<?xml version="1.0" encoding="UTF-8"?>
<bom serialNumber="urn:uuid:35a36856-e1a7-430c-a62d-6c77825d81cb" version="1" xmlns="http://cyclonedx.org/schema/bom/1.4">
  <metadata>
    <timestamp>2026-04-01T14:07:40Z</timestamp>
    <tools>
      <tool>
        <vendor>OWASP Foundation</vendor>
        <name>CycloneDX Maven plugin</name>
        <version>2.7.7</version>
        <hashes>
          <hash alg="MD5">436dfb24c63a322708e4a5143d8543af</hash>
          <hash alg="SHA-1">3ef2e8728dc9eff2f129c34057e46e9d2b10629a</hash>
          <hash alg="SHA-256">c185b79bf0f9264f43bc8c222c44db67bea275bb727e3327cf9aea6bf45292c9</hash>
          <hash alg="SHA-512">41488733e31e6c5315327dcc86187c2b9a6b96cd08f7e2157ce130688afde29c313fc6a73edb8a76333a930c78874aa2eac874448920030c0f7af0ac05e65ced</hash>
          <hash alg="SHA-384">f9462f86240fd9fc0942f34981e6d2371f252aa1a4e5e8c3c14e7f0f1a4e4de69ef972e51cf09a749afb6d97c13e67ed</hash>
          <hash alg="SHA3-384">c755af6239348bc7dd1e1e6b5f14f7cf7e1560d689b252d9610cd865fa4b419d0b8e26260731dfc5da2176b6e706b414</hash>
          <hash alg="SHA3-256">309aac91005470c9c834354ab918759e2ae7ec52fc1676002621a5bbdf3b7827</hash>
          <hash alg="SHA3-512">c634570dcf8302e61005e5fa91a9a0d9b81542f731967b3c9f6d3ef89e3b945bd36d7ab69e2ebad8124b9c05da504361c8b36a8ce528d844409eeb7df4eea6ce</hash>
        </hashes>
      </tool>
    </tools>
    <component type="library" bom-ref="pkg:maven/io.confluent.flink/flink-table-calcite-bridge@1.18.1-cp6?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>io.confluent.flink</group>
      <name>flink-table-calcite-bridge</name>
      <version>1.18.1-cp6</version>
      <description>This module contains the Calcite dependencies for writing planner plugins (e.g. SQL dialects)
		that interact with Calcite APIs. More exactly, currently, it is intended to provide the ability
		to create RelNode, which involves accessing the RelOptCluster, RelBuilder, etc, provided by PlannerContext.</description>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.confluent.flink/flink-table-calcite-bridge@1.18.1-cp6?type=jar</purl>
      <externalReferences><reference type="website"><url>https://flink.apache.org/flink-table/flink-table-calcite-bridge</url></reference><reference type="distribution"><url>s3://cp-flink-staging-654654529379-us-west-2/maven-staging/e264363095c14d00bed012cfd48992029a5d3f63</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink/flink-table/flink-table-calcite-bridge</url></reference></externalReferences>
    </component>
    <properties>
      <property name="maven.goal">makeBom</property>
      <property name="maven.scopes">compile,provided,runtime,system</property>
    </properties>
  </metadata>
  <components>
    <component type="library" bom-ref="pkg:maven/org.apache.calcite/calcite-core@1.32.0?type=jar">
      <group>org.apache.calcite</group>
      <name>calcite-core</name>
      <version>1.32.0</version>
      <description>Core Calcite APIs and engine</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">0bdb47d8d02d2dfe44473557fd097a04</hash>
        <hash alg="SHA-1">984545fa6d4c4d141a6f488d170df55ad1312be1</hash>
        <hash alg="SHA-256">7fba117d53393d363198294ab04271ac41deca766f5bbc80973a71e3e562311c</hash>
        <hash alg="SHA-512">1c0181760e182aac89cccbcdd794099abc2d2123494565044be62c6b09b77efbdd02a6044793266939fc553acc6161eb53052c078aebe61a5834588657886259</hash>
        <hash alg="SHA-384">a7148374ddf670cdef4677278ebb230395a54f4ac4efdd8db48a565e7c06b32734397792b437d3a216f68542e7f16143</hash>
        <hash alg="SHA3-384">da21a9a1585394da83273308332003a9392b65333b4fda15e16bb5851c7162b2b95c54cb1c365ce3af14606ef6e73314</hash>
        <hash alg="SHA3-256">076c5ef421e83c803ac048bba8cce2806623a5cfa228279e3c8b2c59b5856bc7</hash>
        <hash alg="SHA3-512">d6126324a4061bd114c392cc65210cea75f9f19fe8ec0e45696cbcc25b2d459a1cf5600f592235e85ee5ebe6968c9c25aa801a136f0aded80dd348da8bd08c7c</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.calcite/calcite-core@1.32.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://calcite.apache.org</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/CALCITE</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?dev@calcite.apache.org</url></reference><reference type="vcs"><url>https://github.com/apache/calcite</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.calcite/calcite-linq4j@1.32.0?type=jar">
      <group>org.apache.calcite</group>
      <name>calcite-linq4j</name>
      <version>1.32.0</version>
      <description>Calcite APIs for LINQ (Language-Integrated Query) in Java</description>
      <hashes>
        <hash alg="MD5">59634991957855bbcbcef275a5059f64</hash>
        <hash alg="SHA-1">fdf36eb703ed957959efe0ae2f6385bbe9f0d270</hash>
        <hash alg="SHA-256">c8538247c9ea1304a4e43ba844d3d0ae367c3ff6a8294e7a4ad7de70bc35c416</hash>
        <hash alg="SHA-512">1a5353a08616f0c45fdad969b5c2e94e2bfdecb3a0e7dec671f061c0b3bea7a86a70a749eb185d36ac22906401db124aa3553cca752a742eff8b3c3adae6647e</hash>
        <hash alg="SHA-384">9de95761c6b63f6d0607213b98a7ee1309e6335f85fc9c17559479f820d8a15ee7bc5e203b4e3f5519087b6747830f00</hash>
        <hash alg="SHA3-384">388495a4c9a537279c0afc9b8fee727467176fd892afb805530d0a7b9828b6a1abd87c72cc12dee6e33c6b3fe79aab30</hash>
        <hash alg="SHA3-256">08947ffd31ac312d8673f32eca6d076f7d56ed5ce3ce26846b9c29c2c3aceab9</hash>
        <hash alg="SHA3-512">33948441c9a08bb0decc21eff4874b44492cd10060053838f958b7831c68ef22047ddd269d4adab77e0f38c1ac49de072667e724ecb0a5ffe31033e2e5ed2328</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.calcite/calcite-linq4j@1.32.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://calcite.apache.org</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/CALCITE</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?dev@calcite.apache.org</url></reference><reference type="vcs"><url>https://github.com/apache/calcite</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.locationtech.jts/jts-core@1.19.0?type=jar">
      <group>org.locationtech.jts</group>
      <name>jts-core</name>
      <version>1.19.0</version>
      <description>The JTS Topology Suite is an API for 2D linear geometry predicates and functions.</description>
      <hashes>
        <hash alg="MD5">a3b90d76c097fd275fbbf22f8e3cde6b</hash>
        <hash alg="SHA-1">3ff3baa0074445384f9e0068df81fbd0a168395a</hash>
        <hash alg="SHA-256">dbb8644cf324123d06c27aa982f570811e10b4cb1f2aef893b00de237d33efc0</hash>
        <hash alg="SHA-512">7d7d0dd08ed1b0d21dcdffa277eb2dc264b88fb950ca2dbe420729ce49c0106bb3aa27e26d943dbb8caa43b9ba61c41464dd7c5efd73b547fc85493ef3ea6443</hash>
        <hash alg="SHA-384">26070312a7c8bf366bf2981b3d62b87cfd6ac9c2a2f5f914d7f195b16a28b97a5fc46dffca77d6d74c79d0e60cae2909</hash>
        <hash alg="SHA3-384">37984145d1dbc12e3cba00c96a6c537ccf4370cc56861fcd00db1ebcf28a771689c6f36917570131af13af53f244c596</hash>
        <hash alg="SHA3-256">59bb5b975c8293e5dfb2254d5acc27eeb14ad884343c7aee0db35cfba117e964</hash>
        <hash alg="SHA3-512">e6e5e8f07ba0593c8956f6d580675136e8258d8d7d52409a05d9f19e64fc13bc0c3bce5a5dd64d034463599bfc7ccee38682f42b7990b378c1626c582f3ac247</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.locationtech.jts/jts-core@1.19.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://www.locationtech.org/projects/technology.jts/jts-modules/jts-core</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/locationtech/jts/jts-modules/jts-core</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.18.6?type=jar">
