{
  "bomFormat" : "CycloneDX",
  "specVersion" : "1.4",
  "serialNumber" : "urn:uuid:a48c0d4c-dd8e-4760-bba4-3497d7637056",
  "version" : 1,
  "metadata" : {
    "timestamp" : "2025-04-08T10:56:37Z",
    "tools" : [
      {
        "vendor" : "OWASP Foundation",
        "name" : "CycloneDX Maven plugin",
        "version" : "2.7.7",
        "hashes" : [
          {
            "alg" : "MD5",
            "content" : "436dfb24c63a322708e4a5143d8543af"
          },
          {
            "alg" : "SHA-1",
            "content" : "3ef2e8728dc9eff2f129c34057e46e9d2b10629a"
          },
          {
            "alg" : "SHA-256",
            "content" : "c185b79bf0f9264f43bc8c222c44db67bea275bb727e3327cf9aea6bf45292c9"
          },
          {
            "alg" : "SHA-512",
            "content" : "41488733e31e6c5315327dcc86187c2b9a6b96cd08f7e2157ce130688afde29c313fc6a73edb8a76333a930c78874aa2eac874448920030c0f7af0ac05e65ced"
          },
          {
            "alg" : "SHA-384",
            "content" : "f9462f86240fd9fc0942f34981e6d2371f252aa1a4e5e8c3c14e7f0f1a4e4de69ef972e51cf09a749afb6d97c13e67ed"
          },
          {
            "alg" : "SHA3-384",
            "content" : "c755af6239348bc7dd1e1e6b5f14f7cf7e1560d689b252d9610cd865fa4b419d0b8e26260731dfc5da2176b6e706b414"
          },
          {
            "alg" : "SHA3-256",
            "content" : "309aac91005470c9c834354ab918759e2ae7ec52fc1676002621a5bbdf3b7827"
          },
          {
            "alg" : "SHA3-512",
            "content" : "c634570dcf8302e61005e5fa91a9a0d9b81542f731967b3c9f6d3ef89e3b945bd36d7ab69e2ebad8124b9c05da504361c8b36a8ce528d844409eeb7df4eea6ce"
          }
        ]
      }
    ],
    "component" : {
      "publisher" : "The Apache Software Foundation",
      "group" : "io.confluent.flink",
      "name" : "flink-test-utils",
      "version" : "1.19.2-cp2",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.confluent.flink/flink-test-utils@1.19.2-cp2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://flink.apache.org/flink-test-utils-parent/flink-test-utils"
        },
        {
          "type" : "distribution",
          "url" : "s3://cp-flink-staging-654654529379-us-west-2/maven-staging/e376491b71b31739887d29e34e6552860f69668d"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink/flink-test-utils-parent/flink-test-utils"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.confluent.flink/flink-test-utils@1.19.2-cp2?type=jar"
    },
    "properties" : [
      {
        "name" : "maven.goal",
        "value" : "makeBom"
      },
      {
        "name" : "maven.scopes",
        "value" : "compile,provided,runtime,system"
      }
    ]
  },
  "components" : [
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "io.confluent.flink",
      "name" : "flink-table-common",
      "version" : "1.19.2-cp2",
      "description" : "This module contains extension points of the Table/SQL API. It allows for implementing user-defined functions, custom formats, etc. with minimal dependencies.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "37deb432856e8b2f1742bd0bd70a9d24"
        },
        {
          "alg" : "SHA-1",
          "content" : "e07768c9fdd6e5d342197f2ba57495f8bba97ed3"
        },
        {
          "alg" : "SHA-256",
          "content" : "d09c8b271015d1412a6f80f7725b98c681fe9f026b7b379cec9baf93188f6b47"
        },
        {
          "alg" : "SHA-512",
          "content" : "72c74712d2240a21eb9c13903ce733f07aeb44f045b412645a45f580fdeedb89f37975573ca78592495f487dc9fe5332c867db6de34ae1d5e62332bbe35915a2"
        },
        {
          "alg" : "SHA-384",
          "content" : "7fa7a54e1640738bbaed523fe299aceeeba231e02a18fa2111a2e84bea0c030bb4ab5a54209af82a32393a53678bd7f9"
        },
        {
          "alg" : "SHA3-384",
          "content" : "bea7f084732f8aa8d0f57f0de3ead7ed6507c41f9e632afd607ba06b11abea7c9e56e56582157896a2d86d17072fe519"
        },
        {
          "alg" : "SHA3-256",
          "content" : "1ade30487a36dfe9e7b7926247d5d1c87bb297740c15557f82497dd61cd7e4f2"
        },
        {
          "alg" : "SHA3-512",
          "content" : "89e1edc88de0529b27103624f2f2b2aa64a6e89eb747a89409a0c0a97b5377958a9a119a90e008206895dc3a9d6e8fdbb02a5629e8398e44ec9025d7d4e19965"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.confluent.flink/flink-table-common@1.19.2-cp2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://flink.apache.org/flink-table/flink-table-common"
        },
        {
          "type" : "distribution",
          "url" : "s3://cp-flink-staging-654654529379-us-west-2/maven-staging/e376491b71b31739887d29e34e6552860f69668d"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink/flink-table/flink-table-common"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.confluent.flink/flink-table-common@1.19.2-cp2?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "io.confluent.flink",
      "name" : "flink-core",
      "version" : "1.19.2-cp2",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "0359367380bd211d6038b82cf3f025e6"
        },
        {
          "alg" : "SHA-1",
          "content" : "47b60aef575636b92e61cc13760513d44860ce74"
        },
        {
          "alg" : "SHA-256",
          "content" : "c86624d00fd1878253b28c185d19ce4eb676f358bc89949594e384f5917c54d3"
        },
        {
          "alg" : "SHA-512",
          "content" : "aeb595854b04df66bf95d7f1e70d6b9ec5cc314e58ee9301a2ea55e1a6df45f0fe2ba9eab86b789f759c30171f2f988b79716d089dddfde41f4f13fc5608bd34"
        },
        {
          "alg" : "SHA-384",
          "content" : "78dd7df1bb52fc545afab630286d22815fdfaa036b574c1d775e9139f490dee96a02f8428883632262f441f83ba4beb6"
        },
        {
          "alg" : "SHA3-384",
          "content" : "550e39af694d3f673d97af02dd549edcafc36c0f7d057c5a0c804f1ccbd7ff979cd919003d04b0c4122e71f9ee531ce0"
        },
        {
          "alg" : "SHA3-256",
          "content" : "9572742e28f591a1b726bc2f9449a78ceab64d04ae235be71464fa64d22c32c6"
        },
        {
          "alg" : "SHA3-512",
          "content" : "7d50ccaab9d2c0d092ed6d467ff89318cf6b9869a45280ec4a3f11df14997f728e361451ceaa765d663c2ebe95fcdb9b66400ef47da4c8b90991cdb03a475d5e"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.confluent.flink/flink-core@1.19.2-cp2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://flink.apache.org/flink-core"
        },
        {
          "type" : "distribution",
          "url" : "s3://cp-flink-staging-654654529379-us-west-2/maven-staging/e376491b71b31739887d29e34e6552860f69668d"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink/flink-core"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.confluent.flink/flink-core@1.19.2-cp2?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.flink",
      "name" : "flink-shaded-asm-9",
      "version" : "9.5-17.0",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "443601ddd70625d741be1d3382dcf012"
        },
        {
          "alg" : "SHA-1",
          "content" : "d09e84a77ad8258d26f6be6bbb31fe81e3f98658"
        },
        {
          "alg" : "SHA-256",
          "content" : "a79273d4fbea1683b5fe81bce25d7fe552a542690481132f7ded034a8f00169e"
        },
        {
          "alg" : "SHA-512",
          "content" : "b1414e5cd4cd63e1e8a2f4a18198834910a360dac22392e298458049d7bf05e74cea2a4206751026ad7dc2348112aa7f223d0ca6178a859cf343cf306a6bd4c8"
        },
        {
          "alg" : "SHA-384",
          "content" : "ff6195b15060e725158aa6c8406e441576c38318fa5ea26e27ffd09f4ed4596b5198579d69ef0192dbb6edb3fda79d40"
        },
        {
          "alg" : "SHA3-384",
          "content" : "2b29ecee21e6bf39e6a913cb1bb41d455ade8ec169b7574b6052972f4cf571fb5374d4dde1a24be0ec4d08246359348f"
        },
        {
          "alg" : "SHA3-256",
          "content" : "353458e2d9919279b41a1b74791b984fef6586f07232d2e71e42892a790052c9"
        },
        {
          "alg" : "SHA3-512",
          "content" : "e491cdd687aaa88d8d84e792caedc02a4ef27d2bdd78e4e9bf286876ce06518c03f0340ff984ffcd507d7982391e5a6f3c4c61e05fbf0e07bd9d5683d493393e"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.flink/flink-shaded-asm-9@9.5-17.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://flink.apache.org/flink-shaded-asm-9"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink-shaded/flink-shaded-asm-9"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.flink/flink-shaded-asm-9@9.5-17.0?type=jar"
    },
    {
      "group" : "com.ibm.icu",
      "name" : "icu4j",
      "version" : "67.1",
      "description" : "International Component for Unicode for Java (ICU4J) is a mature, widely used Java library providing Unicode and Globalization support",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "046a5f59abf6b67a464dea584d11e59d"
        },
        {
          "alg" : "SHA-1",
          "content" : "2e159807158095566726600534034030dddab6d0"
        },
        {
          "alg" : "SHA-256",
          "content" : "c4eb904caf5fba968a2f1a3b8aef14df801e9329b21697209ca30bfcf153867d"
        },
        {
          "alg" : "SHA-512",
          "content" : "b3036b162356a0a5dad39eee611dae27c6fbe53f9e5ec1f3529ab02d49d97093b58602f43dd855433a0bbe02f6253e46a9d1899911c8e2e73001ab2c9a79d68d"
        },
        {
          "alg" : "SHA-384",
          "content" : "c2b28649d0ef9bf68f258a9f432c627a553ead79670f0a7ada3d986091a0001c5ab9eca372f792734bff733370a61fb1"
        },
        {
          "alg" : "SHA3-384",
          "content" : "3726bfa8b77bd0cdd66564944044d82dca3ee1fcf2594ebf1a7acc6752faf4c11892a1744af27e5528dc4b991e4cd0c0"
        },
        {
          "alg" : "SHA3-256",
          "content" : "cb19cec2baad1dc610267b2c98325f5c742230caf2247ef6297dfe8d9be9f11d"
        },
        {
          "alg" : "SHA3-512",
          "content" : "f46e4ead1cc1c05c3825716485ce79c890500a5356f8e7ca578f3080c09fb2460fb1aed81d65d345c402706906ea4e96afc0ff03c50fb0ac5bbacd351a8f11ec"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "Unicode/ICU License",
            "url" : "https://raw.githubusercontent.com/unicode-org/icu/master/icu4c/LICENSE"
          }
        }
      ],
      "purl" : "pkg:maven/com.ibm.icu/icu4j@67.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://icu-project.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://unicode-org.atlassian.net/projects/ICU"
        },
        {
          "type" : "mailing-list",
          "url" : "http://sourceforge.net/mailarchive/forum.php?forum_name=icu-support"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/unicode-org/icu"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.ibm.icu/icu4j@67.1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "io.confluent.flink",
      "name" : "flink-test-utils-junit",
      "version" : "1.19.2-cp2",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f3d91002486f5fbf90644f686801a4f7"
        },
        {
          "alg" : "SHA-1",
          "content" : "d323452b888772d5072e5ba10ad27ef418a1537c"
        },
        {
          "alg" : "SHA-256",
          "content" : "02ce5feae946b17e5ce735c6009ac05c5d9f5b6c95bb3df050008a65a797e9ca"
        },
        {
          "alg" : "SHA-512",
          "content" : "789e4a1de9d901030218fbd21ae57d73aad7f7cec1b07e9f3a0929794a5d6645ab947bf89ed40969093cbb4574843293c80a6e1398621dc18c46147fa66fc898"
        },
        {
          "alg" : "SHA-384",
          "content" : "c1552b965d074615222c38916902b7978d5e1774fbf4af3fe1bed9129478bc6b6d58808371fae890f128f1561bc79254"
        },
        {
          "alg" : "SHA3-384",
          "content" : "25c3fe6bd0604bfe13f7c407f35f7d758837f1783a047a6e5c7d89249fc3159fef88736afb070c6ce7dc93a1a03742a1"
        },
        {
          "alg" : "SHA3-256",
          "content" : "ff2ebe5367f3880c14d7d42a7c20d0b920fc011588fed9416f028429a639f97d"
        },
        {
          "alg" : "SHA3-512",
