<?xml version="1.0" encoding="UTF-8"?>
<bom serialNumber="urn:uuid:b73554a1-d14d-4962-a146-269ff6627634" version="1" xmlns="http://cyclonedx.org/schema/bom/1.4">
  <metadata>
    <timestamp>2025-04-08T10:55:19Z</timestamp>
    <tools>
      <tool>
        <vendor>OWASP Foundation</vendor>
        <name>CycloneDX Maven plugin</name>
        <version>2.7.7</version>
        <hashes>
          <hash alg="MD5">436dfb24c63a322708e4a5143d8543af</hash>
          <hash alg="SHA-1">3ef2e8728dc9eff2f129c34057e46e9d2b10629a</hash>
          <hash alg="SHA-256">c185b79bf0f9264f43bc8c222c44db67bea275bb727e3327cf9aea6bf45292c9</hash>
          <hash alg="SHA-512">41488733e31e6c5315327dcc86187c2b9a6b96cd08f7e2157ce130688afde29c313fc6a73edb8a76333a930c78874aa2eac874448920030c0f7af0ac05e65ced</hash>
          <hash alg="SHA-384">f9462f86240fd9fc0942f34981e6d2371f252aa1a4e5e8c3c14e7f0f1a4e4de69ef972e51cf09a749afb6d97c13e67ed</hash>
          <hash alg="SHA3-384">c755af6239348bc7dd1e1e6b5f14f7cf7e1560d689b252d9610cd865fa4b419d0b8e26260731dfc5da2176b6e706b414</hash>
          <hash alg="SHA3-256">309aac91005470c9c834354ab918759e2ae7ec52fc1676002621a5bbdf3b7827</hash>
          <hash alg="SHA3-512">c634570dcf8302e61005e5fa91a9a0d9b81542f731967b3c9f6d3ef89e3b945bd36d7ab69e2ebad8124b9c05da504361c8b36a8ce528d844409eeb7df4eea6ce</hash>
        </hashes>
      </tool>
    </tools>
    <component type="library" bom-ref="pkg:maven/io.confluent.flink/flink-test-utils@1.18.1-cp3?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>io.confluent.flink</group>
      <name>flink-test-utils</name>
      <version>1.18.1-cp3</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.confluent.flink/flink-test-utils@1.18.1-cp3?type=jar</purl>
      <externalReferences><reference type="website"><url>https://flink.apache.org/flink-test-utils-parent/flink-test-utils</url></reference><reference type="distribution"><url>s3://cp-flink-staging-654654529379-us-west-2/maven-staging/28052f298c23e610e04213241ad3fdf6a8dfa940</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink/flink-test-utils-parent/flink-test-utils</url></reference></externalReferences>
    </component>
    <properties>
      <property name="maven.goal">makeBom</property>
      <property name="maven.scopes">compile,provided,runtime,system</property>
    </properties>
  </metadata>
  <components>
    <component type="library" bom-ref="pkg:maven/io.confluent.flink/flink-table-common@1.18.1-cp3?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>io.confluent.flink</group>
      <name>flink-table-common</name>
      <version>1.18.1-cp3</version>
      <description>This module contains extension points of the Table/SQL API.
		It allows for implementing user-defined functions, custom
		formats, etc. with minimal dependencies.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">ec888a89c0921795dfcf176f6092c9cd</hash>
        <hash alg="SHA-1">7cfdce6f9e42ee49e39ae83af2441ed06389867b</hash>
        <hash alg="SHA-256">896bfec73891ee4d491a3478df62152edd0135b17826e26b6aeb99e1eb318933</hash>
        <hash alg="SHA-512">6174d85a1080509add698e903b038097c5e49ea1c07eeafd355425b7afcc9f13723073c061a9edded2e144702c99a4c03e944121ecf06a2b918d75108af992b2</hash>
        <hash alg="SHA-384">5af840626941b532150163bf6634ca5d647d3ed9984927acaae6c9c55d77f9351542b228d2789f814ef43ef7d0206944</hash>
        <hash alg="SHA3-384">8b59173fbbf6c33ab9893d0d60b3f03f8d8339ad09fabfe721d4f0a6e3aa033d9e014a49afff6d4e4b560df4329dd466</hash>
        <hash alg="SHA3-256">7984544d784c68c0b07368309fd178e86a5302328fbcd4e21ee5552c4865dda7</hash>
        <hash alg="SHA3-512">53acb915e7a991985cdd137fc51c5ba0af420ac2cac68ed6f73dfa822dba20e9898988fc6827aab034f486c6417a3f242058c5f21e68498cccf82370823a8540</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.confluent.flink/flink-table-common@1.18.1-cp3?type=jar</purl>
      <externalReferences><reference type="website"><url>https://flink.apache.org/flink-table/flink-table-common</url></reference><reference type="distribution"><url>s3://cp-flink-staging-654654529379-us-west-2/maven-staging/28052f298c23e610e04213241ad3fdf6a8dfa940</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink/flink-table/flink-table-common</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.confluent.flink/flink-core@1.18.1-cp3?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>io.confluent.flink</group>
      <name>flink-core</name>
      <version>1.18.1-cp3</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">435fc75684baaf57619fa6473616e58c</hash>
        <hash alg="SHA-1">736e58150b01cd86a02159af3091459ecf1a3bb9</hash>
        <hash alg="SHA-256">04f36dce90a58d2cb9cd6a2c3ee5d01ada04d668583181b82a8204ef96da4756</hash>
        <hash alg="SHA-512">23e8935f86db3a2ffa12ce159049067e2de48fcfd647311e4fb53bcb2c5760c869174621c3051e1aebaef228bf5d4c80a2bda156cacaef28a8e069d3726fda97</hash>
        <hash alg="SHA-384">d78481aaf579d9349397a63a102a933e0b837bf3309f7729c552a3aebe2f0c5192342672fa3e5f38281ac3847bde0175</hash>
        <hash alg="SHA3-384">560c7afc0b69bff420b4165870b529c4e63e0bdcc2ec87b7ef2b5dc5990de7bf30085aad515eed1de8266c00b1dc71c8</hash>
        <hash alg="SHA3-256">1e7340c37f7707107020385678ae40dbe21867507675448dd570255b1147b771</hash>
        <hash alg="SHA3-512">b6f4d5801fdae11c8b44cda221d4967f18dcc1359c75bcbc564e152c49177913e43010de01a0e3bde77dfa7b2a41aef2bdce19e4772dbdc09cdf85b54b5823f3</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.confluent.flink/flink-core@1.18.1-cp3?type=jar</purl>
      <externalReferences><reference type="website"><url>https://flink.apache.org/flink-core</url></reference><reference type="distribution"><url>s3://cp-flink-staging-654654529379-us-west-2/maven-staging/28052f298c23e610e04213241ad3fdf6a8dfa940</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink/flink-core</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-shaded-asm-9@9.5-17.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-shaded-asm-9</name>
      <version>9.5-17.0</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <hashes>
        <hash alg="MD5">443601ddd70625d741be1d3382dcf012</hash>
        <hash alg="SHA-1">d09e84a77ad8258d26f6be6bbb31fe81e3f98658</hash>
        <hash alg="SHA-256">a79273d4fbea1683b5fe81bce25d7fe552a542690481132f7ded034a8f00169e</hash>
        <hash alg="SHA-512">b1414e5cd4cd63e1e8a2f4a18198834910a360dac22392e298458049d7bf05e74cea2a4206751026ad7dc2348112aa7f223d0ca6178a859cf343cf306a6bd4c8</hash>
        <hash alg="SHA-384">ff6195b15060e725158aa6c8406e441576c38318fa5ea26e27ffd09f4ed4596b5198579d69ef0192dbb6edb3fda79d40</hash>
        <hash alg="SHA3-384">2b29ecee21e6bf39e6a913cb1bb41d455ade8ec169b7574b6052972f4cf571fb5374d4dde1a24be0ec4d08246359348f</hash>
        <hash alg="SHA3-256">353458e2d9919279b41a1b74791b984fef6586f07232d2e71e42892a790052c9</hash>
        <hash alg="SHA3-512">e491cdd687aaa88d8d84e792caedc02a4ef27d2bdd78e4e9bf286876ce06518c03f0340ff984ffcd507d7982391e5a6f3c4c61e05fbf0e07bd9d5683d493393e</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-shaded-asm-9@9.5-17.0?type=jar</purl>
      <externalReferences><reference type="website"><url>http://flink.apache.org/flink-shaded-asm-9</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink-shaded/flink-shaded-asm-9</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.ibm.icu/icu4j@67.1?type=jar">
      <group>com.ibm.icu</group>
      <name>icu4j</name>
      <version>67.1</version>
      <description>International Component for Unicode for Java (ICU4J) is a mature, widely used Java library
    providing Unicode and Globalization support</description>
      <hashes>
        <hash alg="MD5">046a5f59abf6b67a464dea584d11e59d</hash>
        <hash alg="SHA-1">2e159807158095566726600534034030dddab6d0</hash>
        <hash alg="SHA-256">c4eb904caf5fba968a2f1a3b8aef14df801e9329b21697209ca30bfcf153867d</hash>
        <hash alg="SHA-512">b3036b162356a0a5dad39eee611dae27c6fbe53f9e5ec1f3529ab02d49d97093b58602f43dd855433a0bbe02f6253e46a9d1899911c8e2e73001ab2c9a79d68d</hash>
        <hash alg="SHA-384">c2b28649d0ef9bf68f258a9f432c627a553ead79670f0a7ada3d986091a0001c5ab9eca372f792734bff733370a61fb1</hash>
        <hash alg="SHA3-384">3726bfa8b77bd0cdd66564944044d82dca3ee1fcf2594ebf1a7acc6752faf4c11892a1744af27e5528dc4b991e4cd0c0</hash>
        <hash alg="SHA3-256">cb19cec2baad1dc610267b2c98325f5c742230caf2247ef6297dfe8d9be9f11d</hash>
        <hash alg="SHA3-512">f46e4ead1cc1c05c3825716485ce79c890500a5356f8e7ca578f3080c09fb2460fb1aed81d65d345c402706906ea4e96afc0ff03c50fb0ac5bbacd351a8f11ec</hash>
      </hashes>
      <licenses>
        <license>
          <name>Unicode/ICU License</name>
          <url>https://raw.githubusercontent.com/unicode-org/icu/master/icu4c/LICENSE</url>
        </license>
      </licenses>
      <purl>pkg:maven/com.ibm.icu/icu4j@67.1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://icu-project.org/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://unicode-org.atlassian.net/projects/ICU</url></reference><reference type="mailing-list"><url>http://sourceforge.net/mailarchive/forum.php?forum_name=icu-support</url></reference><reference type="vcs"><url>https://github.com/unicode-org/icu</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.confluent.flink/flink-test-utils-junit@1.18.1-cp3?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>io.confluent.flink</group>
      <name>flink-test-utils-junit</name>
      <version>1.18.1-cp3</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">528311e994bdfb0cf468fb428b3cf3bb</hash>
        <hash alg="SHA-1">d20c202589023bef669d4854ca53c940060e1a3d</hash>
        <hash alg="SHA-256">f4632485ba90773dc67d06ce15201385f43607f3da0b7b8481ce98fef053e8eb</hash>
        <hash alg="SHA-512">de782d80270dd8d4ad4af5696302e8e54a97c43dec5763a5a3bf09d4be831c20a208aa700eacfc9af6f6703582a579ef7c7218c19c842b3f02138fc361a2a32d</hash>
        <hash alg="SHA-384">4e71a2a9ed9559c09bf1cc5ed26a4bba15d79e9ae080d0ab8e26c9c2a2af55107a6e4f1cf14b13fbf1dbbc7c70259436</hash>
        <hash alg="SHA3-384">b1db44f2dc1900d78b9d0a19865c102400f159c230f155e26f2842ac256919e60734b1a45394c355eb01528aae036ac9</hash>
        <hash alg="SHA3-256">b4d56437396f0dc44fdb0c222e6ade7bfc146cc40d80b659045095b60bf8c7e6</hash>
        <hash alg="SHA3-512">bd560b5aa50d1324ffa9a4e67a9d32a06bbc94102fd26449942406545ca5309706a82a570dd9cfa7d4fad00728e7bd277eb4a3638c60d99896c6775960e750e1</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.confluent.flink/flink-test-utils-junit@1.18.1-cp3?type=jar</purl>
      <externalReferences><reference type="website"><url>https://flink.apache.org/flink-test-utils-parent/flink-test-utils-junit</url></reference><reference type="distribution"><url>s3://cp-flink-staging-654654529379-us-west-2/maven-staging/28052f298c23e610e04213241ad3fdf6a8dfa940</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink/flink-test-utils-parent/flink-test-utils-junit</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.testcontainers/testcontainers@1.18.3?type=jar">
      <group>org.testcontainers</group>
      <name>testcontainers</name>
      <version>1.18.3</version>
      <description>Isolated container management for Java code testing</description>
      <hashes>
        <hash alg="MD5">572711fc09075ef83673c8f3de28486b</hash>
        <hash alg="SHA-1">a82f6258f92d50d278b9c67bdf5eabcaa5c08654</hash>
        <hash alg="SHA-256">2824ccfe5883670f61d9839b29b88db56f16882f25031faeee6c599bb88a6ebc</hash>
        <hash alg="SHA-512">93520fe0b910f6846c4daba7e8ad4675c39fb53d0aaebc130240162fa06560816f4fe6404b4b870ab729c8257f4b013a83f21716dba861f5cd0e3e6e9adacabb</hash>
        <hash alg="SHA-384">2d0354049f17433e8042d44b6a44c096078e4442f31ed9f455e3e895496dc8cd8a3d65c293b38703f5f6946de7ba636b</hash>
        <hash alg="SHA3-384">a79a1a0e72078cfc742a0be09b3b5224dab9160fb22c309cbcb2063dd43a17d0b711497c97ba00778ed612706ec83847</hash>
        <hash alg="SHA3-256">2ebd027d6f6374872d450d764c6a4633e4a8841a2a7af58d1eb3f96f46f8d371</hash>
        <hash alg="SHA3-512">5aff485f8d91faa772138c41a0b7f2f405b3b916f3b9066f56dc15840a72059c902cd42698a959f5353ccc65b53549c33e66a75adbc472dd863120a01a41465d</hash>
      </hashes>
      <licenses>
        <license>
          <id>MIT</id>
          <url>https://opensource.org/licenses/MIT</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.testcontainers/testcontainers@1.18.3?type=jar</purl>
      <externalReferences><reference type="website"><url>https://testcontainers.org</url></reference><reference type="issue-tracker"><url>https://github.com/testcontainers/testcontainers-java/issues</url></reference><reference type="vcs"><url>https://github.com/testcontainers/testcontainers-java/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.rnorth.duct-tape/duct-tape@1.0.8?type=jar">
      <group>org.rnorth.duct-tape</group>
      <name>duct-tape</name>
      <version>1.0.8</version>
      <description>General purpose resilience utilities for Java 8 (circuit breakers, timeouts, rate limiters, and handlers for unreliable or inconsistent results)</description>
      <hashes>
        <hash alg="MD5">af347a22d19d632616d7a3fb63024218</hash>
        <hash alg="SHA-1">92edc22a9ab2f3e17c9bf700aaee377d50e8b530</hash>
        <hash alg="SHA-256">31cef12ddec979d1f86d7cf708c41a17da523d05c685fd6642e9d0b2addb7240</hash>
        <hash alg="SHA-512">d0a041a0e6eb26b92f1554038dc169a87fcf0a935497b50b93c13d78dde89ac26339b45a0d69a5e8dcf076dea0d187dbe81cdf97a045f092d0936717d8e08c30</hash>
        <hash alg="SHA-384">de8dd0f7939e2127da9d1012fcf94ca672953d0ae2edfd45213e688e9b170ec1251b64f1b0fbf6e0394d39a49b84e548</hash>
        <hash alg="SHA3-384">f74101a4dc718fb1968838e81b7cd256cbdd8831c9179b7a491e0cf2b4f8d3b5115bae78ef6eb1200874a60ad542284f</hash>
        <hash alg="SHA3-256">b1c78074dece82fc2781b776222055ecd47d4040394c1ef29fd962c88517b406</hash>
        <hash alg="SHA3-512">4ab545b668dcfe87bf03179cdc550cabd1026de19c39f55fd7b54e7a3aaa08905cae0f7701c0d9863062693f9146f2ea06a6eaea7d75c632225d13a6a3b371dc</hash>
      </hashes>
      <licenses>
        <license>
          <id>MIT</id>
          <url>https://opensource.org/licenses/MIT</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.rnorth.duct-tape/duct-tape@1.0.8?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/rnorth/duct-tape</url></reference><reference type="distribution"><url>https://api.bintray.com/maven/richnorth/maven/duct-tape</url></reference><reference type="vcs"><url>https://github.com/rnorth/duct-tape</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.jetbrains/annotations@17.0.0?type=jar">
      <group>org.jetbrains</group>
      <name>annotations</name>
      <version>17.0.0</version>
      <description>A set of annotations used for code inspection support and code documentation.</description>
      <hashes>
        <hash alg="MD5">7b06437ed47fa7b4a8ec8909f4fb9022</hash>
        <hash alg="SHA-1">8ceead41f4e71821919dbdb7a9847608f1a938cb</hash>
        <hash alg="SHA-256">195fb0da046d55bb042e91543484cf1da68b02bb7afbfe031f229e45ac84b3f2</hash>
        <hash alg="SHA-512">839ec18d4a6f930ecd39827ebd4013c13a7176003543b8f60056770179032648faf1651e9e73109e811881b68a39757ca7e39731a61ff4a3461637b196fe4f7b</hash>
        <hash alg="SHA-384">c9d045a68ef2b0d5b12aa00b636e43af22de4c02f4dfcc6b5b7b04fdd57c98c7246decd2e5dc3eb9f1b10d929ac33a11</hash>
        <hash alg="SHA3-384">25ad733b460552705dd624634191beb909a6ed35f2475723faa06551d9542b87e724266f5f6003350c39965a92b5e54c</hash>
        <hash alg="SHA3-256">f731cde48fa6a20e57e97a829184492cfa5fe0e14a5082e7810205c2b9f1ac1c</hash>
        <hash alg="SHA3-512">b6698f9d65c0a364854717e64edd5df4fb1c97300d4dc3cc7ae7194b0b7b9e826b3d800dd362e2ad05417dac6ee3b2164294796c3ae46f4cbed840c2481b79b1</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.jetbrains/annotations@17.0.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/JetBrains/java-annotations</url></reference><reference type="vcs"><url>https://github.com/JetBrains/java-annotations</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.github.docker-java/docker-java-api@3.3.0?type=jar">
      <group>com.github.docker-java</group>
      <name>docker-java-api</name>
      <version>3.3.0</version>
      <description>Java API Client for Docker</description>
      <hashes>
        <hash alg="MD5">e94b9d54753201e2a51d706c45694ca6</hash>
        <hash alg="SHA-1">67a002d74f20f81c8639317404eb147556caeda7</hash>
        <hash alg="SHA-256">2595a2f9768264e19878299dc77390247e5009dfc8ca488b894ea4688d1dcc4e</hash>
        <hash alg="SHA-512">5b1f2888b97b923a01d749b301eaff3e7f65501fe129a198c481aec8d88b725ff7caf841a18b17c41c38dbd102eddd5bfdcdb8abf872a0e12b98ed622c78ca67</hash>
        <hash alg="SHA-384">773cbfe22f185d70b515c0bd4320db3aaa9e8254e4140b0d80ad74a5f1db161d25b1fdf0be091b86ca280d19bb10a25d</hash>
        <hash alg="SHA3-384">841c97936302233dac59a66a100eba43a887b6ac52dda1c9ed103a5b39d166995ca7d90d108423931d6eaa22d0c0667c</hash>
        <hash alg="SHA3-256">f109a7aa85a2336faef065ea612cc8cb6626415e94c1c135dd064541442920ee</hash>
        <hash alg="SHA3-512">92f5978f8abeb03a0161819ffed151a1af9f06e4119d91571b34e48e19b82dfcfb910bac10f75664cd580e30cf4759025073871a8c88cda7df2f407981088614</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.github.docker-java/docker-java-api@3.3.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/docker-java/docker-java</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.14.3?type=jar">
      <publisher>FasterXML</publisher>
      <group>com.fasterxml.jackson.core</group>
      <name>jackson-annotations</name>
      <version>2.14.3</version>
      <description>Core annotations used for value types, used by Jackson data binding package.</description>
      <hashes>
        <hash alg="MD5">f6ee414687751fbadc55998ec49b3ea6</hash>
        <hash alg="SHA-1">b49701acb02b8e95ae1967821cfbafc220cf5795</hash>
        <hash alg="SHA-256">ea1b3a9ec60a353f4d7e78559c7140abb9bcf71b31456e9d57c8289f7cf397f1</hash>
        <hash alg="SHA-512">d265ba6cc1d20721ba7803416005f25d70036cd659bf6071f4d3250d7dab272a2522d7db282e50aeae994907556ef63155d2c0bcc0bd1c96c6460143ff5a8d53</hash>
        <hash alg="SHA-384">551a607644bcb3f3c06ac9c94861858a0d8f2b62b9120d34f5c2aad94a3a0e75478a94dca7eb290d9814c8dec739905e</hash>
        <hash alg="SHA3-384">79bef0386d15bd152d94ba9e67849eb25c7c4eafd3e8a50c504304dad4653423d78cb8cb54d3853370334519219b5c80</hash>
        <hash alg="SHA3-256">6ed193820d6577652884528ce3d0378516483d51a87652aa7209f3f7ef8326f2</hash>
        <hash alg="SHA3-512">bc5748486a715352e318d809fb3483de615e15422c3264cc52806f4a367035cfbfdaf5258ba460b13e55d25adfc38ee39444f4b7460dfd2cf927817c4c6776ac</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.14.3?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/FasterXML/jackson</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/FasterXML/jackson-annotations/issues</url></reference><reference type="vcs"><url>https://github.com/FasterXML/jackson-annotations</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.github.docker-java/docker-java-transport-zerodep@3.3.0?type=jar">
      <group>com.github.docker-java</group>
      <name>docker-java-transport-zerodep</name>
      <version>3.3.0</version>
      <description>Java API Client for Docker</description>
      <hashes>
        <hash alg="MD5">4b48254da1890df50604fbbc3c2b4983</hash>
        <hash alg="SHA-1">fe977c85281b5c779406497d90e2913f51a1e9ea</hash>
        <hash alg="SHA-256">ffafaf9059ed3592806556b2ad48c3fd5b968c3b39d2680123260aa6b73bc32f</hash>
        <hash alg="SHA-512">52ea664f1f1d8f23a48a5b7ef9fe89afb4fd988d78fb6762665b6520a4733aed4ece4455feca294086bac6cfddd608c45417a546fa44fd5b720b15ede77e84a1</hash>
        <hash alg="SHA-384">c2db630737b4bcb6dddbe2cad64fd9da8c76b17ba3797b5ebd340399ac7df02c2d564ce1468656e1bc4224b3dd4b24a0</hash>
        <hash alg="SHA3-384">c887b6952aaa958a0f80d9bbda9f60ab951569ca3128a78e82890797e451e3150423efe8659657a335c4a29bd26bfbbe</hash>
        <hash alg="SHA3-256">a4dce505b514076027e58556d210a062890398d2715fe1cbe8b059b38a65effb</hash>
        <hash alg="SHA3-512">9b2b8d634fe9f2e0767cac0b99feeac647f8c31871fdeffb6387067d41101567601e11e370afdf6cc20be9fccbf3747413340060b543345c072685c3eccd0f05</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.github.docker-java/docker-java-transport-zerodep@3.3.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/docker-java/docker-java</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.github.docker-java/docker-java-transport@3.3.0?type=jar">
      <group>com.github.docker-java</group>
      <name>docker-java-transport</name>
      <version>3.3.0</version>
      <description>Java API Client for Docker</description>
      <hashes>
        <hash alg="MD5">901f5f465269517ebc6d8224a894763e</hash>
        <hash alg="SHA-1">5fc0ce9822d09506b36b0925c273f0751ede3df5</hash>
        <hash alg="SHA-256">251ed0a4b131cdf78b951326d46904a4f8318e3351fa477449e34c970f63c4a8</hash>
        <hash alg="SHA-512">6881e5afdbdc18c631ecff9d72afed13921001da4e69b025d168e0f7c38a30d64846cf31761c2a353fcabc1018894122df9bc90e533dd31faee92aa415bb39fc</hash>
        <hash alg="SHA-384">e6cc54b63160a2fa2b16b4b7660cc1f6d3352cdec7fb598ea4930f79acea0674427fde6d10589e619b49f79d7f20a2a0</hash>
        <hash alg="SHA3-384">642e7dd22e05d48b6da79345c2ccfbb146c4f6a45abff8275597f4dfa8a7ddd679938735314414cc0e260745ca4f6e14</hash>