      <publisher>FasterXML</publisher>
      <group>com.fasterxml.jackson.core</group>
      <name>jackson-annotations</name>
      <version>2.18.6</version>
      <description>Core annotations used for value types, used by Jackson data binding package.</description>
      <hashes>
        <hash alg="MD5">80f1abd97c7f0c93d6a199c92f9e870a</hash>
        <hash alg="SHA-1">d0d2f9e504c6fe443eb2785370c701f911fc87c6</hash>
        <hash alg="SHA-256">face5c37bee1f0768f5f198d077fc29d163becca95de9e0f13962c84d1047662</hash>
        <hash alg="SHA-512">e7671ba959d45c3943094e91d369df97af2990bdaa5ab1361c5f55dbb4171700ff9e0900f1376ba13afdbd9e24a708f7393ce01f0fef87e250de6bfa69500634</hash>
        <hash alg="SHA-384">8a1ee55f2b797feb1eff4f351d6ab7532ff6c6c23946cf22c7ecc7b54df71a2ab03c9aade8fbac01ee6d3be5a6015d17</hash>
        <hash alg="SHA3-384">0d1ce70acd038bdc95068909f579d2ed58411384e5c4438cd717e6e7cfbbe73a95d703bc9c71ae7f3031bc87758bc601</hash>
        <hash alg="SHA3-256">7f65b1e6e4202252cdfde7e49b141c3ab27f1dd63f3b80d44610435f4092c69d</hash>
        <hash alg="SHA3-512">85fd71a6a9f264f558727f9d07879fd76d6726061830e65c774a4911770a04e0a2aec41558b42094ba819b8ae0058bbe48c5dbce3d74be8729baf6d71f1aee4e</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.18.6?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/FasterXML/jackson</url></reference><reference type="distribution"><url>https://central.sonatype.com/api/v1/publisher</url></reference><reference type="issue-tracker"><url>https://github.com/FasterXML/jackson-annotations/issues</url></reference><reference type="vcs"><url>https://github.com/FasterXML/jackson-annotations</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.calcite.avatica/avatica-core@1.22.0?type=jar">
      <group>org.apache.calcite.avatica</group>
      <name>avatica-core</name>
      <version>1.22.0</version>
      <description>JDBC driver framework</description>
      <hashes>
        <hash alg="MD5">3810fc5f9b3c618c4bf58c08254e6efc</hash>
        <hash alg="SHA-1">bc9b74c057f16201262e7c3cceb66e9e60e41cb9</hash>
        <hash alg="SHA-256">9cc97d76e7dda1478e417d1e63e877ba17efbf11a87bba3a5f2fdc495ab8da7f</hash>
        <hash alg="SHA-512">48ce7e20f3e65c9af88109e8b1bc676c9950c74bd92b28d116064776258772845e28f49f2e89aa3ab3b716b8ac00868968070921e7fe6b765cb8b85f983c5455</hash>
        <hash alg="SHA-384">68d99e45e576b63e005f41a032520cb21962e12ca2b623a6c903cca24cd885848c62d2e39d6b86febd70f2faa982dfe9</hash>
        <hash alg="SHA3-384">f7e42f440cc65bd48c59cfdf6b121c9d776655057ed89d49da2e92d3fe307aca921635c29fc6a789a3b5fe321689e020</hash>
        <hash alg="SHA3-256">fe95eefd008ab056003b74c293b6b17cbb8346d72c19809a2b3145fc7bb1ecae</hash>
        <hash alg="SHA3-512">499093f78060e4304e1dbae582b61af551180d65188535752a509a2bba8e39c200f0cca6ae3c355956110326843c83ceaf1e76d625094fb69a3898b3ec1f2955</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.calcite.avatica/avatica-core@1.22.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://calcite.apache.org/avatica</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/CALCITE</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?dev@calcite.apache.org</url></reference><reference type="vcs"><url>https://github.com/apache/calcite-avatica</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apiguardian/apiguardian-api@1.1.2?type=jar">
      <group>org.apiguardian</group>
      <name>apiguardian-api</name>
      <version>1.1.2</version>
      <description>@API Guardian</description>
      <hashes>
        <hash alg="MD5">8c7de3f82037fa4a2e8be2a2f13092af</hash>
        <hash alg="SHA-1">a231e0d844d2721b0fa1b238006d15c6ded6842a</hash>
        <hash alg="SHA-256">b509448ac506d607319f182537f0b35d71007582ec741832a1f111e5b5b70b38</hash>
        <hash alg="SHA-512">d7ccd0e7019f1a997de39d66dc0ad4efe150428fdd7f4c743c93884f1602a3e90135ad34baea96d5b6d925ad6c0c8487c8e78304f0a089a12383d4a62e2c9a61</hash>
        <hash alg="SHA-384">5ae11cfedcee7da43a506a67946ddc8a7a2622284a924ba78f74541e9a22db6868a15f5d84edb91a541e38afded734ea</hash>
        <hash alg="SHA3-384">c146116b3dfd969200b2ce52d96b92dd02d6f5a45a86e7e85edf35600ddbc2f3c6e8a1ad7e2db4dcd2c398c09fad0927</hash>
        <hash alg="SHA3-256">b4b436d7f615fc0b820204e69f83c517d1c1ccc5f6b99e459209ede4482268de</hash>
        <hash alg="SHA3-512">7b95b7ac68a6891b8901b5507acd2c24a0c1e20effa63cd513764f513eab4eb55f8de5178edbe0a400c11f3a18d3f56243569d6d663100f06dd98288504c09c5</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apiguardian/apiguardian-api@1.1.2?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/apiguardian-team/apiguardian</url></reference><reference type="vcs"><url>https://github.com/apiguardian-team/apiguardian</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.fasterxml.jackson.core/jackson-core@2.18.6?type=jar">
      <publisher>FasterXML</publisher>
      <group>com.fasterxml.jackson.core</group>
      <name>jackson-core</name>
      <version>2.18.6</version>
      <description>Core Jackson processing abstractions (aka Streaming API), implementation for JSON</description>
      <hashes>
        <hash alg="MD5">95746cd6a85d0296d6986b14787a6bee</hash>
        <hash alg="SHA-1">f7171732c04c97ff373bed60d2eba22ec4bab8e0</hash>
        <hash alg="SHA-256">e7e1bfa50f0a79db37e6aa37db111cf03aebf4a484b359d21127ab43ab2398c6</hash>
        <hash alg="SHA-512">56ad5272272418a3864335b7cc9323bee496993bb317a35ad7c7f6bc001376feaecfa357ed2b737e36ae9ea738433906c2db05b4cda471463329e6909712f377</hash>
        <hash alg="SHA-384">f7d8f2175068c0b3f79d300672059502f14be699fb6ca3979b256ff53a0a9c8fa797a288990278db49d8b566e9635b6c</hash>
        <hash alg="SHA3-384">7c899c0bad1755db144cee72ec96961e186b47ba2229a2aac893091ddb338c6e4b7dbbec61f5998a1a9becf06b973bff</hash>
        <hash alg="SHA3-256">33f6bd5f2b9f80f758851629eab6425c2a3dee7bee62bc5113a7073242b49d2a</hash>
        <hash alg="SHA3-512">a301262a6c54d5e905715a27588836df86ce2945d447dcd4bcd17e36315d62a50d1a33ae1e379c35f837ee5decb9ac29419b8abec65cebe54d8d14fbcf714e86</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.fasterxml.jackson.core/jackson-core@2.18.6?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/FasterXML/jackson-core</url></reference><reference type="distribution"><url>https://central.sonatype.com/api/v1/publisher</url></reference><reference type="issue-tracker"><url>https://github.com/FasterXML/jackson-core/issues</url></reference><reference type="vcs"><url>https://github.com/FasterXML/jackson-core</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.18.6?type=jar">
      <publisher>FasterXML</publisher>
      <group>com.fasterxml.jackson.core</group>
      <name>jackson-databind</name>
      <version>2.18.6</version>
      <description>General data-binding functionality for Jackson: works on core streaming API</description>
      <hashes>
        <hash alg="MD5">0199275814d930ae615971749d009490</hash>
        <hash alg="SHA-1">7c2dd5a1a41c315150158557896096b484562417</hash>
        <hash alg="SHA-256">45d124736ea29dc374171fc1a8a9958e0f44407c1e0aae0297d8eee267fb592e</hash>
        <hash alg="SHA-512">c67c64f941fc916b80787b71b74dfa3c9137a3765c648266ff29dbaf427484d2ee7ab47e6080a9be1dd28d361cc987840d4415b597aa4ead69b5e23b20a533b2</hash>
        <hash alg="SHA-384">27515e5d81dbd113c3d9d13b62871066fc1ef829352dfcab2718c522c83b2f30eaf318d9a8ebb215286ff30fc83c2c7a</hash>
        <hash alg="SHA3-384">7a312b73ac433b2c76166e537013aeed46fb81b0b1637c9dc275bfcabe14c92fe30b7a9c6903cebf803c5f313500091b</hash>
