc5fbe4425b962d2e16f152b64f4a79</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-2-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.github.luben/zstd-jni@1.5.6-6?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/luben/zstd-jni</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.protobuf/protobuf-java@3.21.7?type=jar">
      <group>com.google.protobuf</group>
      <name>protobuf-java</name>
      <version>3.21.7</version>
      <description>Core Protocol Buffers library. Protocol Buffers are a way of encoding structured data in an
    efficient yet extensible format.</description>
      <hashes>
        <hash alg="MD5">87417783d3677d733eae82bda7664943</hash>
        <hash alg="SHA-1">96cfc7147192f1de72c3d7d06972155ffb7d180c</hash>
        <hash alg="SHA-256">a204ec68748a7b26351ae37a311e8de468f248d1916d5f8dbe812c1289d0a0ff</hash>
        <hash alg="SHA-512">d2450e62ea4003295a50bd863c9cc25016f58a08e94171d581ae8fca626c6dabfc458b8f55310874f9e17189704e9b4d0cc259641c36ef5e83466bdaf2770bde</hash>
        <hash alg="SHA-384">23adb6f7e52739ca6e3c3f1f8a364a7ab3da5dabfe99fcc784c15fbff294fcdc91f40a2ee4362f66995eb9b1922b4746</hash>
        <hash alg="SHA3-384">8af2255addf82726186fe3a3d1f20d6affb4d0807b89a473f169b78f9641f6080611a25699fc7e461b31e5e8ef3a5186</hash>
        <hash alg="SHA3-256">7b707170933d4d60ec0ee38ba40f02e0587926d02d08032957b8ec3bf8c2a657</hash>
        <hash alg="SHA3-512">0bc1f5c3971dc7a84463faad48eabc5abf2ba958b834a6e732ce1b978f520c800b45beec0aa42feeb1e6443400d189423fe46a90a34d5afc3171de167864b953</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
          <url>https://opensource.org/licenses/BSD-3-Clause</url>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.protobuf/protobuf-java@3.21.7?type=jar</purl>
      <externalReferences><reference type="website"><url>https://developers.google.com/protocol-buffers/protobuf-java/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/protocolbuffers/protobuf/protobuf-java</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.parquet/parquet-avro@1.15.2?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.parquet</group>
      <name>parquet-avro</name>
      <version>1.15.2</version>
      <description>Parquet is a columnar storage format that supports nested data. This provides the java implementation.</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">2935ab8a7512044781b77edd1152d369</hash>
        <hash alg="SHA-1">8fb3f543720124a25514b08db336943a45849917</hash>
        <hash alg="SHA-256">ffb32d4245648338966d82c9aedd461efb8785fbea27d85b2f2d1ac2a14e6808</hash>
        <hash alg="SHA-512">c4343d4f62779012b5f603e67935939c0b38e4bf7f392c43aca7f54b83c4655f130c9e0d185d1ca87ed72db992837ed3018e9f2b7761e3a077f35876fa0e4145</hash>
        <hash alg="SHA-384">013c36b2664870b446ba862ffb9c28c51758a75959c042639ad22e30bbf4171101e88d2176b22841aa98b6aa7901da99</hash>
        <hash alg="SHA3-384">6a9f7b45aeaa9bd1603b691d04a310b545b9d884843e510990bef7f6824824cfa56971e9060af6bef1fcc20edd611b76</hash>
        <hash alg="SHA3-256">7e90e8a51bf1a31cda5a177300c18a5943a6eeafdde9edf21c946fd94e95a34f</hash>
        <hash alg="SHA3-512">3ed0ac58b62547ed1fce0b301fb346c8e7efac173df01a16cc649f70c69bfb5e8b3583194e95aeafd833a0cb326340dfbece494a5f2d55ea6e79e08e5dfab428</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.parquet/parquet-avro@1.15.2?type=jar</purl>
      <externalReferences><reference type="website"><url>https://parquet.apache.org</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://github.com/apache/parquet-java/issues</url></reference><reference type="mailing-list"><url>dev-subscribe@parquet.apache.org</url></reference><reference type="vcs"><url>scm:git:git@github.com:apache/parquet-mr.git/parquet-avro</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.parquet/parquet-column@1.15.2?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.parquet</group>