        <hash alg="SHA3-256">b0de7ba2ce5e21174fa79af2f5d015a25091afe98cc7040f522e8845fef02944</hash>
        <hash alg="SHA3-512">4ca8542aa443c25f7ae5d0ced1527980efeaa078905636d32b2a672a9cc55c9e5729263e87281e307dd0a58ce3213a8fbc41ce708a99e3afd5012e2150c69160</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.github.docker-java/docker-java-transport@3.3.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/docker-java/docker-java</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/net.java.dev.jna/jna@5.12.1?type=jar">
      <group>net.java.dev.jna</group>
      <name>jna</name>
      <version>5.12.1</version>
      <description>Java Native Access</description>
      <hashes>
        <hash alg="MD5">3bab13d7f5ca715013fcac64ceb4108d</hash>
        <hash alg="SHA-1">b1e93a735caea94f503e95e6fe79bf9cdc1e985d</hash>
        <hash alg="SHA-256">91a814ac4f40d60dee91d842e1a8ad874c62197984403d0e3c30d39e55cf53b3</hash>
        <hash alg="SHA-512">5403e494985a53475d9c9268baf1758e37103817bd54865847d67e1adf3dc45287175a12b08a9525837921e7783a55e934a1031cf76d02e55fd4ce6cb2626837</hash>
        <hash alg="SHA-384">5bd86a58007a752b1ef3f599a54546fda70267442f6c202548cf41fea7bc352bcd6747391be70f261f48a3d5334f99de</hash>
        <hash alg="SHA3-384">43c58428512271295ecdf158d6951d6d86b8758072e81dd9ccda26ad59b81e8194c9c9ca8a2a6d748f69139927a92124</hash>
        <hash alg="SHA3-256">6125a65ff81d5af3118d3a1d95fc421aa0ac612f019099efcc1dec9ca614adfa</hash>
        <hash alg="SHA3-512">d073a2181db5026b0ceb22fbba41c9b84509aa0c5841a4d5f14ac1978bc5b4488c85246ec524d1372f42c7fe7ebf741c1256836cc247d3c4bb446c762549944f</hash>
      </hashes>
      <licenses>
        <license>
          <id>LGPL-2.1-or-later</id>
          <url>https://www.gnu.org/licenses/old-licenses/lgpl-2.1-standalone.html</url>
        </license>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/net.java.dev.jna/jna@5.12.1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/java-native-access/jna</url></reference><reference type="vcs"><url>https://github.com/java-native-access/jna</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.confluent.flink/flink-runtime@1.18.1-cp3?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>io.confluent.flink</group>
      <name>flink-runtime</name>
      <version>1.18.1-cp3</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">72e1fd93433055c62d7656dfda456164</hash>
        <hash alg="SHA-1">3bbfbe29463c519f5f4fe538fbecc54817bd6b85</hash>
        <hash alg="SHA-256">236e64015932209df580fbe26ac1e046252618ef262bc6bd5b53b37ecfc2137c</hash>
        <hash alg="SHA-512">9733d9ba56fd7fa8297cba2f39329021d04dc9df27fc9912c9d7f342457c336a3de1a41d0b7f3dab48536ba9e1bbcc92835fde8eca74022df33a0b8fe5d8a856</hash>
        <hash alg="SHA-384">dfd28f440ab2b313e22f91a61e1992b1940fbddb8f85bdf0cd63214de4d5732b85249c4ddf04b0e7d74f91146a90de97</hash>
        <hash alg="SHA3-384">0a2ed6930abcd59619b129220fc4a4e371a8dac161308713429a79f4d727c270f623db3cfbc32a4d7cb69ee83482ac28</hash>
        <hash alg="SHA3-256">d392c42a2329e9326091eebd7e48eab4425e20a406a8585dc801574110277852</hash>
        <hash alg="SHA3-512">9e316476cfe6561e424486ddb61b5620b696f999eb9ff7df812d9c3ed79be57ca1ce018923941329146de4d705816ce6d183c8e8ad868b1075d318332f2c0b67</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.confluent.flink/flink-runtime@1.18.1-cp3?type=jar</purl>
      <externalReferences><reference type="website"><url>https://flink.apache.org/flink-runtime</url></reference><reference type="distribution"><url>s3://cp-flink-staging-654654529379-us-west-2/maven-staging/28052f298c23e610e04213241ad3fdf6a8dfa940</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink/flink-runtime</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.confluent.flink/flink-rpc-core@1.18.1-cp3?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>io.confluent.flink</group>
      <name>flink-rpc-core</name>
      <version>1.18.1-cp3</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <hashes>
        <hash alg="MD5">6dde7c48d567e1ae6d9288b875a88596</hash>
        <hash alg="SHA-1">56f512a440ff1e3231c74f39a5dbff818f2945dc</hash>
        <hash alg="SHA-256">907781e9c002c33d9bcf10a848a6e63fb66d61dae9e901c05fcda4017e5f1f65</hash>
        <hash alg="SHA-512">c84840d0e04bc98b5c53df7a5875b24e025971cbec6058f4015a333da9f7ad872bbb6719c4c9157ee2feefe960ee3bc757485bda90640b776f8935254c1febe6</hash>
        <hash alg="SHA-384">a26d32d3d623a27bca6991c69ab9484b95664f7e08a7d4e261a9f6ba62859428f279ba49feb6ceba55a0431a5ed04bef</hash>
        <hash alg="SHA3-384">17188a9a8012b8e230347f2dee3cbe3216d7dfcff69185bc2e971a1caf54166297210c8144fec6f1675d2a612e3fa45f</hash>
        <hash alg="SHA3-256">2ad0b61b6f49c674ecfa23703f70755f67e6ff3378ba54c442952168cf98334f</hash>
        <hash alg="SHA3-512">23a366c741d0c02487e2767d5e6d5bd8cf42c218aa5d61f2f7f8e2b8c37ba734d82ad7f6199f26c5a66ae8fd0fcf9ef4ca411911ae43a83ff50496892f7024c5</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.confluent.flink/flink-rpc-core@1.18.1-cp3?type=jar</purl>
      <externalReferences><reference type="website"><url>https://flink.apache.org/flink-rpc/flink-rpc-core</url></reference><reference type="distribution"><url>s3://cp-flink-staging-654654529379-us-west-2/maven-staging/28052f298c23e610e04213241ad3fdf6a8dfa940</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink/flink-rpc/flink-rpc-core</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.confluent.flink/flink-rpc-akka-loader@1.18.1-cp3?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>io.confluent.flink</group>
      <name>flink-rpc-akka-loader</name>
      <version>1.18.1-cp3</version>
      <description>This module contains the mechanism for loading flink-rpc-akka through a separate classloader.</description>
      <hashes>
        <hash alg="MD5">2d38d3ac11cf798fbfc8917fdba7ba0d</hash>
        <hash alg="SHA-1">6eccb279507938e724aad1f9b9d9c87b5513da27</hash>
        <hash alg="SHA-256">f30301091d62bd5f86ef836e03fad4cfd01f7fdaa9ee37587576af5f76ff7c4d</hash>
        <hash alg="SHA-512">03715c0f0d55ed740b814fc1d83bf12f0cc326a6720496ae8688c2981bcdac6dffb12b91570bad2cf651db121a5671bab9a4e321d139b0efd54f8401bb477e7c</hash>
        <hash alg="SHA-384">36f5623b3c2becea757565f767d85e1fb9acaf4902f2b5690f452fbd62eebfa9d1718420c6b298e2785fe4bacd611590</hash>
        <hash alg="SHA3-384">bfbd355ebc9e4220ec09c391960f1280951a2031fe5f44c0d602257d2f992368f966c4d6d7acb0fc9e50d2343b1f0cf3</hash>
        <hash alg="SHA3-256">40ac8b510657f87b71727153a3524b3670a00a237d07e1439b5e6e9b17acdb73</hash>
        <hash alg="SHA3-512">f6fb05cecbb7a77d49b79f5a12b3a895a3fd88d407b53d7548f38517c22de2b1286392e28ee407df75bb1809e84ffcef766623e0ddc5e41d64d364e536559556</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.confluent.flink/flink-rpc-akka-loader@1.18.1-cp3?type=jar</purl>
      <externalReferences><reference type="website"><url>https://flink.apache.org/flink-rpc/flink-rpc-akka-loader</url></reference><reference type="distribution"><url>s3://cp-flink-staging-654654529379-us-west-2/maven-staging/28052f298c23e610e04213241ad3fdf6a8dfa940</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink/flink-rpc/flink-rpc-akka-loader</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.confluent.flink/flink-java@1.18.1-cp3?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>io.confluent.flink</group>
      <name>flink-java</name>
      <version>1.18.1-cp3</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">005924db04b66288e9a1003f1a1a996d</hash>
        <hash alg="SHA-1">261c839b29a73e3928ac14b93fefaef501527232</hash>
        <hash alg="SHA-256">3535b97e983b70ba35ba5fa59067ea7a8be69080710d7a367abbc5d7ab3cad00</hash>
        <hash alg="SHA-512">7c21e513fc65b0dda9da77cccbb7ea363ae3b5c609874f57f515254b7098262d15f3d4c827b9355de23e08519615018d836e5d7b4632ae8cb6cc8b9fc038531b</hash>
        <hash alg="SHA-384">d0adcba880f5c89c56fdc7445e3fba71357a7458c689050b5ed6c472f0875d66fedb016421540906af49cbea3927a4f2</hash>
        <hash alg="SHA3-384">493ec510eee74c433a01c38e71b3b4b1f88410173ac4364ec57a5476768cc0efd2032e9a79f803dbdd07739a16d8bbfc</hash>
        <hash alg="SHA3-256">b6fc9f2f3cd1b8aca22dd415b36cf587e700716a72bb914d482bd2ccdccd7d23</hash>
        <hash alg="SHA3-512">5dc0c42fb328f518156e835c9cbe43c47b8587eddc7bb62e478c75e1942282c45d2a9edc95589568a8f0f4dbf71eb626ffec0adf279474842a4e1e1f61b722e2</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.confluent.flink/flink-java@1.18.1-cp3?type=jar</purl>
      <externalReferences><reference type="website"><url>https://flink.apache.org/flink-java</url></reference><reference type="distribution"><url>s3://cp-flink-staging-654654529379-us-west-2/maven-staging/28052f298c23e610e04213241ad3fdf6a8dfa940</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink/flink-java</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.twitter/chill-java@0.7.6?type=jar">
      <publisher>com.twitter</publisher>
      <group>com.twitter</group>
      <name>chill-java</name>
      <version>0.7.6</version>
      <description>chill-java</description>
      <hashes>
        <hash alg="MD5">886eb8ef6db3880433f4a8e10ef37300</hash>
        <hash alg="SHA-1">a74b8d019d6941d82ff86d1612e382f4a0ae8259</hash>
        <hash alg="SHA-256">f7c41a2257be11e6c9bca97095c8f4b0299626941a3508469f90622eb8f8368e</hash>
        <hash alg="SHA-512">dc9973909b87cfb85ee45c90662612dd2bc137b7510172221eb47020f76b23eb3ea76c6b4fba4cee5d81e910f87aba71359136d33ae0f6424e3ce7123bf77dbf</hash>
        <hash alg="SHA-384">41e7faed7c2c22987868fba7cd6dac0d59d174d82d841ba4e5aa8675cc9265bf9d9df021553a781cfa24c4c9c7a35c5c</hash>
        <hash alg="SHA3-384">32751d6ecd77676ffa11a109dead8c8d19a6d1d78576b19ac5a8323d9446ba51fba87e0d60820dd2bac69fb705aa2061</hash>
        <hash alg="SHA3-256">6bdf2ed042c5b7f4f4d11bb52e448ce740e18563364f66730ca2b6b4eadf0401</hash>
        <hash alg="SHA3-512">0ab14bee65d85803d5080f3b0ad86183daafb61e3ca3a610e199bc04a11421b45436e405dc3c227b5d80a64178ca82739eccb5ad8ee157efa925d484d9daae28</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.twitter/chill-java@0.7.6?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/twitter/chill</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.confluent.flink/flink-queryable-state-client-java@1.18.1-cp3?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>io.confluent.flink</group>
      <name>flink-queryable-state-client-java</name>
      <version>1.18.1-cp3</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <hashes>
        <hash alg="MD5">148184772e0735a82d58174cd3391e04</hash>
        <hash alg="SHA-1">4875da98cbb6c7ea2a060dd53da722ef36443c4e</hash>
        <hash alg="SHA-256">77e225e61be6d952e85d06db3ee0b4d7ab6f61c88ad753b0433e900a9739d462</hash>
        <hash alg="SHA-512">44088a474cb037b351b29cbe59ab327b87cd9fed4000c6de5a49b11721f94906e6fc35fb9195266d4d65b29c85fd93ebb2b0fd4e2d080b71ec7f390c1edec327</hash>
        <hash alg="SHA-384">646cda52e75f65fb1ef86a91cc02ccacb5e89e498067a8d99f7ba2da0d9ebe81ff28f4466e14dc6a898b18868f486dba</hash>
        <hash alg="SHA3-384">6783e9e26929f5948591991c60a76e5ed4017073398b067c1c1ef5a822987b3576c1f8bde79e043904535e4ebe8fd634</hash>
        <hash alg="SHA3-256">f6b3e7760e3c3cc8ec5c4a49a634bdc2d80ab5c9890a1d0bf03ae78b89343c68</hash>
        <hash alg="SHA3-512">c465f2158825083a7026491a59125fddf55335004238ee9199ef23b53b94697a664e9e01a1e4107af79f62fa3dec4f74515448713d5d2cd42e144985df5dafef</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.confluent.flink/flink-queryable-state-client-java@1.18.1-cp3?type=jar</purl>
      <externalReferences><reference type="website"><url>https://flink.apache.org/flink-queryable-state/flink-queryable-state-client-java</url></reference><reference type="distribution"><url>s3://cp-flink-staging-654654529379-us-west-2/maven-staging/28052f298c23e610e04213241ad3fdf6a8dfa940</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink/flink-queryable-state/flink-queryable-state-client-java</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.confluent.flink/flink-hadoop-fs@1.18.1-cp3?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>io.confluent.flink</group>
      <name>flink-hadoop-fs</name>
      <version>1.18.1-cp3</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <hashes>
        <hash alg="MD5">aeaf233c09f99adb1241f15a147fddec</hash>
        <hash alg="SHA-1">cac9c34c4e6e2393cb9940ab49d5839ecc633bfd</hash>
        <hash alg="SHA-256">25eb7223fda44c0d34f58800e211556f9e5b76fa8857335be40c0e34cd5baa36</hash>
        <hash alg="SHA-512">11825cdb6716bcf233fd3b91a4974cb210ae16b8fde00e1991d66207545ce5851055c3dd5c1a10a5cc73e07cf20e65f4933d2e495f96db462d588984f76283a2</hash>
        <hash alg="SHA-384">a4afc9d83a806e6bd4c9d2982fb5fa7e4566a3f3b00883375a23429d91a95f510955b15ff8afda603fb71ba325ed1e2e</hash>
        <hash alg="SHA3-384">14fcd5d6f5ac85e7745d468bedbfbbdea40a2f63c534e772cc76eaf8e9e1328cbaf26ea40fedeaea0ffa948a1a948a2f</hash>
        <hash alg="SHA3-256">080f2c8d68a23666a60cb106c6afa657e5fd0e1755c342328c542153fed9b9d4</hash>
        <hash alg="SHA3-512">9f086cb17c875f8cd59fa527295cbd5f5b512b0576631d66866549172c56ad8907c4e1ac18983578b3ab1b0ff208a1e23aeb8cf7a776a7b69c93c29c03d73ee9</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.confluent.flink/flink-hadoop-fs@1.18.1-cp3?type=jar</purl>
      <externalReferences><reference type="website"><url>https://flink.apache.org/flink-filesystems/flink-hadoop-fs</url></reference><reference type="distribution"><url>s3://cp-flink-staging-654654529379-us-west-2/maven-staging/28052f298c23e610e04213241ad3fdf6a8dfa940</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink/flink-filesystems/flink-hadoop-fs</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-io/commons-io@2.11.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>commons-io</group>
      <name>commons-io</name>
      <version>2.11.0</version>
      <description>The Apache Commons IO library contains utility classes, stream implementations, file filters,
file comparators, endian transformation classes, and much more.</description>
      <hashes>
        <hash alg="MD5">3b4b7ccfaeceeac240b804839ee1a1ca</hash>
        <hash alg="SHA-1">a2503f302b11ebde7ebc3df41daebe0e4eea3689</hash>
        <hash alg="SHA-256">961b2f6d87dbacc5d54abf45ab7a6e2495f89b75598962d8c723cea9bc210908</hash>
        <hash alg="SHA-512">5bd78eed456ede30119319c5bed8e3e4c443b6fd7bdb3a7a5686647bd83094d0c3e2832a7575cfb60e4ef25f08106b93476939d3adcfecf5533cc030b3039e10</hash>
        <hash alg="SHA-384">114f1e324d90ad887c177876d410f5787a8e8da6c48d4b2862d365802c0efded3a88cb24046976bf6276cadad3712f0f</hash>
        <hash alg="SHA3-384">80288c03ad4d80d69f91d056ffc5570d49a9c76bf54ad2dff0121ecde26a560df76d05156f281f5c6db2a38ff07a873d</hash>
        <hash alg="SHA3-256">5adfb5ccaf5f21a549422f426118a9542673926fcd18c68390cf813e791dcf6c</hash>
        <hash alg="SHA3-512">7573f47f0babb53cefdc7c2309a0b982d800139064537b0797da442853d081010ad7c3c74a500598a0f800639a5d540eca21963ea652c68613907059bd4278c2</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/commons-io/commons-io@2.11.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://commons.apache.org/proper/commons-io/</url></reference><reference type="build-system"><url>https://builds.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/IO</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=commons-io.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-shaded-netty@4.1.91.Final-17.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-shaded-netty</name>
      <version>4.1.91.Final-17.0</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <hashes>
        <hash alg="MD5">f3e6fd4f43c7a8647604df2a9b712dab</hash>
        <hash alg="SHA-1">81b6e0b28e0309946cb6d03792199fabfc0d9f09</hash>
        <hash alg="SHA-256">c4d370f1b2bda0b55686fdec840c8a047950b9448f26cd01f1594a3bf0fde75b</hash>
        <hash alg="SHA-512">7f2010cda152f6baecc2a0c9d79f8bb2b7eee8a88f80dd8ed5bf2f723885cf3f9f60e373db77bd591225f3037f33f4a7c08d05e807356899a6af818225b6aa4c</hash>
        <hash alg="SHA-384">d1d99aee334155d4c2dfddcc63dfd1b8ce9d7e4a67bba29be0b6b5a54a717ea95decb0fa300ef9e05b589d273952e22e</hash>
        <hash alg="SHA3-384">3a4bcd8d36c45ef4e8d2fd5d1774fe2ba0913851e6034ec770c3af962db9bd9ef084aa3e2a94b83d4c098059f37800a2</hash>
        <hash alg="SHA3-256">8a9bde99e2876e545b7fbc0400a9980381162b7a51596132cff27d49caff7e55</hash>
        <hash alg="SHA3-512">9109ab1275822d476cb5dcde1d329625be51953ef07af0b586cac9040221a1cd65bcb98f7aa02d7b07372676960697ccb04f751c31150ba9b6b8b0e5e5b6b4a9</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-shaded-netty@4.1.91.Final-17.0?type=jar</purl>
      <externalReferences><reference type="website"><url>http://flink.apache.org/flink-shaded-netty</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink-shaded/flink-shaded-netty</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-shaded-guava@31.1-jre-17.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-shaded-guava</name>
      <version>31.1-jre-17.0</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <hashes>
        <hash alg="MD5">b8c5129f4164f8ee2086854bdb289690</hash>
        <hash alg="SHA-1">00fa393c1db1308f4fb920f010f79c4c774e2f39</hash>
        <hash alg="SHA-256">03442ae97c4ca34388568cbce0e67e9911b0137b2b3849dff7a550008d5a4336</hash>
        <hash alg="SHA-512">15bb65f24054768915fbc29a95dfa93307b0babc39a02a204ae65eff44f259357b471fef9967b864b7a78e07d266933ce8e3eda8a866fcc73643cc38bcc5653f</hash>
        <hash alg="SHA-384">c8e6f2630c0824bbd1902a25884f09c076efbbbe0265f5d3fb49370affcff81ee5dd8b7887ba4bf063915446b937117a</hash>
        <hash alg="SHA3-384">a2ffbdbcfb8be61c43891fa19275a765b71e6830b110fa9ab77d46ac35527d2be0943d895767a70591895916963048c6</hash>
        <hash alg="SHA3-256">5a73e8e370e9bb3d634495dade320f0b569f4ed307fc147cb8f3af547bb6b057</hash>
        <hash alg="SHA3-512">abd1618c0568eee546f5b32314085bef40f8de74ffa5e52f0aa7a5bed82713142af8a1bdaf79f18e2210b79f8c3592276c54b2356594d19d8f56185ec9a457d5</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-shaded-guava@31.1-jre-17.0?type=jar</purl>
      <externalReferences><reference type="website"><url>http://flink.apache.org/flink-shaded-guava</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink-shaded/flink-shaded-guava</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-shaded-jackson@2.14.2-17.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-shaded-jackson</name>
      <version>2.14.2-17.0</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <hashes>
        <hash alg="MD5">492259ac7642687cc959257a5512542f</hash>
        <hash alg="SHA-1">689daca4a6fc14e361831e15abd96283166d0f62</hash>
        <hash alg="SHA-256">37e87311498ae8da80adb2aa09ab6e9739d8611e09868e7220822206c739231e</hash>
        <hash alg="SHA-512">3f4434cf93f2cd12b686aa84c4b1910d7e0191b2ddad7ba8de6d2c3805d3b49afcf5da06e1052faf01b6cb0dda554594f78e39db69d83208119c1f4f2cd5dc8f</hash>
        <hash alg="SHA-384">9e689ab8b7e7f7db269fd5b1b0fc1dc5f13fed06b283c9b8ceec5c500fc9f6a4200674eef2bb884a9e67133de32e9a77</hash>
        <hash alg="SHA3-384">a67fd2fe9cfd6e8ef51ab3c0217fcaf0a9420178a8c4025770b86d6b590db65c8bb4d96acf05b4212d2661073e4409cc</hash>
        <hash alg="SHA3-256">e47b2c93363ff5d65ae47d619f3caa605b5d996e4e765811b4b7117f1c58c90e</hash>
        <hash alg="SHA3-512">af2b026aebfa279ca42602c04a8db054a12c9f39c5640a0e7804cfa5d06124a52099aea56e9dfc25d018da9baa742b274c5914aa98814dbdd0e9c5ebfa7035b6</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-shaded-jackson@2.14.2-17.0?type=jar</purl>
      <externalReferences><reference type="website"><url>http://flink.apache.org/flink-shaded-jackson-parent/flink-shaded-jackson</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink-shaded/flink-shaded-jackson-parent/flink-shaded-jackson</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-shaded-zookeeper-3@3.7.1-17.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-shaded-zookeeper-3</name>
      <version>3.7.1-17.0</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <hashes>
        <hash alg="MD5">a2737bcfc729e776a7d4dd3a13067999</hash>
        <hash alg="SHA-1">6206880a4f471a7f560fa824d1ad8b0596d7e59c</hash>
        <hash alg="SHA-256">e91cb263c67631a27e7a6cee147b75a9a638f3c52fcd053106fc4584feb6e585</hash>
        <hash alg="SHA-512">62cba94bbd87bd678f6cbbee07168dba3f2d1bac21371c4b5c1d035ef2596711bc46b1a273f4b89fe8110b2b855dc425614ca42fc866340a9edb89226f093c6a</hash>
        <hash alg="SHA-384">ee4a3d27059c35a13559599d5b00267b9db9514ea4c04b2b3432ade93d71fe4d8510fe2c3416fac2dada3b218019e454</hash>
        <hash alg="SHA3-384">501df884bf117eb9f420d9ccf92ccbae8d1833d1bb52314ff21bbcc99d9c262eb99b5941ed5da2aabdd1ee953a1320e1</hash>
        <hash alg="SHA3-256">8ba0e15658af1b2451f6e180ab4778930cf0a30ca4fe0b5a9156eac095118f1f</hash>
        <hash alg="SHA3-512">c604d9a6a533e806ed3779c328326ce0935c9e8d2f30922289755d35e91e5fe7152a7f1a29b082442e625a35f1217f6bb38021a94dec1c23818715653cef00ef</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-shaded-zookeeper-3@3.7.1-17.0?type=jar</purl>
      <externalReferences><reference type="website"><url>http://flink.apache.org/flink-shaded-zookeeper-parent/flink-shaded-zookeeper-3</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink-shaded/flink-shaded-zookeeper-parent/flink-shaded-zookeeper-3</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.commons</group>
