{
  "bomFormat" : "CycloneDX",
  "specVersion" : "1.4",
  "serialNumber" : "urn:uuid:d5da6041-695d-442f-8936-e7827be52c6b",
  "version" : 1,
  "metadata" : {
    "timestamp" : "2025-07-18T10:15:45Z",
    "tools" : [
      {
        "vendor" : "OWASP Foundation",
        "name" : "CycloneDX Maven plugin",
        "version" : "2.7.7",
        "hashes" : [
          {
            "alg" : "MD5",
            "content" : "436dfb24c63a322708e4a5143d8543af"
          },
          {
            "alg" : "SHA-1",
            "content" : "3ef2e8728dc9eff2f129c34057e46e9d2b10629a"
          },
          {
            "alg" : "SHA-256",
            "content" : "c185b79bf0f9264f43bc8c222c44db67bea275bb727e3327cf9aea6bf45292c9"
          },
          {
            "alg" : "SHA-512",
            "content" : "41488733e31e6c5315327dcc86187c2b9a6b96cd08f7e2157ce130688afde29c313fc6a73edb8a76333a930c78874aa2eac874448920030c0f7af0ac05e65ced"
          },
          {
            "alg" : "SHA-384",
            "content" : "f9462f86240fd9fc0942f34981e6d2371f252aa1a4e5e8c3c14e7f0f1a4e4de69ef972e51cf09a749afb6d97c13e67ed"
          },
          {
            "alg" : "SHA3-384",
            "content" : "c755af6239348bc7dd1e1e6b5f14f7cf7e1560d689b252d9610cd865fa4b419d0b8e26260731dfc5da2176b6e706b414"
          },
          {
            "alg" : "SHA3-256",
            "content" : "309aac91005470c9c834354ab918759e2ae7ec52fc1676002621a5bbdf3b7827"
          },
          {
            "alg" : "SHA3-512",
            "content" : "c634570dcf8302e61005e5fa91a9a0d9b81542f731967b3c9f6d3ef89e3b945bd36d7ab69e2ebad8124b9c05da504361c8b36a8ce528d844409eeb7df4eea6ce"
          }
        ]
      }
    ],
    "component" : {
      "publisher" : "The Apache Software Foundation",
      "group" : "io.confluent.flink",
      "name" : "flink-table-test-utils",
      "version" : "1.19.3-cp1",
      "description" : "This module contains test utilities for the Table API/SQL ecosystem for end users, connectors and formats.",
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.confluent.flink/flink-table-test-utils@1.19.3-cp1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://flink.apache.org/flink-table/flink-table-test-utils"
        },
        {
          "type" : "distribution",
          "url" : "s3://cp-flink-staging-654654529379-us-west-2/maven-staging/85e1bccaeab3902aaac2d25e0400b3674b1c6169"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink/flink-table/flink-table-test-utils"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.confluent.flink/flink-table-test-utils@1.19.3-cp1?type=jar"
    },
    "properties" : [
      {
        "name" : "maven.goal",
        "value" : "makeBom"
      },
      {
        "name" : "maven.scopes",
        "value" : "compile,provided,runtime,system"
      }
    ]
  },
  "components" : [
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "io.confluent.flink",
      "name" : "flink-test-utils",
      "version" : "1.19.3-cp1",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "e725d8a81cd291700ed6663cbd89fdd0"
        },
        {
          "alg" : "SHA-1",
          "content" : "3a8fe2a02a656b0b75f27bbf7cb337afde147d26"
        },
        {
          "alg" : "SHA-256",
          "content" : "fb95c34f06b7a33b9affff3ab2f345c26d03cbeeb5b8fa19ce2e436d57dd5b94"
        },
        {
          "alg" : "SHA-512",
          "content" : "670bacb05ec27b1baf332fe0275a12dd75644a0e820f067181e0670147195eb3710b79ef103766ccc39f47d63a921549ec1c13a166d3f91db4265e550149d9a8"
        },
        {
          "alg" : "SHA-384",
          "content" : "8e8c1a39df45f2fdc290692742bb58f65d45cd00925fbecdbcea422919fb2e014bf6c2d813b7aed44d1675323ce58933"
        },
        {
          "alg" : "SHA3-384",
          "content" : "4a7ffdc182f9960478c9515bdd14aacebdc1156a179144ca6884770b67a53e6afe7b4722ba867d9755ace8f5d1f4f9eb"
        },
        {
          "alg" : "SHA3-256",
          "content" : "0f9da16efd04165bb109f07fcee0a909c032c760e092e81790fecbbc353deaca"
        },
        {
          "alg" : "SHA3-512",
          "content" : "3e9a28101be8533af274c0f8a3e4064b8318ed41f8d42df5fda155aa6124cb76d141bac0238da9ef922de8e66ecf65112f155925235bb03d0378d921cc8f0187"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.confluent.flink/flink-test-utils@1.19.3-cp1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://flink.apache.org/flink-test-utils-parent/flink-test-utils"
        },
        {
          "type" : "distribution",
          "url" : "s3://cp-flink-staging-654654529379-us-west-2/maven-staging/85e1bccaeab3902aaac2d25e0400b3674b1c6169"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink/flink-test-utils-parent/flink-test-utils"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.confluent.flink/flink-test-utils@1.19.3-cp1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "io.confluent.flink",
      "name" : "flink-table-common",
      "version" : "1.19.3-cp1",
      "description" : "This module contains extension points of the Table/SQL API. It allows for implementing user-defined functions, custom formats, etc. with minimal dependencies.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "00a36d9e7428e3fd85aee915bc8e4937"
        },
        {
          "alg" : "SHA-1",
          "content" : "bc0373420a48a5ae22d8cf9a4bb4602d1a77f61b"
        },
        {
          "alg" : "SHA-256",
          "content" : "a48dbd1ff3021742b87013481b11cd24b689a243f696663d2a5c16e624c2c6e0"
        },
        {
          "alg" : "SHA-512",
          "content" : "f99b45037c4223b02334eac032b4c77212ddd149ef98b6489e427cdc883b6885e5d511b984e7bd6f8c614c029b651f343547cf53644efc9cc0776dfb0f1220ab"
        },
        {
          "alg" : "SHA-384",
          "content" : "314fed8ee4c5a8ae3b8c0d1bf4bed4d6827a63efb58c99a5f4a416ce8872d4f3cf5a5302a62358582c2f3331496f6e37"
        },
        {
          "alg" : "SHA3-384",
          "content" : "7aeec3e8014c3f9af84492d8a6e82d69758fce42a71d4818773fa3093921d1d9da31bfa90bd1ed3791bdb3369decffa2"
        },
        {
          "alg" : "SHA3-256",
          "content" : "a6587bd7a5f98ca9bcc2bfff099707115913aeb76847cd8740625436271f096e"
        },
        {
          "alg" : "SHA3-512",
          "content" : "8039f9ce0bc402f9b5ec370c715fbb37659d0f3ce29c40cd3f252a38d41d8f28db05149758af7581a7fa7c612993afa14f491aa9d1da3024390a187c965a0332"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.confluent.flink/flink-table-common@1.19.3-cp1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://flink.apache.org/flink-table/flink-table-common"
        },
        {
          "type" : "distribution",
          "url" : "s3://cp-flink-staging-654654529379-us-west-2/maven-staging/85e1bccaeab3902aaac2d25e0400b3674b1c6169"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink/flink-table/flink-table-common"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.confluent.flink/flink-table-common@1.19.3-cp1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "io.confluent.flink",
      "name" : "flink-runtime",
      "version" : "1.19.3-cp1",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "1499b951a74a91b8ffa9592324448ef2"
        },
        {
          "alg" : "SHA-1",
          "content" : "98b199745112037de01aa60e4fb6e8a1a5955e77"
        },
        {
          "alg" : "SHA-256",
          "content" : "59c1c4fd03b202c1da58e2c3e5d4ec33ce775ad66651bd5dd3d5f6e8523a4306"
        },
        {
          "alg" : "SHA-512",
          "content" : "97124a2fb3d2ec9ee9a8276e948c5fe5152fdab5c6669a2769ce76a21d43f874c409cea57c03803331b97fb643dbd549abbbfc8a53ab2d047e5f32491bca6758"
        },
        {
          "alg" : "SHA-384",
          "content" : "a6cc7724dd07acc793ec175ede6f4e9cdd38f899d2df5f752adfadd506fdaa2fd89c466f954e8668387e45c3c024fa8c"
        },
        {
          "alg" : "SHA3-384",
          "content" : "6d9ea63803cac332e7c6d53850103c9a3a46e85f42017ac6c3453d1d7741403b6ce9bf36157b38b4db0ccf52525a491e"
        },
        {
          "alg" : "SHA3-256",
          "content" : "1baedd8e48c81384d742cec521c90da9cc6b7501c63676d1c31bc025ec0b42fe"
        },
        {
          "alg" : "SHA3-512",
          "content" : "a1356b14e6ab54cccd8edf4ddfe5f857acb5ae568530ffc184b302da197a94b6bfcd4fbb2c3fd2380719d25029d8a6635a1f2328f96ed51ccacdf2338853b520"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.confluent.flink/flink-runtime@1.19.3-cp1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://flink.apache.org/flink-runtime"
        },
        {
          "type" : "distribution",
          "url" : "s3://cp-flink-staging-654654529379-us-west-2/maven-staging/85e1bccaeab3902aaac2d25e0400b3674b1c6169"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink/flink-runtime"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.confluent.flink/flink-runtime@1.19.3-cp1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "io.confluent.flink",
      "name" : "flink-rpc-core",
      "version" : "1.19.3-cp1",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "d9bc65dadc353eafaeae9a23b7aa78d5"
        },
        {
          "alg" : "SHA-1",
          "content" : "88393629b3b794a9e6df27a59b30986ecbb07b39"
        },
        {
          "alg" : "SHA-256",
          "content" : "a5cf5c48b343768f730bff550db5243a6146e2b5aab881f20c15640304397567"
        },
        {
          "alg" : "SHA-512",
          "content" : "599a3f15d3b6a79bc830a118bb34771185a4c0c3415da2cb36c00a192fa34eea8d8a46ecc4c4e1d4b579b9d7fce91a95990652aaccaf5bc2067d54406513f4c7"
        },
        {
          "alg" : "SHA-384",
          "content" : "03a5d58ee5dcea73e1f284a6b81aa0431e5de421de1fb5c8cca54cca47fcddb30a4ab74a278da3419589020a89a3321c"
        },
        {
          "alg" : "SHA3-384",
          "content" : "6eb0d154106ce4179f5eba2f2888c09d7711e066751fc0f11d52980b9a934119f82230c33aa0181e273e431f71854acc"
        },
        {
          "alg" : "SHA3-256",
          "content" : "4cfdd9d970ac758f7f2fbbdc6b57dc4b904533ca60c9880b64627dac0ad9ff15"
        },
        {
          "alg" : "SHA3-512",
          "content" : "bf88a7f09919e81d122b224471c7d4b4b6657763fb8c0cd412d58360a8589a1a36cb65f93567adbda1c354ab679eb4761fcca348fa3892932251f7512f514bb2"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.confluent.flink/flink-rpc-core@1.19.3-cp1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://flink.apache.org/flink-rpc/flink-rpc-core"
        },
        {
          "type" : "distribution",
          "url" : "s3://cp-flink-staging-654654529379-us-west-2/maven-staging/85e1bccaeab3902aaac2d25e0400b3674b1c6169"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink/flink-rpc/flink-rpc-core"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.confluent.flink/flink-rpc-core@1.19.3-cp1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "io.confluent.flink",
      "name" : "flink-rpc-akka-loader",
      "version" : "1.19.3-cp1",
      "description" : "This module contains the mechanism for loading flink-rpc-akka through a separate classloader.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "3ff0de0d4d4debc1099c5713d1b93d29"
        },
        {
          "alg" : "SHA-1",
          "content" : "5224f26fac95bc33114edca5ab7f2a5678d44996"
        },
        {
          "alg" : "SHA-256",
          "content" : "39ae29bbe8a4e3dd3663b4c7aea82538b7ac78603e7e1185c8974a6ef6936aab"
        },
        {
          "alg" : "SHA-512",
          "content" : "f001e6f11b21a4dccc61496198d1501405880965f6a2a288b241c1d2f74092b432552a3b03c58f973effbd95cf9b8bae5be2bfbbe971bdc4672ffd9655154bb1"
        },
        {
          "alg" : "SHA-384",
          "content" : "22128f3f15d8e81cecda4e013d88e84de6be7f831afa3d070bd12cede7b5b1846b85e28e11c3272064ae314822b94151"
        },
        {
          "alg" : "SHA3-384",
          "content" : "462f2652ba3506909b1c4692a9f6346853dbe4d34e4484f85eed6b393a755c43f596325c1ace437043852320a45d5610"
        },
        {
          "alg" : "SHA3-256",
          "content" : "30de3adc4b1ea8f2d30edb88d2d7081d2a35407de4299bc1d75f06542c28a5ba"
        },
        {
          "alg" : "SHA3-512",
          "content" : "21416151b1480e4e2df46587db2eda1e55747bbeeda462077ee345c646ecc7fa8f0b18e492d177a58b9868a6194bc47c6e443f832cda4e30664a29ff9fcdffc4"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.confluent.flink/flink-rpc-akka-loader@1.19.3-cp1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://flink.apache.org/flink-rpc/flink-rpc-akka-loader"
        },
        {
          "type" : "distribution",
          "url" : "s3://cp-flink-staging-654654529379-us-west-2/maven-staging/85e1bccaeab3902aaac2d25e0400b3674b1c6169"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink/flink-rpc/flink-rpc-akka-loader"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.confluent.flink/flink-rpc-akka-loader@1.19.3-cp1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "io.confluent.flink",
      "name" : "flink-queryable-state-client-java",
      "version" : "1.19.3-cp1",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "d090d7cf1b86a97fd5c5b50f3968a76b"
        },
        {
          "alg" : "SHA-1",
          "content" : "8fa00af4e7daf7c8739cf549eeb04ecb8170c65c"
        },
        {
          "alg" : "SHA-256",
          "content" : "d27738f0a27b445edff76ccfa74852235dd43f94eb8629c951c7a32a57f2bab0"
        },
        {
          "alg" : "SHA-512",
          "content" : "7431bd151098b9d183e60c2ec313b23cb3fbe08024dd8b897e85359b03879ac7d921b126e93c91899003250087f131738402be818ac0c5612d3ce4d8beaeeb70"
        },
        {
          "alg" : "SHA-384",
          "content" : "bb615e7c0a5f70267e4a01cd0b68251f89ded15c82e8d0b35e3fa8f187b7473d878849eb20642b6b893e9f9828a8b2d0"
        },
        {
          "alg" : "SHA3-384",
          "content" : "0fa03dbd3c53cb677ae2a4c6724888606ccfa567b485eee37372c65ebb240fb5b5e31961bf2381b650f83ca1033e2586"
        },
        {
          "alg" : "SHA3-256",
          "content" : "96d752d2d14af6644acfb3955536e26ea99bf5a71b82329624373b08302e4959"
        },
        {
          "alg" : "SHA3-512",
          "content" : "9c20c5ba103a0e949189227a4de21e245cfa899ce71b12f8315255e5646fd4df66a69eca518dc05bc0c670af94358c263aff4e103270e2cc97b25981506df284"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.confluent.flink/flink-queryable-state-client-java@1.19.3-cp1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://flink.apache.org/flink-queryable-state/flink-queryable-state-client-java"
        },
        {
          "type" : "distribution",
          "url" : "s3://cp-flink-staging-654654529379-us-west-2/maven-staging/85e1bccaeab3902aaac2d25e0400b3674b1c6169"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink/flink-queryable-state/flink-queryable-state-client-java"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.confluent.flink/flink-queryable-state-client-java@1.19.3-cp1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "io.confluent.flink",
      "name" : "flink-hadoop-fs",
      "version" : "1.19.3-cp1",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "81fcf391eea690d9a37b59240c41b2cc"
        },
        {
          "alg" : "SHA-1",
          "content" : "86db55e99352894b6b4a11b2ed7be09a1237f1aa"
        },
        {
          "alg" : "SHA-256",
          "content" : "b1aaf6cc4e2fa25e02d77fd60ea4c8418408d3fcc578dd65ff91b7e20e754bbd"
        },
        {
          "alg" : "SHA-512",
          "content" : "8e1fafb5d1e18f71ff7e3f735641a7b0ea221d0c33cf61687bf197050b69bfaaa877898885d223a11c8001aa46f92f4e66b5589659c6e0d654a22d1c56981960"
        },
        {
          "alg" : "SHA-384",
          "content" : "a9a980bf48b3aa11a21fa0c7caf5e31c60896a31bbb6d5da89de165b8c18ae2c9ed54eb6b7fe3f6870e73338f75cb5ff"
        },
        {
          "alg" : "SHA3-384",
          "content" : "6e0a0d3e78046e3b16a24b28c28751fdecf9dee37b89625cba8702d80cdbed09477d4db74b4d4d2983395e09d6ee85a9"
        },
        {
          "alg" : "SHA3-256",
          "content" : "e75fc71e96d929429374a1072b72b0edaa51db1a74f1079d14b65a7c4ac9b16b"
        },
        {
          "alg" : "SHA3-512",
          "content" : "2892eda42c7f824fd64f2b39223929e1570a82c58c162cee7921c59e27d94119b709d10804e970d6bb6be3fac9a32318b8d71846b86cba429f507d25753dc387"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.confluent.flink/flink-hadoop-fs@1.19.3-cp1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://flink.apache.org/flink-filesystems/flink-hadoop-fs"
        },
        {
          "type" : "distribution",
          "url" : "s3://cp-flink-staging-654654529379-us-west-2/maven-staging/85e1bccaeab3902aaac2d25e0400b3674b1c6169"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink/flink-filesystems/flink-hadoop-fs"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.confluent.flink/flink-hadoop-fs@1.19.3-cp1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-io",
      "name" : "commons-io",
      "version" : "2.15.1",
      "description" : "The Apache Commons IO library contains utility classes, stream implementations, file filters, file comparators, endian transformation classes, and much more.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "84351f7991a0e6722f00e96a4ccc376f"
        },
        {
          "alg" : "SHA-1",
          "content" : "f11560da189ab563a5c8e351941415430e9304ea"
        },
        {
          "alg" : "SHA-256",
          "content" : "a58af12ee1b68cfd2ebb0c27caef164f084381a00ec81a48cc275fd7ea54e154"
        },
        {
          "alg" : "SHA-512",
          "content" : "e9adaeed2d715ac0ae44de056ba165a743a92acbeb9871b535f7e58e0b3bc4fba276495b50429be195098a559f3adb7294048479754a0ee4d397da2efda5f81c"
        },
        {
          "alg" : "SHA-384",
          "content" : "028c72b59373d3894da22f9eb2c731aabd00f670993973f71a354d722670c12ca659686b83bbf8db32d060ca180f50b2"
        },
        {
          "alg" : "SHA3-384",
          "content" : "73cd585ab3736b4be50ec0f10dfe5ebfc3390eea8d56f07f29055f1fddb2dff8084310eaa6fb9f97ea639ed1abd7bc33"
        },
        {
          "alg" : "SHA3-256",
          "content" : "daf39bc99f1a3dc0075714a4a342a58d69a4cd62c25bc39a581f657ca72b1044"
        },
        {
          "alg" : "SHA3-512",
          "content" : "b003f8971d1536ea0fc4320dbfe17d7259d49e59314739f9fc83134e511facbff048b0ef4f86a9d0893781ca09c95cebc3b181a6c89a2d41e851870b96e76839"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-io/commons-io@2.15.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-io/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-parent/actions"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/IO"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-io.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-io/commons-io@2.15.1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.flink",
      "name" : "flink-shaded-netty",
      "version" : "4.1.91.Final-17.0",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f3e6fd4f43c7a8647604df2a9b712dab"
        },
        {
          "alg" : "SHA-1",
          "content" : "81b6e0b28e0309946cb6d03792199fabfc0d9f09"
        },
        {
          "alg" : "SHA-256",
          "content" : "c4d370f1b2bda0b55686fdec840c8a047950b9448f26cd01f1594a3bf0fde75b"
        },
        {
          "alg" : "SHA-512",
          "content" : "7f2010cda152f6baecc2a0c9d79f8bb2b7eee8a88f80dd8ed5bf2f723885cf3f9f60e373db77bd591225f3037f33f4a7c08d05e807356899a6af818225b6aa4c"
        },
        {
          "alg" : "SHA-384",
          "content" : "d1d99aee334155d4c2dfddcc63dfd1b8ce9d7e4a67bba29be0b6b5a54a717ea95decb0fa300ef9e05b589d273952e22e"
        },
        {
          "alg" : "SHA3-384",
          "content" : "3a4bcd8d36c45ef4e8d2fd5d1774fe2ba0913851e6034ec770c3af962db9bd9ef084aa3e2a94b83d4c098059f37800a2"
        },
        {
          "alg" : "SHA3-256",
          "content" : "8a9bde99e2876e545b7fbc0400a9980381162b7a51596132cff27d49caff7e55"
        },
        {
          "alg" : "SHA3-512",
          "content" : "9109ab1275822d476cb5dcde1d329625be51953ef07af0b586cac9040221a1cd65bcb98f7aa02d7b07372676960697ccb04f751c31150ba9b6b8b0e5e5b6b4a9"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.flink/flink-shaded-netty@4.1.91.Final-17.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://flink.apache.org/flink-shaded-netty"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink-shaded/flink-shaded-netty"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.flink/flink-shaded-netty@4.1.91.Final-17.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.flink",
      "name" : "flink-shaded-guava",
      "version" : "31.1-jre-17.0",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "b8c5129f4164f8ee2086854bdb289690"
        },
        {
          "alg" : "SHA-1",
          "content" : "00fa393c1db1308f4fb920f010f79c4c774e2f39"
        },
        {
          "alg" : "SHA-256",
          "content" : "03442ae97c4ca34388568cbce0e67e9911b0137b2b3849dff7a550008d5a4336"
        },
        {
          "alg" : "SHA-512",
          "content" : "15bb65f24054768915fbc29a95dfa93307b0babc39a02a204ae65eff44f259357b471fef9967b864b7a78e07d266933ce8e3eda8a866fcc73643cc38bcc5653f"
        },
        {
          "alg" : "SHA-384",
          "content" : "c8e6f2630c0824bbd1902a25884f09c076efbbbe0265f5d3fb49370affcff81ee5dd8b7887ba4bf063915446b937117a"
        },
        {
          "alg" : "SHA3-384",
          "content" : "a2ffbdbcfb8be61c43891fa19275a765b71e6830b110fa9ab77d46ac35527d2be0943d895767a70591895916963048c6"
        },
        {
          "alg" : "SHA3-256",
          "content" : "5a73e8e370e9bb3d634495dade320f0b569f4ed307fc147cb8f3af547bb6b057"
        },
        {
          "alg" : "SHA3-512",
          "content" : "abd1618c0568eee546f5b32314085bef40f8de74ffa5e52f0aa7a5bed82713142af8a1bdaf79f18e2210b79f8c3592276c54b2356594d19d8f56185ec9a457d5"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.flink/flink-shaded-guava@31.1-jre-17.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://flink.apache.org/flink-shaded-guava"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink-shaded/flink-shaded-guava"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.flink/flink-shaded-guava@31.1-jre-17.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.flink",
      "name" : "flink-shaded-jackson",
      "version" : "2.14.2-17.0",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "492259ac7642687cc959257a5512542f"
        },
        {
          "alg" : "SHA-1",
          "content" : "689daca4a6fc14e361831e15abd96283166d0f62"
        },
        {
          "alg" : "SHA-256",
          "content" : "37e87311498ae8da80adb2aa09ab6e9739d8611e09868e7220822206c739231e"
        },
        {
          "alg" : "SHA-512",
          "content" : "3f4434cf93f2cd12b686aa84c4b1910d7e0191b2ddad7ba8de6d2c3805d3b49afcf5da06e1052faf01b6cb0dda554594f78e39db69d83208119c1f4f2cd5dc8f"
        },
        {
          "alg" : "SHA-384",
          "content" : "9e689ab8b7e7f7db269fd5b1b0fc1dc5f13fed06b283c9b8ceec5c500fc9f6a4200674eef2bb884a9e67133de32e9a77"
        },
        {
          "alg" : "SHA3-384",
          "content" : "a67fd2fe9cfd6e8ef51ab3c0217fcaf0a9420178a8c4025770b86d6b590db65c8bb4d96acf05b4212d2661073e4409cc"
        },
        {
          "alg" : "SHA3-256",
          "content" : "e47b2c93363ff5d65ae47d619f3caa605b5d996e4e765811b4b7117f1c58c90e"
        },
        {
          "alg" : "SHA3-512",
          "content" : "af2b026aebfa279ca42602c04a8db054a12c9f39c5640a0e7804cfa5d06124a52099aea56e9dfc25d018da9baa742b274c5914aa98814dbdd0e9c5ebfa7035b6"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.flink/flink-shaded-jackson@2.14.2-17.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://flink.apache.org/flink-shaded-jackson-parent/flink-shaded-jackson"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink-shaded/flink-shaded-jackson-parent/flink-shaded-jackson"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.flink/flink-shaded-jackson@2.14.2-17.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.flink",
      "name" : "flink-shaded-zookeeper-3",
      "version" : "3.7.1-17.0",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "a2737bcfc729e776a7d4dd3a13067999"
        },
        {
          "alg" : "SHA-1",
          "content" : "6206880a4f471a7f560fa824d1ad8b0596d7e59c"
        },
        {
          "alg" : "SHA-256",
          "content" : "e91cb263c67631a27e7a6cee147b75a9a638f3c52fcd053106fc4584feb6e585"
        },
        {
          "alg" : "SHA-512",
          "content" : "62cba94bbd87bd678f6cbbee07168dba3f2d1bac21371c4b5c1d035ef2596711bc46b1a273f4b89fe8110b2b855dc425614ca42fc866340a9edb89226f093c6a"
        },
        {
          "alg" : "SHA-384",
          "content" : "ee4a3d27059c35a13559599d5b00267b9db9514ea4c04b2b3432ade93d71fe4d8510fe2c3416fac2dada3b218019e454"
        },
        {
          "alg" : "SHA3-384",
          "content" : "501df884bf117eb9f420d9ccf92ccbae8d1833d1bb52314ff21bbcc99d9c262eb99b5941ed5da2aabdd1ee953a1320e1"
        },
        {
          "alg" : "SHA3-256",
          "content" : "8ba0e15658af1b2451f6e180ab4778930cf0a30ca4fe0b5a9156eac095118f1f"
        },
        {
          "alg" : "SHA3-512",