      <name>parquet-column</name>
      <version>1.15.2</version>
      <description>Parquet is a columnar storage format that supports nested data. This provides the java implementation.</description>
      <hashes>
        <hash alg="MD5">ae419f99f43cf37f8b25fedf31b10a6a</hash>
        <hash alg="SHA-1">db7b1b50eb4bb5345bb175605e1ef7a339d9e837</hash>
        <hash alg="SHA-256">856e759164450d1373e98f761968bd19a6a26899c2f93720770501a1b0e59e4c</hash>
        <hash alg="SHA-512">85892e350f087e46fd8c8f470af280ee727c229fbce08223b8bc46549cd8fb4d2d94cdc55b81c24b07992ac100f4e7b80adaab760d3550582adb30bab69fbdb0</hash>
        <hash alg="SHA-384">13409c8450db766004d6a1433a2541b75886b9c933d56a21e2e7bcfe5e2242c3668447e4e0a05c6771e3452636df4fa9</hash>
        <hash alg="SHA3-384">e17de078a4ca9acdddf4dcbc9ee47d89d421cf603e1338ae71d7a0f5d96934b6ba54f97644f3200b86dd44db9ed10220</hash>
        <hash alg="SHA3-256">e896913149e07db243065a90fbe9c58e8519bd91acfcc7de4758277c9d82b245</hash>
        <hash alg="SHA3-512">a1d7b6ac43865b6b55a54cd155257712590a2e148f5430a728335e045c35561fcce1f623c5fc5a3d0e9a51767caa9b94906d4a6057945e5b424daac75d020f08</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.parquet/parquet-column@1.15.2?type=jar</purl>
      <externalReferences><reference type="website"><url>https://parquet.apache.org</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://github.com/apache/parquet-java/issues</url></reference><reference type="mailing-list"><url>dev-subscribe@parquet.apache.org</url></reference><reference type="vcs"><url>scm:git:git@github.com:apache/parquet-mr.git/parquet-column</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.parquet/parquet-encoding@1.15.2?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.parquet</group>
      <name>parquet-encoding</name>
      <version>1.15.2</version>
      <description>Parquet is a columnar storage format that supports nested data. This provides the java implementation.</description>
      <hashes>
        <hash alg="MD5">ab4f588e4f676b9e8223931387046041</hash>
        <hash alg="SHA-1">1f0566b33202fc5562e3c6de01a164898d26be25</hash>
        <hash alg="SHA-256">da2b2df9749cce2eee3205a6f4ec07612f985d51aebbd8f5861d8ec344824dc1</hash>
        <hash alg="SHA-512">61e336d60917b2e8319b66cadcdb1c862bce715ab32c7efac99786ef1217afc0eaa845b36975b1ac0ef6a05d96a4b2e8755892e1220c17261a76fd67489798f1</hash>
        <hash alg="SHA-384">25a896f02ef75c4e7ff3d818f109c304ecdcd71baaf4bde1c721af18b6b2ce77b9145a14efba136bc70a8f408d912751</hash>
        <hash alg="SHA3-384">d2fb6b7a13a382a9021e5e836545f4b63f5ee532f10e616f76fd9ec53a4ccd40b7a0831269c918337351841168457dbc</hash>
        <hash alg="SHA3-256">87d79dedebbc7384fa8a4577831c8651a16c0320d0330703dfd47d46075f7d6b</hash>
        <hash alg="SHA3-512">ab7ff2ea25a037e86d406d4d299d49f630d81b3ebd223970a6f5d6568ed99e78b3c900fc49068ad0fb5359424d31689029f3f660de3f30f96d169c292c82f2e8</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.parquet/parquet-encoding@1.15.2?type=jar</purl>
      <externalReferences><reference type="website"><url>https://parquet.apache.org</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://github.com/apache/parquet-java/issues</url></reference><reference type="mailing-list"><url>dev-subscribe@parquet.apache.org</url></reference><reference type="vcs"><url>scm:git:git@github.com:apache/parquet-mr.git/parquet-encoding</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.parquet/parquet-common@1.15.2?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.parquet</group>