      <name>commons-lang3</name>
      <version>3.12.0</version>
      <description>Apache Commons Lang, a package of Java utility classes for the
  classes that are in java.lang's hierarchy, or are considered to be so
  standard as to justify existence in java.lang.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">19fe50567358922bdad277959ea69545</hash>
        <hash alg="SHA-1">c6842c86792ff03b9f1d1fe2aab8dc23aa6c6f0e</hash>
        <hash alg="SHA-256">d919d904486c037f8d193412da0c92e22a9fa24230b9d67a57855c5c31c7e94e</hash>
        <hash alg="SHA-512">fbdbc0943cb3498b0148e86a39b773f97c8e6013740f72dbc727faeabea402073e2cc8c4d68198e5fc6b08a13b7700236292e99d4785f2c9989f2e5fac11fd81</hash>
        <hash alg="SHA-384">c34b8a0e0eba2168ad56fedeb7a1d710b6f1d3f1ce6aae99a4e0247bd120efbbadc8dcb2f731045b8a16e3efd30604dc</hash>
        <hash alg="SHA3-384">8ad6ebe7754bf0caa8cda7e59c0e95360d76e06a7ad6aeec5637985519dbd1dd06e7eed04711039f36ec4c49de280def</hash>
        <hash alg="SHA3-256">18ef639b2aeeb5aedffb18dbf20c79f33e300d99fb31b131689639cc470e6e4c</hash>
        <hash alg="SHA3-512">fbea96114dcf4f31cfaaa99987be756ddda3a6c74f8c835461997df794d54b92da1f60fe5c3f1f2a43cb8c5f5db7f4048bef77c70993673c7a93f3660fffc8da</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://commons.apache.org/proper/commons-lang/</url></reference><reference type="build-system"><url>https://builds.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/LANG</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=commons-lang.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.commons</group>
      <name>commons-text</name>
      <version>1.10.0</version>
      <description>Apache Commons Text is a library focused on algorithms working on strings.</description>
      <hashes>
        <hash alg="MD5">4afc9bfa2d31dbf7330c98fcc954b892</hash>
        <hash alg="SHA-1">3363381aef8cef2dbc1023b3e3a9433b08b64e01</hash>
        <hash alg="SHA-256">770cd903fa7b604d1f7ef7ba17f84108667294b2b478be8ed1af3bffb4ae0018</hash>
        <hash alg="SHA-512">afd836a1094449e0a791fee67363666c47b6d24acff353a5089b837b332c0f4af89565c354682521e37062d20e6b52d70c77bb4f24cca9b9532c274fc708a831</hash>
        <hash alg="SHA-384">06c56e6e513dd77cf10d0da46cdea08c34e220e81fa024735b668c6650df4234e564fe865ff5cafea963f56b1e8ffd4a</hash>
        <hash alg="SHA3-384">f09065ed066c25debf8c78cbb0bcc738e1ea283302ec992dcfb649acb90091cff879465c65a162e94534d454e3b4e9bb</hash>
        <hash alg="SHA3-256">0b59c567164bb755f2353b78ba66744000a8c4b35e1df05255b080a21c3a3dd5</hash>
        <hash alg="SHA3-512">f0fbce02a862b70f472a27d0722c54ac111ca2eb94584b8b0b73d1926aec26047cd92542ad0b3cf980a6825077587f41b194aa93d6f6350d1b87e59e8df1be7c</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://commons.apache.org/proper/commons-text</url></reference><reference type="build-system"><url>https://github.com/apache/commons-parent/actions</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/TEXT</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=commons-text.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-cli/commons-cli@1.5.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>commons-cli</group>
      <name>commons-cli</name>
      <version>1.5.0</version>
      <description>Apache Commons CLI provides a simple API for presenting, processing and validating a Command Line Interface.</description>
      <hashes>
        <hash alg="MD5">6c3b2052160144196118b1f019504388</hash>
        <hash alg="SHA-1">dc98be5d5390230684a092589d70ea76a147925c</hash>
        <hash alg="SHA-256">bc8bb01fc0fad250385706e20f927ddcff6173f6339b387dc879237752567ac6</hash>
        <hash alg="SHA-512">b78ac2b418e9e9e7d0bc866664577199d320408a6f03151b3789bac365c986dd526df853599e633d7e50fe136cbf3eb9ce50c9cfa0ad38c3cc8d8ee416f61c40</hash>
        <hash alg="SHA-384">a7a2daa807c4007c506b5100f0a9b526c0052c4e1f6b699904ef9d2aba8195b6003dc4d47ca133b15e2f3e830bdbe6c4</hash>
        <hash alg="SHA3-384">44ca97514a2e34b5bf3de9b5d45c8e871f6eee517db7f3c4b4476eb3e8dfe9a9d8760f3181114708288c373727b42475</hash>
        <hash alg="SHA3-256">a0a47001d3a293f129ffc21f17f575a9d23ce5b88b440e651e4cd01edd0cc421</hash>
        <hash alg="SHA3-512">483dae23d6827a105d17847c8c813527f19042b65c4d09635dfc4bfd25990fe3ba2a997540460fd5b1d72ca3add9a38ca8b32004680764db972a9bb62f7f68d8</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/commons-cli/commons-cli@1.5.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://commons.apache.org/proper/commons-cli/</url></reference><reference type="build-system"><url>https://builds.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/CLI</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=commons-cli.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.javassist/javassist@3.24.0-GA?type=jar">
      <publisher>Shigeru Chiba, www.javassist.org</publisher>
      <group>org.javassist</group>
      <name>javassist</name>
      <version>3.24.0-GA</version>
      <description>Javassist (JAVA programming ASSISTant) makes Java bytecode manipulation
    simple.  It is a class library for editing bytecodes in Java.</description>
      <hashes>
        <hash alg="MD5">23fd22d0d089ddfac567a39ce0cb1a91</hash>
        <hash alg="SHA-1">d7466fc2e3af7c023e95c510f06448ad29b225b3</hash>
        <hash alg="SHA-256">aba81efa678b621203fb89aeff81d6f126f7a9dd709401e5609c42976684ae23</hash>
        <hash alg="SHA-512">e57dad74a3edef837ece841d06e4a7c96ffecab8fbcba56fe5f7eccd662f0c0d757880a6073793a8c75ad7a0a1d146346b75cdbfe4fd8a271048a54446e5d1a2</hash>
        <hash alg="SHA-384">4867afdb7522b3dbfa10a51264ac6c15a2a8083d16c8dbef318275d24687768f35130b1c17d8407ca8ecf855abd83dff</hash>
        <hash alg="SHA3-384">a52be891987d4fc7d319e6417e0cd9a28f189d8623b803d72b5429e118da73b9937899231825e793d37b434d7522d283</hash>
        <hash alg="SHA3-256">0cf8db7d2a5f7e1a70827538cb4b0b446fcc239f05ca55d9bf8f2a50f1e08af3</hash>
        <hash alg="SHA3-512">ed9675f9f070203801eb762092ac99636d376b7ef563f99508283006a65a0d2dfce38e1ba7ff2ccfebcede0376ba0724b76b459ca112477234aed8208807f785</hash>
      </hashes>
      <licenses>
        <license>
          <id>MPL-1.1</id>
        </license>
        <license>
          <id>LGPL-2.1-only</id>
        </license>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.javassist/javassist@3.24.0-GA?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.javassist.org/</url></reference><reference type="distribution"><url>https://repository.jboss.org/nexus/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://jira.jboss.org/jira/browse/JASSIST/</url></reference><reference type="vcs"><url>scm:git:git@github.com:jboss-javassist/javassist.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.xerial.snappy/snappy-java@1.1.10.4?type=jar">
      <publisher>xerial.org</publisher>
      <group>org.xerial.snappy</group>
      <name>snappy-java</name>
      <version>1.1.10.4</version>
      <description>snappy-java: A fast compression/decompression library</description>
      <hashes>
        <hash alg="MD5">d1d3b91e925c46a1a0f68b87298bafe8</hash>
        <hash alg="SHA-1">50d0390056017158bdc75c063efd5c2a898d5f0c</hash>
        <hash alg="SHA-256">55b30c94e5c4cc2d4b6976916098d0678a8a6cc7427fa8c875621bd94e731ac8</hash>
        <hash alg="SHA-512">9e52bad4eaa0d0a2e0083cdd3433d84c4bb44c4d3f0314a48c3d6eacbb64d0f4fb2d71197944115618a598eb4a4941c13af2a9ec676b003fb3462ddac58bbe41</hash>
        <hash alg="SHA-384">9539e8eb2dea244f07a7216db38970e3f336b5dc9d132cbe54e201c818dba3e02a1fc467b4529a18eca7127f86d742dd</hash>
        <hash alg="SHA3-384">d5d5ef5d8b050f200ae29855a4b6f5e278215d0a97a69d3653dc1aa716f9847b3c305312a3c994d46721615ba02fc7c8</hash>
        <hash alg="SHA3-256">bbbb3ff43a24094bf2c77dd8c8f94b06d62d158da0d2c3399de3a2993df9986e</hash>
        <hash alg="SHA3-512">de2aa7e7fada466f24ccda07123e2877446733dd48e4b914d25b0d296f677e17a24f182a0e9216e77b261143b774ccaadcfd2854dde1bf36cb2c6db6cdf78b3c</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.xerial.snappy/snappy-java@1.1.10.4?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/xerial/snappy-java</url></reference><reference type="vcs"><url>https://github.com/xerial/snappy-java</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.lz4/lz4-java@1.8.0?type=jar">
      <group>org.lz4</group>
      <name>lz4-java</name>
      <version>1.8.0</version>
      <description>Java ports and bindings of the LZ4 compression algorithm and the xxHash hashing algorithm</description>
      <hashes>
        <hash alg="MD5">936a927700aa8fc3b75d21d7571171f6</hash>
        <hash alg="SHA-1">4b986a99445e49ea5fbf5d149c4b63f6ed6c6780</hash>
        <hash alg="SHA-256">d74a3334fb35195009b338a951f918203d6bbca3d1d359033dc33edd1cadc9ef</hash>
        <hash alg="SHA-512">98d59086a6021ca571d9c1d64b715e43044c730e1ac563f514c40cf44302615d30378b6d5cc69990446522de6260dc8e7b303e3990a3139dc326d058dfb6dbd9</hash>
        <hash alg="SHA-384">8e3f2acdbb41a00c4d9cc5f328e63fb626ac7c6c84e1bf9502e2fcc76a591b2b819b2d27b29925ff986b95c297b30e2c</hash>
        <hash alg="SHA3-384">ec0d6a00760d0a4ecba13a41785d6ae57a64552b1687eaa3e292b3054bb1348e49ab8a938197ff126f9218c6cb96ee1c</hash>
        <hash alg="SHA3-256">7be684c102891105f66d378b61ea1297a392c1618b5aebf7e0b281f55217c206</hash>
        <hash alg="SHA3-512">0b2294570ea2bfbb50ced21dfa4bad956467ca447e9ab2dd602a3478371bcd0e9f13d2dff74d06827a28882409612cdde00bd91267be05bd3510c68268bf3166</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.lz4/lz4-java@1.8.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/lz4/lz4-java</url></reference><reference type="vcs"><url>git://github.com/lz4/lz4-java.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.confluent.flink/flink-runtime@1.18.1-cp3?classifier=tests&amp;type=test-jar">
      <group>io.confluent.flink</group>
      <name>flink-runtime</name>
      <version>1.18.1-cp3</version>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">9d4f1f3524e5ac874a82c4d20f9722ea</hash>
        <hash alg="SHA-1">360e69fbc26081dee088a55af09d7d6154e4ec00</hash>
        <hash alg="SHA-256">0979a071e67351e9325467d3a0db14ef4ce442a47ad2668ef55f06fe377189f1</hash>
        <hash alg="SHA-512">42600b13b4e7a021bb97a7ad57169d5c79472b40e7dba4b1ccf46a9794ae64f6fd44e2bf1426487e2465cc04f61f57640ac506f38dbfda54e1c0ea7b1fa88ff9</hash>
        <hash alg="SHA-384">863a7f315855783431e8361a193b826ce223fe860f852e14dd262b4f273a8969e960285223924a9c4659bb53ce4ff7e5</hash>
        <hash alg="SHA3-384">738f32d9f448707a279e60adc8a74054aea5f8e34290de658481475aea252053e70a10232cbe840d698c88e5ce5300e3</hash>
        <hash alg="SHA3-256">10051404e53e32bba46364efcb2f558bea6500689c1b0fdca7adf1d4ee25af9f</hash>
        <hash alg="SHA3-512">c3a796e23972cdb66c0c974812c3f117b7689cbfa88ff893dbb73b11c6c7183331991fdbfd826c961d60214ded12166228442f85d5c7e623dca369eb803be6ab</hash>
      </hashes>
      <purl>pkg:maven/io.confluent.flink/flink-runtime@1.18.1-cp3?classifier=tests&amp;type=test-jar</purl>
    </component>
    <component type="library" bom-ref="pkg:maven/io.confluent.flink/flink-core@1.18.1-cp3?classifier=tests&amp;type=test-jar">
      <group>io.confluent.flink</group>
      <name>flink-core</name>
      <version>1.18.1-cp3</version>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">e6e8d2bcdbb3f05eae54759095f77178</hash>
        <hash alg="SHA-1">5ccfd07a8c333b6720be5905fa77004c5a838e32</hash>
        <hash alg="SHA-256">0bca332581aa2a5347b1f8594f9dcf3c301479f54c8e77467d530b14590fb64e</hash>
        <hash alg="SHA-512">d699453f4b6c117fb8ffa258ae4ba5d770018e48cee41acf1be2f1157438e4fb88b15fe3d3c879a1baf548069b9aefa7f57d67ef142a3505f9e838348a3ba719</hash>
        <hash alg="SHA-384">c4534b241dd98a6212a2445f15f2c041b10f5dbccefd7e1c9900270c5bc31ffcabcb23bdf37f323d6dd36629835185da</hash>
        <hash alg="SHA3-384">a4e99a8c55c51cde4e6adc57dea3d918428d71711b1449343fe59c5037c8ad35904f567d8b9c410fe053a18f11d1bce9</hash>
        <hash alg="SHA3-256">9a1ef7da4f8ec786ad6c9475a5a95c2de03065b67a7e1feebf7f3aa9ef14a07c</hash>
        <hash alg="SHA3-512">06b4555612a6993ac1198a098e2810f28da3c1392f51e22e187006215834c83839a8c51eadc57fe7b5d4e4d7c7f79f14156ba0031a6e0ab92f51d60c6f6670df</hash>
      </hashes>
      <purl>pkg:maven/io.confluent.flink/flink-core@1.18.1-cp3?classifier=tests&amp;type=test-jar</purl>
    </component>
    <component type="library" bom-ref="pkg:maven/io.confluent.flink/flink-annotations@1.18.1-cp3?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>io.confluent.flink</group>
      <name>flink-annotations</name>
      <version>1.18.1-cp3</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">b7501d6caa6ce17dfba9f1f06e0bd247</hash>
        <hash alg="SHA-1">425ae5e946cfc8006da947c44a648d0e1195ce16</hash>
        <hash alg="SHA-256">18dc1a74a0fb43d7167e57a29bbf6f0395e182c577751f3a8977d732c4365d86</hash>
        <hash alg="SHA-512">b1c321ba68b7e4b0e29cd4c887edff465e32947ef8b178f47b60970357546b97a7ceff7e364571723dc35cd97787dac60ac891e41e87e7de578813e4b055348d</hash>
        <hash alg="SHA-384">d0a2e216c180b63a8333bd4aae472ec7ced48a3aea78bef8b0d3148efb2f450bafd60877b4018dc3ea08143f7f2f8a24</hash>
        <hash alg="SHA3-384">894b68b3b6990e102b1804920921b0e946ecf17ff560ad347605782f9e8e53e48ca496c46be634ddcb9d12785b71dc3c</hash>
        <hash alg="SHA3-256">3dc07c8479afdd567ae3c7ffb2595cf6d7f37a1f1d3f13b7e60e25a30af7158b</hash>
        <hash alg="SHA3-512">ac1c6fcaa59d7e41635649ebcf00543f678b4e9e46b375fcca917ebb19cdb73033e71a12196d38b1739700bf1f546780b775775324b337809d14759cb3331e8e</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.confluent.flink/flink-annotations@1.18.1-cp3?type=jar</purl>
      <externalReferences><reference type="website"><url>https://flink.apache.org/flink-annotations</url></reference><reference type="distribution"><url>s3://cp-flink-staging-654654529379-us-west-2/maven-staging/28052f298c23e610e04213241ad3fdf6a8dfa940</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink/flink-annotations</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.confluent.flink/flink-metrics-core@1.18.1-cp3?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>io.confluent.flink</group>
      <name>flink-metrics-core</name>
      <version>1.18.1-cp3</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">6824eac2f81278cd564224bd4e609f03</hash>
        <hash alg="SHA-1">50763b426c7e12ea20834f655a8cc6ba769badbb</hash>
        <hash alg="SHA-256">cbcd68ffab78f235493385a1b7263bc06ff99bfc0dae7f44ed0356008e3b95c4</hash>
        <hash alg="SHA-512">54b87eac0208a40b6279305f4258976a55d345ae14d6318f9c685ec4775853f8f24645a8e093a53cef5c7c668e906a21aafd011e97732c4fae8836256619a191</hash>
        <hash alg="SHA-384">1425bbc8ca90b793e8180564b6254d54aace3bb08e400d7b19b1eb2d237c4e72b79725ee4025b1b1afcc7d1d7c4a05ed</hash>
        <hash alg="SHA3-384">db15b17c316313c4042bf4bdf46fc18db4f283dac6b2ab7e3318ee0896e0398d5ee1615e114baee2064be634d40aa9e8</hash>
        <hash alg="SHA3-256">630038a27905103f15d69e7ff4e04616ed2a741fe1c3a75dc192bfa42d26f825</hash>
        <hash alg="SHA3-512">2fc7f3760091382b8a5b31695453c95c02bdb9b375fbed59097737f4759c4c101230c6efca4326429487247162be27612f3d8546841599c6c6c66b9783b5a18d</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.confluent.flink/flink-metrics-core@1.18.1-cp3?type=jar</purl>
      <externalReferences><reference type="website"><url>https://flink.apache.org/flink-metrics/flink-metrics-core</url></reference><reference type="distribution"><url>s3://cp-flink-staging-654654529379-us-west-2/maven-staging/28052f298c23e610e04213241ad3fdf6a8dfa940</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink/flink-metrics/flink-metrics-core</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.esotericsoftware.kryo/kryo@2.24.0?type=jar">
      <group>com.esotericsoftware.kryo</group>
      <name>kryo</name>
      <version>2.24.0</version>
      <description>Fast, efficient Java serialization</description>
      <hashes>
        <hash alg="MD5">6cf0fa5b5d4f6b8226fd4a4bfb7532b8</hash>
        <hash alg="SHA-1">0c6b206e80cfd97e66a1364003724491c757b92f</hash>
        <hash alg="SHA-256">7e56b32c635058f9aa2820f88919ab702d029cbcd15285da9992e36cc0ae52f2</hash>
        <hash alg="SHA-512">a4c6ce768528a03c219cc6a41b22293f78e433c849c90391b64dda3f2376fd79951a89c5f4e6701bcbcb6eee9abffe2390cfb12dba3b885e4a3d411a26b78f40</hash>
        <hash alg="SHA-384">678ad1b7f4d99910b8ff44a6c8f78ccae91f823161ce23de39077397352919b7257e1e6e0dea90900be973291ea19282</hash>
        <hash alg="SHA3-384">671fc6aa9905f8131482e1d0f3fe26126562b13777893d51a66d0f84fc6f2aa3f13947e488ffba8f09c31a2cc0e9758a</hash>
        <hash alg="SHA3-256">46e89d8f12cbead0fe29ad707d5dba96e880dacce2a6b374ac4bf1ced9f36a79</hash>
        <hash alg="SHA3-512">c7cde437eef8343eccd4c5ecb8de5683529e3d4d8262e8cd1f7b7d0df9c632253b979737fd1b486314ec2728aee3a3782dee5d2032621485db4aa3b2a8262741</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.esotericsoftware.kryo/kryo@2.24.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/EsotericSoftware/kryo</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/EsotericSoftware/kryo</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.esotericsoftware.minlog/minlog@1.2?type=jar">
      <group>com.esotericsoftware.minlog</group>
      <name>minlog</name>
      <version>1.2</version>
      <description>Minimal overhead Java logging</description>
      <hashes>
        <hash alg="MD5">f7cfbdf63b67df0bbfa4c7cb260885bc</hash>
        <hash alg="SHA-1">59bfcd171d82f9981a5e242b9e840191f650e209</hash>
        <hash alg="SHA-256">a678cb1aa8f5d03d901c992c75741841d98a9bc3d55dad02e84d65315c4e60f2</hash>
        <hash alg="SHA-512">7b4082766ad740d86708783f3b08780ed72dd18062aa9ba422c4b9016b332d2334ae511f50ef7d89e4eedbdac5cebc51ab6ddaf4d1eea857a3250eb5962f0d08</hash>
        <hash alg="SHA-384">932a282a9c06864001f8212199e4be05543609adbd985c5f4517ee6eba734acd3fd8812213bc0c98af264637cbf9c78d</hash>
        <hash alg="SHA3-384">f36e9f494611c85f59febfef9ce93fc68f1f17db881400456204c1f099e623e334d2f10b41018392877c8af13de7f59a</hash>
        <hash alg="SHA3-256">37422ef85dce86abd8b14b4c9f7ad77261d728a472126c8eca38f356c98da395</hash>
        <hash alg="SHA3-512">74ba47271899706a284e942482ff41649ffd93e57a29320732e57864c47f3f0431377130ca7afb5e64cc6b68d4e5a5cdfc38027966cda4b5e512e3ce02bd8a99</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.esotericsoftware.minlog/minlog@1.2?type=jar</purl>
      <externalReferences><reference type="website"><url>http://code.google.com/p/minlog/</url></reference><reference type="vcs"><url>http://minlog.googlecode.com/svn/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-collections/commons-collections@3.2.2?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>commons-collections</group>
      <name>commons-collections</name>
      <version>3.2.2</version>
      <description>Types that extend and augment the Java Collections Framework.</description>
      <hashes>
        <hash alg="MD5">f54a8510f834a1a57166970bfc982e94</hash>
        <hash alg="SHA-1">8ad72fe39fa8c91eaaf12aadb21e0c3661fe26d5</hash>
        <hash alg="SHA-256">eeeae917917144a68a741d4c0dff66aa5c5c5fd85593ff217bced3fc8ca783b8</hash>
        <hash alg="SHA-512">51c72f9aca7726f3c387095e66be85a6df97c74b00a25434b89188c1b8eab6e2b55accf7b9bd412430d22bd09324dec076e300b3d1fa39fccad471f0f2a3da16</hash>
        <hash alg="SHA-384">dd4e99b3314bd3c1a1ee26296615d9e44dadf7a1f8a7bbba44fb95121803d331e36d4cca4260e7609af78a47ba3e4073</hash>
        <hash alg="SHA3-384">8ce03528e4a6e95c44283b56eca87e6a6d3bf1363411a55b538f4f9110cf7470581ea5c73925e877ddab08dba0603f40</hash>
        <hash alg="SHA3-256">fd3d6134b5f07077b82ccf93d148dacf7c4ce5c971209510edd0e77e3e38c19e</hash>
        <hash alg="SHA3-512">c2a523916fb7c7d55a05d5e3d9e9b33000733f4b20a71be174e4e093e3f06ea78ad831edd1505527da7388105f8647efb7d5666ba852c90b4e2d5bb74256efbc</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/commons-collections/commons-collections@3.2.2?type=jar</purl>
      <externalReferences><reference type="website"><url>http://commons.apache.org/collections/</url></reference><reference type="build-system"><url>https://continuum-ci.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/COLLECTIONS</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>http://svn.apache.org/viewvc/commons/proper/collections/trunk</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-compress@1.21?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.commons</group>
      <name>commons-compress</name>
      <version>1.21</version>
      <description>Apache Commons Compress software defines an API for working with
compression and archive formats.  These include: bzip2, gzip, pack200,
lzma, xz, Snappy, traditional Unix Compress, DEFLATE, DEFLATE64, LZ4,
Brotli, Zstandard and ar, cpio, jar, tar, zip, dump, 7z, arj.</description>
      <hashes>
        <hash alg="MD5">2a713d10331bc4e13459a3dc0463f16f</hash>
        <hash alg="SHA-1">4ec95b60d4e86b5c95a0e919cb172a0af98011ef</hash>
        <hash alg="SHA-256">6aecfd5459728a595601cfa07258d131972ffc39b492eb48bdd596577a2f244a</hash>
        <hash alg="SHA-512">c92d9a12547aab475e057955ad815fdfe92ff44c78383fa5af54b089f1bff5525126ef6aef93334f3bfc22e2fef4ad0d969f69384e978a83a55f011a53e7e471</hash>
        <hash alg="SHA-384">da56f95d420cd7278cee646f4cd0e7a5ee12b6a2894efaec12f0ff7b56c3d43e5db736fe1ed66ff91118b16f2d64ebef</hash>