          "content" : "5a0bc207e6531a52a24c7a8a31aa60fb049a8bca623ee170754b3037f711b0f680264afdfc69c1630c1987afe5b537cc2b770180c0ae599bc78a93e941859753"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.confluent.flink/flink-test-utils-junit@1.19.2-cp2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://flink.apache.org/flink-test-utils-parent/flink-test-utils-junit"
        },
        {
          "type" : "distribution",
          "url" : "s3://cp-flink-staging-654654529379-us-west-2/maven-staging/e376491b71b31739887d29e34e6552860f69668d"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink/flink-test-utils-parent/flink-test-utils-junit"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.confluent.flink/flink-test-utils-junit@1.19.2-cp2?type=jar"
    },
    {
      "group" : "org.testcontainers",
      "name" : "testcontainers",
      "version" : "1.19.1",
      "description" : "Isolated container management for Java code testing",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "76224f706bf65ca7d02dc8702652dd49"
        },
        {
          "alg" : "SHA-1",
          "content" : "eaad6e005a0792a1ee537bd3e7d3113e8d3315b1"
        },
        {
          "alg" : "SHA-256",
          "content" : "9107859eaf7077780742a807c4b4aea0c4bf7800a407482a433318b31ff26516"
        },
        {
          "alg" : "SHA-512",
          "content" : "bd5222462ab0f940006fdc8ec9524055605af1451f604e13c1d6e52642a512eb94c44c28cf7f820e0054d2f15c17dbe3559298de80f67ac1b22b2c5e34d5ee7c"
        },
        {
          "alg" : "SHA-384",
          "content" : "c04ea92f8b8fb21ad71bde704ed77d21eb7e90dbbac248cd4bd75c04f71deb24d87a7dee49550f5c5c045997065a665d"
        },
        {
          "alg" : "SHA3-384",
          "content" : "93317f2bebf5cd9f9af95960847023b09484ee90efcdaa35e6e58895207f490b46a347e838a7bb5b91a8fe296bc63c9d"
        },
        {
          "alg" : "SHA3-256",
          "content" : "22553ab446fdff385b9e1ce8b2947fab20f427f0d9d9b42afe10df7e1b0ed07a"
        },
        {
          "alg" : "SHA3-512",
          "content" : "ce83b181b756406f92e3d561a38a44934d0c48acf20e051fe4e39f923b7a911d4e5911d47072514b32d19e9ac1d8013814d05bbcc908b5c717f77b47e29ee955"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl" : "pkg:maven/org.testcontainers/testcontainers@1.19.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://java.testcontainers.org"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/testcontainers/testcontainers-java/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/testcontainers/testcontainers-java/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.testcontainers/testcontainers@1.19.1?type=jar"
    },
    {
      "group" : "org.rnorth.duct-tape",
      "name" : "duct-tape",
      "version" : "1.0.8",
      "description" : "General purpose resilience utilities for Java 8 (circuit breakers, timeouts, rate limiters, and handlers for unreliable or inconsistent results)",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "af347a22d19d632616d7a3fb63024218"
        },
        {
          "alg" : "SHA-1",
          "content" : "92edc22a9ab2f3e17c9bf700aaee377d50e8b530"
        },
        {
          "alg" : "SHA-256",
          "content" : "31cef12ddec979d1f86d7cf708c41a17da523d05c685fd6642e9d0b2addb7240"
        },
        {
          "alg" : "SHA-512",
          "content" : "d0a041a0e6eb26b92f1554038dc169a87fcf0a935497b50b93c13d78dde89ac26339b45a0d69a5e8dcf076dea0d187dbe81cdf97a045f092d0936717d8e08c30"
        },
        {
          "alg" : "SHA-384",
          "content" : "de8dd0f7939e2127da9d1012fcf94ca672953d0ae2edfd45213e688e9b170ec1251b64f1b0fbf6e0394d39a49b84e548"
        },
        {
          "alg" : "SHA3-384",
          "content" : "f74101a4dc718fb1968838e81b7cd256cbdd8831c9179b7a491e0cf2b4f8d3b5115bae78ef6eb1200874a60ad542284f"
        },
        {
          "alg" : "SHA3-256",
          "content" : "b1c78074dece82fc2781b776222055ecd47d4040394c1ef29fd962c88517b406"
        },
        {
          "alg" : "SHA3-512",
          "content" : "4ab545b668dcfe87bf03179cdc550cabd1026de19c39f55fd7b54e7a3aaa08905cae0f7701c0d9863062693f9146f2ea06a6eaea7d75c632225d13a6a3b371dc"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl" : "pkg:maven/org.rnorth.duct-tape/duct-tape@1.0.8?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/rnorth/duct-tape"
        },
        {
          "type" : "distribution",
          "url" : "https://api.bintray.com/maven/richnorth/maven/duct-tape"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/rnorth/duct-tape"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.rnorth.duct-tape/duct-tape@1.0.8?type=jar"
    },
    {
      "group" : "org.jetbrains",
      "name" : "annotations",
      "version" : "17.0.0",
      "description" : "A set of annotations used for code inspection support and code documentation.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "7b06437ed47fa7b4a8ec8909f4fb9022"
        },
        {
          "alg" : "SHA-1",
          "content" : "8ceead41f4e71821919dbdb7a9847608f1a938cb"
        },
        {
          "alg" : "SHA-256",
          "content" : "195fb0da046d55bb042e91543484cf1da68b02bb7afbfe031f229e45ac84b3f2"
        },
        {
          "alg" : "SHA-512",
          "content" : "839ec18d4a6f930ecd39827ebd4013c13a7176003543b8f60056770179032648faf1651e9e73109e811881b68a39757ca7e39731a61ff4a3461637b196fe4f7b"
        },
        {
          "alg" : "SHA-384",
          "content" : "c9d045a68ef2b0d5b12aa00b636e43af22de4c02f4dfcc6b5b7b04fdd57c98c7246decd2e5dc3eb9f1b10d929ac33a11"
        },
        {
          "alg" : "SHA3-384",
          "content" : "25ad733b460552705dd624634191beb909a6ed35f2475723faa06551d9542b87e724266f5f6003350c39965a92b5e54c"
        },
        {
          "alg" : "SHA3-256",
          "content" : "f731cde48fa6a20e57e97a829184492cfa5fe0e14a5082e7810205c2b9f1ac1c"
        },
        {
          "alg" : "SHA3-512",
          "content" : "b6698f9d65c0a364854717e64edd5df4fb1c97300d4dc3cc7ae7194b0b7b9e826b3d800dd362e2ad05417dac6ee3b2164294796c3ae46f4cbed840c2481b79b1"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.jetbrains/annotations@17.0.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/JetBrains/java-annotations"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/JetBrains/java-annotations"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.jetbrains/annotations@17.0.0?type=jar"
    },
    {
      "group" : "com.github.docker-java",
      "name" : "docker-java-api",
      "version" : "3.3.3",
      "description" : "Java API Client for Docker",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "6f351c56b54a82bcfbba16d53df01552"
        },
        {
          "alg" : "SHA-1",
          "content" : "22f9e8d0dc5a89fbcfb8e5182b36a49d989f87a0"
        },
        {
          "alg" : "SHA-256",
          "content" : "8be2f41ddc33306b83f91e413fc1a07cee02db05e4c493456de3399e5bcb7b6c"
        },
        {
          "alg" : "SHA-512",
          "content" : "a7f860e391413929d46be0d2a7f33a4ef8a2c66fd131ecc41e2b3006268e57001bf14982225929fe5a0637767454ba788a72a2fb683e9c497a03ec8dd3978e29"
        },
        {
          "alg" : "SHA-384",
          "content" : "c1b97e0daef7e13d0550e8194d28ef94431501564ab1128d3becb924c3bc4e871f914c3b632a04ac1158c067fef3035b"
        },
        {
          "alg" : "SHA3-384",
          "content" : "1ac56a6addd3aefd99c3751001b40282e25b601a73296a9f687d547d6a5ace6cde82db8fff7409a2911de670ffe79581"
        },
        {
          "alg" : "SHA3-256",
          "content" : "2ddb2531bd4a85a45b9829a09f9ec88176d0b00a68b87628575eb112c7652aa8"
        },
        {
          "alg" : "SHA3-512",
          "content" : "5d7cfa69317e7f0d805fed88141b47f50a197e283c7928903c12dc060d4c78ce33c5dc055caeacdaa083482a676899af41e071e1ae69b18964b2d0f9ed230944"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.github.docker-java/docker-java-api@3.3.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/docker-java/docker-java"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.github.docker-java/docker-java-api@3.3.3?type=jar"
    },
    {
      "publisher" : "FasterXML",
      "group" : "com.fasterxml.jackson.core",
      "name" : "jackson-annotations",
      "version" : "2.15.3",
      "description" : "Core annotations used for value types, used by Jackson data binding package.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f478f693731e4a2f0f0d3c7bba119b32"
        },
        {
          "alg" : "SHA-1",
          "content" : "79baf4e605eb3bbb60b1c475d44a7aecceea1d60"
        },
        {
          "alg" : "SHA-256",
          "content" : "aae865c3d88256d61b11523cb1e88bd48d5b9ad5855fa1fc859504fd2204708a"
        },
        {
          "alg" : "SHA-512",
          "content" : "c496afd736fa8acbf8126887e2ff375f162212f451326451fbb4b9194231d814e25bccacbaead9db98beec454f6b8d9ed706c5c88e2145bf7e1a37e13fd81af0"
        },
        {
          "alg" : "SHA-384",
          "content" : "13b4d153cc113a69008147974d8887f868f2f3f0a551ef0bacaccf0add17a3168465a94a471e075913f9c6649980a3cb"
        },
        {
          "alg" : "SHA3-384",
          "content" : "dcf8ed73f748eb32e1ab25eba3c294344cc0ddb2cc7bb4376814f1866df42c3093f1336291ce9ed9e1c8730663e0017c"
        },
        {
          "alg" : "SHA3-256",
          "content" : "59f42bc85ee3a8a5b422085b0462aed2a770cf52d7a3660f2cd6dd257ec6e694"
        },
        {
          "alg" : "SHA3-512",
          "content" : "1d1a6fd0e6851d419e79f82170f4060981c233ec8dc61656b84ce7988e9b71bbeecd7364cdadac066ddaf0b3de4dc8aa5acc411ebd1641f549a3af5ba214667b"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.15.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/FasterXML/jackson"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/FasterXML/jackson-annotations/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/FasterXML/jackson-annotations"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.15.3?type=jar"
    },
    {
      "group" : "com.github.docker-java",
      "name" : "docker-java-transport-zerodep",
      "version" : "3.3.3",
      "description" : "Java API Client for Docker",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "61164d91eb36389e77f6371d67514d80"
        },
        {
          "alg" : "SHA-1",
          "content" : "df303392ef9ee91d9069b259505eda84dcc4999b"
        },
        {
          "alg" : "SHA-256",
          "content" : "8620a66c13869a6d621ac80e921bceff6e9c43b527a21057b7d1b9b860d063e2"
        },
        {
          "alg" : "SHA-512",
          "content" : "3151a4992dca6a71a4bfedc8e0f3fdbfc222bb60d89de8bfc130c9a68ddf772fa6fa017204b9bee5ba3698dd5737a910b817cc0d1b28d0248535918d668a40f5"
        },
        {
          "alg" : "SHA-384",
          "content" : "e0d235c977c6cfd09fe308374f95ccdf55b15658672dc860cb3211c208030565e212f981fd081927d71663af70377c11"
        },
        {
          "alg" : "SHA3-384",
          "content" : "235edcf24d27d705f5114b234cc7d089ffd984e5f390c45fdbbcccc6aebd3b549366da79ba686d0fb9aea51251ecddf4"
        },
        {
          "alg" : "SHA3-256",
          "content" : "16bdcbad70b8077bbbe0ee3e756795fc18429b092e8e8d5958c97601c842a331"
        },
        {
          "alg" : "SHA3-512",
          "content" : "976fc84de7d4f565e1fad86d8c3b0567dc21f9de7f8476188febaf48c61398d09876502988ff48dd5e4ea218dec2132f24dd1226b8981000f8021f99fcb2abc7"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.github.docker-java/docker-java-transport-zerodep@3.3.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/docker-java/docker-java"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.github.docker-java/docker-java-transport-zerodep@3.3.3?type=jar"
    },
    {
      "group" : "com.github.docker-java",
      "name" : "docker-java-transport",
      "version" : "3.3.3",
      "description" : "Java API Client for Docker",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "3092d720cf36cbd11aeac0146802bba3"
        },
        {
          "alg" : "SHA-1",
          "content" : "13e7e159a902df2236f6ded371842bf579a8446b"