      <name>parquet-common</name>
      <version>1.15.2</version>
      <description>Parquet is a columnar storage format that supports nested data. This provides the java implementation.</description>
      <hashes>
        <hash alg="MD5">4678a7a3e055e19308ef31ba38f1fc70</hash>
        <hash alg="SHA-1">5078b2fe961156896a6d07a3894a6f8ff0bb706e</hash>
        <hash alg="SHA-256">a1e57537661f18f259d342a93123db10b5796e30a0585d0652af987ea7c33596</hash>
        <hash alg="SHA-512">7dc871bc96a97e9232622882ff4c6affbcf18691f77f3845c135e1d348dda85f8b06ed5719d1b0ed0da78c842282744f3d0babc5e22b24c184fe55c8a8d4331a</hash>
        <hash alg="SHA-384">0e827475289fe7d3f4475957f037f73bfbd88a6c05058f7ce9fefa7d47e04bb23cfaedba342e4749e6dcdf47df11d3b4</hash>
        <hash alg="SHA3-384">fc5530fb3aac43b01f97295e8067d3a68bfbbd5260d8b2dcf8fe3c1ec38414d3b02d9fcd6dfd5c623bab958212940467</hash>
        <hash alg="SHA3-256">abed4d4bdad889184795f1ae7a876d0a3388f66f4a4d2f4439288cda121a5a74</hash>
        <hash alg="SHA3-512">409b879d66047fe93a9e4ed75b354966f891072bfbc10e4b8233a6f5587435cca6631e067ccbb9a9777e7582fdda6954d641c617c77975e33166835baef9b77e</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.parquet/parquet-common@1.15.2?type=jar</purl>
      <externalReferences><reference type="website"><url>https://parquet.apache.org</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://github.com/apache/parquet-java/issues</url></reference><reference type="mailing-list"><url>dev-subscribe@parquet.apache.org</url></reference><reference type="vcs"><url>scm:git:git@github.com:apache/parquet-mr.git/parquet-common</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.avro/avro@1.11.4?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.avro</group>
      <name>avro</name>
      <version>1.11.4</version>
      <description>Avro core components</description>
      <hashes>
        <hash alg="MD5">915002011d651686f94b4e20d25234a6</hash>
        <hash alg="SHA-1">25d54640c4a17aa342490c4c63c172759361bf56</hash>
        <hash alg="SHA-256">eeba11b77070b9aa6337d886fdf778f6695f6c4c3dcfd2a02389925c885079fa</hash>
        <hash alg="SHA-512">2133473bcafb3997f70dd0dc44e76872beed30910dc88522d898e639df0c58f8fefec4c734e46bf0244cf2ca1b49e90b0fdf5c9d7ccd06b41f8f9ad98da1cca5</hash>
        <hash alg="SHA-384">701113d1e68c4582aad203692567bff7538d6ac2707195b413e9f831215e0c8622e83383adcc822a353524c28aba5dda</hash>
        <hash alg="SHA3-384">017e0363dfdf0019a2e75785c1f7a8aebe1a61f2c96393bacea3238d8f010d3d82ddcf3466d474ebb113ef67e9ecf192</hash>
        <hash alg="SHA3-256">135d7a5a6e9723e77cee8ede0687f459f8fbb828f4111dc351f747b2b72eb0dd</hash>
        <hash alg="SHA3-512">04d0041f4d215b51a446ec9c2b2998042285f81d85dd316f046b46420b71d459e3f66530ddbc2b98772ee5ced0d8788cb21c46b09d2139d311930ce5424ac3b9</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.avro/avro@1.11.4?type=jar</purl>
      <externalReferences><reference type="website"><url>https://avro.apache.org</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/AVRO</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/avro-dev/</url></reference><reference type="vcs"><url>scm:git:https://github.com/apache/avro/avro-parent/avro</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.fasterxml.jackson.core/jackson-core@2.18.2?type=jar">
      <publisher>FasterXML</publisher>
      <group>com.fasterxml.jackson.core</group>
      <name>jackson-core</name>
      <version>2.18.2</version>
      <description>Core Jackson processing abstractions (aka Streaming API), implementation for JSON</description>
      <hashes>