        <hash alg="SHA3-384">6d3dc0198dd523a49fa94e054841aece853577b5c3ea1029fc288ad9ff580ab1b65ea99ddbe58c42125054e8c43be461</hash>
        <hash alg="SHA3-256">37d4a014b50393793d35c70431bd8a1842c197d854c6f174dfa946b9edc2b841</hash>
        <hash alg="SHA3-512">61609f60746406a7cb1ef3f979488beca6674fde208c9025d3fdee115de4767e8a4a1ee38f5bf79ac0104505ddb3558f1feeba5e318d6545647120ac60db6b89</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.commons/commons-compress@1.21?type=jar</purl>
      <externalReferences><reference type="website"><url>https://commons.apache.org/proper/commons-compress/</url></reference><reference type="build-system"><url>https://builds.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/COMPRESS</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=commons-compress.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.confluent.flink/flink-rpc-akka-loader@1.18.1-cp3?classifier=tests&amp;type=test-jar">
      <group>io.confluent.flink</group>
      <name>flink-rpc-akka-loader</name>
      <version>1.18.1-cp3</version>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">bd7a88023ffe66f9594861b7b7b1f987</hash>
        <hash alg="SHA-1">7914a4848a1a95c03cd0ca6f6b98644a585f810b</hash>
        <hash alg="SHA-256">8a80aa38fd3d0e01acfdc2f78b94acdd379b4cf0809acefe09d4ca9ec5c0ee62</hash>
        <hash alg="SHA-512">b31b1e4ed9393ef18ff3e965cf3b7f4dff611c19111ed7b9b491a538be8d7f4e39960df973fda24fb417819f2d34302cfa57784b210e9ada2d95b653c3af26ab</hash>
        <hash alg="SHA-384">b26fa820767a5ba5e6f708f82bc2e39a016a19835694269ef6201db61da1bdbadba458ee9eaa7ea5e1d869e6abe684e0</hash>
        <hash alg="SHA3-384">ac4d413bcfc79bc509c7aac9c288955f5ca97730c94620c7d394df3d8f88f241ca764350b4cab240004c895b6aa97953</hash>
        <hash alg="SHA3-256">9c935569ebc49bf960b06585aec59a1bfb978e01dc2280095e148731113c4680</hash>
        <hash alg="SHA3-512">b50a0db81ade218551a27a7e1cd19887b1e92968df1383fe4f36ac0573f9cce5d6a91fadf3a598db17a61d44fa1c420da5beeb61151e1d3f7b1bce18b1be3cc4</hash>
      </hashes>
      <purl>pkg:maven/io.confluent.flink/flink-rpc-akka-loader@1.18.1-cp3?classifier=tests&amp;type=test-jar</purl>
    </component>
    <component type="library" bom-ref="pkg:maven/io.confluent.flink/flink-clients@1.18.1-cp3?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>io.confluent.flink</group>
      <name>flink-clients</name>
      <version>1.18.1-cp3</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">a78d83fc88f84b430ebdb9586d7dbf78</hash>
        <hash alg="SHA-1">154e0981575536bbea6c50ffcbf0c9cfac367460</hash>
        <hash alg="SHA-256">116dc1eeb89d2aed45b41a5d456a533ea975da350aa46d39c476261a5163800a</hash>
        <hash alg="SHA-512">df154961cf0324f19810df054f62a6f09c28682f52c7902bdd4ea6d0e6447c11650f04b7f1bdd0d7594fa6f16b91bd0c5730610bc6a60fb72a0d98531e6e38dd</hash>
        <hash alg="SHA-384">1f0f584cf8b5ab5db17197514271aedbbddeb5608c32077da1339eb6cf8b80fe38f03f70c9f3d13e8b15ff66161158ab</hash>
        <hash alg="SHA3-384">05882f20388eefa486f17304585a086d00341de20fd8b6739ce5534bb43de3bcfcc35f62e3a53a845d57e31c735ceacc</hash>
        <hash alg="SHA3-256">7c897dc3c7d3c1ff3c574ea9b0ff7e532f64ac782c84cd31264d4b5ec48a4da9</hash>
        <hash alg="SHA3-512">26c71cbcb166b53362da1d52f1f49933e99789e8412807870869d4976bfdb43c0e3003aa9859fcac503a639a9ffdbefc5a6db6e70f652bf50198842e6c05c096</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.confluent.flink/flink-clients@1.18.1-cp3?type=jar</purl>
      <externalReferences><reference type="website"><url>https://flink.apache.org/flink-clients</url></reference><reference type="distribution"><url>s3://cp-flink-staging-654654529379-us-west-2/maven-staging/28052f298c23e610e04213241ad3fdf6a8dfa940</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink/flink-clients</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.confluent.flink/flink-optimizer@1.18.1-cp3?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>io.confluent.flink</group>
      <name>flink-optimizer</name>
      <version>1.18.1-cp3</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <hashes>
        <hash alg="MD5">ab84cf5319c74827ffc67873bb87ada9</hash>
        <hash alg="SHA-1">0f82cdd913710c9e06451f0571f69a64da2c361f</hash>
        <hash alg="SHA-256">b369ea3c37688b4a7a446db5a180f3f12c99a34562d2df55372d257487ef9f7a</hash>
        <hash alg="SHA-512">f484adf8853feb7100665530db510c8eb999228662f6a82554e2ac18155f16a1488063a9c6e9e893c70fd6c740ad72b1e6d0c119e8326cc9796244d71dc8e840</hash>
        <hash alg="SHA-384">361a9758b58fb1f42b4d003c9ea3cb4b52b23748b78d98a44cfcb073b8b38e43b1e1b74ab4a5a15567b6da60c75db8cd</hash>
        <hash alg="SHA3-384">036edf700ff5be52331839b2e54014e956fa1277606101d9fe5a7665cae28a900bd71038069a6f1eccef5d98d83b1e52</hash>
        <hash alg="SHA3-256">6ef7d5be12ef581f6e50ef6f3cb8389882edd664865f3c346352ca2f0ae82c03</hash>
        <hash alg="SHA3-512">4c7619f7579c788a7868f1fdf22996e3258c38f4a6c64f659cc4773c232d0d6e908e074dde0027acf98eb90a9a6e8bdbe7a523f7193e26d4cdfbc3b269b96795</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.confluent.flink/flink-optimizer@1.18.1-cp3?type=jar</purl>
      <externalReferences><reference type="website"><url>https://flink.apache.org/flink-optimizer</url></reference><reference type="distribution"><url>s3://cp-flink-staging-654654529379-us-west-2/maven-staging/28052f298c23e610e04213241ad3fdf6a8dfa940</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink/flink-optimizer</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.confluent.flink/flink-streaming-java@1.18.1-cp3?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>io.confluent.flink</group>
      <name>flink-streaming-java</name>
      <version>1.18.1-cp3</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">ad09fedf7f28182ae723897330e297dc</hash>
        <hash alg="SHA-1">2028d84030c8e2c16d4d38d54d223b7c84091f91</hash>
        <hash alg="SHA-256">d6f5f7e7f355d9339df10d8be96496e22a3f88a7a0d113301224abdc0cc0fa2c</hash>
        <hash alg="SHA-512">379e4a0af7c15b3ee8bc08c8d5a7b0131e3427e713e5a9acd5d66b61f4cde1035003c2c54eea96fa8a6fe3069eb0d85c8cb0ee5b1063900ffc7c561b3f5bbee2</hash>
        <hash alg="SHA-384">9f8578537bad33da62e42b91b2669b915e7d84cfd2f666720404ba4dd1b045e70d77053bbd632c785ee5858ae0030c1a</hash>
        <hash alg="SHA3-384">e14a79f3a7de4b371afd23abf574b822463c5dfc5fb52fbd85254d18820fe4d33a8feee51e8a336035f5a7dfc39767f3</hash>
        <hash alg="SHA3-256">c2b2a8d340acee121489d1b85644d20d9ef2e1aaff459077f0fde0376af9a3d7</hash>
        <hash alg="SHA3-512">6d51b2b4735d5d455b10298ceef76e4bb7be062dfc532e86fb4131f8181028f1e7469cf1fc17b505ed85b020f95dc45ec4653760da51b9c408346353601ec02d</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.confluent.flink/flink-streaming-java@1.18.1-cp3?type=jar</purl>
      <externalReferences><reference type="website"><url>https://flink.apache.org/flink-streaming-java</url></reference><reference type="distribution"><url>s3://cp-flink-staging-654654529379-us-west-2/maven-staging/28052f298c23e610e04213241ad3fdf6a8dfa940</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink/flink-streaming-java</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.confluent.flink/flink-file-sink-common@1.18.1-cp3?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>io.confluent.flink</group>
      <name>flink-file-sink-common</name>
      <version>1.18.1-cp3</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <hashes>
        <hash alg="MD5">ae440526416f075c066dd186b290b528</hash>
        <hash alg="SHA-1">fe3c30c380f0f6a343810dd74214562fab44a5b1</hash>
        <hash alg="SHA-256">e143160c4dfd6cd8689e55b36398f08f49b5418ce83946e7c0351b9287fbb375</hash>
        <hash alg="SHA-512">b5e21cc868923243c78b12afbedd158093962c5e4dfcd03c14016ca86b62d11ad14d6fe65fb172ff08e72eff0f962e4bc5b784644014f7aedfca13404fe79a96</hash>
        <hash alg="SHA-384">87c2d1540832949a70284adf7b0dd5e6afbbd5ff70673d84b927be4412880c914fb5e3912c88fb4b226e48953d01e2bd</hash>
        <hash alg="SHA3-384">a1747735375cc17a62ac7fb421f7e857517bc767bbf2554f5218500dfa94a33330f982b52f129016f66141fd805847b2</hash>
        <hash alg="SHA3-256">50b0074adb366ca676f66089c6c50aed7f0b951581122c3f633e16048e6a27e7</hash>
        <hash alg="SHA3-512">bcacbecb5b48859ebe86068331d8bc488a1e3110ca691e798ef5ace03bb0c50c1eae864110427e46a9ff4b3892cfb0b5c2544e4437e9f81ad25885dc5ea5a2bf</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.confluent.flink/flink-file-sink-common@1.18.1-cp3?type=jar</purl>
      <externalReferences><reference type="website"><url>https://flink.apache.org/flink-connectors/flink-file-sink-common</url></reference><reference type="distribution"><url>s3://cp-flink-staging-654654529379-us-west-2/maven-staging/28052f298c23e610e04213241ad3fdf6a8dfa940</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink/flink-connectors/flink-file-sink-common</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-math3@3.6.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.commons</group>
      <name>commons-math3</name>
      <version>3.6.1</version>
      <description>The Apache Commons Math project is a library of lightweight, self-contained mathematics and statistics components addressing the most common practical problems not immediately available in the Java programming language or commons-lang.</description>
      <hashes>
        <hash alg="MD5">5b730d97e4e6368069de1983937c508e</hash>
        <hash alg="SHA-1">e4ba98f1d4b3c80ec46392f25e094a6a2e58fcbf</hash>
        <hash alg="SHA-256">1e56d7b058d28b65abd256b8458e3885b674c1d588fa43cd7d1cbb9c7ef2b308</hash>
        <hash alg="SHA-512">8bc2438b3b4d9a6be4a47a58410b2d4d0e56e05787ab24badab8cbc9075d61857e8d2f0bffedad33f18f8a356541d00f80a8597b5dedb995be8480d693d03226</hash>
        <hash alg="SHA-384">95d1186d9ca06a3ea2e6437ddec3a55698e2493d3e72f6f554746b74fa929892bd71a2ab501a4e7b1ce56b7cd64e7ab4</hash>
        <hash alg="SHA3-384">f85bb3e46a00fc4940a3be1331301302b0eb728e2d1fe2c1842d4761e5a0bc7a420c0c705ae60250ca1c7b03d3694b9e</hash>
        <hash alg="SHA3-256">919c15ae4b1aef2a58aa6ea4b700bc5562e78dbc382f3393169425ca91ad368c</hash>
        <hash alg="SHA3-512">dbe54d586c898cdbd7df6c31c131ca3525db17fcea5c7f5da8cbfe617e2afc667289290c76771ec5c9567a56fb2b177b0a31d67abcc656410c90287da4d88999</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.commons/commons-math3@3.6.1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://commons.apache.org/proper/commons-math/</url></reference><reference type="build-system"><url>https://continuum-ci.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/MATH</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>https://git-wip-us.apache.org/repos/asf?p=commons-math.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.junit.jupiter/junit-jupiter@5.9.1?type=jar">
      <group>org.junit.jupiter</group>
      <name>junit-jupiter</name>
      <version>5.9.1</version>
      <description>Module "junit-jupiter" of JUnit 5.</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">f9e29d72f8e9dc363e63b77600fc430a</hash>
        <hash alg="SHA-1">9274d3757e224bc02eae367bd481062a263c150b</hash>
        <hash alg="SHA-256">e305ce7b01adfcc89b4eee03bca473eeb68925a596d8ccca404a436344fc1965</hash>
        <hash alg="SHA-512">2c0cae840e61ec33f98480ba2b5603eeac9d53dccb39441d4b3aee1c8baa5c75b3110f0d3f6334c2f7a06870fabd9710543deb441179e23091b5fa09d7449c5e</hash>
        <hash alg="SHA-384">a1b2c9dd759e67cb6ff5a7285869f447f368866733ea98a291ad57e2cf0ea370c8a9770c6431c50b07e02e9acf6a4428</hash>
        <hash alg="SHA3-384">c95dcff464c0598df9006f1a8d30cc5ba644754edec2c23709bf4973908dae08be1a886f32900a1e447dab8019bde0eb</hash>
        <hash alg="SHA3-256">a360f29f15c60e30cd04ddce55c6fb0253f1d5b5f0da83ce1bb7d8baac9e0f7b</hash>
        <hash alg="SHA3-512">e552563e327291407b01076a2c0b7b57441fff32fd3fe2817b84a5b00fa55b1792c8a9a1e54024e2b1b6f21e57c8069127ddc5df6d8fa50afdeb75f66322f6d9</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.junit.jupiter/junit-jupiter@5.9.1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://junit.org/junit5/</url></reference><reference type="vcs"><url>https://github.com/junit-team/junit5</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.junit.jupiter/junit-jupiter-api@5.9.1?type=jar">
      <group>org.junit.jupiter</group>
      <name>junit-jupiter-api</name>
      <version>5.9.1</version>
      <description>Module "junit-jupiter-api" of JUnit 5.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">93dac73a55b522940bf3d5d032a8043a</hash>
        <hash alg="SHA-1">7bb53fbc0173e9f6a9d21d58297af94b1f2f9ce1</hash>
        <hash alg="SHA-256">5d2fe4d719dffb25a95d77e9c7a34893cbbb1b4cc6c86f2726af7e0fb7035b2f</hash>
        <hash alg="SHA-512">9785c7bb2c3e65de7d3647e7760438a18a10515dd3fae46076b0fa7b29b00d1466ca91572b6c806d41f60dd74698d0cd4fbb223dc85d7a6c4ad7faf140b1a5a9</hash>
        <hash alg="SHA-384">43d63f4cbcb8833e3570eff76712123b981465d3b1f0aad78ae06b99de64e557b36a88b34cdef23d972a9eb1f81fdddb</hash>
        <hash alg="SHA3-384">38abea431b51f4c0d006fd55bd77df61bbc1ad8c49e7f230fb4cb8704a2253065c2c5eaa069b8267829c0503b42104b5</hash>
        <hash alg="SHA3-256">37a4fd74bd935243b94a1411664c8cd9b4701a5e47a7cf20baeae226f7a24c3e</hash>
        <hash alg="SHA3-512">4c2f801fc42ebddfd45bf26b6c62326f36a5f0fbe71793436f662703b17eed34c3f2502b059c2682099cea4154b49486c5030cb9f2a0cf166dc30800bbb423e2</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.junit.jupiter/junit-jupiter-api@5.9.1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://junit.org/junit5/</url></reference><reference type="vcs"><url>https://github.com/junit-team/junit5</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.opentest4j/opentest4j@1.2.0?type=jar">
      <group>org.opentest4j</group>
      <name>opentest4j</name>
      <version>1.2.0</version>
      <description>Open Test Alliance for the JVM</description>
      <hashes>
        <hash alg="MD5">45c9a837c21f68e8c93e85b121e2fb90</hash>
        <hash alg="SHA-1">28c11eb91f9b6d8e200631d46e20a7f407f2a046</hash>
        <hash alg="SHA-256">58812de60898d976fb81ef3b62da05c6604c18fd4a249f5044282479fc286af2</hash>
        <hash alg="SHA-512">17f77797a260eb2bd1666a90e25efc79a5413afa9df1c1cb6c4cd1949d61c38b241e3bb20956396b5f54d144720303d72a2ac00bc5bf245a260a3c3099e01c74</hash>
        <hash alg="SHA-384">ef25f5dd948c9ab7256e896da994871c1645b22a8d2d83f1e9ff7c6562b62acb70fcf0bb976a9580fb955a8e8b9c43dd</hash>
        <hash alg="SHA3-384">c8ae5d803f34d54150681490afaa595a607e31c15c82765fb24eb7035f3310a4db71832d4ea1840d5281c4fb15e25a91</hash>
        <hash alg="SHA3-256">874b139216e546b33623c53452aea25f36d6c5ec64446aa27be1e60c6838e5c3</hash>
        <hash alg="SHA3-512">58368f990cb11d2965129b32986edd007f909b1187f8fe6842306aa5179fa74d7593bca2042776f6deb68921069719ee4f2bc54e609f87b974a885d7aa7fc05f</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.opentest4j/opentest4j@1.2.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/ota4j-team/opentest4j</url></reference><reference type="vcs"><url>https://github.com/ota4j-team/opentest4j</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.junit.platform/junit-platform-commons@1.9.1?type=jar">
      <group>org.junit.platform</group>
      <name>junit-platform-commons</name>
      <version>1.9.1</version>
      <description>Module "junit-platform-commons" of JUnit 5.</description>
      <hashes>
        <hash alg="MD5">5d39e33ed6c2275c75f3ad4d204a9f1f</hash>
        <hash alg="SHA-1">3145f821b5cd10abcdc5f925baa5fffa6f1b628f</hash>
        <hash alg="SHA-256">a8e82d510bbbce5fe1777b2ecf7bc68401e9ae8327009e029b2db5798403d25e</hash>
        <hash alg="SHA-512">750576c1887d1e3595e538ade132f58e510ce225e41cb12a8d3e264b8fd2c37bbc3d089d5ee0aa918d97797fc606ac5b337b6c99c631718a3c5f16ebcd2e8715</hash>
        <hash alg="SHA-384">407ccefa66c444476839f6534a4ded641b8a30c94f019c7677403176a3849ee010d4c1427007faa36f73758423790d12</hash>
        <hash alg="SHA3-384">65461e8d181cf71618bad97a779d74f207a679b2f6c5e0223586a86cbfde181d285fb5395c805b68c203f7ebcf02c349</hash>
        <hash alg="SHA3-256">c358f062ad19c63282ce577d46ca6b71b2f4d7c76846d5a1bcc0ec3e6f4507fc</hash>
        <hash alg="SHA3-512">aa0b26d73d761994161a1da6e07369c453d23da5c6d6bc795cae6b3fd0d8a4d285766e65b966fafd39a56ae3ff85912938f5027be8ab7cf3316cc97e4ab15302</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.junit.platform/junit-platform-commons@1.9.1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://junit.org/junit5/</url></reference><reference type="vcs"><url>https://github.com/junit-team/junit5</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.junit.jupiter/junit-jupiter-params@5.9.1?type=jar">
      <group>org.junit.jupiter</group>
      <name>junit-jupiter-params</name>
      <version>5.9.1</version>
      <description>Module "junit-jupiter-params" of JUnit 5.</description>
      <hashes>
        <hash alg="MD5">8f9ff451bb9e8e44e1e71c3f8708e85e</hash>
        <hash alg="SHA-1">ffcd1013edaeee112be11fcddeb38882d79238de</hash>
        <hash alg="SHA-256">30157f26d857ba4f84c0d84d156f55f056e80dc09b4281affa8b1ed4d3205c08</hash>
        <hash alg="SHA-512">bb03e241e3cf78ebebd27cf89d19904535122b7ac75a8cac3b04af6aa98106f7f0dac7d7c0c753a35bfdacbcc8e75d6509ab71491e6c00f40e1220190cd3c76d</hash>
        <hash alg="SHA-384">87e992a5bc9e1179874a3434c158a5e39a17337e19eb833c33056e0f18e9687c08b854e6e8df1cf9735ffbbb4fb0da6c</hash>
        <hash alg="SHA3-384">3804eb518a827108d5d1a80629bfac0b8654df86342cf6713d5367bea5947c064e9ef00ac2b9dfaa80e78a8497a4fe4f</hash>
        <hash alg="SHA3-256">ff557170709a336f84d74dda6ab60b6e1f70a84515db64f93b9acb0f2436d3d8</hash>
        <hash alg="SHA3-512">1f77a58754ff32231ca829453098c1eea3186f7295bb29126524199e4d42e3ca44074b0d2db45db495be1f7d8f99c0ed758cb35f423447e7bd2fe5f67db55247</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.junit.jupiter/junit-jupiter-params@5.9.1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://junit.org/junit5/</url></reference><reference type="vcs"><url>https://github.com/junit-team/junit5</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.junit.jupiter/junit-jupiter-engine@5.9.1?type=jar">
      <group>org.junit.jupiter</group>
      <name>junit-jupiter-engine</name>
      <version>5.9.1</version>
      <description>Module "junit-jupiter-engine" of JUnit 5.</description>
      <hashes>
        <hash alg="MD5">72817d3efd98d986d847c2ed76eef329</hash>
        <hash alg="SHA-1">1bf771097bde296c3ab174861954e8aafaaf2e94</hash>
        <hash alg="SHA-256">8bbc506b4f603ede1f6bafd8eee69a9cc43de0c26a0ee8d40d583d3feeedc2e9</hash>
        <hash alg="SHA-512">c1b67264ecb7d806a954b80d9836e52c9fd9382eea5f0f564be83b75fee01ad030060dd1508e52efd533b799fe8eea3504166ecffe9d8c8c2aa6d14404c9264d</hash>
        <hash alg="SHA-384">a7962c23752a83bf58c7bf6105c1fccecc72e98279f87647f82c54d4287559390a2f0e68822ce2fd7bff33a7df346c67</hash>
        <hash alg="SHA3-384">d52a710b05115812b624d4a4c5c56634bc9e369ea681492696e169575d4e4f09bfe7cdf699346e40a2727bbf32dcd8d6</hash>
        <hash alg="SHA3-256">3fb42d1a3d4e81843135bca88fe4d2da5f1ad57350c8b8380aeed181c562a6f0</hash>
        <hash alg="SHA3-512">b45f9e4fa695eb98ed457668a4f6a37f532173948b5472f363914adf1d45a4ea5e9f9d8fb800c84506c66ff006572b392a576efb6b58878f426a9bb965982ff5</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.junit.jupiter/junit-jupiter-engine@5.9.1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://junit.org/junit5/</url></reference><reference type="vcs"><url>https://github.com/junit-team/junit5</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.assertj/assertj-core@3.23.1?type=jar">
      <publisher>AssertJ</publisher>
      <group>org.assertj</group>
      <name>assertj-core</name>
      <version>3.23.1</version>
      <description>Rich and fluent assertions for testing for Java</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">3c5640639c17a5311ff5928e02204202</hash>
        <hash alg="SHA-1">d2bb60570f5b3d7ffa8f8000118c9c07b86eca93</hash>
        <hash alg="SHA-256">36af798af9fc20537669e02618bd39f2c797f4813824ef222108cb686fa4c88e</hash>
        <hash alg="SHA-512">0d0d6ff1b4b1561a005fb25d9d3b73052ea792cbc0913636e9ff7cb0c2e4a34871f8424facebefad06f52e5a126025554baa9ca8887c893e15b107dc376cd1ea</hash>
        <hash alg="SHA-384">647d0ce8fbdacc43b995f982eafccc7494f847a23ac5eff6d51d5c6bc9caf769c84dddd05192133a27225036bbe5a2db</hash>
        <hash alg="SHA3-384">0a40a6f41fc8a5185cbfed706cfcb2cb124dd4bbdf0ce309f69cd7b3fea78c033fa38758275c90ef315218ef80d7369e</hash>
        <hash alg="SHA3-256">41b57913563871a9e42974e31ce79808a943f133c6d41e063e568e5f8ab56736</hash>
        <hash alg="SHA3-512">2e6d4dcc2c83ac3718e6abf09c3fb48072fb661b989250b50694b6bd09196b8f72dbde46912d5c9f3ea1e3f95dd1463fd2e80572872943dfff0490b535f5c444</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.assertj/assertj-core@3.23.1?type=jar</purl>
      <externalReferences><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/assertj/assertj-core/issues</url></reference><reference type="vcs"><url>https://github.com/assertj/assertj-core</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/net.bytebuddy/byte-buddy@1.14.4?type=jar">
      <group>net.bytebuddy</group>
      <name>byte-buddy</name>
      <version>1.14.4</version>
      <description>Byte Buddy is a Java library for creating Java classes at run time.