        },
        {
          "alg" : "SHA-256",
          "content" : "103b94685f398b036cf9243cb8899680bcdb4e54c32340a32b2b5737a87a33ba"
        },
        {
          "alg" : "SHA-512",
          "content" : "f36bd012b5604995e600df37173589c1d4de1ac8c287833e5d693896576505feda17c61139cfe1de91999a5e0e4d06206a47a1bb9792100324c5b77e787decc4"
        },
        {
          "alg" : "SHA-384",
          "content" : "ec41693b23cbc3478e064672a68f3b084e1fa7d255e1820345c156297d4b2c96164fd2624caa380a7b86b0815e99f3c1"
        },
        {
          "alg" : "SHA3-384",
          "content" : "8b6249332c37993cdb83ccbcac0d5e84693ceb67524bbbd81a976930170e2d7611735cf15bb50b7ffedf2ff159c3abcd"
        },
        {
          "alg" : "SHA3-256",
          "content" : "a51368ac93de84ddc0642a345f5ed27a9da5da7e0148d37062f09b0183fc8015"
        },
        {
          "alg" : "SHA3-512",
          "content" : "2acbb6e0c0c4d673017f7236464d32cbd880b1be04e99894f7f3a54b58d7503d6ef5e32596770b4958533a55d676ae7f528f55b9cb22af38b4449dcc3541a9b3"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.github.docker-java/docker-java-transport@3.3.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/docker-java/docker-java"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.github.docker-java/docker-java-transport@3.3.3?type=jar"
    },
    {
      "group" : "net.java.dev.jna",
      "name" : "jna",
      "version" : "5.12.1",
      "description" : "Java Native Access",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "3bab13d7f5ca715013fcac64ceb4108d"
        },
        {
          "alg" : "SHA-1",
          "content" : "b1e93a735caea94f503e95e6fe79bf9cdc1e985d"
        },
        {
          "alg" : "SHA-256",
          "content" : "91a814ac4f40d60dee91d842e1a8ad874c62197984403d0e3c30d39e55cf53b3"
        },
        {
          "alg" : "SHA-512",
          "content" : "5403e494985a53475d9c9268baf1758e37103817bd54865847d67e1adf3dc45287175a12b08a9525837921e7783a55e934a1031cf76d02e55fd4ce6cb2626837"
        },
        {
          "alg" : "SHA-384",
          "content" : "5bd86a58007a752b1ef3f599a54546fda70267442f6c202548cf41fea7bc352bcd6747391be70f261f48a3d5334f99de"
        },
        {
          "alg" : "SHA3-384",
          "content" : "43c58428512271295ecdf158d6951d6d86b8758072e81dd9ccda26ad59b81e8194c9c9ca8a2a6d748f69139927a92124"
        },
        {
          "alg" : "SHA3-256",
          "content" : "6125a65ff81d5af3118d3a1d95fc421aa0ac612f019099efcc1dec9ca614adfa"
        },
        {
          "alg" : "SHA3-512",
          "content" : "d073a2181db5026b0ceb22fbba41c9b84509aa0c5841a4d5f14ac1978bc5b4488c85246ec524d1372f42c7fe7ebf741c1256836cc247d3c4bb446c762549944f"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "LGPL-2.1-or-later",
            "url" : "https://www.gnu.org/licenses/old-licenses/lgpl-2.1-standalone.html"
          }
        },
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/net.java.dev.jna/jna@5.12.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/java-native-access/jna"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/java-native-access/jna"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/net.java.dev.jna/jna@5.12.1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "io.confluent.flink",
      "name" : "flink-runtime",
      "version" : "1.19.2-cp2",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "d06553db38e63a802fcba03c0bc921a1"
        },
        {
          "alg" : "SHA-1",
          "content" : "e1ccd7d57b1a727fa3db280c04725547876856ed"
        },
        {
          "alg" : "SHA-256",
          "content" : "c1cc1faa25df66d9e46b623c23558fb56e3726df92df23d31a70a127e56b5794"
        },
        {
          "alg" : "SHA-512",
          "content" : "9337cf16974262bfcff0bc1d3328655f7991506b5ed791d8263555f88d600b22f4d86aef9b68ddc4c5e1b221502b4e02ca47f405523d2e93153b1cec7026c4f9"
        },
        {
          "alg" : "SHA-384",
          "content" : "47222003cb9fbe91c2e92d1a598ffe1dde46f96fa9c6826b21b68c31e5fe3f60f129b25aea051d5dffe8e1c28ae4a3d8"
        },
        {
          "alg" : "SHA3-384",
          "content" : "321ac5bd0d4d5f561a8ef963ee71103cf9d013038eff5fff83f3b548e12e06170f6b5f994b29438ecfd8aa233abf90d7"
        },
        {
          "alg" : "SHA3-256",
          "content" : "58b7ee64acf1458e3a6dd0000cff8c396dfdaab2068400de6ddb6881a9264d2b"
        },
        {
          "alg" : "SHA3-512",
          "content" : "7e7a14a8f82bef2aba4187986b9b9c6f55e424aacb1cbbbc470a268ef3235ae05492554225768da9c1ba1a0f19f75cc315fb2494e43943d18980f94404905c3d"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.confluent.flink/flink-runtime@1.19.2-cp2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://flink.apache.org/flink-runtime"
        },
        {
          "type" : "distribution",
          "url" : "s3://cp-flink-staging-654654529379-us-west-2/maven-staging/e376491b71b31739887d29e34e6552860f69668d"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink/flink-runtime"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.confluent.flink/flink-runtime@1.19.2-cp2?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "io.confluent.flink",
      "name" : "flink-rpc-core",
      "version" : "1.19.2-cp2",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "57cf881cb46ff5f4e684a29b4d9464aa"
        },
        {
          "alg" : "SHA-1",
          "content" : "d8faf02b41fd0f057786c54acaa320b6252361dc"
        },
        {
          "alg" : "SHA-256",
          "content" : "eaff7db20328c2e0bb87539796c9c0af1ab34430c250ea07a995d649f7f747cd"
        },
        {
          "alg" : "SHA-512",
          "content" : "cab157aaaf97634593b8a0fb211ed8263ec50d87b012d3d60d4735f31a220d05ed6aa09489d384faaf76ee7afa70b3770271a11c614bb997f19988474cfd177f"
        },
        {
          "alg" : "SHA-384",
          "content" : "c8f22998e33261a2d6b1ef486aacd85eef48f910e4895587966a83e4be9d26af27d5603e228b1eb2a446e7a1bdf773f4"
        },
        {
          "alg" : "SHA3-384",
          "content" : "6243fb0a1ef41d1cd0c26bd8a49715f7438c63de93862d90d24ceeaf442bcd775a44af379215e79e9c065f73a35c5c8d"
        },
        {
          "alg" : "SHA3-256",
          "content" : "5ecd860df7754824bd7b58f455e74068a254c11f77d71eaf660b8859e6d13b58"
        },
        {
          "alg" : "SHA3-512",
          "content" : "3457a6acaf261e96c178f23ebf0edb737112c8c388e839bb6057c3af8c68b1232e1a880d79ba7566f9a6ef83579a182a6a0f6f3f3c49d99a92e68193204dfa54"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.confluent.flink/flink-rpc-core@1.19.2-cp2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://flink.apache.org/flink-rpc/flink-rpc-core"
        },
        {
          "type" : "distribution",
          "url" : "s3://cp-flink-staging-654654529379-us-west-2/maven-staging/e376491b71b31739887d29e34e6552860f69668d"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink/flink-rpc/flink-rpc-core"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.confluent.flink/flink-rpc-core@1.19.2-cp2?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "io.confluent.flink",
      "name" : "flink-rpc-akka-loader",
      "version" : "1.19.2-cp2",
      "description" : "This module contains the mechanism for loading flink-rpc-akka through a separate classloader.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "3ef16416d5cfc550280e11e631f0efde"
        },
        {
          "alg" : "SHA-1",
          "content" : "ad74347ecd2b1d9582e83a48b75cc9379f503693"
        },
        {
          "alg" : "SHA-256",
          "content" : "2496abcd70bcdc4accdbe3a000e681565c65f09094d322d0cb8f44242ed2ea2f"
        },
        {
          "alg" : "SHA-512",
          "content" : "10a71e9daefee7e878c37f958062497de0fe0453372c66f39c0efebe36a0a551eb94bc74ef22f6e4f39bfa55b8d42c7bd433a9e7ee320037db9103414cf22c47"
        },
        {
          "alg" : "SHA-384",
          "content" : "9d49d01c52f877f5fcbebdb6dcfcd1c06c2805094bed8e4dfd4521ed7df0b0fd6317a12ab198f5c811585004c1437267"
        },
        {
          "alg" : "SHA3-384",
          "content" : "57764bc1e712d45746de7f0b10c0c2789d69b55994ba17cc75e3aef771cf2d43846cf45513349903d56bccc3d451936d"
        },
        {
          "alg" : "SHA3-256",
          "content" : "0d1234f5fe996cdd4159c700b119039d0df013c4b37638d39d0815edcd3c7d2d"
        },
        {
          "alg" : "SHA3-512",
          "content" : "d2179766aaddf56385c77390b7ee896191e4a5d6a5f0d199922cb2f878e59baa95a022e9ca8de44438b10d597b061e0940c2a1b37234fe1986300d151b90dbdd"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.confluent.flink/flink-rpc-akka-loader@1.19.2-cp2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://flink.apache.org/flink-rpc/flink-rpc-akka-loader"
        },
        {
          "type" : "distribution",
          "url" : "s3://cp-flink-staging-654654529379-us-west-2/maven-staging/e376491b71b31739887d29e34e6552860f69668d"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink/flink-rpc/flink-rpc-akka-loader"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.confluent.flink/flink-rpc-akka-loader@1.19.2-cp2?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "io.confluent.flink",
      "name" : "flink-java",
      "version" : "1.19.2-cp2",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "4dfa5509554a70b0140093a7fd17ff13"
        },
        {
          "alg" : "SHA-1",
          "content" : "c9bff2fd31efcdedfad24a041f175cca820f7bd2"
        },
        {
          "alg" : "SHA-256",
          "content" : "d3cd6ce32ed9e67d08e1070db0e4d44f287871936400b9dd87d6a214c68849ac"
        },
        {
          "alg" : "SHA-512",
          "content" : "f174900d5658df0a693d4a924391fc3ff09c656a09f8cdaffd604d22cfd31140e9e19ea49a86dfa800829f58a51b82253e1d88a4e89377c180b73dbdcf048a97"
        },
        {
          "alg" : "SHA-384",
          "content" : "eb774fce99b939001116510e05551a5c9603c1cdcbe0dc3ce3793c8649874aedf42b0e2454299c78ae2adec318c68797"
        },
        {
          "alg" : "SHA3-384",
          "content" : "8909e7a0ce9f86fc8031147c3b869d995f476ccec5814aad44f55943fff6fc18fbf184f546f0737786119469259b98ed"
        },
        {
          "alg" : "SHA3-256",
          "content" : "8c280d9c5cebac6bf094912dcbe48aac9cb16582189cd5b08e87acfc2def0845"
        },
        {
          "alg" : "SHA3-512",
          "content" : "d0eacb0981b0483cb57e928504a9220ecf4e5608596a8d7de651a67bacdb76796b77c8d991bbb8b688b63dd57b80dac2ccdb1dd2c80a55d4a6508b8979d02ffb"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.confluent.flink/flink-java@1.19.2-cp2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://flink.apache.org/flink-java"
        },
        {
          "type" : "distribution",
          "url" : "s3://cp-flink-staging-654654529379-us-west-2/maven-staging/e376491b71b31739887d29e34e6552860f69668d"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink/flink-java"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.confluent.flink/flink-java@1.19.2-cp2?type=jar"
    },
    {
      "publisher" : "com.twitter",
      "group" : "com.twitter",
      "name" : "chill-java",
      "version" : "0.7.6",
      "description" : "chill-java",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "886eb8ef6db3880433f4a8e10ef37300"
        },
        {
          "alg" : "SHA-1",
          "content" : "a74b8d019d6941d82ff86d1612e382f4a0ae8259"
        },
        {
          "alg" : "SHA-256",
          "content" : "f7c41a2257be11e6c9bca97095c8f4b0299626941a3508469f90622eb8f8368e"
        },
        {
          "alg" : "SHA-512",
          "content" : "dc9973909b87cfb85ee45c90662612dd2bc137b7510172221eb47020f76b23eb3ea76c6b4fba4cee5d81e910f87aba71359136d33ae0f6424e3ce7123bf77dbf"
        },
        {
          "alg" : "SHA-384",
          "content" : "41e7faed7c2c22987868fba7cd6dac0d59d174d82d841ba4e5aa8675cc9265bf9d9df021553a781cfa24c4c9c7a35c5c"
        },
        {
          "alg" : "SHA3-384",
