{ "bomFormat" : "CycloneDX", "specVersion" : "1.6", "serialNumber" : "urn:uuid:b1030bd7-59cf-324d-b81d-160a16def8e4", "version" : 1, "metadata" : { "timestamp" : "2026-07-21T15:13:19Z", "lifecycles" : [ { "phase" : "build" } ], "tools" : { "components" : [ { "type" : "library", "author" : "OWASP Foundation", "group" : "org.cyclonedx", "name" : "cyclonedx-maven-plugin", "version" : "2.9.1", "description" : "CycloneDX Maven plugin", "hashes" : [ { "alg" : "MD5", "content" : "9c7a565cf28cce58557d0c621c5ea4b1" }, { "alg" : "SHA-1", "content" : "be882d5a22050bfa9d19090b1420c188617d0e1c" }, { "alg" : "SHA-256", "content" : "698e0f37184a5b28c245c4065fd036dfce253b52f82fbb7113d81d36326cc249" }, { "alg" : "SHA-512", "content" : "c0f0b11026858166f872a2eb54719492e5cecaa0bc9cd6b30b3ecb4a174eed220f4a1b5829d18d6734128e778d3cb3db7ffed177c92866133129cb29081814a0" }, { "alg" : "SHA-384", "content" : "d80964707dfe5caca8c70521d5066f57589304c0a657e6fbc7c0614ea0fc7b3b3dbe7778361eee0f54ba111e9cb0ffcb" }, { "alg" : "SHA3-384", "content" : "80bc3a275d9514bc457461ff52a72add8c7ecbbc01d8912efce57139016c544ee776981851be0a58fa977ab4221f703f" }, { "alg" : "SHA3-256", "content" : "142317d6f245390f4fd2d0c100b16281b8dfc5c0c2cff86943bdcc97039cb699" }, { "alg" : "SHA3-512", "content" : "af0fb9137c90b65d1a07f72e4d51ae509956cdb8800f35c961b037cdda1fe4a14ce3b496cef71ba85f1621affcfe29cd42704ae4191ff0b090a9602087c8997b" } ] } ] }, "component" : { "type" : "library", "bom-ref" : "pkg:maven/io.confluent.flink/flink-table-calcite-bridge@2.2.0-cp2?type=jar", "publisher" : "The Apache Software Foundation", "group" : "io.confluent.flink", "name" : "flink-table-calcite-bridge", "version" : "2.2.0-cp2", "description" : "This module contains the Calcite dependencies for writing planner plugins (e.g. SQL dialects) that interact with Calcite APIs. More exactly, currently, it is intended to provide the ability to create RelNode, which involves accessing the RelOptCluster, RelBuilder, etc, provided by PlannerContext.", "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/io.confluent.flink/flink-table-calcite-bridge@2.2.0-cp2?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://flink.apache.org/flink-table/flink-table-calcite-bridge" }, { "type" : "distribution-intake", "url" : "s3://cp-flink-staging-654654529379-us-west-2/maven-staging/0d9fe610e2ad337c0730444d323b08049fdc1200" }, { "type" : "mailing-list", "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/" }, { "type" : "vcs", "url" : "https://github.com/apache/flink/flink-table/flink-table-calcite-bridge" } ] }, "properties" : [ { "name" : "maven.goal", "value" : "makeBom" }, { "name" : "maven.scopes", "value" : "compile,provided,runtime,system" } ] }, "components" : [ { "type" : "library", "bom-ref" : "pkg:maven/org.apache.calcite/calcite-core@1.36.0?type=jar", "group" : "org.apache.calcite", "name" : "calcite-core", "version" : "1.36.0", "description" : "Core Calcite APIs and engine", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "3bc210004b731862a4e68831801f958d" }, { "alg" : "SHA-1", "content" : "ce59aedc97cf6fdabc039ed7638997ea3254214c" }, { "alg" : "SHA-256", "content" : "1322396c24f0c80c03fc4ac8ed4f35e61d97d6717b74a6da866502c8e59827b7" }, { "alg" : "SHA-512", "content" : "6953a3f021c421ae3da79940d108dbfd2325746d6f747fdf03015caef6d05f3a30c07a1ca1f2818ad95c1a3c74aa20cfe0a0d2a3e05e3ced5169ac24388b30e8" }, { "alg" : "SHA-384", "content" : "35730935c1e4186f55bd484d899ead615b9cc4d0215ad41f7bcdb0be2bab0653133ddba8063ee1d8aa8fa5203f607d39" }, { "alg" : "SHA3-384", "content" : "86b7176610072dc1fa2adccdc6a1bfbf6ac88b28b22bb30a54d553f1c572712a5e6427cfcd1588dcbc479afe5763c191" }, { "alg" : "SHA3-256", "content" : "950914d4e4a482ee8480fd15933138e600138618970a9e9787b05346eddd3661" }, { "alg" : "SHA3-512", "content" : "ec7d4a7b7f397a9dda29667e8daf34a70b9055f2887d1df7c5d6e5e4270623377c52fb66f5392e59dabb4b0940f7a58255b515f1fba2086a836144479a981d4f" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/org.apache.calcite/calcite-core@1.36.0?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://calcite.apache.org" }, { "type" : "issue-tracker", "url" : "https://issues.apache.org/jira/browse/CALCITE" }, { "type" : "mailing-list", "url" : "https://lists.apache.org/list.html?dev@calcite.apache.org" }, { "type" : "vcs", "url" : "https://github.com/apache/calcite" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/org.apache.calcite/calcite-linq4j@1.36.0?type=jar", "group" : "org.apache.calcite", "name" : "calcite-linq4j", "version" : "1.36.0", "description" : "Calcite APIs for LINQ (Language-Integrated Query) in Java", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "4a91c103023ffaa601d0086f7648f261" }, { "alg" : "SHA-1", "content" : "9d4a9ab0dd314e238e7d48c6a587fe12b6eced5d" }, { "alg" : "SHA-256", "content" : "8e5a76cbfb997157a4abe9de52a6d92515a6e611f13c8b46312982d46ea6ff3f" }, { "alg" : "SHA-512", "content" : "59a37227a886e8e0f91a685a385c7305c8865bdce2955028867ab45b844f05de36a1850a26c8a35bfdcd7df5d9372ba5bcad0d050e6823aa05af12a7a1872524" }, { "alg" : "SHA-384", "content" : "45f614751c8f9c7befc04ced3820513458646601842d6b2940fa6d7b8de651f9aaf492324d004b988fb88f2f756dd0e7" }, { "alg" : "SHA3-384", "content" : "d7bf7edf77844923064028157a174babba2c02c727a761f897d6939c8d5befede63ca6eeffc1a7847511caf12199df7d" }, { "alg" : "SHA3-256", "content" : "20d6c2c0ce5dc977555b197fc4fe3a42548a22cd66cf9f2984c0a9bbb40aab2a" }, { "alg" : "SHA3-512", "content" : "e4aef7662b03a55f2c5b1a1825bb12ae058104cbc049945453ca7ab58b20b156aa41b2e4c8af03b2045cf656806f113889145892a263483253b17a22e9f77081" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/org.apache.calcite/calcite-linq4j@1.36.0?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://calcite.apache.org" }, { "type" : "issue-tracker", "url" : "https://issues.apache.org/jira/browse/CALCITE" }, { "type" : "mailing-list", "url" : "https://lists.apache.org/list.html?dev@calcite.apache.org" }, { "type" : "vcs", "url" : "https://github.com/apache/calcite" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/org.locationtech.jts/jts-core@1.19.0?type=jar", "group" : "org.locationtech.jts", "name" : "jts-core", "version" : "1.19.0", "description" : "The JTS Topology Suite is an API for 2D linear geometry predicates and functions.", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "a3b90d76c097fd275fbbf22f8e3cde6b" }, { "alg" : "SHA-1", "content" : "3ff3baa0074445384f9e0068df81fbd0a168395a" }, { "alg" : "SHA-256", "content" : "dbb8644cf324123d06c27aa982f570811e10b4cb1f2aef893b00de237d33efc0" }, { "alg" : "SHA-512", "content" : "7d7d0dd08ed1b0d21dcdffa277eb2dc264b88fb950ca2dbe420729ce49c0106bb3aa27e26d943dbb8caa43b9ba61c41464dd7c5efd73b547fc85493ef3ea6443" }, { "alg" : "SHA-384", "content" : "26070312a7c8bf366bf2981b3d62b87cfd6ac9c2a2f5f914d7f195b16a28b97a5fc46dffca77d6d74c79d0e60cae2909" }, { "alg" : "SHA3-384", "content" : "37984145d1dbc12e3cba00c96a6c537ccf4370cc56861fcd00db1ebcf28a771689c6f36917570131af13af53f244c596" }, { "alg" : "SHA3-256", "content" : "59bb5b975c8293e5dfb2254d5acc27eeb14ad884343c7aee0db35cfba117e964" }, { "alg" : "SHA3-512", "content" : "e6e5e8f07ba0593c8956f6d580675136e8258d8d7d52409a05d9f19e64fc13bc0c3bce5a5dd64d034463599bfc7ccee38682f42b7990b378c1626c582f3ac247" } ], "licenses" : [ { "license" : { "id" : "EPL-2.0" } }, { "license" : { "id" : "BSD-3-Clause" } } ], "purl" : "pkg:maven/org.locationtech.jts/jts-core@1.19.0?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://www.locationtech.org/projects/technology.jts/jts-modules/jts-core" }, { "type" : "distribution-intake", "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type" : "vcs", "url" : "https://github.com/locationtech/jts/jts-modules/jts-core" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.18.6?type=jar", "publisher" : "FasterXML", "group" : "com.fasterxml.jackson.core", "name" : "jackson-annotations", "version" : "2.18.6", "description" : "Core annotations used for value types, used by Jackson data binding package.", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "80f1abd97c7f0c93d6a199c92f9e870a" }, { "alg" : "SHA-1", "content" : "d0d2f9e504c6fe443eb2785370c701f911fc87c6" }, { "alg" : "SHA-256", "content" : "face5c37bee1f0768f5f198d077fc29d163becca95de9e0f13962c84d1047662" }, { "alg" : "SHA-512", "content" : "e7671ba959d45c3943094e91d369df97af2990bdaa5ab1361c5f55dbb4171700ff9e0900f1376ba13afdbd9e24a708f7393ce01f0fef87e250de6bfa69500634" }, { "alg" : "SHA-384", "content" : "8a1ee55f2b797feb1eff4f351d6ab7532ff6c6c23946cf22c7ecc7b54df71a2ab03c9aade8fbac01ee6d3be5a6015d17" }, { "alg" : "SHA3-384", "content" : "0d1ce70acd038bdc95068909f579d2ed58411384e5c4438cd717e6e7cfbbe73a95d703bc9c71ae7f3031bc87758bc601" }, { "alg" : "SHA3-256", "content" : "7f65b1e6e4202252cdfde7e49b141c3ab27f1dd63f3b80d44610435f4092c69d" }, { "alg" : "SHA3-512", "content" : "85fd71a6a9f264f558727f9d07879fd76d6726061830e65c774a4911770a04e0a2aec41558b42094ba819b8ae0058bbe48c5dbce3d74be8729baf6d71f1aee4e" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.18.6?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://github.com/FasterXML/jackson" }, { "type" : "distribution-intake", "url" : "https://central.sonatype.com/api/v1/publisher" }, { "type" : "issue-tracker", "url" : "https://github.com/FasterXML/jackson-annotations/issues" }, { "type" : "vcs", "url" : "https://github.com/FasterXML/jackson-annotations" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/org.apache.calcite.avatica/avatica-core@1.23.0?type=jar", "group" : "org.apache.calcite.avatica", "name" : "avatica-core", "version" : "1.23.0", "description" : "JDBC driver framework", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "649af7b6a223401ee9cfdfed6d4f569e" }, { "alg" : "SHA-1", "content" : "e434691139bff7637983a7a5b9100393d1639d01" }, { "alg" : "SHA-256", "content" : "9e138b51f28da396fec4e29574f05d60c8ea56551c2a6213fdb90f269e63ed7f" }, { "alg" : "SHA-512", "content" : "2d817070558ae3def12f414711757a75937327cda6412575f7aa63547a8b8454fc1cedf10a8b2118f3c5bddb114621a4af34be75db458a93315cc0703188f4b6" }, { "alg" : "SHA-384", "content" : "514e68dcc7a7ff71c4a043f171f22691c504e275c180f31b2fcd4f39ad0cd39d0d031f681a2d0fe13456b8f12a226be5" }, { "alg" : "SHA3-384", "content" : "41f389af94b22d2d7ffb8891c01dae21d7809a0a420e9b142668f6329520de9d4b1805cc92382a91fb86436cf1e55aa3" }, { "alg" : "SHA3-256", "content" : "fe5b1d4a80a9af45cfee51bf3d9068c7fa1592c799dae030135c59721f8da857" }, { "alg" : "SHA3-512", "content" : "ebf134ba06c6610fb9a916c752fb2d99996aa978e7b5ef40ae8b2b2c4802564eac4f9f74ff091f2ffa7e70744fb71a3f5f95100cec768cde1f2bbe418d9f35db" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/org.apache.calcite.avatica/avatica-core@1.23.0?