        <hash alg="SHA3-256">592598bffc53b3b095a0d513dffc414a25f1d73b79679527eb31c3b1a752d517</hash>
        <hash alg="SHA3-512">c7be7e7e7057d6aad7e5beaab769d2ad412baaf84dc105c6c06dbff81c591b796e14fa9bddf4a2a7ead869e319a67aad0585c718502c1ae5cd47ac8abdb3caac</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.18.6?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/FasterXML/jackson</url></reference><reference type="distribution"><url>https://central.sonatype.com/api/v1/publisher</url></reference><reference type="issue-tracker"><url>https://github.com/FasterXML/jackson-databind/issues</url></reference><reference type="vcs"><url>https://github.com/FasterXML/jackson-databind</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.jayway.jsonpath/json-path@2.7.0?type=jar">
      <group>com.jayway.jsonpath</group>
      <name>json-path</name>
      <version>2.7.0</version>
      <description>Java port of Stefan Goessner JsonPath.</description>
      <hashes>
        <hash alg="MD5">2db2100b179bd83518fef0b563433a15</hash>
        <hash alg="SHA-1">f9d7d9659f2694e61142046ff8a216c047f263e8</hash>
        <hash alg="SHA-256">de82f0e4602eea0187df36779ae8cfc1653b6d920125674af4d365d0bca59508</hash>
        <hash alg="SHA-512">1f2b97f22607a2032f9c618eeb0c9f78aa3f99e94c902326d9f7e84903d603bcad293d2f566b7cc999c1aa6c9d607ef7509314e504fe9290b2b93913631790de</hash>
        <hash alg="SHA-384">e5d79e4ad4bec36a1bf1c7fd9aaa820fb3473e9cdbe55791e5e909a835ee595c47957e4e0033195d46968ed103c95355</hash>
        <hash alg="SHA3-384">387b0d8e9a9b776a43b21e24260956b22b01f70b624ddd8c26ad383781398e416fef938d210113805a1788f3b3127841</hash>
        <hash alg="SHA3-256">ba2605ba7fa4ca243837889be020d9a3151fdbb6197420d849a705744e5a634c</hash>
        <hash alg="SHA3-512">12f7c20f8ae51508f36efa2ca141fa7dd305d5bf90dfa37f01f8505c4ab925b60e87f05eca8be57263552bde597efe068040204281a5ead472b94e6b11ad0629</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.jayway.jsonpath/json-path@2.7.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/jayway/JsonPath</url></reference><reference type="vcs"><url>scm:git:git://github.com/jayway/JsonPath.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/net.minidev/json-smart@2.4.7?type=jar">
      <publisher>Chemouni Uriel</publisher>
      <group>net.minidev</group>
      <name>json-smart</name>
      <version>2.4.7</version>
      <description>JSON (JavaScript Object Notation) is a lightweight data-interchange format. It is easy for humans to read and write. It is easy for machines to parse and generate. It is based on a subset of the JavaScript Programming Language, Standard ECMA-262 3rd Edition - December 1999. JSON is a text format that is completely language independent but uses conventions that are familiar to programmers of the C-family of languages, including C, C++, C#, Java, JavaScript, Perl, Python, and many others. These properties make JSON an ideal data-interchange language.</description>
      <hashes>
        <hash alg="MD5">f04005088df03f6efac608a7a5d53cd1</hash>
        <hash alg="SHA-1">8d7f4c1530c07c54930935f3da85f48b83b3c109</hash>
        <hash alg="SHA-256">28c17ed16ac22e6845743fd1e84321edf5d7735fc216e44ee269d106bf3d8146</hash>
        <hash alg="SHA-512">03e9e1ee9a44ea15044b588b06a956ac150a37b63c161bf9b08a60539f5c90efc7718deb24fd084f503b68092516aac3349dbb74049777ea4c6619ac26090a1d</hash>
        <hash alg="SHA-384">98fde2ff0ad963262f9a9b42aed678b4d3fdc90ccb4bc25f4ca936ba7e2186af6477f06a3554bc5d8e0efe8851e13649</hash>
        <hash alg="SHA3-384">c35c95619c5ecd50fb10524e5b586668dc3cd373135b133c7edfb8ecfaf6b529eade283d64dafc25b24617bd3c509043</hash>
        <hash alg="SHA3-256">74f712690732f92214901da8877de6edc207d0f68105c21e58ebff69d90b31f2</hash>
        <hash alg="SHA3-512">cd7364f1244b7928b88ff158560a28374f5e9c3bac96206fb852def44ebcff64ffeda63f6a90204646a9a076c5f4aa8f338ac21a8b0801fff86a735d7dfe6d84</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/net.minidev/json-smart@2.4.7?type=jar</purl>
      <externalReferences><reference type="website"><url>https://urielch.github.io/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/netplex/json-smart-v2</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/net.minidev/accessors-smart@2.4.7?type=jar">
      <publisher>Chemouni Uriel</publisher>
      <group>net.minidev</group>
      <name>accessors-smart</name>
      <version>2.4.7</version>
      <description>Java reflect give poor performance on getter setter an constructor calls, accessors-smart use ASM to speed up those calls.</description>
      <hashes>
        <hash alg="MD5">53cb6c796eb91346af5edb178c42b39b</hash>
        <hash alg="SHA-1">3970cfc505e6657ca60f3aa57c849f6043000d7a</hash>
        <hash alg="SHA-256">ef5103429f101f7e3ff62f3a182342720439eaea43d2eed3119bba770bb202a9</hash>
        <hash alg="SHA-512">6daaf2fe1b278599d6d0bbd3f157096f8bccf3d25616099c128139ce164b29461860eb2786f3d3728937a0d0505df73f1c9673b0766f946c50878e5f60305736</hash>
        <hash alg="SHA-384">bb0e03f5855bc2949f43bb98bc39e4713421612daf89f951d7affcc081e0ae0acb2fe0cb0d189e34ed65178fff5b3a2e</hash>
        <hash alg="SHA3-384">08d26f6dcce42a6f8bb5b1d1478d8f7cce0b2b423cb8b8792d9bde23019f6dea5d90bfb17f980bcf316271626c12e723</hash>
        <hash alg="SHA3-256">2052bad14a640f3a455cf2350df1d9b583cb7e99826d958df6d67d8e391995cb</hash>
        <hash alg="SHA3-512">a5945f8d187a46aa3ea3754974d98f6aace29ff89d7f3c828c8f7e3395adc68786a8f7e874cf1e140433a3e60cd3e3f907af43fc29043461f10018aee60e881a</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/net.minidev/accessors-smart@2.4.7?type=jar</purl>
      <externalReferences><reference type="website"><url>https://urielch.github.io/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/netplex/json-smart-v2</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.ow2.asm/asm@9.1?type=jar">
      <publisher>OW2</publisher>
      <group>org.ow2.asm</group>
      <name>asm</name>
      <version>9.1</version>
      <description>ASM, a very small and fast Java bytecode manipulation framework</description>
      <hashes>
        <hash alg="MD5">54b9f5d15e4877a4ea4cf9ec48e07afa</hash>
        <hash alg="SHA-1">a99500cf6eea30535eeac6be73899d048f8d12a8</hash>
        <hash alg="SHA-256">cda4de455fab48ff0bcb7c48b4639447d4de859a7afc30a094a986f0936beba2</hash>
        <hash alg="SHA-512">0a586544f3053ec8425d252b6f7e3e6772f010eb81d75020b4fd4759a561a4534dab4f805ffd18130594d1abbeb1ad7116b9d3a1e2e643d427e12bb866655954</hash>
        <hash alg="SHA-384">9f936b2ffa1f1fccfea3c53b5206a6d94fa193aa12a0cdec2f0baf98f0cb2a0b699e99291c60be44fab6b39a1f6f2e10</hash>
        <hash alg="SHA3-384">142b7dc3b521f681f41e8467cf292ba87ed6bfb88d57372bf6d9cc3e3042cc49fd735b367d2336ff43a3ccb64b5bc87e</hash>
        <hash alg="SHA3-256">be955c19490cbd305f4168b6ead4116659ef6fbdf96954d2c124ae8d3f4c4739</hash>
        <hash alg="SHA3-512">fa07cc8156842f8c18e286517fd751b3e2d51be13e2e8181f1b75a6c1f98715eb3ef583cbda01ca95ca0806ffc9817d4d9ab327dca6a16152c367a319e128fed</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
          <url>https://opensource.org/licenses/BSD-3-Clause</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.ow2.asm/asm@9.1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://asm.ow2.io/</url></reference><reference type="distribution"><url>http://repository.ow2.org/nexus/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://gitlab.ow2.org/asm/asm/issues</url></reference><reference type="mailing-list"><url>https://mail.ow2.org/wws/arc/asm/</url></reference><reference type="vcs"><url>https://gitlab.ow2.org/asm/asm/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-codec/commons-codec@1.15?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>commons-codec</group>