          "content" : "c604d9a6a533e806ed3779c328326ce0935c9e8d2f30922289755d35e91e5fe7152a7f1a29b082442e625a35f1217f6bb38021a94dec1c23818715653cef00ef"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.flink/flink-shaded-zookeeper-3@3.7.1-17.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://flink.apache.org/flink-shaded-zookeeper-parent/flink-shaded-zookeeper-3"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink-shaded/flink-shaded-zookeeper-parent/flink-shaded-zookeeper-3"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.flink/flink-shaded-zookeeper-3@3.7.1-17.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-lang3",
      "version" : "3.12.0",
      "description" : "Apache Commons Lang, a package of Java utility classes for the classes that are in java.lang's hierarchy, or are considered to be so standard as to justify existence in java.lang.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "19fe50567358922bdad277959ea69545"
        },
        {
          "alg" : "SHA-1",
          "content" : "c6842c86792ff03b9f1d1fe2aab8dc23aa6c6f0e"
        },
        {
          "alg" : "SHA-256",
          "content" : "d919d904486c037f8d193412da0c92e22a9fa24230b9d67a57855c5c31c7e94e"
        },
        {
          "alg" : "SHA-512",
          "content" : "fbdbc0943cb3498b0148e86a39b773f97c8e6013740f72dbc727faeabea402073e2cc8c4d68198e5fc6b08a13b7700236292e99d4785f2c9989f2e5fac11fd81"
        },
        {
          "alg" : "SHA-384",
          "content" : "c34b8a0e0eba2168ad56fedeb7a1d710b6f1d3f1ce6aae99a4e0247bd120efbbadc8dcb2f731045b8a16e3efd30604dc"
        },
        {
          "alg" : "SHA3-384",
          "content" : "8ad6ebe7754bf0caa8cda7e59c0e95360d76e06a7ad6aeec5637985519dbd1dd06e7eed04711039f36ec4c49de280def"
        },
        {
          "alg" : "SHA3-256",
          "content" : "18ef639b2aeeb5aedffb18dbf20c79f33e300d99fb31b131689639cc470e6e4c"
        },
        {
          "alg" : "SHA3-512",
          "content" : "fbea96114dcf4f31cfaaa99987be756ddda3a6c74f8c835461997df794d54b92da1f60fe5c3f1f2a43cb8c5f5db7f4048bef77c70993673c7a93f3660fffc8da"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-lang/"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/LANG"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-lang.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-text",
      "version" : "1.10.0",
      "description" : "Apache Commons Text is a library focused on algorithms working on strings.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "4afc9bfa2d31dbf7330c98fcc954b892"
        },
        {
          "alg" : "SHA-1",
          "content" : "3363381aef8cef2dbc1023b3e3a9433b08b64e01"
        },
        {
          "alg" : "SHA-256",
          "content" : "770cd903fa7b604d1f7ef7ba17f84108667294b2b478be8ed1af3bffb4ae0018"
        },
        {
          "alg" : "SHA-512",
          "content" : "afd836a1094449e0a791fee67363666c47b6d24acff353a5089b837b332c0f4af89565c354682521e37062d20e6b52d70c77bb4f24cca9b9532c274fc708a831"
        },
        {
          "alg" : "SHA-384",
          "content" : "06c56e6e513dd77cf10d0da46cdea08c34e220e81fa024735b668c6650df4234e564fe865ff5cafea963f56b1e8ffd4a"
        },
        {
          "alg" : "SHA3-384",
          "content" : "f09065ed066c25debf8c78cbb0bcc738e1ea283302ec992dcfb649acb90091cff879465c65a162e94534d454e3b4e9bb"
        },
        {
          "alg" : "SHA3-256",
          "content" : "0b59c567164bb755f2353b78ba66744000a8c4b35e1df05255b080a21c3a3dd5"
        },
        {
          "alg" : "SHA3-512",
          "content" : "f0fbce02a862b70f472a27d0722c54ac111ca2eb94584b8b0b73d1926aec26047cd92542ad0b3cf980a6825077587f41b194aa93d6f6350d1b87e59e8df1be7c"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-text"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-parent/actions"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/TEXT"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-text.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-cli",
      "name" : "commons-cli",
      "version" : "1.5.0",
      "description" : "Apache Commons CLI provides a simple API for presenting, processing and validating a Command Line Interface.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "6c3b2052160144196118b1f019504388"
        },
        {
          "alg" : "SHA-1",
          "content" : "dc98be5d5390230684a092589d70ea76a147925c"
        },
        {
          "alg" : "SHA-256",
          "content" : "bc8bb01fc0fad250385706e20f927ddcff6173f6339b387dc879237752567ac6"
        },
        {
          "alg" : "SHA-512",
          "content" : "b78ac2b418e9e9e7d0bc866664577199d320408a6f03151b3789bac365c986dd526df853599e633d7e50fe136cbf3eb9ce50c9cfa0ad38c3cc8d8ee416f61c40"
        },
        {
          "alg" : "SHA-384",
          "content" : "a7a2daa807c4007c506b5100f0a9b526c0052c4e1f6b699904ef9d2aba8195b6003dc4d47ca133b15e2f3e830bdbe6c4"
        },
        {
          "alg" : "SHA3-384",
          "content" : "44ca97514a2e34b5bf3de9b5d45c8e871f6eee517db7f3c4b4476eb3e8dfe9a9d8760f3181114708288c373727b42475"
        },
        {
          "alg" : "SHA3-256",
          "content" : "a0a47001d3a293f129ffc21f17f575a9d23ce5b88b440e651e4cd01edd0cc421"
        },
        {
          "alg" : "SHA3-512",
          "content" : "483dae23d6827a105d17847c8c813527f19042b65c4d09635dfc4bfd25990fe3ba2a997540460fd5b1d72ca3add9a38ca8b32004680764db972a9bb62f7f68d8"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-cli/commons-cli@1.5.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-cli/"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/CLI"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-cli.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-cli/commons-cli@1.5.0?type=jar"
    },
    {
      "publisher" : "Shigeru Chiba, www.javassist.org",
      "group" : "org.javassist",
      "name" : "javassist",
      "version" : "3.24.0-GA",
      "description" : "Javassist (JAVA programming ASSISTant) makes Java bytecode manipulation simple. It is a class library for editing bytecodes in Java.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "23fd22d0d089ddfac567a39ce0cb1a91"
        },
        {
          "alg" : "SHA-1",
          "content" : "d7466fc2e3af7c023e95c510f06448ad29b225b3"
        },
        {
          "alg" : "SHA-256",
          "content" : "aba81efa678b621203fb89aeff81d6f126f7a9dd709401e5609c42976684ae23"
        },
        {
          "alg" : "SHA-512",
          "content" : "e57dad74a3edef837ece841d06e4a7c96ffecab8fbcba56fe5f7eccd662f0c0d757880a6073793a8c75ad7a0a1d146346b75cdbfe4fd8a271048a54446e5d1a2"
        },
        {
          "alg" : "SHA-384",
          "content" : "4867afdb7522b3dbfa10a51264ac6c15a2a8083d16c8dbef318275d24687768f35130b1c17d8407ca8ecf855abd83dff"
        },
        {
          "alg" : "SHA3-384",
          "content" : "a52be891987d4fc7d319e6417e0cd9a28f189d8623b803d72b5429e118da73b9937899231825e793d37b434d7522d283"
        },
        {
          "alg" : "SHA3-256",
          "content" : "0cf8db7d2a5f7e1a70827538cb4b0b446fcc239f05ca55d9bf8f2a50f1e08af3"
        },
        {
          "alg" : "SHA3-512",
          "content" : "ed9675f9f070203801eb762092ac99636d376b7ef563f99508283006a65a0d2dfce38e1ba7ff2ccfebcede0376ba0724b76b459ca112477234aed8208807f785"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MPL-1.1"
          }
        },
        {
          "license" : {
            "id" : "LGPL-2.1-only"
          }
        },
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.javassist/javassist@3.24.0-GA?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.javassist.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.jboss.org/nexus/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://jira.jboss.org/jira/browse/JASSIST/"
        },
        {
          "type" : "vcs",
          "url" : "scm:git:git@github.com:jboss-javassist/javassist.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.javassist/javassist@3.24.0-GA?type=jar"
    },
    {
      "publisher" : "xerial.org",
      "group" : "org.xerial.snappy",
      "name" : "snappy-java",
      "version" : "1.1.10.4",
      "description" : "snappy-java: A fast compression/decompression library",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "d1d3b91e925c46a1a0f68b87298bafe8"
        },
        {
          "alg" : "SHA-1",
          "content" : "50d0390056017158bdc75c063efd5c2a898d5f0c"
        },
        {
          "alg" : "SHA-256",
          "content" : "55b30c94e5c4cc2d4b6976916098d0678a8a6cc7427fa8c875621bd94e731ac8"
        },
        {
          "alg" : "SHA-512",
          "content" : "9e52bad4eaa0d0a2e0083cdd3433d84c4bb44c4d3f0314a48c3d6eacbb64d0f4fb2d71197944115618a598eb4a4941c13af2a9ec676b003fb3462ddac58bbe41"
        },
        {
          "alg" : "SHA-384",
          "content" : "9539e8eb2dea244f07a7216db38970e3f336b5dc9d132cbe54e201c818dba3e02a1fc467b4529a18eca7127f86d742dd"
        },
        {
          "alg" : "SHA3-384",
          "content" : "d5d5ef5d8b050f200ae29855a4b6f5e278215d0a97a69d3653dc1aa716f9847b3c305312a3c994d46721615ba02fc7c8"
        },
        {
          "alg" : "SHA3-256",
          "content" : "bbbb3ff43a24094bf2c77dd8c8f94b06d62d158da0d2c3399de3a2993df9986e"
        },
        {
          "alg" : "SHA3-512",
          "content" : "de2aa7e7fada466f24ccda07123e2877446733dd48e4b914d25b0d296f677e17a24f182a0e9216e77b261143b774ccaadcfd2854dde1bf36cb2c6db6cdf78b3c"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.xerial.snappy/snappy-java@1.1.10.4?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/xerial/snappy-java"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/xerial/snappy-java"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.xerial.snappy/snappy-java@1.1.10.4?type=jar"
    },
    {
      "group" : "tools.profiler",
      "name" : "async-profiler",
      "version" : "2.9",
      "description" : "Low overhead sampling profiler for Java",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "4df6477a255b88e99f2ed4daa3c713cc"
        },
        {
          "alg" : "SHA-1",
          "content" : "4ed20e2a4640ee672e7cf23b1512dbdeb9a4b7e6"
        },
        {
          "alg" : "SHA-256",
          "content" : "6c4e993c28cf2882964cac82a0f96e81a325840043884526565017b2f62c5ba4"
        },
        {
          "alg" : "SHA-512",
          "content" : "60ba593a0cf529397e73e38ef71bc2e5def44f1111a60f40a724ac3472ef7afe92e02a61b0ad18c373122cd92216f49268d335e1150dc3a99ff2431c598aeb5c"
        },
        {
          "alg" : "SHA-384",
          "content" : "65107ddcd2a06b69ac4cdb9bd93452045c4e08b843826666a890816abe0486966599cf6a4b07ff87c5d95e86551bb115"
        },
        {
          "alg" : "SHA3-384",
          "content" : "4989b467a4791464d50c51782ccc60547bfc8105aebc0764656c67405bbd7d023a9d405a1fd864f86dbd186af8624928"
        },
        {
          "alg" : "SHA3-256",
          "content" : "225998977421a87839be6c09f49f9ebd972b063a65f53d374e61fc3d68416ca4"
        },
        {
          "alg" : "SHA3-512",
          "content" : "723c0651f61ae6a119624b11bc9d3959ae44de0bcef51f0a341c5d7ebdc6a0e677f3c43399db9a4a657334f46a1092ee55d45f92344b7e31e6e26669ffe41823"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/tools.profiler/async-profiler@2.9?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://profiler.tools"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/jvm-profiling-tools/async-profiler"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/tools.profiler/async-profiler@2.9?type=jar"
    },
    {
      "group" : "org.lz4",
      "name" : "lz4-java",
      "version" : "1.8.0",
      "description" : "Java ports and bindings of the LZ4 compression algorithm and the xxHash hashing algorithm",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "936a927700aa8fc3b75d21d7571171f6"
        },
        {
          "alg" : "SHA-1",
          "content" : "4b986a99445e49ea5fbf5d149c4b63f6ed6c6780"
        },
        {
          "alg" : "SHA-256",
          "content" : "d74a3334fb35195009b338a951f918203d6bbca3d1d359033dc33edd1cadc9ef"
        },
        {
          "alg" : "SHA-512",
          "content" : "98d59086a6021ca571d9c1d64b715e43044c730e1ac563f514c40cf44302615d30378b6d5cc69990446522de6260dc8e7b303e3990a3139dc326d058dfb6dbd9"
        },
        {
          "alg" : "SHA-384",
          "content" : "8e3f2acdbb41a00c4d9cc5f328e63fb626ac7c6c84e1bf9502e2fcc76a591b2b819b2d27b29925ff986b95c297b30e2c"
        },
        {
          "alg" : "SHA3-384",
          "content" : "ec0d6a00760d0a4ecba13a41785d6ae57a64552b1687eaa3e292b3054bb1348e49ab8a938197ff126f9218c6cb96ee1c"
        },
        {
          "alg" : "SHA3-256",
          "content" : "7be684c102891105f66d378b61ea1297a392c1618b5aebf7e0b281f55217c206"
        },
        {
          "alg" : "SHA3-512",
          "content" : "0b2294570ea2bfbb50ced21dfa4bad956467ca447e9ab2dd602a3478371bcd0e9f13d2dff74d06827a28882409612cdde00bd91267be05bd3510c68268bf3166"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.lz4/lz4-java@1.8.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/lz4/lz4-java"
        },
        {
          "type" : "vcs",
          "url" : "git://github.com/lz4/lz4-java.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.lz4/lz4-java@1.8.0?type=jar"
    },
    {
      "group" : "io.confluent.flink",
      "name" : "flink-runtime",
      "version" : "1.19.3-cp1",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "e31ab530734728ded6a05e26b7081ba2"
        },
        {
          "alg" : "SHA-1",
          "content" : "5f2ce4702f7d4de9f6835adb66bb893b169da9af"
        },
        {
          "alg" : "SHA-256",
          "content" : "49b6ec2d570b5b705a4433b17bd1291f94cb679d13884909828e5f4ef995f8ac"
        },
        {
          "alg" : "SHA-512",
          "content" : "d8feeded8ad370960f187bf96e3220344ea93532a35b66e41fe83370464b1461f1e3569b511dd144ce13ad831f23dce0d3e2ce57b696a61d97906b65517a4797"
        },
        {
          "alg" : "SHA-384",
          "content" : "19fd7f8320415ecac7f7147587252c159b7cf8f67e00b0737e5758ec5de0d1a71073e8877009dbe213129134ffa88aaa"
        },
        {
          "alg" : "SHA3-384",
          "content" : "7a25fecc165e29de8351e41d68999e7e878a8ca76c5abf99a058e523a35cfb62ea11828e01dea453321a20448aa922d9"
        },
        {
          "alg" : "SHA3-256",
          "content" : "f25a5907d965bd920f6ff8fa02733103717dc0f3d127d57758a4403a5e928316"
        },
        {
          "alg" : "SHA3-512",
          "content" : "c8a3cb44e330da431fd3622286c63dc88a0ebf9d0963b7fbc32edb0ba6c17cf791332d0cbdc6c41f4bb9153f422e1c11f7171034e4eb7bb609b6e4f647308406"
        }
      ],
      "purl" : "pkg:maven/io.confluent.flink/flink-runtime@1.19.3-cp1?classifier=tests&type=test-jar",
      "type" : "library",
      "bom-ref" : "pkg:maven/io.confluent.flink/flink-runtime@1.19.3-cp1?classifier=tests&type=test-jar"
    },
    {
      "group" : "io.confluent.flink",
      "name" : "flink-core",
      "version" : "1.19.3-cp1",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "215c0356742e6171f060b702f9067df7"
        },
        {
          "alg" : "SHA-1",
          "content" : "a2778758d29af2aa2f52a86ee6b866ac78cd9dd7"
        },
        {
          "alg" : "SHA-256",
          "content" : "8f95898de69bbb415189984386b4fcd3ed3b4db2f47916b0b8fa4eeaec328bf8"
        },
        {
          "alg" : "SHA-512",
          "content" : "a6c4afa702d3d1603c9601a3753e977fd91f7e88cd3de726dd8ad80fb7d2a7133a4e6848b5f0173ba358ac50178ed17242bd5fce99d202f01db975507391faf3"
        },
        {
          "alg" : "SHA-384",
          "content" : "c449a9d146399f278e88113aec19b741f62de5e15d459e528d2879d00be5546a7265e7586fa23cb2fef12d797c63c28f"
        },
        {
          "alg" : "SHA3-384",
          "content" : "430f56c90be926fcaf27ba080db1f8d8903a05c68afdb4243c2c8ae51f7ed49077ab48690a6272248f8c7e6e855c6221"
        },
        {
          "alg" : "SHA3-256",
          "content" : "c220faa2a0749761f42a3597b4043521f7d05757bcd41cd25eac68a0098f6b4c"
        },
        {
          "alg" : "SHA3-512",
          "content" : "1affd554f6b2204b971b3f291983783024fd371c9ade44f204361c0b6f3a41133ad6064e2e3cbebad47cd49645072d1ddbc336030c3bc25bb5230d43ec695bd8"
        }
      ],
      "purl" : "pkg:maven/io.confluent.flink/flink-core@1.19.3-cp1?classifier=tests&type=test-jar",
      "type" : "library",
      "bom-ref" : "pkg:maven/io.confluent.flink/flink-core@1.19.3-cp1?classifier=tests&type=test-jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "io.confluent.flink",
      "name" : "flink-annotations",
      "version" : "1.19.3-cp1",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "adcb84bf7392324ed165a5edd19e9e2c"
        },
        {
          "alg" : "SHA-1",
          "content" : "cd055e955e093bb3c639fe23bd0315a3d1174da5"
        },
        {
          "alg" : "SHA-256",
          "content" : "e5b45a074103b9d601c5af19c5404540a66857e0971c6d0b56f17642af9b0645"
        },
        {
          "alg" : "SHA-512",
          "content" : "5f6a0a2fd19624cd7c1ae5b75d365d84acb55b1e81edd7afa358ce54890da684ed4cb1fc107da72f195b0194787a965af6e29e5ed1865ace9ffd58be0b923ab8"
        },
        {
          "alg" : "SHA-384",
          "content" : "d8c4e5c75ab17d8ec19d71c33b0e73591c117cb9c8180d4ea095c8447d9c1bb2d898661d510bb1b0e50af220f1608d3f"
        },
        {
          "alg" : "SHA3-384",
          "content" : "6ebe3be81c137efb2a0a490f7f21f524ffa284f365b2ae7490f84f1fd353286fed7d6e0f5e6365f3cdd8b2aa805994ff"
        },
        {
          "alg" : "SHA3-256",
          "content" : "bb8cef1852a4ab67ef5036e9bf88168772ced40ca9a3bdf81a0ca5c067abae69"
        },
        {
          "alg" : "SHA3-512",
          "content" : "c01c585aa3b1bb96005bec9ca9c2eeec7b2666be9a3c95d89e33c8a700fa1c34e9aa7d98947c9ae6fd1615417a551db3b62f2f709b0c6f95fba59d654fa6d0cd"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.confluent.flink/flink-annotations@1.19.3-cp1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://flink.apache.org/flink-annotations"
        },
        {
          "type" : "distribution",
          "url" : "s3://cp-flink-staging-654654529379-us-west-2/maven-staging/85e1bccaeab3902aaac2d25e0400b3674b1c6169"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink/flink-annotations"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.confluent.flink/flink-annotations@1.19.3-cp1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "io.confluent.flink",
      "name" : "flink-metrics-core",
      "version" : "1.19.3-cp1",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "76d234cb6c6486279ae926a253f77967"
        },
        {
          "alg" : "SHA-1",
          "content" : "bf92181ac16dfb4a2944aa20010f1c14e4009a97"
        },
        {
          "alg" : "SHA-256",
          "content" : "9f816c33f6ec71f90c658a34938894a2c152d45c89250d7b487ea3a1f634bef1"
        },
        {
          "alg" : "SHA-512",
          "content" : "ee8622d08b7ad6f8baf8cbe70f234be433e265bff3a10c25f2b41b16c34a88f4398b86ad594649345a7a92a690262c12fb0704023d4a4212b2c49c2e562df67d"
        },
        {
          "alg" : "SHA-384",
          "content" : "449deb8b2d9a29903afdb798d5edd655669c247a91173fe9009432d891361cbab307bae1c8594d36a1cd5b764c57c461"
        },
        {
          "alg" : "SHA3-384",
          "content" : "79dc94e74a123d4b95bc16e5a99448d7588f68df07f01b09fd64261c788903c62d3fc6a242a35680a5aff1d12b70cf9a"
        },
        {
          "alg" : "SHA3-256",
          "content" : "54376c7459cdd8163a08da89042717abedece49427e5fdfdd5533d3fe86d46b4"
        },
        {
          "alg" : "SHA3-512",
          "content" : "1ad73bbdc4f575a4d7feaa9015a6259780cad35e3343d8b9d6926b2baeffafe7bd094001d9ae8cce09e54f59a3e4e98ea6111eea4be62ddb6af45ddfd4415a6f"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.confluent.flink/flink-metrics-core@1.19.3-cp1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://flink.apache.org/flink-metrics/flink-metrics-core"
        },
        {
          "type" : "distribution",
          "url" : "s3://cp-flink-staging-654654529379-us-west-2/maven-staging/85e1bccaeab3902aaac2d25e0400b3674b1c6169"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink/flink-metrics/flink-metrics-core"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.confluent.flink/flink-metrics-core@1.19.3-cp1?type=jar"
    },
    {
      "group" : "org.snakeyaml",
      "name" : "snakeyaml-engine",
      "version" : "2.6",
      "description" : "Core YAML 1.2 parser and emitter for Java",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "719bcfb9f917992d0a99a6f7106d8466"
        },
        {
          "alg" : "SHA-1",
          "content" : "235a7e571b33eda1a81e0f73a3173ef95dd020e5"
        },
        {
          "alg" : "SHA-256",
          "content" : "2652199af40c9aa2f1782400d2dfbbf4e5226208c4e05ddd4059c3d6d9cd1505"
        },
        {
          "alg" : "SHA-512",
          "content" : "c3b5e87ce323b37bcd9e65d060157ebb26d116b5dac30c6eaa185b30aa24c0be8dfd0ad604a9a12ce7010acadee54a9cea9f065cd2f434eeaed7bccce2e14a7d"
        },
        {
          "alg" : "SHA-384",
          "content" : "edfc3c9a95cc2fa524a322f20ec034ec16b3fad950a58bfd1ed774eaaab946304cddc5e9ea4e117a899ec568ba7fa620"
        },
        {
          "alg" : "SHA3-384",
          "content" : "63b9e0ed448431a1d4b34a4b0b97b65c2c7be6ef46f1ce3b10191373e3339422f9c06bc846ae861a982c3c3618abd9c6"
        },
        {
          "alg" : "SHA3-256",
          "content" : "19ce75167267903be79122e149ede2916c3e07bab0658db21ab40864e8c920cd"
        },
        {
          "alg" : "SHA3-512",
          "content" : "7777f37097a6951dafe18fb038d087e7fe0924bfb2a10c66a76a57d95aa65341d4b674c6ff1d9d453c436ffcb50e281c2bedc854ce687fefc30c9595b7352c8a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.snakeyaml/snakeyaml-engine@2.6?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://bitbucket.org/snakeyaml/snakeyaml-engine"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://bitbucket.org/snakeyaml/snakeyaml-engine/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://bitbucket.org/snakeyaml/snakeyaml-engine/src"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.snakeyaml/snakeyaml-engine@2.6?type=jar"
    },
    {
      "group" : "com.esotericsoftware.kryo",
      "name" : "kryo",
      "version" : "2.24.0",
      "description" : "Fast, efficient Java serialization",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "6cf0fa5b5d4f6b8226fd4a4bfb7532b8"
        },
        {
          "alg" : "SHA-1",
          "content" : "0c6b206e80cfd97e66a1364003724491c757b92f"
        },
        {
          "alg" : "SHA-256",
          "content" : "7e56b32c635058f9aa2820f88919ab702d029cbcd15285da9992e36cc0ae52f2"
        },
        {
          "alg" : "SHA-512",
          "content" : "a4c6ce768528a03c219cc6a41b22293f78e433c849c90391b64dda3f2376fd79951a89c5f4e6701bcbcb6eee9abffe2390cfb12dba3b885e4a3d411a26b78f40"
        },
        {
          "alg" : "SHA-384",
          "content" : "678ad1b7f4d99910b8ff44a6c8f78ccae91f823161ce23de39077397352919b7257e1e6e0dea90900be973291ea19282"
        },
        {
          "alg" : "SHA3-384",
          "content" : "671fc6aa9905f8131482e1d0f3fe26126562b13777893d51a66d0f84fc6f2aa3f13947e488ffba8f09c31a2cc0e9758a"
        },
        {
          "alg" : "SHA3-256",
          "content" : "46e89d8f12cbead0fe29ad707d5dba96e880dacce2a6b374ac4bf1ced9f36a79"
        },
        {
          "alg" : "SHA3-512",
          "content" : "c7cde437eef8343eccd4c5ecb8de5683529e3d4d8262e8cd1f7b7d0df9c632253b979737fd1b486314ec2728aee3a3782dee5d2032621485db4aa3b2a8262741"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/com.esotericsoftware.kryo/kryo@2.24.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/EsotericSoftware/kryo"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/EsotericSoftware/kryo"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.esotericsoftware.kryo/kryo@2.24.0?type=jar"
    },
    {
      "group" : "com.esotericsoftware.minlog",
      "name" : "minlog",
      "version" : "1.2",
      "description" : "Minimal overhead Java logging",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f7cfbdf63b67df0bbfa4c7cb260885bc"
        },
        {
          "alg" : "SHA-1",
          "content" : "59bfcd171d82f9981a5e242b9e840191f650e209"
        },
        {
          "alg" : "SHA-256",
          "content" : "a678cb1aa8f5d03d901c992c75741841d98a9bc3d55dad02e84d65315c4e60f2"
        },
        {
          "alg" : "SHA-512",
          "content" : "7b4082766ad740d86708783f3b08780ed72dd18062aa9ba422c4b9016b332d2334ae511f50ef7d89e4eedbdac5cebc51ab6ddaf4d1eea857a3250eb5962f0d08"
        },
        {
          "alg" : "SHA-384",
          "content" : "932a282a9c06864001f8212199e4be05543609adbd985c5f4517ee6eba734acd3fd8812213bc0c98af264637cbf9c78d"
        },
        {
          "alg" : "SHA3-384",
          "content" : "f36e9f494611c85f59febfef9ce93fc68f1f17db881400456204c1f099e623e334d2f10b41018392877c8af13de7f59a"
        },
        {
          "alg" : "SHA3-256",
          "content" : "37422ef85dce86abd8b14b4c9f7ad77261d728a472126c8eca38f356c98da395"
        },
        {
          "alg" : "SHA3-512",
          "content" : "74ba47271899706a284e942482ff41649ffd93e57a29320732e57864c47f3f0431377130ca7afb5e64cc6b68d4e5a5cdfc38027966cda4b5e512e3ce02bd8a99"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/com.esotericsoftware.minlog/minlog@1.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://code.google.com/p/minlog/"
        },
        {
          "type" : "vcs",