        This artifact is a build of Byte Buddy with all ASM dependencies repackaged into its own name space.</description>
      <hashes>
        <hash alg="MD5">21117c3c69db9aa3080d611640a27bb9</hash>
        <hash alg="SHA-1">20498aaec9b00a5cfdb831e7bf68feafa833ce4b</hash>
        <hash alg="SHA-256">7ae2b39ac230be9e3e09ce020406c017ff8ceba06eaf078c62a88c218a0ff2b4</hash>
        <hash alg="SHA-512">70f33b8da6492db126d414779cda791f919a6aa7ef66b34f86938ba5d905b5b3d7cf2b0e9faf1edd362f1b18cec6a921094af076f3c5a3a390ff2bb4c6186772</hash>
        <hash alg="SHA-384">9a9543a284b412365b1547e2b284c12a758f67a9f41a11c3cd64db225594391d47f95c14675a0e3696ce5182d80c1949</hash>
        <hash alg="SHA3-384">1a288d8032cc36c888e62ce034aa3c40e7c8df70bf10d76f6a3ebec3b9c5d88da61ad66a8b9fc74ab2e514bb964f617e</hash>
        <hash alg="SHA3-256">b519cf5ef8fab6c011fe8ad68ed1bf32e993ad5f13de84cc79b91a9f885b55a5</hash>
        <hash alg="SHA3-512">b68a097a4914411ca6e631ed0f84bc73c65ff5a53b2e13fe9662f107b64d239fa0d218151712252a7a39cfcabc67bc9e084704b9cdd6103633a1d2ceb566d84e</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/net.bytebuddy/byte-buddy@1.14.4?type=jar</purl>
      <externalReferences><reference type="website"><url>https://bytebuddy.net/byte-buddy</url></reference><reference type="distribution"><url>https://s01.oss.sonatype.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://github.com/raphw/byte-buddy/issues</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.hadoop/hadoop-minikdc@3.2.4?type=jar">
      <publisher>Apache Software Foundation</publisher>
      <group>org.apache.hadoop</group>
      <name>hadoop-minikdc</name>
      <version>3.2.4</version>
      <description>Apache Hadoop MiniKDC</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">9e2419e01d42e4e417a53a029123f6fc</hash>
        <hash alg="SHA-1">89666b8d70bb3a70aee0a6b10b60e05a0f5d30f1</hash>
        <hash alg="SHA-256">71b94b9da0bb4abab62123fdaecb6c0810a7db2a33fd581d57bb6cf1d13905dd</hash>
        <hash alg="SHA-512">5eac88c2ef5c9768b6eed2f48dd05b2932c835908cec43ecc2c7b0548251c1fe2711aa53c5fadb70166c0400a54b9406051bc2c9fa55c54757044717ccfadf5e</hash>
        <hash alg="SHA-384">e052a1c15eb04fd4af23db362f2d24c99218935c9e9086f3a080e6921df3a51874041f11313a26bad1f3cfc92754b7be</hash>
        <hash alg="SHA3-384">a61acf8fa52083ffafc42b71a2e5ccf17ff38371fc507c1e1c58b39293489fba8c31261140a88b180f84e36092853984</hash>
        <hash alg="SHA3-256">81b2f9dd09250ac13f65ebfd0b66e52143d71ed1fef913a47bbbcc0104b54ec0</hash>
        <hash alg="SHA3-512">b114c895d0631d28e6a37649ec651471b08c027500928519786af8b71ca23cb93f0fbd4de433b516314c357e57db2edfd0f9def568724c743d9e00d517188ee9</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.hadoop/hadoop-minikdc@3.2.4?type=jar</purl>
      <externalReferences><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.kerby/kerb-simplekdc@1.0.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.kerby</group>
      <name>kerb-simplekdc</name>
      <version>1.0.1</version>
      <description>Kerb Simple Kdc</description>
      <hashes>
        <hash alg="MD5">16517ceeb9c76a7499d8ae5b98607c8a</hash>
        <hash alg="SHA-1">1e39adf7c3f5e87695789994b694d24c1dda5752</hash>
        <hash alg="SHA-256">9c9976a603833c001a8a4a4e5b2ea0a6775a84e5656b0eca1fe4eb4d068ceda7</hash>
        <hash alg="SHA-512">46a284944d9740718a068b8e30b1c37c56ea656c7a8af8dba553e193e070c8ca4dd58339d5f5b172185edb3e5581fcdfc3ee7402cfd1ccdd5a671fac0274ef42</hash>
        <hash alg="SHA-384">5815e709f59a329b8a9fc24c9e6e3630a7cdc84c4778a1d52e08512121d190915e5dfc329180ded1c29701a8c9f2ccef</hash>
        <hash alg="SHA3-384">1b745244fe51a11a6eeb1fbed6ce51e9a73d7927e68b546d20d7756aecf7eee2d5f2a0edf86888742ace35ee38e026fa</hash>
        <hash alg="SHA3-256">376c1d6b3159ebf3fefc26675f72532ef7fd9b0f8d35c40ad7dce366329d429e</hash>
        <hash alg="SHA3-512">a71d870032e09114dfc1b644c10ecff8263d56361546fb8d50cd2d6bdc71c57893b5dac02b5552c06a1c57de8a4bcb8eaca9867b17e67242d4c3cf3e9b925387</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.kerby/kerb-simplekdc@1.0.1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://directory.apache.org/kerby/kerby-kerb/kerb-simplekdc</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/directory-kerby/kerby-kerb/kerb-simplekdc</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.kerby/kerb-client@1.0.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.kerby</group>
      <name>kerb-client</name>
      <version>1.0.1</version>
      <description>Kerby-kerb Client</description>
      <hashes>
        <hash alg="MD5">bf15f4b482bd784fa8b58a3f509a4d44</hash>
        <hash alg="SHA-1">a82d2503e718d17628fc9b4db411b001573f61b7</hash>
        <hash alg="SHA-256">020fa95a809b96358ab95d43666471838372659af1cbc3f24ef73c29374e9af0</hash>
        <hash alg="SHA-512">6286939bdf4e79f2602c4e466fb58e7faf36a16ec16e7abfa035155f67532371fd6743f0e2200cc37fd44efa32830cd36246ace912aa3960cd7832d367131a53</hash>
        <hash alg="SHA-384">dca413577181fa513f534ef6dc232010a3f7430262981e27ad03369d88cba55fa01a58db072598aae2ae704be911ca3b</hash>
        <hash alg="SHA3-384">06a2cb378078749f67d85b40a97908dc7e2b16e610c45c79881aa5c114d84bc3c467683b7b63c1f00840ba8411dc5509</hash>
        <hash alg="SHA3-256">cf7a918a08eed0506ee50cd03b80fe78780ecf6ef305e0081ca1dfa264fecf10</hash>
        <hash alg="SHA3-512">a0363161e892562bc782f62ee5cf109118fc362814c4493400cdcb264c22d1a238c0a826746ea7312ee15aabcd229ff0e9027c7aa42673b757464ddd8a457c91</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.kerby/kerb-client@1.0.1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://directory.apache.org/kerby/kerby-kerb/kerb-client</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/directory-kerby/kerby-kerb/kerb-client</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.kerby/kerby-config@1.0.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.kerby</group>
      <name>kerby-config</name>
      <version>1.0.1</version>
      <description>Kerby config library</description>
      <hashes>
        <hash alg="MD5">f70f90ed440cee40f4f59f9c75cd6b96</hash>
        <hash alg="SHA-1">a4c3885fa656a92508315aca9b4632197a454b18</hash>
        <hash alg="SHA-256">244520e9bd61e8cd40a475fe615fbea45ca042fc9d50780df30bc7146f77b8c9</hash>
        <hash alg="SHA-512">27bbf17b8fc1bf5b56e8463f1a2a23846296074a6fb963ef029eac1b6d632ad48065e583bb925b4ae744c86ba11dc83f433224c7e785fcb56d324da12d8ab0bd</hash>
        <hash alg="SHA-384">67cc4e0494f7f580adcc7a8d8e247ec0d6c2c678fdad9f9bdd64955a12517af05146f05310fddad7a77d5a06453a2482</hash>
        <hash alg="SHA3-384">eb05416de4059ad2c577afa807872ad4cacffd61d6379c8b0c873b5f2952df6ceadbc0229a53a4c3a4094863aa15c616</hash>
        <hash alg="SHA3-256">a91b595364611f8bda0f1d34b44fbeb955d70c11bba788d731681c323e8310ab</hash>
        <hash alg="SHA3-512">616ecbea3b4aba2369ab2517ed86af2b89cc437598cdc6f03f56261e497f4db6e8ea2e5758c15708028adfd899f568c00974ecb5de8be8707ed1e844440ec633</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.kerby/kerby-config@1.0.1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://directory.apache.org/kerby/kerby-common/kerby-config</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/directory-kerby/kerby-common/kerby-config</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.kerby/kerb-core@1.0.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.kerby</group>
      <name>kerb-core</name>
      <version>1.0.1</version>
      <description>Kerby-kerb core facilities</description>
      <hashes>
        <hash alg="MD5">545c60f29fc4d57a1e50e3be72c88fe0</hash>
        <hash alg="SHA-1">82357e97a5c1b505beb0f6c227d9f39b2d7fdde0</hash>
        <hash alg="SHA-256">4db26bc4a106603044d8883f7280abc803b055b36f5c510a3fffc41e5de4c651</hash>
        <hash alg="SHA-512">76d63f27c1446c7e3394b7778f8839f19d86755b6aff2941526276bfa06b89c32c3dca1698b964cdc24a8b217a4ac4125a32f6aa051fce1183c37a3ac323fcd3</hash>
        <hash alg="SHA-384">85c6dc3fe4c582e5fdd3e084be158c67f31e93836ed7167205069f369884b1427fafef519182d0565bf92544aeabe626</hash>
        <hash alg="SHA3-384">87c952c555981cccd0523354d79dc072bd279eb1e276fcd94155f8fc72b982890c64cc7daff0f3d3b23a4abe0039c3aa</hash>
        <hash alg="SHA3-256">9287aea565531a53a6d4321c2a930ca6114277c09be70e01ca5e498edd7c24c9</hash>
        <hash alg="SHA3-512">7a53261c96600b7946fa3fc29f65566738cd4153b6fbe3c7551fef460d167c976174e3e2f8d2d4c6dd7be668804b84d09a916ec55165edce6a8389faa18e8b00</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.kerby/kerb-core@1.0.1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://directory.apache.org/kerby/kerby-kerb/kerb-core</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/directory-kerby/kerby-kerb/kerb-core</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.kerby/kerby-pkix@1.0.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.kerby</group>
      <name>kerby-pkix</name>
      <version>1.0.1</version>
      <description>Kerby PKIX Project</description>
      <hashes>
        <hash alg="MD5">4f99a872b054dead71460c3ed3bca6ac</hash>
        <hash alg="SHA-1">4c1fd1f78ba7c16cf6fcd663ddad7eed34b4d911</hash>
        <hash alg="SHA-256">0410bc1950b57f4792ea6b86df59a2ee87e4ad69b33a17ded438e6686894346a</hash>
        <hash alg="SHA-512">b54347dc0e3f56cf9a9068dc39c8838368067920291520ba4df59184faf3eee43898d6d0d50cbcfce3111bf2c3bd1a5cb31ef1bc2ac47f1bb1e216ae39444d2f</hash>
        <hash alg="SHA-384">9e66f1d910deb0eaa3dba289811423b23fdf2d362287b3dd3cad8a63737303ded842a2a7d67255900413b15ad82e2937</hash>
        <hash alg="SHA3-384">3a1c35a54c2419610a1ce91542e339f156497621c0b4ebeb2dcf63fb4ff2f5dd7545d88ae4a7de513fe5d6e226293bcc</hash>
        <hash alg="SHA3-256">8be36b331e2c1712ed835bc915edcc880d880951114c323b5d318408ce118b42</hash>
        <hash alg="SHA3-512">3366dbb93faa59ddc9c9dae72a05c8ad1a52a28cbfa7f42ddd6d243a2f6b5e2189d639f7507b26d955e37eeb9ea1feed769694a8b370dca995636995fe86c5ac</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.kerby/kerby-pkix@1.0.1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://directory.apache.org/kerby/kerby-pkix</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/directory-kerby/kerby-pkix</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.kerby/kerby-asn1@1.0.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.kerby</group>
      <name>kerby-asn1</name>
      <version>1.0.1</version>
      <description>Kerby ASN1 Project</description>
      <hashes>
        <hash alg="MD5">95c31186c0ec12b85bde99e286fe2f8c</hash>
        <hash alg="SHA-1">d54a9712c29c4e6d9d9ba483fad3d450be135fff</hash>
        <hash alg="SHA-256">010a3c33e5b652f11cb29a6e66826a24331e526cf58662dccb4d6695fc6ca59d</hash>
        <hash alg="SHA-512">db962f4aa3a8eb21c36badf1f268d1d68c2e95179f64f7d14fdaaa9b912af0edc989a58a79924c44a56f544b0b68df6de6d6e3bb4f8aa53aa37afc2767cb0684</hash>
        <hash alg="SHA-384">31997848a8dbae5fa350bcf6804603e4c24d3377d0d7ea2f8b07b250fc0cce9d8f7c7f5b7e08831b947e7e4a387c3d7a</hash>
        <hash alg="SHA3-384">65f9d92144d0995d68ab856c3098eeddaa9ee7eea7e753733f6ffa35a206795d6210e04900134e271be70016b2d92af0</hash>
        <hash alg="SHA3-256">46e0f7875638adf82fddcc92ec825c6bf252b11d4a2fcfe580ebed38e2f113fc</hash>
        <hash alg="SHA3-512">c81a17a79b83db92177df9fd2124acec97b8d838f3d146146ef1612d8797d2a4ee44a2b4284d8fa619d64799e064259c2828b37f1b20afb4282f2e475a8a4a4c</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.kerby/kerby-asn1@1.0.1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://directory.apache.org/kerby/kerby-common/kerby-asn1</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/directory-kerby/kerby-common/kerby-asn1</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.kerby/kerby-util@1.0.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.kerby</group>
      <name>kerby-util</name>
      <version>1.0.1</version>
      <description>Kerby common util, without any 3rd party dependency</description>
      <hashes>
        <hash alg="MD5">21974b90e4e4d096b526268712dfd4cb</hash>
        <hash alg="SHA-1">389b730dc4e454f70d72ec19ddac2528047f157e</hash>
        <hash alg="SHA-256">db7e2f329e160aaac305268ccb7287c16cf5542cffdd786a8592212df7c315aa</hash>
        <hash alg="SHA-512">30de762e56e57f3b3d54c71ce80046fbbeb67795b8d5cdc493ad239271f2cddc1a9c485d6b49d1b8b970af37bd45fc424adc85684540127a1b4d7da08f8a82b8</hash>
        <hash alg="SHA-384">95c1891ff1e817767106ac887357d20f37de0e905a4fd3aee8e726d38b842f95ed30988ab905dfcf194d727621c10eec</hash>
        <hash alg="SHA3-384">eb02124b464073942eb37e2661599c5f814ad0652f13395b39ef9d552f4ebd068f686e1cc617f02f4a0fdf4904e47a3a</hash>
        <hash alg="SHA3-256">83ecfb600dd3d0923f0229c2fc18a2deef12a5550ff961fc8bf149fc54f10524</hash>
        <hash alg="SHA3-512">7103c01f884bcbfb23f5c794007ad6f3b7f90e8a578e6545b178d6f787ece30ae98f605b5e5de6be78b5ccd3e9d421f1cfcc9b32a9242230a34a05425973bc11</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.kerby/kerby-util@1.0.1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://directory.apache.org/kerby/kerby-common/kerby-util</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/directory-kerby/kerby-common/kerby-util</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.kerby/kerb-common@1.0.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.kerby</group>
      <name>kerb-common</name>
      <version>1.0.1</version>
      <description>Kerby-kerb Common facilities for both client and server</description>
      <hashes>
        <hash alg="MD5">678e68224b54168f3106b5644ef6f45f</hash>
        <hash alg="SHA-1">e358016010b6355630e398db20d83925462fa4cd</hash>
        <hash alg="SHA-256">f62bb275781f8092bb6252e4ed201c9f5e4ab7a3d49b650ab58c87862b0bb2de</hash>
        <hash alg="SHA-512">e1a91d486633bb24c2f7021c21277cb5656aeb7b961fbbec733fe9e6d6c85aa915798b0d987f9efb2e633a0ff9d7bb772502b7918ef6c8304f0c20ef84873b5b</hash>
        <hash alg="SHA-384">6729901924d609d9b650a264aaee7ce6605719b01406fdc8943e13f9918c65881ce7bc7379a6b571903ccee9e6899f45</hash>
        <hash alg="SHA3-384">0df43c18fcfbf4ed5f52b848e891a287198e881e1debb3c6188aaf1d13466ba174a97cfa05de636d94527d618277df37</hash>
        <hash alg="SHA3-256">adb982ebfa46ea701f6dabebeae877028c8869c9874e7ae3e3b01a033a2fac39</hash>
        <hash alg="SHA3-512">1920d724f6aa018ce8901c24164ea1cd917c995299d9f1c0f15ee1700a973d892e02ee691097c28a7166bee17e51ad86e151becf227e36c06cf57790dc08b04a</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.kerby/kerb-common@1.0.1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://directory.apache.org/kerby/kerby-kerb/kerb-common</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/directory-kerby/kerby-kerb/kerb-common</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.kerby/kerb-crypto@1.0.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.kerby</group>
      <name>kerb-crypto</name>
      <version>1.0.1</version>
      <description>Kerby-kerb Crypto facility</description>
      <hashes>
        <hash alg="MD5">4a201fca38ffe52565f5816d7c708ccd</hash>
        <hash alg="SHA-1">66eab4bbf91fa01ed4f72ce771db28c59d35a843</hash>
        <hash alg="SHA-256">af94527564908b5a8ccfdfa8e67dd61c09e062459a0110d85115c42fc8f82b41</hash>
        <hash alg="SHA-512">e5d9dff3547fa2634b1704dcb2e294ef0a71f0b8f79f2e5e4e1c2a78f2f06d8e8c0aac2897c0751b972bc3c8c588512ed44fe145b7410e492f8ea2511bec9b31</hash>
        <hash alg="SHA-384">87e015986ad0c3ef473dfb9ab1e2ed2f21538741edcfe0459cfac22885610819fed9d34d9f4167cb96332d093f945635</hash>
        <hash alg="SHA3-384">be8f083717ba3c54b9a203411682034b00d38fd07280cbdf45e658a86da4a191c0c72dc30c2d215558c52166493b79d8</hash>
        <hash alg="SHA3-256">abedfca7869934feaa25910bb94a2b40002b191e1f84b4831eee41de1d2d8b22</hash>
        <hash alg="SHA3-512">929a330d44642157c0f52ebe82608280f28017e2ad7d80da9dfb8f8a67b6deddc50771228148936038e6a97ea7b4558d81cc0975c0ac092b82ea9cbdef95fa50</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.kerby/kerb-crypto@1.0.1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://directory.apache.org/kerby/kerby-kerb/kerb-crypto</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/directory-kerby/kerby-kerb/kerb-crypto</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.kerby/kerb-util@1.0.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.kerby</group>
      <name>kerb-util</name>
      <version>1.0.1</version>
      <description>Kerby-kerb Utilities</description>
      <hashes>
        <hash alg="MD5">424542890d4dc9f61b1754a12a1c7758</hash>
        <hash alg="SHA-1">93d37f677addd2450b199e8da8fcac243ceb8a88</hash>
        <hash alg="SHA-256">9cb1a2715a35cbabc9e8f1be3287bb086100763847e2f17577b72a025f8adaab</hash>
        <hash alg="SHA-512">dab63ef1be0a122b3bd8a1986741a64ebf7361dc01a1a3ef23764dfc89fce85a15c2cfe43e3502f37093d0e866011980378c09d5efb45d9754c4cd4e5b686ac3</hash>
        <hash alg="SHA-384">dbfe62c73760d41565ec429e3de8a87cb71a35df2bbd28d1007489cef60106942d8893c8c05bf20435e2b09f11bcdb75</hash>
        <hash alg="SHA3-384">1a3d6eeacd28579ab6b66a381c260dccbc447fb8a36c4d1608d070db9021aa242eac3c1cb76f19ffc100a9357d37305b</hash>
        <hash alg="SHA3-256">e980a457ddce54bf0de49ed57206ebf6df1fdce24770decb19674764459320ee</hash>
        <hash alg="SHA3-512">223365170ac6d73d09675225dfd717d96bfecb4fbdcfd60e13a919fab47ead017200a3970dc391c70b1ddd621b055b3a96c86dc6a68f61a05cea2b0d3743a8e1</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.kerby/kerb-util@1.0.1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://directory.apache.org/kerby/kerby-kerb/kerb-util</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/directory-kerby/kerby-kerb/kerb-util</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.kerby/token-provider@1.0.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.kerby</group>
      <name>token-provider</name>
      <version>1.0.1</version>
      <description>Token provider project</description>
      <hashes>
        <hash alg="MD5">c9ebfeba17a28a69f33acbb5b6e831c5</hash>
        <hash alg="SHA-1">e6feb6b7c06600924e8b6bda3263c870cfb0a447</hash>
        <hash alg="SHA-256">022c92d7438b60789bc212f53f1f33ced2656ba8bf073a1f587df51e083e368a</hash>
        <hash alg="SHA-512">90c882d018cbaa389c6cd971c7dfa052c584337151501465366ae61f10107bd3d4c7471b1168177b9458c78c33791757398e6e25d3c93bbc352377958bcd4511</hash>
        <hash alg="SHA-384">37662a93ecd4ca9b6ade6842a6533f2cf3386eb1c67e22f7080f9fb6f486649eedb11ca084172c19bc2fbd5e062014a5</hash>
        <hash alg="SHA3-384">3efdc52a41c81c0737c3096c6a52eb6afb8b5f87b0101e239f86c11b380ca5cd311bac9a0bccbcf0a52831b6323e0410</hash>
        <hash alg="SHA3-256">2e2dc46673177e6872ad3fb76dbe00393dc1d53a0bdd51633303758a225b3f26</hash>
        <hash alg="SHA3-512">f5a1343299f72034e4ca89f0657fddda7ec216a8901960dd82ace01817183ff2ae129dafbbe8889550638a2ce0676c43ad393320ed0db74d109a6f20cb1f47e3</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.kerby/token-provider@1.0.1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://directory.apache.org/kerby/kerby-provider/token-provider</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/directory-kerby/kerby-provider/token-provider</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.nimbusds/nimbus-jose-jwt@3.10?type=jar">
      <publisher>Connect2id Ltd.</publisher>
      <group>com.nimbusds</group>
      <name>nimbus-jose-jwt</name>
      <version>3.10</version>
      <description>Java library for Javascript Object Signing and Encryption (JOSE) and
        JSON Web Tokens (JWT)</description>
      <hashes>
        <hash alg="MD5">f1fe6c1a874533ffd7238007019990df</hash>
        <hash alg="SHA-1">4c52cc9191abde51bee465ce3acefcee8803a17f</hash>
        <hash alg="SHA-256">00d42506fd80569892ffacebe9657fd144476cc1ddfdc479bd408418188debae</hash>
        <hash alg="SHA-512">53ba3fa586957990236ee2229756cdd118be394bb4cc1529460158321c9cbdd76a7a72435242812f2db57445e93557cad1800018adb3a8ca15eae8f5f9ea5b17</hash>
        <hash alg="SHA-384">ddc887b613596173a9c0ba3cb09e1ccda16f7dcb7fae144e25f603d409325f84422e1ad44a101d389429478a1719572b</hash>
        <hash alg="SHA3-384">a37d4481bfc48e01e8362035ef87733652c64ea9d7121126b6dd58641c2f06372028c7d7a226a7ea177b84cb54c81b41</hash>
        <hash alg="SHA3-256">c5c8a6ef9e74b44f38d279ef7e08e22edaf5ada319417aecd1dbe882fa770043</hash>
        <hash alg="SHA3-512">ee8ed3a25a4461adbc8a1b32289e62ca7ca728a76e4bcac20d216b48d46c15f5cbb067d449d623c486940a0f4d5f84f0605f38ca5a23eacc4b31d9a9f11cd9ad</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.nimbusds/nimbus-jose-jwt@3.10?type=jar</purl>
      <externalReferences><reference type="website"><url>https://bitbucket.org/connect2id/nimbus-jose-jwt</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://bitbucket.org/connect2id/nimbus-jose-jwt</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/net.jcip/jcip-annotations@1.0?type=jar">
      <group>net.jcip</group>
      <name>jcip-annotations</name>
      <version>1.0</version>
      <hashes>
        <hash alg="MD5">9d5272954896c5a5d234f66b7372b17a</hash>
        <hash alg="SHA-1">afba4942caaeaf46aab0b976afd57cc7c181467e</hash>
        <hash alg="SHA-256">be5805392060c71474bf6c9a67a099471274d30b83eef84bfc4e0889a4f1dcc0</hash>
        <hash alg="SHA-512">cb312b3f571d91ef183c119d878f50464ffd97f853b7311cba386463f295e8b7b3a5a89ed4269a045cacd5aa7cb4c803d4882854a0fddefa9bbc28c72aa6c786</hash>
        <hash alg="SHA-384">20d12f4a68736b8df736b1de233baff5d8ac5d71b92a1ca10dc1eb61293ef88bd3cb434ab71e9027a6d303849e098f28</hash>
        <hash alg="SHA3-384">c8f2559f90cec25fae5d438059f6100294091315524e253cca0b1586497e4162b5c324ae25f5c4c0a91186092decf7cd</hash>
        <hash alg="SHA3-256">35970ea56e67fde943436fa5efd9f49e89c85dc863fe9ff868965d51e9be44c9</hash>
        <hash alg="SHA3-512">5e970df829d8f13436fe8a7b64bb0cbe4733e69789132ba60782a76d9377da3f5b044e9f47d731d8c5692548845e4d27bd1f8dedecf62357065324ce7f93c3a8</hash>
      </hashes>
      <licenses/>
      <purl>pkg:maven/net.jcip/jcip-annotations@1.0?type=jar</purl>
      <externalReferences><reference type="website"><url>http://jcip.net/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/net.minidev/json-smart@1.3.1?type=jar">
      <publisher>Chemouni Uriel</publisher>
      <group>net.minidev</group>
      <name>json-smart</name>
      <version>1.3.1</version>
      <description>JSON (JavaScript Object Notation) is a lightweight data-interchange format.