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://calcite.apache.org/avatica" }, { "type" : "issue-tracker", "url" : "https://issues.apache.org/jira/browse/CALCITE" }, { "type" : "mailing-list", "url" : "https://lists.apache.org/list.html?dev@calcite.apache.org" }, { "type" : "vcs", "url" : "https://github.com/apache/calcite-avatica" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/org.apiguardian/apiguardian-api@1.1.2?type=jar", "group" : "org.apiguardian", "name" : "apiguardian-api", "version" : "1.1.2", "description" : "@API Guardian", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "8c7de3f82037fa4a2e8be2a2f13092af" }, { "alg" : "SHA-1", "content" : "a231e0d844d2721b0fa1b238006d15c6ded6842a" }, { "alg" : "SHA-256", "content" : "b509448ac506d607319f182537f0b35d71007582ec741832a1f111e5b5b70b38" }, { "alg" : "SHA-512", "content" : "d7ccd0e7019f1a997de39d66dc0ad4efe150428fdd7f4c743c93884f1602a3e90135ad34baea96d5b6d925ad6c0c8487c8e78304f0a089a12383d4a62e2c9a61" }, { "alg" : "SHA-384", "content" : "5ae11cfedcee7da43a506a67946ddc8a7a2622284a924ba78f74541e9a22db6868a15f5d84edb91a541e38afded734ea" }, { "alg" : "SHA3-384", "content" : "c146116b3dfd969200b2ce52d96b92dd02d6f5a45a86e7e85edf35600ddbc2f3c6e8a1ad7e2db4dcd2c398c09fad0927" }, { "alg" : "SHA3-256", "content" : "b4b436d7f615fc0b820204e69f83c517d1c1ccc5f6b99e459209ede4482268de" }, { "alg" : "SHA3-512", "content" : "7b95b7ac68a6891b8901b5507acd2c24a0c1e20effa63cd513764f513eab4eb55f8de5178edbe0a400c11f3a18d3f56243569d6d663100f06dd98288504c09c5" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/org.apiguardian/apiguardian-api@1.1.2?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://github.com/apiguardian-team/apiguardian" }, { "type" : "vcs", "url" : "https://github.com/apiguardian-team/apiguardian" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.18.6?type=jar", "publisher" : "FasterXML", "group" : "com.fasterxml.jackson.core", "name" : "jackson-core", "version" : "2.18.6", "description" : "Core Jackson processing abstractions (aka Streaming API), implementation for JSON", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "95746cd6a85d0296d6986b14787a6bee" }, { "alg" : "SHA-1", "content" : "f7171732c04c97ff373bed60d2eba22ec4bab8e0" }, { "alg" : "SHA-256", "content" : "e7e1bfa50f0a79db37e6aa37db111cf03aebf4a484b359d21127ab43ab2398c6" }, { "alg" : "SHA-512", "content" : "56ad5272272418a3864335b7cc9323bee496993bb317a35ad7c7f6bc001376feaecfa357ed2b737e36ae9ea738433906c2db05b4cda471463329e6909712f377" }, { "alg" : "SHA-384", "content" : "f7d8f2175068c0b3f79d300672059502f14be699fb6ca3979b256ff53a0a9c8fa797a288990278db49d8b566e9635b6c" }, { "alg" : "SHA3-384", "content" : "7c899c0bad1755db144cee72ec96961e186b47ba2229a2aac893091ddb338c6e4b7dbbec61f5998a1a9becf06b973bff" }, { "alg" : "SHA3-256", "content" : "33f6bd5f2b9f80f758851629eab6425c2a3dee7bee62bc5113a7073242b49d2a" }, { "alg" : "SHA3-512", "content" : "a301262a6c54d5e905715a27588836df86ce2945d447dcd4bcd17e36315d62a50d1a33ae1e379c35f837ee5decb9ac29419b8abec65cebe54d8d14fbcf714e86" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.18.6?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://github.com/FasterXML/jackson-core" }, { "type" : "distribution-intake", "url" : "https://central.sonatype.com/api/v1/publisher" }, { "type" : "issue-tracker", "url" : "https://github.com/FasterXML/jackson-core/issues" }, { "type" : "vcs", "url" : "https://github.com/FasterXML/jackson-core" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.18.6?type=jar", "publisher" : "FasterXML", "group" : "com.fasterxml.jackson.core", "name" : "jackson-databind", "version" : "2.18.6", "description" : "General data-binding functionality for Jackson: works on core streaming API", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "0199275814d930ae615971749d009490" }, { "alg" : "SHA-1", "content" : "7c2dd5a1a41c315150158557896096b484562417" }, { "alg" : "SHA-256", "content" : "45d124736ea29dc374171fc1a8a9958e0f44407c1e0aae0297d8eee267fb592e" }, { "alg" : "SHA-512", "content" : "c67c64f941fc916b80787b71b74dfa3c9137a3765c648266ff29dbaf427484d2ee7ab47e6080a9be1dd28d361cc987840d4415b597aa4ead69b5e23b20a533b2" }, { "alg" : "SHA-384", "content" : "27515e5d81dbd113c3d9d13b62871066fc1ef829352dfcab2718c522c83b2f30eaf318d9a8ebb215286ff30fc83c2c7a" }, { "alg" : "SHA3-384", "content" : "7a312b73ac433b2c76166e537013aeed46fb81b0b1637c9dc275bfcabe14c92fe30b7a9c6903cebf803c5f313500091b" }, { "alg" : "SHA3-256", "content" : "592598bffc53b3b095a0d513dffc414a25f1d73b79679527eb31c3b1a752d517" }, { "alg" : "SHA3-512", "content" : "c7be7e7e7057d6aad7e5beaab769d2ad412baaf84dc105c6c06dbff81c591b796e14fa9bddf4a2a7ead869e319a67aad0585c718502c1ae5cd47ac8abdb3caac" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.18.6?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://github.com/FasterXML/jackson" }, { "type" : "distribution-intake", "url" : "https://central.sonatype.com/api/v1/publisher" }, { "type" : "issue-tracker", "url" : "https://github.com/FasterXML/jackson-databind/issues" }, { "type" : "vcs", "url" : "https://github.com/FasterXML/jackson-databind" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/commons-codec/commons-codec@1.15?type=jar", "publisher" : "The Apache Software Foundation", "group" : "commons-codec", "name" : "commons-codec", "version" : "1.15", "description" : "The Apache Commons Codec package contains simple encoder and decoders for various formats such as Base64 and Hexadecimal. In addition to these widely used encoders and decoders, the codec package also maintains a collection of phonetic encoding utilities.", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "303baf002ce6d382198090aedd9d79a2" }, { "alg" : "SHA-1", "content" : "49d94806b6e3dc933dacbd8acb0fdbab8ebd1e5d" }, { "alg" : "SHA-256", "content" : "b3e9f6d63a790109bf0d056611fbed1cf69055826defeb9894a71369d246ed63" }, { "alg" : "SHA-512", "content" : "da30a716770795fce390e4dd340a8b728f220c6572383ffef55bd5839655d5611fcc06128b2144f6cdcb36f53072a12ec80b04afee787665e7ad0b6e888a6787" }, { "alg" : "SHA-384", "content" : "05d0506283716472175d44c2a4766523397bf8a007c18848f9c9a61718cc8aa437f9cb4b91771037ab29a960860b62a0" }, { "alg" : "SHA3-384", "content" : "12fad4ef78274b06f97b1243cea6f970088abde082d2de9377d915a34b44f7d7d67807c03e59c849b69f1544e2a9a1be" }, { "alg" : "SHA3-256", "content" : "87be248f33f241121f54aad61a9a460a79eabefbf1b5b0dd22aeb95b581f727e" }, { "alg" : "SHA3-512", "content" : "8c992c9c569ebaa0bf956a4c5b34fbf5e1ed1c212c2dd896fa216183ee0bcd341e96698af4b9cec7e8880762faa081a3d3a27f51349aa457cb8e373e4f57c788" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/commons-codec/commons-codec@1.15?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://commons.apache.org/proper/commons-codec/" }, { "type" : "build-system", "url" : "https://builds.apache.org/" }, { "type" : "distribution-intake", "url" : "https://repository.apache.org/service/local/staging/deploy/maven2" }, { "type" : "issue-tracker", "url" : "https://issues.apache.org/jira/browse/CODEC" }, { "type" : "mailing-list", "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/" }, { "type" : "vcs", "url" : "https://github.com/apache/commons-codec" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/org.apache.commons/commons-math3@3.6.1?type=jar", "publisher" : "The Apache Software Foundation", "group" : "org.apache.commons", "name" : "commons-math3", "version" : "3.6.1", "description" : "The Apache Commons Math project is a library of lightweight, self-contained mathematics and statistics components addressing the most common practical problems not immediately available in the Java programming language or commons-lang.", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "5b730d97e4e6368069de1983937c508e" }, { "alg" : "SHA-1", "content" : "e4ba98f1d4b3c80ec46392f25e094a6a2e58fcbf" }, { "alg" : "SHA-256", "content" : "1e56d7b058d28b65abd256b8458e3885b674c1d588fa43cd7d1cbb9c7ef2b308" }, { "alg" : "SHA-512", "content" : "8bc2438b3b4d9a6be4a47a58410b2d4d0e56e05787ab24badab8cbc9075d61857e8d2f0bffedad33f18f8a356541d00f80a8597b5dedb995be8480d693d03226" }, { "alg" : "SHA-384", "content" : "95d1186d9ca06a3ea2e6437ddec3a55698e2493d3e72f6f554746b74fa929892bd71a2ab501a4e7b1ce56b7cd64e7ab4" }, { "alg" : "SHA3-384", "content" : "f85bb3e46a00fc4940a3be1331301302b0eb728e2d1fe2c1842d4761e5a0bc7a420c0c705ae60250ca1c7b03d3694b9e" }, { "alg" : "SHA3-256", "content" : "919c15ae4b1aef2a58aa6ea4b700bc5562e78dbc382f3393169425ca91ad368c" }, { "alg" : "SHA3-512", "content" : "dbe54d586c898cdbd7df6c31c131ca3525db17fcea5c7f5da8cbfe617e2afc667289290c76771ec5c9567a56fb2b177b0a31d67abcc656410c90287da4d88999" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/org.apache.commons/commons-math3@3.6.1?type=jar", "externalReferences" : [ { "type" : "website", "url" : "http://commons.apache.org/proper/commons-math/" }, { "type" : "build-system", "url" : "https://continuum-ci.apache.org/" }, { "type" : "distribution-intake", "url" : "https://repository.apache.org/service/local/staging/deploy/maven2" }, { "type" : "issue-tracker", "url" : "http://issues.apache.org/jira/browse/MATH" }, { "type" : "mailing-list", "url" : "http://mail-archives.apache.org/mod_mbox/commons-user/" }, { "type" : "vcs", "url" : "https://git-wip-us.apache.org/repos/asf?p=commons-math.git" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/commons-io/commons-io@2.15.1?type=jar", "publisher" : "The Apache Software Foundation", "group" : "commons-io", "name" : "commons-io", "version" : "2.15.1", "description" : "The Apache Commons IO library contains utility classes, stream implementations, file filters, file comparators, endian transformation classes, and much more.", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "84351f7991a0e6722f00e96a4ccc376f" }, { "alg" : "SHA-1", "content" : "f11560da189ab563a5c8e351941415430e9304ea" }, { "alg" : "SHA-256", "content" : "a58af12ee1b68cfd2ebb0c27caef164f084381a00ec81a48cc275fd7ea54e154" }, { "alg" : "SHA-512", "content" : "e9adaeed2d715ac0ae44de056ba165a743a92acbeb9871b535f7e58e0b3bc4fba276495b50429be195098a559f3adb7294048479754a0ee4d397da2efda5f81c" }, { "alg" : "SHA-384", "content" : "028c72b59373d3894da22f9eb2c731aabd00f670993973f71a354d722670c12ca659686b83bbf8db32d060ca180f50b2" }, { "alg" : "SHA3-384", "content" : "73cd585ab3736b4be50ec0f10dfe5ebfc3390eea8d56f07f29055f1fddb2dff8084310eaa6fb9f97ea639ed1abd7bc33" }, { "alg" : "SHA3-256", "content" : "daf39bc99f1a3dc0075714a4a342a58d69a4cd62c25bc39a581f657ca72b1044" }, { "alg" : "SHA3-512", "content" : "b003f8971d1536ea0fc4320dbfe17d7259d49e59314739f9fc83134e511facbff048b0ef4f86a9d0893781ca09c95cebc3b181a6c89a2d41e851870b96e76839" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0", "url" : "https://www.apache.org/licenses/LICENSE-2.0" } } ], "purl" : "pkg:maven/commons-io/commons-io@2.15.1?