          "content" : "32751d6ecd77676ffa11a109dead8c8d19a6d1d78576b19ac5a8323d9446ba51fba87e0d60820dd2bac69fb705aa2061"
        },
        {
          "alg" : "SHA3-256",
          "content" : "6bdf2ed042c5b7f4f4d11bb52e448ce740e18563364f66730ca2b6b4eadf0401"
        },
        {
          "alg" : "SHA3-512",
          "content" : "0ab14bee65d85803d5080f3b0ad86183daafb61e3ca3a610e199bc04a11421b45436e405dc3c227b5d80a64178ca82739eccb5ad8ee157efa925d484d9daae28"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.twitter/chill-java@0.7.6?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/twitter/chill"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.twitter/chill-java@0.7.6?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "io.confluent.flink",
      "name" : "flink-queryable-state-client-java",
      "version" : "1.19.2-cp2",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "4eba5a1ee37e737891728b234c48eb7a"
        },
        {
          "alg" : "SHA-1",
          "content" : "7cb8fb96c49709dffc5ac72a07ec21d75be7f2d6"
        },
        {
          "alg" : "SHA-256",
          "content" : "bae5d1e908288db358062f60deb974c31a82f5002ff0efe827def0aff6c3eeb0"
        },
        {
          "alg" : "SHA-512",
          "content" : "04f4f5de132a4a14e7d509340420f908f1824f103fd2dfbdc2ade20e55825fd13c54bbb0f844f62eaf48931b07132a0aa05a4550d0fd12c18a45e8a4a797faa9"
        },
        {
          "alg" : "SHA-384",
          "content" : "b8516ce2cf74239c1b6fe6120c13b87196b06e0a6931495ca08420da90f85600068287413051bf64ca6ea9eb3c531f83"
        },
        {
          "alg" : "SHA3-384",
          "content" : "2e284fed3b763f2bc6276e7b9afe625c3cbb07352e325d96e06b1992efb417f22fe575890be8c55ca00a9f02af829a03"
        },
        {
          "alg" : "SHA3-256",
          "content" : "bf4772d2c840ef72bdad687bc0d8d3454be0dc9878d76a5351779bcc1eafac0c"
        },
        {
          "alg" : "SHA3-512",
          "content" : "2a9db275d2ab94d92ac5211ede10921252357d12b37bdb24a7d7e036bd1c377203bac3a299697803c2f0cceed5aeaf099ad6dfa2faef1c7f6f97f7d34dfc6dc6"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.confluent.flink/flink-queryable-state-client-java@1.19.2-cp2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://flink.apache.org/flink-queryable-state/flink-queryable-state-client-java"
        },
        {
          "type" : "distribution",
          "url" : "s3://cp-flink-staging-654654529379-us-west-2/maven-staging/e376491b71b31739887d29e34e6552860f69668d"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink/flink-queryable-state/flink-queryable-state-client-java"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.confluent.flink/flink-queryable-state-client-java@1.19.2-cp2?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "io.confluent.flink",
      "name" : "flink-hadoop-fs",
      "version" : "1.19.2-cp2",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "d07efa137e472cd60e46f15915185317"
        },
        {
          "alg" : "SHA-1",
          "content" : "ad2684048bcfa752bdc12bb9b79097672a25c5a4"
        },
        {
          "alg" : "SHA-256",
          "content" : "4d00431ee5343ed34c245ed0d3989d2eeed7798ff31190ffadc209a5a6397e68"
        },
        {
          "alg" : "SHA-512",
          "content" : "10b8fd27a17369ece201e4785d2a144aad88e46b7a3d1f06e829a35ce5222518065156f7b7fac708b55febb18d1fc88d3b0373e0fda5eafbcb30c3024df9b4bb"
        },
        {
          "alg" : "SHA-384",
          "content" : "9e685e5a5e2c162681aa4a7f3e52e701fd98df5e7c6e1d4d64f0457cc5a3c20a82ab1b42705afcd21dc73f7a733dd575"
        },
        {
          "alg" : "SHA3-384",
          "content" : "668c6920ba2c7c4dceca62c4eeaae30bab2d8fe54adcbe840dc50ac2ea309c5659a23a46d30234094fc232f275b8f290"
        },
        {
          "alg" : "SHA3-256",
          "content" : "79a580768606c51dd0357d496e0e9b9a28feb2416cd7c7783b065f5bdad86f91"
        },
        {
          "alg" : "SHA3-512",
          "content" : "670e161cd79b5ce044fedc4ea9b5d38dc69b37a661551e8fb686c053dacb079dfd403245cd0bc67cce4328b0a643577878249be6c5a9e421296d780f032e1021"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.confluent.flink/flink-hadoop-fs@1.19.2-cp2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://flink.apache.org/flink-filesystems/flink-hadoop-fs"
        },
        {
          "type" : "distribution",
          "url" : "s3://cp-flink-staging-654654529379-us-west-2/maven-staging/e376491b71b31739887d29e34e6552860f69668d"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink/flink-filesystems/flink-hadoop-fs"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.confluent.flink/flink-hadoop-fs@1.19.2-cp2?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-io",
      "name" : "commons-io",
      "version" : "2.15.1",
      "description" : "The Apache Commons IO library contains utility classes, stream implementations, file filters, file comparators, endian transformation classes, and much more.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "84351f7991a0e6722f00e96a4ccc376f"
        },
        {
          "alg" : "SHA-1",
          "content" : "f11560da189ab563a5c8e351941415430e9304ea"
        },
        {
          "alg" : "SHA-256",
          "content" : "a58af12ee1b68cfd2ebb0c27caef164f084381a00ec81a48cc275fd7ea54e154"
        },
        {
          "alg" : "SHA-512",
          "content" : "e9adaeed2d715ac0ae44de056ba165a743a92acbeb9871b535f7e58e0b3bc4fba276495b50429be195098a559f3adb7294048479754a0ee4d397da2efda5f81c"
        },
        {
          "alg" : "SHA-384",
          "content" : "028c72b59373d3894da22f9eb2c731aabd00f670993973f71a354d722670c12ca659686b83bbf8db32d060ca180f50b2"
        },
        {
          "alg" : "SHA3-384",
          "content" : "73cd585ab3736b4be50ec0f10dfe5ebfc3390eea8d56f07f29055f1fddb2dff8084310eaa6fb9f97ea639ed1abd7bc33"
        },
        {
          "alg" : "SHA3-256",
          "content" : "daf39bc99f1a3dc0075714a4a342a58d69a4cd62c25bc39a581f657ca72b1044"
        },
        {
          "alg" : "SHA3-512",
          "content" : "b003f8971d1536ea0fc4320dbfe17d7259d49e59314739f9fc83134e511facbff048b0ef4f86a9d0893781ca09c95cebc3b181a6c89a2d41e851870b96e76839"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-io/commons-io@2.15.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-io/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-parent/actions"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/IO"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-io.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-io/commons-io@2.15.1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.flink",
      "name" : "flink-shaded-netty",
      "version" : "4.1.91.Final-17.0",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f3e6fd4f43c7a8647604df2a9b712dab"
        },
        {
          "alg" : "SHA-1",
          "content" : "81b6e0b28e0309946cb6d03792199fabfc0d9f09"
        },
        {
          "alg" : "SHA-256",
          "content" : "c4d370f1b2bda0b55686fdec840c8a047950b9448f26cd01f1594a3bf0fde75b"
        },
        {
          "alg" : "SHA-512",
          "content" : "7f2010cda152f6baecc2a0c9d79f8bb2b7eee8a88f80dd8ed5bf2f723885cf3f9f60e373db77bd591225f3037f33f4a7c08d05e807356899a6af818225b6aa4c"
        },
        {
          "alg" : "SHA-384",
          "content" : "d1d99aee334155d4c2dfddcc63dfd1b8ce9d7e4a67bba29be0b6b5a54a717ea95decb0fa300ef9e05b589d273952e22e"
        },
        {
          "alg" : "SHA3-384",
          "content" : "3a4bcd8d36c45ef4e8d2fd5d1774fe2ba0913851e6034ec770c3af962db9bd9ef084aa3e2a94b83d4c098059f37800a2"
        },
        {
          "alg" : "SHA3-256",
          "content" : "8a9bde99e2876e545b7fbc0400a9980381162b7a51596132cff27d49caff7e55"
        },
        {
          "alg" : "SHA3-512",
          "content" : "9109ab1275822d476cb5dcde1d329625be51953ef07af0b586cac9040221a1cd65bcb98f7aa02d7b07372676960697ccb04f751c31150ba9b6b8b0e5e5b6b4a9"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.flink/flink-shaded-netty@4.1.91.Final-17.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://flink.apache.org/flink-shaded-netty"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink-shaded/flink-shaded-netty"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.flink/flink-shaded-netty@4.1.91.Final-17.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.flink",
      "name" : "flink-shaded-guava",
      "version" : "31.1-jre-17.0",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "b8c5129f4164f8ee2086854bdb289690"
        },
        {
          "alg" : "SHA-1",
          "content" : "00fa393c1db1308f4fb920f010f79c4c774e2f39"
        },
        {
          "alg" : "SHA-256",
          "content" : "03442ae97c4ca34388568cbce0e67e9911b0137b2b3849dff7a550008d5a4336"
        },
        {
          "alg" : "SHA-512",
          "content" : "15bb65f24054768915fbc29a95dfa93307b0babc39a02a204ae65eff44f259357b471fef9967b864b7a78e07d266933ce8e3eda8a866fcc73643cc38bcc5653f"
        },
        {
          "alg" : "SHA-384",
          "content" : "c8e6f2630c0824bbd1902a25884f09c076efbbbe0265f5d3fb49370affcff81ee5dd8b7887ba4bf063915446b937117a"
        },
        {
          "alg" : "SHA3-384",
          "content" : "a2ffbdbcfb8be61c43891fa19275a765b71e6830b110fa9ab77d46ac35527d2be0943d895767a70591895916963048c6"
        },
        {
          "alg" : "SHA3-256",
          "content" : "5a73e8e370e9bb3d634495dade320f0b569f4ed307fc147cb8f3af547bb6b057"
        },
        {
          "alg" : "SHA3-512",
          "content" : "abd1618c0568eee546f5b32314085bef40f8de74ffa5e52f0aa7a5bed82713142af8a1bdaf79f18e2210b79f8c3592276c54b2356594d19d8f56185ec9a457d5"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.flink/flink-shaded-guava@31.1-jre-17.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://flink.apache.org/flink-shaded-guava"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink-shaded/flink-shaded-guava"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.flink/flink-shaded-guava@31.1-jre-17.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.flink",
      "name" : "flink-shaded-jackson",
      "version" : "2.14.2-17.0",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "492259ac7642687cc959257a5512542f"
        },
        {
          "alg" : "SHA-1",
          "content" : "689daca4a6fc14e361831e15abd96283166d0f62"
        },
        {
          "alg" : "SHA-256",
          "content" : "37e87311498ae8da80adb2aa09ab6e9739d8611e09868e7220822206c739231e"
        },
        {
          "alg" : "SHA-512",
          "content" : "3f4434cf93f2cd12b686aa84c4b1910d7e0191b2ddad7ba8de6d2c3805d3b49afcf5da06e1052faf01b6cb0dda554594f78e39db69d83208119c1f4f2cd5dc8f"
        },
        {
          "alg" : "SHA-384",
          "content" : "9e689ab8b7e7f7db269fd5b1b0fc1dc5f13fed06b283c9b8ceec5c500fc9f6a4200674eef2bb884a9e67133de32e9a77"
        },
        {
          "alg" : "SHA3-384",
          "content" : "a67fd2fe9cfd6e8ef51ab3c0217fcaf0a9420178a8c4025770b86d6b590db65c8bb4d96acf05b4212d2661073e4409cc"
        },
        {
          "alg" : "SHA3-256",
          "content" : "e47b2c93363ff5d65ae47d619f3caa605b5d996e4e765811b4b7117f1c58c90e"
        },
        {
          "alg" : "SHA3-512",
          "content" : "af2b026aebfa279ca42602c04a8db054a12c9f39c5640a0e7804cfa5d06124a52099aea56e9dfc25d018da9baa742b274c5914aa98814dbdd0e9c5ebfa7035b6"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.flink/flink-shaded-jackson@2.14.2-17.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://flink.apache.org/flink-shaded-jackson-parent/flink-shaded-jackson"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink-shaded/flink-shaded-jackson-parent/flink-shaded-jackson"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.flink/flink-shaded-jackson@2.14.2-17.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.flink",
      "name" : "flink-shaded-zookeeper-3",