      <name>commons-codec</name>
      <version>1.15</version>
      <description>The Apache Commons Codec package contains simple encoder and decoders for
     various formats such as Base64 and Hexadecimal.  In addition to these
     widely used encoders and decoders, the codec package also maintains a
     collection of phonetic encoding utilities.</description>
      <hashes>
        <hash alg="MD5">303baf002ce6d382198090aedd9d79a2</hash>
        <hash alg="SHA-1">49d94806b6e3dc933dacbd8acb0fdbab8ebd1e5d</hash>
        <hash alg="SHA-256">b3e9f6d63a790109bf0d056611fbed1cf69055826defeb9894a71369d246ed63</hash>
        <hash alg="SHA-512">da30a716770795fce390e4dd340a8b728f220c6572383ffef55bd5839655d5611fcc06128b2144f6cdcb36f53072a12ec80b04afee787665e7ad0b6e888a6787</hash>
        <hash alg="SHA-384">05d0506283716472175d44c2a4766523397bf8a007c18848f9c9a61718cc8aa437f9cb4b91771037ab29a960860b62a0</hash>
        <hash alg="SHA3-384">12fad4ef78274b06f97b1243cea6f970088abde082d2de9377d915a34b44f7d7d67807c03e59c849b69f1544e2a9a1be</hash>
        <hash alg="SHA3-256">87be248f33f241121f54aad61a9a460a79eabefbf1b5b0dd22aeb95b581f727e</hash>
        <hash alg="SHA3-512">8c992c9c569ebaa0bf956a4c5b34fbf5e1ed1c212c2dd896fa216183ee0bcd341e96698af4b9cec7e8880762faa081a3d3a27f51349aa457cb8e373e4f57c788</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/commons-codec/commons-codec@1.15?type=jar</purl>
      <externalReferences><reference type="website"><url>https://commons.apache.org/proper/commons-codec/</url></reference><reference type="build-system"><url>https://builds.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/CODEC</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>https://github.com/apache/commons-codec</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-io/commons-io@2.15.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>commons-io</group>
      <name>commons-io</name>
      <version>2.15.1</version>
      <description>The Apache Commons IO library contains utility classes, stream implementations, file filters,
file comparators, endian transformation classes, and much more.</description>
      <hashes>
        <hash alg="MD5">84351f7991a0e6722f00e96a4ccc376f</hash>
        <hash alg="SHA-1">f11560da189ab563a5c8e351941415430e9304ea</hash>
        <hash alg="SHA-256">a58af12ee1b68cfd2ebb0c27caef164f084381a00ec81a48cc275fd7ea54e154</hash>
        <hash alg="SHA-512">e9adaeed2d715ac0ae44de056ba165a743a92acbeb9871b535f7e58e0b3bc4fba276495b50429be195098a559f3adb7294048479754a0ee4d397da2efda5f81c</hash>
        <hash alg="SHA-384">028c72b59373d3894da22f9eb2c731aabd00f670993973f71a354d722670c12ca659686b83bbf8db32d060ca180f50b2</hash>
        <hash alg="SHA3-384">73cd585ab3736b4be50ec0f10dfe5ebfc3390eea8d56f07f29055f1fddb2dff8084310eaa6fb9f97ea639ed1abd7bc33</hash>
        <hash alg="SHA3-256">daf39bc99f1a3dc0075714a4a342a58d69a4cd62c25bc39a581f657ca72b1044</hash>
        <hash alg="SHA3-512">b003f8971d1536ea0fc4320dbfe17d7259d49e59314739f9fc83134e511facbff048b0ef4f86a9d0893781ca09c95cebc3b181a6c89a2d41e851870b96e76839</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/commons-io/commons-io@2.15.1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://commons.apache.org/proper/commons-io/</url></reference><reference type="build-system"><url>https://github.com/apache/commons-parent/actions</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/IO</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=commons-io.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.confluent.flink/flink-annotations@1.18.1-cp6?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>io.confluent.flink</group>
      <name>flink-annotations</name>
      <version>1.18.1-cp6</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">3d35ae912027054793fb1990293df604</hash>
        <hash alg="SHA-1">e52e54c28fd99cd37adf56058556e120442363e7</hash>
        <hash alg="SHA-256">3d19bb524a086a3cb4d5b1f28d47a257347234bcbde540ba34be14d92778739a</hash>
        <hash alg="SHA-512">87a60f849a29129a9ae42acff7517190f93d0bd15f00878f7966e8f8c45b2fb73846805d5e0a83e8a44810270e44490826474b3b2e149d5bab20c8cf0359e667</hash>
        <hash alg="SHA-384">9c606454f11e6d7fbf39ee59b51cb8a0e2c7b7e086464584def43a0800a3d88f995d0d6bc85f2dd9284e388fe0d9f225</hash>
        <hash alg="SHA3-384">b1d135ac3d2067b9c9f0964515be148f6bf374cace1e405914ab89c7eb53b8c8a6be695236bb40b0b1931383437cf8d5</hash>
        <hash alg="SHA3-256">a3d147b41c616c4192e1f2f687c9f5af1f6c9d7bebc2978140f7b42394633ac4</hash>
        <hash alg="SHA3-512">7c4fe1d5da4501f1221d7539e6726b427eba6cdec9eaa0830d5de6a6128f754a03f40cbc565f9efd9101513cb0f732576cd36e85ccc7a5ab2f299887bfbd4f87</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.confluent.flink/flink-annotations@1.18.1-cp6?type=jar</purl>
      <externalReferences><reference type="website"><url>https://flink.apache.org/flink-annotations</url></reference><reference type="distribution"><url>s3://cp-flink-staging-654654529379-us-west-2/maven-staging/e264363095c14d00bed012cfd48992029a5d3f63</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink/flink-annotations</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.confluent.flink/flink-table-api-java@1.18.1-cp6?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>io.confluent.flink</group>
      <name>flink-table-api-java</name>
      <version>1.18.1-cp6</version>
      <description>This module contains the Table/SQL API for writing table programs
		within the table ecosystem using the Java programming language.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">1df38dfdd169644d8a51ed9f31f34c48</hash>
        <hash alg="SHA-1">b93bcb837a20d3e5d805900502009d34e2d9851c</hash>
        <hash alg="SHA-256">b1ddb92381ecccf083ba90a08dd94ea9d14dbea0bbbbc316e10d2a9915c63c50</hash>
        <hash alg="SHA-512">83766a4c6234e98bdbe749c3a17f223c3993149a9729bda46f52211e2b33f4c37aa4e9f52d289b8c1c7daa59a1b9a5656c2741364599e7b682e42c7e82dd6d6c</hash>
        <hash alg="SHA-384">030b1099f2564dcde56695133400258eeb9d767b891826ccd4c28711cea96e09a2d5307f85f23c28deb21b9e2ab95a2a</hash>
        <hash alg="SHA3-384">c1cf68850490afe600070ac0d57142b7a0a1ed0ff4dadb97aae4b35bf17da1494c39ef3791abc91768396a29bf30fa9b</hash>
        <hash alg="SHA3-256">f0f2a1186f471f7425dd70eb85607fea88c757c6fd8305700e5227122f2900df</hash>
        <hash alg="SHA3-512">c289f902a657b4ad2470a5599229eef4b9a8b077863ea3dabc9da05bb2f7e6ba237a23d442dabda2a5eea91a2dc713e7456d325c8bb69c2e9b9988a34e1fcde1</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.confluent.flink/flink-table-api-java@1.18.1-cp6?type=jar</purl>
      <externalReferences><reference type="website"><url>https://flink.apache.org/flink-table/flink-table-api-java</url></reference><reference type="distribution"><url>s3://cp-flink-staging-654654529379-us-west-2/maven-staging/e264363095c14d00bed012cfd48992029a5d3f63</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink/flink-table/flink-table-api-java</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.confluent.flink/flink-table-common@1.18.1-cp6?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>io.confluent.flink</group>
      <name>flink-table-common</name>
      <version>1.18.1-cp6</version>
      <description>This module contains extension points of the Table/SQL API.