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://commons.apache.org/proper/commons-io/" }, { "type" : "build-system", "url" : "https://github.com/apache/commons-parent/actions" }, { "type" : "distribution-intake", "url" : "https://repository.apache.org/service/local/staging/deploy/maven2" }, { "type" : "issue-tracker", "url" : "https://issues.apache.org/jira/browse/IO" }, { "type" : "mailing-list", "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/" }, { "type" : "vcs", "url" : "https://gitbox.apache.org/repos/asf?p=commons-io.git" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/com.jayway.jsonpath/json-path@2.10.0?type=jar", "group" : "com.jayway.jsonpath", "name" : "json-path", "version" : "2.10.0", "description" : "A library to query and verify JSON", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "7c016fb8e3b06896a2709adbe1c52cca" }, { "alg" : "SHA-1", "content" : "e1a0b2e6db75401181c9c1c64c6d155ca5c6d608" }, { "alg" : "SHA-256", "content" : "890daa95dd3892d34d9fabc27cd5153656e6f369358625c88f4dc7b79cbd6c5a" }, { "alg" : "SHA-512", "content" : "954320c585b2eef7612e8804442fffde348934a80928175a14671bffbde6a6f93fd5b27c1d848697417cebd243d91621088f90a4dc49dd1ac0faeb06b5cd43f5" }, { "alg" : "SHA-384", "content" : "43674f1013da21e8806368535cb2c3d6c611b54f95eff108d10a06d6b42849e0d4be819da2da0cefc98abe7c59faafc2" }, { "alg" : "SHA3-384", "content" : "7d37b741f324cb9b5de140b19155cb357d2c41a1e983913d95ffa20df4b297e20f9ebf40d651b2342c1509ccc16a9b60" }, { "alg" : "SHA3-256", "content" : "352f238d8942ac25fc990b72dfdf52829c136fce2167afdf64eca63f3c882108" }, { "alg" : "SHA3-512", "content" : "593ed41edcb92b771624112029db17c76a7fe9a0c4b3ec4eaa58cfdfa574d66efe3d6a971621d582b8d41f424998b522d4d7de8379d1edfdc56d33297e2c409b" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/com.jayway.jsonpath/json-path@2.10.0?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://github.com/jayway/JsonPath" }, { "type" : "vcs", "url" : "scm:git:git://github.com/jayway/JsonPath.git" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/net.minidev/json-smart@2.6.0?type=jar", "publisher" : "Chemouni Uriel", "group" : "net.minidev", "name" : "json-smart", "version" : "2.6.0", "description" : "JSON (JavaScript Object Notation) is a lightweight data-interchange format. It is easy for humans to read and write. It is easy for machines to parse and generate. It is based on a subset of the JavaScript Programming Language, Standard ECMA-262 3rd Edition - December 1999. JSON is a text format that is completely language independent but uses conventions that are familiar to programmers of the C-family of languages, including C, C++, C#, Java, JavaScript, Perl, Python, and many others. These properties make JSON an ideal data-interchange language.", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "fde8981f31c3b972355a5adf26a9ec65" }, { "alg" : "SHA-1", "content" : "5f858a43a325a8673da6869ab2bc787a1bcb2244" }, { "alg" : "SHA-256", "content" : "1ae4b561458afb540be8ec5c6dbb4f2e715a319a7ae64854998aaf924770d61b" }, { "alg" : "SHA-512", "content" : "fc8269826394dbca52fa9366f28226e5e37bc64c1268d7a49e2dea7fb2c62da2be8c8bcf362da5561a3cf413816019d8c4f95199a585eb8b13e8a8b634259a00" }, { "alg" : "SHA-384", "content" : "13db694eb1f73778d628452b6840bff4c044101f2dcf7c3782f4bb48798fbae8b752cb8f7536b5173e896de4c225c3a6" }, { "alg" : "SHA3-384", "content" : "86c0dc99d98a7c70015b6158f76253cd16a4b2bfb754ea6526991860e2536880b95130044cbe953865b284eebadad781" }, { "alg" : "SHA3-256", "content" : "edee009cc2977ff4c2aae9098d14e7e651168dca1735726772d6bda5b66e2e98" }, { "alg" : "SHA3-512", "content" : "23f8d5a59cd7111680f65d9fc2ed80b9876ab3094a2048526b376ae16ad855680b1c90264c23c52468efe0646a30db8a22f6b279ec67e047f3951b55a6d0d104" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/net.minidev/json-smart@2.6.0?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://urielch.github.io/" }, { "type" : "vcs", "url" : "https://github.com/netplex/json-smart-v2" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/net.minidev/accessors-smart@2.6.0?type=jar", "publisher" : "Chemouni Uriel", "group" : "net.minidev", "name" : "accessors-smart", "version" : "2.6.0", "description" : "Java reflect give poor performance on getter setter an constructor calls, accessors-smart use ASM to speed up those calls.", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "0ad72639eea293193f68898da9b0b902" }, { "alg" : "SHA-1", "content" : "2d96f1d9b6ab7f13261aa81b15703574185747a0" }, { "alg" : "SHA-256", "content" : "222c9f547bb20a99fc486403a398352d1306fb671b38abd7ecab6401df170e61" }, { "alg" : "SHA-512", "content" : "220eb28c94fdd15e7ac9b7e80d238a9871fc78db3127db9ca6207251e0e5563c62cfd5ab7625d69eb9e2563fc726e71a25562a4081f089f564dc206e0569665f" }, { "alg" : "SHA-384", "content" : "c861d37b7a3a5d3d42a699239e3437cf094a8359b2371bacce5f7a17da02f9a0eb65ca2456d0168c4870be36bddc135f" }, { "alg" : "SHA3-384", "content" : "4fa8ea0794e22ccc34ecc9b73cb9cad062cd82561227b15f1261541180d584ba745611ff31e98653e4f5d481846de361" }, { "alg" : "SHA3-256", "content" : "1b170bf2e79abd9a77bb330c51b73d695c17e5db41817efab22294f4ee65a2c1" }, { "alg" : "SHA3-512", "content" : "224c001707e5b478f6503b88ab8c07b94f82bfb02bc81094a3ffdcf05d29f1377a8e518b223f9282d0147f386f13faf319692002d59f4c6f452b282aa6b000c0" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/net.minidev/accessors-smart@2.6.0?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://urielch.github.io/" }, { "type" : "vcs", "url" : "https://github.com/netplex/json-smart-v2" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/org.ow2.asm/asm@9.7.1?type=jar", "publisher" : "OW2", "group" : "org.ow2.asm", "name" : "asm", "version" : "9.7.1", "description" : "ASM, a very small and fast Java bytecode manipulation framework", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "e2cdd32d198ad31427d298eee9d39d8d" }, { "alg" : "SHA-1", "content" : "f0ed132a49244b042cd0e15702ab9f2ce3cc8436" }, { "alg" : "SHA-256", "content" : "8cadd43ac5eb6d09de05faecca38b917a040bb9139c7edeb4cc81c740b713281" }, { "alg" : "SHA-512", "content" : "4767b01603dad5c79cc1e2b5f3722f72b1059d928f184f446ba11badeb1b381b3a3a9a801cc43d25d396df950b09d19597c73173c411b1da890de808b94f1f50" }, { "alg" : "SHA-384", "content" : "166e2be10a19ca6a6d7cadb542eb1c948562483f02557b467a50a3d19d01318e12e5c3b495c482f3f5369be1b7f20eed" }, { "alg" : "SHA3-384", "content" : "e301862376e84df61c3547dbf637252750224fb5b74feb82f20e1527a8e3152c45f620192a9111a2db5e2f0e73ebd7ca" }, { "alg" : "SHA3-256", "content" : "7edcc4ff09b3ace15091a8c550f552a324b5cee6c1527944db5823df7eba8d64" }, { "alg" : "SHA3-512", "content" : "9d220edc5528e4d788605721490f3d29483dd4bd506765e85d781048419aa89b686a70e316b82ef2a856ead56bb7be6b5d52d77b7ca6f27d5e0e347e9669d731" } ], "licenses" : [ { "license" : { "id" : "BSD-3-Clause", "url" : "https://opensource.org/licenses/BSD-3-Clause" } } ], "purl" : "pkg:maven/org.ow2.asm/asm@9.7.1?type=jar", "externalReferences" : [ { "type" : "website", "url" : "http://asm.ow2.io/" }, { "type" : "distribution-intake", "url" : "https://repository.ow2.org/nexus/service/local/staging/deploy/maven2" }, { "type" : "issue-tracker", "url" : "https://gitlab.ow2.org/asm/asm/issues" }, { "type" : "mailing-list", "url" : "https://mail.ow2.org/wws/arc/asm/" }, { "type" : "vcs", "url" : "https://gitlab.ow2.org/asm/asm/" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/com.google.guava/guava@33.4.0-jre?type=jar", "group" : "com.google.guava", "name" : "guava", "version" : "33.4.0-jre", "description" : "Guava is a suite of core and expanded libraries that include utility classes, Google's collections, I/O classes, and much more.", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "5732af16367192820c7bf177e9b29512" }, { "alg" : "SHA-1", "content" : "03fcc0a259f724c7de54a6a55ea7e26d3d5c0cac" }, { "alg" : "SHA-256", "content" : "b918c98a7e44dbe94ebd9fe3e40cddaadb5a93e6a78eb6008b42df237241e538" }, { "alg" : "SHA-512", "content" : "778bd20c3ad83dd17d742368814cf97f28f3ec5723ef952a634290dbe0b4ced8c2a8f878d710fed10223d4393c510df39583c78921c592f605a0bb7003d98f84" }, { "alg" : "SHA-384", "content" : "4beba310b95d9d0d6ecceec863b056ec84a3b4d8a6591b8ee3c85e4cbaf6d744a70021b1e5779d90bdb66aa6e2b9c69e" }, { "alg" : "SHA3-384", "content" : "8ba470051b86bda40cf096d27f11f887f4080a8fff36b7823b0dd63a8875b043f33ebb649f44f6f2f3fcc749f61357ce" }, { "alg" : "SHA3-256", "content" : "05caa13e6a20cec5bf02c6e49dfd9863f43edbd6778ae39dc8c89d7d3b4f559b" }, { "alg" : "SHA3-512", "content" : "d829570cb2b9e446cd3afa17d523501fc4c13736ff0d1e59167bd9f0a83e2eebd489dc6e728ea06b24695d53db91fce5bc265f8a127852082a194b8a006628dd" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/com.google.guava/guava@33.4.0-jre?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://github.com/google/guava" }, { "type" : "build-system", "url" : "https://github.com/google/guava/actions" }, { "type" : "distribution-intake", "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type" : "issue-tracker", "url" : "https://github.com/google/guava/issues" }, { "type" : "vcs", "url" : "https://github.com/google/guava/guava" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/com.google.guava/failureaccess@1.0.2?type=jar", "group" : "com.google.guava", "name" : "failureaccess", "version" : "1.0.2", "description" : "Contains com.google.common.util.concurrent.internal.InternalFutureFailureAccess and InternalFutures. Most users will never need to use this artifact. Its classes are conceptually a part of Guava, but they're in this separate artifact so that Android libraries can use them without pulling in all of Guava (just as they can use ListenableFuture by depending on the listenablefuture artifact).", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "3f75955b49b6758fd6d1e1bd9bf777b3" }, { "alg" : "SHA-1", "content" : "c4a06a64e650562f30b7bf9aaec1bfed43aca12b" }, { "alg" : "SHA-256", "content" : "8a8f81cf9b359e3f6dfa691a1e776985c061ef2f223c9b2c80753e1b458e8064" }, { "alg" : "SHA-512", "content" : "ff4ee76aa661708989d53d45576cff3beea9ebbd86481dbbf2ee8c81bb22f882097b430588312b711025f0e890f22c6799d722ccd422a6a7278de08660fe2f51" }, { "alg" : "SHA-384", "content" : "85a7bd379da27ad57a4e5c02099fef206083caa52244597ac858a921b48e2912cfa7ef0e7d0c7a10ab2dd8d0f7d6ada0" }, { "alg" : "SHA3-384", "content" : "652b22d09b297320e62ac254801e7d3a0fd2a8038461c5cbf7a53a27d681f62b768b964aa62c864453c4e7af217c8c4a" }, { "alg" : "SHA3-256", "content" : "a650b2f7982affc2dbb7e2807fbb0fbf58b74fd8dc111cc6dc5e95a00179b7e3" }, { "alg" : "SHA3-512", "content" : "2c5ee7629a8fb1c952f437b80fcd1cff86c54ff81de02eda1eb73c0bbfe38d3f072946f8c6396c7f1e46e16a6d44ad393dfe6fd2dd96f75ebb854263d36bb193" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/com.google.guava/failureaccess@1.0.2?