          "url" : "http://minlog.googlecode.com/svn/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.esotericsoftware.minlog/minlog@1.2?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-collections",
      "name" : "commons-collections",
      "version" : "3.2.2",
      "description" : "Types that extend and augment the Java Collections Framework.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f54a8510f834a1a57166970bfc982e94"
        },
        {
          "alg" : "SHA-1",
          "content" : "8ad72fe39fa8c91eaaf12aadb21e0c3661fe26d5"
        },
        {
          "alg" : "SHA-256",
          "content" : "eeeae917917144a68a741d4c0dff66aa5c5c5fd85593ff217bced3fc8ca783b8"
        },
        {
          "alg" : "SHA-512",
          "content" : "51c72f9aca7726f3c387095e66be85a6df97c74b00a25434b89188c1b8eab6e2b55accf7b9bd412430d22bd09324dec076e300b3d1fa39fccad471f0f2a3da16"
        },
        {
          "alg" : "SHA-384",
          "content" : "dd4e99b3314bd3c1a1ee26296615d9e44dadf7a1f8a7bbba44fb95121803d331e36d4cca4260e7609af78a47ba3e4073"
        },
        {
          "alg" : "SHA3-384",
          "content" : "8ce03528e4a6e95c44283b56eca87e6a6d3bf1363411a55b538f4f9110cf7470581ea5c73925e877ddab08dba0603f40"
        },
        {
          "alg" : "SHA3-256",
          "content" : "fd3d6134b5f07077b82ccf93d148dacf7c4ce5c971209510edd0e77e3e38c19e"
        },
        {
          "alg" : "SHA3-512",
          "content" : "c2a523916fb7c7d55a05d5e3d9e9b33000733f4b20a71be174e4e093e3f06ea78ad831edd1505527da7388105f8647efb7d5666ba852c90b4e2d5bb74256efbc"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-collections/commons-collections@3.2.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://commons.apache.org/collections/"
        },
        {
          "type" : "build-system",
          "url" : "https://continuum-ci.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/COLLECTIONS"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/viewvc/commons/proper/collections/trunk"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-collections/commons-collections@3.2.2?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-compress",
      "version" : "1.26.0",
      "description" : "Apache Commons Compress defines an API for working with compression and archive formats. These include bzip2, gzip, pack200, LZMA, XZ, Snappy, traditional Unix Compress, DEFLATE, DEFLATE64, LZ4, Brotli, Zstandard and ar, cpio, jar, tar, zip, dump, 7z, arj.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "cbc0bb8eca12b747ca21bf998d736e60"
        },
        {
          "alg" : "SHA-1",
          "content" : "659feffdd12280201c8aacb8f7be94f9a883c824"
        },
        {
          "alg" : "SHA-256",
          "content" : "051aceb8bbcc62d0f5b2b8ac72c53767f9c59bfbd050151e65bef6f51c8ed9c9"
        },
        {
          "alg" : "SHA-512",
          "content" : "acbeaa2909b809cd561e7156df18340d96abacb179325622d73bdd6b82cb9b387d6fcb1a44d8195aad4e786da299289e17598a1d337b7c7d1c0bc610cc128714"
        },
        {
          "alg" : "SHA-384",
          "content" : "052d4d0cd1929c4299dd9d37dd36eaea6ed2be6b04d6d83a94f8608a6d1138aa81f7a34f25113ac267e7ba25ce948c9a"
        },
        {
          "alg" : "SHA3-384",
          "content" : "8b0bf441e8ce793fb6513bc07551cc48ab4507696c18e6037b0fcf35bc4e1eb3e44ed962e2d3765c86d4d912770aa53e"
        },
        {
          "alg" : "SHA3-256",
          "content" : "e441768e06092053f4703844ec0c8f2b437e06e7c190d48fec9d7682beb94c40"
        },
        {
          "alg" : "SHA3-512",
          "content" : "5984f9f08f83789555677f6800f25fa8e80a9eb2e4d46b5fb117b8efc24753644fa103a2f6b619827661a41677991bc827965172ef25f1313d8a59154e615e8d"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-compress@1.26.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-compress/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-parent/actions"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/COMPRESS"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-compress.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-compress@1.26.0?type=jar"
    },
    {
      "group" : "io.confluent.flink",
      "name" : "flink-rpc-akka-loader",
      "version" : "1.19.3-cp1",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "0c1396d381e1103f966aade1c104b83d"
        },
        {
          "alg" : "SHA-1",
          "content" : "0ea89769520ca787b1e4b2185dc7e8337095d93d"
        },
        {
          "alg" : "SHA-256",
          "content" : "746a757d4d0268307201046537c0477fe70418618f318c9cb05c569193e58a91"
        },
        {
          "alg" : "SHA-512",
          "content" : "b3c1290ec3e04b97239b5c80a0f6c7f8f3bbe55f5ad47f3cd0c25386e0bbb2b8ae1ca7ec4a04c4aad5bdc04d15182e66c7611a42fc8846022f087f3fd68e8f7c"
        },
        {
          "alg" : "SHA-384",
          "content" : "6b35f04c5eb1d46b1554e2b9a424979b7fe2a5e0c7e3a721de4ab6b22d2d875167a70a2ac5f4b7854d8d1580ebee84de"
        },
        {
          "alg" : "SHA3-384",
          "content" : "e11fc3eba2b7ab63a4a65efdb13625fe5466568c6beffd3fe8bcd2e7fa7e171661d47b3294c136fd2ccc34b08546b962"
        },
        {
          "alg" : "SHA3-256",
          "content" : "7e7e82ed8c3e575214fc4a0e2d4660ab33ef312cfb0250393853a2e02f379c45"
        },
        {
          "alg" : "SHA3-512",
          "content" : "9c1573ecdac7769ad3ec5135b07ad472dd3507768bf055c33709e923019933c06353dc07f68f8193c001f611ea1115df5d2ebd916e85ec9c7513316e718f1395"
        }
      ],
      "purl" : "pkg:maven/io.confluent.flink/flink-rpc-akka-loader@1.19.3-cp1?classifier=tests&type=test-jar",
      "type" : "library",
      "bom-ref" : "pkg:maven/io.confluent.flink/flink-rpc-akka-loader@1.19.3-cp1?classifier=tests&type=test-jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "io.confluent.flink",
      "name" : "flink-clients",
      "version" : "1.19.3-cp1",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "584d57f319e8ff44b6b63dde1c39466b"
        },
        {
          "alg" : "SHA-1",
          "content" : "c1ba7bee3820c7942ad5c246149c47fedc530944"
        },
        {
          "alg" : "SHA-256",
          "content" : "3dff974f0426e87f39473f328d93a764ee830f5dfeab3cc1082643c98bbe9562"
        },
        {
          "alg" : "SHA-512",
          "content" : "5f92e15d6df9e606b42e995d1e4b445384691894ec93460f6e63d5da628f073c29fb9f60bd6b0fec5ef2fd1122f88d56107553d2b941a607e7740c8d88f4d6e5"
        },
        {
          "alg" : "SHA-384",
          "content" : "794e46c0e69f0d901b183044994e134327a0ef876c00f2bf4862c3205c466f63463cb22a536bb07471834776532c7e47"
        },
        {
          "alg" : "SHA3-384",
          "content" : "674f557c2bd56bd6cf73968797b9a0df53513d90a3128c2e864edb3589c8e8fbc4797cebce6505f49f6fbaa1f8aba4cd"
        },
        {
          "alg" : "SHA3-256",
          "content" : "eb93e58a6e5ed777ef738a3f9fe144236f56c752a729c65e00d24683e1ea6647"
        },
        {
          "alg" : "SHA3-512",
          "content" : "ca3cfacbcb675197c3b3005d3a9d87ed0fb08575ad5e5b4c7412c90e92d64675b3eb9c4bd8592ceebf41ae4a66b95d845087649749c5299091074ece6c1d9c67"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.confluent.flink/flink-clients@1.19.3-cp1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://flink.apache.org/flink-clients"
        },
        {
          "type" : "distribution",
          "url" : "s3://cp-flink-staging-654654529379-us-west-2/maven-staging/85e1bccaeab3902aaac2d25e0400b3674b1c6169"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink/flink-clients"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.confluent.flink/flink-clients@1.19.3-cp1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "io.confluent.flink",
      "name" : "flink-optimizer",
      "version" : "1.19.3-cp1",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "68f476a8311ddc1b84985ff2364bcb46"
        },
        {
          "alg" : "SHA-1",
          "content" : "69fa3c14237b608d158fdf32d3f6ccdc76bc5277"
        },
        {
          "alg" : "SHA-256",
          "content" : "99488b303110931ceaa7db9cd70411bc68962a8a8f3f17fe6726687101ea0c0f"
        },
        {
          "alg" : "SHA-512",
          "content" : "047c8e7a80ee0075c7592424e580d9e77e59dc9b5f34560ffaee71fd60bf234fa5ddcbe7f326648f657d02d188e806b964b54fc4bca0b87aa709a258611f7581"
        },
        {
          "alg" : "SHA-384",
          "content" : "23a361dc25038efb96a9223187be1af080db6ef940f78e1d192b5e240e7e45f1c2202d1ae845e37f9615fd4f41d164bd"
        },
        {
          "alg" : "SHA3-384",
          "content" : "9d8ee76743250654110f2546fbf40e2ed43778e91acecc2df85716863a583662aa84d8e1ac23c30b65bea2a25e093e97"
        },
        {
          "alg" : "SHA3-256",
          "content" : "c3793e859963f8546e96c2e953d231e06bd2f59ae89fb8ee61765c47eebc642c"
        },
        {
          "alg" : "SHA3-512",
          "content" : "74097faa3713231a296dfed879d76a7b4cc242fec5d13b08ebff604f9736aede1960913d28134c5264130d3785fe909a4fd4d9d58fcc50a52457e2c2c8afefa6"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.confluent.flink/flink-optimizer@1.19.3-cp1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://flink.apache.org/flink-optimizer"
        },
        {
          "type" : "distribution",
          "url" : "s3://cp-flink-staging-654654529379-us-west-2/maven-staging/85e1bccaeab3902aaac2d25e0400b3674b1c6169"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink/flink-optimizer"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.confluent.flink/flink-optimizer@1.19.3-cp1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "io.confluent.flink",
      "name" : "flink-streaming-java",
      "version" : "1.19.3-cp1",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "3ac758ac3569bc82e30a1ff44d57a923"
        },
        {
          "alg" : "SHA-1",
          "content" : "18d4281f9c9afef6310b042fc7b45ecd0e51975e"
        },
        {
          "alg" : "SHA-256",
          "content" : "8f10a913e122ce3f7a2183058d916fc77f3c11743e0d600658dfb02f70b3f86d"
        },
        {
          "alg" : "SHA-512",
          "content" : "3f82e4b5ead0cc10133d4a2f92744df10f4257ce1b68e32ca77296d62e6647e427e2d9323f335283e669a776a6f4a94adb53c86f6028b8f7444847bca0349604"
        },
        {
          "alg" : "SHA-384",
          "content" : "d32951597eb1ac82e6b44b923521c96386bd91ba3da53c302bb42b9d8bfeb6854f71ee77e38147e93fb8936fdfcfe279"
        },
        {
          "alg" : "SHA3-384",
          "content" : "80293dd51f446e3cefe1d66e1266b06d956929a0c1f88f99b645e2511130ed9be777a7fa26cb1670b380be1b015f6a3a"
        },
        {
          "alg" : "SHA3-256",
          "content" : "51503559649b6ada9a6545139351bccda0fa67e2c68dc5155cec734e0f2ba7ed"
        },
        {
          "alg" : "SHA3-512",
          "content" : "aa93e56e58b186eec46de0e1049039b95ec93ee341735cf965392c0a7603877c7b4a5ce962919e2b24e93247fcdd01c3aa18fffcd36d4dc30dea2033842f70cd"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.confluent.flink/flink-streaming-java@1.19.3-cp1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://flink.apache.org/flink-streaming-java"
        },
        {
          "type" : "distribution",
          "url" : "s3://cp-flink-staging-654654529379-us-west-2/maven-staging/85e1bccaeab3902aaac2d25e0400b3674b1c6169"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink/flink-streaming-java"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.confluent.flink/flink-streaming-java@1.19.3-cp1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "io.confluent.flink",
      "name" : "flink-file-sink-common",
      "version" : "1.19.3-cp1",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "4a1823346e432f72e4cb03c291c4cdbc"
        },
        {
          "alg" : "SHA-1",
          "content" : "7976535be6fca08c6e3632af5b573f3d200ed24e"
        },
        {
          "alg" : "SHA-256",
          "content" : "c9116dc04984379a512c3d25c242ad59181522fc29273a78beeadccc1a4dd910"
        },
        {
          "alg" : "SHA-512",
          "content" : "8801ab3da59710f9720dc9c4951074e94be98e06ce59ef96067551334a8abc3a15cc55a556b67b1819644f646ce74f2271801f14c234484f7eeaee2a66e89ca4"
        },
        {
          "alg" : "SHA-384",
          "content" : "f5b74e13b3979dd1e61c546b1ce0d2289a5c84af12c9ed9f04cff02152d88643cbcf9e786bdfb282fb2254023da65813"
        },
        {
          "alg" : "SHA3-384",
          "content" : "19ccb8d69efaa21e8115b62802d57e7f713e505ffbb895c67bdd40ef54881cbd0ca692e6285e5b553f8440fea499d8ec"
        },
        {
          "alg" : "SHA3-256",
          "content" : "3ea2ed12018789b0d9fa1a03c63916204b7ed53d071941d7364a5211d9c11cce"
        },
        {
          "alg" : "SHA3-512",
          "content" : "9047ace51460aea999f8d417a7ac8ee8ff15c54de4305efff73753f5bfc5b6e1d2ac467a01399b1d2fbb81a1de20a9b7920986a3fc6c5c424b9dbda20dd35ad8"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.confluent.flink/flink-file-sink-common@1.19.3-cp1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://flink.apache.org/flink-connectors/flink-file-sink-common"
        },
        {
          "type" : "distribution",
          "url" : "s3://cp-flink-staging-654654529379-us-west-2/maven-staging/85e1bccaeab3902aaac2d25e0400b3674b1c6169"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink/flink-connectors/flink-file-sink-common"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.confluent.flink/flink-file-sink-common@1.19.3-cp1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-math3",
      "version" : "3.6.1",
      "description" : "The Apache Commons Math project is a library of lightweight, self-contained mathematics and statistics components addressing the most common practical problems not immediately available in the Java programming language or commons-lang.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "5b730d97e4e6368069de1983937c508e"
        },
        {
          "alg" : "SHA-1",
          "content" : "e4ba98f1d4b3c80ec46392f25e094a6a2e58fcbf"
        },
        {
          "alg" : "SHA-256",
          "content" : "1e56d7b058d28b65abd256b8458e3885b674c1d588fa43cd7d1cbb9c7ef2b308"
        },
        {
          "alg" : "SHA-512",
          "content" : "8bc2438b3b4d9a6be4a47a58410b2d4d0e56e05787ab24badab8cbc9075d61857e8d2f0bffedad33f18f8a356541d00f80a8597b5dedb995be8480d693d03226"
        },
        {
          "alg" : "SHA-384",
          "content" : "95d1186d9ca06a3ea2e6437ddec3a55698e2493d3e72f6f554746b74fa929892bd71a2ab501a4e7b1ce56b7cd64e7ab4"
        },
        {
          "alg" : "SHA3-384",
          "content" : "f85bb3e46a00fc4940a3be1331301302b0eb728e2d1fe2c1842d4761e5a0bc7a420c0c705ae60250ca1c7b03d3694b9e"
        },
        {
          "alg" : "SHA3-256",
          "content" : "919c15ae4b1aef2a58aa6ea4b700bc5562e78dbc382f3393169425ca91ad368c"
        },
        {
          "alg" : "SHA3-512",
          "content" : "dbe54d586c898cdbd7df6c31c131ca3525db17fcea5c7f5da8cbfe617e2afc667289290c76771ec5c9567a56fb2b177b0a31d67abcc656410c90287da4d88999"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-math3@3.6.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://commons.apache.org/proper/commons-math/"
        },
        {
          "type" : "build-system",
          "url" : "https://continuum-ci.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/MATH"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://git-wip-us.apache.org/repos/asf?p=commons-math.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-math3@3.6.1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "io.confluent.flink",
      "name" : "flink-connector-datagen",
      "version" : "1.19.3-cp1",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "3eb0e92076920b95aaf7c204be36502c"
        },
        {
          "alg" : "SHA-1",
          "content" : "c6e702ad943928a64f3b0051422aacb1b70187ab"
        },
        {
          "alg" : "SHA-256",
          "content" : "8fbd01fd360332c7c34ff49655b4d4d97b6fbdefc7b38a3c8e7fb15548b05180"
        },
        {
          "alg" : "SHA-512",
          "content" : "08ec355b0888b5fc29f107614db513b15e98b84b64092b4b6649a844c77f2b69125a8adf9f9dded4b6055002906bdcc5d47b225929a9d78cbb1d0ba00014239d"
        },
        {
          "alg" : "SHA-384",
          "content" : "4c285368c6f1d7f021d70b2290f441956f1e479d9d50c39a8a28e9d23fb6029dedb0909a5a70817982c8451aeadca41b"
        },
        {
          "alg" : "SHA3-384",
          "content" : "827737cdd64e183523ceba6a8bf68226f1bb3e6dcf8d78f85e825348e85de42282a651cfa3dc759bb877596daa1d5e5e"
        },
        {
          "alg" : "SHA3-256",
          "content" : "c5f6bb36cfdab5a6b024b7e635e4bbfe60045ead82117ad887f422856a9d318b"
        },
        {
          "alg" : "SHA3-512",
          "content" : "29e2c362a03372397bdd536a07e32aa8dfa5e2b2e6d4c99c1677a94543e3a6990a2866c7edec829c5328ce8c8fe323fa210f41158175a4606c4dc52d857f8794"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.confluent.flink/flink-connector-datagen@1.19.3-cp1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://flink.apache.org/flink-connectors/flink-connector-datagen"
        },
        {
          "type" : "distribution",
          "url" : "s3://cp-flink-staging-654654529379-us-west-2/maven-staging/85e1bccaeab3902aaac2d25e0400b3674b1c6169"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink/flink-connectors/flink-connector-datagen"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.confluent.flink/flink-connector-datagen@1.19.3-cp1?type=jar"
    },
    {
      "group" : "io.confluent.flink",
      "name" : "flink-streaming-java",
      "version" : "1.19.3-cp1",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "dc724841f8d9efb300dee6f08f327bbb"
        },
        {
          "alg" : "SHA-1",
          "content" : "9b677d513f7902d3d05a4eca5a634ebe548401d3"
        },
        {
          "alg" : "SHA-256",
          "content" : "a0bcdf3ecd4b607ffb58b6b7c9b3a3364b915f03b9015bbfd832672960dc6d5f"
        },
        {
          "alg" : "SHA-512",
          "content" : "8aa19aa7b89a24e711fe7ef56c0eaa7244405783fc3df8924d2aa0490698107aafef794fb087f6ae5db774f301d84354649d54027bea3b32d8c3604f73281362"
        },
        {
          "alg" : "SHA-384",
          "content" : "3b00dd9c2b970017a183bee91bf9811381cb6cc196bbef852028ffc249978cb11f57fcc82d92d36ecaeceb9f0d57634e"
        },
        {
          "alg" : "SHA3-384",
          "content" : "568f332869333b80ef0da30230fbb8f3380bec51539b19a56fc0221b1b2df6e57b8080a2d28688db07b53f63c73fff54"
        },
        {
          "alg" : "SHA3-256",
          "content" : "3986e96dde360dcc958cbac9bccb39bf53cfde76c110dff2c4d07533943197e3"
        },
        {
          "alg" : "SHA3-512",
          "content" : "3a9bbecb35a7975711d778f53549763b9b9be083fee5e448f750aeb1cdc96876b81ef95aee73b3a104e09dcc07705403f9d93b6eb6443e3b7937b7660d8d7584"
        }
      ],
      "purl" : "pkg:maven/io.confluent.flink/flink-streaming-java@1.19.3-cp1?classifier=tests&type=test-jar",
      "type" : "library",
      "bom-ref" : "pkg:maven/io.confluent.flink/flink-streaming-java@1.19.3-cp1?classifier=tests&type=test-jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "io.confluent.flink",
      "name" : "flink-statebackend-rocksdb",
      "version" : "1.19.3-cp1",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "ce103e0916d71da346263896767da17f"
        },
        {
          "alg" : "SHA-1",
          "content" : "e2ac04971d632a174b1e40aebd361d65f1cee4d0"
        },
        {
          "alg" : "SHA-256",
          "content" : "d2b67f50e1e52a920bf1972cb0333874d7174b2bd4dd93c0d06ce70463cc3874"
        },
        {
          "alg" : "SHA-512",
          "content" : "7bc7966e7eee6fa4377c8b7507409ba621a754cf9101836de25b108099199ade596ebc62759a03893ce5fc8eeb45885564ed486b79482d8892863490c11db7b1"
        },
        {
          "alg" : "SHA-384",
          "content" : "d3afc0c3fe6daf2413575d44ac37c3787f97e769f057faa82fc3ec814f3d38f8eb260a5898fde796d33fb75095e1f814"
        },
        {
          "alg" : "SHA3-384",
          "content" : "96570c84a76a33ae13ebfc2ba79f6d1fb64a8bd780e9781d6df5c9e1eb6216b1b68ef1ac29f496c4e881f367b05e4f18"
        },
        {
          "alg" : "SHA3-256",
          "content" : "097ac35cd08aecd2746f3532fcfd365602dd75b9ee6b2a4651d4e9a29efd293b"
        },
        {
          "alg" : "SHA3-512",
          "content" : "4f3b09b64c576ea45228bfe086f8134353065db56ae2caefdd506288b98f0e90c25499b23a8e174d4ab9ef67abc651d3a15b1cb11cc8f8976e55aabcd00a3ffa"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.confluent.flink/flink-statebackend-rocksdb@1.19.3-cp1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://flink.apache.org/flink-state-backends/flink-statebackend-rocksdb"
        },
        {
          "type" : "distribution",
          "url" : "s3://cp-flink-staging-654654529379-us-west-2/maven-staging/85e1bccaeab3902aaac2d25e0400b3674b1c6169"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink/flink-state-backends/flink-statebackend-rocksdb"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.confluent.flink/flink-statebackend-rocksdb@1.19.3-cp1?type=jar"
    },
    {
      "publisher" : "Facebook",
      "group" : "com.ververica",
      "name" : "frocksdbjni",
      "version" : "6.20.3-ververica-2.0",
      "description" : "RocksDB fat jar with modifications specific for Apache Flink that contains .so files for linux32 and linux64 (glibc and musl-libc), jnilib files for Mac OSX, and a .dll for Windows x64.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "b312842e5ae7b60da4fa742214600fa6"
        },
        {
          "alg" : "SHA-1",
          "content" : "2847dfbbd8debea1bd0303a24408dba9fbe6afe8"
        },
        {
          "alg" : "SHA-256",
          "content" : "5e6e5063b75196a17fbeaf656f088a807f83177525d9ecbec7125b9f3630b966"
        },
        {
          "alg" : "SHA-512",
          "content" : "5df61a2acb0ab3ddb3cefd8efd12a53e61ab7349b1addfc8ae424eb94611da2b44b58705b43fd9f9a1d6a3092df40c32001dba37eaa58c59d663c1ff4330b8f3"
        },
        {
          "alg" : "SHA-384",
          "content" : "06e11032b60444d685d175e19364c6f7dacacc2aa7999d1bf3c89e6bffbb627833e030dcd7978d6d50378d08d9772a81"
        },
        {
          "alg" : "SHA3-384",
          "content" : "9363f90b3922947c09be9fb98b3e2fb8f5190b9dbc803ecf1c7816f26ad1d818127edd8761d95bc1bec58879077d6a50"
        },
        {
          "alg" : "SHA3-256",
          "content" : "81cd77f6fff3debf62a6f6a7d523e1c26c0c2c05938f6aaca17b555d74f878c8"
        },
        {
          "alg" : "SHA3-512",
          "content" : "02f51f2052afca0fcd6b944dfce56fc5542ffa6a0be1db6e7a344b30b97dc59d2a6f312413e04172387b0583f11f621c4610211c0a78766c25ebe3525919c240"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.ververica/frocksdbjni@6.20.3-ververica-2.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://rocksdb.org"
        },
        {
          "type" : "mailing-list",
          "url" : "https://groups.google.com/forum/#!forum/rocksdb"
        },
        {
          "type" : "vcs",
          "url" : "scm:git:https://github.com/ververica/frocksdb.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.ververica/frocksdbjni@6.20.3-ververica-2.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "io.confluent.flink",
      "name" : "flink-statebackend-changelog",
      "version" : "1.19.3-cp1",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "a13daa5457cb19679accb10424bafd99"
        },
        {
          "alg" : "SHA-1",
          "content" : "8e916af8fed4e8daaedd63d54c304b975d0f9359"
        },
        {
          "alg" : "SHA-256",
          "content" : "153825edacb36b634f7d4856762bc5dee3521c57e7a012947b411f2beaa5c8db"
        },
        {
          "alg" : "SHA-512",
          "content" : "cd17382692c2cd77c4cb66e821cbc794968701de75c1045acb6926ff02fe4d570aca35f982feb717c373b47fb5b9ac5c0785faae4caeb44b2aebeed2b941d166"
        },
        {
          "alg" : "SHA-384",
          "content" : "ed7ab0b20fde92a770b8ec45cd7ca34e95d32c666bb7a367173881aab3bd928d9df00e43ab352086bc1006673cffb2e0"
        },
        {
          "alg" : "SHA3-384",
          "content" : "43ef8baaa0b4026545eb3eda4061215a2df50da80301f5bc51439bc025726b1adb1d4ad7dc52ad0cfdc780be8875e70e"
        },
        {
          "alg" : "SHA3-256",
          "content" : "d66584a3130d5791fc8455eef077da3238510e843d35ef9fb0d626108e7d3204"
        },
        {
          "alg" : "SHA3-512",
          "content" : "579640ece72444907d23436e8f623203318b6116823266b09e24e0a32583610946762941cdbcf30b83c0f987004618b0ad847f4549f0504185e20a2feb318571"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.confluent.flink/flink-statebackend-changelog@1.19.3-cp1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://flink.apache.org/flink-state-backends/flink-statebackend-changelog"
        },
        {
          "type" : "distribution",
          "url" : "s3://cp-flink-staging-654654529379-us-west-2/maven-staging/85e1bccaeab3902aaac2d25e0400b3674b1c6169"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink/flink-state-backends/flink-statebackend-changelog"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.confluent.flink/flink-statebackend-changelog@1.19.3-cp1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "io.confluent.flink",
      "name" : "flink-statebackend-common",