		It allows for implementing user-defined functions, custom
		formats, etc. with minimal dependencies.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">f1ad1c33079375b2b62c790eb0cbf8ca</hash>
        <hash alg="SHA-1">1bd2743a2373cfee32474a126d2b523f8ceb54fe</hash>
        <hash alg="SHA-256">1ff164950a8ab2fe936bb3f954818b9077dc94df795f9633111526051f5a370b</hash>
        <hash alg="SHA-512">d7ab9076428520e29018ca24d7459cdfc1e621dafe3a40ddb1194c390b61b093050cdd9beb22086d1e260a2fddce67d8d508cefc29d2e999114880604c214570</hash>
        <hash alg="SHA-384">b4770050ea6948fcbaaed1d18871dd267aec71f495287d29f927d41fb240cdfe8aaf57b4b8e30f7dd13b18ed33903094</hash>
        <hash alg="SHA3-384">7d7fb031fec754d394184ff95463cc3dbb613da33657ff6decd99406a4028e7e42f5fa5822c00029cb7f6084bf42fbc2</hash>
        <hash alg="SHA3-256">a6d7c5ca8256a0481129e1ca79e29753326161412507797fcb3036be1bd8a98f</hash>
        <hash alg="SHA3-512">353d319f20f66477b49a2a18ea04c5d373519294aa5b4e09bb943b5d6be6117a7d49b5a9e4bc5a650153154c9711360b1adbd519973ffc4f54e31eb64bb6ad15</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.confluent.flink/flink-table-common@1.18.1-cp6?type=jar</purl>
      <externalReferences><reference type="website"><url>https://flink.apache.org/flink-table/flink-table-common</url></reference><reference type="distribution"><url>s3://cp-flink-staging-654654529379-us-west-2/maven-staging/e264363095c14d00bed012cfd48992029a5d3f63</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink/flink-table/flink-table-common</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.confluent.flink/flink-core@1.18.1-cp6?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>io.confluent.flink</group>
      <name>flink-core</name>
      <version>1.18.1-cp6</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <hashes>
        <hash alg="MD5">1954d8a9885df9e1bcfced1c06654d37</hash>
        <hash alg="SHA-1">6ff92806d523334d1d9cbe3fefecc88b738663c9</hash>
        <hash alg="SHA-256">33074c1fab0c3c353fa70a432ef7c0fb38b784340ded676f9a350b4e4fd71e69</hash>
        <hash alg="SHA-512">ed0c95f1454c1555db4c7e0a61e78b9412bb22f5aaec601990749b2c38ebccb2c8c1ad63b679c4311dc89464b7987855198c2dc63dfffd8b12a68e4d41b44035</hash>
        <hash alg="SHA-384">c2b5e7567fae9ba438f55235fc0b26423bb364538ed139f8f66bda03379ea96aefa61a7b257e1df0b0e4723e79e7e176</hash>
        <hash alg="SHA3-384">158ffee24364f78561cf7b58ef335afff1d6f8edefbb2e2fa64e2d1d5d7ba2e95a38c46823ec9cec095fd97eefeeee37</hash>
        <hash alg="SHA3-256">9fe9354d84d72c12d3a9a401810640529b85a8e74c32c03252564729b6f8aed3</hash>
        <hash alg="SHA3-512">fe8a888cee5097dd369addf67c673ef36dc5c8232b709a5b7a996a5e04d8390a34377a4a9f8044036f1a649f6959448de196239cc8fe7253381eacc767ffd782</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.confluent.flink/flink-core@1.18.1-cp6?type=jar</purl>
      <externalReferences><reference type="website"><url>https://flink.apache.org/flink-core</url></reference><reference type="distribution"><url>s3://cp-flink-staging-654654529379-us-west-2/maven-staging/e264363095c14d00bed012cfd48992029a5d3f63</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink/flink-core</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.confluent.flink/flink-metrics-core@1.18.1-cp6?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>io.confluent.flink</group>
      <name>flink-metrics-core</name>
      <version>1.18.1-cp6</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <hashes>
        <hash alg="MD5">b3bb9f4167c478c58ea44471982adb57</hash>
        <hash alg="SHA-1">439590454390d4a7efa56baa33de0779f86a7c5d</hash>
        <hash alg="SHA-256">811167ccb13556a4713e945cf75f34b93c4b1bd0a2b6d76dd4d0dc88ade7df0d</hash>
        <hash alg="SHA-512">b968e938b3cba64f2ac2ab7b8e3a4e6450b734d609733bd7d23c77be9fcdab13c84f01d1f6b9d17d7070df89e7b2fd9e4fd60bad8d58455b42487b1f8f219926</hash>
        <hash alg="SHA-384">e211df3384ec29f1d05831981305a42fe725cbc71287fbc584f2272de3ee0c0c6845c59e18ae0e8b0a96473379d398d8</hash>
        <hash alg="SHA3-384">e81ccbb6a0b0cbe87203cb6b5d98083bd67b0dd467665f3047d383479a4eef30d06bd18c33c637194c7cf2ea84e37616</hash>
        <hash alg="SHA3-256">584bc213d5c94fd9db2ef6bb447d810f6aa6ced810f5b6a9540d2d4cdd29067a</hash>
        <hash alg="SHA3-512">b4fa983be7c806c00f9398fc0aa9a2ada851597788beb138f192c61fdd48a5830ca5ac25610c18a5f7080cd02387a775ded8ba02d0bae9c6a240560235faad17</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.confluent.flink/flink-metrics-core@1.18.1-cp6?type=jar</purl>
      <externalReferences><reference type="website"><url>https://flink.apache.org/flink-metrics/flink-metrics-core</url></reference><reference type="distribution"><url>s3://cp-flink-staging-654654529379-us-west-2/maven-staging/e264363095c14d00bed012cfd48992029a5d3f63</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink/flink-metrics/flink-metrics-core</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-shaded-jackson@2.14.2-17.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-shaded-jackson</name>
      <version>2.14.2-17.0</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <hashes>
        <hash alg="MD5">492259ac7642687cc959257a5512542f</hash>
        <hash alg="SHA-1">689daca4a6fc14e361831e15abd96283166d0f62</hash>
        <hash alg="SHA-256">37e87311498ae8da80adb2aa09ab6e9739d8611e09868e7220822206c739231e</hash>
        <hash alg="SHA-512">3f4434cf93f2cd12b686aa84c4b1910d7e0191b2ddad7ba8de6d2c3805d3b49afcf5da06e1052faf01b6cb0dda554594f78e39db69d83208119c1f4f2cd5dc8f</hash>
        <hash alg="SHA-384">9e689ab8b7e7f7db269fd5b1b0fc1dc5f13fed06b283c9b8ceec5c500fc9f6a4200674eef2bb884a9e67133de32e9a77</hash>
        <hash alg="SHA3-384">a67fd2fe9cfd6e8ef51ab3c0217fcaf0a9420178a8c4025770b86d6b590db65c8bb4d96acf05b4212d2661073e4409cc</hash>
        <hash alg="SHA3-256">e47b2c93363ff5d65ae47d619f3caa605b5d996e4e765811b4b7117f1c58c90e</hash>
        <hash alg="SHA3-512">af2b026aebfa279ca42602c04a8db054a12c9f39c5640a0e7804cfa5d06124a52099aea56e9dfc25d018da9baa742b274c5914aa98814dbdd0e9c5ebfa7035b6</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-shaded-jackson@2.14.2-17.0?type=jar</purl>
      <externalReferences><reference type="website"><url>http://flink.apache.org/flink-shaded-jackson-parent/flink-shaded-jackson</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink-shaded/flink-shaded-jackson-parent/flink-shaded-jackson</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-lang3@3.19.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.commons</group>
      <name>commons-lang3</name>
      <version>3.19.0</version>
      <description>Apache Commons Lang, a package of Java utility classes for the
  classes that are in java.lang's hierarchy, or are considered to be so
  standard as to justify existence in java.lang.

  The code is tested using the latest revision of the JDK for supported
  LTS releases: 8, 11, 17 and 21 currently.