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://github.com/google/guava/failureaccess" }, { "type" : "build-system", "url" : "https://travis-ci.org/google/guava" }, { "type" : "distribution-intake", "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type" : "issue-tracker", "url" : "https://github.com/google/guava/issues" }, { "type" : "vcs", "url" : "https://github.com/google/guava/failureaccess" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar", "group" : "com.google.guava", "name" : "listenablefuture", "version" : "9999.0-empty-to-avoid-conflict-with-guava", "description" : "An empty artifact that Guava depends on to signal that it is providing ListenableFuture -- but is also available in a second \"version\" that contains com.google.common.util.concurrent.ListenableFuture class, without any other Guava classes. The idea is: - If users want only ListenableFuture, they depend on listenablefuture-1.0. - If users want all of Guava, they depend on guava, which, as of Guava 27.0, depends on listenablefuture-9999.0-empty-to-avoid-conflict-with-guava. The 9999.0-... version number is enough for some build systems (notably, Gradle) to select that empty artifact over the \"real\" listenablefuture-1.0 -- avoiding a conflict with the copy of ListenableFuture in guava itself. If users are using an older version of Guava or a build system other than Gradle, they may see class conflicts. If so, they can solve them by manually excluding the listenablefuture artifact or manually forcing their build systems to use 9999.0-....", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "d094c22570d65e132c19cea5d352e381" }, { "alg" : "SHA-1", "content" : "b421526c5f297295adef1c886e5246c39d4ac629" }, { "alg" : "SHA-256", "content" : "b372a037d4230aa57fbeffdef30fd6123f9c0c2db85d0aced00c91b974f33f99" }, { "alg" : "SHA-512", "content" : "c5987a979174cbacae2e78b319f080420cc71bcdbcf7893745731eeb93c23ed13bff8d4599441f373f3a246023d33df03e882de3015ee932a74a774afdd0782f" }, { "alg" : "SHA-384", "content" : "caff9b74079f95832ca7f6029346b34b606051cc8c5a4389fac263511d277ada0c55f28b0d43011055b268c6eb7184d5" }, { "alg" : "SHA3-384", "content" : "e939f08df0545847ea0d3e4b04a114b08499ad069ba8ec9461d1779f87a56e0c37273630a0f4c14e78c348d3ac7eb97f" }, { "alg" : "SHA3-256", "content" : "1f0a8b1177773b3a8ace839df5eed63cbf56b24a38714898a6e4ed065c42559f" }, { "alg" : "SHA3-512", "content" : "6b495ecc2a18b17365cb08d124a0da47f04bcdde81927b5245edf3edd8e498c3c3fb92ce6a4127f660bac851bb1d3e4510e5c20d03be47ce99dc296d360db285" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://github.com/google/guava/listenablefuture" }, { "type" : "build-system", "url" : "https://travis-ci.org/google/guava" }, { "type" : "distribution-intake", "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type" : "issue-tracker", "url" : "https://github.com/google/guava/issues" }, { "type" : "vcs", "url" : "https://github.com/google/guava/listenablefuture" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/org.checkerframework/checker-qual@3.43.0?type=jar", "group" : "org.checkerframework", "name" : "checker-qual", "version" : "3.43.0", "description" : "checker-qual contains annotations (type qualifiers) that a programmer writes to specify Java code for type-checking by the Checker Framework.", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "4f56e65c8f302ca8b4cb384c9b4a53b6" }, { "alg" : "SHA-1", "content" : "9425eee39e56b116d2b998b7c2cebcbd11a3c98b" }, { "alg" : "SHA-256", "content" : "3fbc2e98f05854c3df16df9abaa955b91b15b3ecac33623208ed6424640ef0f6" }, { "alg" : "SHA-512", "content" : "823ea28e3c822ff48e4e985a421fa0b53ca3419e2c0635c3d4d0a9822399b6491780e26a9161d4733857c97987bff2d725ff4453b2c22ed412eef46ea27f5d84" }, { "alg" : "SHA-384", "content" : "bb0de208c965955c3cd52415db69b9794f475df08ae46da0273c54689a143f0735a52dffaed491d80c137ef14afec1ca" }, { "alg" : "SHA3-384", "content" : "90fe63d39de280812885d1f81d8099c211a2deef5d82ae521ec88aff1077c2bd44b0e9334c53ea9e386707ec68f811ce" }, { "alg" : "SHA3-256", "content" : "5e6baf5bdda40b096ee17e784fcc4ca9d5251a07b04de59542b0480712dd7ed4" }, { "alg" : "SHA3-512", "content" : "58031c81517dd8a700b482a33c78f3bb5eeddb2f878bee1568aa54ea502b56187bc73ad4ba046163c3b95cb5572921e6d2b0dd1d1f0905bd7996eaa2bba25812" } ], "licenses" : [ { "license" : { "id" : "MIT" } } ], "purl" : "pkg:maven/org.checkerframework/checker-qual@3.43.0?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://checkerframework.org/" }, { "type" : "vcs", "url" : "https://github.com/typetools/checker-framework.git" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.36.0?type=jar", "publisher" : "Google LLC", "group" : "com.google.errorprone", "name" : "error_prone_annotations", "version" : "2.36.0", "description" : "Error Prone is a static analysis tool for Java that catches common programming mistakes at compile-time.", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "0e48e5ba2cd0a8d8d09bad849b99f6a6" }, { "alg" : "SHA-1", "content" : "227d4d4957ccc3dc5761bd897e3a0ee587e750a7" }, { "alg" : "SHA-256", "content" : "77440e270b0bc9a249903c5a076c36a722c4886ca4f42675f2903a1c53ed61a5" }, { "alg" : "SHA-512", "content" : "bd6f5650902526d3db06aa1cc7bd36723658166acfabb823aca27d0b2c3814e83ae24a8217ce915c3e194c2c696a102580b4c21ef5dba61f7610bcb8d580f566" }, { "alg" : "SHA-384", "content" : "a5cb9ba6b5bf550de90def11ec4bb014410a14949f8598856e1693e213ec0e7d2b3c6cb41b34ba8cfe209a29801de529" }, { "alg" : "SHA3-384", "content" : "00492c18861d7d4fa5517ccf2bcc5c170b575ff9fe88fdc834827d9fc8747846d6345f5270c64dc130228f53ac96f1b6" }, { "alg" : "SHA3-256", "content" : "ec8420b1f4e27c3eef932a764c4cedc8b3547e114285227ceb0612e93648ac29" }, { "alg" : "SHA3-512", "content" : "344bc9be8f3417d4bc3e9e073bff4657aace3cac73e5ace038a11f1435d04d3182f344b8237cd6b311ab0748042a4c4f84259713ec2dcbe472c75cde2e787320" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.36.0?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://errorprone.info/error_prone_annotations" }, { "type" : "vcs", "url" : "https://github.com/google/error-prone/error_prone_annotations" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/com.google.j2objc/j2objc-annotations@3.0.0?type=jar", "group" : "com.google.j2objc", "name" : "j2objc-annotations", "version" : "3.0.0", "description" : "A set of annotations that provide additional information to the J2ObjC translator to modify the result of translation.", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "f59529b29202a5baf37f491ea5ec8627" }, { "alg" : "SHA-1", "content" : "7399e65dd7e9ff3404f4535b2f017093bdb134c7" }, { "alg" : "SHA-256", "content" : "88241573467ddca44ffd4d74aa04c2bbfd11bf7c17e0c342c94c9de7a70a7c64" }, { "alg" : "SHA-512", "content" : "1406b1aa53b19f8269129d96ce8b64bf36f215eacf7d8f1e0adadee31614e53bb3f7acf4ff97418c5bfc75677a6f3cd637c3d9889d1e85117b6fa12467c91e9f" }, { "alg" : "SHA-384", "content" : "24373643a4e2f8e1cf919d495e1e79b24dd9dbbbeecb06477be8764313f0b3b465fde74ea2cf5542fc8cba090132052f" }, { "alg" : "SHA3-384", "content" : "afa264c8d8d946e43438ae728f0ae7a2c12797b56f9ad885d5b3e9a7396eb8481ca6840c2a990a7c5da45968794b36d8" }, { "alg" : "SHA3-256", "content" : "4df89618b479d5fbede9363c6f914218a44007f48f29c6b6d58243558ced6152" }, { "alg" : "SHA3-512", "content" : "b25b2ad8dddeed8757ffe22a96cfa7511617d86baa0ed4a25b1850162b54e1132d40dbc2dfca0a6ff0a350b16628a0d2b523418eeb8f986e0f505833da4f7181" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/com.google.j2objc/j2objc-annotations@3.0.0?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://github.com/google/j2objc/" }, { "type" : "distribution-intake", "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type" : "vcs", "url" : "http://github.com/google/j2objc" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/io.confluent.flink/flink-annotations@2.2.0-cp2?type=jar", "publisher" : "The Apache Software Foundation", "group" : "io.confluent.flink", "name" : "flink-annotations", "version" : "2.2.0-cp2", "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "0d60f882a61c54cfa453dfc78945602e" }, { "alg" : "SHA-1", "content" : "a10819dea0e7fb29a20953f905a951a1d32a92c3" }, { "alg" : "SHA-256", "content" : "5c5027aa545213a5cadaa88507b4d8b2a1bbd6826dd2f8453868706abb0c9d7e" }, { "alg" : "SHA-512", "content" : "430a95314b4bf447b8f34b15a64b98c97c6e90f7d48768399baffbf31b15e8d19dfda1c0d8beeb534f4c9d38bf1b5efd6a6109819eb323c6b2d7490edbc1ad0e" }, { "alg" : "SHA-384", "content" : "8470cb27d620bdc89634e21311547815707176227db1ba2df6c9dc028f8895e5ec5b195e50383c04a5bd15bcb6e2ce52" }, { "alg" : "SHA3-384", "content" : "fe608b9e43496acd34e9f914414cddf228788e26558196f45178804bc69eb4e38e220d22716512da5fff022a6694d9a9" }, { "alg" : "SHA3-256", "content" : "8b3376234f3efc4834a794039115c33f967ece3c4a7620e79af98ade65a47d76" }, { "alg" : "SHA3-512", "content" : "51ea12980456ed47500cf4e4e00ba8c75e830bc261709747e3928d7a89c284764f250b0c189a291c1e97f06acd98a91640488854737e76f3fefe56c4abefa578" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/io.confluent.flink/flink-annotations@2.2.0-cp2?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://flink.apache.org/flink-annotations" }, { "type" : "distribution-intake", "url" : "s3://cp-flink-staging-654654529379-us-west-2/maven-staging/0d9fe610e2ad337c0730444d323b08049fdc1200" }, { "type" : "mailing-list", "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/" }, { "type" : "vcs", "url" : "https://github.com/apache/flink/flink-annotations" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/io.confluent.flink/flink-table-api-java@2.2.0-cp2?type=jar", "publisher" : "The Apache Software Foundation", "group" : "io.confluent.flink", "name" : "flink-table-api-java", "version" : "2.2.0-cp2", "description" : "This module contains the Table/SQL API for writing table programs within the table ecosystem using the Java programming language.", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "6e8ea3f859b5fcd2c8ee251cf94531df" }, { "alg" : "SHA-1", "content" : "ca87e9fa49dca7d9188f12460b5e9951ae27025c" }, { "alg" : "SHA-256", "content" : "57923eb676c19417c635874759503c5f7035844e8feef26df1e91820a86be6aa" }, { "alg" : "SHA-512", "content" : "2a5be0730c8fbf4f95a3b8fef5fe434a6e185c9700c3bdf3127c8f9cffa625e4a1434697dddc8aa47197082a822e008f0e0ee179c9dfcbef3660332511284712" }, { "alg" : "SHA-384", "content" : "9b065074599023dc8ef92e5d9b8f86507b0c13d99327a313bf09e7b42201307715a0468e4fcabe9a3281547385f1a2a9" }, { "alg" : "SHA3-384", "content" : "fedb97e2e2fd00f1bd6544b1a409e69a25091e062bfed25a551ffd78c0621507760e13ef0ad772b86097275808fe7c15" }, { "alg" : "SHA3-256", "content" : "e18d2b6fcc7f17ea0f9f993fbde67435c05b22bb1149ebdfc41660ce3ae4b4ec" }, { "alg" : "SHA3-512", "content" : "77138eec089c176277db260f5652d87f01eae4488250762275122c7017ff475210d78f7a2cebae669025c3fe4ece77c4f08b3639daa00b61a87aec7260b0d9c5" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/io.confluent.flink/flink-table-api-java@2.2.0-cp2?