      "version" : "1.19.3-cp1",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "cf1016d5ce9b7cc59acb2b7ef5dd8b18"
        },
        {
          "alg" : "SHA-1",
          "content" : "ca89ec03ab9ba3a3f15ac4c0042e0303f7a5251b"
        },
        {
          "alg" : "SHA-256",
          "content" : "ffd5c989aca430e78a16638b31c673235af269f69a9e7e5a7e3a4ca518d07995"
        },
        {
          "alg" : "SHA-512",
          "content" : "24890c2252612549ba85dc271311839626387a37c2e8adf75530b1d0fee82bb2b3ddc323fa312b1f9a05ffd3e0e2700ca7b025d84b565016e172db0c6db2f9c8"
        },
        {
          "alg" : "SHA-384",
          "content" : "2ccbccb5628dcd9c9d2a73815b1ade81211c53c43e1699e9c73681e3963102452938531e17e8e6df8e8416efd25c5fab"
        },
        {
          "alg" : "SHA3-384",
          "content" : "0d9c467979a8462b5ac79da2a96b3652bed3ecb284f966d150b5a4f6f5a341c93e7adc5125b68a816953cb7f1156ac37"
        },
        {
          "alg" : "SHA3-256",
          "content" : "c0d3fd1b13947bb101ab2de66afaadf1ddbc0e00472c12c41de2ca95d8ad0791"
        },
        {
          "alg" : "SHA3-512",
          "content" : "0a4edc15e417a7d92be815cb490bcafe810bceeecb9cb8c4fb637310dec64fbd15e9ef002961578ad0c91920b9b9290dc180aa7a30472460734c70102ca7027f"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.confluent.flink/flink-statebackend-common@1.19.3-cp1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://flink.apache.org/flink-state-backends/flink-statebackend-common"
        },
        {
          "type" : "distribution",
          "url" : "s3://cp-flink-staging-654654529379-us-west-2/maven-staging/85e1bccaeab3902aaac2d25e0400b3674b1c6169"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink/flink-state-backends/flink-statebackend-common"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.confluent.flink/flink-statebackend-common@1.19.3-cp1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "io.confluent.flink",
      "name" : "flink-dstl-dfs",
      "version" : "1.19.3-cp1",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "290af7e7cbfebc91376743f2ce1d3630"
        },
        {
          "alg" : "SHA-1",
          "content" : "3b68d5a2f963af64ceb267f19aacb6b440e61ad0"
        },
        {
          "alg" : "SHA-256",
          "content" : "473756ea807d220c7cfa4e295d31306a5b9c0b194f936980b656a49dc6de6fc4"
        },
        {
          "alg" : "SHA-512",
          "content" : "d66792603d4084ad4f1bec80e00bae2b8c5ed3fe8f790f501415d8b503171c3a44b56f7e01f312acd4d5f2c4121b19f60da7de2e3f4cb5bcb0fa00c15f465ef7"
        },
        {
          "alg" : "SHA-384",
          "content" : "b0a6e1953101323db26ca9627f4002be8cae8cf22f33f801140eadfb9d20cb12a8a1634f791e6ba2d70f5ac0b6ea2329"
        },
        {
          "alg" : "SHA3-384",
          "content" : "6474968839fd18b48c210d6a5b4db413e624440d63cf58a2ab95e9c23e5e1a4cc1c3ea4393840a9152593e31213ecf3f"
        },
        {
          "alg" : "SHA3-256",
          "content" : "d3fffff328a312d90e63dbed3764f9f603fee28ab11c88e7376d10bc5125f1fa"
        },
        {
          "alg" : "SHA3-512",
          "content" : "7b2a852134cc43de0d8fe1d09a56ea011779628c48d8f72402ffdb028b581ef88dedace3f3d2d6737609297dab10b455f0459d1051061f23e1d772df81fc841a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.confluent.flink/flink-dstl-dfs@1.19.3-cp1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://flink.apache.org/flink-dstl/flink-dstl-dfs"
        },
        {
          "type" : "distribution",
          "url" : "s3://cp-flink-staging-654654529379-us-west-2/maven-staging/85e1bccaeab3902aaac2d25e0400b3674b1c6169"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink/flink-dstl/flink-dstl-dfs"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.confluent.flink/flink-dstl-dfs@1.19.3-cp1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.curator",
      "name" : "curator-test",
      "version" : "5.4.0",
      "description" : "Unit testing utilities.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "1039b67e2dafdfc64f58aedc43798039"
        },
        {
          "alg" : "SHA-1",
          "content" : "bdf76dcd0981ee3fed5df7db99778158c77b9e0c"
        },
        {
          "alg" : "SHA-256",
          "content" : "470a24f22eb392a945ca645d08ff6f38596ef94964cb0201ca40b765e00dddcd"
        },
        {
          "alg" : "SHA-512",
          "content" : "02f4543569ec76fce094e8491fcdacb9e421d50e1cd8e747b6dc6c9d7b562cdc9c3c41f46bfa24f60169ffa36c62f7a96e2e73a34d5c6853fe1eb5c9d43a359a"
        },
        {
          "alg" : "SHA-384",
          "content" : "ce2fc507a4a06b28f5e694a69d89a4b2cf64b9d5f8ab9ad3725106f409979a4186b0c406cc47f03ef06525e68ecb4735"
        },
        {
          "alg" : "SHA3-384",
          "content" : "0e10c50e501c8d87aac2c465a62b0a84a259e7d2cb5bdff87afc0beb5ff5627c6a869576d2eab7985a5dccdbc66f1f94"
        },
        {
          "alg" : "SHA3-256",
          "content" : "ce05f3790590feda7029644ba97d9a7883d7ea9c224d72a4a47a3683a2543af2"
        },
        {
          "alg" : "SHA3-512",
          "content" : "35906334dc9fa317de1604f00c4b95707fbb08a0c50201e2c24bb003597e9edcb6af70ed76c127d2cd9b9825a1d7ef5c5278e0659438580b32a41e725b2b362b"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.curator/curator-test@5.4.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://curator.apache.org/curator-test"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/job/Curator/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/CURATOR"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/curator-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/curator.git/curator-test"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.curator/curator-test@5.4.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.zookeeper",
      "name" : "zookeeper",
      "version" : "3.7.1",
      "description" : "ZooKeeper server",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "5a983ef4352f2dc062dd764a6d3bb17d"
        },
        {
          "alg" : "SHA-1",
          "content" : "b598708e153ff74dd2ebb800419df96df8a01c2d"
        },
        {
          "alg" : "SHA-256",
          "content" : "1d119d812782388589725f1ab5b49080a0ea931da0dc93c7c0f1d9ee51a32fe8"
        },
        {
          "alg" : "SHA-512",
          "content" : "9e709a8f0a488f892e667dba09934443da431691dcdd331dda512b160f7ffbf8b7361abd287111d6c22c964885255bef257a7776c21bc4a4d05cb0e380f2744c"
        },
        {
          "alg" : "SHA-384",
          "content" : "9826f4986bd35167ce2ec6a5ade6c170af9835d1e2829553a35ba4f2de56b20dfb034481f72d93551ac4af0660c402da"
        },
        {
          "alg" : "SHA3-384",
          "content" : "312e7e7efe01a4e25becc7d7a0ce4c770272ae5b7ec69335e70e98b9d7108fb5dcda59dd3c95222be13244d514975ec4"
        },
        {
          "alg" : "SHA3-256",
          "content" : "4ae196c75e34b44d6fcde8ec87cf80004489e20fbd32384887507088fcab35e0"
        },
        {
          "alg" : "SHA3-512",
          "content" : "e6d56da76b433aa1103ad75c9db60ebc3e6c9feb44bb5db99cfd2afb7c3008c01e31ec711d6c10c40ababc96f6d8dca5a40a24fd07a5d0cb88dc380aba80f625"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.zookeeper/zookeeper@3.7.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://zookeeper.apache.org/zookeeper"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-hadoop.apache.org/view/ZooKeeper/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/ZOOKEEPER"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/zookeeper-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf/zookeeper.git/zookeeper"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.zookeeper/zookeeper@3.7.1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.zookeeper",
      "name" : "zookeeper-jute",
      "version" : "3.7.1",
      "description" : "ZooKeeper jute",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "2fddc39d1851933f49f2c9dd79d6ec0f"
        },
        {
          "alg" : "SHA-1",
          "content" : "569a3fa7bad2127d74219bd2aaaac56a89c21b02"
        },
        {
          "alg" : "SHA-256",
          "content" : "ee6e6c0c3cbf2da1eb171272055b915351ecfdf4abdea5cc0371baf0275197d4"
        },
        {
          "alg" : "SHA-512",
          "content" : "163c9a75888d28072b964d08ef6650be2f46810a1b0c46ff3f96e48a2ecea994b71f9e5a655b8d4e13b2522e97a26921399ce55207301b6f6a14dc0724fb24b5"
        },
        {
          "alg" : "SHA-384",
          "content" : "56931db6c37b820bb97c3263cab82d196a4ad2eedd65ce3ce63864668b21045f9677a74c8d6c8a04093541a2127e6a7a"
        },
        {
          "alg" : "SHA3-384",
          "content" : "d9025aaef93bf2c59082a6dc1f4c38f12a81a2514d5b266c871e06927d883dfcc1dd28b601a649b2870565b9f8b2d534"
        },
        {
          "alg" : "SHA3-256",
          "content" : "b6417bf23b335b62d5b9b20290c537c051744329b12e73a55eed0085ad605617"
        },
        {
          "alg" : "SHA3-512",
          "content" : "a40b8187a6f20043cae0e533709dccf5b581c81ef40272ae049affd814071dcd2cf753f9cf21fa8e8aa087a1c4fdbd19b47b1c306fd59d91e974b106441e2621"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.zookeeper/zookeeper-jute@3.7.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://zookeeper.apache.org/zookeeper-jute"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-hadoop.apache.org/view/ZooKeeper/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/ZOOKEEPER"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/zookeeper-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf/zookeeper.git/zookeeper-jute"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.zookeeper/zookeeper-jute@3.7.1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.yetus",
      "name" : "audience-annotations",
      "version" : "0.12.0",
      "description" : "Annotations for defining API boundaries and tools for managing javadocs",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "76ba71bbe18c4724d96bec68bbe12ff1"
        },
        {
          "alg" : "SHA-1",
          "content" : "e0efa60318229590103e31c69ebdaae56d903644"
        },
        {
          "alg" : "SHA-256",
          "content" : "ffb101fc066360ff3c77457c927fd7967fb096a6ee9e046ab7071447d8208efc"
        },
        {
          "alg" : "SHA-512",
          "content" : "264a5251272ec55eca1fae5a8fb9336d1eca1ee3bfb586d1ebc382fcfd37077c21cbfa9e198daf4e1eebe9f6fa90487bec2f85bc1c55cf5666cbbfc4d18b1715"
        },
        {
          "alg" : "SHA-384",
          "content" : "f936d92b5c3b3c88428fc7452871e4df112935dd25356396d15deb73dd39790f45909a3d14f038e9f585cee79622ad47"
        },
        {
          "alg" : "SHA3-384",
          "content" : "67ca97a525d98c3dab9ffda40e11d6c683f6f4208ae4a5b28dbd3e2b8b37187dfdcd1d9b89222dc69e5b84ac212f4428"
        },
        {
          "alg" : "SHA3-256",
          "content" : "fd99b55afe40884b5f6cfd9ffbdcd07fa32833443dead288390ca8e737dd3337"
        },
        {
          "alg" : "SHA3-512",
          "content" : "4aaece7bdadc2c2d9660b16345218cfc68a2ea344374d0ffbcdcc3722ff6be5f06c92231ae68ec3884f1aa9b99956cb5135b4060c5457f463251f3767003ad20"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.yetus/audience-annotations@0.12.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://yetus.apache.org/audience-annotations"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/YETUS"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/yetus-dev/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/yetus.git/audience-annotations"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.yetus/audience-annotations@0.12.0?type=jar"
    },
    {
      "group" : "io.dropwizard.metrics",
      "name" : "metrics-core",
      "version" : "3.2.5",
      "description" : "Metrics is a Java library which gives you unparalleled insight into what your code does in production. Metrics provides a powerful toolkit of ways to measure the behavior of critical components in your production environment.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "1f580bf5834f0f4db1a93c784bda9953"
        },
        {
          "alg" : "SHA-1",
          "content" : "ea2316646e9787c5b2d14ca97f4ef7ad5c6b94e9"
        },
        {
          "alg" : "SHA-256",
          "content" : "3844be6a6a4ef065abe336c6eadf7d5e880ca13759a0c13a01d0d08ea4d05a8c"
        },
        {
          "alg" : "SHA-512",
          "content" : "3fbbe2ea938d4d1ac35bc62c067bc382eb438b9417193e65e461c9932336f119eaecdfa2d7db0a14c4c70aebcc11190ecf0506f29505bd1c1642d076bdf268d2"
        },
        {
          "alg" : "SHA-384",
          "content" : "0fd3be839d72c4f573407cf4c202d6a3fcffdf6c869183e249ceeaed50a3b4db8c54112be0b94abfebacdeeee8458b8e"
        },
        {
          "alg" : "SHA3-384",
          "content" : "6b7299283d2c47126054d2bb21becfcd504a1ee9fee493ae232635ec6d90c04d4f502854a3c530f8f44e4b29638db18b"
        },
        {
          "alg" : "SHA3-256",
          "content" : "d06d4214809d8c4cf21ea542debfd162a3af4877399608f4488601cd0268a3ed"
        },
        {
          "alg" : "SHA3-512",
          "content" : "f8688e857db524d19b5c02b256b2a859de010227890b7e9b02431cc696ec682964392deba5133499eb6ea4b8ce9a98fcfe1bd0b39b58e9fb39977527e312ff66"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.dropwizard.metrics/metrics-core@3.2.5?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://metrics.dropwizard.io/metrics-core/"
        },
        {
          "type" : "distribution",
          "url" : "http://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://github.com/dropwizard/metrics/issues#issue/"
        },
        {
          "type" : "vcs",
          "url" : "http://github.com/dropwizard/metrics/metrics-core/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.dropwizard.metrics/metrics-core@3.2.5?type=jar"
    },
    {
      "group" : "com.google.guava",
      "name" : "guava",
      "version" : "32.1.3-jre",
      "description" : "Guava is a suite of core and expanded libraries that include utility classes, Google's collections, I/O classes, and much more.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "adc3cf557a48d15cb71be90948558923"
        },
        {
          "alg" : "SHA-1",
          "content" : "0f306708742ce2bf0fb0901216183bc14073feae"
        },
        {
          "alg" : "SHA-256",
          "content" : "6d4e2b5a118aab62e6e5e29d185a0224eed82c85c40ac3d33cf04a270c3b3744"
        },
        {
          "alg" : "SHA-512",
          "content" : "f575321aa79046f2c12bdf9895db7e235cbaaa8e913389ae48ec4bb5f387d6bf066ed98c5f2c7854bf0c56bb38b59b005ca3c16d68e314743491a223a18cee47"
        },
        {
          "alg" : "SHA-384",
          "content" : "efd979f8c807eb973c7bb2edcede11c2881db4232147bb94069701fc002b1c336651aa3347858e3ba25cb89f3df69428"
        },
        {
          "alg" : "SHA3-384",
          "content" : "83429ce32c8a20a7314175c053ba0a0e57c20486e6f8abcf7bf1e19c64148db70ae8e6b4437ec168f53b37a653e8bb24"
        },
        {
          "alg" : "SHA3-256",
          "content" : "52974020b1d930e646d2fe26b13841275fb9c51e81c28140993c228adda71e78"
        },
        {
          "alg" : "SHA3-512",
          "content" : "b9bd05ca990c5b76c43248493bb29cbbaad5aa667f394714f35765a8ec04c302a19c4f53f610485c933281211cd6bf4a11a14aaf754ffaed33e02c8b1b78289e"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.guava/guava@32.1.3-jre?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/google/guava"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/google/guava/actions"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/google/guava/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/google/guava/guava"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.guava/guava@32.1.3-jre?type=jar"
    },
    {
      "group" : "com.google.guava",
      "name" : "failureaccess",
      "version" : "1.0.1",
      "description" : "Contains com.google.common.util.concurrent.internal.InternalFutureFailureAccess and InternalFutures. Most users will never need to use this artifact. Its classes is conceptually a part of Guava, but they're in this separate artifact so that Android libraries can use them without pulling in all of Guava (just as they can use ListenableFuture by depending on the listenablefuture artifact).",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "091883993ef5bfa91da01dcc8fc52236"
        },
        {
          "alg" : "SHA-1",
          "content" : "1dcf1de382a0bf95a3d8b0849546c88bac1292c9"
        },
        {
          "alg" : "SHA-256",
          "content" : "a171ee4c734dd2da837e4b16be9df4661afab72a41adaf31eb84dfdaf936ca26"
        },
        {
          "alg" : "SHA-512",
          "content" : "f8d59b808d6ba617252305b66d5590937da9b2b843d492d06b8d0b1b1f397e39f360d5817707797b979a5bf20bf21987b35333e7a15c44ed7401fea2d2119cae"
        },
        {
          "alg" : "SHA-384",
          "content" : "67659dbd9647ec303d7f15128dc9dba19b98fd8d74758ee3b602451e32c855e236ccaafe08edf4bbfa245f981268440f"
        },
        {
          "alg" : "SHA3-384",
          "content" : "1460875f0331c5fa3791772a6a322a7db180261bc2adacf7271df1fbf3b088a587a755a604c039982cb593c5cfc1f101"
        },
        {
          "alg" : "SHA3-256",
          "content" : "ea86406e75fcd93eafe3cde1b3135ba485f1bb9b75fed98894a0bf1f0aee04f0"
        },
        {
          "alg" : "SHA3-512",
          "content" : "52ac0f487ab5dd27c9f2e54fd1d84c7a620cae9d49be4072aa2b11501787bf4391ddaa13d02eccdf19e8eea46aecbea5f6064b26777c1b836108a280652e04ac"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.guava/failureaccess@1.0.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/google/guava/failureaccess"
        },
        {
          "type" : "build-system",
          "url" : "https://travis-ci.org/google/guava"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/google/guava/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/google/guava/failureaccess"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.guava/failureaccess@1.0.1?type=jar"
    },
    {
      "group" : "com.google.guava",
      "name" : "listenablefuture",
      "version" : "9999.0-empty-to-avoid-conflict-with-guava",
      "description" : "An empty artifact that Guava depends on to signal that it is providing ListenableFuture -- but is also available in a second \"version\" that contains com.google.common.util.concurrent.ListenableFuture class, without any other Guava classes. The idea is: - If users want only ListenableFuture, they depend on listenablefuture-1.0. - If users want all of Guava, they depend on guava, which, as of Guava 27.0, depends on listenablefuture-9999.0-empty-to-avoid-conflict-with-guava. The 9999.0-... version number is enough for some build systems (notably, Gradle) to select that empty artifact over the \"real\" listenablefuture-1.0 -- avoiding a conflict with the copy of ListenableFuture in guava itself. If users are using an older version of Guava or a build system other than Gradle, they may see class conflicts. If so, they can solve them by manually excluding the listenablefuture artifact or manually forcing their build systems to use 9999.0-....",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "d094c22570d65e132c19cea5d352e381"
        },
        {
          "alg" : "SHA-1",
          "content" : "b421526c5f297295adef1c886e5246c39d4ac629"
        },
        {
          "alg" : "SHA-256",
          "content" : "b372a037d4230aa57fbeffdef30fd6123f9c0c2db85d0aced00c91b974f33f99"
        },
        {
          "alg" : "SHA-512",
          "content" : "c5987a979174cbacae2e78b319f080420cc71bcdbcf7893745731eeb93c23ed13bff8d4599441f373f3a246023d33df03e882de3015ee932a74a774afdd0782f"
        },
        {
          "alg" : "SHA-384",
          "content" : "caff9b74079f95832ca7f6029346b34b606051cc8c5a4389fac263511d277ada0c55f28b0d43011055b268c6eb7184d5"
        },
        {
          "alg" : "SHA3-384",
          "content" : "e939f08df0545847ea0d3e4b04a114b08499ad069ba8ec9461d1779f87a56e0c37273630a0f4c14e78c348d3ac7eb97f"
        },
        {
          "alg" : "SHA3-256",
          "content" : "1f0a8b1177773b3a8ace839df5eed63cbf56b24a38714898a6e4ed065c42559f"
        },
        {
          "alg" : "SHA3-512",
          "content" : "6b495ecc2a18b17365cb08d124a0da47f04bcdde81927b5245edf3edd8e498c3c3fb92ce6a4127f660bac851bb1d3e4510e5c20d03be47ce99dc296d360db285"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/google/guava/listenablefuture"
        },
        {
          "type" : "build-system",
          "url" : "https://travis-ci.org/google/guava"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/google/guava/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/google/guava/listenablefuture"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar"
    },
    {
      "group" : "org.checkerframework",
      "name" : "checker-qual",
      "version" : "3.37.0",
      "description" : "checker-qual contains annotations (type qualifiers) that a programmer writes to specify Java code for type-checking by the Checker Framework.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "1ff1eed173ff9d6f208d0a5be8f5623d"
        },
        {
          "alg" : "SHA-1",
          "content" : "ba74746d38026581c12166e164bb3c15e90cc4ea"
        },
        {
          "alg" : "SHA-256",
          "content" : "e4ce1376cc2735e1dde220b62ad0913f51297704daad155a33f386bc5db0d9f7"
        },
        {
          "alg" : "SHA-512",
          "content" : "98f92a4d14b77f2946de34bc64bc0068505ba8893a734e52f6458e3061fc7471bd5a60c073c938302b7b78d51205929134207abc24f0edadd3db1e1f57755de5"
        },
        {
          "alg" : "SHA-384",
          "content" : "6a586fa9ead4d6edeb5e73a98af109dca2bf95e950c3c4862773f40e2eed5ea80208021f187fe717963027f7ea2bb489"
        },
        {
          "alg" : "SHA3-384",
          "content" : "0baafa897a7a5b9095680b5534841c537518c67a5ae9bf5923aceeb5aa3283551159c614b7fcfc205f2b5f77c144934c"
        },
        {
          "alg" : "SHA3-256",
          "content" : "68056437b32f1a878d9b38ca2d4c6d88e9ca76b6eb705e7a946bc044010b722d"
        },
        {
          "alg" : "SHA3-512",
          "content" : "66ec2f2416d564035e78295e7094ec1c23b76870d0095adbb9ec7e2d00b94684dc3c4ac08640b7ba14465ddc305382e5b20240d5eff31875d2ffe4682088a2f7"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT"
          }
        }
      ],
      "purl" : "pkg:maven/org.checkerframework/checker-qual@3.37.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://checkerframework.org/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/typetools/checker-framework.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.checkerframework/checker-qual@3.37.0?type=jar"
    },
    {
      "publisher" : "Google LLC",
      "group" : "com.google.errorprone",
      "name" : "error_prone_annotations",
      "version" : "2.21.1",
      "description" : "Error Prone is a static analysis tool for Java that catches common programming mistakes at compile-time.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "75fe4fe33d308dd6cee3b601de902d27"
        },
        {
          "alg" : "SHA-1",
          "content" : "6d9b10773b5237df178a7b3c1b4208df7d0e7f94"
        },
        {
          "alg" : "SHA-256",
          "content" : "d1f3c66aa91ac52549e00ae3b208ba4b9af7d72d68f230643553beb38e6118ac"
        },
        {
          "alg" : "SHA-512",
          "content" : "530318bcdf1ed8eeee408fc5a0775f1792cbf012b4ec55217a4498c8d2983b230a4d071b9e115565b0411faa51dd938823d9b619beb6786212c375ad3d1ebd8a"
        },
        {
          "alg" : "SHA-384",
          "content" : "88e628431966a9b5cc19f96159874cefde1558e51d2ce233a0c2d47914eb9c6256f95882605a87cc6629a21ff70b72b4"
        },
        {
          "alg" : "SHA3-384",
          "content" : "ebc750b211532fef9a84c3682d47f00b877e4082716ead1f4f883f02ab35bda8d5acfc475722215c4fe6ed9cfd54f43a"
        },
        {
          "alg" : "SHA3-256",
          "content" : "9b4f193bf2f541844c6b1b5cf2d1c7f6e9465b97804d155f34530b203184e1ae"
        },
        {
          "alg" : "SHA3-512",
          "content" : "1d76781cef387a185fd4fb69960394556062969bbbe0be74d0fb11f7c73758e5d35ff546ab04f6382c21c63705a1ffb975a549bf4d846fde54e412ecd4641485"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.21.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://errorprone.info/error_prone_annotations"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/google/error-prone/error_prone_annotations"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.21.1?type=jar"
    },
    {
      "group" : "com.google.j2objc",
      "name" : "j2objc-annotations",
      "version" : "2.8",
      "description" : "A set of annotations that provide additional information to the J2ObjC translator to modify the result of translation.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "c50af69b704dc91050efb98e0dff66d1"
        },
        {
          "alg" : "SHA-1",
          "content" : "c85270e307e7b822f1086b93689124b89768e273"
        },
        {
          "alg" : "SHA-256",
          "content" : "f02a95fa1a5e95edb3ed859fd0fb7df709d121a35290eff8b74dce2ab7f4d6ed"
        },
        {
          "alg" : "SHA-512",
          "content" : "f8263868a792b41707c9e7fe6fa5650a14cd93fbeafad20efe3772a3058fc933eb59782ec59e6eb9b9c569aa96da80134ae9fdf7547b69c44a97087efddceeff"
        },
        {
          "alg" : "SHA-384",
          "content" : "e6087ec31fec8289158496ad2ed6ce8472d5d513808a312e0782cedac3b86c37a62a63c0b5ea3839491d109fe9e148a1"
        },