        <hash alg="MD5">bf935e6eca3a57defa13918661905cb0</hash>
        <hash alg="SHA-1">fb64ccac5c27dca8819418eb4e443a9f496d9ee7</hash>
        <hash alg="SHA-256">d8054ae7c0d1c2d2f55d28e46026ebe5892881f3fab5f439233184381c3b4a1f</hash>
        <hash alg="SHA-512">2223f6d8235c6831b488dd2723a4569e4dab6c2371f0e39f867b57a3a443e093d1fce05dc070a350fa306d7e952888cb09c7c816254147b01083d122964fc3a5</hash>
        <hash alg="SHA-384">7c5183b4e0ceb3d9dd089e29253832fdbe5f126a7b8c08fa66ab46f5050eb3b8fd792e00bd914f49000719e547586e23</hash>
        <hash alg="SHA3-384">2a973e2dcd1b65eb63f783878c542fa804254c880d47180717cd5ab239670b529c61ca4de647d4683cf4b459b6a7f5df</hash>
        <hash alg="SHA3-256">c99bd2cc1f13748357bf002d92d83f9f2d14d777c5e3fb7ed38c6891c76dbcb8</hash>
        <hash alg="SHA3-512">10b0328f2cd2a347f8c3eb8ed1967036b8940fe9b444ac27ffdb66bd373686a13fe7ec7498de5b81af1a301ed4afeb85aece0afb782aa6cadcf78362fa7ea5ae</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.fasterxml.jackson.core/jackson-core@2.18.2?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/FasterXML/jackson-core</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/FasterXML/jackson-core/issues</url></reference><reference type="vcs"><url>https://github.com/FasterXML/jackson-core</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.18.2?type=jar">
      <publisher>FasterXML</publisher>
      <group>com.fasterxml.jackson.core</group>
      <name>jackson-databind</name>
      <version>2.18.2</version>
      <description>General data-binding functionality for Jackson: works on core streaming API</description>
      <hashes>
        <hash alg="MD5">1b56887bcd3eaea1ff710eb673e610b0</hash>
        <hash alg="SHA-1">deef8697b92141fb6caf7aa86966cff4eec9b04f</hash>
        <hash alg="SHA-256">4b364e6850dc89172fcf1d4dd26b8ff5488eda44ff4657e22dd265203dd5ab3c</hash>
        <hash alg="SHA-512">bbdfaaffaaab2a032a754cd9dade06552e9f79fd39ae396873315415219b37e0675fde0a02953efe0701e17be4c282b118a96fcb752f53ca37ab89624f0a52ac</hash>
        <hash alg="SHA-384">77607f963531b8b7a963e0691ec0196d0877f13763fcd7485fbbe14a37054a9babd343aecc96c8d29ec2480546cd1e4d</hash>
        <hash alg="SHA3-384">e02fdf4bba51730989da3efac6e0dfce5649215ec78c7d21713386d36874d621f65ea9881399ef80c87a9436877453a1</hash>
        <hash alg="SHA3-256">ced61fd9988c4418e98f5bd061a3aa099dd4e0a0074a272e87803262c2177bf8</hash>
        <hash alg="SHA3-512">6f6610e9bbbfd344ebd716a7709a19bdcf0180f214437473602db312a5e6d6e592bed40776ce9a445ab6b7b5c0fd9291fd11257a6b06e5dbf4b971fe996b2972</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.18.2?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/FasterXML/jackson</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/FasterXML/jackson-databind/issues</url></reference><reference type="vcs"><url>https://github.com/FasterXML/jackson-databind</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.18.2?type=jar">
      <publisher>FasterXML</publisher>
      <group>com.fasterxml.jackson.core</group>
      <name>jackson-annotations</name>
      <version>2.18.2</version>
      <description>Core annotations used for value types, used by Jackson data binding package.</description>
      <hashes>
        <hash alg="MD5">79d38d3c51068a2bbc40268d02f80763</hash>
        <hash alg="SHA-1">985d77751ebc7fce5db115a986bc9aa82f973f4a</hash>
        <hash alg="SHA-256">581bd61000ef7648943f781ca05689e56d03f6052748365a8e2b3a9b5d3fa32f</hash>
        <hash alg="SHA-512">d375e5761052e202e409400637cdc9ce0f45cf01a90628f36ca3c81757ac30695cc6e60146cbf14685c5c50912ad932564eb794ea76ab8461ce1786a02eab867</hash>
        <hash alg="SHA-384">cc68a2e188dfb8a3687542b7e6b0d2b8323536dd82716a545f73320915e5f9602cc7a3c3d67a15f5adb579c31d5ed96f</hash>