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://flink.apache.org/flink-table/flink-table-api-java" }, { "type" : "distribution-intake", "url" : "s3://cp-flink-staging-654654529379-us-west-2/maven-staging/0d9fe610e2ad337c0730444d323b08049fdc1200" }, { "type" : "mailing-list", "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/" }, { "type" : "vcs", "url" : "https://github.com/apache/flink/flink-table/flink-table-api-java" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/io.confluent.flink/flink-table-common@2.2.0-cp2?type=jar", "publisher" : "The Apache Software Foundation", "group" : "io.confluent.flink", "name" : "flink-table-common", "version" : "2.2.0-cp2", "description" : "This module contains extension points of the Table/SQL API. It allows for implementing user-defined functions, custom formats, etc. with minimal dependencies.", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "6714127cbed114afc253572f6a00bbfc" }, { "alg" : "SHA-1", "content" : "9f4ad22ddfc96ee0860379f5c27dfff02780ab76" }, { "alg" : "SHA-256", "content" : "d85d5ff3d0c2b7dec7cfaf36c1828dd409a60616e49e8baf22de90743a4180d1" }, { "alg" : "SHA-512", "content" : "a62fcd8fe0265a65e1b6e84ed7cb39d327a2a3d9a090b915943c5352aad68158e2a0dbf1e08c92cc01068c4cb9b377a0ca9c85245aed952d4b7deaf276d45986" }, { "alg" : "SHA-384", "content" : "e09faf0db1fc9ea40cd56dbb083a376ddb9720a931e0d175ea55e45e6704164908df48718ea25be9f8bb72cedb9192bc" }, { "alg" : "SHA3-384", "content" : "c90500e97bf6cc6833b3f42193618568b6c30a39f9a7f9251ad01ddb3e48024b815a38c1883da3f4cf87ec03e83fecdf" }, { "alg" : "SHA3-256", "content" : "dd43fbfdfebdc08844e76b22494a9ec84f23455d73d4a09fed542b80f60a0bf9" }, { "alg" : "SHA3-512", "content" : "7de456e9719f4c875e7e5f33f7d20cdc49cbe4a82a58dc7eeb140ab7d91a34973ec8c53d68f92f6a8b7a90b86db911c6234d18529f63ffbec6fd50855f7b3eaa" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/io.confluent.flink/flink-table-common@2.2.0-cp2?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://flink.apache.org/flink-table/flink-table-common" }, { "type" : "distribution-intake", "url" : "s3://cp-flink-staging-654654529379-us-west-2/maven-staging/0d9fe610e2ad337c0730444d323b08049fdc1200" }, { "type" : "mailing-list", "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/" }, { "type" : "vcs", "url" : "https://github.com/apache/flink/flink-table/flink-table-common" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/io.confluent.flink/flink-core@2.2.0-cp2?type=jar", "publisher" : "The Apache Software Foundation", "group" : "io.confluent.flink", "name" : "flink-core", "version" : "2.2.0-cp2", "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "b3857f468e60b0e7e4556d9349364304" }, { "alg" : "SHA-1", "content" : "a17aaed885abb27e9df613eabb2c7253ceb25c4d" }, { "alg" : "SHA-256", "content" : "df0297754a21b3eb3e604467a3618324f45e5c67f511c92a52f80bfb2b4bc753" }, { "alg" : "SHA-512", "content" : "b3260271d5d38c055d62465951cce8da79c21cc31108dc61cd3b906ba1df57fabde718ab1f90519945c7cdb2bd9631025f5ca2cf610f4eca239e4bac4564e32d" }, { "alg" : "SHA-384", "content" : "3b4cf33fcc9ee6e08d5532d61838e199402d979815d391374acd0c2870a4673f179a764304ef1c23717385197fa5fa28" }, { "alg" : "SHA3-384", "content" : "3ea64a18dcb249785322f5a0bd7340d3f3752f1b78408bbadc1b60e98f096a540c24ca3e042f4b5052c564ec6ecd5acb" }, { "alg" : "SHA3-256", "content" : "4ee895ca505f1a7b8c79afdcc9bfd0541bf3c5dd6b3320d3dd376b164ce6518c" }, { "alg" : "SHA3-512", "content" : "f0dd8c541da00467f82217d158ae2392dd959b201336c70ee3ad0dfcea2ab0fdd8edd9285296f9e9f4c7bcf6d22de1b4e5aeac9e43c13bed6d7aff1e7db17be3" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/io.confluent.flink/flink-core@2.2.0-cp2?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://flink.apache.org/flink-core" }, { "type" : "distribution-intake", "url" : "s3://cp-flink-staging-654654529379-us-west-2/maven-staging/0d9fe610e2ad337c0730444d323b08049fdc1200" }, { "type" : "mailing-list", "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/" }, { "type" : "vcs", "url" : "https://github.com/apache/flink/flink-core" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/io.confluent.flink/flink-core-api@2.2.0-cp2?type=jar", "publisher" : "The Apache Software Foundation", "group" : "io.confluent.flink", "name" : "flink-core-api", "version" : "2.2.0-cp2", "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "aea2c76643ba7a4606a3839cc35e6888" }, { "alg" : "SHA-1", "content" : "8f2900febbe4a63811628c73cf1a6d9a3e58e0de" }, { "alg" : "SHA-256", "content" : "651792884ca2ef48edc46f1a431cc16ec38d07e2a599064bbc4fb5edb84db2d6" }, { "alg" : "SHA-512", "content" : "d204780912dcd4765beeeed6b06df1d51a238a3d3ea614a345c6bf049bd68b75c169011390c518b7c6f532a66ad0750dfcf4d3c1c47ffc62e384fe83a10ff4bb" }, { "alg" : "SHA-384", "content" : "90dd1c377b855cdefdc7aa2367eb6713354c1f8f0145cf58aa877ea83ed24b1477dde1c07dc1f16b67a4293805bda7c8" }, { "alg" : "SHA3-384", "content" : "7c60472d35b03e0ef3a567ee273cc1cbc20cbc07444e1b7066be713e0470770f783355986c403430fcc84a8911dba6e7" }, { "alg" : "SHA3-256", "content" : "2f814b72b9b77d01ed765749b972a9c654e77de6e10adea7594892fb90db380f" }, { "alg" : "SHA3-512", "content" : "ffa18183603dc5c244ab14b24e5f4442257bc852293604167ad5fb2393a5a5bb6d3f893223c9af131ad6d24d6f861005f2fcf6c760957f2412aa79ff9c81ea4f" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/io.confluent.flink/flink-core-api@2.2.0-cp2?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://flink.apache.org/flink-core-api" }, { "type" : "distribution-intake", "url" : "s3://cp-flink-staging-654654529379-us-west-2/maven-staging/0d9fe610e2ad337c0730444d323b08049fdc1200" }, { "type" : "mailing-list", "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/" }, { "type" : "vcs", "url" : "https://github.com/apache/flink/flink-core-api" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/io.confluent.flink/flink-metrics-core@2.2.0-cp2?type=jar", "publisher" : "The Apache Software Foundation", "group" : "io.confluent.flink", "name" : "flink-metrics-core", "version" : "2.2.0-cp2", "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "cfd7a1aeae3977116ec28d9ec8c627e9" }, { "alg" : "SHA-1", "content" : "0d9dcf1c2f57ac1a0b490bb9effed22475cb334b" }, { "alg" : "SHA-256", "content" : "36a87a87e5cef86869fc33aa79eba80c8debf2b7c00c46a6729a39bc2ba53462" }, { "alg" : "SHA-512", "content" : "3b49b5eacd980bfed88a805f9c7d16dcaa2c61ceb97b5391cd0e0d56464a2835d80790d79373d898375ce918b77ec0f0de4623fee371215243dddaffeea4020c" }, { "alg" : "SHA-384", "content" : "7fff327dd3e1cb040909276ad042cc653f8fe348ce94fa3b5f23790ff8c568f4016428e91bb7f71c9af61e17f9e31a9b" }, { "alg" : "SHA3-384", "content" : "fd90b7cc66157c62c7a3b0e8e4cce640488653588799c5b00f41c5e1ddb20a4e26f6bf37cde1db27c3152e34873958a4" }, { "alg" : "SHA3-256", "content" : "7cd36c9db0b18857e93d19161b8422d165ce1149e472e47a77d99e3684a79451" }, { "alg" : "SHA3-512", "content" : "53c7cc42096298c6947b1bc21b3a52ec3a02dcb48fbfe2b9ee4da9eb1a3265d3ed5f661c30bcaa7ee9ff0e284ac0e870ba85891e44fc612c3a56c2b37446983b" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/io.confluent.flink/flink-metrics-core@2.2.0-cp2?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://flink.apache.org/flink-metrics/flink-metrics-core" }, { "type" : "distribution-intake", "url" : "s3://cp-flink-staging-654654529379-us-west-2/maven-staging/0d9fe610e2ad337c0730444d323b08049fdc1200" }, { "type" : "mailing-list", "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/" }, { "type" : "vcs", "url" : "https://github.com/apache/flink/flink-metrics/flink-metrics-core" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/org.apache.flink/flink-shaded-jackson@2.18.2-20.0?type=jar", "publisher" : "The Apache Software Foundation", "group" : "org.apache.flink", "name" : "flink-shaded-jackson", "version" : "2.18.2-20.0", "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "5dd27e2ce3b833428a8073fb65841543" }, { "alg" : "SHA-1", "content" : "6fbdfd65d8b31a97bee087cff2bde14936a6ef8a" }, { "alg" : "SHA-256", "content" : "0097d25dd95604e660b6df3b96255661c53e98e3d14e6a88c09b1e63e5603297" }, { "alg" : "SHA-512", "content" : "4ab372182e050e5b2ea9c7b3053fb46c788d5bcc378bc7174de4e34783af6dda2c8b15ea195ac6a1ca0ffc032a36e7b69c24bf4ab94ab1ba09d4e6ef6a6cd8d4" }, { "alg" : "SHA-384", "content" : "59f2d0daedfcb5e128cfd46da9b256e226cd9a90eddc8787410d6a71333b6b974a1f4f468af0a210a580cc3147fe4370" }, { "alg" : "SHA3-384", "content" : "aff04078014631fd7eba89d20beee5ff4df3f1c4d77f69aa22c6619ab2bc2fdfe051fa9900805fde1e8d33cb76d20982" }, { "alg" : "SHA3-256", "content" : "c87e27d3d15f5116edc24405b8e4a07b77ee4f029c1d6303f242700b9014c1e0" }, { "alg" : "SHA3-512", "content" : "8c6a1d32a32e29f7e8265fa673877477e3182c010fe955da3b79fd7cdac6f007f67bd9bfb7985560daefeb475021a8825909ca83ce175463be995cdbeab0fb48" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/org.apache.flink/flink-shaded-jackson@2.18.2-20.0?type=jar", "externalReferences" : [ { "type" : "website", "url" : "http://flink.apache.org/flink-shaded-jackson-parent/flink-shaded-jackson" }, { "type" : "distribution-intake", "url" : "https://repository.apache.org/service/local/staging/deploy/maven2" }, { "type" : "mailing-list", "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/" }, { "type" : "vcs", "url" : "https://github.com/apache/flink-shaded/flink-shaded-jackson-parent/flink-shaded-jackson" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar", "publisher" : "The Apache Software Foundation", "group" : "org.apache.commons", "name" : "commons-lang3", "version" : "3.18.0", "description" : "Apache Commons Lang, a package of Java utility classes for the classes that are in java.lang's hierarchy, or are considered to be so standard as to justify existence in java.lang. The code is tested using the latest revision of the JDK for supported LTS releases: 8, 11, 17 and 21 currently. See https://github.com/apache/commons-lang/blob/master/.github/workflows/maven.yml Please ensure your build environment is up-to-date and kindly report any build issues.", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "48b9886957920a4cdb602780ca345087" }, { "alg" : "SHA-1", "content" : "fb14946f0e39748a6571de0635acbe44e7885491" }, { "alg" : "SHA-256", "content" : "4eeeae8d20c078abb64b015ec158add383ac581571cddc45c68f0c9ae0230720" }, { "alg" : "SHA-512", "content" : "c2c9d497fc1be411050f4011b2407764b78aa098eb42925af8a197eabdbc25b507f09fb898805e9bed4815f35236a508ee5b096e36f363df4d407232d50fc832" }, { "alg" : "SHA-384", "content" : "4fb3f101106e4ce3666d5c15d276ba86f7683a0ef35f0384edfcd579ea454275edbb7400795d265ec3a38e39997e79b8" }, { "alg" : "SHA3-384", "content" : "aada7e3612cf3f6190a19fa7c3db74df1e13ec56b300be9bb4317d261d5877c84ab59ba9a09168becdbd82cd41961395" }, { "alg" : "SHA3-256", "content" : "306d286d0bd7549c203cc802fd755d354c4f7926fa023f4e83623ba1a6261250" }, { "alg" : "SHA3-512", "content" : "f6f1ecc684e309d7b9fc5c343792508fee935cd2119d962721662c5af88e4864ba6f47a863e083714f315f926c156de1970cd2fb577449bdfdc7bf98a4a451fa" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0", "url" : "https://www.apache.org/licenses/LICENSE-2.0" } } ], "purl" : "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://commons.apache.org/proper/commons-lang/" }, { "type" : "build-system", "url" : "https://github.com/apache/commons-lang/actions" }, { "type" : "distribution-intake", "url" : "https://repository.apache.org/service/local/staging/deploy/maven2" }, { "type" : "issue-tracker", "url" : "https://issues.apache.org/jira/browse/LANG" }, { "type" : "mailing-list", "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/" }, { "type" : "vcs", "url" : "https://gitbox.apache.org/repos/asf/commons-lang.git" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/org.snakeyaml/snakeyaml-engine@2.6?type=jar", "group" : "org.snakeyaml", "name" : "snakeyaml-engine", "version" : "2.6", "description" : "Core