        {
          "alg" : "SHA3-384",
          "content" : "10add34bfeb8612283eef89ac96747a3c9b755acd80ad526e1addaeb7efd6323c52b9bfa1a3d34adb40e1ccb963ee65d"
        },
        {
          "alg" : "SHA3-256",
          "content" : "b3336f8abd6b1f73b9f06d306974557000a000073bfbae6b54fda26d17dbb072"
        },
        {
          "alg" : "SHA3-512",
          "content" : "d376c184a6df071c4e93b913d175b5c2e63deac37105dc20342c19bdda62e4e9598ca1e8bfb4f4fd5cdee6dd5ac3b8af49e2c5193e324d59a59ce1f7adeab627"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.j2objc/j2objc-annotations@2.8?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/google/j2objc/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.sonatype.org/spice/trunk/oss/oss-parent-9/j2objc-annotations"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.j2objc/j2objc-annotations@2.8?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "io.confluent.flink",
      "name" : "flink-test-utils-junit",
      "version" : "1.19.3-cp1",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f59ffa7a6ba3e440f001783e7e15bd42"
        },
        {
          "alg" : "SHA-1",
          "content" : "bcaf59d7d1f0bab8eebb6f86ee1e22a288961597"
        },
        {
          "alg" : "SHA-256",
          "content" : "79a5d8349ff409f80cc632cae3a870fafda7c95f71112235215519ee2bc0c4ba"
        },
        {
          "alg" : "SHA-512",
          "content" : "313b2f97f201b0289a598068d86d55a03cff296cf66bc2abc419e40aaa8127bfb8cf27a6010e3112083dbd48629d026e18a7cbbbc2f2e799d3705d849bcec384"
        },
        {
          "alg" : "SHA-384",
          "content" : "f2df2a8eeb35b229d35cf6a21a816e38031aa005be6a77eccc477da7037384f95bda31f1d62f8df345d2eb25a8347226"
        },
        {
          "alg" : "SHA3-384",
          "content" : "dc31b4b9d3663e26e27b1915dcc1470751aff4453ccebd8652af78280fbedc87332f1ef2c6c3249d574716cd8c5261e9"
        },
        {
          "alg" : "SHA3-256",
          "content" : "5c30cf6cee3105f2c65909c016ccf9b39befa3895dbd4a0c33c83d8070d5967f"
        },
        {
          "alg" : "SHA3-512",
          "content" : "65d6d5443f23271e5c82977d964a17114c36609c83b478dcd8f84faf4d3b663214b9e86bd4df3c6c5b5023a8f842d92a9be44618a8510c6f400b8e392dfe5ec9"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.confluent.flink/flink-test-utils-junit@1.19.3-cp1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://flink.apache.org/flink-test-utils-parent/flink-test-utils-junit"
        },
        {
          "type" : "distribution",
          "url" : "s3://cp-flink-staging-654654529379-us-west-2/maven-staging/85e1bccaeab3902aaac2d25e0400b3674b1c6169"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink/flink-test-utils-parent/flink-test-utils-junit"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.confluent.flink/flink-test-utils-junit@1.19.3-cp1?type=jar"
    },
    {
      "group" : "org.testcontainers",
      "name" : "testcontainers",
      "version" : "1.19.1",
      "description" : "Isolated container management for Java code testing",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "76224f706bf65ca7d02dc8702652dd49"
        },
        {
          "alg" : "SHA-1",
          "content" : "eaad6e005a0792a1ee537bd3e7d3113e8d3315b1"
        },
        {
          "alg" : "SHA-256",
          "content" : "9107859eaf7077780742a807c4b4aea0c4bf7800a407482a433318b31ff26516"
        },
        {
          "alg" : "SHA-512",
          "content" : "bd5222462ab0f940006fdc8ec9524055605af1451f604e13c1d6e52642a512eb94c44c28cf7f820e0054d2f15c17dbe3559298de80f67ac1b22b2c5e34d5ee7c"
        },
        {
          "alg" : "SHA-384",
          "content" : "c04ea92f8b8fb21ad71bde704ed77d21eb7e90dbbac248cd4bd75c04f71deb24d87a7dee49550f5c5c045997065a665d"
        },
        {
          "alg" : "SHA3-384",
          "content" : "93317f2bebf5cd9f9af95960847023b09484ee90efcdaa35e6e58895207f490b46a347e838a7bb5b91a8fe296bc63c9d"
        },
        {
          "alg" : "SHA3-256",
          "content" : "22553ab446fdff385b9e1ce8b2947fab20f427f0d9d9b42afe10df7e1b0ed07a"
        },
        {
          "alg" : "SHA3-512",
          "content" : "ce83b181b756406f92e3d561a38a44934d0c48acf20e051fe4e39f923b7a911d4e5911d47072514b32d19e9ac1d8013814d05bbcc908b5c717f77b47e29ee955"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl" : "pkg:maven/org.testcontainers/testcontainers@1.19.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://java.testcontainers.org"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/testcontainers/testcontainers-java/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/testcontainers/testcontainers-java/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.testcontainers/testcontainers@1.19.1?type=jar"
    },
    {
      "group" : "org.rnorth.duct-tape",
      "name" : "duct-tape",
      "version" : "1.0.8",
      "description" : "General purpose resilience utilities for Java 8 (circuit breakers, timeouts, rate limiters, and handlers for unreliable or inconsistent results)",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "af347a22d19d632616d7a3fb63024218"
        },
        {
          "alg" : "SHA-1",
          "content" : "92edc22a9ab2f3e17c9bf700aaee377d50e8b530"
        },
        {
          "alg" : "SHA-256",
          "content" : "31cef12ddec979d1f86d7cf708c41a17da523d05c685fd6642e9d0b2addb7240"
        },
        {
          "alg" : "SHA-512",
          "content" : "d0a041a0e6eb26b92f1554038dc169a87fcf0a935497b50b93c13d78dde89ac26339b45a0d69a5e8dcf076dea0d187dbe81cdf97a045f092d0936717d8e08c30"
        },
        {
          "alg" : "SHA-384",
          "content" : "de8dd0f7939e2127da9d1012fcf94ca672953d0ae2edfd45213e688e9b170ec1251b64f1b0fbf6e0394d39a49b84e548"
        },
        {
          "alg" : "SHA3-384",
          "content" : "f74101a4dc718fb1968838e81b7cd256cbdd8831c9179b7a491e0cf2b4f8d3b5115bae78ef6eb1200874a60ad542284f"
        },
        {
          "alg" : "SHA3-256",
          "content" : "b1c78074dece82fc2781b776222055ecd47d4040394c1ef29fd962c88517b406"
        },
        {
          "alg" : "SHA3-512",
          "content" : "4ab545b668dcfe87bf03179cdc550cabd1026de19c39f55fd7b54e7a3aaa08905cae0f7701c0d9863062693f9146f2ea06a6eaea7d75c632225d13a6a3b371dc"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl" : "pkg:maven/org.rnorth.duct-tape/duct-tape@1.0.8?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/rnorth/duct-tape"
        },
        {
          "type" : "distribution",
          "url" : "https://api.bintray.com/maven/richnorth/maven/duct-tape"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/rnorth/duct-tape"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.rnorth.duct-tape/duct-tape@1.0.8?type=jar"
    },
    {
      "group" : "org.jetbrains",
      "name" : "annotations",
      "version" : "17.0.0",
      "description" : "A set of annotations used for code inspection support and code documentation.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "7b06437ed47fa7b4a8ec8909f4fb9022"
        },
        {
          "alg" : "SHA-1",
          "content" : "8ceead41f4e71821919dbdb7a9847608f1a938cb"
        },
        {
          "alg" : "SHA-256",
          "content" : "195fb0da046d55bb042e91543484cf1da68b02bb7afbfe031f229e45ac84b3f2"
        },
        {
          "alg" : "SHA-512",
          "content" : "839ec18d4a6f930ecd39827ebd4013c13a7176003543b8f60056770179032648faf1651e9e73109e811881b68a39757ca7e39731a61ff4a3461637b196fe4f7b"
        },
        {
          "alg" : "SHA-384",
          "content" : "c9d045a68ef2b0d5b12aa00b636e43af22de4c02f4dfcc6b5b7b04fdd57c98c7246decd2e5dc3eb9f1b10d929ac33a11"
        },
        {
          "alg" : "SHA3-384",
          "content" : "25ad733b460552705dd624634191beb909a6ed35f2475723faa06551d9542b87e724266f5f6003350c39965a92b5e54c"
        },
        {
          "alg" : "SHA3-256",
          "content" : "f731cde48fa6a20e57e97a829184492cfa5fe0e14a5082e7810205c2b9f1ac1c"
        },
        {
          "alg" : "SHA3-512",
          "content" : "b6698f9d65c0a364854717e64edd5df4fb1c97300d4dc3cc7ae7194b0b7b9e826b3d800dd362e2ad05417dac6ee3b2164294796c3ae46f4cbed840c2481b79b1"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.jetbrains/annotations@17.0.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/JetBrains/java-annotations"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/JetBrains/java-annotations"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.jetbrains/annotations@17.0.0?type=jar"
    },
    {
      "group" : "com.github.docker-java",
      "name" : "docker-java-api",
      "version" : "3.3.3",
      "description" : "Java API Client for Docker",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "6f351c56b54a82bcfbba16d53df01552"
        },
        {
          "alg" : "SHA-1",
          "content" : "22f9e8d0dc5a89fbcfb8e5182b36a49d989f87a0"
        },
        {
          "alg" : "SHA-256",
          "content" : "8be2f41ddc33306b83f91e413fc1a07cee02db05e4c493456de3399e5bcb7b6c"
        },
        {
          "alg" : "SHA-512",
          "content" : "a7f860e391413929d46be0d2a7f33a4ef8a2c66fd131ecc41e2b3006268e57001bf14982225929fe5a0637767454ba788a72a2fb683e9c497a03ec8dd3978e29"
        },
        {
          "alg" : "SHA-384",
          "content" : "c1b97e0daef7e13d0550e8194d28ef94431501564ab1128d3becb924c3bc4e871f914c3b632a04ac1158c067fef3035b"
        },
        {
          "alg" : "SHA3-384",
          "content" : "1ac56a6addd3aefd99c3751001b40282e25b601a73296a9f687d547d6a5ace6cde82db8fff7409a2911de670ffe79581"
        },
        {
          "alg" : "SHA3-256",
          "content" : "2ddb2531bd4a85a45b9829a09f9ec88176d0b00a68b87628575eb112c7652aa8"
        },
        {
          "alg" : "SHA3-512",
          "content" : "5d7cfa69317e7f0d805fed88141b47f50a197e283c7928903c12dc060d4c78ce33c5dc055caeacdaa083482a676899af41e071e1ae69b18964b2d0f9ed230944"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.github.docker-java/docker-java-api@3.3.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/docker-java/docker-java"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.github.docker-java/docker-java-api@3.3.3?type=jar"
    },
    {
      "publisher" : "FasterXML",
      "group" : "com.fasterxml.jackson.core",
      "name" : "jackson-annotations",
      "version" : "2.15.3",
      "description" : "Core annotations used for value types, used by Jackson data binding package.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f478f693731e4a2f0f0d3c7bba119b32"
        },
        {
          "alg" : "SHA-1",
          "content" : "79baf4e605eb3bbb60b1c475d44a7aecceea1d60"
        },
        {
          "alg" : "SHA-256",
          "content" : "aae865c3d88256d61b11523cb1e88bd48d5b9ad5855fa1fc859504fd2204708a"
        },
        {
          "alg" : "SHA-512",
          "content" : "c496afd736fa8acbf8126887e2ff375f162212f451326451fbb4b9194231d814e25bccacbaead9db98beec454f6b8d9ed706c5c88e2145bf7e1a37e13fd81af0"
        },
        {
          "alg" : "SHA-384",
          "content" : "13b4d153cc113a69008147974d8887f868f2f3f0a551ef0bacaccf0add17a3168465a94a471e075913f9c6649980a3cb"
        },
        {
          "alg" : "SHA3-384",
          "content" : "dcf8ed73f748eb32e1ab25eba3c294344cc0ddb2cc7bb4376814f1866df42c3093f1336291ce9ed9e1c8730663e0017c"
        },
        {
          "alg" : "SHA3-256",
          "content" : "59f42bc85ee3a8a5b422085b0462aed2a770cf52d7a3660f2cd6dd257ec6e694"
        },
        {
          "alg" : "SHA3-512",
          "content" : "1d1a6fd0e6851d419e79f82170f4060981c233ec8dc61656b84ce7988e9b71bbeecd7364cdadac066ddaf0b3de4dc8aa5acc411ebd1641f549a3af5ba214667b"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.15.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/FasterXML/jackson"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/FasterXML/jackson-annotations/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/FasterXML/jackson-annotations"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.15.3?type=jar"
    },
    {
      "group" : "com.github.docker-java",
      "name" : "docker-java-transport-zerodep",
      "version" : "3.3.3",
      "description" : "Java API Client for Docker",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "61164d91eb36389e77f6371d67514d80"
        },
        {
          "alg" : "SHA-1",
          "content" : "df303392ef9ee91d9069b259505eda84dcc4999b"
        },
        {
          "alg" : "SHA-256",
          "content" : "8620a66c13869a6d621ac80e921bceff6e9c43b527a21057b7d1b9b860d063e2"
        },
        {
          "alg" : "SHA-512",
          "content" : "3151a4992dca6a71a4bfedc8e0f3fdbfc222bb60d89de8bfc130c9a68ddf772fa6fa017204b9bee5ba3698dd5737a910b817cc0d1b28d0248535918d668a40f5"
        },
        {
          "alg" : "SHA-384",
          "content" : "e0d235c977c6cfd09fe308374f95ccdf55b15658672dc860cb3211c208030565e212f981fd081927d71663af70377c11"
        },
        {
          "alg" : "SHA3-384",
          "content" : "235edcf24d27d705f5114b234cc7d089ffd984e5f390c45fdbbcccc6aebd3b549366da79ba686d0fb9aea51251ecddf4"
        },
        {
          "alg" : "SHA3-256",
          "content" : "16bdcbad70b8077bbbe0ee3e756795fc18429b092e8e8d5958c97601c842a331"
        },
        {
          "alg" : "SHA3-512",
          "content" : "976fc84de7d4f565e1fad86d8c3b0567dc21f9de7f8476188febaf48c61398d09876502988ff48dd5e4ea218dec2132f24dd1226b8981000f8021f99fcb2abc7"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.github.docker-java/docker-java-transport-zerodep@3.3.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/docker-java/docker-java"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.github.docker-java/docker-java-transport-zerodep@3.3.3?type=jar"
    },
    {
      "group" : "com.github.docker-java",
      "name" : "docker-java-transport",
      "version" : "3.3.3",
      "description" : "Java API Client for Docker",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "3092d720cf36cbd11aeac0146802bba3"
        },
        {
          "alg" : "SHA-1",
          "content" : "13e7e159a902df2236f6ded371842bf579a8446b"
        },
        {
          "alg" : "SHA-256",
          "content" : "103b94685f398b036cf9243cb8899680bcdb4e54c32340a32b2b5737a87a33ba"
        },
        {
          "alg" : "SHA-512",
          "content" : "f36bd012b5604995e600df37173589c1d4de1ac8c287833e5d693896576505feda17c61139cfe1de91999a5e0e4d06206a47a1bb9792100324c5b77e787decc4"
        },
        {
          "alg" : "SHA-384",
          "content" : "ec41693b23cbc3478e064672a68f3b084e1fa7d255e1820345c156297d4b2c96164fd2624caa380a7b86b0815e99f3c1"
        },
        {
          "alg" : "SHA3-384",
          "content" : "8b6249332c37993cdb83ccbcac0d5e84693ceb67524bbbd81a976930170e2d7611735cf15bb50b7ffedf2ff159c3abcd"
        },
        {
          "alg" : "SHA3-256",
          "content" : "a51368ac93de84ddc0642a345f5ed27a9da5da7e0148d37062f09b0183fc8015"
        },
        {
          "alg" : "SHA3-512",
          "content" : "2acbb6e0c0c4d673017f7236464d32cbd880b1be04e99894f7f3a54b58d7503d6ef5e32596770b4958533a55d676ae7f528f55b9cb22af38b4449dcc3541a9b3"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.github.docker-java/docker-java-transport@3.3.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/docker-java/docker-java"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.github.docker-java/docker-java-transport@3.3.3?type=jar"
    },
    {
      "group" : "net.java.dev.jna",
      "name" : "jna",
      "version" : "5.12.1",
      "description" : "Java Native Access",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "3bab13d7f5ca715013fcac64ceb4108d"
        },
        {
          "alg" : "SHA-1",
          "content" : "b1e93a735caea94f503e95e6fe79bf9cdc1e985d"
        },
        {
          "alg" : "SHA-256",
          "content" : "91a814ac4f40d60dee91d842e1a8ad874c62197984403d0e3c30d39e55cf53b3"
        },
        {
          "alg" : "SHA-512",
          "content" : "5403e494985a53475d9c9268baf1758e37103817bd54865847d67e1adf3dc45287175a12b08a9525837921e7783a55e934a1031cf76d02e55fd4ce6cb2626837"
        },
        {
          "alg" : "SHA-384",
          "content" : "5bd86a58007a752b1ef3f599a54546fda70267442f6c202548cf41fea7bc352bcd6747391be70f261f48a3d5334f99de"
        },
        {
          "alg" : "SHA3-384",
          "content" : "43c58428512271295ecdf158d6951d6d86b8758072e81dd9ccda26ad59b81e8194c9c9ca8a2a6d748f69139927a92124"
        },
        {
          "alg" : "SHA3-256",
          "content" : "6125a65ff81d5af3118d3a1d95fc421aa0ac612f019099efcc1dec9ca614adfa"
        },
        {
          "alg" : "SHA3-512",
          "content" : "d073a2181db5026b0ceb22fbba41c9b84509aa0c5841a4d5f14ac1978bc5b4488c85246ec524d1372f42c7fe7ebf741c1256836cc247d3c4bb446c762549944f"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "LGPL-2.1-or-later",
            "url" : "https://www.gnu.org/licenses/old-licenses/lgpl-2.1-standalone.html"
          }
        },
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/net.java.dev.jna/jna@5.12.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/java-native-access/jna"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/java-native-access/jna"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/net.java.dev.jna/jna@5.12.1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "io.confluent.flink",
      "name" : "flink-table-api-java-bridge",
      "version" : "1.19.3-cp1",
      "description" : "This module contains the Table/SQL API for writing table programs that interact with other Flink APIs using the Java programming language.",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "256faa88a1f6e902593b5ac9e5262c26"
        },
        {
          "alg" : "SHA-1",
          "content" : "a7028eeac8ffc639bf21425dd0a898117a34080e"
        },
        {
          "alg" : "SHA-256",
          "content" : "6fc74816653ae8d773d10c34b5581eede147fd9c9a3bd61c056522d5af9d6516"
        },
        {
          "alg" : "SHA-512",
          "content" : "b688d03f941774b3f705fb119374166bb46119068a3176119813783f742f1a0feff481cdbc23896a5c63ef1996fc5c27e1ed3dd31df66fb3786ecbd97ba2123c"
        },
        {
          "alg" : "SHA-384",
          "content" : "3be6ebaab9e423ce642239c81b41ff30b44616bcab7f57bd05d6b06df01727b7303a1c40d0dc98a89151fce5873ed01c"
        },
        {
          "alg" : "SHA3-384",
          "content" : "7b5dbe0ecc180d2d6df0b638dc988821f354c85ae762a1b29c332066ef8d26b9ed14122ebd5af8b0546f89a2c30b748f"
        },
        {
          "alg" : "SHA3-256",
          "content" : "d10da5c57162b18c2a7896620454cd2e44756fe1f0b4e3efd86d28352542dccf"
        },
        {
          "alg" : "SHA3-512",
          "content" : "670aaec9d1545f070bb4f171ed96ec29294daf1af32442d2c3dee766683b26d25eaf0495ff85146aff203c9d05d7b35e6dd1a9882eee6cbcdfce9acca7781da8"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.confluent.flink/flink-table-api-java-bridge@1.19.3-cp1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://flink.apache.org/flink-table/flink-table-api-java-bridge"
        },
        {
          "type" : "distribution",
          "url" : "s3://cp-flink-staging-654654529379-us-west-2/maven-staging/85e1bccaeab3902aaac2d25e0400b3674b1c6169"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink/flink-table/flink-table-api-java-bridge"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.confluent.flink/flink-table-api-java-bridge@1.19.3-cp1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "io.confluent.flink",
      "name" : "flink-table-api-java",
      "version" : "1.19.3-cp1",
      "description" : "This module contains the Table/SQL API for writing table programs within the table ecosystem using the Java programming language.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "82926310185018c1c50864b5e0ef4736"
        },
        {
          "alg" : "SHA-1",
          "content" : "c92b2b9a61a3e08468e4511b486563dd02501f1d"
        },
        {
          "alg" : "SHA-256",
          "content" : "51a2a72ed528f5101546d6caf7c94dcd2281982855c878e8fd1d48c0b027097d"
        },
        {
          "alg" : "SHA-512",
          "content" : "219ac0fccbcefaf28ebafe3030eacdda15c3a44b08678489954b935a6beff019851eb5c373084cb40bf312e2eb1fc76e6db3ae3cf5a286816121ad14be51bac1"
        },
        {
          "alg" : "SHA-384",
          "content" : "dd8398ea097a60a43d46ddb778b6928dcfca29ef752c2b773dff6a2f8d1a2f59339ae23538cfc9c9c92be506b1a8363f"
        },
        {
          "alg" : "SHA3-384",
          "content" : "7cbb218355b713ee348fe95b44840106e7eb09e38bc297ae0763b665ccdcd2d7633f740d7534c050732c3cdfae0086f1"
        },
        {
          "alg" : "SHA3-256",
          "content" : "5aced19dd220d4a178e5e51d1f280b4b776bdf3fd6a8887cd66ddc273d1ecfa3"
        },
        {
          "alg" : "SHA3-512",
          "content" : "095a28b50becee75f47f5fda8071f8bc0e5b04d99150bac23eb79af64db20d134ec6f9d70a0680071809b92df8d0652e5384c650e47e1276989e943dafad683e"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.confluent.flink/flink-table-api-java@1.19.3-cp1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://flink.apache.org/flink-table/flink-table-api-java"
        },
        {
          "type" : "distribution",
          "url" : "s3://cp-flink-staging-654654529379-us-west-2/maven-staging/85e1bccaeab3902aaac2d25e0400b3674b1c6169"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink/flink-table/flink-table-api-java"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.confluent.flink/flink-table-api-java@1.19.3-cp1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "io.confluent.flink",
      "name" : "flink-table-api-bridge-base",
      "version" : "1.19.3-cp1",
      "description" : "This module contains the base code for bridging between Table API and DataStream API for both Java and Scala.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "122960465904b590db497a742c9be89f"
        },
        {
          "alg" : "SHA-1",
          "content" : "017012cc6f53d75f57c271ef4165a17a3ec184c5"
        },
        {
          "alg" : "SHA-256",
          "content" : "3939c3b1d601c9408a891fe9f3f0af49bde60c17a0d975434033ea08a89f389c"
        },
        {
          "alg" : "SHA-512",
          "content" : "5a52d058dbee23a1be34ce71555e980993895dfd6d5aafee9794fd98dd6e868a03fd428c35a83723cec6423e713e8e71b8e5a507b891f5cfc8cf1fbeda39e46a"
        },
        {
          "alg" : "SHA-384",
          "content" : "beb3c03226317ce26b021caad628433b13498f908fdb9d341e288db5b9d45048971a6b44a7e7c78473200cda54c662f3"
        },
        {
          "alg" : "SHA3-384",
          "content" : "01e564f7e744d49cc7d556c990aa28f2ee7be864f95bcdbd6680d5fd14b8aebf97ac242b47b7a1592cc6eb7ea082f858"
        },
        {
          "alg" : "SHA3-256",
          "content" : "1c35dd516514cf947b06a7baa23f0203b87b6e3cc00d7eb4e2b5ff06cde92263"
        },
        {
          "alg" : "SHA3-512",
          "content" : "320c986c8330dce605697aed250c540b0adbc36b3f6b5a920433d7f26a09cf70e14c980be536d8d60459976a75cc4d02fe6caab7e2157cab46570ea80b1e676e"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.confluent.flink/flink-table-api-bridge-base@1.19.3-cp1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://flink.apache.org/flink-table/flink-table-api-bridge-base"
        },
        {
          "type" : "distribution",
          "url" : "s3://cp-flink-staging-654654529379-us-west-2/maven-staging/85e1bccaeab3902aaac2d25e0400b3674b1c6169"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink/flink-table/flink-table-api-bridge-base"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.confluent.flink/flink-table-api-bridge-base@1.19.3-cp1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "io.confluent.flink",
      "name" : "flink-java",
      "version" : "1.19.3-cp1",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "e65af398101aff5fdfae691cc73319fa"
        },
        {
          "alg" : "SHA-1",
          "content" : "81e13dd58a7ce31c2077da42118d20cd273e7bc9"
        },
        {
          "alg" : "SHA-256",
          "content" : "ed08f168693b7045480ed3fcb100fff66ec04a1463195de46b0ac3642a6f8f00"
        },
        {
          "alg" : "SHA-512",
          "content" : "cb5cb461a09c9669d54ced312508dd48638812b9198870b318810c327d5888400c5f2e5b16d7673df88cc73f87e28938e1d5a641b070136c020e3ff0e8413165"
        },
        {
          "alg" : "SHA-384",
          "content" : "a9f81305d1a7ae9b918ceda62aadafc90b108756de30477167546cdc906e0cc592131dfdf5cf3c08be9208ef06304261"
        },
        {
          "alg" : "SHA3-384",
          "content" : "b0b6b957f49c9c0214891bc5505704549423220aa99dbc86e25e8220bb05e25e50775efbcb07eabc5135d6a751a07429"
        },
        {
          "alg" : "SHA3-256",
          "content" : "10921e24447a8c40bc2ab1a7e13bf796cc5dc6a061966f34e639b2f714a01532"
        },
        {
          "alg" : "SHA3-512",
          "content" : "5247b584fc34a773fa1be3a3a4d0ce6e018a8cb98cced28ee15ef7a693f8d10f23b99c175f22a27364a7caa1d52e76a8b9d2168181757891132405b529b84c6b"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.confluent.flink/flink-java@1.19.3-cp1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://flink.apache.org/flink-java"
        },
        {
          "type" : "distribution",