  See https://github.com/apache/commons-lang/blob/master/.github/workflows/maven.yml
  
  Please ensure your build environment is up-to-date and kindly report any build issues.</description>
      <hashes>
        <hash alg="MD5">2ac2db154e365d55d167ec1215125a3a</hash>
        <hash alg="SHA-1">d6524b169a6574cd253760c472d419b47bfd37e6</hash>
        <hash alg="SHA-256">32733ab4bc90b45b63eb72677d886961003fd4ed113e07b1028f9877cb2ac735</hash>
        <hash alg="SHA-512">24cf9bfc7c32736277d2a1e82a455d004ec7d4989e8d0dc2831c910a04b6ff8b30ca9c49ec25562cf0b7f1ffc27726e7510a54bb99e75a3be83ddf6030c37978</hash>
        <hash alg="SHA-384">90c567c8f42b58d0f3f24233260258e7e3bae1f8284ee33f9730e1cecc4fe2c98b7d6ebbba2a6598b50d444ddfa70722</hash>
        <hash alg="SHA3-384">397a7aafd4f66cdec80cf4682a72db0873b3fc6a3db3cdd7be747b24ae13804dfc290e2441a115d50b0add9ce76af2dd</hash>
        <hash alg="SHA3-256">4c0809e7ff0474603b0a1bcdf2f745cec9233ffdc6c652b077d93f2630d52f8b</hash>
        <hash alg="SHA3-512">25564027878618e00dc24ea5caf8365a9396c25597aaf4ea8a37997fd699dabdf4b6f9ce4c1c9f86abedb4afa26041ac234d238c63ffecc207ce2068a6271956</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.commons/commons-lang3@3.19.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://commons.apache.org/proper/commons-lang/</url></reference><reference type="build-system"><url>https://github.com/apache/commons-lang/actions</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/LANG</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf/commons-lang.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.commons</group>
      <name>commons-text</name>
      <version>1.10.0</version>
      <description>Apache Commons Text is a library focused on algorithms working on strings.</description>
      <hashes>
        <hash alg="MD5">4afc9bfa2d31dbf7330c98fcc954b892</hash>
        <hash alg="SHA-1">3363381aef8cef2dbc1023b3e3a9433b08b64e01</hash>
        <hash alg="SHA-256">770cd903fa7b604d1f7ef7ba17f84108667294b2b478be8ed1af3bffb4ae0018</hash>
        <hash alg="SHA-512">afd836a1094449e0a791fee67363666c47b6d24acff353a5089b837b332c0f4af89565c354682521e37062d20e6b52d70c77bb4f24cca9b9532c274fc708a831</hash>
        <hash alg="SHA-384">06c56e6e513dd77cf10d0da46cdea08c34e220e81fa024735b668c6650df4234e564fe865ff5cafea963f56b1e8ffd4a</hash>
        <hash alg="SHA3-384">f09065ed066c25debf8c78cbb0bcc738e1ea283302ec992dcfb649acb90091cff879465c65a162e94534d454e3b4e9bb</hash>
        <hash alg="SHA3-256">0b59c567164bb755f2353b78ba66744000a8c4b35e1df05255b080a21c3a3dd5</hash>
        <hash alg="SHA3-512">f0fbce02a862b70f472a27d0722c54ac111ca2eb94584b8b0b73d1926aec26047cd92542ad0b3cf980a6825077587f41b194aa93d6f6350d1b87e59e8df1be7c</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://commons.apache.org/proper/commons-text</url></reference><reference type="build-system"><url>https://github.com/apache/commons-parent/actions</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/TEXT</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=commons-text.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.esotericsoftware.kryo/kryo@2.24.0?type=jar">
      <group>com.esotericsoftware.kryo</group>
      <name>kryo</name>
      <version>2.24.0</version>
      <description>Fast, efficient Java serialization</description>
      <hashes>
        <hash alg="MD5">6cf0fa5b5d4f6b8226fd4a4bfb7532b8</hash>
        <hash alg="SHA-1">0c6b206e80cfd97e66a1364003724491c757b92f</hash>
        <hash alg="SHA-256">7e56b32c635058f9aa2820f88919ab702d029cbcd15285da9992e36cc0ae52f2</hash>
        <hash alg="SHA-512">a4c6ce768528a03c219cc6a41b22293f78e433c849c90391b64dda3f2376fd79951a89c5f4e6701bcbcb6eee9abffe2390cfb12dba3b885e4a3d411a26b78f40</hash>
        <hash alg="SHA-384">678ad1b7f4d99910b8ff44a6c8f78ccae91f823161ce23de39077397352919b7257e1e6e0dea90900be973291ea19282</hash>
        <hash alg="SHA3-384">671fc6aa9905f8131482e1d0f3fe26126562b13777893d51a66d0f84fc6f2aa3f13947e488ffba8f09c31a2cc0e9758a</hash>
        <hash alg="SHA3-256">46e89d8f12cbead0fe29ad707d5dba96e880dacce2a6b374ac4bf1ced9f36a79</hash>
        <hash alg="SHA3-512">c7cde437eef8343eccd4c5ecb8de5683529e3d4d8262e8cd1f7b7d0df9c632253b979737fd1b486314ec2728aee3a3782dee5d2032621485db4aa3b2a8262741</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.esotericsoftware.kryo/kryo@2.24.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/EsotericSoftware/kryo</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/EsotericSoftware/kryo</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.esotericsoftware.minlog/minlog@1.2?type=jar">
      <group>com.esotericsoftware.minlog</group>
      <name>minlog</name>
      <version>1.2</version>
      <description>Minimal overhead Java logging</description>
      <hashes>
        <hash alg="MD5">f7cfbdf63b67df0bbfa4c7cb260885bc</hash>
        <hash alg="SHA-1">59bfcd171d82f9981a5e242b9e840191f650e209</hash>
        <hash alg="SHA-256">a678cb1aa8f5d03d901c992c75741841d98a9bc3d55dad02e84d65315c4e60f2</hash>
        <hash alg="SHA-512">7b4082766ad740d86708783f3b08780ed72dd18062aa9ba422c4b9016b332d2334ae511f50ef7d89e4eedbdac5cebc51ab6ddaf4d1eea857a3250eb5962f0d08</hash>
        <hash alg="SHA-384">932a282a9c06864001f8212199e4be05543609adbd985c5f4517ee6eba734acd3fd8812213bc0c98af264637cbf9c78d</hash>
        <hash alg="SHA3-384">f36e9f494611c85f59febfef9ce93fc68f1f17db881400456204c1f099e623e334d2f10b41018392877c8af13de7f59a</hash>
        <hash alg="SHA3-256">37422ef85dce86abd8b14b4c9f7ad77261d728a472126c8eca38f356c98da395</hash>
        <hash alg="SHA3-512">74ba47271899706a284e942482ff41649ffd93e57a29320732e57864c47f3f0431377130ca7afb5e64cc6b68d4e5a5cdfc38027966cda4b5e512e3ce02bd8a99</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.esotericsoftware.minlog/minlog@1.2?type=jar</purl>
      <externalReferences><reference type="website"><url>http://code.google.com/p/minlog/</url></reference><reference type="vcs"><url>http://minlog.googlecode.com/svn/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-collections/commons-collections@3.2.2?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>commons-collections</group>
      <name>commons-collections</name>
      <version>3.2.2</version>
      <description>Types that extend and augment the Java Collections Framework.</description>
      <hashes>
        <hash alg="MD5">f54a8510f834a1a57166970bfc982e94</hash>
        <hash alg="SHA-1">8ad72fe39fa8c91eaaf12aadb21e0c3661fe26d5</hash>
        <hash alg="SHA-256">eeeae917917144a68a741d4c0dff66aa5c5c5fd85593ff217bced3fc8ca783b8</hash>
        <hash alg="SHA-512">51c72f9aca7726f3c387095e66be85a6df97c74b00a25434b89188c1b8eab6e2b55accf7b9bd412430d22bd09324dec076e300b3d1fa39fccad471f0f2a3da16</hash>
        <hash alg="SHA-384">dd4e99b3314bd3c1a1ee26296615d9e44dadf7a1f8a7bbba44fb95121803d331e36d4cca4260e7609af78a47ba3e4073</hash>
        <hash alg="SHA3-384">8ce03528e4a6e95c44283b56eca87e6a6d3bf1363411a55b538f4f9110cf7470581ea5c73925e877ddab08dba0603f40</hash>
        <hash alg="SHA3-256">fd3d6134b5f07077b82ccf93d148dacf7c4ce5c971209510edd0e77e3e38c19e</hash>
        <hash alg="SHA3-512">c2a523916fb7c7d55a05d5e3d9e9b33000733f4b20a71be174e4e093e3f06ea78ad831edd1505527da7388105f8647efb7d5666ba852c90b4e2d5bb74256efbc</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/commons-collections/commons-collections@3.2.2?type=jar</purl>
      <externalReferences><reference type="website"><url>http://commons.apache.org/collections/</url></reference><reference type="build-system"><url>https://continuum-ci.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/COLLECTIONS</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>http://svn.apache.org/viewvc/commons/proper/collections/trunk</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-shaded-guava@31.1-jre-17.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-shaded-guava</name>
      <version>31.1-jre-17.0</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <hashes>
        <hash alg="MD5">b8c5129f4164f8ee2086854bdb289690</hash>
        <hash alg="SHA-1">00fa393c1db1308f4fb920f010f79c4c774e2f39</hash>
        <hash alg="SHA-256">03442ae97c4ca34388568cbce0e67e9911b0137b2b3849dff7a550008d5a4336</hash>
        <hash alg="SHA-512">15bb65f24054768915fbc29a95dfa93307b0babc39a02a204ae65eff44f259357b471fef9967b864b7a78e07d266933ce8e3eda8a866fcc73643cc38bcc5653f</hash>
        <hash alg="SHA-384">c8e6f2630c0824bbd1902a25884f09c076efbbbe0265f5d3fb49370affcff81ee5dd8b7887ba4bf063915446b937117a</hash>
        <hash alg="SHA3-384">a2ffbdbcfb8be61c43891fa19275a765b71e6830b110fa9ab77d46ac35527d2be0943d895767a70591895916963048c6</hash>
        <hash alg="SHA3-256">5a73e8e370e9bb3d634495dade320f0b569f4ed307fc147cb8f3af547bb6b057</hash>