      "version" : "3.7.1-17.0",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "a2737bcfc729e776a7d4dd3a13067999"
        },
        {
          "alg" : "SHA-1",
          "content" : "6206880a4f471a7f560fa824d1ad8b0596d7e59c"
        },
        {
          "alg" : "SHA-256",
          "content" : "e91cb263c67631a27e7a6cee147b75a9a638f3c52fcd053106fc4584feb6e585"
        },
        {
          "alg" : "SHA-512",
          "content" : "62cba94bbd87bd678f6cbbee07168dba3f2d1bac21371c4b5c1d035ef2596711bc46b1a273f4b89fe8110b2b855dc425614ca42fc866340a9edb89226f093c6a"
        },
        {
          "alg" : "SHA-384",
          "content" : "ee4a3d27059c35a13559599d5b00267b9db9514ea4c04b2b3432ade93d71fe4d8510fe2c3416fac2dada3b218019e454"
        },
        {
          "alg" : "SHA3-384",
          "content" : "501df884bf117eb9f420d9ccf92ccbae8d1833d1bb52314ff21bbcc99d9c262eb99b5941ed5da2aabdd1ee953a1320e1"
        },
        {
          "alg" : "SHA3-256",
          "content" : "8ba0e15658af1b2451f6e180ab4778930cf0a30ca4fe0b5a9156eac095118f1f"
        },
        {
          "alg" : "SHA3-512",
          "content" : "c604d9a6a533e806ed3779c328326ce0935c9e8d2f30922289755d35e91e5fe7152a7f1a29b082442e625a35f1217f6bb38021a94dec1c23818715653cef00ef"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.flink/flink-shaded-zookeeper-3@3.7.1-17.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://flink.apache.org/flink-shaded-zookeeper-parent/flink-shaded-zookeeper-3"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink-shaded/flink-shaded-zookeeper-parent/flink-shaded-zookeeper-3"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.flink/flink-shaded-zookeeper-3@3.7.1-17.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-lang3",
      "version" : "3.12.0",
      "description" : "Apache Commons Lang, a package of Java utility classes for the classes that are in java.lang's hierarchy, or are considered to be so standard as to justify existence in java.lang.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "19fe50567358922bdad277959ea69545"
        },
        {
          "alg" : "SHA-1",
          "content" : "c6842c86792ff03b9f1d1fe2aab8dc23aa6c6f0e"
        },
        {
          "alg" : "SHA-256",
          "content" : "d919d904486c037f8d193412da0c92e22a9fa24230b9d67a57855c5c31c7e94e"
        },
        {
          "alg" : "SHA-512",
          "content" : "fbdbc0943cb3498b0148e86a39b773f97c8e6013740f72dbc727faeabea402073e2cc8c4d68198e5fc6b08a13b7700236292e99d4785f2c9989f2e5fac11fd81"
        },
        {
          "alg" : "SHA-384",
          "content" : "c34b8a0e0eba2168ad56fedeb7a1d710b6f1d3f1ce6aae99a4e0247bd120efbbadc8dcb2f731045b8a16e3efd30604dc"
        },
        {
          "alg" : "SHA3-384",
          "content" : "8ad6ebe7754bf0caa8cda7e59c0e95360d76e06a7ad6aeec5637985519dbd1dd06e7eed04711039f36ec4c49de280def"
        },
        {
          "alg" : "SHA3-256",
          "content" : "18ef639b2aeeb5aedffb18dbf20c79f33e300d99fb31b131689639cc470e6e4c"
        },
        {
          "alg" : "SHA3-512",
          "content" : "fbea96114dcf4f31cfaaa99987be756ddda3a6c74f8c835461997df794d54b92da1f60fe5c3f1f2a43cb8c5f5db7f4048bef77c70993673c7a93f3660fffc8da"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-lang/"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/LANG"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-lang.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-text",
      "version" : "1.10.0",
      "description" : "Apache Commons Text is a library focused on algorithms working on strings.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "4afc9bfa2d31dbf7330c98fcc954b892"
        },
        {
          "alg" : "SHA-1",
          "content" : "3363381aef8cef2dbc1023b3e3a9433b08b64e01"
        },
        {
          "alg" : "SHA-256",
          "content" : "770cd903fa7b604d1f7ef7ba17f84108667294b2b478be8ed1af3bffb4ae0018"
        },
        {
          "alg" : "SHA-512",
          "content" : "afd836a1094449e0a791fee67363666c47b6d24acff353a5089b837b332c0f4af89565c354682521e37062d20e6b52d70c77bb4f24cca9b9532c274fc708a831"
        },
        {
          "alg" : "SHA-384",
          "content" : "06c56e6e513dd77cf10d0da46cdea08c34e220e81fa024735b668c6650df4234e564fe865ff5cafea963f56b1e8ffd4a"
        },
        {
          "alg" : "SHA3-384",
          "content" : "f09065ed066c25debf8c78cbb0bcc738e1ea283302ec992dcfb649acb90091cff879465c65a162e94534d454e3b4e9bb"
        },
        {
          "alg" : "SHA3-256",
          "content" : "0b59c567164bb755f2353b78ba66744000a8c4b35e1df05255b080a21c3a3dd5"
        },
        {
          "alg" : "SHA3-512",
          "content" : "f0fbce02a862b70f472a27d0722c54ac111ca2eb94584b8b0b73d1926aec26047cd92542ad0b3cf980a6825077587f41b194aa93d6f6350d1b87e59e8df1be7c"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-text"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-parent/actions"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/TEXT"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-text.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-cli",
      "name" : "commons-cli",
      "version" : "1.5.0",
      "description" : "Apache Commons CLI provides a simple API for presenting, processing and validating a Command Line Interface.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "6c3b2052160144196118b1f019504388"
        },
        {
          "alg" : "SHA-1",
          "content" : "dc98be5d5390230684a092589d70ea76a147925c"
        },
        {
          "alg" : "SHA-256",
          "content" : "bc8bb01fc0fad250385706e20f927ddcff6173f6339b387dc879237752567ac6"
        },
        {
          "alg" : "SHA-512",
          "content" : "b78ac2b418e9e9e7d0bc866664577199d320408a6f03151b3789bac365c986dd526df853599e633d7e50fe136cbf3eb9ce50c9cfa0ad38c3cc8d8ee416f61c40"
        },
        {
          "alg" : "SHA-384",
          "content" : "a7a2daa807c4007c506b5100f0a9b526c0052c4e1f6b699904ef9d2aba8195b6003dc4d47ca133b15e2f3e830bdbe6c4"
        },
        {
          "alg" : "SHA3-384",
          "content" : "44ca97514a2e34b5bf3de9b5d45c8e871f6eee517db7f3c4b4476eb3e8dfe9a9d8760f3181114708288c373727b42475"
        },
        {
          "alg" : "SHA3-256",
          "content" : "a0a47001d3a293f129ffc21f17f575a9d23ce5b88b440e651e4cd01edd0cc421"
        },
        {
          "alg" : "SHA3-512",
          "content" : "483dae23d6827a105d17847c8c813527f19042b65c4d09635dfc4bfd25990fe3ba2a997540460fd5b1d72ca3add9a38ca8b32004680764db972a9bb62f7f68d8"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-cli/commons-cli@1.5.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-cli/"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/CLI"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-cli.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-cli/commons-cli@1.5.0?type=jar"
    },
    {
      "publisher" : "Shigeru Chiba, www.javassist.org",
      "group" : "org.javassist",
      "name" : "javassist",
      "version" : "3.24.0-GA",
      "description" : "Javassist (JAVA programming ASSISTant) makes Java bytecode manipulation simple. It is a class library for editing bytecodes in Java.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "23fd22d0d089ddfac567a39ce0cb1a91"
        },
        {
          "alg" : "SHA-1",
          "content" : "d7466fc2e3af7c023e95c510f06448ad29b225b3"
        },
        {
          "alg" : "SHA-256",
          "content" : "aba81efa678b621203fb89aeff81d6f126f7a9dd709401e5609c42976684ae23"
        },
        {
          "alg" : "SHA-512",
          "content" : "e57dad74a3edef837ece841d06e4a7c96ffecab8fbcba56fe5f7eccd662f0c0d757880a6073793a8c75ad7a0a1d146346b75cdbfe4fd8a271048a54446e5d1a2"
        },
        {
          "alg" : "SHA-384",
          "content" : "4867afdb7522b3dbfa10a51264ac6c15a2a8083d16c8dbef318275d24687768f35130b1c17d8407ca8ecf855abd83dff"
        },
        {
          "alg" : "SHA3-384",
          "content" : "a52be891987d4fc7d319e6417e0cd9a28f189d8623b803d72b5429e118da73b9937899231825e793d37b434d7522d283"
        },
        {
          "alg" : "SHA3-256",
          "content" : "0cf8db7d2a5f7e1a70827538cb4b0b446fcc239f05ca55d9bf8f2a50f1e08af3"
        },
        {
          "alg" : "SHA3-512",
          "content" : "ed9675f9f070203801eb762092ac99636d376b7ef563f99508283006a65a0d2dfce38e1ba7ff2ccfebcede0376ba0724b76b459ca112477234aed8208807f785"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MPL-1.1"
          }
        },
        {
          "license" : {
            "id" : "LGPL-2.1-only"
          }
        },
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.javassist/javassist@3.24.0-GA?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.javassist.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.jboss.org/nexus/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://jira.jboss.org/jira/browse/JASSIST/"
        },
        {
          "type" : "vcs",
          "url" : "scm:git:git@github.com:jboss-javassist/javassist.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.javassist/javassist@3.24.0-GA?type=jar"
    },
    {
      "publisher" : "xerial.org",
      "group" : "org.xerial.snappy",
      "name" : "snappy-java",
      "version" : "1.1.10.4",
      "description" : "snappy-java: A fast compression/decompression library",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "d1d3b91e925c46a1a0f68b87298bafe8"
        },
        {
          "alg" : "SHA-1",
          "content" : "50d0390056017158bdc75c063efd5c2a898d5f0c"
        },
        {
          "alg" : "SHA-256",
          "content" : "55b30c94e5c4cc2d4b6976916098d0678a8a6cc7427fa8c875621bd94e731ac8"
        },
        {
          "alg" : "SHA-512",
          "content" : "9e52bad4eaa0d0a2e0083cdd3433d84c4bb44c4d3f0314a48c3d6eacbb64d0f4fb2d71197944115618a598eb4a4941c13af2a9ec676b003fb3462ddac58bbe41"
        },
        {
          "alg" : "SHA-384",
          "content" : "9539e8eb2dea244f07a7216db38970e3f336b5dc9d132cbe54e201c818dba3e02a1fc467b4529a18eca7127f86d742dd"
        },
        {
          "alg" : "SHA3-384",
          "content" : "d5d5ef5d8b050f200ae29855a4b6f5e278215d0a97a69d3653dc1aa716f9847b3c305312a3c994d46721615ba02fc7c8"
        },
        {
          "alg" : "SHA3-256",
          "content" : "bbbb3ff43a24094bf2c77dd8c8f94b06d62d158da0d2c3399de3a2993df9986e"
        },
        {
          "alg" : "SHA3-512",
          "content" : "de2aa7e7fada466f24ccda07123e2877446733dd48e4b914d25b0d296f677e17a24f182a0e9216e77b261143b774ccaadcfd2854dde1bf36cb2c6db6cdf78b3c"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.xerial.snappy/snappy-java@1.1.10.4?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/xerial/snappy-java"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/xerial/snappy-java"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.xerial.snappy/snappy-java@1.1.10.4?type=jar"
    },
    {
      "group" : "tools.profiler",
      "name" : "async-profiler",
      "version" : "2.9",
      "description" : "Low overhead sampling profiler for Java",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "4df6477a255b88e99f2ed4daa3c713cc"
        },
        {
          "alg" : "SHA-1",
          "content" : "4ed20e2a4640ee672e7cf23b1512dbdeb9a4b7e6"
        },
        {
          "alg" : "SHA-256",
          "content" : "6c4e993c28cf2882964cac82a0f96e81a325840043884526565017b2f62c5ba4"
        },
        {
          "alg" : "SHA-512",
          "content" : "60ba593a0cf529397e73e38ef71bc2e5def44f1111a60f40a724ac3472ef7afe92e02a61b0ad18c373122cd92216f49268d335e1150dc3a99ff2431c598aeb5c"
        },
        {
          "alg" : "SHA-384",
          "content" : "65107ddcd2a06b69ac4cdb9bd93452045c4e08b843826666a890816abe0486966599cf6a4b07ff87c5d95e86551bb115"
        },
        {
          "alg" : "SHA3-384",
          "content" : "4989b467a4791464d50c51782ccc60547bfc8105aebc0764656c67405bbd7d023a9d405a1fd864f86dbd186af8624928"