          "url" : "s3://cp-flink-staging-654654529379-us-west-2/maven-staging/85e1bccaeab3902aaac2d25e0400b3674b1c6169"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink/flink-java"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.confluent.flink/flink-java@1.19.3-cp1?type=jar"
    },
    {
      "publisher" : "com.twitter",
      "group" : "com.twitter",
      "name" : "chill-java",
      "version" : "0.7.6",
      "description" : "chill-java",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "886eb8ef6db3880433f4a8e10ef37300"
        },
        {
          "alg" : "SHA-1",
          "content" : "a74b8d019d6941d82ff86d1612e382f4a0ae8259"
        },
        {
          "alg" : "SHA-256",
          "content" : "f7c41a2257be11e6c9bca97095c8f4b0299626941a3508469f90622eb8f8368e"
        },
        {
          "alg" : "SHA-512",
          "content" : "dc9973909b87cfb85ee45c90662612dd2bc137b7510172221eb47020f76b23eb3ea76c6b4fba4cee5d81e910f87aba71359136d33ae0f6424e3ce7123bf77dbf"
        },
        {
          "alg" : "SHA-384",
          "content" : "41e7faed7c2c22987868fba7cd6dac0d59d174d82d841ba4e5aa8675cc9265bf9d9df021553a781cfa24c4c9c7a35c5c"
        },
        {
          "alg" : "SHA3-384",
          "content" : "32751d6ecd77676ffa11a109dead8c8d19a6d1d78576b19ac5a8323d9446ba51fba87e0d60820dd2bac69fb705aa2061"
        },
        {
          "alg" : "SHA3-256",
          "content" : "6bdf2ed042c5b7f4f4d11bb52e448ce740e18563364f66730ca2b6b4eadf0401"
        },
        {
          "alg" : "SHA3-512",
          "content" : "0ab14bee65d85803d5080f3b0ad86183daafb61e3ca3a610e199bc04a11421b45436e405dc3c227b5d80a64178ca82739eccb5ad8ee157efa925d484d9daae28"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.twitter/chill-java@0.7.6?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/twitter/chill"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.twitter/chill-java@0.7.6?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "io.confluent.flink",
      "name" : "flink-table-runtime",
      "version" : "1.19.3-cp1",
      "description" : "This module contains classes that are required by a task manager for execution of table programs.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "c1fd17656cd161776f397020a24fe9bf"
        },
        {
          "alg" : "SHA-1",
          "content" : "1f6ca852d6a64ccbeec77119a0233f3d7fdfe22a"
        },
        {
          "alg" : "SHA-256",
          "content" : "06331ff81874bc0f1abf87fe084382c960fb0546b67084ec1be791f680a09146"
        },
        {
          "alg" : "SHA-512",
          "content" : "b2e2ff0ef709f84cad42a896b3f65de43ba834a328a4f8d59b5a846d5b661ef014e461d4a970db56bd53aa72791b71f5a02dc6e6eede6d469e7852b8f57d69d4"
        },
        {
          "alg" : "SHA-384",
          "content" : "674ca067658b122b6f2f0f21e022080a62aeafc961e56784a5d1362dc09199c6c4e67e020ecc3b607add73812355212e"
        },
        {
          "alg" : "SHA3-384",
          "content" : "7f89ba00683dadfc3d34855054eaeb9f2928a989dcda45f3c90cb7a5f318d37334aef0aa1d6623ffc26487bcad6f2910"
        },
        {
          "alg" : "SHA3-256",
          "content" : "711ec7c7c7aac042c9f5f5f3d8d579d1e812c18b9c39e226c4858bfe8f5c914b"
        },
        {
          "alg" : "SHA3-512",
          "content" : "b6e3797262d1827b21f4cff5ffeefa4958795c2a8ae919d370615bf0c41fe0505eb6f0586cee0612183ba1665567f0d643a435fad42024273cf22b22e5549a1b"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.confluent.flink/flink-table-runtime@1.19.3-cp1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://flink.apache.org/flink-table/flink-table-runtime"
        },
        {
          "type" : "distribution",
          "url" : "s3://cp-flink-staging-654654529379-us-west-2/maven-staging/85e1bccaeab3902aaac2d25e0400b3674b1c6169"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink/flink-table/flink-table-runtime"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.confluent.flink/flink-table-runtime@1.19.3-cp1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "io.confluent.flink",
      "name" : "flink-cep",
      "version" : "1.19.3-cp1",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "9e095868798a42294f91333a260c7c42"
        },
        {
          "alg" : "SHA-1",
          "content" : "67c6488dee55f862ade557664ee988e3f576cc6a"
        },
        {
          "alg" : "SHA-256",
          "content" : "d040c82c6a2b9896cc8b7091431ac236bbd7e1411c75cab698c99ce54daf6c45"
        },
        {
          "alg" : "SHA-512",
          "content" : "71afcb13cb0d138a7b024ff1e63d9b8e7fc40d58c4c33cb05cfa7fdd2de9453811fbfebdb40480bb807cfbf7338f6172633b4a85b9952c21da23263cd3501f52"
        },
        {
          "alg" : "SHA-384",
          "content" : "10f4c48df8932711838bcd9ca4fedcbef6b8857911eb524bfebf7f69bb27f22649a57711a6d44e778dba1a4b6621a153"
        },
        {
          "alg" : "SHA3-384",
          "content" : "cfa6cef308511dbb1c3b14e292324f944076105fa36a6783ffb36419121e7c4ce25159c0cd848b8c750b774d99f733c9"
        },
        {
          "alg" : "SHA3-256",
          "content" : "4c9fb3177a6daeca22e56364be6f4109ace989839261d6fef864f4ab38e5246a"
        },
        {
          "alg" : "SHA3-512",
          "content" : "2c16b86e1000cbdf1a6a0d43dfeb9a6150892841f837688a8d1b6048ef1c957336ad5837b07dc99692556bc88673afadb0ed5f79e37190617ad565b13433e0fb"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.confluent.flink/flink-cep@1.19.3-cp1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://flink.apache.org/flink-libraries/flink-cep"
        },
        {
          "type" : "distribution",
          "url" : "s3://cp-flink-staging-654654529379-us-west-2/maven-staging/85e1bccaeab3902aaac2d25e0400b3674b1c6169"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink/flink-libraries/flink-cep"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.confluent.flink/flink-cep@1.19.3-cp1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "io.confluent.flink",
      "name" : "flink-table-planner-loader",
      "version" : "1.19.3-cp1",
      "description" : "This module contains the mechanism for loading flink-table-planner through a separate classloader. This allows arbitrary Scala versions in the classpath, hiding the Scala version used by the planner.",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "81dd2997929ae1377561d8ae849ad016"
        },
        {
          "alg" : "SHA-1",
          "content" : "4e743f940c92f8ff93a4004061e3b40f059a5d3c"
        },
        {
          "alg" : "SHA-256",
          "content" : "8d9ffbbf1bfaa0f18b6fd87d6679d3af0dc8365454f9494d740435b594dfc3a7"
        },
        {
          "alg" : "SHA-512",
          "content" : "7fa6a5cd6b162d79e9f128285b033d3fc517a59f43d6d6d1916ff1b16f0c621790657f2b59f55d7829e151137fe8998e47f253e8ef0e23dcfaabd837afc79009"
        },
        {
          "alg" : "SHA-384",
          "content" : "9a2f307837db76b1138109a39981296888edbc31db36724d9d8cf4643a18885b41c4caa1ed73fe327dc6ccac25e549ed"
        },
        {
          "alg" : "SHA3-384",
          "content" : "ef71d438149498ec8c65f58352fcbbfb78ad03a6f72347666f28575156c6bd7ea32063cb717271a26d6587f2ffc4e1fa"
        },
        {
          "alg" : "SHA3-256",
          "content" : "afd3760e7f26ce2821c3b39081963f391b90165d5d85bfbc071d32d636f280de"
        },
        {
          "alg" : "SHA3-512",
          "content" : "4b318eed15084cb47475987670b4b952e389de685771500de82a8a247070574b1a7a51509a9cdfac4794d17ae54c6be3f67e5048d61d7b54de6ee061711c6287"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.confluent.flink/flink-table-planner-loader@1.19.3-cp1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://flink.apache.org/flink-table/flink-table-planner-loader"
        },
        {
          "type" : "distribution",
          "url" : "s3://cp-flink-staging-654654529379-us-west-2/maven-staging/85e1bccaeab3902aaac2d25e0400b3674b1c6169"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink/flink-table/flink-table-planner-loader"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.confluent.flink/flink-table-planner-loader@1.19.3-cp1?type=jar"
    },
    {
      "group" : "io.confluent.flink",
      "name" : "flink-table-common",
      "version" : "1.19.3-cp1",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "551518fc8e0c74442f6ee02a8ce770e1"
        },
        {
          "alg" : "SHA-1",
          "content" : "bd356c147f6bd158ffc6a8e20b026fe6ac2c463e"
        },
        {
          "alg" : "SHA-256",
          "content" : "7a4474cf628898320852878e6b7d0748840bef921eb1deab1e015614f20b82b7"
        },
        {
          "alg" : "SHA-512",
          "content" : "4a00d6f258ae5463a14e9d348f606f381933c2dd19532712893cc86e5e184b5b289dc4ecf90ed50c00ddd205c6647e14ffca870de7c4f99d9043d9103528bfb0"
        },
        {
          "alg" : "SHA-384",
          "content" : "e52feb1d084626fd29060605b58548f45a2aac2833a0ef3bca3b83719765be13b2d3fedb289ec04f0c7fd97e5965c0dd"
        },
        {
          "alg" : "SHA3-384",
          "content" : "dc12d80bb3adad443972bb949005ba3131c928215d8fdcb90b5c011969c034391d3de965570239d1fdae8eda657594bb"
        },
        {
          "alg" : "SHA3-256",
          "content" : "7dcf134d47d80fe2dfa8ca07546715a0a0ce82fa25656b1632c960e0cb04508d"
        },
        {
          "alg" : "SHA3-512",
          "content" : "4d29a2edf7cc8cc330da19264bb443b6eeca3f0952b5941df6f4406df5c9b4a0a9aecd04924f688f9b34c5d1fbff6b88714d0396b4b331061dae268facf6f1a2"
        }
      ],
      "purl" : "pkg:maven/io.confluent.flink/flink-table-common@1.19.3-cp1?classifier=tests&type=test-jar",
      "type" : "library",
      "bom-ref" : "pkg:maven/io.confluent.flink/flink-table-common@1.19.3-cp1?classifier=tests&type=test-jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "io.confluent.flink",
      "name" : "flink-core",
      "version" : "1.19.3-cp1",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "729d067c530fd3ac292fe1da33b32e71"
        },
        {
          "alg" : "SHA-1",
          "content" : "186143cc544ab888a360ff9cb6cc8bfe006be047"
        },
        {
          "alg" : "SHA-256",
          "content" : "60d03eb1206c8e84d824f87f895970cb70e3947fbbdc32ea779229e9e0599c9d"
        },
        {
          "alg" : "SHA-512",
          "content" : "146b5a4045455eb07cbdbede2b2928c3a986a7cbf9e7499ec4a2436665d460d9a971dfccfd8a317d0ae3c52a9154cf1f115d3d158474e440400b789d1d76fc7f"
        },
        {
          "alg" : "SHA-384",
          "content" : "85c6b4a55fab1f9723575e9ebd44f10b0b6673b241a2dbfb84579a35afa9de51d6b28c4f24ea9543f3f8db50b4006814"
        },
        {
          "alg" : "SHA3-384",
          "content" : "423f9090c04cb301a763d996047891f867840c73e6a34866957ff669ca69046884d95f6593bcec1960d5df5b141a2497"
        },
        {
          "alg" : "SHA3-256",
          "content" : "924a332230d59e8700f3ad3beda9e8975d4f1913040fbc2b5773038aee661308"
        },
        {
          "alg" : "SHA3-512",
          "content" : "e27b85561393458c36aca6b80330b7d18d1d97a3a7164643d993c1a9090e997c459ed99d486388de84e261a722f19e556fbd0ad227c7ce73ebfebd7f690cbd61"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.confluent.flink/flink-core@1.19.3-cp1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://flink.apache.org/flink-core"
        },
        {
          "type" : "distribution",
          "url" : "s3://cp-flink-staging-654654529379-us-west-2/maven-staging/85e1bccaeab3902aaac2d25e0400b3674b1c6169"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink/flink-core"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.confluent.flink/flink-core@1.19.3-cp1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.flink",
      "name" : "flink-shaded-asm-9",
      "version" : "9.5-17.0",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "443601ddd70625d741be1d3382dcf012"
        },
        {
          "alg" : "SHA-1",
          "content" : "d09e84a77ad8258d26f6be6bbb31fe81e3f98658"
        },
        {
          "alg" : "SHA-256",
          "content" : "a79273d4fbea1683b5fe81bce25d7fe552a542690481132f7ded034a8f00169e"
        },
        {
          "alg" : "SHA-512",
          "content" : "b1414e5cd4cd63e1e8a2f4a18198834910a360dac22392e298458049d7bf05e74cea2a4206751026ad7dc2348112aa7f223d0ca6178a859cf343cf306a6bd4c8"
        },
        {
          "alg" : "SHA-384",
          "content" : "ff6195b15060e725158aa6c8406e441576c38318fa5ea26e27ffd09f4ed4596b5198579d69ef0192dbb6edb3fda79d40"
        },
        {
          "alg" : "SHA3-384",
          "content" : "2b29ecee21e6bf39e6a913cb1bb41d455ade8ec169b7574b6052972f4cf571fb5374d4dde1a24be0ec4d08246359348f"
        },
        {
          "alg" : "SHA3-256",
          "content" : "353458e2d9919279b41a1b74791b984fef6586f07232d2e71e42892a790052c9"
        },
        {
          "alg" : "SHA3-512",
          "content" : "e491cdd687aaa88d8d84e792caedc02a4ef27d2bdd78e4e9bf286876ce06518c03f0340ff984ffcd507d7982391e5a6f3c4c61e05fbf0e07bd9d5683d493393e"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.flink/flink-shaded-asm-9@9.5-17.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://flink.apache.org/flink-shaded-asm-9"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink-shaded/flink-shaded-asm-9"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.flink/flink-shaded-asm-9@9.5-17.0?type=jar"
    },
    {
      "group" : "com.ibm.icu",
      "name" : "icu4j",
      "version" : "67.1",
      "description" : "International Component for Unicode for Java (ICU4J) is a mature, widely used Java library providing Unicode and Globalization support",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "046a5f59abf6b67a464dea584d11e59d"
        },
        {
          "alg" : "SHA-1",
          "content" : "2e159807158095566726600534034030dddab6d0"
        },
        {
          "alg" : "SHA-256",
          "content" : "c4eb904caf5fba968a2f1a3b8aef14df801e9329b21697209ca30bfcf153867d"
        },
        {
          "alg" : "SHA-512",
          "content" : "b3036b162356a0a5dad39eee611dae27c6fbe53f9e5ec1f3529ab02d49d97093b58602f43dd855433a0bbe02f6253e46a9d1899911c8e2e73001ab2c9a79d68d"
        },
        {
          "alg" : "SHA-384",
          "content" : "c2b28649d0ef9bf68f258a9f432c627a553ead79670f0a7ada3d986091a0001c5ab9eca372f792734bff733370a61fb1"
        },
        {
          "alg" : "SHA3-384",
          "content" : "3726bfa8b77bd0cdd66564944044d82dca3ee1fcf2594ebf1a7acc6752faf4c11892a1744af27e5528dc4b991e4cd0c0"
        },
        {
          "alg" : "SHA3-256",
          "content" : "cb19cec2baad1dc610267b2c98325f5c742230caf2247ef6297dfe8d9be9f11d"
        },
        {
          "alg" : "SHA3-512",
          "content" : "f46e4ead1cc1c05c3825716485ce79c890500a5356f8e7ca578f3080c09fb2460fb1aed81d65d345c402706906ea4e96afc0ff03c50fb0ac5bbacd351a8f11ec"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "Unicode/ICU License",
            "url" : "https://raw.githubusercontent.com/unicode-org/icu/master/icu4c/LICENSE"
          }
        }
      ],
      "purl" : "pkg:maven/com.ibm.icu/icu4j@67.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://icu-project.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://unicode-org.atlassian.net/projects/ICU"
        },
        {
          "type" : "mailing-list",
          "url" : "http://sourceforge.net/mailarchive/forum.php?forum_name=icu-support"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/unicode-org/icu"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.ibm.icu/icu4j@67.1?type=jar"
    },
    {
      "publisher" : "AssertJ",
      "group" : "org.assertj",
      "name" : "assertj-core",
      "version" : "3.23.1",
      "description" : "Rich and fluent assertions for testing for Java",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "3c5640639c17a5311ff5928e02204202"
        },
        {
          "alg" : "SHA-1",
          "content" : "d2bb60570f5b3d7ffa8f8000118c9c07b86eca93"
        },
        {
          "alg" : "SHA-256",
          "content" : "36af798af9fc20537669e02618bd39f2c797f4813824ef222108cb686fa4c88e"
        },
        {
          "alg" : "SHA-512",
          "content" : "0d0d6ff1b4b1561a005fb25d9d3b73052ea792cbc0913636e9ff7cb0c2e4a34871f8424facebefad06f52e5a126025554baa9ca8887c893e15b107dc376cd1ea"
        },
        {
          "alg" : "SHA-384",
          "content" : "647d0ce8fbdacc43b995f982eafccc7494f847a23ac5eff6d51d5c6bc9caf769c84dddd05192133a27225036bbe5a2db"
        },
        {
          "alg" : "SHA3-384",
          "content" : "0a40a6f41fc8a5185cbfed706cfcb2cb124dd4bbdf0ce309f69cd7b3fea78c033fa38758275c90ef315218ef80d7369e"
        },
        {
          "alg" : "SHA3-256",
          "content" : "41b57913563871a9e42974e31ce79808a943f133c6d41e063e568e5f8ab56736"
        },
        {
          "alg" : "SHA3-512",
          "content" : "2e6d4dcc2c83ac3718e6abf09c3fb48072fb661b989250b50694b6bd09196b8f72dbde46912d5c9f3ea1e3f95dd1463fd2e80572872943dfff0490b535f5c444"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.assertj/assertj-core@3.23.1?type=jar",
      "externalReferences" : [
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/assertj/assertj-core/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/assertj/assertj-core"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.assertj/assertj-core@3.23.1?type=jar"
    },
    {
      "group" : "net.bytebuddy",
      "name" : "byte-buddy",
      "version" : "1.14.4",
      "description" : "Byte Buddy is a Java library for creating Java classes at run time. This artifact is a build of Byte Buddy with all ASM dependencies repackaged into its own name space.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "21117c3c69db9aa3080d611640a27bb9"
        },
        {
          "alg" : "SHA-1",
          "content" : "20498aaec9b00a5cfdb831e7bf68feafa833ce4b"
        },
        {
          "alg" : "SHA-256",
          "content" : "7ae2b39ac230be9e3e09ce020406c017ff8ceba06eaf078c62a88c218a0ff2b4"
        },
        {
          "alg" : "SHA-512",
          "content" : "70f33b8da6492db126d414779cda791f919a6aa7ef66b34f86938ba5d905b5b3d7cf2b0e9faf1edd362f1b18cec6a921094af076f3c5a3a390ff2bb4c6186772"
        },
        {
          "alg" : "SHA-384",
          "content" : "9a9543a284b412365b1547e2b284c12a758f67a9f41a11c3cd64db225594391d47f95c14675a0e3696ce5182d80c1949"
        },
        {
          "alg" : "SHA3-384",
          "content" : "1a288d8032cc36c888e62ce034aa3c40e7c8df70bf10d76f6a3ebec3b9c5d88da61ad66a8b9fc74ab2e514bb964f617e"
        },
        {
          "alg" : "SHA3-256",
          "content" : "b519cf5ef8fab6c011fe8ad68ed1bf32e993ad5f13de84cc79b91a9f885b55a5"
        },
        {
          "alg" : "SHA3-512",
          "content" : "b68a097a4914411ca6e631ed0f84bc73c65ff5a53b2e13fe9662f107b64d239fa0d218151712252a7a39cfcabc67bc9e084704b9cdd6103633a1d2ceb566d84e"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/net.bytebuddy/byte-buddy@1.14.4?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://bytebuddy.net/byte-buddy"
        },
        {
          "type" : "distribution",
          "url" : "https://s01.oss.sonatype.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/raphw/byte-buddy/issues"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/net.bytebuddy/byte-buddy@1.14.4?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.flink",
      "name" : "flink-shaded-force-shading",
      "version" : "17.0",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "6890ff555c82f3bb156cf9c73bf09cf9"
        },
        {
          "alg" : "SHA-1",
          "content" : "345c153973a17fb8a98d368352e14893edcbd610"
        },
        {
          "alg" : "SHA-256",
          "content" : "dcc7dff160a40b74fa5db2805b2004153ffd0517968f3c7843a8ee43be82e710"
        },
        {
          "alg" : "SHA-512",
          "content" : "9de23513832248618b78e279c0e3900f5cafb7193254ef6818b4f0b6f3b70045dd9cc4fdd13caeeca8b70a44f38201ce055f07248cdf08930a20e1b7a73997ff"
        },
        {
          "alg" : "SHA-384",
          "content" : "063611872b4b1a1718e0472e32198bded0d74fa656e5c47a7b20038cd5ff70106e3109b60fe882880feea486e1ef83bf"
        },
        {
          "alg" : "SHA3-384",
          "content" : "26f9225d2c401391133dabc97340d1048504deaaae3c6b02ba20b83d4efe8c53a6d4f4e63a04e4317f9bce6b1a1ee013"
        },
        {
          "alg" : "SHA3-256",
          "content" : "aae3e6da763019cc2fd4919df572a3653b46aedaf60a3adb3d28bc7f94023523"
        },
        {
          "alg" : "SHA3-512",
          "content" : "e616e089fb70dc79503b6c235bd8d14c6e7c8e608c87bb4fcd02fe86d6ba27985bac4f144843af9fc7a7c495de7057320ccddea9f571c42bdcaa1c73966f265f"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.flink/flink-shaded-force-shading@17.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://flink.apache.org/flink-shaded-force-shading"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink-shaded/flink-shaded-force-shading"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.flink/flink-shaded-force-shading@17.0?type=jar"
    },
    {
      "publisher" : "QOS.ch",
      "group" : "org.slf4j",
      "name" : "slf4j-api",
      "version" : "1.7.36",
      "description" : "The slf4j API",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "872da51f5de7f3923da4de871d57fd85"
        },
        {
          "alg" : "SHA-1",
          "content" : "6c62681a2f655b49963a5983b8b0950a6120ae14"
        },
        {
          "alg" : "SHA-256",
          "content" : "d3ef575e3e4979678dc01bf1dcce51021493b4d11fb7f1be8ad982877c16a1c0"
        },
        {
          "alg" : "SHA-512",
          "content" : "f9b033fc019a44f98b16048da7e2b59edd4a6a527ba60e358f65ab88e0afae03a9340f1b3e8a543d49fa542290f499c5594259affa1ff3e6e7bf3b428d4c610b"
        },
        {
          "alg" : "SHA-384",
          "content" : "2b14ad035877087157e379d3277dcdcd79e58d6bdb147c47d29e377d75ce53ad42cafbf22f5fb7827c7e946ff4876b9a"
        },
        {
          "alg" : "SHA3-384",
          "content" : "3bc3110dafb8d5be16a39f3b2671a466463cd99eb39610c0e4719a7bf2d928f2ea213c734887c6926a07c4cca7769e4b"
        },
        {
          "alg" : "SHA3-256",
          "content" : "ba2608179fcf46e2291a90b9cbb4aa30d718e481f59c350cc21c73b88d826881"
        },
        {
          "alg" : "SHA3-512",
          "content" : "14c4edcd19702ef607d78826839d8a6d3a39157df54b89a801d3d3cbbe1307131a77671b041c761122730fb1387888c5ec2e46bdd80e1cb07f8f144676441824"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.slf4j.org"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/qos-ch/slf4j/slf4j-api"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
    },
    {
      "group" : "com.google.code.findbugs",
      "name" : "jsr305",
      "version" : "1.3.9",
      "description" : "JSR305 Annotations for Findbugs",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "1d5a772e400b04bb67a7ef4a0e0996d8"
        },
        {
          "alg" : "SHA-1",
          "content" : "40719ea6961c0cb6afaeb6a921eaa1f6afd4cfdf"
        },
        {
          "alg" : "SHA-256",
          "content" : "905721a0eea90a81534abb7ee6ef4ea2e5e645fa1def0a5cd88402df1b46c9ed"
        },
        {
          "alg" : "SHA-512",
          "content" : "06da282cfd8e30d9f8cf17702b8709172b00e22b75a627a1d85f8989615b8a1a401bc25d9aee7b14aed1d9b5df73bf2ea8d66f9c8468d9577c29f0ccfa2cc70a"
        },
        {
          "alg" : "SHA-384",
          "content" : "56e6b41ef62eb5edfed0203802cefae9c2df86388148e420bb0c687abb2b80e14d5c2a82d5b35dce4badaf148f94eada"
        },
        {
          "alg" : "SHA3-384",
          "content" : "58c3bf89fa1afa75c2c5078159fd28e27b2273d437f26aaaa7391310b6f0823f3cf476a24f5631c0881f3f7e946d99be"
        },
        {
          "alg" : "SHA3-256",
          "content" : "c333ea5faedfa78e0614a2620438d5724eab093df4e960918391b6a44c2915b0"
        },
        {
          "alg" : "SHA3-512",
          "content" : "67ec31448e156cc72dd036060b460bb2667a13b1cbe500b6b7eed3235b1994b44c39f440ebd07b21ec9595b166ad61121d4f6a132b5b313c558ab21b72599425"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://findbugs.sourceforge.net/"
        },
        {
          "type" : "vcs",
          "url" : "http://findbugs.googlecode.com/svn/trunk/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"
    },
    {
      "group" : "org.junit.jupiter",
      "name" : "junit-jupiter",
      "version" : "5.10.1",
      "description" : "Module \"junit-jupiter\" of JUnit 5.",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "32fd55a03f648868767c1bebedd198df"
        },
        {
          "alg" : "SHA-1",
          "content" : "6e5c7dd668d6349cb99e52ab8321e73479a309bc"
        },
        {
          "alg" : "SHA-256",
          "content" : "c1a386e901fae28e493185a47c8cea988fb1a37422b353a0f8b4df2e6c5d6037"
        },
        {
          "alg" : "SHA-512",
          "content" : "c97a2f9eefa6f34441fc0c97744873040bbe49d335954edab43bab25876a33f4b3f11347459420569ef660449728aa093bbae5d42c0fa733a0b624706b57a65d"
        },
        {
          "alg" : "SHA-384",
          "content" : "873dfccaf8366ce5b14dc0b5498205debecd90ecba20b1f1c924721764d546b5b9629dd57c486e5a5a2bc38954bf3824"
        },
        {
          "alg" : "SHA3-384",
          "content" : "67f09e3174ae3fac6ddea13b56dcf078165e715cb18afd73d86bb980357e365cef6e62083231f09ae2accddfe62f5bcb"
        },
        {
          "alg" : "SHA3-256",
          "content" : "1c2a60003b13025c959e7728b3f4469b67bad8649d2080c0871418fb52b1c078"