        <hash alg="SHA3-512">abd1618c0568eee546f5b32314085bef40f8de74ffa5e52f0aa7a5bed82713142af8a1bdaf79f18e2210b79f8c3592276c54b2356594d19d8f56185ec9a457d5</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-shaded-guava@31.1-jre-17.0?type=jar</purl>
      <externalReferences><reference type="website"><url>http://flink.apache.org/flink-shaded-guava</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink-shaded/flink-shaded-guava</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-shaded-asm-9@9.5-17.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-shaded-asm-9</name>
      <version>9.5-17.0</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <hashes>
        <hash alg="MD5">443601ddd70625d741be1d3382dcf012</hash>
        <hash alg="SHA-1">d09e84a77ad8258d26f6be6bbb31fe81e3f98658</hash>
        <hash alg="SHA-256">a79273d4fbea1683b5fe81bce25d7fe552a542690481132f7ded034a8f00169e</hash>
        <hash alg="SHA-512">b1414e5cd4cd63e1e8a2f4a18198834910a360dac22392e298458049d7bf05e74cea2a4206751026ad7dc2348112aa7f223d0ca6178a859cf343cf306a6bd4c8</hash>
        <hash alg="SHA-384">ff6195b15060e725158aa6c8406e441576c38318fa5ea26e27ffd09f4ed4596b5198579d69ef0192dbb6edb3fda79d40</hash>
        <hash alg="SHA3-384">2b29ecee21e6bf39e6a913cb1bb41d455ade8ec169b7574b6052972f4cf571fb5374d4dde1a24be0ec4d08246359348f</hash>
        <hash alg="SHA3-256">353458e2d9919279b41a1b74791b984fef6586f07232d2e71e42892a790052c9</hash>
        <hash alg="SHA3-512">e491cdd687aaa88d8d84e792caedc02a4ef27d2bdd78e4e9bf286876ce06518c03f0340ff984ffcd507d7982391e5a6f3c4c61e05fbf0e07bd9d5683d493393e</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-shaded-asm-9@9.5-17.0?type=jar</purl>
      <externalReferences><reference type="website"><url>http://flink.apache.org/flink-shaded-asm-9</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink-shaded/flink-shaded-asm-9</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.ibm.icu/icu4j@67.1?type=jar">
      <group>com.ibm.icu</group>
      <name>icu4j</name>
      <version>67.1</version>
      <description>International Component for Unicode for Java (ICU4J) is a mature, widely used Java library
    providing Unicode and Globalization support</description>
      <hashes>
        <hash alg="MD5">046a5f59abf6b67a464dea584d11e59d</hash>
        <hash alg="SHA-1">2e159807158095566726600534034030dddab6d0</hash>
        <hash alg="SHA-256">c4eb904caf5fba968a2f1a3b8aef14df801e9329b21697209ca30bfcf153867d</hash>
        <hash alg="SHA-512">b3036b162356a0a5dad39eee611dae27c6fbe53f9e5ec1f3529ab02d49d97093b58602f43dd855433a0bbe02f6253e46a9d1899911c8e2e73001ab2c9a79d68d</hash>
        <hash alg="SHA-384">c2b28649d0ef9bf68f258a9f432c627a553ead79670f0a7ada3d986091a0001c5ab9eca372f792734bff733370a61fb1</hash>
        <hash alg="SHA3-384">3726bfa8b77bd0cdd66564944044d82dca3ee1fcf2594ebf1a7acc6752faf4c11892a1744af27e5528dc4b991e4cd0c0</hash>
        <hash alg="SHA3-256">cb19cec2baad1dc610267b2c98325f5c742230caf2247ef6297dfe8d9be9f11d</hash>
        <hash alg="SHA3-512">f46e4ead1cc1c05c3825716485ce79c890500a5356f8e7ca578f3080c09fb2460fb1aed81d65d345c402706906ea4e96afc0ff03c50fb0ac5bbacd351a8f11ec</hash>
      </hashes>
      <licenses>
        <license>
          <name>Unicode/ICU License</name>
          <url>https://raw.githubusercontent.com/unicode-org/icu/master/icu4c/LICENSE</url>
        </license>
      </licenses>
      <purl>pkg:maven/com.ibm.icu/icu4j@67.1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://icu-project.org/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://unicode-org.atlassian.net/projects/ICU</url></reference><reference type="mailing-list"><url>http://sourceforge.net/mailarchive/forum.php?forum_name=icu-support</url></reference><reference type="vcs"><url>https://github.com/unicode-org/icu</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-shaded-force-shading@17.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-shaded-force-shading</name>
      <version>17.0</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">6890ff555c82f3bb156cf9c73bf09cf9</hash>
        <hash alg="SHA-1">345c153973a17fb8a98d368352e14893edcbd610</hash>
        <hash alg="SHA-256">dcc7dff160a40b74fa5db2805b2004153ffd0517968f3c7843a8ee43be82e710</hash>
        <hash alg="SHA-512">9de23513832248618b78e279c0e3900f5cafb7193254ef6818b4f0b6f3b70045dd9cc4fdd13caeeca8b70a44f38201ce055f07248cdf08930a20e1b7a73997ff</hash>
        <hash alg="SHA-384">063611872b4b1a1718e0472e32198bded0d74fa656e5c47a7b20038cd5ff70106e3109b60fe882880feea486e1ef83bf</hash>
        <hash alg="SHA3-384">26f9225d2c401391133dabc97340d1048504deaaae3c6b02ba20b83d4efe8c53a6d4f4e63a04e4317f9bce6b1a1ee013</hash>
        <hash alg="SHA3-256">aae3e6da763019cc2fd4919df572a3653b46aedaf60a3adb3d28bc7f94023523</hash>
        <hash alg="SHA3-512">e616e089fb70dc79503b6c235bd8d14c6e7c8e608c87bb4fcd02fe86d6ba27985bac4f144843af9fc7a7c495de7057320ccddea9f571c42bdcaa1c73966f265f</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-shaded-force-shading@17.0?type=jar</purl>
      <externalReferences><reference type="website"><url>http://flink.apache.org/flink-shaded-force-shading</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink-shaded/flink-shaded-force-shading</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar">
      <publisher>QOS.ch</publisher>
      <group>org.slf4j</group>
      <name>slf4j-api</name>
      <version>1.7.36</version>
      <description>The slf4j API</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">872da51f5de7f3923da4de871d57fd85</hash>
        <hash alg="SHA-1">6c62681a2f655b49963a5983b8b0950a6120ae14</hash>
        <hash alg="SHA-256">d3ef575e3e4979678dc01bf1dcce51021493b4d11fb7f1be8ad982877c16a1c0</hash>
        <hash alg="SHA-512">f9b033fc019a44f98b16048da7e2b59edd4a6a527ba60e358f65ab88e0afae03a9340f1b3e8a543d49fa542290f499c5594259affa1ff3e6e7bf3b428d4c610b</hash>
        <hash alg="SHA-384">2b14ad035877087157e379d3277dcdcd79e58d6bdb147c47d29e377d75ce53ad42cafbf22f5fb7827c7e946ff4876b9a</hash>
        <hash alg="SHA3-384">3bc3110dafb8d5be16a39f3b2671a466463cd99eb39610c0e4719a7bf2d928f2ea213c734887c6926a07c4cca7769e4b</hash>
        <hash alg="SHA3-256">ba2608179fcf46e2291a90b9cbb4aa30d718e481f59c350cc21c73b88d826881</hash>
        <hash alg="SHA3-512">14c4edcd19702ef607d78826839d8a6d3a39157df54b89a801d3d3cbbe1307131a77671b041c761122730fb1387888c5ec2e46bdd80e1cb07f8f144676441824</hash>
      </hashes>
      <licenses>
        <license>
          <id>MIT</id>
          <url>https://opensource.org/licenses/MIT</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.slf4j.org</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/qos-ch/slf4j/slf4j-api</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar">
      <group>com.google.code.findbugs</group>
      <name>jsr305</name>
      <version>1.3.9</version>
      <description>JSR305 Annotations for Findbugs</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">1d5a772e400b04bb67a7ef4a0e0996d8</hash>
        <hash alg="SHA-1">40719ea6961c0cb6afaeb6a921eaa1f6afd4cfdf</hash>
        <hash alg="SHA-256">905721a0eea90a81534abb7ee6ef4ea2e5e645fa1def0a5cd88402df1b46c9ed</hash>
        <hash alg="SHA-512">06da282cfd8e30d9f8cf17702b8709172b00e22b75a627a1d85f8989615b8a1a401bc25d9aee7b14aed1d9b5df73bf2ea8d66f9c8468d9577c29f0ccfa2cc70a</hash>
        <hash alg="SHA-384">56e6b41ef62eb5edfed0203802cefae9c2df86388148e420bb0c687abb2b80e14d5c2a82d5b35dce4badaf148f94eada</hash>
        <hash alg="SHA3-384">58c3bf89fa1afa75c2c5078159fd28e27b2273d437f26aaaa7391310b6f0823f3cf476a24f5631c0881f3f7e946d99be</hash>
        <hash alg="SHA3-256">c333ea5faedfa78e0614a2620438d5724eab093df4e960918391b6a44c2915b0</hash>
        <hash alg="SHA3-512">67ec31448e156cc72dd036060b460bb2667a13b1cbe500b6b7eed3235b1994b44c39f440ebd07b21ec9595b166ad61121d4f6a132b5b313c558ab21b72599425</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar</purl>
      <externalReferences><reference type="website"><url>http://findbugs.sourceforge.net/</url></reference><reference type="vcs"><url>http://findbugs.googlecode.com/svn/trunk/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.objenesis/objenesis@2.1?type=jar">
      <publisher>Joe Walnes, Henri Tremblay, Leonardo Mesquita</publisher>
      <group>org.objenesis</group>
      <name>objenesis</name>
      <version>2.1</version>
      <description>A library for instantiating Java objects</description>
      <hashes>
        <hash alg="MD5">32ccb1d20a42b5aaaceb90c9082a2efa</hash>
        <hash alg="SHA-1">87c0ea803b69252868d09308b4618f766f135a96</hash>
        <hash alg="SHA-256">c74330cc6b806c804fd37e74487b4fe5d7c2750c5e15fbc6efa13bdee1bdef80</hash>
        <hash alg="SHA-512">1dec9ee30812b8006e536a2749c5781ccdc4b446539efb6fa534f22e70562033876bf2eb22c6946d617695729bd65f0f65b984f15f05ac63db5bed215e74427c</hash>
        <hash alg="SHA-384">657b8a3b80a5475f198425396f7264301f9e0f3ad5dc336ef0c7b46874f5544861a8a2fd48cdb5f672e199a6935c19d1</hash>