        },
        {
          "alg" : "SHA3-256",
          "content" : "225998977421a87839be6c09f49f9ebd972b063a65f53d374e61fc3d68416ca4"
        },
        {
          "alg" : "SHA3-512",
          "content" : "723c0651f61ae6a119624b11bc9d3959ae44de0bcef51f0a341c5d7ebdc6a0e677f3c43399db9a4a657334f46a1092ee55d45f92344b7e31e6e26669ffe41823"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/tools.profiler/async-profiler@2.9?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://profiler.tools"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/jvm-profiling-tools/async-profiler"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/tools.profiler/async-profiler@2.9?type=jar"
    },
    {
      "group" : "org.lz4",
      "name" : "lz4-java",
      "version" : "1.8.0",
      "description" : "Java ports and bindings of the LZ4 compression algorithm and the xxHash hashing algorithm",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "936a927700aa8fc3b75d21d7571171f6"
        },
        {
          "alg" : "SHA-1",
          "content" : "4b986a99445e49ea5fbf5d149c4b63f6ed6c6780"
        },
        {
          "alg" : "SHA-256",
          "content" : "d74a3334fb35195009b338a951f918203d6bbca3d1d359033dc33edd1cadc9ef"
        },
        {
          "alg" : "SHA-512",
          "content" : "98d59086a6021ca571d9c1d64b715e43044c730e1ac563f514c40cf44302615d30378b6d5cc69990446522de6260dc8e7b303e3990a3139dc326d058dfb6dbd9"
        },
        {
          "alg" : "SHA-384",
          "content" : "8e3f2acdbb41a00c4d9cc5f328e63fb626ac7c6c84e1bf9502e2fcc76a591b2b819b2d27b29925ff986b95c297b30e2c"
        },
        {
          "alg" : "SHA3-384",
          "content" : "ec0d6a00760d0a4ecba13a41785d6ae57a64552b1687eaa3e292b3054bb1348e49ab8a938197ff126f9218c6cb96ee1c"
        },
        {
          "alg" : "SHA3-256",
          "content" : "7be684c102891105f66d378b61ea1297a392c1618b5aebf7e0b281f55217c206"
        },
        {
          "alg" : "SHA3-512",
          "content" : "0b2294570ea2bfbb50ced21dfa4bad956467ca447e9ab2dd602a3478371bcd0e9f13d2dff74d06827a28882409612cdde00bd91267be05bd3510c68268bf3166"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.lz4/lz4-java@1.8.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/lz4/lz4-java"
        },
        {
          "type" : "vcs",
          "url" : "git://github.com/lz4/lz4-java.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.lz4/lz4-java@1.8.0?type=jar"
    },
    {
      "group" : "io.confluent.flink",
      "name" : "flink-runtime",
      "version" : "1.19.2-cp2",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "0088f3b0f7e0c0d73dee2d1a02b87703"
        },
        {
          "alg" : "SHA-1",
          "content" : "395f6fb8595cfcd00a159c1b1496b09918a81dca"
        },
        {
          "alg" : "SHA-256",
          "content" : "ba410c814e2e7e02b45cc1b4008848af1f7b8cae422220ecb7afb808bc160b82"
        },
        {
          "alg" : "SHA-512",
          "content" : "7da51032dd9c0f3e45cc9c54321b84729a35c846f13156032a904e2f9fcf30aac07ccef052efa4ebf690ecefd2c65a5f1750dd275f6198dca189b725245bfd66"
        },
        {
          "alg" : "SHA-384",
          "content" : "8f4d8d1fd586f39c5526b2216c7fab865723ebb1d5b3bd39a59f5297de77490a06ad8aa0f72eaaa5bbc2ff4dfce23e7c"
        },
        {
          "alg" : "SHA3-384",
          "content" : "19d86a3e9bfe9ce7f6f6a82ff009e61c05ceb10339749cb9f26cd6b1b7b73a891878006949ba08f419ab89befa5dcab4"
        },
        {
          "alg" : "SHA3-256",
          "content" : "b7e8a356dfb9f3be2df9d79b1ecfb0154996a8b71a41371f67142124d4d669d1"
        },
        {
          "alg" : "SHA3-512",
          "content" : "9abc0ba37bb3e1923019278958e9581b0697cb6eb475322f949c039642a7ded7c407fb486a2159d7454c4279c1bef40f1b9a77e538c65659badd164672f9be42"
        }
      ],
      "purl" : "pkg:maven/io.confluent.flink/flink-runtime@1.19.2-cp2?classifier=tests&type=test-jar",
      "type" : "library",
      "bom-ref" : "pkg:maven/io.confluent.flink/flink-runtime@1.19.2-cp2?classifier=tests&type=test-jar"
    },
    {
      "group" : "io.confluent.flink",
      "name" : "flink-core",
      "version" : "1.19.2-cp2",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "d6ec64b7ef168b9a3e0de8717bda248d"
        },
        {
          "alg" : "SHA-1",
          "content" : "c168215bc560ae088d971553acbc3b69602f5384"
        },
        {
          "alg" : "SHA-256",
          "content" : "3b0119e5d122e527294e4b3226687ddfc14d55394792141013a82decc65a8415"
        },
        {
          "alg" : "SHA-512",
          "content" : "68d829c6f9b376fbf4eaed8d2b638c04990b2399b37d35b58c74b594bc70e35b1b96bc87a65530909f6722ab1df92be193e03f439ce70da7067e8396f07eed5c"
        },
        {
          "alg" : "SHA-384",
          "content" : "4d8512b518d1eb34bf62c50e0e857ec68c683fd26e549019694da20a66da71b1de88e64eb68f033c3835a69251baca31"
        },
        {
          "alg" : "SHA3-384",
          "content" : "4c7a6ac7d03aedd24ef817f8e7b208e6c0e4a2bf97726951eef63009d2a7cef73333e5d626019add6eeeb01df49e3617"
        },
        {
          "alg" : "SHA3-256",
          "content" : "328f45686f1e1b5e8dc7afabf2fbb4a386abcf94645a663cf9bb01072193f606"
        },
        {
          "alg" : "SHA3-512",
          "content" : "e2006ee3daccfee505ee4f0bcfbd0eb69b286c92ba41c3d674949def652c76f0d81cc54fe7685d15349a162aabb654f716622acc28f3f7c15588ede8b5779ff6"
        }
      ],
      "purl" : "pkg:maven/io.confluent.flink/flink-core@1.19.2-cp2?classifier=tests&type=test-jar",
      "type" : "library",
      "bom-ref" : "pkg:maven/io.confluent.flink/flink-core@1.19.2-cp2?classifier=tests&type=test-jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "io.confluent.flink",
      "name" : "flink-annotations",
      "version" : "1.19.2-cp2",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "da359822fc8733286c9bbf4d16dd5293"
        },
        {
          "alg" : "SHA-1",
          "content" : "a889d438d12b954df02c5e777f11e2af28c2b08c"
        },
        {
          "alg" : "SHA-256",
          "content" : "536b55b5bef646e0014b1ff65cc82a6967b33a03885ff21ddbe60629a6466e6d"
        },
        {
          "alg" : "SHA-512",
          "content" : "c926fbfa229d13390a87f2a70db9fee3a3a53f999a521fb3e239e9cdf4646468b66ea9912c6c90d22c391f1e3b8d514ec91d4093ea8d5159222e5403df61b949"
        },
        {
          "alg" : "SHA-384",
          "content" : "0715267131e5138cc8b218bec33ca3607b202a4b3ace620b09c667610cd5d2b34183487df639490c904fa3b91d075c50"
        },
        {
          "alg" : "SHA3-384",
          "content" : "7b3bdd0440f45ebb86889f49820cfac75b82673312adcfac9ea06dd29ec9088bf89b1b318f69077f128bbe69ce8197c7"
        },
        {
          "alg" : "SHA3-256",
          "content" : "031afd88ab29c01b099237be1ed2063b575e8bccfe5887cdac52ec692970742c"
        },
        {
          "alg" : "SHA3-512",
          "content" : "422e502e6502ba2f5534991849076e83e1320d1341392ecdd0b7419c7aea77752cb6bc93633aa4c2b5db2862e95c5b3b5495f5875b227fdf99333c11600eece8"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.confluent.flink/flink-annotations@1.19.2-cp2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://flink.apache.org/flink-annotations"
        },
        {
          "type" : "distribution",
          "url" : "s3://cp-flink-staging-654654529379-us-west-2/maven-staging/e376491b71b31739887d29e34e6552860f69668d"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink/flink-annotations"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.confluent.flink/flink-annotations@1.19.2-cp2?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "io.confluent.flink",
      "name" : "flink-metrics-core",
      "version" : "1.19.2-cp2",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "173ffb6346116e700288337e8e7409fe"
        },
        {
          "alg" : "SHA-1",
          "content" : "e0a2e3d0d93710e7f518e131c46d39d03c160f19"
        },
        {
          "alg" : "SHA-256",
          "content" : "fcc9ce6b456cfa2ed93dfbf4c66369a2f4143ee6da2b16c03c23881b238b4fdc"
        },
        {
          "alg" : "SHA-512",
          "content" : "79a0341fdcfb20dc7d00c4397c4c266c2dcbd688b7272a6b3aacf2eeb4e88f5b47210d5b3d543bc343e4b8ef7ef005518ba4e632c98713176035c2aa413d83ab"
        },
        {
          "alg" : "SHA-384",
          "content" : "4b9b6fbf563acc9c93cb897f4da9d4336c8f75920a7972c34da8ec103c75b49208e9287263c92d5d976e9c69d3718df2"
        },
        {
          "alg" : "SHA3-384",
          "content" : "5e0b837b44eb6c69d06681b031486a2934f7cbb2c5ec6ccc985875d5b566c2393a149dc89aba180e5967f4d0b05c4df4"
        },
        {
          "alg" : "SHA3-256",
          "content" : "d3a8ef2e222fe991f1a9b864cbf36a72a0c7b59b1103b1de5af1e3dc720b394d"
        },
        {
          "alg" : "SHA3-512",
          "content" : "f08e349a2eda8e3597272637840dc89f817841f946aee75219ff1d1c89d0e10d929c10d1ab3733f80a36924c21f195e8e75c168801bdde11a092aef6266af813"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.confluent.flink/flink-metrics-core@1.19.2-cp2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://flink.apache.org/flink-metrics/flink-metrics-core"
        },
        {
          "type" : "distribution",
          "url" : "s3://cp-flink-staging-654654529379-us-west-2/maven-staging/e376491b71b31739887d29e34e6552860f69668d"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink/flink-metrics/flink-metrics-core"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.confluent.flink/flink-metrics-core@1.19.2-cp2?type=jar"
    },
    {
      "group" : "org.snakeyaml",
      "name" : "snakeyaml-engine",
      "version" : "2.6",
      "description" : "Core YAML 1.2 parser and emitter for Java",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "719bcfb9f917992d0a99a6f7106d8466"
        },
        {
          "alg" : "SHA-1",
          "content" : "235a7e571b33eda1a81e0f73a3173ef95dd020e5"
        },
        {
          "alg" : "SHA-256",
          "content" : "2652199af40c9aa2f1782400d2dfbbf4e5226208c4e05ddd4059c3d6d9cd1505"
        },
        {
          "alg" : "SHA-512",
          "content" : "c3b5e87ce323b37bcd9e65d060157ebb26d116b5dac30c6eaa185b30aa24c0be8dfd0ad604a9a12ce7010acadee54a9cea9f065cd2f434eeaed7bccce2e14a7d"
        },
        {
          "alg" : "SHA-384",
          "content" : "edfc3c9a95cc2fa524a322f20ec034ec16b3fad950a58bfd1ed774eaaab946304cddc5e9ea4e117a899ec568ba7fa620"
        },
        {
          "alg" : "SHA3-384",
          "content" : "63b9e0ed448431a1d4b34a4b0b97b65c2c7be6ef46f1ce3b10191373e3339422f9c06bc846ae861a982c3c3618abd9c6"
        },
        {
          "alg" : "SHA3-256",
          "content" : "19ce75167267903be79122e149ede2916c3e07bab0658db21ab40864e8c920cd"
        },
        {
          "alg" : "SHA3-512",
          "content" : "7777f37097a6951dafe18fb038d087e7fe0924bfb2a10c66a76a57d95aa65341d4b674c6ff1d9d453c436ffcb50e281c2bedc854ce687fefc30c9595b7352c8a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.snakeyaml/snakeyaml-engine@2.6?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://bitbucket.org/snakeyaml/snakeyaml-engine"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://bitbucket.org/snakeyaml/snakeyaml-engine/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://bitbucket.org/snakeyaml/snakeyaml-engine/src"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.snakeyaml/snakeyaml-engine@2.6?type=jar"
    },
    {
      "group" : "com.esotericsoftware.kryo",
      "name" : "kryo",
      "version" : "2.24.0",
      "description" : "Fast, efficient Java serialization",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "6cf0fa5b5d4f6b8226fd4a4bfb7532b8"
        },
        {
          "alg" : "SHA-1",
          "content" : "0c6b206e80cfd97e66a1364003724491c757b92f"
        },
        {
          "alg" : "SHA-256",
          "content" : "7e56b32c635058f9aa2820f88919ab702d029cbcd15285da9992e36cc0ae52f2"