        <hash alg="SHA3-384">ffcc40615a2d6f0c0382595da8601f7501dfb78f6f78718e9f05f309253379e9d9101d82bc7aaf8735746eafa190d8c9</hash>
        <hash alg="SHA3-256">9cb3a706d1bc0401a7bdd9c42a6ec048cd7bebce9f60f395e44c254a67ea230b</hash>
        <hash alg="SHA3-512">f1a5af82d49e1db5898b4caa487a4ae061cf31b5db25e2172fdba59970dab3308618f7e34f6fcf0842b7c9da958c274d69022d10d85f3e862be88a44ef8b7fc6</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.18.2?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/FasterXML/jackson</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/FasterXML/jackson-annotations/issues</url></reference><reference type="vcs"><url>https://github.com/FasterXML/jackson-annotations</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-compress@1.26.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.commons</group>
      <name>commons-compress</name>
      <version>1.26.0</version>
      <description>Apache Commons Compress defines an API for working with
compression and archive formats. These include bzip2, gzip, pack200,
LZMA, XZ, Snappy, traditional Unix Compress, DEFLATE, DEFLATE64, LZ4,
Brotli, Zstandard and ar, cpio, jar, tar, zip, dump, 7z, arj.</description>
      <hashes>
        <hash alg="MD5">cbc0bb8eca12b747ca21bf998d736e60</hash>
        <hash alg="SHA-1">659feffdd12280201c8aacb8f7be94f9a883c824</hash>
        <hash alg="SHA-256">051aceb8bbcc62d0f5b2b8ac72c53767f9c59bfbd050151e65bef6f51c8ed9c9</hash>
        <hash alg="SHA-512">acbeaa2909b809cd561e7156df18340d96abacb179325622d73bdd6b82cb9b387d6fcb1a44d8195aad4e786da299289e17598a1d337b7c7d1c0bc610cc128714</hash>
        <hash alg="SHA-384">052d4d0cd1929c4299dd9d37dd36eaea6ed2be6b04d6d83a94f8608a6d1138aa81f7a34f25113ac267e7ba25ce948c9a</hash>
        <hash alg="SHA3-384">8b0bf441e8ce793fb6513bc07551cc48ab4507696c18e6037b0fcf35bc4e1eb3e44ed962e2d3765c86d4d912770aa53e</hash>
        <hash alg="SHA3-256">e441768e06092053f4703844ec0c8f2b437e06e7c190d48fec9d7682beb94c40</hash>
        <hash alg="SHA3-512">5984f9f08f83789555677f6800f25fa8e80a9eb2e4d46b5fb117b8efc24753644fa103a2f6b619827661a41677991bc827965172ef25f1313d8a59154e615e8d</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.commons/commons-compress@1.26.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://commons.apache.org/proper/commons-compress/</url></reference><reference type="build-system"><url>https://github.com/apache/commons-parent/actions</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/COMPRESS</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=commons-compress.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-io/commons-io@2.15.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>commons-io</group>
      <name>commons-io</name>
      <version>2.15.1</version>
      <description>The Apache Commons IO library contains utility classes, stream implementations, file filters,
file comparators, endian transformation classes, and much more.</description>
      <hashes>
        <hash alg="MD5">84351f7991a0e6722f00e96a4ccc376f</hash>
        <hash alg="SHA-1">f11560da189ab563a5c8e351941415430e9304ea</hash>
        <hash alg="SHA-256">a58af12ee1b68cfd2ebb0c27caef164f084381a00ec81a48cc275fd7ea54e154</hash>
        <hash alg="SHA-512">e9adaeed2d715ac0ae44de056ba165a743a92acbeb9871b535f7e58e0b3bc4fba276495b50429be195098a559f3adb7294048479754a0ee4d397da2efda5f81c</hash>
        <hash alg="SHA-384">028c72b59373d3894da22f9eb2c731aabd00f670993973f71a354d722670c12ca659686b83bbf8db32d060ca180f50b2</hash>
        <hash alg="SHA3-384">73cd585ab3736b4be50ec0f10dfe5ebfc3390eea8d56f07f29055f1fddb2dff8084310eaa6fb9f97ea639ed1abd7bc33</hash>