YAML 1.2 parser and emitter for Java", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "719bcfb9f917992d0a99a6f7106d8466" }, { "alg" : "SHA-1", "content" : "235a7e571b33eda1a81e0f73a3173ef95dd020e5" }, { "alg" : "SHA-256", "content" : "2652199af40c9aa2f1782400d2dfbbf4e5226208c4e05ddd4059c3d6d9cd1505" }, { "alg" : "SHA-512", "content" : "c3b5e87ce323b37bcd9e65d060157ebb26d116b5dac30c6eaa185b30aa24c0be8dfd0ad604a9a12ce7010acadee54a9cea9f065cd2f434eeaed7bccce2e14a7d" }, { "alg" : "SHA-384", "content" : "edfc3c9a95cc2fa524a322f20ec034ec16b3fad950a58bfd1ed774eaaab946304cddc5e9ea4e117a899ec568ba7fa620" }, { "alg" : "SHA3-384", "content" : "63b9e0ed448431a1d4b34a4b0b97b65c2c7be6ef46f1ce3b10191373e3339422f9c06bc846ae861a982c3c3618abd9c6" }, { "alg" : "SHA3-256", "content" : "19ce75167267903be79122e149ede2916c3e07bab0658db21ab40864e8c920cd" }, { "alg" : "SHA3-512", "content" : "7777f37097a6951dafe18fb038d087e7fe0924bfb2a10c66a76a57d95aa65341d4b674c6ff1d9d453c436ffcb50e281c2bedc854ce687fefc30c9595b7352c8a" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/org.snakeyaml/snakeyaml-engine@2.6?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://bitbucket.org/snakeyaml/snakeyaml-engine" }, { "type" : "distribution-intake", "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type" : "issue-tracker", "url" : "https://bitbucket.org/snakeyaml/snakeyaml-engine/issues" }, { "type" : "vcs", "url" : "https://bitbucket.org/snakeyaml/snakeyaml-engine/src" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar", "publisher" : "The Apache Software Foundation", "group" : "org.apache.commons", "name" : "commons-text", "version" : "1.10.0", "description" : "Apache Commons Text is a library focused on algorithms working on strings.", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "4afc9bfa2d31dbf7330c98fcc954b892" }, { "alg" : "SHA-1", "content" : "3363381aef8cef2dbc1023b3e3a9433b08b64e01" }, { "alg" : "SHA-256", "content" : "770cd903fa7b604d1f7ef7ba17f84108667294b2b478be8ed1af3bffb4ae0018" }, { "alg" : "SHA-512", "content" : "afd836a1094449e0a791fee67363666c47b6d24acff353a5089b837b332c0f4af89565c354682521e37062d20e6b52d70c77bb4f24cca9b9532c274fc708a831" }, { "alg" : "SHA-384", "content" : "06c56e6e513dd77cf10d0da46cdea08c34e220e81fa024735b668c6650df4234e564fe865ff5cafea963f56b1e8ffd4a" }, { "alg" : "SHA3-384", "content" : "f09065ed066c25debf8c78cbb0bcc738e1ea283302ec992dcfb649acb90091cff879465c65a162e94534d454e3b4e9bb" }, { "alg" : "SHA3-256", "content" : "0b59c567164bb755f2353b78ba66744000a8c4b35e1df05255b080a21c3a3dd5" }, { "alg" : "SHA3-512", "content" : "f0fbce02a862b70f472a27d0722c54ac111ca2eb94584b8b0b73d1926aec26047cd92542ad0b3cf980a6825077587f41b194aa93d6f6350d1b87e59e8df1be7c" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://commons.apache.org/proper/commons-text" }, { "type" : "build-system", "url" : "https://github.com/apache/commons-parent/actions" }, { "type" : "distribution-intake", "url" : "https://repository.apache.org/service/local/staging/deploy/maven2" }, { "type" : "issue-tracker", "url" : "https://issues.apache.org/jira/browse/TEXT" }, { "type" : "mailing-list", "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/" }, { "type" : "vcs", "url" : "https://gitbox.apache.org/repos/asf?p=commons-text.git" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/com.esotericsoftware/kryo@5.6.2?type=jar", "group" : "com.esotericsoftware", "name" : "kryo", "version" : "5.6.2", "description" : "Fast, efficient Java serialization. This is the main Kryo artifact.", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "972ea0c598accd90d33ed5c31bd004b3" }, { "alg" : "SHA-1", "content" : "c20a8ba517e93cb78001fd64da796f1ac5cd8214" }, { "alg" : "SHA-256", "content" : "4e8b1d2f4977187af8a51a957329722dc1cdc56a7c94fbb5a791e82897629cff" }, { "alg" : "SHA-512", "content" : "0095bf5998f1b45c1e2dd25f22af11b619277d544cd9f4a3a355de7f118b5a9312d261c2f70e9b0691f3bec4212dea60dae191c3f1cab939ce7802472ef9f906" }, { "alg" : "SHA-384", "content" : "b3dc68596ff6341a7cc285fa5db7237c90d46baa2425c20cc1a23686140152c6d0a245881032762e813d70cfdc007364" }, { "alg" : "SHA3-384", "content" : "80dde34c5740a4a0fa3c2886b289eb3f9e34d2c54ad2e4aa3b025c308f2c35a75e3e3ff8a5e0700f9a7732aa89c12f6a" }, { "alg" : "SHA3-256", "content" : "b1e7e4ef6c1aa0f4d4aad9cd3434ad003b4b1b0612417538f8da01c87ce81cb8" }, { "alg" : "SHA3-512", "content" : "cebfb63a44efaadae598d615cd21b8bf67216b3c7b6b5e97a7027026366c8750ce8bd69d39062a5dcc609461896d44def05e8a8e227044951b0d04927b54a966" } ], "licenses" : [ { "license" : { "id" : "BSD-3-Clause" } } ], "purl" : "pkg:maven/com.esotericsoftware/kryo@5.6.2?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://github.com/EsotericSoftware/kryo/kryo" }, { "type" : "distribution-intake", "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type" : "vcs", "url" : "https://github.com/EsotericSoftware/kryo/kryo" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/com.esotericsoftware/reflectasm@1.11.9?type=jar", "group" : "com.esotericsoftware", "name" : "reflectasm", "version" : "1.11.9", "description" : "High performance Java reflection using code generation", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "602377b51e9843ef87ed48b790945c3e" }, { "alg" : "SHA-1", "content" : "fd51ad1705d5e27d8785550172a4ab0cb9b8ad23" }, { "alg" : "SHA-256", "content" : "712b44da79a5b7f47a28cbfcb3d8ecfc872fae349c48aa4d3e38a5d69956afce" }, { "alg" : "SHA-512", "content" : "c9386a11540853c965b5821771a0e99e97a5701c27e47c39b23c32fd9dd05af8231bf680541195625839eafb3471b835613a7cc734c616e571ef2f62aef84fc0" }, { "alg" : "SHA-384", "content" : "f0461aaaa75079737a10ae9f3fcf24e74828715bd4f334140c0a9d68395a84c37c6df81d4d7392ac9e51f8ac253367ec" }, { "alg" : "SHA3-384", "content" : "9115f84613808dbf555e36ea18f9ca84ddabb76e5f030b6c02132ecc3cc0a529fe501d0548cf768b041a2af5833073fd" }, { "alg" : "SHA3-256", "content" : "e3a5cea0f269206b22975f9b4d459da5a3d2d903b075ffbedecd307ccaa2cfb5" }, { "alg" : "SHA3-512", "content" : "8d7e00302607e264e0199db0508771106a291023139307012ee0a7d5a380195494832b6e0087c8892ef70bba290b5a1398194f7ef8e378c8cec8fc385097c870" } ], "licenses" : [ { "license" : { "id" : "BSD-3-Clause" } } ], "purl" : "pkg:maven/com.esotericsoftware/reflectasm@1.11.9?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://github.com/EsotericSoftware/reflectasm" }, { "type" : "distribution-intake", "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type" : "vcs", "url" : "https://github.com/EsotericSoftware/reflectasm" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/com.esotericsoftware/minlog@1.3.1?type=jar", "group" : "com.esotericsoftware", "name" : "minlog", "version" : "1.3.1", "description" : "Minimal overhead Java logging", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "46908e11b408080d53246e4be44e66db" }, { "alg" : "SHA-1", "content" : "a406e29d3a44d5f020d7b3218aee6d0952db4f73" }, { "alg" : "SHA-256", "content" : "5d4d632cfbebfe0a7644501cc303570b691406181bee65e9916b921c767d7c72" }, { "alg" : "SHA-512", "content" : "9a817f66222f9c612ef863b63ad7c1ccd38f2591d80ab9116e675ec52dfc5bba6989b3499c0c95afa42df762584cf0524dbc5a960b3c5dfb126068e446df0eeb" }, { "alg" : "SHA-384", "content" : "d0bc3e4b93edc1519e89d7ac4dcb78fd5240c1b3e61cd5f2ba19ad0133bc0e79298da54a7f5011e64be6f12a26a487dd" }, { "alg" : "SHA3-384", "content" : "995751217162b866f1e69c10607e777a4f5b571fa6c9098bc63933df5754e13e2328b149820c88a30a103fc9d938432b" }, { "alg" : "SHA3-256", "content" : "a799557343159261e72d72f5762262981c16d0e5aa08b16cbf4b989a912bfe81" }, { "alg" : "SHA3-512", "content" : "b333a0eab8cbdce12ab2d9163ccb8b8d3c8138b35bcf4ff1c69f79844272a9666771ae5017519d3301b8d98aaff6a6bc8655e4b636d2949d285a0d386f64d1d7" } ], "licenses" : [ { "license" : { "id" : "BSD-3-Clause" } } ], "purl" : "pkg:maven/com.esotericsoftware/minlog@1.3.1?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://github.com/EsotericSoftware/minlog" }, { "type" : "distribution-intake", "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type" : "vcs", "url" : "https://github.com/EsotericSoftware/minlog" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/commons-collections/commons-collections@3.2.2?type=jar", "publisher" : "The Apache Software Foundation", "group" : "commons-collections", "name" : "commons-collections", "version" : "3.2.2", "description" : "Types that extend and augment the Java Collections Framework.", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "f54a8510f834a1a57166970bfc982e94" }, { "alg" : "SHA-1", "content" : "8ad72fe39fa8c91eaaf12aadb21e0c3661fe26d5" }, { "alg" : "SHA-256", "content" : "eeeae917917144a68a741d4c0dff66aa5c5c5fd85593ff217bced3fc8ca783b8" }, { "alg" : "SHA-512", "content" : "51c72f9aca7726f3c387095e66be85a6df97c74b00a25434b89188c1b8eab6e2b55accf7b9bd412430d22bd09324dec076e300b3d1fa39fccad471f0f2a3da16" }, { "alg" : "SHA-384", "content" : "dd4e99b3314bd3c1a1ee26296615d9e44dadf7a1f8a7bbba44fb95121803d331e36d4cca4260e7609af78a47ba3e4073" }, { "alg" : "SHA3-384", "content" : "8ce03528e4a6e95c44283b56eca87e6a6d3bf1363411a55b538f4f9110cf7470581ea5c73925e877ddab08dba0603f40" }, { "alg" : "SHA3-256", "content" : "fd3d6134b5f07077b82ccf93d148dacf7c4ce5c971209510edd0e77e3e38c19e" }, { "alg" : "SHA3-512", "content" : "c2a523916fb7c7d55a05d5e3d9e9b33000733f4b20a71be174e4e093e3f06ea78ad831edd1505527da7388105f8647efb7d5666ba852c90b4e2d5bb74256efbc" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/commons-collections/commons-collections@3.2.2?type=jar", "externalReferences" : [ { "type" : "website", "url" : "http://commons.apache.org/collections/" }, { "type" : "build-system", "url" : "https://continuum-ci.apache.org/" }, { "type" : "distribution-intake", "url" : "https://repository.apache.org/service/local/staging/deploy/maven2" }, { "type" : "issue-tracker", "url" : "http://issues.apache.org/jira/browse/COLLECTIONS" }, { "type" : "mailing-list", "url" : "http://mail-archives.apache.org/mod_mbox/commons-user/" }, { "type" : "vcs", "url" : "http://svn.apache.org/viewvc/commons/proper/collections/trunk" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/org.apache.flink/flink-shaded-guava@33.4.0-jre-20.0?type=jar", "publisher" : "The Apache Software