        },
        {
          "alg" : "SHA3-512",
          "content" : "7c03cfaeabed9c57b26e083bcb0ca9a114c491216fc7e9652a39a5468579175e575ace315493610fdc7711c6557eff11933fbd28f5433c237d2277bee102c5a6"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.junit.jupiter/junit-jupiter@5.10.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://junit.org/junit5/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/junit-team/junit5"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.junit.jupiter/junit-jupiter@5.10.1?type=jar"
    },
    {
      "group" : "org.junit.jupiter",
      "name" : "junit-jupiter-api",
      "version" : "5.10.1",
      "description" : "Module \"junit-jupiter-api\" of JUnit 5.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "c6b8b04f2910f6cef6ac10846f43a92d"
        },
        {
          "alg" : "SHA-1",
          "content" : "eb90c7d8bfaae8fdc97b225733fcb595ddd72843"
        },
        {
          "alg" : "SHA-256",
          "content" : "60d5c398c32dc7039b99282514ad6064061d8417cf959a1f6bd2038cc907c913"
        },
        {
          "alg" : "SHA-512",
          "content" : "b1fef44d4aa781bb119ab723c3c2a6f0d27efc4493a1fa26b603c7c7a8884c4d6274bccec6536f120d55f876f8d052aaf6cc003074c27cc704deb2c4bc08b6f0"
        },
        {
          "alg" : "SHA-384",
          "content" : "0fd81f893be859a50766bfbf3bd74bd7d359c6d481b7fe3099e220402f585d3d46b6ad42a36b1d88eefbb6fd27a3cefa"
        },
        {
          "alg" : "SHA3-384",
          "content" : "5e13ba92f757499ca52d719869d318cade9bde9c948ee9c68d753a21ec273f7b56ad68ff8cb281614efeef1d4c479db0"
        },
        {
          "alg" : "SHA3-256",
          "content" : "997c9e0cc57d61a85a8eec568d0f014d47af5bf655602a2c3518b6530b089905"
        },
        {
          "alg" : "SHA3-512",
          "content" : "e97c3e2c1faa1f77b174ef6ce7b24a2339e547f5976a4e40348653e84498e0c3bb96068447facef6df6b54d4af34b807f19b4d2bb1d31e26f97d6dae07843bf6"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.junit.jupiter/junit-jupiter-api@5.10.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://junit.org/junit5/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/junit-team/junit5"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.junit.jupiter/junit-jupiter-api@5.10.1?type=jar"
    },
    {
      "group" : "org.opentest4j",
      "name" : "opentest4j",
      "version" : "1.3.0",
      "description" : "Open Test Alliance for the JVM",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "03c404f727531f3fd3b4c73997899327"
        },
        {
          "alg" : "SHA-1",
          "content" : "152ea56b3a72f655d4fd677fc0ef2596c3dd5e6e"
        },
        {
          "alg" : "SHA-256",
          "content" : "48e2df636cab6563ced64dcdff8abb2355627cb236ef0bf37598682ddf742f1b"
        },
        {
          "alg" : "SHA-512",
          "content" : "78fc698a7871bb50305e3657893c10500595f043348d875f57bc39ca4a6a51eda3967b7c8c8a7ec3e8f85f2171bca4aa98823e912e416e87e81c6ba5b70a37c3"
        },
        {
          "alg" : "SHA-384",
          "content" : "10398b6998c9202a0731e2e19ae1c3f9d8a83582c2663fe7bdda15794ee6fa816727dbd8f7c7164bd5395ee1cfe7c97e"
        },
        {
          "alg" : "SHA3-384",
          "content" : "3abe706fd78509c25a402c7bbf6f9ddf71ffb5b35054864ba0fdf7902207115f888a0ba728fd71d2e87a9360d2498121"
        },
        {
          "alg" : "SHA3-256",
          "content" : "d961907a1bfa1dcda329dca494ffbc251b31fabcaca5ab7095661a8ce3c1d654"
        },
        {
          "alg" : "SHA3-512",
          "content" : "0ad661617bcac51bcd26f7ad4611c69b1fd9811b50dbf734e041a3243ab1f845e7796620e8a7c40c4a2df3946864598b1251396c7d9bd813203d82710788cce0"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.opentest4j/opentest4j@1.3.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/ota4j-team/opentest4j"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/ota4j-team/opentest4j"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.opentest4j/opentest4j@1.3.0?type=jar"
    },
    {
      "group" : "org.junit.platform",
      "name" : "junit-platform-commons",
      "version" : "1.10.1",
      "description" : "Module \"junit-platform-commons\" of JUnit 5.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "cd430f3f7345c0888f8408ce8795c751"
        },
        {
          "alg" : "SHA-1",
          "content" : "2bfcd4a4e38b10c671b6916d7e543c20afe25579"
        },
        {
          "alg" : "SHA-256",
          "content" : "7d9855ee3f3f71f015eb1479559bf923783243c24fbfbd8b29bed8e8099b5672"
        },
        {
          "alg" : "SHA-512",
          "content" : "4aa83350e7a6df21feb9ba8756bb4a68986f33f8c6e384720d1daa448444016c0def1781729788e3e884664abd6703b1e3c0ec6b79893a9d5645c3a4809c0ad2"
        },
        {
          "alg" : "SHA-384",
          "content" : "d264f2c8ceaff384b0f22ee77890195ed3d918b01f338e35fc2ee12f82df15e59533918509f535883b4f4befed28595e"
        },
        {
          "alg" : "SHA3-384",
          "content" : "d1fa76d6b2567e831b37ff7843df6d7d65028d4e53c570c6f580cbbf13269d2aa2afedfedfe5a3f2cf92d7de6d3c89b2"
        },
        {
          "alg" : "SHA3-256",
          "content" : "eef0f968f2d2fc31f8b4a4ed43bafeb46977de1ac3d59477ab6e2b014f97e070"
        },
        {
          "alg" : "SHA3-512",
          "content" : "93340cc2c378c830c755b25006bc4f73ec77ad10661f05625b23efa0854d456da8e62bdbe7e7edf3418dda864e6e0d7a6b9d34cea23d525b8991258f3d75fc9c"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.junit.platform/junit-platform-commons@1.10.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://junit.org/junit5/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/junit-team/junit5"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.junit.platform/junit-platform-commons@1.10.1?type=jar"
    },
    {
      "group" : "org.junit.jupiter",
      "name" : "junit-jupiter-params",
      "version" : "5.10.1",
      "description" : "Module \"junit-jupiter-params\" of JUnit 5.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "5e8e17f6f2a5dedb42d9846a3352dd31"
        },
        {
          "alg" : "SHA-1",
          "content" : "c8f15d4e99940c4564098af78c10809c00fdca06"
        },
        {
          "alg" : "SHA-256",
          "content" : "c8cf62debcbb354deefe1ffd0671eff785514907567d22a615ff8a8de4522b21"
        },
        {
          "alg" : "SHA-512",
          "content" : "dbd8a3bca0a03b6eef54de2b489685c8125e0c6f23cbdb633174b21e07cc7b97a24b55dcb5b60ec1a496683a918bfdf1ea0459950689e3755aa965ea9e106ee9"
        },
        {
          "alg" : "SHA-384",
          "content" : "882b3106163d7c195867e08db9948a0997e1469a23c847bff523efa30a9b274c0588f8228fca98c78abf9b61709a7ff2"
        },
        {
          "alg" : "SHA3-384",
          "content" : "6e4e9a7dbb32cc3f16f21a14fe036aa13488c5b94e3cb6cc53b417c4588b90b5ae118caa3eb9f4bc9c513d06e2c1f408"
        },
        {
          "alg" : "SHA3-256",
          "content" : "171a08027b527e3be1ad66082405eacf4a55746dd983c46d9ff7ee5552276615"
        },
        {
          "alg" : "SHA3-512",
          "content" : "c435b4a17208b67f6fa35ebe74872c3d2c3557b290437bb682ac86701402bbe17d0e53446c674bb94c7feaae4bbfa99d888c7bf7181707e27fe08ff7934c00f6"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.junit.jupiter/junit-jupiter-params@5.10.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://junit.org/junit5/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/junit-team/junit5"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.junit.jupiter/junit-jupiter-params@5.10.1?type=jar"
    },
    {
      "group" : "org.junit.jupiter",
      "name" : "junit-jupiter-engine",
      "version" : "5.10.1",
      "description" : "Module \"junit-jupiter-engine\" of JUnit 5.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "71d86cd027062c4da0796c2493ae94fe"
        },
        {
          "alg" : "SHA-1",
          "content" : "6c9ff773f9aa842b91d1f2fe4658973252ce2428"
        },
        {
          "alg" : "SHA-256",
          "content" : "02930dfe495f93fe70b26550ace3a28f7e1b900c84426c2e4626ce020c7282d6"
        },
        {
          "alg" : "SHA-512",
          "content" : "1fcc9406d1e0301e27538757c9649545d784e83743a8800932971881cfd78a14a264ad13c0b92fad9ae1be50963c540427a19cb2d1fee06888ef48105aad4c8b"
        },
        {
          "alg" : "SHA-384",
          "content" : "6657ac1bb11d7a40bbcb020add01e57edbbc521645116908d857074d9ea319eab3e7b7f2e9fa1ff8df08b5db3774f4dc"
        },
        {
          "alg" : "SHA3-384",
          "content" : "607313914c11274c577b0aaaae6c68aa6ecf25d8302f55d4e334aa6b58df2e543d2399785e2019a56b85aac7716c9623"
        },
        {
          "alg" : "SHA3-256",
          "content" : "be3560971111d3f548bef24aa6660ec2a126fd17b3bd68b7deeb1ab48735a9d1"
        },
        {
          "alg" : "SHA3-512",
          "content" : "4ba6cb70f8fc1918dcedc874340488909c48e0f976d1834ec433f4b5c6cff55b16a996a0443a1b68a0d0ad84a37bf51386633905628728bde08b5820ee67dfaa"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.junit.jupiter/junit-jupiter-engine@5.10.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://junit.org/junit5/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/junit-team/junit5"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.junit.jupiter/junit-jupiter-engine@5.10.1?type=jar"
    },
    {
      "group" : "org.junit.vintage",
      "name" : "junit-vintage-engine",
      "version" : "5.10.1",
      "description" : "Module \"junit-vintage-engine\" of JUnit 5.",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "41ca5da6c302cadb487c4a6e0b9e12b8"
        },
        {
          "alg" : "SHA-1",
          "content" : "25cf537c2c253e83ea23eb605310947661c6f763"
        },
        {
          "alg" : "SHA-256",
          "content" : "96385222c8a415ffe8a2362e73eb2516a7e262f85b10387c6e990a56765604d5"
        },
        {
          "alg" : "SHA-512",
          "content" : "ca3edd5e33978b983a1f157650a2b1a05d4b856e44348c789e65712d18183e4a8947fa8e7946fe4ad4b617b08f3ef3e7fea910bfc253bff6144abe751f6978d9"
        },
        {
          "alg" : "SHA-384",
          "content" : "f865c9de202758057145110aab05d5ce8f94ae566be8f9b474cca891aaa9c23c01a87c1e0902852ef030f09b03ca4ed9"
        },
        {
          "alg" : "SHA3-384",
          "content" : "775716e395203838cc5bc8a490a0b68b7a4d51090ec0c1bdb988c21b88ea5cacf27f7bec44a94cc471443c4284397498"
        },
        {
          "alg" : "SHA3-256",
          "content" : "b654cdbfece37aa9c794975924f3cd61c1f71f737b12cac066a4adf6368cb82c"
        },
        {
          "alg" : "SHA3-512",
          "content" : "495de0eb9d1fad8300e1de520584f754f6d57b6d6723709a60d5509466e0d4de7a69af234ec43f598cda23cead5f36fe9542e0378f8c744e4168e463c3821a0b"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.junit.vintage/junit-vintage-engine@5.10.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://junit.org/junit5/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/junit-team/junit5"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.junit.vintage/junit-vintage-engine@5.10.1?type=jar"
    },
    {
      "group" : "org.junit.platform",
      "name" : "junit-platform-engine",
      "version" : "1.10.1",
      "description" : "Module \"junit-platform-engine\" of JUnit 5.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "4d571057589cd109f3f4bedf7bbf5e7a"
        },
        {
          "alg" : "SHA-1",
          "content" : "f32ae4af74fde68414b8a3d2b7cf1fb43824a83a"
        },
        {
          "alg" : "SHA-256",
          "content" : "baa48e470d6dee7369a0a8820c51da89c1463279eda6e13a304d11f45922c760"
        },
        {
          "alg" : "SHA-512",
          "content" : "52ea2f11ec2ef0457384335d1b09263f4efecf63d9df99c5f8396f74d972722c51f8f766370e85e030f4476e805dac72603296942593c5bbe56993454b9d8e30"
        },
        {
          "alg" : "SHA-384",
          "content" : "7c520e04c995a47c19c94fdcbbcba9bb117696191e6a989a82d9f960e0e315e5cf87d28022ac5cb2701c85d5f38eefde"
        },
        {
          "alg" : "SHA3-384",
          "content" : "79d4f2fb987d6a44174dda99b1bd827e8dfd0399495c3e994371d4f69631212768dee8b891313aac89045388a1bed9db"
        },
        {
          "alg" : "SHA3-256",
          "content" : "5c3fcec688368188688cb6949c1230c2822211e53f3a65b7b3abf4a38051798b"
        },
        {
          "alg" : "SHA3-512",
          "content" : "30a0834e88bbc62287e5f49302c4a07b6da1bf4d9774faddbe7e606fb296c0dcd71c7e90ef8fff3e18dd050e5a19f7b903c91674ff4806cdb97111e4f0cfc199"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.junit.platform/junit-platform-engine@1.10.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://junit.org/junit5/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/junit-team/junit5"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.junit.platform/junit-platform-engine@1.10.1?type=jar"
    },
    {
      "publisher" : "JUnit",
      "group" : "junit",
      "name" : "junit",
      "version" : "4.13.2",
      "description" : "JUnit is a unit testing framework for Java, created by Erich Gamma and Kent Beck.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "d98a9a02a99a9acd22d7653cbcc1f31f"
        },
        {
          "alg" : "SHA-1",
          "content" : "8ac9e16d933b6fb43bc7f576336b8f4d7eb5ba12"
        },
        {
          "alg" : "SHA-256",
          "content" : "8e495b634469d64fb8acfa3495a065cbacc8a0fff55ce1e31007be4c16dc57d3"
        },
        {
          "alg" : "SHA-512",
          "content" : "a31b9950f929a7e5a600d89787ef40e42a8a8e2392e210d0c0f45b3572937670a18a524f1815508cd1152cd1eaa7275cb7430ba45c053be365c83c231bccd3f0"
        },
        {
          "alg" : "SHA-384",
          "content" : "9f85c56a77c699eb87630b9e8224068a34c296bcd9aadb52248dd4665036f5bf1048fe75e5cb590b59e7855ca716acae"
        },
        {
          "alg" : "SHA3-384",
          "content" : "590cfd9396424583879ca8ad732870406bab18325ac72fb2bbe188b9611278d6341700badf7cfc32525b8ff42900c905"
        },
        {
          "alg" : "SHA3-256",
          "content" : "a06b3fd2fd1d9f4306b58125484e3605a395afe5ffe2c801e43ae462f366a430"
        },
        {
          "alg" : "SHA3-512",
          "content" : "a6d25ce3c14f9065f06dfd0e68e1dad5c03bd5de0a302c44ca4733d2cb87ec1bc6f0abd36d65aeee8caf328b6881432c4b682fa4b4b1fa931c3c950de5129fb2"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-1.0",
            "url" : "http://www.eclipse.org/legal/epl-v10.html"
          }
        }
      ],
      "purl" : "pkg:maven/junit/junit@4.13.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://junit.org"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/junit-team/junit4/actions"
        },
        {
          "type" : "distribution",
          "url" : "https://github.com/junit-team/junit4/wiki/Download-and-Install"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/junit-team/junit4/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/junit-team/junit4"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/junit/junit@4.13.2?type=jar"
    },
    {
      "group" : "org.hamcrest",
      "name" : "hamcrest-core",
      "version" : "1.3",
      "description" : "This is the core API of hamcrest matcher framework to be used by third-party framework providers. This includes the a foundation set of matcher implementations for common operations.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "6393363b47ddcbba82321110c3e07519"
        },
        {
          "alg" : "SHA-1",
          "content" : "42a25dc3219429f0e5d060061f71acb49bf010a0"
        },
        {
          "alg" : "SHA-256",
          "content" : "66fdef91e9739348df7a096aa384a5685f4e875584cce89386a7a47251c4d8e9"
        },
        {
          "alg" : "SHA-512",
          "content" : "e237ae735aac4fa5a7253ec693191f42ef7ddce384c11d29fbf605981c0be077d086757409acad53cb5b9e53d86a07cc428d459ff0f5b00d32a8cbbca390be49"
        },
        {
          "alg" : "SHA-384",
          "content" : "4b5297d2a12cc32b824153afc83f1ba9f1869ca288330f0a2f759659d09e4c420eb6ba4a1efbfa0657b625edd41293d5"
        },
        {
          "alg" : "SHA3-384",
          "content" : "b14d34985c0a78cf0ba19b5a18bffd403e08adcb2afde228ddef6e16121c7046dbebf58c04d3419311c4496c48aa93be"
        },
        {
          "alg" : "SHA3-256",
          "content" : "f679af77deedf69b3c3066f7916583848c6fd32a950f9c0b0e2ef1da121717ba"
        },
        {
          "alg" : "SHA3-512",
          "content" : "bca821931e438a1977b7b4356b5f8cebf485634f82159d505c48267c34e6a0f4fde9c2917331365f66dc0e52e2ca3a2db5256863584110c27ecebefc28741f63"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.hamcrest/hamcrest-core@1.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/hamcrest/JavaHamcrest/hamcrest-core"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/hamcrest/JavaHamcrest/hamcrest-core"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.hamcrest/hamcrest-core@1.3?type=jar"
    },
    {
      "group" : "org.apiguardian",
      "name" : "apiguardian-api",
      "version" : "1.1.2",
      "description" : "@API Guardian",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "8c7de3f82037fa4a2e8be2a2f13092af"
        },
        {
          "alg" : "SHA-1",
          "content" : "a231e0d844d2721b0fa1b238006d15c6ded6842a"
        },
        {
          "alg" : "SHA-256",
          "content" : "b509448ac506d607319f182537f0b35d71007582ec741832a1f111e5b5b70b38"
        },
        {
          "alg" : "SHA-512",
          "content" : "d7ccd0e7019f1a997de39d66dc0ad4efe150428fdd7f4c743c93884f1602a3e90135ad34baea96d5b6d925ad6c0c8487c8e78304f0a089a12383d4a62e2c9a61"
        },
        {
          "alg" : "SHA-384",
          "content" : "5ae11cfedcee7da43a506a67946ddc8a7a2622284a924ba78f74541e9a22db6868a15f5d84edb91a541e38afded734ea"
        },
        {
          "alg" : "SHA3-384",
          "content" : "c146116b3dfd969200b2ce52d96b92dd02d6f5a45a86e7e85edf35600ddbc2f3c6e8a1ad7e2db4dcd2c398c09fad0927"
        },
        {
          "alg" : "SHA3-256",
          "content" : "b4b436d7f615fc0b820204e69f83c517d1c1ccc5f6b99e459209ede4482268de"
        },
        {
          "alg" : "SHA3-512",
          "content" : "7b95b7ac68a6891b8901b5507acd2c24a0c1e20effa63cd513764f513eab4eb55f8de5178edbe0a400c11f3a18d3f56243569d6d663100f06dd98288504c09c5"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apiguardian/apiguardian-api@1.1.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/apiguardian-team/apiguardian"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apiguardian-team/apiguardian"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apiguardian/apiguardian-api@1.1.2?type=jar"
    },
    {
      "publisher" : "Joe Walnes, Henri Tremblay, Leonardo Mesquita",
      "group" : "org.objenesis",
      "name" : "objenesis",
      "version" : "2.1",
      "description" : "A library for instantiating Java objects",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "32ccb1d20a42b5aaaceb90c9082a2efa"
        },
        {
          "alg" : "SHA-1",
          "content" : "87c0ea803b69252868d09308b4618f766f135a96"
        },
        {
          "alg" : "SHA-256",
          "content" : "c74330cc6b806c804fd37e74487b4fe5d7c2750c5e15fbc6efa13bdee1bdef80"
        },
        {
          "alg" : "SHA-512",
          "content" : "1dec9ee30812b8006e536a2749c5781ccdc4b446539efb6fa534f22e70562033876bf2eb22c6946d617695729bd65f0f65b984f15f05ac63db5bed215e74427c"
        },
        {
          "alg" : "SHA-384",
          "content" : "657b8a3b80a5475f198425396f7264301f9e0f3ad5dc336ef0c7b46874f5544861a8a2fd48cdb5f672e199a6935c19d1"
        },
        {
          "alg" : "SHA3-384",
          "content" : "e526937d722aad1857869b2d2a0ba5c88815609308c00b776b51614e501de5d93d54978f5bb9cf496bdcc28b1dbd5775"
        },
        {
          "alg" : "SHA3-256",
          "content" : "436cfbb9c208dd03c951708fa4ba6525e2a0b26a873d594a6fbe93ab49082c97"
        },
        {
          "alg" : "SHA3-512",
          "content" : "1e7ee9411df7cfbf0669c38e4ef029155dd718b91db1d182841c740caf8c1057ed273a77f8e32d724c48aaf96815a26ab099c776511ffc5ef351d70ebfa70344"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.objenesis/objenesis@2.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://objenesis.org"
        },
        {
          "type" : "distribution",
          "url" : "http://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/easymock/easymock/objenesis"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.objenesis/objenesis@2.1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.logging.log4j",
      "name" : "log4j-slf4j-impl",
      "version" : "2.17.1",
      "description" : "The Apache Log4j SLF4J API binding to Log4j 2 Core",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "8d0e5934a9c341dbc3493d4039afd985"
        },
        {
          "alg" : "SHA-1",
          "content" : "84692d456bcce689355d33d68167875e486954dd"
        },
        {
          "alg" : "SHA-256",
          "content" : "e9a03720e5d5076009c2530635da9d08485e28a0b0ec20708dadc51afb78e41e"
        },
        {
          "alg" : "SHA-512",
          "content" : "3559e139a0c6d47fa0af233ac079fbde2227d701a846d6e6f7463129f7237e587bc3c337aebe5e4088f633ea83d1456dbc5b1999d1d485da67bfe2d5c12cde21"
        },
        {
          "alg" : "SHA-384",
          "content" : "ba0f5d2de2c0a7f816cb7ef98e9449e4a975ba5e34f1634e8eae6f84855df84ae6b2baf0c4762636fe5c337d6c561ef9"
        },
        {
          "alg" : "SHA3-384",
          "content" : "5aad3fca6b7600c428992b117e96e772c747927f71cbb4ba90ea8922266e64963584676d7a2ffcc9d293fbe8edf4dcd6"
        },
        {
          "alg" : "SHA3-256",
          "content" : "b077fe134c26804f8eafda8a0bb91703a54e499ec96859220cddfff8e561dd06"
        },
        {
          "alg" : "SHA3-512",
          "content" : "b5b10d7d8f416c3fa70146ceab14513a002f723e83f3418f39e1b67bf394faeeed10262743f6c1cc5ea26c29162b1445283523c0133be2374c62a7066c4cd916"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.logging.log4j/log4j-slf4j-impl@2.17.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://logging.apache.org/log4j/2.x/log4j-slf4j-impl/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-builds.apache.org/job/Logging/job/log4j/"
        },
        {
          "type" : "distribution",
          "url" : "https://logging.apache.org/log4j/2.x/download.html"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/LOG4J2"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?log4j-user@logging.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=logging-log4j2.git/log4j-slf4j-impl"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.logging.log4j/log4j-slf4j-impl@2.17.1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.logging.log4j",
      "name" : "log4j-api",
      "version" : "2.17.1",
      "description" : "The Apache Log4j API",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "dfd5f2d81aba31583ee87fe16c7b78f8"
        },
        {
          "alg" : "SHA-1",
          "content" : "d771af8e336e372fb5399c99edabe0919aeaf5b2"
        },
        {
          "alg" : "SHA-256",
          "content" : "b0d8a4c8ab4fb8b1888d0095822703b0e6d4793c419550203da9e69196161de4"
        },
        {
          "alg" : "SHA-512",
          "content" : "48a58c2f317d451ac1622bdfbfa5d3cd9de45d40d5d5df98f39fe6d53c74da56e200f8e3d19a309d4e1ea364369379c0ef9d79b928fc20ea743857f347259c03"
        },
        {
          "alg" : "SHA-384",
          "content" : "3686abf7edebe4bd29bdae0495a6b881d38cfe7a870350d1f1b43056f51c25cd39a5fccb74a28abf62069862dd25e416"
        },
        {
          "alg" : "SHA3-384",
          "content" : "34ded426dd53323c7588f09cb17afc37798d090914608c4a8e88ff3cdcf872a6dccf042423a6bf2d92e9ab35252de92b"
        },
        {
          "alg" : "SHA3-256",
          "content" : "5b1dce647c9dfb24ced20d78c87c213d96d697ed17c1db97e538071c0c06702d"
        },
        {
          "alg" : "SHA3-512",
          "content" : "2e9070e21fd4b9b9aaa7794dea2da75144dd116fbc9f24935d57b32306c1901f815dbaa1fd9c76712990481ac399ccb51bb27e9ee3a3a27b42bcfbc2d68f371d"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.logging.log4j/log4j-api@2.17.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://logging.apache.org/log4j/2.x/log4j-api/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-builds.apache.org/job/Logging/job/log4j/"
        },
        {
          "type" : "distribution",
          "url" : "https://logging.apache.org/log4j/2.x/download.html"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/LOG4J2"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?log4j-user@logging.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=logging-log4j2.git/log4j-api"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.logging.log4j/log4j-api@2.17.1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.logging.log4j",
      "name" : "log4j-core",
      "version" : "2.17.1",
      "description" : "The Apache Log4j Implementation",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "8d2f5c52700336dae846b2c3ecde7a6e"
        },
        {
          "alg" : "SHA-1",
          "content" : "779f60f3844dadc3ef597976fcb1e5127b1f343d"
        },
        {
          "alg" : "SHA-256",
          "content" : "c967f223487980b9364e94a7c7f9a8a01fd3ee7c19bdbf0b0f9f8cb8511f3d41"
        },
        {
          "alg" : "SHA-512",