    It is easy for humans to read and write. It is easy for machines to parse and generate.
    It is based on a subset of the JavaScript Programming Language, Standard ECMA-262 3rd Edition
    - December 1999. JSON is a text format that is completely language independent but uses
    conventions that are familiar to programmers of the C-family of languages, including C, C++, C#,
    Java, JavaScript, Perl, Python, and many others.
    These properties make JSON an ideal data-interchange language.</description>
      <hashes>
        <hash alg="MD5">b4f09b247c03cc2d091502d5b1db1f7f</hash>
        <hash alg="SHA-1">69b3835e96d282ec85fc2e1517b8164c45ed639e</hash>
        <hash alg="SHA-256">ac3689112788e042088755e63ecd1f689adfeb04d7fb1cfd244513f94f82522c</hash>
        <hash alg="SHA-512">92fd0d0d276a1cd619857fb79aec20606bbc19405b5a7bfb6e4b968f877573184bec04bb4b28f1ffae7a3eaaf072f944338bbc1a795d62853b9eb0899f94edc6</hash>
        <hash alg="SHA-384">2f495d95c9b97a1e0cfef7ab90a9f29bb69f22232c1083250e414e0785265227febcee2fcae19ee1ee03ef5dc5fea634</hash>
        <hash alg="SHA3-384">25f3e2698dfdbb9f9727ab45e827b3a8b9cbbb1742c0af377335a39b25b6b89c45593d984ae81653b07952867263c32e</hash>
        <hash alg="SHA3-256">f2097c31a5796c4da739498aac1f23d4e7a2beed81a0478996687f3698f6887d</hash>
        <hash alg="SHA3-512">460154ecef1e86bbc5961236878e59a478e50aef42a81501fca644a1ca1bd6436d630c4e86573cc6d40f44146cf4378aacd2d209edca2be0af07fb3c500616f5</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/net.minidev/json-smart@1.3.1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://json-smart/</url></reference><reference type="distribution"><url>http://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/netplex/json-smart</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.bouncycastle/bcprov-jdk15on@1.52?type=jar">
      <group>org.bouncycastle</group>
      <name>bcprov-jdk15on</name>
      <version>1.52</version>
      <description>The Bouncy Castle Crypto package is a Java implementation of cryptographic algorithms. This jar contains JCE provider and lightweight API for the Bouncy Castle Cryptography APIs for JDK 1.5 to JDK 1.8.</description>
      <hashes>
        <hash alg="MD5">873ac611cb0d7160c0a3d30eee964454</hash>
        <hash alg="SHA-1">88a941faf9819d371e3174b5ed56a3f3f7d73269</hash>
        <hash alg="SHA-256">0dc4d181e4d347893c2ddbd2e6cd5d7287fc651c03648fa64b2341c7366b1773</hash>
        <hash alg="SHA-512">0869118e0cd93c3a36265334663ed8e9f892dd212dcddc63664f34e1fed822b5b2096ff7bb8eea3f98d4ec4d026536c794485df62715f13e8de8d892347dcc73</hash>
        <hash alg="SHA-384">691469807f7acd91f5e06139bbdc5aaa88496eafc124425fd2f86bfdeeeb1242b5fa2acc0274e0089d3ca3662613dc35</hash>
        <hash alg="SHA3-384">90e627e11073ff5da1782657f12fccc5aa1c28a30ec6991d18e9525cac69b71ef6a8df3c5ccf1fbf939d77868c9ca78c</hash>
        <hash alg="SHA3-256">28553e2419eef6e59368cf5ee1942a15e809f0ba76c8b9625e56e75153d3c246</hash>
        <hash alg="SHA3-512">f00bbd8adaf704ac9877451a4251ef763753619860591de7e487d7cfa41ad8dfb7699b5c3a3faea4e0fd6260dcb1c57a02c066fd0a255054dad3e494e068aaba</hash>
      </hashes>
      <licenses>
        <license>
          <name>Bouncy Castle Licence</name>
          <url>http://www.bouncycastle.org/licence.html</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.bouncycastle/bcprov-jdk15on@1.52?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.bouncycastle.org/java.html</url></reference><reference type="issue-tracker"><url>http://www.bouncycastle.org/jira/secure/Dashboard.jspa</url></reference><reference type="vcs"><url>https://github.com/bcgit/bc-java</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.kerby/kerb-admin@1.0.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.kerby</group>
      <name>kerb-admin</name>
      <version>1.0.1</version>
      <description>Kerby-kerb Admin facilities</description>
      <hashes>
        <hash alg="MD5">a673628234b00564b9d3254990348a85</hash>
        <hash alg="SHA-1">7868b29620b92aa1040fe20d21ba09f2506207aa</hash>
        <hash alg="SHA-256">27b012f556b02bdf4ecd0742a7ecdd725a562e95a194e3413662fe2e781ff889</hash>
        <hash alg="SHA-512">899bad1f5478c2687844190626ae71c8526d9918d2daf66d32594107219f1aac18d883fb95797180c770d4245be02e1e52c1dbf0052dd5bfb534a23b37c68333</hash>
        <hash alg="SHA-384">acfa9138d33cd22f60f662df93f27d4a6816db814e3d1325ab61da6fbfce175bec3241a246a5f89290d5231253962134</hash>
        <hash alg="SHA3-384">a1bad1a78cd122e5fa3a311f316556cf166316888a76fe270432309395cb8087ca11d7c9c05a2513c97af363201b97ee</hash>
        <hash alg="SHA3-256">8bc8762d39257cab3df4e5589397bcf058b95ad8c3808d5dc3558b8f713b4b03</hash>
        <hash alg="SHA3-512">02b652658f36e62413fb28c93191983f022b5851699f6408ec896ec2a66512a0a150fab724f88e60c9d7a7f70ec61c7c03df7be6e57e71b9f8fdf0c3c4919a1f</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.kerby/kerb-admin@1.0.1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://directory.apache.org/kerby/kerby-kerb/kerb-admin</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/directory-kerby/kerby-kerb/kerb-admin</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.kerby/kerb-server@1.0.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.kerby</group>
      <name>kerb-server</name>
      <version>1.0.1</version>
      <description>Kerby-kerb Server</description>
      <hashes>
        <hash alg="MD5">0c067e61bd55c894a2ed67d25c75b323</hash>
        <hash alg="SHA-1">c56ffb4a6541864daf9868895b79c0c33427fd8c</hash>
        <hash alg="SHA-256">dff4eebc6cadaa8bdc1084fc1d4c20fda954aed74913845e79c89572768e463f</hash>
        <hash alg="SHA-512">a3c1feb689f1ca216afee0f79ce4173f3d8d4d1dd7a4c591788d1f7228d582affff3e9340fa8d163d8fbcb8551f8d8768142d3e8ec1bf27475b5ae0aed390130</hash>
        <hash alg="SHA-384">0e38a7b58679f4027faab0b5b32d7b2b993986c4344472eb1de70158793727d108ad289ac8faeaa199107476e8076499</hash>
        <hash alg="SHA3-384">b37a07dd624887918d6da326bc865d5c28caf7201ca5c35e2c4b1d1ac5244f6ded6119e32adcb78c6eda326c8f4e8122</hash>
        <hash alg="SHA3-256">33c23af2999f6d40213bc9bf242180308c74d6f45bad0a97dcbf56d17fe8b9d7</hash>
        <hash alg="SHA3-512">522c138baecc6d68df6afbdc8ef1774c6853fb029e4864e8b9cd4c618103714b37886ddaa88f1a764f3304e625df0b3d759a3a505fd52423f548e824550b585f</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.kerby/kerb-server@1.0.1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://directory.apache.org/kerby/kerby-kerb/kerb-server</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/directory-kerby/kerby-kerb/kerb-server</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.kerby/kerb-identity@1.0.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.kerby</group>
      <name>kerb-identity</name>
      <version>1.0.1</version>
      <description>Kerby-kerb Identity</description>
      <hashes>
        <hash alg="MD5">b25172596ffaa92105bae3d5f54639ff</hash>
        <hash alg="SHA-1">eb91bc9b9ff26bfcca077cf1a888fb09e8ce72be</hash>
        <hash alg="SHA-256">35fd995cc7a0c71f86adaf716dee34f6e4d1e473eff452a74f4430bd196e6424</hash>
        <hash alg="SHA-512">a6d15629c637e7e66772bd5d1430ffe8a435261e50eb534c7a133a063292455ff4d237f09570defbddee6bca04a446e7ce30774ca8f32d540e6a2a19af2b92d3</hash>
        <hash alg="SHA-384">27beb9db175a5f8b114aff2a2bc4112bce7725a81522f8e1ed603d589e513cebc8fbdd932c29282607b5948e4eb6965c</hash>
        <hash alg="SHA3-384">b4604a02d635f27ffd134e92370f0b11328402e0a3132ba6845ba7d1cc178edecd8939fd1c71d7ff71f009c6c8d0692e</hash>
        <hash alg="SHA3-256">442539810b6066b12b3ae45397700eb34198e095ebfe7719a08ad9353ff274dd</hash>
        <hash alg="SHA3-512">d38b57eacbad2123d0667d9b464f34c0d68533e0ea6aefaee296ebee8b5c89b824c7f8e58de95bf77e01d7ff32fbeb566f5a9602906f77adb33cb4420b9b4458</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.kerby/kerb-identity@1.0.1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://directory.apache.org/kerby/kerby-kerb/kerb-identity</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/directory-kerby/kerby-kerb/kerb-identity</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.kerby/kerby-xdr@1.0.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.kerby</group>
      <name>kerby-xdr</name>
      <version>1.0.1</version>
      <description>Kerby XDR Project</description>
      <hashes>
        <hash alg="MD5">052ad9372894a4f0ef0f7792dd7daa9a</hash>
        <hash alg="SHA-1">7d1b5b69a5ea87fb2f62498710d9d788d17beb2b</hash>
        <hash alg="SHA-256">c24e2d9fbaef40a0a61ee36c19e41db5141bfbe7a2669be0227dee86ccca6d6f</hash>
        <hash alg="SHA-512">39cd6ac81c96839c28502ddd46efe32a0a74891ac497a61a7889a4bfef67c70806010402585b557a6617c522bf176cdb6021dc6bec80ad82fbeca3237f7c302d</hash>
        <hash alg="SHA-384">18ea9b65062387f526d7fd3af30c865f8686c2d8978147e6e3dcd11ae3eb609c3838d0e231ef3847062f6e804011616e</hash>
        <hash alg="SHA3-384">b08175b819e4829d99102b99a274bd785741870530041f5b7eec769855c2b4b46002e1cc6ab557a5c9a76dc507dbac63</hash>
        <hash alg="SHA3-256">edac6cf5fc5b0432b7f13ad9f7a511bd84114379bd80d81c9ee94ca2b803eb08</hash>
        <hash alg="SHA3-512">79eaa7c3543ffbf40a013300f5d8629ecd45e64fe9a03efe328223d431968703b492ab6bf4892b0cd2625f0c280894bd1fca7df279bb7d0b33121406887dcc88</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.kerby/kerby-xdr@1.0.1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://directory.apache.org/kerby/kerby-common/kerby-xdr</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/directory-kerby/kerby-common/kerby-xdr</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/junit/junit@4.13.2?type=jar">
      <publisher>JUnit</publisher>
      <group>junit</group>
      <name>junit</name>
      <version>4.13.2</version>
      <description>JUnit is a unit testing framework for Java, created by Erich Gamma and Kent Beck.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">d98a9a02a99a9acd22d7653cbcc1f31f</hash>
        <hash alg="SHA-1">8ac9e16d933b6fb43bc7f576336b8f4d7eb5ba12</hash>
        <hash alg="SHA-256">8e495b634469d64fb8acfa3495a065cbacc8a0fff55ce1e31007be4c16dc57d3</hash>
        <hash alg="SHA-512">a31b9950f929a7e5a600d89787ef40e42a8a8e2392e210d0c0f45b3572937670a18a524f1815508cd1152cd1eaa7275cb7430ba45c053be365c83c231bccd3f0</hash>
        <hash alg="SHA-384">9f85c56a77c699eb87630b9e8224068a34c296bcd9aadb52248dd4665036f5bf1048fe75e5cb590b59e7855ca716acae</hash>
        <hash alg="SHA3-384">590cfd9396424583879ca8ad732870406bab18325ac72fb2bbe188b9611278d6341700badf7cfc32525b8ff42900c905</hash>
        <hash alg="SHA3-256">a06b3fd2fd1d9f4306b58125484e3605a395afe5ffe2c801e43ae462f366a430</hash>
        <hash alg="SHA3-512">a6d25ce3c14f9065f06dfd0e68e1dad5c03bd5de0a302c44ca4733d2cb87ec1bc6f0abd36d65aeee8caf328b6881432c4b682fa4b4b1fa931c3c950de5129fb2</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-1.0</id>
          <url>http://www.eclipse.org/legal/epl-v10.html</url>
        </license>
      </licenses>
      <purl>pkg:maven/junit/junit@4.13.2?type=jar</purl>
      <externalReferences><reference type="website"><url>http://junit.org</url></reference><reference type="build-system"><url>https://github.com/junit-team/junit4/actions</url></reference><reference type="distribution"><url>https://github.com/junit-team/junit4/wiki/Download-and-Install</url></reference><reference type="issue-tracker"><url>https://github.com/junit-team/junit4/issues</url></reference><reference type="vcs"><url>https://github.com/junit-team/junit4</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.hamcrest/hamcrest-core@1.3?type=jar">
      <group>org.hamcrest</group>
      <name>hamcrest-core</name>
      <version>1.3</version>
      <description>This is the core API of hamcrest matcher framework to be used by third-party framework providers. This includes the a foundation set of matcher implementations for common operations.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">6393363b47ddcbba82321110c3e07519</hash>
        <hash alg="SHA-1">42a25dc3219429f0e5d060061f71acb49bf010a0</hash>
        <hash alg="SHA-256">66fdef91e9739348df7a096aa384a5685f4e875584cce89386a7a47251c4d8e9</hash>
        <hash alg="SHA-512">e237ae735aac4fa5a7253ec693191f42ef7ddce384c11d29fbf605981c0be077d086757409acad53cb5b9e53d86a07cc428d459ff0f5b00d32a8cbbca390be49</hash>
        <hash alg="SHA-384">4b5297d2a12cc32b824153afc83f1ba9f1869ca288330f0a2f759659d09e4c420eb6ba4a1efbfa0657b625edd41293d5</hash>
        <hash alg="SHA3-384">b14d34985c0a78cf0ba19b5a18bffd403e08adcb2afde228ddef6e16121c7046dbebf58c04d3419311c4496c48aa93be</hash>
        <hash alg="SHA3-256">f679af77deedf69b3c3066f7916583848c6fd32a950f9c0b0e2ef1da121717ba</hash>
        <hash alg="SHA3-512">bca821931e438a1977b7b4356b5f8cebf485634f82159d505c48267c34e6a0f4fde9c2917331365f66dc0e52e2ca3a2db5256863584110c27ecebefc28741f63</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.hamcrest/hamcrest-core@1.3?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/hamcrest/JavaHamcrest/hamcrest-core</url></reference><reference type="vcs"><url>https://github.com/hamcrest/JavaHamcrest/hamcrest-core</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.confluent.flink/flink-streaming-java@1.18.1-cp3?classifier=tests&amp;type=test-jar">
      <group>io.confluent.flink</group>
      <name>flink-streaming-java</name>
      <version>1.18.1-cp3</version>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">d687a553667100b92cef43d454ad75a9</hash>
        <hash alg="SHA-1">5375c64e073d7de0b1ab274c278b6e01e5015961</hash>
        <hash alg="SHA-256">75d1a5a0e0d1d830bce8e9a867fdd68a293fb622fa349543609ac34feefc0155</hash>
        <hash alg="SHA-512">88bbe920d94ad6c0b0572404e25a67ce1e8d3dd95947dc408b543672724495b87783ca0c58b6c4ea0b349c50945c6bcc396901323eedb653a3d0a0ca1514aec0</hash>
        <hash alg="SHA-384">d0ca4ed1cc0afdbdc9517687179396f94b245505c89253f09889ce0628cb2827d083f8e60fd8a1914089c6c7206557d7</hash>
        <hash alg="SHA3-384">f655a9c99f1898de885126da4f65f623b051b835f01ad50ee265aea069e4ca4952c38dee87460e697f1f623094a8448e</hash>
        <hash alg="SHA3-256">836c7e1ce6b9527e75637687321aabdf091da52a80e64bc70aa841e21aff006f</hash>
        <hash alg="SHA3-512">39f64542c87385b49223325c2f9cf104ef12449a7a6d98e9bb07e8eabaa8e3f0163e22a3e538cb030099343bbab62a935fd4f64d2b394c115f76caee0cdebbbc</hash>
      </hashes>
      <purl>pkg:maven/io.confluent.flink/flink-streaming-java@1.18.1-cp3?classifier=tests&amp;type=test-jar</purl>
    </component>
    <component type="library" bom-ref="pkg:maven/io.confluent.flink/flink-statebackend-rocksdb@1.18.1-cp3?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>io.confluent.flink</group>
      <name>flink-statebackend-rocksdb</name>
      <version>1.18.1-cp3</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">ee8fd5c76c4dd6a2bcb6b007d33f05f3</hash>
        <hash alg="SHA-1">fd04d99d957dce00aa802aafb59b4a5205e81c02</hash>
        <hash alg="SHA-256">86d7c04b027e6299affdbe879d917f75e6d78bd601d26b1c16bba5b83e2b38aa</hash>
        <hash alg="SHA-512">e3fda8c2cacb8bf2aa13ffb182dcb06db21ee057257b3db9734e1f24e2e3bb68aa6ede1bc4fca028b328aaddefe9042482d50a803ab9b9331646703632d1efc6</hash>
        <hash alg="SHA-384">563f582d3dda9b9ffeb16c9fea334a45e292044fa7dffa526af2665f2dda9db2cff0159fe4757cc260d82893dbd2cfa0</hash>
        <hash alg="SHA3-384">b62f16f0a9ca283677a097cd18b3e6898c76d86917328a2595c749defd35a8db36040082cc5ddcdf0eddf438852766e6</hash>
        <hash alg="SHA3-256">00c799b0f20b6257a9faac4a118349ce00e0c9dc9caeae72fd9496fdc1e582b8</hash>
        <hash alg="SHA3-512">0f75c17c2397b66fa1563a67301f5a8329a05823a8f065d8b21f14a5ad4e214f0a3feeeddd1ce17fbaa1c33392fadd85871b745c966a6f92a4cada981f7934ae</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.confluent.flink/flink-statebackend-rocksdb@1.18.1-cp3?type=jar</purl>
      <externalReferences><reference type="website"><url>https://flink.apache.org/flink-state-backends/flink-statebackend-rocksdb</url></reference><reference type="distribution"><url>s3://cp-flink-staging-654654529379-us-west-2/maven-staging/28052f298c23e610e04213241ad3fdf6a8dfa940</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink/flink-state-backends/flink-statebackend-rocksdb</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.ververica/frocksdbjni@6.20.3-ververica-2.0?type=jar">
      <publisher>Facebook</publisher>
      <group>com.ververica</group>
      <name>frocksdbjni</name>
      <version>6.20.3-ververica-2.0</version>
      <description>RocksDB fat jar with modifications specific for Apache Flink that contains .so files for linux32 and linux64 (glibc and musl-libc), jnilib files
        for Mac OSX, and a .dll for Windows x64.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">b312842e5ae7b60da4fa742214600fa6</hash>
        <hash alg="SHA-1">2847dfbbd8debea1bd0303a24408dba9fbe6afe8</hash>
        <hash alg="SHA-256">5e6e5063b75196a17fbeaf656f088a807f83177525d9ecbec7125b9f3630b966</hash>
        <hash alg="SHA-512">5df61a2acb0ab3ddb3cefd8efd12a53e61ab7349b1addfc8ae424eb94611da2b44b58705b43fd9f9a1d6a3092df40c32001dba37eaa58c59d663c1ff4330b8f3</hash>
        <hash alg="SHA-384">06e11032b60444d685d175e19364c6f7dacacc2aa7999d1bf3c89e6bffbb627833e030dcd7978d6d50378d08d9772a81</hash>
        <hash alg="SHA3-384">9363f90b3922947c09be9fb98b3e2fb8f5190b9dbc803ecf1c7816f26ad1d818127edd8761d95bc1bec58879077d6a50</hash>
        <hash alg="SHA3-256">81cd77f6fff3debf62a6f6a7d523e1c26c0c2c05938f6aaca17b555d74f878c8</hash>
        <hash alg="SHA3-512">02f51f2052afca0fcd6b944dfce56fc5542ffa6a0be1db6e7a344b30b97dc59d2a6f312413e04172387b0583f11f621c4610211c0a78766c25ebe3525919c240</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/com.ververica/frocksdbjni@6.20.3-ververica-2.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://rocksdb.org</url></reference><reference type="mailing-list"><url>https://groups.google.com/forum/#!forum/rocksdb</url></reference><reference type="vcs"><url>scm:git:https://github.com/ververica/frocksdb.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.confluent.flink/flink-statebackend-changelog@1.18.1-cp3?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>io.confluent.flink</group>
      <name>flink-statebackend-changelog</name>
      <version>1.18.1-cp3</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">7f568a67574bc14d6097887c7ae61389</hash>
        <hash alg="SHA-1">3baf21c414bca4c7c1a2dfcda97748c085a6d7d2</hash>
        <hash alg="SHA-256">e5ed7d79a9775957d841fb5ce0ec045ef6915f52a6fcfc3a0de01bd2fd7432c0</hash>
        <hash alg="SHA-512">aeb9874e2baf19a25d01a608e16ebe30397df8e0f6c17d14ef641897be2ef5036f83f1124470f18c4fd857654762d52162cfb3b417f498563f9a96cd93c0ef2a</hash>
        <hash alg="SHA-384">546fa04e1828adfc6ea660ec6e9c3995d4748e69892b976de3b12d68f7caa60b700d46c9ae25700f4d4564033940b6b1</hash>
        <hash alg="SHA3-384">1eb3d2163639a1a227c65dd80755102c8dfc3f33a8fb02b2e94bc7bb8cb730bad3eea183d1926b853f7a89610609b7c4</hash>
        <hash alg="SHA3-256">fe82b47fc33ea5062c3972a87309cbbd1fc0bc4da4fedfa1f55364cba4c16e52</hash>
        <hash alg="SHA3-512">c6a402d3aa38a8787b9a87f12560129dbc659d78febb85bf50e255a619a720b52acdabaa7bd10fc8151b3ba023be0e9ae1065d69d66ce06e5c893cdd3b402354</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.confluent.flink/flink-statebackend-changelog@1.18.1-cp3?type=jar</purl>
      <externalReferences><reference type="website"><url>https://flink.apache.org/flink-state-backends/flink-statebackend-changelog</url></reference><reference type="distribution"><url>s3://cp-flink-staging-654654529379-us-west-2/maven-staging/28052f298c23e610e04213241ad3fdf6a8dfa940</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink/flink-state-backends/flink-statebackend-changelog</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.confluent.flink/flink-statebackend-common@1.18.1-cp3?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>io.confluent.flink</group>
      <name>flink-statebackend-common</name>
      <version>1.18.1-cp3</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <hashes>
        <hash alg="MD5">db0618e7c266ef804ff4812f180c0eec</hash>
        <hash alg="SHA-1">e9629ecebaa9d6d4f855b6cd78ef16e5771aec06</hash>
        <hash alg="SHA-256">e9b19985ee79a3115a837bc04388991a1fe1a9499d55dabc2a6b836185e2a588</hash>
        <hash alg="SHA-512">5d738b36b55a652839fa1e81a4f7975446e62df3eef7274ce6b36d74beb561da96708f87d073884c0beb4bcc330579fef6bac322e275d140a8e52a1d151f15d4</hash>
        <hash alg="SHA-384">15796b2a10c2344b2cab5679d9549939e3bec8e78311e121ad95e15b5285fbeacdbb4cd62f52711dbb14cb445c2311ff</hash>
        <hash alg="SHA3-384">6fd4743d577baf99652b55f7a1212e391060719e8da694a9835d8b8b248025a01e288ee596f10516f70627013ab723e4</hash>