        },
        {
          "alg" : "SHA-512",
          "content" : "a4c6ce768528a03c219cc6a41b22293f78e433c849c90391b64dda3f2376fd79951a89c5f4e6701bcbcb6eee9abffe2390cfb12dba3b885e4a3d411a26b78f40"
        },
        {
          "alg" : "SHA-384",
          "content" : "678ad1b7f4d99910b8ff44a6c8f78ccae91f823161ce23de39077397352919b7257e1e6e0dea90900be973291ea19282"
        },
        {
          "alg" : "SHA3-384",
          "content" : "671fc6aa9905f8131482e1d0f3fe26126562b13777893d51a66d0f84fc6f2aa3f13947e488ffba8f09c31a2cc0e9758a"
        },
        {
          "alg" : "SHA3-256",
          "content" : "46e89d8f12cbead0fe29ad707d5dba96e880dacce2a6b374ac4bf1ced9f36a79"
        },
        {
          "alg" : "SHA3-512",
          "content" : "c7cde437eef8343eccd4c5ecb8de5683529e3d4d8262e8cd1f7b7d0df9c632253b979737fd1b486314ec2728aee3a3782dee5d2032621485db4aa3b2a8262741"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/com.esotericsoftware.kryo/kryo@2.24.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/EsotericSoftware/kryo"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/EsotericSoftware/kryo"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.esotericsoftware.kryo/kryo@2.24.0?type=jar"
    },
    {
      "group" : "com.esotericsoftware.minlog",
      "name" : "minlog",
      "version" : "1.2",
      "description" : "Minimal overhead Java logging",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f7cfbdf63b67df0bbfa4c7cb260885bc"
        },
        {
          "alg" : "SHA-1",
          "content" : "59bfcd171d82f9981a5e242b9e840191f650e209"
        },
        {
          "alg" : "SHA-256",
          "content" : "a678cb1aa8f5d03d901c992c75741841d98a9bc3d55dad02e84d65315c4e60f2"
        },
        {
          "alg" : "SHA-512",
          "content" : "7b4082766ad740d86708783f3b08780ed72dd18062aa9ba422c4b9016b332d2334ae511f50ef7d89e4eedbdac5cebc51ab6ddaf4d1eea857a3250eb5962f0d08"
        },
        {
          "alg" : "SHA-384",
          "content" : "932a282a9c06864001f8212199e4be05543609adbd985c5f4517ee6eba734acd3fd8812213bc0c98af264637cbf9c78d"
        },
        {
          "alg" : "SHA3-384",
          "content" : "f36e9f494611c85f59febfef9ce93fc68f1f17db881400456204c1f099e623e334d2f10b41018392877c8af13de7f59a"
        },
        {
          "alg" : "SHA3-256",
          "content" : "37422ef85dce86abd8b14b4c9f7ad77261d728a472126c8eca38f356c98da395"
        },
        {
          "alg" : "SHA3-512",
          "content" : "74ba47271899706a284e942482ff41649ffd93e57a29320732e57864c47f3f0431377130ca7afb5e64cc6b68d4e5a5cdfc38027966cda4b5e512e3ce02bd8a99"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/com.esotericsoftware.minlog/minlog@1.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://code.google.com/p/minlog/"
        },
        {
          "type" : "vcs",
          "url" : "http://minlog.googlecode.com/svn/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.esotericsoftware.minlog/minlog@1.2?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-collections",
      "name" : "commons-collections",
      "version" : "3.2.2",
      "description" : "Types that extend and augment the Java Collections Framework.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f54a8510f834a1a57166970bfc982e94"
        },
        {
          "alg" : "SHA-1",
          "content" : "8ad72fe39fa8c91eaaf12aadb21e0c3661fe26d5"
        },
        {
          "alg" : "SHA-256",
          "content" : "eeeae917917144a68a741d4c0dff66aa5c5c5fd85593ff217bced3fc8ca783b8"
        },
        {
          "alg" : "SHA-512",
          "content" : "51c72f9aca7726f3c387095e66be85a6df97c74b00a25434b89188c1b8eab6e2b55accf7b9bd412430d22bd09324dec076e300b3d1fa39fccad471f0f2a3da16"
        },
        {
          "alg" : "SHA-384",
          "content" : "dd4e99b3314bd3c1a1ee26296615d9e44dadf7a1f8a7bbba44fb95121803d331e36d4cca4260e7609af78a47ba3e4073"
        },
        {
          "alg" : "SHA3-384",
          "content" : "8ce03528e4a6e95c44283b56eca87e6a6d3bf1363411a55b538f4f9110cf7470581ea5c73925e877ddab08dba0603f40"
        },
        {
          "alg" : "SHA3-256",
          "content" : "fd3d6134b5f07077b82ccf93d148dacf7c4ce5c971209510edd0e77e3e38c19e"
        },
        {
          "alg" : "SHA3-512",
          "content" : "c2a523916fb7c7d55a05d5e3d9e9b33000733f4b20a71be174e4e093e3f06ea78ad831edd1505527da7388105f8647efb7d5666ba852c90b4e2d5bb74256efbc"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-collections/commons-collections@3.2.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://commons.apache.org/collections/"
        },
        {
          "type" : "build-system",
          "url" : "https://continuum-ci.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/COLLECTIONS"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/viewvc/commons/proper/collections/trunk"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-collections/commons-collections@3.2.2?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-compress",
      "version" : "1.26.0",
      "description" : "Apache Commons Compress defines an API for working with compression and archive formats. These include bzip2, gzip, pack200, LZMA, XZ, Snappy, traditional Unix Compress, DEFLATE, DEFLATE64, LZ4, Brotli, Zstandard and ar, cpio, jar, tar, zip, dump, 7z, arj.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "cbc0bb8eca12b747ca21bf998d736e60"
        },
        {
          "alg" : "SHA-1",
          "content" : "659feffdd12280201c8aacb8f7be94f9a883c824"
        },
        {
          "alg" : "SHA-256",
          "content" : "051aceb8bbcc62d0f5b2b8ac72c53767f9c59bfbd050151e65bef6f51c8ed9c9"
        },
        {
          "alg" : "SHA-512",
          "content" : "acbeaa2909b809cd561e7156df18340d96abacb179325622d73bdd6b82cb9b387d6fcb1a44d8195aad4e786da299289e17598a1d337b7c7d1c0bc610cc128714"
        },
        {
          "alg" : "SHA-384",
          "content" : "052d4d0cd1929c4299dd9d37dd36eaea6ed2be6b04d6d83a94f8608a6d1138aa81f7a34f25113ac267e7ba25ce948c9a"
        },
        {
          "alg" : "SHA3-384",
          "content" : "8b0bf441e8ce793fb6513bc07551cc48ab4507696c18e6037b0fcf35bc4e1eb3e44ed962e2d3765c86d4d912770aa53e"
        },
        {
          "alg" : "SHA3-256",
          "content" : "e441768e06092053f4703844ec0c8f2b437e06e7c190d48fec9d7682beb94c40"
        },
        {
          "alg" : "SHA3-512",
          "content" : "5984f9f08f83789555677f6800f25fa8e80a9eb2e4d46b5fb117b8efc24753644fa103a2f6b619827661a41677991bc827965172ef25f1313d8a59154e615e8d"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-compress@1.26.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-compress/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-parent/actions"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/COMPRESS"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-compress.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-compress@1.26.0?type=jar"
    },
    {
      "group" : "io.confluent.flink",
      "name" : "flink-rpc-akka-loader",
      "version" : "1.19.2-cp2",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "08321602248c03bd531b1d5886389c20"
        },
        {
          "alg" : "SHA-1",
          "content" : "ead953cf4f11fcebbc6e656c147959c42cc2de82"
        },
        {
          "alg" : "SHA-256",
          "content" : "4f048817182293e5f01595190c92fc80d4c29fed86d8e4e02785e78b0f3839eb"
        },
        {
          "alg" : "SHA-512",
          "content" : "01f22ddfca2780288b9f9ea4ddcf7b6859a8578dfaf1b1b259ae014855cfcea73161a206c84b84b5e47489212bcd2717ab0b942c67daa7c5946611f0bcb812c6"
        },
        {
          "alg" : "SHA-384",
          "content" : "7d486cc118282823f114e2339eff721c1ad5979b145f813e346760cb8e7984ca7b6639d44f87f96c60fd84b6a122b4dd"
        },
        {
          "alg" : "SHA3-384",
          "content" : "ee2ce9b8b387fd9e1d7bbc194ee9f57d01390bb7fed00b2fcdca595605441cac62890b5607f5c6e8f7dc608e144d420a"
        },
        {
          "alg" : "SHA3-256",
          "content" : "09323ef1f1cc14d0b0eb37c21538d78a1ba710a87919593704b96ef1c57d2a16"
        },
        {
          "alg" : "SHA3-512",
          "content" : "0009f9f8d85618cd53837312b0793aad9cdc3aca26324359c1a246804da4d614582aa1640b94f1e632b18163362f35d52273db9cdf245b7d42028edcf877a7f8"
        }
      ],
      "purl" : "pkg:maven/io.confluent.flink/flink-rpc-akka-loader@1.19.2-cp2?classifier=tests&type=test-jar",
      "type" : "library",
      "bom-ref" : "pkg:maven/io.confluent.flink/flink-rpc-akka-loader@1.19.2-cp2?classifier=tests&type=test-jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "io.confluent.flink",
      "name" : "flink-clients",
      "version" : "1.19.2-cp2",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "3ea1b494173e7cc468016864e3782b1d"
        },
        {
          "alg" : "SHA-1",
          "content" : "597d0de9b77ee411ccdabb037bf6744ab5399197"
        },
        {
          "alg" : "SHA-256",
          "content" : "7afb5560ae0dd8a7737799d06ab2242ae7ee9c99aebda597259c63c66163f097"
        },
        {
          "alg" : "SHA-512",
          "content" : "68ff2e1f02f5ce2a59206202c2e9bd90bd330557c46cd8fc884fdda439500023a7894391c1e6feffdb099fb77613e80316a31d2a97759103a73709dbc5f29237"
        },
        {
          "alg" : "SHA-384",
          "content" : "b818ab06b75a3f8b66cd0bad27d620f9ccc90582e04ba14b813f08b7fa174d78eca47465586489936fb206f5d0167f26"
        },
        {
          "alg" : "SHA3-384",
          "content" : "87ddcf2c0b2313982a48c90f721a0e09e83003996c3598cf6b2072da4792030b52b100b604747c6b02a1cd842b6d03c7"
        },
        {
          "alg" : "SHA3-256",
          "content" : "f6cb58067d0bf387e0c6b44130a55a2e09ce7fa239ad39e5b3510f01a81f8fda"
        },
        {
          "alg" : "SHA3-512",
          "content" : "bd91238b8ab63c488eb938d91d54e91ecd405dc157f98cf20718527cc456551c87383084c68cb5a1f4a3850dc2e595e2ff4bda5f54da2ffa8f32ef0a2996a6c1"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.confluent.flink/flink-clients@1.19.2-cp2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://flink.apache.org/flink-clients"
        },
        {
          "type" : "distribution",
          "url" : "s3://cp-flink-staging-654654529379-us-west-2/maven-staging/e376491b71b31739887d29e34e6552860f69668d"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink/flink-clients"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.confluent.flink/flink-clients@1.19.2-cp2?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "io.confluent.flink",
      "name" : "flink-optimizer",
      "version" : "1.19.2-cp2",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "8518ff3531eb82c86372d76922d3814f"
        },
        {
          "alg" : "SHA-1",
          "content" : "c26778a58d14ed28a38e0efe580eb899b7c1b676"
        },
        {
          "alg" : "SHA-256",
          "content" : "1cf4369889cfba9bd189f73d02a3434ddd80fd99c439300edfa8f4c0a395130f"
        },
        {
          "alg" : "SHA-512",
          "content" : "cf46aa00a96de747a060137d621943674b67c95b759fb514817c1cafcf406e525bf7660e580bf5026d9412a6db2261fc3d74780d7cdc9e5c730eb7c0173424c8"
        },
        {
          "alg" : "SHA-384",
          "content" : "1d5905203a55358d8e6dbf4511ff5e5e019906dc7632ff13867137ac9e7292e0ae24e5b09bda6b5f15439ffc11ffa139"
        },
        {
          "alg" : "SHA3-384",
          "content" : "ee8f226fabd0b9abbbe03987af99e9c34a0cea182c1853e3451a6814a2d80f0251a69b2015adef0d2cd5d2bc8739883f"
        },
        {
          "alg" : "SHA3-256",
          "content" : "a0df2b50256fd7954d8d7f8102de77bb7f651854681bddaaa19d87b2b9bf74ed"
        },
        {
          "alg" : "SHA3-512",
          "content" : "4b825059b7d04290af60c3071a6ed4e7c5b2de248ffeabfac2369c0b90cf730c5b0d628c14b7f49b4de3895de668f154a99c2ef1ce9195f4b8f51d2974d5459e"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.confluent.flink/flink-optimizer@1.19.2-cp2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://flink.apache.org/flink-optimizer"