        <hash alg="SHA3-256">daf39bc99f1a3dc0075714a4a342a58d69a4cd62c25bc39a581f657ca72b1044</hash>
        <hash alg="SHA3-512">b003f8971d1536ea0fc4320dbfe17d7259d49e59314739f9fc83134e511facbff048b0ef4f86a9d0893781ca09c95cebc3b181a6c89a2d41e851870b96e76839</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/commons-io/commons-io@2.15.1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://commons.apache.org/proper/commons-io/</url></reference><reference type="build-system"><url>https://github.com/apache/commons-parent/actions</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/IO</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=commons-io.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.commons</group>
      <name>commons-lang3</name>
      <version>3.18.0</version>
      <description>Apache Commons Lang, a package of Java utility classes for the
  classes that are in java.lang's hierarchy, or are considered to be so
  standard as to justify existence in java.lang.

  The code is tested using the latest revision of the JDK for supported
  LTS releases: 8, 11, 17 and 21 currently.
  See https://github.com/apache/commons-lang/blob/master/.github/workflows/maven.yml
  
  Please ensure your build environment is up-to-date and kindly report any build issues.</description>
      <hashes>
        <hash alg="MD5">48b9886957920a4cdb602780ca345087</hash>
        <hash alg="SHA-1">fb14946f0e39748a6571de0635acbe44e7885491</hash>
        <hash alg="SHA-256">4eeeae8d20c078abb64b015ec158add383ac581571cddc45c68f0c9ae0230720</hash>
        <hash alg="SHA-512">c2c9d497fc1be411050f4011b2407764b78aa098eb42925af8a197eabdbc25b507f09fb898805e9bed4815f35236a508ee5b096e36f363df4d407232d50fc832</hash>
        <hash alg="SHA-384">4fb3f101106e4ce3666d5c15d276ba86f7683a0ef35f0384edfcd579ea454275edbb7400795d265ec3a38e39997e79b8</hash>
        <hash alg="SHA3-384">aada7e3612cf3f6190a19fa7c3db74df1e13ec56b300be9bb4317d261d5877c84ab59ba9a09168becdbd82cd41961395</hash>
        <hash alg="SHA3-256">306d286d0bd7549c203cc802fd755d354c4f7926fa023f4e83623ba1a6261250</hash>
        <hash alg="SHA3-512">f6f1ecc684e309d7b9fc5c343792508fee935cd2119d962721662c5af88e4864ba6f47a863e083714f315f926c156de1970cd2fb577449bdfdc7bf98a4a451fa</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://commons.apache.org/proper/commons-lang/</url></reference><reference type="build-system"><url>https://github.com/apache/commons-lang/actions</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/LANG</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf/commons-lang.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar">
      <publisher>QOS.ch</publisher>
      <group>org.slf4j</group>
      <name>slf4j-api</name>
      <version>1.7.36</version>
      <description>The slf4j API</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">872da51f5de7f3923da4de871d57fd85</hash>
        <hash alg="SHA-1">6c62681a2f655b49963a5983b8b0950a6120ae14</hash>
        <hash alg="SHA-256">d3ef575e3e4979678dc01bf1dcce51021493b4d11fb7f1be8ad982877c16a1c0</hash>
        <hash alg="SHA-512">f9b033fc019a44f98b16048da7e2b59edd4a6a527ba60e358f65ab88e0afae03a9340f1b3e8a543d49fa542290f499c5594259affa1ff3e6e7bf3b428d4c610b</hash>
        <hash alg="SHA-384">2b14ad035877087157e379d3277dcdcd79e58d6bdb147c47d29e377d75ce53ad42cafbf22f5fb7827c7e946ff4876b9a</hash>
        <hash alg="SHA3-384">3bc3110dafb8d5be16a39f3b2671a466463cd99eb39610c0e4719a7bf2d928f2ea213c734887c6926a07c4cca7769e4b</hash>
        <hash alg="SHA3-256">ba2608179fcf46e2291a90b9cbb4aa30d718e481f59c350cc21c73b88d826881</hash>
        <hash alg="SHA3-512">14c4edcd19702ef607d78826839d8a6d3a39157df54b89a801d3d3cbbe1307131a77671b041c761122730fb1387888c5ec2e46bdd80e1cb07f8f144676441824</hash>