        <hash alg="SHA3-256">ae55a9d9a59039b8659ed92345310bc8c30dddb7e08919f960a500b418c8014d</hash>
        <hash alg="SHA3-512">5883f55787c09b4c8e2d65c2cfb03898dc0b335d47ac749030ed29c8eeb78f8e15c23e78e6673db26980a43777968a8e71ab7d311cc456bade8377d8e1fa6740</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.confluent.flink/flink-statebackend-common@1.18.1-cp3?type=jar</purl>
      <externalReferences><reference type="website"><url>https://flink.apache.org/flink-state-backends/flink-statebackend-common</url></reference><reference type="distribution"><url>s3://cp-flink-staging-654654529379-us-west-2/maven-staging/28052f298c23e610e04213241ad3fdf6a8dfa940</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink/flink-state-backends/flink-statebackend-common</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.confluent.flink/flink-dstl-dfs@1.18.1-cp3?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>io.confluent.flink</group>
      <name>flink-dstl-dfs</name>
      <version>1.18.1-cp3</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">44626efffe37a14b8e2028994dcf8d8e</hash>
        <hash alg="SHA-1">963f49ec20036855f5579b8959480d8ea1e48e6a</hash>
        <hash alg="SHA-256">0273243d76b1f8927e5406643bf1edec086e26e2b12ef9eb813f2dfb2e66bf73</hash>
        <hash alg="SHA-512">450e6149c695f80bdea7dc8906c86145022d25dfd63739562cd37cc341957c2324659be5461ee7d507252ca433cdba897e82069297f64449bcc24b247b1e290f</hash>
        <hash alg="SHA-384">8dc89854894f0a4d67029ad1780923d1e48ab1b688294b6708745592dc8501cb07b726678497ee27b3f49663b03cbc42</hash>
        <hash alg="SHA3-384">2d103959a5a9425c3172a0535315677b8092084f62df78d8d4d6a61a456e1b0959aae6f6fdb5e20d9e8748e28c0e55c2</hash>
        <hash alg="SHA3-256">f5d20bcbce78e602fe5fa6533ba6bcd59afd332611e854ee804e58dff5373296</hash>
        <hash alg="SHA3-512">bec6e1f461a28f17d7306a375662ffbe7eb7272f33b60652aa5a8f1a7c5836fdab203a075ca3cace3e3aea8ffbafc6a2f7d60aecc392857da906b3d12ca87425</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.confluent.flink/flink-dstl-dfs@1.18.1-cp3?type=jar</purl>
      <externalReferences><reference type="website"><url>https://flink.apache.org/flink-dstl/flink-dstl-dfs</url></reference><reference type="distribution"><url>s3://cp-flink-staging-654654529379-us-west-2/maven-staging/28052f298c23e610e04213241ad3fdf6a8dfa940</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink/flink-dstl/flink-dstl-dfs</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-shaded-force-shading@17.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-shaded-force-shading</name>
      <version>17.0</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">6890ff555c82f3bb156cf9c73bf09cf9</hash>
        <hash alg="SHA-1">345c153973a17fb8a98d368352e14893edcbd610</hash>
        <hash alg="SHA-256">dcc7dff160a40b74fa5db2805b2004153ffd0517968f3c7843a8ee43be82e710</hash>
        <hash alg="SHA-512">9de23513832248618b78e279c0e3900f5cafb7193254ef6818b4f0b6f3b70045dd9cc4fdd13caeeca8b70a44f38201ce055f07248cdf08930a20e1b7a73997ff</hash>
        <hash alg="SHA-384">063611872b4b1a1718e0472e32198bded0d74fa656e5c47a7b20038cd5ff70106e3109b60fe882880feea486e1ef83bf</hash>
        <hash alg="SHA3-384">26f9225d2c401391133dabc97340d1048504deaaae3c6b02ba20b83d4efe8c53a6d4f4e63a04e4317f9bce6b1a1ee013</hash>
        <hash alg="SHA3-256">aae3e6da763019cc2fd4919df572a3653b46aedaf60a3adb3d28bc7f94023523</hash>
        <hash alg="SHA3-512">e616e089fb70dc79503b6c235bd8d14c6e7c8e608c87bb4fcd02fe86d6ba27985bac4f144843af9fc7a7c495de7057320ccddea9f571c42bdcaa1c73966f265f</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-shaded-force-shading@17.0?type=jar</purl>
      <externalReferences><reference type="website"><url>http://flink.apache.org/flink-shaded-force-shading</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink-shaded/flink-shaded-force-shading</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar">
      <publisher>QOS.ch</publisher>
      <group>org.slf4j</group>
      <name>slf4j-api</name>
      <version>1.7.36</version>
      <description>The slf4j API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">872da51f5de7f3923da4de871d57fd85</hash>
        <hash alg="SHA-1">6c62681a2f655b49963a5983b8b0950a6120ae14</hash>
        <hash alg="SHA-256">d3ef575e3e4979678dc01bf1dcce51021493b4d11fb7f1be8ad982877c16a1c0</hash>
        <hash alg="SHA-512">f9b033fc019a44f98b16048da7e2b59edd4a6a527ba60e358f65ab88e0afae03a9340f1b3e8a543d49fa542290f499c5594259affa1ff3e6e7bf3b428d4c610b</hash>
        <hash alg="SHA-384">2b14ad035877087157e379d3277dcdcd79e58d6bdb147c47d29e377d75ce53ad42cafbf22f5fb7827c7e946ff4876b9a</hash>
        <hash alg="SHA3-384">3bc3110dafb8d5be16a39f3b2671a466463cd99eb39610c0e4719a7bf2d928f2ea213c734887c6926a07c4cca7769e4b</hash>
        <hash alg="SHA3-256">ba2608179fcf46e2291a90b9cbb4aa30d718e481f59c350cc21c73b88d826881</hash>
        <hash alg="SHA3-512">14c4edcd19702ef607d78826839d8a6d3a39157df54b89a801d3d3cbbe1307131a77671b041c761122730fb1387888c5ec2e46bdd80e1cb07f8f144676441824</hash>
      </hashes>
      <licenses>
        <license>
          <id>MIT</id>
          <url>https://opensource.org/licenses/MIT</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.slf4j.org</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/qos-ch/slf4j/slf4j-api</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar">
      <group>com.google.code.findbugs</group>
      <name>jsr305</name>
      <version>1.3.9</version>
      <description>JSR305 Annotations for Findbugs</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">1d5a772e400b04bb67a7ef4a0e0996d8</hash>
        <hash alg="SHA-1">40719ea6961c0cb6afaeb6a921eaa1f6afd4cfdf</hash>
        <hash alg="SHA-256">905721a0eea90a81534abb7ee6ef4ea2e5e645fa1def0a5cd88402df1b46c9ed</hash>
        <hash alg="SHA-512">06da282cfd8e30d9f8cf17702b8709172b00e22b75a627a1d85f8989615b8a1a401bc25d9aee7b14aed1d9b5df73bf2ea8d66f9c8468d9577c29f0ccfa2cc70a</hash>
        <hash alg="SHA-384">56e6b41ef62eb5edfed0203802cefae9c2df86388148e420bb0c687abb2b80e14d5c2a82d5b35dce4badaf148f94eada</hash>
        <hash alg="SHA3-384">58c3bf89fa1afa75c2c5078159fd28e27b2273d437f26aaaa7391310b6f0823f3cf476a24f5631c0881f3f7e946d99be</hash>
        <hash alg="SHA3-256">c333ea5faedfa78e0614a2620438d5724eab093df4e960918391b6a44c2915b0</hash>
        <hash alg="SHA3-512">67ec31448e156cc72dd036060b460bb2667a13b1cbe500b6b7eed3235b1994b44c39f440ebd07b21ec9595b166ad61121d4f6a132b5b313c558ab21b72599425</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar</purl>
      <externalReferences><reference type="website"><url>http://findbugs.sourceforge.net/</url></reference><reference type="vcs"><url>http://findbugs.googlecode.com/svn/trunk/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.junit.vintage/junit-vintage-engine@5.9.1?type=jar">
      <group>org.junit.vintage</group>
      <name>junit-vintage-engine</name>
      <version>5.9.1</version>
      <description>Module "junit-vintage-engine" of JUnit 5.</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">067bf6cefc410143924bdcd88762d101</hash>
        <hash alg="SHA-1">4c97e4ce083cb5fc5ff59f66d62896b30da0853b</hash>
        <hash alg="SHA-256">b97de493877c9ba5e4f03b44bd348a53e5fc9df2df5b1a048923e0204f7d7178</hash>
        <hash alg="SHA-512">fc9e7ef80d426cab1397372ebeab739dad3c2fbac4c98f71027007c3ac730a664e3e63a8aa1087d26787014aaa5e26af95520d09603104be2982be807e101312</hash>
        <hash alg="SHA-384">1af2b96c99063e949fc7ad7249538e02149cb072105dd0513c4947ec048b801638f3e5b51adf144a455d630052566537</hash>
        <hash alg="SHA3-384">58fff20fa04007ea535e12d7a39f2c1cdab30c0709365f3087e47ddc364d90578c349276479ff4aee235f2949b00b3e5</hash>
        <hash alg="SHA3-256">5341dd1e9cc0371c671ce4f7c21b2077573ea99a93411a29ee5d9066cc26db20</hash>
        <hash alg="SHA3-512">75cfde203376df05065cb1d405d7b04a7eaa62943217cc32d846a57e7715a7918717ac7f236a00a14792dd8554244fb299e2915bb9a423256dbe036df5e3e656</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.junit.vintage/junit-vintage-engine@5.9.1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://junit.org/junit5/</url></reference><reference type="vcs"><url>https://github.com/junit-team/junit5</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.junit.platform/junit-platform-engine@1.9.1?type=jar">
      <group>org.junit.platform</group>
      <name>junit-platform-engine</name>
      <version>1.9.1</version>
      <description>Module "junit-platform-engine" of JUnit 5.</description>
      <hashes>
        <hash alg="MD5">e5be12dda4695a67bd5768fc396bbe25</hash>
        <hash alg="SHA-1">83591e5089d6cea5f324aa3ecca9b19d5a275803</hash>
        <hash alg="SHA-256">f59c3a67087f2b9bbb17a9c06dd416697989b2c53b38843874ebbbbcb0afc23f</hash>
        <hash alg="SHA-512">94bd8ab00658b25335d0eb8134de587438a3cb5171fcad648f15d4f1d5a03e87b09187b97acfd7f6a18bc55237b5a3183a1eeca3b605c94cccb0c763aa93d739</hash>
        <hash alg="SHA-384">b56f50d18587ca719db02be06b3993e7ceac6cd3ebeab015a94702f1f46f6d119cdbeffbf0f4b4dd9bc026afc1ec9753</hash>
        <hash alg="SHA3-384">71737df6eeecb61c398ad19c6a321fba6ec1016d2636fc7d04c706ef7a93dd1961074dbf5ac149fcdd542a9f1e1445f2</hash>
        <hash alg="SHA3-256">355f0aa536d49564cd295e700a6aa892c197794f310b7e06c0ddeb24ef4b82d2</hash>
        <hash alg="SHA3-512">fd67706e46ee16dfe950aae20dc97127af19164c73f40938c18253a1ed553db30af03aab782d3e5c1e8ce88a7c5084507ed21c305eb53e931de9f5ebe3ad8f3e</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.junit.platform/junit-platform-engine@1.9.1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://junit.org/junit5/</url></reference><reference type="vcs"><url>https://github.com/junit-team/junit5</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apiguardian/apiguardian-api@1.1.2?type=jar">
      <group>org.apiguardian</group>
      <name>apiguardian-api</name>
      <version>1.1.2</version>
      <description>@API Guardian</description>
      <hashes>
        <hash alg="MD5">8c7de3f82037fa4a2e8be2a2f13092af</hash>
        <hash alg="SHA-1">a231e0d844d2721b0fa1b238006d15c6ded6842a</hash>
        <hash alg="SHA-256">b509448ac506d607319f182537f0b35d71007582ec741832a1f111e5b5b70b38</hash>
        <hash alg="SHA-512">d7ccd0e7019f1a997de39d66dc0ad4efe150428fdd7f4c743c93884f1602a3e90135ad34baea96d5b6d925ad6c0c8487c8e78304f0a089a12383d4a62e2c9a61</hash>
        <hash alg="SHA-384">5ae11cfedcee7da43a506a67946ddc8a7a2622284a924ba78f74541e9a22db6868a15f5d84edb91a541e38afded734ea</hash>
        <hash alg="SHA3-384">c146116b3dfd969200b2ce52d96b92dd02d6f5a45a86e7e85edf35600ddbc2f3c6e8a1ad7e2db4dcd2c398c09fad0927</hash>
        <hash alg="SHA3-256">b4b436d7f615fc0b820204e69f83c517d1c1ccc5f6b99e459209ede4482268de</hash>
        <hash alg="SHA3-512">7b95b7ac68a6891b8901b5507acd2c24a0c1e20effa63cd513764f513eab4eb55f8de5178edbe0a400c11f3a18d3f56243569d6d663100f06dd98288504c09c5</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apiguardian/apiguardian-api@1.1.2?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/apiguardian-team/apiguardian</url></reference><reference type="vcs"><url>https://github.com/apiguardian-team/apiguardian</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.objenesis/objenesis@2.1?type=jar">
      <publisher>Joe Walnes, Henri Tremblay, Leonardo Mesquita</publisher>
      <group>org.objenesis</group>
      <name>objenesis</name>
      <version>2.1</version>
      <description>A library for instantiating Java objects</description>
      <hashes>
        <hash alg="MD5">32ccb1d20a42b5aaaceb90c9082a2efa</hash>
        <hash alg="SHA-1">87c0ea803b69252868d09308b4618f766f135a96</hash>
        <hash alg="SHA-256">c74330cc6b806c804fd37e74487b4fe5d7c2750c5e15fbc6efa13bdee1bdef80</hash>
        <hash alg="SHA-512">1dec9ee30812b8006e536a2749c5781ccdc4b446539efb6fa534f22e70562033876bf2eb22c6946d617695729bd65f0f65b984f15f05ac63db5bed215e74427c</hash>
        <hash alg="SHA-384">657b8a3b80a5475f198425396f7264301f9e0f3ad5dc336ef0c7b46874f5544861a8a2fd48cdb5f672e199a6935c19d1</hash>
        <hash alg="SHA3-384">e526937d722aad1857869b2d2a0ba5c88815609308c00b776b51614e501de5d93d54978f5bb9cf496bdcc28b1dbd5775</hash>
        <hash alg="SHA3-256">436cfbb9c208dd03c951708fa4ba6525e2a0b26a873d594a6fbe93ab49082c97</hash>
        <hash alg="SHA3-512">1e7ee9411df7cfbf0669c38e4ef029155dd718b91db1d182841c740caf8c1057ed273a77f8e32d724c48aaf96815a26ab099c776511ffc5ef351d70ebfa70344</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.objenesis/objenesis@2.1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://objenesis.org</url></reference><reference type="distribution"><url>http://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/easymock/easymock/objenesis</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.logging.log4j/log4j-slf4j-impl@2.17.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.logging.log4j</group>
      <name>log4j-slf4j-impl</name>
      <version>2.17.1</version>
      <description>The Apache Log4j SLF4J API binding to Log4j 2 Core</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">8d0e5934a9c341dbc3493d4039afd985</hash>
        <hash alg="SHA-1">84692d456bcce689355d33d68167875e486954dd</hash>
        <hash alg="SHA-256">e9a03720e5d5076009c2530635da9d08485e28a0b0ec20708dadc51afb78e41e</hash>
        <hash alg="SHA-512">3559e139a0c6d47fa0af233ac079fbde2227d701a846d6e6f7463129f7237e587bc3c337aebe5e4088f633ea83d1456dbc5b1999d1d485da67bfe2d5c12cde21</hash>
        <hash alg="SHA-384">ba0f5d2de2c0a7f816cb7ef98e9449e4a975ba5e34f1634e8eae6f84855df84ae6b2baf0c4762636fe5c337d6c561ef9</hash>
        <hash alg="SHA3-384">5aad3fca6b7600c428992b117e96e772c747927f71cbb4ba90ea8922266e64963584676d7a2ffcc9d293fbe8edf4dcd6</hash>
        <hash alg="SHA3-256">b077fe134c26804f8eafda8a0bb91703a54e499ec96859220cddfff8e561dd06</hash>
        <hash alg="SHA3-512">b5b10d7d8f416c3fa70146ceab14513a002f723e83f3418f39e1b67bf394faeeed10262743f6c1cc5ea26c29162b1445283523c0133be2374c62a7066c4cd916</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.logging.log4j/log4j-slf4j-impl@2.17.1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://logging.apache.org/log4j/2.x/log4j-slf4j-impl/</url></reference><reference type="build-system"><url>https://ci-builds.apache.org/job/Logging/job/log4j/</url></reference><reference type="distribution"><url>https://logging.apache.org/log4j/2.x/download.html</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/LOG4J2</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?log4j-user@logging.apache.org</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=logging-log4j2.git/log4j-slf4j-impl</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.logging.log4j/log4j-api@2.17.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.logging.log4j</group>
      <name>log4j-api</name>
      <version>2.17.1</version>
      <description>The Apache Log4j API</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">dfd5f2d81aba31583ee87fe16c7b78f8</hash>
        <hash alg="SHA-1">d771af8e336e372fb5399c99edabe0919aeaf5b2</hash>
        <hash alg="SHA-256">b0d8a4c8ab4fb8b1888d0095822703b0e6d4793c419550203da9e69196161de4</hash>
        <hash alg="SHA-512">48a58c2f317d451ac1622bdfbfa5d3cd9de45d40d5d5df98f39fe6d53c74da56e200f8e3d19a309d4e1ea364369379c0ef9d79b928fc20ea743857f347259c03</hash>
        <hash alg="SHA-384">3686abf7edebe4bd29bdae0495a6b881d38cfe7a870350d1f1b43056f51c25cd39a5fccb74a28abf62069862dd25e416</hash>
        <hash alg="SHA3-384">34ded426dd53323c7588f09cb17afc37798d090914608c4a8e88ff3cdcf872a6dccf042423a6bf2d92e9ab35252de92b</hash>
        <hash alg="SHA3-256">5b1dce647c9dfb24ced20d78c87c213d96d697ed17c1db97e538071c0c06702d</hash>
        <hash alg="SHA3-512">2e9070e21fd4b9b9aaa7794dea2da75144dd116fbc9f24935d57b32306c1901f815dbaa1fd9c76712990481ac399ccb51bb27e9ee3a3a27b42bcfbc2d68f371d</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.logging.log4j/log4j-api@2.17.1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://logging.apache.org/log4j/2.x/log4j-api/</url></reference><reference type="build-system"><url>https://ci-builds.apache.org/job/Logging/job/log4j/</url></reference><reference type="distribution"><url>https://logging.apache.org/log4j/2.x/download.html</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/LOG4J2</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?log4j-user@logging.apache.org</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=logging-log4j2.git/log4j-api</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.logging.log4j/log4j-core@2.17.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.logging.log4j</group>
      <name>log4j-core</name>
      <version>2.17.1</version>
      <description>The Apache Log4j Implementation</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">8d2f5c52700336dae846b2c3ecde7a6e</hash>
        <hash alg="SHA-1">779f60f3844dadc3ef597976fcb1e5127b1f343d</hash>
        <hash alg="SHA-256">c967f223487980b9364e94a7c7f9a8a01fd3ee7c19bdbf0b0f9f8cb8511f3d41</hash>
        <hash alg="SHA-512">8d3d6a17afc41cde43b19c9a696793d009d9271bc6430762f10157018453f8a53cde6e6aa4f3f0b703eaf1f2944d047398d29b470924ecc3290d1923b0e29750</hash>
        <hash alg="SHA-384">28500f2bb8fa430788eb526d8197671b9bcb49cc8a04fac22b12ae0c46bfefd682f1ce363cb237e41ae87185635e8ff3</hash>
        <hash alg="SHA3-384">5814742e87b0ba1308c883194b5cc16a57c2003aaac774e0c0b09d829231b9844dd16591af3711024cad90043ebecbf6</hash>
        <hash alg="SHA3-256">4cd95a3c8d119b4033f263c00ec414c7f3c8ccee68d013bdfae161d33872677f</hash>
        <hash alg="SHA3-512">c9b7e15624039cc442ab92e0eccf1ce2c2020f636d39d49da9a33fa95997db89c991c57f087bc1321980c319b894a07d631bd6d7c10c611a9cfb29ee5550003f</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.logging.log4j/log4j-core@2.17.1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://logging.apache.org/log4j/2.x/log4j-core/</url></reference><reference type="build-system"><url>https://ci-builds.apache.org/job/Logging/job/log4j/</url></reference><reference type="distribution"><url>https://logging.apache.org/log4j/2.x/download.html</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/LOG4J2</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?log4j-user@logging.apache.org</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=logging-log4j2.git/log4j-core</url></reference></externalReferences>
    </component>
  </components>
  <dependencies>
    <dependency ref="pkg:maven/io.confluent.flink/flink-test-utils@1.18.1-cp3?type=jar">
      <dependency ref="pkg:maven/io.confluent.flink/flink-table-common@1.18.1-cp3?type=jar"/>
      <dependency ref="pkg:maven/io.confluent.flink/flink-test-utils-junit@1.18.1-cp3?type=jar"/>
      <dependency ref="pkg:maven/io.confluent.flink/flink-runtime@1.18.1-cp3?type=jar"/>
      <dependency ref="pkg:maven/io.confluent.flink/flink-runtime@1.18.1-cp3?classifier=tests&amp;type=test-jar"/>
      <dependency ref="pkg:maven/io.confluent.flink/flink-core@1.18.1-cp3?classifier=tests&amp;type=test-jar"/>
      <dependency ref="pkg:maven/io.confluent.flink/flink-rpc-akka-loader@1.18.1-cp3?classifier=tests&amp;type=test-jar"/>
      <dependency ref="pkg:maven/io.confluent.flink/flink-clients@1.18.1-cp3?type=jar"/>
      <dependency ref="pkg:maven/io.confluent.flink/flink-streaming-java@1.18.1-cp3?type=jar"/>
      <dependency ref="pkg:maven/org.junit.jupiter/junit-jupiter@5.9.1?type=jar"/>
      <dependency ref="pkg:maven/org.assertj/assertj-core@3.23.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.hadoop/hadoop-minikdc@3.2.4?type=jar"/>
      <dependency ref="pkg:maven/io.confluent.flink/flink-streaming-java@1.18.1-cp3?classifier=tests&amp;type=test-jar"/>
      <dependency ref="pkg:maven/io.confluent.flink/flink-statebackend-rocksdb@1.18.1-cp3?type=jar"/>
      <dependency ref="pkg:maven/io.confluent.flink/flink-statebackend-changelog@1.18.1-cp3?type=jar"/>
      <dependency ref="pkg:maven/io.confluent.flink/flink-dstl-dfs@1.18.1-cp3?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-force-shading@17.0?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/io.confluent.flink/flink-table-common@1.18.1-cp3?type=jar">
      <dependency ref="pkg:maven/io.confluent.flink/flink-core@1.18.1-cp3?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-asm-9@9.5-17.0?type=jar"/>
      <dependency ref="pkg:maven/com.ibm.icu/icu4j@67.1?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/io.confluent.flink/flink-core@1.18.1-cp3?type=jar">
      <dependency ref="pkg:maven/io.confluent.flink/flink-annotations@1.18.1-cp3?type=jar"/>
      <dependency ref="pkg:maven/io.confluent.flink/flink-metrics-core@1.18.1-cp3?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-asm-9@9.5-17.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-jackson@2.14.2-17.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar"/>