          "content" : "8d3d6a17afc41cde43b19c9a696793d009d9271bc6430762f10157018453f8a53cde6e6aa4f3f0b703eaf1f2944d047398d29b470924ecc3290d1923b0e29750"
        },
        {
          "alg" : "SHA-384",
          "content" : "28500f2bb8fa430788eb526d8197671b9bcb49cc8a04fac22b12ae0c46bfefd682f1ce363cb237e41ae87185635e8ff3"
        },
        {
          "alg" : "SHA3-384",
          "content" : "5814742e87b0ba1308c883194b5cc16a57c2003aaac774e0c0b09d829231b9844dd16591af3711024cad90043ebecbf6"
        },
        {
          "alg" : "SHA3-256",
          "content" : "4cd95a3c8d119b4033f263c00ec414c7f3c8ccee68d013bdfae161d33872677f"
        },
        {
          "alg" : "SHA3-512",
          "content" : "c9b7e15624039cc442ab92e0eccf1ce2c2020f636d39d49da9a33fa95997db89c991c57f087bc1321980c319b894a07d631bd6d7c10c611a9cfb29ee5550003f"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.logging.log4j/log4j-core@2.17.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://logging.apache.org/log4j/2.x/log4j-core/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-builds.apache.org/job/Logging/job/log4j/"
        },
        {
          "type" : "distribution",
          "url" : "https://logging.apache.org/log4j/2.x/download.html"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/LOG4J2"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?log4j-user@logging.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=logging-log4j2.git/log4j-core"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.logging.log4j/log4j-core@2.17.1?type=jar"
    }
  ],
  "dependencies" : [
    {
      "ref" : "pkg:maven/io.confluent.flink/flink-table-test-utils@1.19.3-cp1?type=jar",
      "dependsOn" : [
        "pkg:maven/io.confluent.flink/flink-test-utils@1.19.3-cp1?type=jar",
        "pkg:maven/io.confluent.flink/flink-test-utils-junit@1.19.3-cp1?type=jar",
        "pkg:maven/io.confluent.flink/flink-table-api-java-bridge@1.19.3-cp1?type=jar",
        "pkg:maven/io.confluent.flink/flink-table-runtime@1.19.3-cp1?type=jar",
        "pkg:maven/io.confluent.flink/flink-table-planner-loader@1.19.3-cp1?type=jar",
        "pkg:maven/io.confluent.flink/flink-table-common@1.19.3-cp1?classifier=tests&type=test-jar",
        "pkg:maven/org.assertj/assertj-core@3.23.1?type=jar",
        "pkg:maven/org.apache.flink/flink-shaded-force-shading@17.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.confluent.flink/flink-test-utils@1.19.3-cp1?type=jar",
      "dependsOn" : [
        "pkg:maven/io.confluent.flink/flink-table-common@1.19.3-cp1?type=jar",
        "pkg:maven/io.confluent.flink/flink-runtime@1.19.3-cp1?type=jar",
        "pkg:maven/io.confluent.flink/flink-runtime@1.19.3-cp1?classifier=tests&type=test-jar",
        "pkg:maven/io.confluent.flink/flink-core@1.19.3-cp1?classifier=tests&type=test-jar",
        "pkg:maven/io.confluent.flink/flink-rpc-akka-loader@1.19.3-cp1?classifier=tests&type=test-jar",
        "pkg:maven/io.confluent.flink/flink-clients@1.19.3-cp1?type=jar",
        "pkg:maven/io.confluent.flink/flink-streaming-java@1.19.3-cp1?type=jar",
        "pkg:maven/org.junit.jupiter/junit-jupiter@5.10.1?type=jar",
        "pkg:maven/io.confluent.flink/flink-streaming-java@1.19.3-cp1?classifier=tests&type=test-jar",
        "pkg:maven/io.confluent.flink/flink-statebackend-rocksdb@1.19.3-cp1?type=jar",
        "pkg:maven/io.confluent.flink/flink-statebackend-changelog@1.19.3-cp1?type=jar",
        "pkg:maven/io.confluent.flink/flink-dstl-dfs@1.19.3-cp1?type=jar",
        "pkg:maven/org.apache.curator/curator-test@5.4.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.confluent.flink/flink-table-common@1.19.3-cp1?type=jar",
      "dependsOn" : [
        "pkg:maven/io.confluent.flink/flink-core@1.19.3-cp1?type=jar",
        "pkg:maven/org.apache.flink/flink-shaded-asm-9@9.5-17.0?type=jar",
        "pkg:maven/com.ibm.icu/icu4j@67.1?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.confluent.flink/flink-core@1.19.3-cp1?type=jar",
      "dependsOn" : [
        "pkg:maven/io.confluent.flink/flink-annotations@1.19.3-cp1?type=jar",
        "pkg:maven/io.confluent.flink/flink-metrics-core@1.19.3-cp1?type=jar",
        "pkg:maven/org.apache.flink/flink-shaded-asm-9@9.5-17.0?type=jar",
        "pkg:maven/org.apache.flink/flink-shaded-jackson@2.14.2-17.0?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar",
        "pkg:maven/org.snakeyaml/snakeyaml-engine@2.6?type=jar",
        "pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar",
        "pkg:maven/com.esotericsoftware.kryo/kryo@2.24.0?type=jar",
        "pkg:maven/commons-collections/commons-collections@3.2.2?type=jar",
        "pkg:maven/org.apache.commons/commons-compress@1.26.0?type=jar",
        "pkg:maven/org.apache.flink/flink-shaded-guava@31.1-jre-17.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.confluent.flink/flink-annotations@1.19.3-cp1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.confluent.flink/flink-metrics-core@1.19.3-cp1?type=jar",
      "dependsOn" : [
        "pkg:maven/io.confluent.flink/flink-annotations@1.19.3-cp1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.flink/flink-shaded-asm-9@9.5-17.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.flink/flink-shaded-jackson@2.14.2-17.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.snakeyaml/snakeyaml-engine@2.6?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.esotericsoftware.kryo/kryo@2.24.0?type=jar",
      "dependsOn" : [
        "pkg:maven/com.esotericsoftware.minlog/minlog@1.2?type=jar",
        "pkg:maven/org.objenesis/objenesis@2.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.esotericsoftware.minlog/minlog@1.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.objenesis/objenesis@2.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/commons-collections/commons-collections@3.2.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-compress@1.26.0?type=jar",
      "dependsOn" : [
        "pkg:maven/commons-io/commons-io@2.15.1?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/commons-io/commons-io@2.15.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.flink/flink-shaded-guava@31.1-jre-17.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.ibm.icu/icu4j@67.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.confluent.flink/flink-runtime@1.19.3-cp1?type=jar",
      "dependsOn" : [
        "pkg:maven/io.confluent.flink/flink-core@1.19.3-cp1?type=jar",
        "pkg:maven/io.confluent.flink/flink-rpc-core@1.19.3-cp1?type=jar",
        "pkg:maven/io.confluent.flink/flink-rpc-akka-loader@1.19.3-cp1?type=jar",
        "pkg:maven/io.confluent.flink/flink-java@1.19.3-cp1?type=jar",
        "pkg:maven/io.confluent.flink/flink-queryable-state-client-java@1.19.3-cp1?type=jar",
        "pkg:maven/io.confluent.flink/flink-hadoop-fs@1.19.3-cp1?type=jar",
        "pkg:maven/commons-io/commons-io@2.15.1?type=jar",
        "pkg:maven/org.apache.flink/flink-shaded-netty@4.1.91.Final-17.0?type=jar",
        "pkg:maven/org.apache.flink/flink-shaded-guava@31.1-jre-17.0?type=jar",
        "pkg:maven/org.apache.flink/flink-shaded-jackson@2.14.2-17.0?type=jar",
        "pkg:maven/org.apache.flink/flink-shaded-zookeeper-3@3.7.1-17.0?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar",
        "pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar",
        "pkg:maven/commons-cli/commons-cli@1.5.0?type=jar",
        "pkg:maven/org.javassist/javassist@3.24.0-GA?type=jar",
        "pkg:maven/org.xerial.snappy/snappy-java@1.1.10.4?type=jar",
        "pkg:maven/tools.profiler/async-profiler@2.9?type=jar",
        "pkg:maven/org.lz4/lz4-java@1.8.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.confluent.flink/flink-rpc-core@1.19.3-cp1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.confluent.flink/flink-rpc-akka-loader@1.19.3-cp1?type=jar",
      "dependsOn" : [
        "pkg:maven/io.confluent.flink/flink-core@1.19.3-cp1?type=jar",
        "pkg:maven/io.confluent.flink/flink-rpc-core@1.19.3-cp1?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.confluent.flink/flink-java@1.19.3-cp1?type=jar",
      "dependsOn" : [
        "pkg:maven/io.confluent.flink/flink-core@1.19.3-cp1?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar",
        "pkg:maven/org.apache.commons/commons-math3@3.6.1?type=jar",
        "pkg:maven/com.twitter/chill-java@0.7.6?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-math3@3.6.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.twitter/chill-java@0.7.6?type=jar",
      "dependsOn" : [
        "pkg:maven/com.esotericsoftware.kryo/kryo@2.24.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.confluent.flink/flink-queryable-state-client-java@1.19.3-cp1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.flink/flink-shaded-netty@4.1.91.Final-17.0?type=jar",
        "pkg:maven/org.apache.flink/flink-shaded-guava@31.1-jre-17.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.flink/flink-shaded-netty@4.1.91.Final-17.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.confluent.flink/flink-hadoop-fs@1.19.3-cp1?type=jar",
      "dependsOn" : [
        "pkg:maven/io.confluent.flink/flink-core@1.19.3-cp1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.flink/flink-shaded-zookeeper-3@3.7.1-17.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/commons-cli/commons-cli@1.5.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.javassist/javassist@3.24.0-GA?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.xerial.snappy/snappy-java@1.1.10.4?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/tools.profiler/async-profiler@2.9?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.lz4/lz4-java@1.8.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.confluent.flink/flink-runtime@1.19.3-cp1?classifier=tests&type=test-jar",
      "dependsOn" : [
        "pkg:maven/io.confluent.flink/flink-core@1.19.3-cp1?type=jar",
        "pkg:maven/io.confluent.flink/flink-rpc-core@1.19.3-cp1?type=jar",
        "pkg:maven/io.confluent.flink/flink-rpc-akka-loader@1.19.3-cp1?type=jar",
        "pkg:maven/io.confluent.flink/flink-java@1.19.3-cp1?type=jar",
        "pkg:maven/io.confluent.flink/flink-queryable-state-client-java@1.19.3-cp1?type=jar",
        "pkg:maven/io.confluent.flink/flink-hadoop-fs@1.19.3-cp1?type=jar",
        "pkg:maven/commons-io/commons-io@2.15.1?type=jar",
        "pkg:maven/org.apache.flink/flink-shaded-netty@4.1.91.Final-17.0?type=jar",
        "pkg:maven/org.apache.flink/flink-shaded-guava@31.1-jre-17.0?type=jar",
        "pkg:maven/org.apache.flink/flink-shaded-jackson@2.14.2-17.0?type=jar",
        "pkg:maven/org.apache.flink/flink-shaded-zookeeper-3@3.7.1-17.0?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar",
        "pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar",
        "pkg:maven/commons-cli/commons-cli@1.5.0?type=jar",
        "pkg:maven/org.javassist/javassist@3.24.0-GA?type=jar",
        "pkg:maven/org.xerial.snappy/snappy-java@1.1.10.4?type=jar",
        "pkg:maven/tools.profiler/async-profiler@2.9?type=jar",
        "pkg:maven/org.lz4/lz4-java@1.8.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.confluent.flink/flink-core@1.19.3-cp1?classifier=tests&type=test-jar",
      "dependsOn" : [
        "pkg:maven/io.confluent.flink/flink-annotations@1.19.3-cp1?type=jar",
        "pkg:maven/io.confluent.flink/flink-metrics-core@1.19.3-cp1?type=jar",
        "pkg:maven/org.apache.flink/flink-shaded-asm-9@9.5-17.0?type=jar",
        "pkg:maven/org.apache.flink/flink-shaded-jackson@2.14.2-17.0?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar",
        "pkg:maven/org.snakeyaml/snakeyaml-engine@2.6?type=jar",
        "pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar",
        "pkg:maven/com.esotericsoftware.kryo/kryo@2.24.0?type=jar",
        "pkg:maven/commons-collections/commons-collections@3.2.2?type=jar",
        "pkg:maven/org.apache.commons/commons-compress@1.26.0?type=jar",
        "pkg:maven/org.apache.flink/flink-shaded-guava@31.1-jre-17.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.confluent.flink/flink-rpc-akka-loader@1.19.3-cp1?classifier=tests&type=test-jar",
      "dependsOn" : [
        "pkg:maven/io.confluent.flink/flink-core@1.19.3-cp1?type=jar",
        "pkg:maven/io.confluent.flink/flink-rpc-core@1.19.3-cp1?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.confluent.flink/flink-clients@1.19.3-cp1?type=jar",
      "dependsOn" : [
        "pkg:maven/io.confluent.flink/flink-core@1.19.3-cp1?type=jar",
        "pkg:maven/io.confluent.flink/flink-runtime@1.19.3-cp1?type=jar",
        "pkg:maven/io.confluent.flink/flink-optimizer@1.19.3-cp1?type=jar",
        "pkg:maven/io.confluent.flink/flink-java@1.19.3-cp1?type=jar",
        "pkg:maven/commons-cli/commons-cli@1.5.0?type=jar",
        "pkg:maven/io.confluent.flink/flink-streaming-java@1.19.3-cp1?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.confluent.flink/flink-optimizer@1.19.3-cp1?type=jar",
      "dependsOn" : [
        "pkg:maven/io.confluent.flink/flink-core@1.19.3-cp1?type=jar",
        "pkg:maven/io.confluent.flink/flink-runtime@1.19.3-cp1?type=jar",
        "pkg:maven/io.confluent.flink/flink-java@1.19.3-cp1?type=jar",
        "pkg:maven/org.apache.flink/flink-shaded-guava@31.1-jre-17.0?type=jar",
        "pkg:maven/org.apache.flink/flink-shaded-jackson@2.14.2-17.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.confluent.flink/flink-streaming-java@1.19.3-cp1?type=jar",
      "dependsOn" : [
        "pkg:maven/io.confluent.flink/flink-core@1.19.3-cp1?type=jar",
        "pkg:maven/io.confluent.flink/flink-file-sink-common@1.19.3-cp1?type=jar",
        "pkg:maven/io.confluent.flink/flink-runtime@1.19.3-cp1?type=jar",
        "pkg:maven/io.confluent.flink/flink-java@1.19.3-cp1?type=jar",
        "pkg:maven/org.apache.flink/flink-shaded-guava@31.1-jre-17.0?type=jar",
        "pkg:maven/org.apache.commons/commons-math3@3.6.1?type=jar",
        "pkg:maven/io.confluent.flink/flink-connector-datagen@1.19.3-cp1?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.confluent.flink/flink-file-sink-common@1.19.3-cp1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.confluent.flink/flink-connector-datagen@1.19.3-cp1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.junit.jupiter/junit-jupiter@5.10.1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.junit.jupiter/junit-jupiter-api@5.10.1?type=jar",
        "pkg:maven/org.junit.jupiter/junit-jupiter-params@5.10.1?type=jar",
        "pkg:maven/org.junit.jupiter/junit-jupiter-engine@5.10.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.junit.jupiter/junit-jupiter-api@5.10.1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.opentest4j/opentest4j@1.3.0?type=jar",
        "pkg:maven/org.junit.platform/junit-platform-commons@1.10.1?type=jar",
        "pkg:maven/org.apiguardian/apiguardian-api@1.1.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.opentest4j/opentest4j@1.3.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.junit.platform/junit-platform-commons@1.10.1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apiguardian/apiguardian-api@1.1.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apiguardian/apiguardian-api@1.1.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.junit.jupiter/junit-jupiter-params@5.10.1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.junit.jupiter/junit-jupiter-api@5.10.1?type=jar",
        "pkg:maven/org.apiguardian/apiguardian-api@1.1.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.junit.jupiter/junit-jupiter-engine@5.10.1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.junit.platform/junit-platform-engine@1.10.1?type=jar",
        "pkg:maven/org.junit.jupiter/junit-jupiter-api@5.10.1?type=jar",
        "pkg:maven/org.apiguardian/apiguardian-api@1.1.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.junit.platform/junit-platform-engine@1.10.1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.opentest4j/opentest4j@1.3.0?type=jar",
        "pkg:maven/org.junit.platform/junit-platform-commons@1.10.1?type=jar",
        "pkg:maven/org.apiguardian/apiguardian-api@1.1.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.confluent.flink/flink-streaming-java@1.19.3-cp1?classifier=tests&type=test-jar",
      "dependsOn" : [
        "pkg:maven/io.confluent.flink/flink-core@1.19.3-cp1?type=jar",
        "pkg:maven/io.confluent.flink/flink-file-sink-common@1.19.3-cp1?type=jar",
        "pkg:maven/io.confluent.flink/flink-runtime@1.19.3-cp1?type=jar",
        "pkg:maven/io.confluent.flink/flink-java@1.19.3-cp1?type=jar",
        "pkg:maven/org.apache.flink/flink-shaded-guava@31.1-jre-17.0?type=jar",
        "pkg:maven/org.apache.commons/commons-math3@3.6.1?type=jar",
        "pkg:maven/io.confluent.flink/flink-connector-datagen@1.19.3-cp1?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.confluent.flink/flink-statebackend-rocksdb@1.19.3-cp1?type=jar",
      "dependsOn" : [
        "pkg:maven/com.ververica/frocksdbjni@6.20.3-ververica-2.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.ververica/frocksdbjni@6.20.3-ververica-2.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.confluent.flink/flink-statebackend-changelog@1.19.3-cp1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.flink/flink-shaded-guava@31.1-jre-17.0?type=jar",
        "pkg:maven/io.confluent.flink/flink-statebackend-common@1.19.3-cp1?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.confluent.flink/flink-statebackend-common@1.19.3-cp1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.flink/flink-shaded-guava@31.1-jre-17.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.confluent.flink/flink-dstl-dfs@1.19.3-cp1?type=jar",
      "dependsOn" : [
        "pkg:maven/io.confluent.flink/flink-core@1.19.3-cp1?type=jar",
        "pkg:maven/io.confluent.flink/flink-runtime@1.19.3-cp1?type=jar",
        "pkg:maven/io.confluent.flink/flink-streaming-java@1.19.3-cp1?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.curator/curator-test@5.4.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.zookeeper/zookeeper@3.7.1?type=jar",
        "pkg:maven/io.dropwizard.metrics/metrics-core@3.2.5?type=jar",
        "pkg:maven/org.xerial.snappy/snappy-java@1.1.10.4?type=jar",
        "pkg:maven/com.google.guava/guava@32.1.3-jre?type=jar",
        "pkg:maven/org.junit.jupiter/junit-jupiter-api@5.10.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.zookeeper/zookeeper@3.7.1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.zookeeper/zookeeper-jute@3.7.1?type=jar",
        "pkg:maven/org.apache.yetus/audience-annotations@0.12.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.zookeeper/zookeeper-jute@3.7.1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.yetus/audience-annotations@0.12.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.yetus/audience-annotations@0.12.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.dropwizard.metrics/metrics-core@3.2.5?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.google.guava/guava@32.1.3-jre?type=jar",
      "dependsOn" : [
        "pkg:maven/com.google.guava/failureaccess@1.0.1?type=jar",
        "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar",
        "pkg:maven/org.checkerframework/checker-qual@3.37.0?type=jar",
        "pkg:maven/com.google.errorprone/error_prone_annotations@2.21.1?type=jar",
        "pkg:maven/com.google.j2objc/j2objc-annotations@2.8?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.google.guava/failureaccess@1.0.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.checkerframework/checker-qual@3.37.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.21.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.google.j2objc/j2objc-annotations@2.8?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.confluent.flink/flink-test-utils-junit@1.19.3-cp1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.junit.jupiter/junit-jupiter@5.10.1?type=jar",
        "pkg:maven/org.junit.vintage/junit-vintage-engine@5.10.1?type=jar",
        "pkg:maven/org.apache.logging.log4j/log4j-slf4j-impl@2.17.1?type=jar",
        "pkg:maven/org.apache.logging.log4j/log4j-api@2.17.1?type=jar",
        "pkg:maven/org.apache.logging.log4j/log4j-core@2.17.1?type=jar",
        "pkg:maven/org.testcontainers/testcontainers@1.19.1?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.junit.vintage/junit-vintage-engine@5.10.1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.junit.platform/junit-platform-engine@1.10.1?type=jar",
        "pkg:maven/junit/junit@4.13.2?type=jar",
        "pkg:maven/org.apiguardian/apiguardian-api@1.1.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/junit/junit@4.13.2?type=jar",
      "dependsOn" : [
        "pkg:maven/org.hamcrest/hamcrest-core@1.3?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.hamcrest/hamcrest-core@1.3?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.logging.log4j/log4j-slf4j-impl@2.17.1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/org.apache.logging.log4j/log4j-api@2.17.1?type=jar",
        "pkg:maven/org.apache.logging.log4j/log4j-core@2.17.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.logging.log4j/log4j-api@2.17.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.logging.log4j/log4j-core@2.17.1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.logging.log4j/log4j-api@2.17.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.testcontainers/testcontainers@1.19.1?type=jar",
      "dependsOn" : [
        "pkg:maven/junit/junit@4.13.2?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/org.apache.commons/commons-compress@1.26.0?type=jar",
        "pkg:maven/org.rnorth.duct-tape/duct-tape@1.0.8?type=jar",
        "pkg:maven/com.github.docker-java/docker-java-api@3.3.3?type=jar",
        "pkg:maven/com.github.docker-java/docker-java-transport-zerodep@3.3.3?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.rnorth.duct-tape/duct-tape@1.0.8?type=jar",
      "dependsOn" : [
        "pkg:maven/org.jetbrains/annotations@17.0.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.jetbrains/annotations@17.0.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.github.docker-java/docker-java-api@3.3.3?type=jar",
      "dependsOn" : [
        "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.15.3?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.15.3?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.github.docker-java/docker-java-transport-zerodep@3.3.3?type=jar",
      "dependsOn" : [
        "pkg:maven/com.github.docker-java/docker-java-transport@3.3.3?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/net.java.dev.jna/jna@5.12.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.github.docker-java/docker-java-transport@3.3.3?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/net.java.dev.jna/jna@5.12.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.confluent.flink/flink-table-api-java-bridge@1.19.3-cp1?type=jar",
      "dependsOn" : [
        "pkg:maven/io.confluent.flink/flink-table-api-java@1.19.3-cp1?type=jar",
        "pkg:maven/io.confluent.flink/flink-table-api-bridge-base@1.19.3-cp1?type=jar",
        "pkg:maven/io.confluent.flink/flink-java@1.19.3-cp1?type=jar",
        "pkg:maven/io.confluent.flink/flink-streaming-java@1.19.3-cp1?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.confluent.flink/flink-table-api-java@1.19.3-cp1?type=jar",
      "dependsOn" : [
        "pkg:maven/io.confluent.flink/flink-table-common@1.19.3-cp1?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.confluent.flink/flink-table-api-bridge-base@1.19.3-cp1?type=jar",
      "dependsOn" : [
        "pkg:maven/io.confluent.flink/flink-java@1.19.3-cp1?type=jar",
        "pkg:maven/io.confluent.flink/flink-streaming-java@1.19.3-cp1?type=jar",
        "pkg:maven/io.confluent.flink/flink-table-api-java@1.19.3-cp1?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.confluent.flink/flink-table-runtime@1.19.3-cp1?type=jar",
      "dependsOn" : [
        "pkg:maven/io.confluent.flink/flink-table-common@1.19.3-cp1?type=jar",
        "pkg:maven/io.confluent.flink/flink-table-api-java@1.19.3-cp1?type=jar",
        "pkg:maven/io.confluent.flink/flink-table-api-java-bridge@1.19.3-cp1?type=jar",
        "pkg:maven/io.confluent.flink/flink-cep@1.19.3-cp1?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.confluent.flink/flink-cep@1.19.3-cp1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.flink/flink-shaded-guava@31.1-jre-17.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.confluent.flink/flink-table-planner-loader@1.19.3-cp1?type=jar",
      "dependsOn" : [
        "pkg:maven/io.confluent.flink/flink-table-api-bridge-base@1.19.3-cp1?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.confluent.flink/flink-table-common@1.19.3-cp1?classifier=tests&type=test-jar",
      "dependsOn" : [
        "pkg:maven/io.confluent.flink/flink-core@1.19.3-cp1?type=jar",
        "pkg:maven/org.apache.flink/flink-shaded-asm-9@9.5-17.0?type=jar",
        "pkg:maven/com.ibm.icu/icu4j@67.1?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.assertj/assertj-core@3.23.1?type=jar",
      "dependsOn" : [
        "pkg:maven/net.bytebuddy/byte-buddy@1.14.4?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/net.bytebuddy/byte-buddy@1.14.4?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.flink/flink-shaded-force-shading@17.0?type=jar",
      "dependsOn" : [ ]
    }
  ]
}