      </hashes>
      <licenses>
        <license>
          <id>MIT</id>
          <url>https://opensource.org/licenses/MIT</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.slf4j.org</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/qos-ch/slf4j/slf4j-api</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-shaded-force-shading@20.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-shaded-force-shading</name>
      <version>20.0</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">9971c3d248dd2ea79add93f77fb0f24f</hash>
        <hash alg="SHA-1">4c21de8cf9ca8e93777e5d1c4a7a0a2f61852401</hash>
        <hash alg="SHA-256">50773dc0f2ab1831754513a8861374c0e47b077dbcc33956fe3a6cd02308d0f8</hash>
        <hash alg="SHA-512">5b7a0bc48a25e82da9d9f8f9a01afe30bc7411b04924d8af72f4120a937b0a3f3999a51e3a55718783d71b97000d1d18568cfb48cb609d33cd201dfe10a7f0b2</hash>
        <hash alg="SHA-384">3b04f01b51dda20aef349e623f6c8de4713b15f095f4af220ef77c22f0b815687bb60c9def912c2e4eff3513132d7cc7</hash>
        <hash alg="SHA3-384">b0378ce70a9f05966229d15f8a5f6682280f63b5494040e1002a210128878799c5761bfa1b1b5d4204a0dabb8687f90e</hash>
        <hash alg="SHA3-256">0e0b42aa42a5be9a215f4e893efabe6773e5c8d54299daf714e36984410c4549</hash>
        <hash alg="SHA3-512">e8754f8fec246e8de00e9634f8a2c9821af3ebcc194ef570328dcc6e1395b0263d5ae875a702aa69e5a9602616afc3ef51a4b63e70c6df00646b495df87ebd1d</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-shaded-force-shading@20.0?type=jar</purl>
      <externalReferences><reference type="website"><url>http://flink.apache.org/flink-shaded-force-shading</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink-shaded/flink-shaded-force-shading</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar">
      <group>com.google.code.findbugs</group>
      <name>jsr305</name>
      <version>1.3.9</version>
      <description>JSR305 Annotations for Findbugs</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">1d5a772e400b04bb67a7ef4a0e0996d8</hash>
        <hash alg="SHA-1">40719ea6961c0cb6afaeb6a921eaa1f6afd4cfdf</hash>
        <hash alg="SHA-256">905721a0eea90a81534abb7ee6ef4ea2e5e645fa1def0a5cd88402df1b46c9ed</hash>
        <hash alg="SHA-512">06da282cfd8e30d9f8cf17702b8709172b00e22b75a627a1d85f8989615b8a1a401bc25d9aee7b14aed1d9b5df73bf2ea8d66f9c8468d9577c29f0ccfa2cc70a</hash>
        <hash alg="SHA-384">56e6b41ef62eb5edfed0203802cefae9c2df86388148e420bb0c687abb2b80e14d5c2a82d5b35dce4badaf148f94eada</hash>
        <hash alg="SHA3-384">58c3bf89fa1afa75c2c5078159fd28e27b2273d437f26aaaa7391310b6f0823f3cf476a24f5631c0881f3f7e946d99be</hash>
        <hash alg="SHA3-256">c333ea5faedfa78e0614a2620438d5724eab093df4e960918391b6a44c2915b0</hash>
        <hash alg="SHA3-512">67ec31448e156cc72dd036060b460bb2667a13b1cbe500b6b7eed3235b1994b44c39f440ebd07b21ec9595b166ad61121d4f6a132b5b313c558ab21b72599425</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar</purl>
      <externalReferences><reference type="website"><url>http://findbugs.sourceforge.net/</url></reference><reference type="vcs"><url>http://findbugs.googlecode.com/svn/trunk/</url></reference></externalReferences>
    </component>
  </components>
  <dependencies>
    <dependency ref="pkg:maven/io.confluent.flink/flink-sql-parquet@2.1.1-cp1?type=jar">
      <dependency ref="pkg:maven/io.confluent.flink/flink-parquet@2.1.1-cp1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.parquet/parquet-avro@1.15.2?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-force-shading@20.0?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/io.confluent.flink/flink-parquet@2.1.1-cp1?type=jar">