      <dependency ref="pkg:maven/com.esotericsoftware.kryo/kryo@2.24.0?type=jar"/>
      <dependency ref="pkg:maven/commons-collections/commons-collections@3.2.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-compress@1.21?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-guava@31.1-jre-17.0?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/io.confluent.flink/flink-annotations@1.18.1-cp3?type=jar">
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"/>
    <dependency ref="pkg:maven/io.confluent.flink/flink-metrics-core@1.18.1-cp3?type=jar">
      <dependency ref="pkg:maven/io.confluent.flink/flink-annotations@1.18.1-cp3?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.flink/flink-shaded-asm-9@9.5-17.0?type=jar"/>
    <dependency ref="pkg:maven/org.apache.flink/flink-shaded-jackson@2.14.2-17.0?type=jar"/>
    <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar"/>
    <dependency ref="pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar">
      <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.esotericsoftware.kryo/kryo@2.24.0?type=jar">
      <dependency ref="pkg:maven/com.esotericsoftware.minlog/minlog@1.2?type=jar"/>
      <dependency ref="pkg:maven/org.objenesis/objenesis@2.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.esotericsoftware.minlog/minlog@1.2?type=jar"/>
    <dependency ref="pkg:maven/org.objenesis/objenesis@2.1?type=jar"/>
    <dependency ref="pkg:maven/commons-collections/commons-collections@3.2.2?type=jar"/>
    <dependency ref="pkg:maven/org.apache.commons/commons-compress@1.21?type=jar"/>
    <dependency ref="pkg:maven/org.apache.flink/flink-shaded-guava@31.1-jre-17.0?type=jar"/>
    <dependency ref="pkg:maven/com.ibm.icu/icu4j@67.1?type=jar"/>
    <dependency ref="pkg:maven/io.confluent.flink/flink-test-utils-junit@1.18.1-cp3?type=jar">
      <dependency ref="pkg:maven/org.junit.jupiter/junit-jupiter@5.9.1?type=jar"/>
      <dependency ref="pkg:maven/org.junit.vintage/junit-vintage-engine@5.9.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-slf4j-impl@2.17.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-api@2.17.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-core@2.17.1?type=jar"/>
      <dependency ref="pkg:maven/org.testcontainers/testcontainers@1.18.3?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.junit.jupiter/junit-jupiter@5.9.1?type=jar">
      <dependency ref="pkg:maven/org.junit.jupiter/junit-jupiter-api@5.9.1?type=jar"/>
      <dependency ref="pkg:maven/org.junit.jupiter/junit-jupiter-params@5.9.1?type=jar"/>
      <dependency ref="pkg:maven/org.junit.jupiter/junit-jupiter-engine@5.9.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.junit.jupiter/junit-jupiter-api@5.9.1?type=jar">
      <dependency ref="pkg:maven/org.opentest4j/opentest4j@1.2.0?type=jar"/>
      <dependency ref="pkg:maven/org.junit.platform/junit-platform-commons@1.9.1?type=jar"/>
      <dependency ref="pkg:maven/org.apiguardian/apiguardian-api@1.1.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.opentest4j/opentest4j@1.2.0?type=jar"/>
    <dependency ref="pkg:maven/org.junit.platform/junit-platform-commons@1.9.1?type=jar">
      <dependency ref="pkg:maven/org.apiguardian/apiguardian-api@1.1.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apiguardian/apiguardian-api@1.1.2?type=jar"/>
    <dependency ref="pkg:maven/org.junit.jupiter/junit-jupiter-params@5.9.1?type=jar">
      <dependency ref="pkg:maven/org.junit.jupiter/junit-jupiter-api@5.9.1?type=jar"/>
      <dependency ref="pkg:maven/org.apiguardian/apiguardian-api@1.1.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.junit.jupiter/junit-jupiter-engine@5.9.1?type=jar">
      <dependency ref="pkg:maven/org.junit.platform/junit-platform-engine@1.9.1?type=jar"/>
      <dependency ref="pkg:maven/org.junit.jupiter/junit-jupiter-api@5.9.1?type=jar"/>
      <dependency ref="pkg:maven/org.apiguardian/apiguardian-api@1.1.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.junit.platform/junit-platform-engine@1.9.1?type=jar">
      <dependency ref="pkg:maven/org.opentest4j/opentest4j@1.2.0?type=jar"/>
      <dependency ref="pkg:maven/org.junit.platform/junit-platform-commons@1.9.1?type=jar"/>
      <dependency ref="pkg:maven/org.apiguardian/apiguardian-api@1.1.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.junit.vintage/junit-vintage-engine@5.9.1?type=jar">
      <dependency ref="pkg:maven/org.junit.platform/junit-platform-engine@1.9.1?type=jar"/>
      <dependency ref="pkg:maven/junit/junit@4.13.2?type=jar"/>
      <dependency ref="pkg:maven/org.apiguardian/apiguardian-api@1.1.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/junit/junit@4.13.2?type=jar">
      <dependency ref="pkg:maven/org.hamcrest/hamcrest-core@1.3?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.hamcrest/hamcrest-core@1.3?type=jar"/>
    <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-slf4j-impl@2.17.1?type=jar">
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-api@2.17.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-core@2.17.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-api@2.17.1?type=jar"/>
    <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-core@2.17.1?type=jar">
      <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-api@2.17.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.testcontainers/testcontainers@1.18.3?type=jar">
      <dependency ref="pkg:maven/junit/junit@4.13.2?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-compress@1.21?type=jar"/>
      <dependency ref="pkg:maven/org.rnorth.duct-tape/duct-tape@1.0.8?type=jar"/>
      <dependency ref="pkg:maven/com.github.docker-java/docker-java-api@3.3.0?type=jar"/>
      <dependency ref="pkg:maven/com.github.docker-java/docker-java-transport-zerodep@3.3.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.rnorth.duct-tape/duct-tape@1.0.8?type=jar">
      <dependency ref="pkg:maven/org.jetbrains/annotations@17.0.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.jetbrains/annotations@17.0.0?type=jar"/>
    <dependency ref="pkg:maven/com.github.docker-java/docker-java-api@3.3.0?type=jar">
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.14.3?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.14.3?type=jar"/>
    <dependency ref="pkg:maven/com.github.docker-java/docker-java-transport-zerodep@3.3.0?type=jar">
      <dependency ref="pkg:maven/com.github.docker-java/docker-java-transport@3.3.0?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/net.java.dev.jna/jna@5.12.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.github.docker-java/docker-java-transport@3.3.0?type=jar"/>
    <dependency ref="pkg:maven/net.java.dev.jna/jna@5.12.1?type=jar"/>
    <dependency ref="pkg:maven/io.confluent.flink/flink-runtime@1.18.1-cp3?type=jar">
      <dependency ref="pkg:maven/io.confluent.flink/flink-core@1.18.1-cp3?type=jar"/>
      <dependency ref="pkg:maven/io.confluent.flink/flink-rpc-core@1.18.1-cp3?type=jar"/>
      <dependency ref="pkg:maven/io.confluent.flink/flink-rpc-akka-loader@1.18.1-cp3?type=jar"/>
      <dependency ref="pkg:maven/io.confluent.flink/flink-java@1.18.1-cp3?type=jar"/>
      <dependency ref="pkg:maven/io.confluent.flink/flink-queryable-state-client-java@1.18.1-cp3?type=jar"/>
      <dependency ref="pkg:maven/io.confluent.flink/flink-hadoop-fs@1.18.1-cp3?type=jar"/>
      <dependency ref="pkg:maven/commons-io/commons-io@2.11.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-netty@4.1.91.Final-17.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-guava@31.1-jre-17.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-jackson@2.14.2-17.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-zookeeper-3@3.7.1-17.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar"/>
      <dependency ref="pkg:maven/commons-cli/commons-cli@1.5.0?type=jar"/>
      <dependency ref="pkg:maven/org.javassist/javassist@3.24.0-GA?type=jar"/>
      <dependency ref="pkg:maven/org.xerial.snappy/snappy-java@1.1.10.4?type=jar"/>
      <dependency ref="pkg:maven/org.lz4/lz4-java@1.8.0?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/io.confluent.flink/flink-rpc-core@1.18.1-cp3?type=jar">
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/io.confluent.flink/flink-rpc-akka-loader@1.18.1-cp3?type=jar">
      <dependency ref="pkg:maven/io.confluent.flink/flink-core@1.18.1-cp3?type=jar"/>
      <dependency ref="pkg:maven/io.confluent.flink/flink-rpc-core@1.18.1-cp3?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/io.confluent.flink/flink-java@1.18.1-cp3?type=jar">
      <dependency ref="pkg:maven/io.confluent.flink/flink-core@1.18.1-cp3?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-math3@3.6.1?type=jar"/>
      <dependency ref="pkg:maven/com.twitter/chill-java@0.7.6?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.commons/commons-math3@3.6.1?type=jar"/>
    <dependency ref="pkg:maven/com.twitter/chill-java@0.7.6?type=jar">
      <dependency ref="pkg:maven/com.esotericsoftware.kryo/kryo@2.24.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/io.confluent.flink/flink-queryable-state-client-java@1.18.1-cp3?type=jar">
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-netty@4.1.91.Final-17.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-guava@31.1-jre-17.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.flink/flink-shaded-netty@4.1.91.Final-17.0?type=jar"/>
    <dependency ref="pkg:maven/io.confluent.flink/flink-hadoop-fs@1.18.1-cp3?type=jar">
      <dependency ref="pkg:maven/io.confluent.flink/flink-core@1.18.1-cp3?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/commons-io/commons-io@2.11.0?type=jar"/>
    <dependency ref="pkg:maven/org.apache.flink/flink-shaded-zookeeper-3@3.7.1-17.0?type=jar"/>
    <dependency ref="pkg:maven/commons-cli/commons-cli@1.5.0?type=jar"/>
    <dependency ref="pkg:maven/org.javassist/javassist@3.24.0-GA?type=jar"/>
    <dependency ref="pkg:maven/org.xerial.snappy/snappy-java@1.1.10.4?type=jar"/>
    <dependency ref="pkg:maven/org.lz4/lz4-java@1.8.0?type=jar"/>
    <dependency ref="pkg:maven/io.confluent.flink/flink-runtime@1.18.1-cp3?classifier=tests&amp;type=test-jar">
      <dependency ref="pkg:maven/io.confluent.flink/flink-core@1.18.1-cp3?type=jar"/>
      <dependency ref="pkg:maven/io.confluent.flink/flink-rpc-core@1.18.1-cp3?type=jar"/>
      <dependency ref="pkg:maven/io.confluent.flink/flink-rpc-akka-loader@1.18.1-cp3?type=jar"/>
      <dependency ref="pkg:maven/io.confluent.flink/flink-java@1.18.1-cp3?type=jar"/>
      <dependency ref="pkg:maven/io.confluent.flink/flink-queryable-state-client-java@1.18.1-cp3?type=jar"/>
      <dependency ref="pkg:maven/io.confluent.flink/flink-hadoop-fs@1.18.1-cp3?type=jar"/>
      <dependency ref="pkg:maven/commons-io/commons-io@2.11.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-netty@4.1.91.Final-17.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-guava@31.1-jre-17.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-jackson@2.14.2-17.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-zookeeper-3@3.7.1-17.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar"/>
      <dependency ref="pkg:maven/commons-cli/commons-cli@1.5.0?type=jar"/>
      <dependency ref="pkg:maven/org.javassist/javassist@3.24.0-GA?type=jar"/>
      <dependency ref="pkg:maven/org.xerial.snappy/snappy-java@1.1.10.4?type=jar"/>
      <dependency ref="pkg:maven/org.lz4/lz4-java@1.8.0?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/io.confluent.flink/flink-core@1.18.1-cp3?classifier=tests&amp;type=test-jar">
      <dependency ref="pkg:maven/io.confluent.flink/flink-annotations@1.18.1-cp3?type=jar"/>
      <dependency ref="pkg:maven/io.confluent.flink/flink-metrics-core@1.18.1-cp3?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-asm-9@9.5-17.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-jackson@2.14.2-17.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar"/>
      <dependency ref="pkg:maven/com.esotericsoftware.kryo/kryo@2.24.0?type=jar"/>
      <dependency ref="pkg:maven/commons-collections/commons-collections@3.2.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-compress@1.21?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-guava@31.1-jre-17.0?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/io.confluent.flink/flink-rpc-akka-loader@1.18.1-cp3?classifier=tests&amp;type=test-jar">
      <dependency ref="pkg:maven/io.confluent.flink/flink-core@1.18.1-cp3?type=jar"/>
      <dependency ref="pkg:maven/io.confluent.flink/flink-rpc-core@1.18.1-cp3?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/io.confluent.flink/flink-clients@1.18.1-cp3?type=jar">
      <dependency ref="pkg:maven/io.confluent.flink/flink-core@1.18.1-cp3?type=jar"/>
      <dependency ref="pkg:maven/io.confluent.flink/flink-runtime@1.18.1-cp3?type=jar"/>
      <dependency ref="pkg:maven/io.confluent.flink/flink-optimizer@1.18.1-cp3?type=jar"/>
      <dependency ref="pkg:maven/io.confluent.flink/flink-java@1.18.1-cp3?type=jar"/>
      <dependency ref="pkg:maven/commons-cli/commons-cli@1.5.0?type=jar"/>
      <dependency ref="pkg:maven/io.confluent.flink/flink-streaming-java@1.18.1-cp3?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/io.confluent.flink/flink-optimizer@1.18.1-cp3?type=jar">
      <dependency ref="pkg:maven/io.confluent.flink/flink-core@1.18.1-cp3?type=jar"/>
      <dependency ref="pkg:maven/io.confluent.flink/flink-runtime@1.18.1-cp3?type=jar"/>
      <dependency ref="pkg:maven/io.confluent.flink/flink-java@1.18.1-cp3?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-guava@31.1-jre-17.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-jackson@2.14.2-17.0?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/io.confluent.flink/flink-streaming-java@1.18.1-cp3?type=jar">
      <dependency ref="pkg:maven/io.confluent.flink/flink-core@1.18.1-cp3?type=jar"/>
      <dependency ref="pkg:maven/io.confluent.flink/flink-file-sink-common@1.18.1-cp3?type=jar"/>
      <dependency ref="pkg:maven/io.confluent.flink/flink-runtime@1.18.1-cp3?type=jar"/>
      <dependency ref="pkg:maven/io.confluent.flink/flink-java@1.18.1-cp3?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-guava@31.1-jre-17.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-math3@3.6.1?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/io.confluent.flink/flink-file-sink-common@1.18.1-cp3?type=jar"/>
    <dependency ref="pkg:maven/org.assertj/assertj-core@3.23.1?type=jar">
      <dependency ref="pkg:maven/net.bytebuddy/byte-buddy@1.14.4?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/net.bytebuddy/byte-buddy@1.14.4?type=jar"/>
    <dependency ref="pkg:maven/org.apache.hadoop/hadoop-minikdc@3.2.4?type=jar">
      <dependency ref="pkg:maven/commons-io/commons-io@2.11.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.kerby/kerb-simplekdc@1.0.1?type=jar"/>
      <dependency ref="pkg:maven/junit/junit@4.13.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.kerby/kerb-simplekdc@1.0.1?type=jar">
      <dependency ref="pkg:maven/org.apache.kerby/kerb-client@1.0.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.kerby/kerb-admin@1.0.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.kerby/kerb-client@1.0.1?type=jar">
      <dependency ref="pkg:maven/org.apache.kerby/kerby-config@1.0.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.kerby/kerb-core@1.0.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.kerby/kerb-common@1.0.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.kerby/kerb-util@1.0.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.kerby/token-provider@1.0.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.kerby/kerby-config@1.0.1?type=jar">
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.kerby/kerb-core@1.0.1?type=jar">
      <dependency ref="pkg:maven/org.apache.kerby/kerby-pkix@1.0.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.kerby/kerby-pkix@1.0.1?type=jar">
      <dependency ref="pkg:maven/org.apache.kerby/kerby-asn1@1.0.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.kerby/kerby-util@1.0.1?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.kerby/kerby-asn1@1.0.1?type=jar"/>
    <dependency ref="pkg:maven/org.apache.kerby/kerby-util@1.0.1?type=jar"/>
    <dependency ref="pkg:maven/org.apache.kerby/kerb-common@1.0.1?type=jar">
      <dependency ref="pkg:maven/org.apache.kerby/kerby-config@1.0.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.kerby/kerb-crypto@1.0.1?type=jar"/>
      <dependency ref="pkg:maven/commons-io/commons-io@2.11.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.kerby/kerb-crypto@1.0.1?type=jar">
      <dependency ref="pkg:maven/org.apache.kerby/kerby-util@1.0.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.kerby/kerb-core@1.0.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.kerby/kerb-util@1.0.1?type=jar">
      <dependency ref="pkg:maven/org.apache.kerby/kerby-config@1.0.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.kerby/kerb-core@1.0.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.kerby/kerb-crypto@1.0.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.kerby/token-provider@1.0.1?type=jar">
      <dependency ref="pkg:maven/org.apache.kerby/kerb-core@1.0.1?type=jar"/>
      <dependency ref="pkg:maven/com.nimbusds/nimbus-jose-jwt@3.10?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.nimbusds/nimbus-jose-jwt@3.10?type=jar">
      <dependency ref="pkg:maven/net.jcip/jcip-annotations@1.0?type=jar"/>
      <dependency ref="pkg:maven/net.minidev/json-smart@1.3.1?type=jar"/>
      <dependency ref="pkg:maven/org.bouncycastle/bcprov-jdk15on@1.52?type=jar"/>
      <dependency ref="pkg:maven/commons-io/commons-io@2.11.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/net.jcip/jcip-annotations@1.0?type=jar"/>
    <dependency ref="pkg:maven/net.minidev/json-smart@1.3.1?type=jar"/>
    <dependency ref="pkg:maven/org.bouncycastle/bcprov-jdk15on@1.52?type=jar"/>
    <dependency ref="pkg:maven/org.apache.kerby/kerb-admin@1.0.1?type=jar">
      <dependency ref="pkg:maven/org.apache.kerby/kerb-server@1.0.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.kerby/kerb-util@1.0.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.kerby/kerby-xdr@1.0.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.kerby/kerb-server@1.0.1?type=jar">
      <dependency ref="pkg:maven/org.apache.kerby/kerb-common@1.0.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.kerby/kerb-identity@1.0.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.kerby/kerb-identity@1.0.1?type=jar">
      <dependency ref="pkg:maven/org.apache.kerby/kerby-config@1.0.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.kerby/kerb-core@1.0.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.kerby/kerby-xdr@1.0.1?type=jar"/>
    <dependency ref="pkg:maven/io.confluent.flink/flink-streaming-java@1.18.1-cp3?classifier=tests&amp;type=test-jar">
      <dependency ref="pkg:maven/io.confluent.flink/flink-core@1.18.1-cp3?type=jar"/>
      <dependency ref="pkg:maven/io.confluent.flink/flink-file-sink-common@1.18.1-cp3?type=jar"/>
      <dependency ref="pkg:maven/io.confluent.flink/flink-runtime@1.18.1-cp3?type=jar"/>
      <dependency ref="pkg:maven/io.confluent.flink/flink-java@1.18.1-cp3?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-guava@31.1-jre-17.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-math3@3.6.1?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/io.confluent.flink/flink-statebackend-rocksdb@1.18.1-cp3?type=jar">
      <dependency ref="pkg:maven/com.ververica/frocksdbjni@6.20.3-ververica-2.0?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.ververica/frocksdbjni@6.20.3-ververica-2.0?type=jar"/>
    <dependency ref="pkg:maven/io.confluent.flink/flink-statebackend-changelog@1.18.1-cp3?type=jar">
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-guava@31.1-jre-17.0?type=jar"/>
      <dependency ref="pkg:maven/io.confluent.flink/flink-statebackend-common@1.18.1-cp3?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/io.confluent.flink/flink-statebackend-common@1.18.1-cp3?type=jar">
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-guava@31.1-jre-17.0?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/io.confluent.flink/flink-dstl-dfs@1.18.1-cp3?type=jar">
      <dependency ref="pkg:maven/io.confluent.flink/flink-core@1.18.1-cp3?type=jar"/>
      <dependency ref="pkg:maven/io.confluent.flink/flink-runtime@1.18.1-cp3?type=jar"/>
      <dependency ref="pkg:maven/io.confluent.flink/flink-streaming-java@1.18.1-cp3?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.flink/flink-shaded-force-shading@17.0?type=jar"/>
  </dependencies>
</bom>