Foundation", "group" : "org.apache.flink", "name" : "flink-shaded-guava", "version" : "33.4.0-jre-20.0", "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "b96c87d90072d083a2909c4c03cfab36" }, { "alg" : "SHA-1", "content" : "470ecb733c2f6dbd89585a255f348957cf46421b" }, { "alg" : "SHA-256", "content" : "eb7161b07cd21a0a0cf40f26914fe0601c06f4bbb65e9560d78b2463d97b0c34" }, { "alg" : "SHA-512", "content" : "78359308db382fa96af50dd5d50322eaeeef96e88807c77d0d62d5df892bfc026e050ecc4cc8b9c30c270551f797d6d6f31e25ec5076767282bf949980378530" }, { "alg" : "SHA-384", "content" : "982cd6bc823bb9be9e03513bee13027ee5615787bbdbce4a26642917fe64f73081d5aabe3ffbc6941a9f367701bab993" }, { "alg" : "SHA3-384", "content" : "e2b81e5d09916f4024423b81ed570ce83146269b6936b2a6fea8bc5f014c81deec70cecd8a978845cf2a4781aebbcc0e" }, { "alg" : "SHA3-256", "content" : "a9c31cf8335b25ad7a76c1a1bb340f4809624fdce3a00ab77857658218ad7707" }, { "alg" : "SHA3-512", "content" : "9d1b646067ae8172b72be8be0bdcadd1487a1b51fae089dc5cdd2c2759dc9ec314c5fae34a2a918b1edba30b1b196f22f2d39d3e6b40fe12b2824e541b2f9545" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/org.apache.flink/flink-shaded-guava@33.4.0-jre-20.0?type=jar", "externalReferences" : [ { "type" : "website", "url" : "http://flink.apache.org/flink-shaded-guava" }, { "type" : "distribution-intake", "url" : "https://repository.apache.org/service/local/staging/deploy/maven2" }, { "type" : "mailing-list", "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/" }, { "type" : "vcs", "url" : "https://github.com/apache/flink-shaded/flink-shaded-guava" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/org.apache.flink/flink-shaded-asm-9@9.6-20.0?type=jar", "publisher" : "The Apache Software Foundation", "group" : "org.apache.flink", "name" : "flink-shaded-asm-9", "version" : "9.6-20.0", "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "a4a5c6b334d66e9da09de1898229fa87" }, { "alg" : "SHA-1", "content" : "a525b5d84cd529973633605dee9452512d5d3299" }, { "alg" : "SHA-256", "content" : "d2cd34487ee0e67e2a4ccd4d30b73f8ffc09e33b43dcad10a8797815c2ebcca0" }, { "alg" : "SHA-512", "content" : "1d99a84254fcc5631bc90575d2da3dc6b3471c6d3be3c4bf4d95e053f04e230425fd4a4ef4a2c9c9f23633f7c1a8893e63e7b3960cb32ead5820997e02e13ebf" }, { "alg" : "SHA-384", "content" : "15e383b500f480560b0a7e543be678014868937bab6624125360e63242a6fe8a13dd51e1d5a7ece5ab33a729714cc30f" }, { "alg" : "SHA3-384", "content" : "bf558740e47de9f6a88876428db7306e272901ec420950ca494451bae2f5c99a38247a7c856df996a60d016f7aa1ad9d" }, { "alg" : "SHA3-256", "content" : "804c5c1de76a4d49b5fac3383196729db86367405a287e02127c21e5d185ce7a" }, { "alg" : "SHA3-512", "content" : "a4aae40c0aa2b6b097fb41feba6a3b248cbdf7d03cf25cc47454395fdc39b28b76c774fcb7b55f51a5b8de875496168f7f1d8a1ad961166a8523a3771f2418d2" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/org.apache.flink/flink-shaded-asm-9@9.6-20.0?type=jar", "externalReferences" : [ { "type" : "website", "url" : "http://flink.apache.org/flink-shaded-asm-9" }, { "type" : "distribution-intake", "url" : "https://repository.apache.org/service/local/staging/deploy/maven2" }, { "type" : "mailing-list", "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/" }, { "type" : "vcs", "url" : "https://github.com/apache/flink-shaded/flink-shaded-asm-9" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/com.ibm.icu/icu4j@67.1?type=jar", "group" : "com.ibm.icu", "name" : "icu4j", "version" : "67.1", "description" : "International Component for Unicode for Java (ICU4J) is a mature, widely used Java library providing Unicode and Globalization support", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "046a5f59abf6b67a464dea584d11e59d" }, { "alg" : "SHA-1", "content" : "2e159807158095566726600534034030dddab6d0" }, { "alg" : "SHA-256", "content" : "c4eb904caf5fba968a2f1a3b8aef14df801e9329b21697209ca30bfcf153867d" }, { "alg" : "SHA-512", "content" : "b3036b162356a0a5dad39eee611dae27c6fbe53f9e5ec1f3529ab02d49d97093b58602f43dd855433a0bbe02f6253e46a9d1899911c8e2e73001ab2c9a79d68d" }, { "alg" : "SHA-384", "content" : "c2b28649d0ef9bf68f258a9f432c627a553ead79670f0a7ada3d986091a0001c5ab9eca372f792734bff733370a61fb1" }, { "alg" : "SHA3-384", "content" : "3726bfa8b77bd0cdd66564944044d82dca3ee1fcf2594ebf1a7acc6752faf4c11892a1744af27e5528dc4b991e4cd0c0" }, { "alg" : "SHA3-256", "content" : "cb19cec2baad1dc610267b2c98325f5c742230caf2247ef6297dfe8d9be9f11d" }, { "alg" : "SHA3-512", "content" : "f46e4ead1cc1c05c3825716485ce79c890500a5356f8e7ca578f3080c09fb2460fb1aed81d65d345c402706906ea4e96afc0ff03c50fb0ac5bbacd351a8f11ec" } ], "licenses" : [ { "license" : { "name" : "Unicode/ICU License", "url" : "https://raw.githubusercontent.com/unicode-org/icu/master/icu4c/LICENSE" } } ], "purl" : "pkg:maven/com.ibm.icu/icu4j@67.1?type=jar", "externalReferences" : [ { "type" : "website", "url" : "http://icu-project.org/" }, { "type" : "distribution-intake", "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2" }, { "type" : "issue-tracker", "url" : "https://unicode-org.atlassian.net/projects/ICU" }, { "type" : "mailing-list", "url" : "http://sourceforge.net/mailarchive/forum.php?forum_name=icu-support" }, { "type" : "vcs", "url" : "https://github.com/unicode-org/icu" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/org.apache.flink/flink-shaded-force-shading@20.0?type=jar", "publisher" : "The Apache Software Foundation", "group" : "org.apache.flink", "name" : "flink-shaded-force-shading", "version" : "20.0", "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.", "scope" : "optional", "hashes" : [ { "alg" : "MD5", "content" : "9971c3d248dd2ea79add93f77fb0f24f" }, { "alg" : "SHA-1", "content" : "4c21de8cf9ca8e93777e5d1c4a7a0a2f61852401" }, { "alg" : "SHA-256", "content" : "50773dc0f2ab1831754513a8861374c0e47b077dbcc33956fe3a6cd02308d0f8" }, { "alg" : "SHA-512", "content" : "5b7a0bc48a25e82da9d9f8f9a01afe30bc7411b04924d8af72f4120a937b0a3f3999a51e3a55718783d71b97000d1d18568cfb48cb609d33cd201dfe10a7f0b2" }, { "alg" : "SHA-384", "content" : "3b04f01b51dda20aef349e623f6c8de4713b15f095f4af220ef77c22f0b815687bb60c9def912c2e4eff3513132d7cc7" }, { "alg" : "SHA3-384", "content" : "b0378ce70a9f05966229d15f8a5f6682280f63b5494040e1002a210128878799c5761bfa1b1b5d4204a0dabb8687f90e" }, { "alg" : "SHA3-256", "content" : "0e0b42aa42a5be9a215f4e893efabe6773e5c8d54299daf714e36984410c4549" }, { "alg" : "SHA3-512", "content" : "e8754f8fec246e8de00e9634f8a2c9821af3ebcc194ef570328dcc6e1395b0263d5ae875a702aa69e5a9602616afc3ef51a4b63e70c6df00646b495df87ebd1d" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/org.apache.flink/flink-shaded-force-shading@20.0?type=jar", "externalReferences" : [ { "type" : "website", "url" : "http://flink.apache.org/flink-shaded-force-shading" }, { "type" : "distribution-intake", "url" : "https://repository.apache.org/service/local/staging/deploy/maven2" }, { "type" : "mailing-list", "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/" }, { "type" : "vcs", "url" : "https://github.com/apache/flink-shaded/flink-shaded-force-shading" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar", "publisher" : "QOS.ch", "group" : "org.slf4j", "name" : "slf4j-api", "version" : "1.7.36", "description" : "The slf4j API", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "872da51f5de7f3923da4de871d57fd85" }, { "alg" : "SHA-1", "content" : "6c62681a2f655b49963a5983b8b0950a6120ae14" }, { "alg" : "SHA-256", "content" : "d3ef575e3e4979678dc01bf1dcce51021493b4d11fb7f1be8ad982877c16a1c0" }, { "alg" : "SHA-512", "content" : "f9b033fc019a44f98b16048da7e2b59edd4a6a527ba60e358f65ab88e0afae03a9340f1b3e8a543d49fa542290f499c5594259affa1ff3e6e7bf3b428d4c610b" }, { "alg" : "SHA-384", "content" : "2b14ad035877087157e379d3277dcdcd79e58d6bdb147c47d29e377d75ce53ad42cafbf22f5fb7827c7e946ff4876b9a" }, { "alg" : "SHA3-384", "content" : "3bc3110dafb8d5be16a39f3b2671a466463cd99eb39610c0e4719a7bf2d928f2ea213c734887c6926a07c4cca7769e4b" }, { "alg" : "SHA3-256", "content" : "ba2608179fcf46e2291a90b9cbb4aa30d718e481f59c350cc21c73b88d826881" }, { "alg" : "SHA3-512", "content" : "14c4edcd19702ef607d78826839d8a6d3a39157df54b89a801d3d3cbbe1307131a77671b041c761122730fb1387888c5ec2e46bdd80e1cb07f8f144676441824" } ], "licenses" : [ { "license" : { "id" : "MIT", "url" : "https://opensource.org/license/mit/" } } ], "purl" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar", "externalReferences" : [ { "type" : "website", "url" : "http://www.slf4j.org" }, { "type" : "distribution-intake", "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type" : "vcs", "url" : "https://github.com/qos-ch/slf4j/slf4j-api" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar", "group" : "com.google.code.findbugs", "name" : "jsr305", "version" : "1.3.9", "description" : "JSR305 Annotations for Findbugs", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "1d5a772e400b04bb67a7ef4a0e0996d8" }, { "alg" : "SHA-1", "content" : "40719ea6961c0cb6afaeb6a921eaa1f6afd4cfdf" }, { "alg" : "SHA-256", "content" : "905721a0eea90a81534abb7ee6ef4ea2e5e645fa1def0a5cd88402df1b46c9ed" }, { "alg" : "SHA-512", "content" : "06da282cfd8e30d9f8cf17702b8709172b00e22b75a627a1d85f8989615b8a1a401bc25d9aee7b14aed1d9b5df73bf2ea8d66f9c8468d9577c29f0ccfa2cc70a" }, { "alg" : "SHA-384", "content" : "56e6b41ef62eb5edfed0203802cefae9c2df86388148e420bb0c687abb2b80e14d5c2a82d5b35dce4badaf148f94eada" }, { "alg" : "SHA3-384", "content" : "58c3bf89fa1afa75c2c5078159fd28e27b2273d437f26aaaa7391310b6f0823f3cf476a24f5631c0881f3f7e946d99be" }, { "alg" : "SHA3-256", "content" : "c333ea5faedfa78e0614a2620438d5724eab093df4e960918391b6a44c2915b0" }, { "alg" : "SHA3-512", "content" : "67ec31448e156cc72dd036060b460bb2667a13b1cbe500b6b7eed3235b1994b44c39f440ebd07b21ec9595b166ad61121d4f6a132b5b313c558ab21b72599425" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar", "externalReferences" : [ { "type" : "website", "url" : "http://findbugs.sourceforge.net/" }, { "type" : "vcs", "url" : "http://findbugs.googlecode.com/svn/trunk/" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/org.objenesis/objenesis@3.4?type=jar", "publisher" : "Joe Walnes, Henri Tremblay, Leonardo Mesquita", "group" : "org.objenesis", "name" : "objenesis", "version" : "3.4", "description" : "A library for instantiating Java objects", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "51242320cb2bb25a3f36e2e21fa87de0" }, { "alg" : "SHA-1", "content" : "675cbe121a68019235d27f6c34b4f0ac30e07418" }, { "alg" : "SHA-256", "content" : "95488102feaf2e2858adf6b299353677dac6c15294006f8ed1c5556f8e3cd251" }, { "alg" : "SHA-512", "content" : "951a01075a5462cc989b8d8fb1b7089848eb825ee4e563bab139f121f5f515fbb5cf2ac607a5528cbd3929e610910113346956a4448fa39bf41fd8147e5eac6f" }, { "alg" : "SHA-384", "content" : "8865ca08b684b72d9dcb620f01974022d864e8e5e0e4b469287bf4720536ee51735f29c7f05da563c967e1e2f1c52589" }, { "alg" : "SHA3-384", "content" : "730526cb3490fdb1770264395afdc3782fd3397617582dde8bc2807512672f624e2f5b2206d9f615524b92ccdfba191a" }, { "alg" : "SHA3-256", "content" : "f22667e2f7f0f86b48015d3995e3edbec9e81929c6860e9af1063c629a114ae2" }, { "alg" : "SHA3-512", "content" : "465202eb4e341003b66a38a36d676656d17adf66267dc87cfbc6bcd6ee6fd3914423160e01c38d3f505c7f358674dd9e9f08dd7df73196f04e56cae01d4fe91e" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/org.objenesis/objenesis@3.4?