      <dependency ref="pkg:maven/org.apache.parquet/parquet-hadoop@1.15.2?type=jar"/>
      <dependency ref="pkg:maven/com.google.protobuf/protobuf-java@3.21.7?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.parquet/parquet-hadoop@1.15.2?type=jar">
      <dependency ref="pkg:maven/org.apache.parquet/parquet-column@1.15.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.parquet/parquet-format-structures@1.15.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.parquet/parquet-common@1.15.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.parquet/parquet-jackson@1.15.2?type=jar"/>
      <dependency ref="pkg:maven/io.airlift/aircompressor@2.0.2?type=jar"/>
      <dependency ref="pkg:maven/commons-pool/commons-pool@1.6?type=jar"/>
      <dependency ref="pkg:maven/com.github.luben/zstd-jni@1.5.6-6?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.parquet/parquet-column@1.15.2?type=jar">
      <dependency ref="pkg:maven/org.apache.parquet/parquet-common@1.15.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.parquet/parquet-encoding@1.15.2?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.parquet/parquet-common@1.15.2?type=jar">
      <dependency ref="pkg:maven/org.apache.parquet/parquet-format-structures@1.15.2?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.parquet/parquet-format-structures@1.15.2?type=jar">
      <dependency ref="pkg:maven/javax.annotation/javax.annotation-api@1.3.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/javax.annotation/javax.annotation-api@1.3.2?type=jar"/>
    <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    <dependency ref="pkg:maven/org.apache.parquet/parquet-encoding@1.15.2?type=jar">
      <dependency ref="pkg:maven/org.apache.parquet/parquet-common@1.15.2?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.parquet/parquet-jackson@1.15.2?type=jar"/>
    <dependency ref="pkg:maven/io.airlift/aircompressor@2.0.2?type=jar"/>
    <dependency ref="pkg:maven/commons-pool/commons-pool@1.6?type=jar"/>
    <dependency ref="pkg:maven/com.github.luben/zstd-jni@1.5.6-6?type=jar"/>
    <dependency ref="pkg:maven/com.google.protobuf/protobuf-java@3.21.7?type=jar"/>
    <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"/>
    <dependency ref="pkg:maven/org.apache.parquet/parquet-avro@1.15.2?type=jar">
      <dependency ref="pkg:maven/org.apache.parquet/parquet-column@1.15.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.parquet/parquet-hadoop@1.15.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.parquet/parquet-common@1.15.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.avro/avro@1.11.4?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.avro/avro@1.11.4?type=jar">
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-core@2.18.2?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.18.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-compress@1.26.0?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-core@2.18.2?type=jar"/>
    <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.18.2?type=jar">
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.18.2?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-core@2.18.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.18.2?type=jar"/>
    <dependency ref="pkg:maven/org.apache.commons/commons-compress@1.26.0?type=jar">
      <dependency ref="pkg:maven/commons-io/commons-io@2.15.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/commons-io/commons-io@2.15.1?type=jar"/>
    <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar"/>
    <dependency ref="pkg:maven/org.apache.flink/flink-shaded-force-shading@20.0?type=jar"/>
  </dependencies>
</bom>