        <hash alg="SHA3-384">e526937d722aad1857869b2d2a0ba5c88815609308c00b776b51614e501de5d93d54978f5bb9cf496bdcc28b1dbd5775</hash>
        <hash alg="SHA3-256">436cfbb9c208dd03c951708fa4ba6525e2a0b26a873d594a6fbe93ab49082c97</hash>
        <hash alg="SHA3-512">1e7ee9411df7cfbf0669c38e4ef029155dd718b91db1d182841c740caf8c1057ed273a77f8e32d724c48aaf96815a26ab099c776511ffc5ef351d70ebfa70344</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.objenesis/objenesis@2.1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://objenesis.org</url></reference><reference type="distribution"><url>http://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/easymock/easymock/objenesis</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-compress@1.26.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.commons</group>
      <name>commons-compress</name>
      <version>1.26.0</version>
      <description>Apache Commons Compress defines an API for working with
compression and archive formats. These include bzip2, gzip, pack200,
LZMA, XZ, Snappy, traditional Unix Compress, DEFLATE, DEFLATE64, LZ4,
Brotli, Zstandard and ar, cpio, jar, tar, zip, dump, 7z, arj.</description>
      <hashes>
        <hash alg="MD5">cbc0bb8eca12b747ca21bf998d736e60</hash>
        <hash alg="SHA-1">659feffdd12280201c8aacb8f7be94f9a883c824</hash>
        <hash alg="SHA-256">051aceb8bbcc62d0f5b2b8ac72c53767f9c59bfbd050151e65bef6f51c8ed9c9</hash>
        <hash alg="SHA-512">acbeaa2909b809cd561e7156df18340d96abacb179325622d73bdd6b82cb9b387d6fcb1a44d8195aad4e786da299289e17598a1d337b7c7d1c0bc610cc128714</hash>
        <hash alg="SHA-384">052d4d0cd1929c4299dd9d37dd36eaea6ed2be6b04d6d83a94f8608a6d1138aa81f7a34f25113ac267e7ba25ce948c9a</hash>
        <hash alg="SHA3-384">8b0bf441e8ce793fb6513bc07551cc48ab4507696c18e6037b0fcf35bc4e1eb3e44ed962e2d3765c86d4d912770aa53e</hash>
        <hash alg="SHA3-256">e441768e06092053f4703844ec0c8f2b437e06e7c190d48fec9d7682beb94c40</hash>
        <hash alg="SHA3-512">5984f9f08f83789555677f6800f25fa8e80a9eb2e4d46b5fb117b8efc24753644fa103a2f6b619827661a41677991bc827965172ef25f1313d8a59154e615e8d</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.commons/commons-compress@1.26.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://commons.apache.org/proper/commons-compress/</url></reference><reference type="build-system"><url>https://github.com/apache/commons-parent/actions</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/COMPRESS</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=commons-compress.git</url></reference></externalReferences>
    </component>
  </components>
  <dependencies>
    <dependency ref="pkg:maven/io.confluent.flink/flink-table-calcite-bridge@1.18.1-cp6?type=jar">
      <dependency ref="pkg:maven/org.apache.calcite/calcite-core@1.32.0?type=jar"/>
      <dependency ref="pkg:maven/io.confluent.flink/flink-annotations@1.18.1-cp6?type=jar"/>
      <dependency ref="pkg:maven/io.confluent.flink/flink-table-api-java@1.18.1-cp6?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-force-shading@17.0?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.calcite/calcite-core@1.32.0?type=jar">
      <dependency ref="pkg:maven/org.apache.calcite/calcite-linq4j@1.32.0?type=jar"/>
      <dependency ref="pkg:maven/org.locationtech.jts/jts-core@1.19.0?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.18.6?type=jar"/>
      <dependency ref="pkg:maven/org.apache.calcite.avatica/avatica-core@1.22.0?type=jar"/>
      <dependency ref="pkg:maven/org.apiguardian/apiguardian-api@1.1.2?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-core@2.18.6?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.18.6?type=jar"/>
      <dependency ref="pkg:maven/com.jayway.jsonpath/json-path@2.7.0?type=jar"/>
      <dependency ref="pkg:maven/commons-codec/commons-codec@1.15?type=jar"/>
      <dependency ref="pkg:maven/commons-io/commons-io@2.15.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.calcite/calcite-linq4j@1.32.0?type=jar">
      <dependency ref="pkg:maven/org.apiguardian/apiguardian-api@1.1.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.calcite.avatica/avatica-core@1.22.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apiguardian/apiguardian-api@1.1.2?type=jar"/>
    <dependency ref="pkg:maven/org.apache.calcite.avatica/avatica-core@1.22.0?type=jar">
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.18.6?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.18.6?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-core@2.18.6?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.18.6?type=jar"/>
    <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.18.6?type=jar">
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.18.6?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-core@2.18.6?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-core@2.18.6?type=jar"/>
    <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    <dependency ref="pkg:maven/org.locationtech.jts/jts-core@1.19.0?type=jar"/>
    <dependency ref="pkg:maven/com.jayway.jsonpath/json-path@2.7.0?type=jar">
      <dependency ref="pkg:maven/net.minidev/json-smart@2.4.7?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/net.minidev/json-smart@2.4.7?type=jar">
      <dependency ref="pkg:maven/net.minidev/accessors-smart@2.4.7?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/net.minidev/accessors-smart@2.4.7?type=jar">
      <dependency ref="pkg:maven/org.ow2.asm/asm@9.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.ow2.asm/asm@9.1?type=jar"/>
    <dependency ref="pkg:maven/commons-codec/commons-codec@1.15?type=jar"/>
    <dependency ref="pkg:maven/commons-io/commons-io@2.15.1?type=jar"/>
    <dependency ref="pkg:maven/io.confluent.flink/flink-annotations@1.18.1-cp6?type=jar">
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"/>
    <dependency ref="pkg:maven/io.confluent.flink/flink-table-api-java@1.18.1-cp6?type=jar">
      <dependency ref="pkg:maven/io.confluent.flink/flink-table-common@1.18.1-cp6?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/io.confluent.flink/flink-table-common@1.18.1-cp6?type=jar">
      <dependency ref="pkg:maven/io.confluent.flink/flink-core@1.18.1-cp6?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-asm-9@9.5-17.0?type=jar"/>
      <dependency ref="pkg:maven/com.ibm.icu/icu4j@67.1?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/io.confluent.flink/flink-core@1.18.1-cp6?type=jar">
      <dependency ref="pkg:maven/io.confluent.flink/flink-annotations@1.18.1-cp6?type=jar"/>
      <dependency ref="pkg:maven/io.confluent.flink/flink-metrics-core@1.18.1-cp6?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-asm-9@9.5-17.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-jackson@2.14.2-17.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.19.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar"/>
      <dependency ref="pkg:maven/com.esotericsoftware.kryo/kryo@2.24.0?type=jar"/>
      <dependency ref="pkg:maven/commons-collections/commons-collections@3.2.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-compress@1.26.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-guava@31.1-jre-17.0?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/io.confluent.flink/flink-metrics-core@1.18.1-cp6?type=jar">
      <dependency ref="pkg:maven/io.confluent.flink/flink-annotations@1.18.1-cp6?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.flink/flink-shaded-asm-9@9.5-17.0?type=jar"/>
    <dependency ref="pkg:maven/org.apache.flink/flink-shaded-jackson@2.14.2-17.0?type=jar"/>
    <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.19.0?type=jar"/>
    <dependency ref="pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar">
      <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.19.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.esotericsoftware.kryo/kryo@2.24.0?type=jar">
      <dependency ref="pkg:maven/com.esotericsoftware.minlog/minlog@1.2?type=jar"/>
      <dependency ref="pkg:maven/org.objenesis/objenesis@2.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.esotericsoftware.minlog/minlog@1.2?type=jar"/>
    <dependency ref="pkg:maven/org.objenesis/objenesis@2.1?type=jar"/>
    <dependency ref="pkg:maven/commons-collections/commons-collections@3.2.2?type=jar"/>
    <dependency ref="pkg:maven/org.apache.commons/commons-compress@1.26.0?type=jar">
      <dependency ref="pkg:maven/commons-io/commons-io@2.15.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.19.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.flink/flink-shaded-guava@31.1-jre-17.0?type=jar"/>
    <dependency ref="pkg:maven/com.ibm.icu/icu4j@67.1?type=jar"/>
    <dependency ref="pkg:maven/org.apache.flink/flink-shaded-force-shading@17.0?type=jar"/>
  </dependencies>
</bom>