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://objenesis.org/objenesis" }, { "type" : "distribution-intake", "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type" : "vcs", "url" : "https://github.com/easymock/objenesis/objenesis" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/org.apache.commons/commons-compress@1.26.0?type=jar", "publisher" : "The Apache Software Foundation", "group" : "org.apache.commons", "name" : "commons-compress", "version" : "1.26.0", "description" : "Apache Commons Compress defines an API for working with compression and archive formats. These include bzip2, gzip, pack200, LZMA, XZ, Snappy, traditional Unix Compress, DEFLATE, DEFLATE64, LZ4, Brotli, Zstandard and ar, cpio, jar, tar, zip, dump, 7z, arj.", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "cbc0bb8eca12b747ca21bf998d736e60" }, { "alg" : "SHA-1", "content" : "659feffdd12280201c8aacb8f7be94f9a883c824" }, { "alg" : "SHA-256", "content" : "051aceb8bbcc62d0f5b2b8ac72c53767f9c59bfbd050151e65bef6f51c8ed9c9" }, { "alg" : "SHA-512", "content" : "acbeaa2909b809cd561e7156df18340d96abacb179325622d73bdd6b82cb9b387d6fcb1a44d8195aad4e786da299289e17598a1d337b7c7d1c0bc610cc128714" }, { "alg" : "SHA-384", "content" : "052d4d0cd1929c4299dd9d37dd36eaea6ed2be6b04d6d83a94f8608a6d1138aa81f7a34f25113ac267e7ba25ce948c9a" }, { "alg" : "SHA3-384", "content" : "8b0bf441e8ce793fb6513bc07551cc48ab4507696c18e6037b0fcf35bc4e1eb3e44ed962e2d3765c86d4d912770aa53e" }, { "alg" : "SHA3-256", "content" : "e441768e06092053f4703844ec0c8f2b437e06e7c190d48fec9d7682beb94c40" }, { "alg" : "SHA3-512", "content" : "5984f9f08f83789555677f6800f25fa8e80a9eb2e4d46b5fb117b8efc24753644fa103a2f6b619827661a41677991bc827965172ef25f1313d8a59154e615e8d" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0", "url" : "https://www.apache.org/licenses/LICENSE-2.0" } } ], "purl" : "pkg:maven/org.apache.commons/commons-compress@1.26.0?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://commons.apache.org/proper/commons-compress/" }, { "type" : "build-system", "url" : "https://github.com/apache/commons-parent/actions" }, { "type" : "distribution-intake", "url" : "https://repository.apache.org/service/local/staging/deploy/maven2" }, { "type" : "issue-tracker", "url" : "https://issues.apache.org/jira/browse/COMPRESS" }, { "type" : "mailing-list", "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/" }, { "type" : "vcs", "url" : "https://gitbox.apache.org/repos/asf?p=commons-compress.git" } ] } ], "dependencies" : [ { "ref" : "pkg:maven/io.confluent.flink/flink-table-calcite-bridge@2.2.0-cp2?type=jar", "dependsOn" : [ "pkg:maven/org.apache.calcite/calcite-core@1.36.0?type=jar", "pkg:maven/com.jayway.jsonpath/json-path@2.10.0?type=jar", "pkg:maven/com.google.guava/guava@33.4.0-jre?type=jar", "pkg:maven/io.confluent.flink/flink-annotations@2.2.0-cp2?type=jar", "pkg:maven/io.confluent.flink/flink-table-api-java@2.2.0-cp2?type=jar", "pkg:maven/org.apache.flink/flink-shaded-force-shading@20.0?type=jar", "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar", "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar" ] }, { "ref" : "pkg:maven/org.apache.calcite/calcite-core@1.36.0?type=jar", "dependsOn" : [ "pkg:maven/org.apache.calcite/calcite-linq4j@1.36.0?type=jar", "pkg:maven/org.locationtech.jts/jts-core@1.19.0?type=jar", "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.18.6?type=jar", "pkg:maven/org.apache.calcite.avatica/avatica-core@1.23.0?type=jar", "pkg:maven/org.apiguardian/apiguardian-api@1.1.2?type=jar", "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar", "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.18.6?type=jar", "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.18.6?type=jar", "pkg:maven/commons-codec/commons-codec@1.15?type=jar", "pkg:maven/org.apache.commons/commons-math3@3.6.1?type=jar", "pkg:maven/commons-io/commons-io@2.15.1?type=jar" ] }, { "ref" : "pkg:maven/org.apache.calcite/calcite-linq4j@1.36.0?type=jar", "dependsOn" : [ "pkg:maven/org.apiguardian/apiguardian-api@1.1.2?type=jar", "pkg:maven/org.apache.calcite.avatica/avatica-core@1.23.0?type=jar" ] }, { "ref" : "pkg:maven/org.apiguardian/apiguardian-api@1.1.2?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/org.apache.calcite.avatica/avatica-core@1.23.0?type=jar", "dependsOn" : [ "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.18.6?type=jar", "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.18.6?type=jar", "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.18.6?type=jar", "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar" ] }, { "ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.18.6?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.18.6?type=jar", "dependsOn" : [ "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.18.6?type=jar", "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.18.6?type=jar" ] }, { "ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.18.6?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/org.locationtech.jts/jts-core@1.19.0?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/commons-codec/commons-codec@1.15?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/org.apache.commons/commons-math3@3.6.1?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/commons-io/commons-io@2.15.1?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/com.jayway.jsonpath/json-path@2.10.0?type=jar", "dependsOn" : [ "pkg:maven/net.minidev/json-smart@2.6.0?type=jar", "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar" ] }, { "ref" : "pkg:maven/net.minidev/json-smart@2.6.0?type=jar", "dependsOn" : [ "pkg:maven/net.minidev/accessors-smart@2.6.0?type=jar" ] }, { "ref" : "pkg:maven/net.minidev/accessors-smart@2.6.0?type=jar", "dependsOn" : [ "pkg:maven/org.ow2.asm/asm@9.7.1?type=jar" ] }, { "ref" : "pkg:maven/org.ow2.asm/asm@9.7.1?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/com.google.guava/guava@33.4.0-jre?type=jar", "dependsOn" : [ "pkg:maven/com.google.guava/failureaccess@1.0.2?type=jar", "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar", "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar", "pkg:maven/org.checkerframework/checker-qual@3.43.0?type=jar", "pkg:maven/com.google.errorprone/error_prone_annotations@2.36.0?type=jar", "pkg:maven/com.google.j2objc/j2objc-annotations@3.0.0?type=jar" ] }, { "ref" : "pkg:maven/com.google.guava/failureaccess@1.0.2?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/org.checkerframework/checker-qual@3.43.0?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.36.0?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/com.google.j2objc/j2objc-annotations@3.0.0?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/io.confluent.flink/flink-annotations@2.2.0-cp2?type=jar", "dependsOn" : [ "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar", "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar" ] }, { "ref" : "pkg:maven/io.confluent.flink/flink-table-api-java@2.2.0-cp2?type=jar", "dependsOn" : [ "pkg:maven/io.confluent.flink/flink-table-common@2.2.0-cp2?type=jar", "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar", "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar" ] }, { "ref" : "pkg:maven/io.confluent.flink/flink-table-common@2.2.0-cp2?type=jar", "dependsOn" : [ "pkg:maven/io.confluent.flink/flink-core@2.2.0-cp2?type=jar", "pkg:maven/org.apache.flink/flink-shaded-asm-9@9.6-20.0?type=jar", "pkg:maven/com.ibm.icu/icu4j@67.1?type=jar", "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar", "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar" ] }, { "ref" : "pkg:maven/io.confluent.flink/flink-core@2.2.0-cp2?type=jar", "dependsOn" : [ "pkg:maven/io.confluent.flink/flink-core-api@2.2.0-cp2?type=jar", "pkg:maven/io.confluent.flink/flink-annotations@2.2.0-cp2?type=jar", "pkg:maven/org.apache.flink/flink-shaded-asm-9@9.6-20.0?type=jar", "pkg:maven/org.apache.flink/flink-shaded-jackson@2.18.2-20.0?type=jar", "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar", "pkg:maven/org.snakeyaml/snakeyaml-engine@2.6?type=jar", "pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar", "pkg:maven/com.esotericsoftware/kryo@5.6.2?type=jar", "pkg:maven/commons-collections/commons-collections@3.2.2?type=jar", "pkg:maven/org.apache.commons/commons-compress@1.26.0?type=jar", "pkg:maven/org.apache.flink/flink-shaded-guava@33.4.0-jre-20.0?type=jar", "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar", "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar" ] }, { "ref" : "pkg:maven/io.confluent.flink/flink-core-api@2.2.0-cp2?type=jar", "dependsOn" : [ "pkg:maven/io.confluent.flink/flink-annotations@2.2.0-cp2?type=jar", "pkg:maven/io.confluent.flink/flink-metrics-core@2.2.0-cp2?type=jar", "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar", "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar" ] }, { "ref" : "pkg:maven/io.confluent.flink/flink-metrics-core@2.2.0-cp2?type=jar", "dependsOn" : [ "pkg:maven/io.confluent.flink/flink-annotations@2.2.0-cp2?type=jar" ] }, { "ref" : "pkg:maven/org.apache.flink/flink-shaded-asm-9@9.6-20.0?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/org.apache.flink/flink-shaded-jackson@2.18.2-20.0?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/org.snakeyaml/snakeyaml-engine@2.6?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar", "dependsOn" : [ "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar" ] }, { "ref" : "pkg:maven/com.esotericsoftware/kryo@5.6.2?type=jar", "dependsOn" : [ "pkg:maven/com.esotericsoftware/reflectasm@1.11.9?type=jar", "pkg:maven/org.objenesis/objenesis@3.4?type=jar", "pkg:maven/com.esotericsoftware/minlog@1.3.1?type=jar" ] }, { "ref" : "pkg:maven/com.esotericsoftware/reflectasm@1.11.9?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/org.objenesis/objenesis@3.4?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/com.esotericsoftware/minlog@1.3.1?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/commons-collections/commons-collections@3.2.2?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/org.apache.commons/commons-compress@1.26.0?type=jar", "dependsOn" : [ "pkg:maven/commons-io/commons-io@2.15.1?type=jar", "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar" ] }, { "ref" : "pkg:maven/org.apache.flink/flink-shaded-guava@33.4.0-jre-20.0?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/com.ibm.icu/icu4j@67.1?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/org.apache.flink/flink-shaded-force-shading@20.0?type=jar", "dependsOn" : [ ] } ] }