        },
        {
          "type" : "distribution",
          "url" : "s3://cp-flink-staging-654654529379-us-west-2/maven-staging/e376491b71b31739887d29e34e6552860f69668d"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink/flink-optimizer"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.confluent.flink/flink-optimizer@1.19.2-cp2?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "io.confluent.flink",
      "name" : "flink-streaming-java",
      "version" : "1.19.2-cp2",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "c58f5fcf96dcec8aa7c8e187227c2be0"
        },
        {
          "alg" : "SHA-1",
          "content" : "c04c407df048e74efb22628a7cf02244c03a209c"
        },
        {
          "alg" : "SHA-256",
          "content" : "7a000114c041ef38b0ead3d53cf91ce2d23ced0e1457d4d88d6dd3d489b2bd6b"
        },
        {
          "alg" : "SHA-512",
          "content" : "8431edbe549c20a469e442b820c375ce5b56cd6bbf83eab977aa4c20b7664c8a936e52a041a2a9ead20839efe7c61193b10464f490726d02fec1488749045c06"
        },
        {
          "alg" : "SHA-384",
          "content" : "7bea67bb9f069e9d3dbfe83c6072ca57128402cc4689417ba2cc089dae9891e7072955695342cd65439d46f673f579bd"
        },
        {
          "alg" : "SHA3-384",
          "content" : "64a15cc2f51173ddf71ddc7808fa572e7a625332e22f78981800284a354c3360d1efc52e4fa6e2bddc91699b3bb1b3f4"
        },
        {
          "alg" : "SHA3-256",
          "content" : "58ef0b9ecc7e2ee3bfe08ea906b0bea0d8471e8f474e345087e39a0e4a317835"
        },
        {
          "alg" : "SHA3-512",
          "content" : "376de8e16a15cbc780ddeea619c44828a766c9afc4f0dd5c143ced0ee2f10d747ef67be8765184645ce5514243ffd32e4af0775640d806cd360f5220e5384188"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.confluent.flink/flink-streaming-java@1.19.2-cp2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://flink.apache.org/flink-streaming-java"
        },
        {
          "type" : "distribution",
          "url" : "s3://cp-flink-staging-654654529379-us-west-2/maven-staging/e376491b71b31739887d29e34e6552860f69668d"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink/flink-streaming-java"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.confluent.flink/flink-streaming-java@1.19.2-cp2?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "io.confluent.flink",
      "name" : "flink-file-sink-common",
      "version" : "1.19.2-cp2",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "5d441c1ca44fa7c3f0df79f9edebe047"
        },
        {
          "alg" : "SHA-1",
          "content" : "d50febbb0717661c8f886226b726b22e9b91effd"
        },
        {
          "alg" : "SHA-256",
          "content" : "bb567e565aa1b887234a6acd10d2e022d6f64d28c711f5a49adc7913475d9f89"
        },
        {
          "alg" : "SHA-512",
          "content" : "285be2bca61b6a37b9617ed50dd761504ef513b57338ed29a6491be76ae6e5035c69b5940b6fe03e21fece31e4db1cd85cf46aede1eae48d4449e9df9875c009"
        },
        {
          "alg" : "SHA-384",
          "content" : "01d19fdea110f5a54d838f61852c49a25aad1bde1a9a28c182c3f61668fa9647a92a028f949242d9dfc60e9241ec3cc7"
        },
        {
          "alg" : "SHA3-384",
          "content" : "559cb106aaf6f37403d8f4c87e2b7257c7610406340d8c70595d063d410a902dc8920457b13c6a1190ac63b1588048d7"
        },
        {
          "alg" : "SHA3-256",
          "content" : "f1068122797471f4caead6d66ca49906b60ce35a502452ef5327a9b9cfdbca47"
        },
        {
          "alg" : "SHA3-512",
          "content" : "124f6a26adedbd2e62d1c7c1a4023413d090e282240e1a158e653913d85722780e31c829d4d349c5badc65afaf6174e72fabb175742f7ad9f4930d56f3170344"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.confluent.flink/flink-file-sink-common@1.19.2-cp2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://flink.apache.org/flink-connectors/flink-file-sink-common"
        },
        {
          "type" : "distribution",
          "url" : "s3://cp-flink-staging-654654529379-us-west-2/maven-staging/e376491b71b31739887d29e34e6552860f69668d"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink/flink-connectors/flink-file-sink-common"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.confluent.flink/flink-file-sink-common@1.19.2-cp2?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-math3",
      "version" : "3.6.1",
      "description" : "The Apache Commons Math project is a library of lightweight, self-contained mathematics and statistics components addressing the most common practical problems not immediately available in the Java programming language or commons-lang.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "5b730d97e4e6368069de1983937c508e"
        },
        {
          "alg" : "SHA-1",
          "content" : "e4ba98f1d4b3c80ec46392f25e094a6a2e58fcbf"
        },
        {
          "alg" : "SHA-256",
          "content" : "1e56d7b058d28b65abd256b8458e3885b674c1d588fa43cd7d1cbb9c7ef2b308"
        },
        {
          "alg" : "SHA-512",
          "content" : "8bc2438b3b4d9a6be4a47a58410b2d4d0e56e05787ab24badab8cbc9075d61857e8d2f0bffedad33f18f8a356541d00f80a8597b5dedb995be8480d693d03226"
        },
        {
          "alg" : "SHA-384",
          "content" : "95d1186d9ca06a3ea2e6437ddec3a55698e2493d3e72f6f554746b74fa929892bd71a2ab501a4e7b1ce56b7cd64e7ab4"
        },
        {
          "alg" : "SHA3-384",
          "content" : "f85bb3e46a00fc4940a3be1331301302b0eb728e2d1fe2c1842d4761e5a0bc7a420c0c705ae60250ca1c7b03d3694b9e"
        },
        {
          "alg" : "SHA3-256",
          "content" : "919c15ae4b1aef2a58aa6ea4b700bc5562e78dbc382f3393169425ca91ad368c"
        },
        {
          "alg" : "SHA3-512",
          "content" : "dbe54d586c898cdbd7df6c31c131ca3525db17fcea5c7f5da8cbfe617e2afc667289290c76771ec5c9567a56fb2b177b0a31d67abcc656410c90287da4d88999"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-math3@3.6.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://commons.apache.org/proper/commons-math/"
        },
        {
          "type" : "build-system",
          "url" : "https://continuum-ci.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/MATH"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://git-wip-us.apache.org/repos/asf?p=commons-math.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-math3@3.6.1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "io.confluent.flink",
      "name" : "flink-connector-datagen",
      "version" : "1.19.2-cp2",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "e6d6f1b895d80c88db557f06bac90a04"
        },
        {
          "alg" : "SHA-1",
          "content" : "c922cc3c72c3841ccd8160538f2b7aee132fc429"
        },
        {
          "alg" : "SHA-256",
          "content" : "7ac2472b762b1287e6b81f77d39e861e634cb6388d47dc306dde3689fa032019"
        },
        {
          "alg" : "SHA-512",
          "content" : "3812937840ac438c46ff11c1082eb28dd07e08962891a86929b67651a84739c9a7ae2a0c0eca01e5c74ba4d41a6bd4ced911f120e64cb7b2c18826e020139a47"
        },
        {
          "alg" : "SHA-384",
          "content" : "ad45a345c34940c8f8c47efc05afb26f40fa02e18de5e76cd4b33fc03da9cf0d008230761435b6ca06a183a95d1ae93f"
        },
        {
          "alg" : "SHA3-384",
          "content" : "eac26b2938761b361f141a70fb875738cfcd05b35d13956656d0169d91a5b0cd7bfde7cca5ef9f75ef86133d6a3ae00e"
        },
        {
          "alg" : "SHA3-256",
          "content" : "1829afe84807820ff3a624decb5161449d34c88446f487071b2da6202d000641"
        },
        {
          "alg" : "SHA3-512",
          "content" : "6c4494bfc24e8149409332d633be3a232137d8c71a5ca8dc92bc8a4512e1f3f11130a6068145957d6e48769d46400cef4e2723e23a0e514431f461d786f6c83c"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.confluent.flink/flink-connector-datagen@1.19.2-cp2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://flink.apache.org/flink-connectors/flink-connector-datagen"
        },
        {
          "type" : "distribution",
          "url" : "s3://cp-flink-staging-654654529379-us-west-2/maven-staging/e376491b71b31739887d29e34e6552860f69668d"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink/flink-connectors/flink-connector-datagen"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.confluent.flink/flink-connector-datagen@1.19.2-cp2?type=jar"
    },
    {
      "group" : "org.junit.jupiter",
      "name" : "junit-jupiter",
      "version" : "5.10.1",
      "description" : "Module \"junit-jupiter\" of JUnit 5.",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "32fd55a03f648868767c1bebedd198df"
        },
        {
          "alg" : "SHA-1",
          "content" : "6e5c7dd668d6349cb99e52ab8321e73479a309bc"
        },
        {
          "alg" : "SHA-256",
          "content" : "c1a386e901fae28e493185a47c8cea988fb1a37422b353a0f8b4df2e6c5d6037"
        },
        {
          "alg" : "SHA-512",
          "content" : "c97a2f9eefa6f34441fc0c97744873040bbe49d335954edab43bab25876a33f4b3f11347459420569ef660449728aa093bbae5d42c0fa733a0b624706b57a65d"
        },
        {
          "alg" : "SHA-384",
          "content" : "873dfccaf8366ce5b14dc0b5498205debecd90ecba20b1f1c924721764d546b5b9629dd57c486e5a5a2bc38954bf3824"
        },
        {
          "alg" : "SHA3-384",
          "content" : "67f09e3174ae3fac6ddea13b56dcf078165e715cb18afd73d86bb980357e365cef6e62083231f09ae2accddfe62f5bcb"
        },
        {
          "alg" : "SHA3-256",
          "content" : "1c2a60003b13025c959e7728b3f4469b67bad8649d2080c0871418fb52b1c078"
        },
        {
          "alg" : "SHA3-512",
          "content" : "7c03cfaeabed9c57b26e083bcb0ca9a114c491216fc7e9652a39a5468579175e575ace315493610fdc7711c6557eff11933fbd28f5433c237d2277bee102c5a6"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.junit.jupiter/junit-jupiter@5.10.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://junit.org/junit5/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/junit-team/junit5"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.junit.jupiter/junit-jupiter@5.10.1?type=jar"
    },
    {
      "group" : "org.junit.jupiter",
      "name" : "junit-jupiter-api",
      "version" : "5.10.1",
      "description" : "Module \"junit-jupiter-api\" of JUnit 5.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "c6b8b04f2910f6cef6ac10846f43a92d"
        },
        {
          "alg" : "SHA-1",
          "content" : "eb90c7d8bfaae8fdc97b225733fcb595ddd72843"
        },
        {
          "alg" : "SHA-256",
          "content" : "60d5c398c32dc7039b99282514ad6064061d8417cf959a1f6bd2038cc907c913"
        },
        {
          "alg" : "SHA-512",
          "content" : "b1fef44d4aa781bb119ab723c3c2a6f0d27efc4493a1fa26b603c7c7a8884c4d6274bccec6536f120d55f876f8d052aaf6cc003074c27cc704deb2c4bc08b6f0"
        },
        {
          "alg" : "SHA-384",
          "content" : "0fd81f893be859a50766bfbf3bd74bd7d359c6d481b7fe3099e220402f585d3d46b6ad42a36b1d88eefbb6fd27a3cefa"
        },
        {
          "alg" : "SHA3-384",
          "content" : "5e13ba92f757499ca52d719869d318cade9bde9c948ee9c68d753a21ec273f7b56ad68ff8cb281614efeef1d4c479db0"
        },
        {
          "alg" : "SHA3-256",
          "content" : "997c9e0cc57d61a85a8eec568d0f014d47af5bf655602a2c3518b6530b089905"
        },
        {
          "alg" : "SHA3-512",
          "content" : "e97c3e2c1faa1f77b174ef6ce7b24a2339e547f5976a4e40348653e84498e0c3bb96068447facef6df6b54d4af34b807f19b4d2bb1d31e26f97d6dae07843bf6"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.junit.jupiter/junit-jupiter-api@5.10.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://junit.org/junit5/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/junit-team/junit5"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.junit.jupiter/junit-jupiter-api@5.10.1?type=jar"
    },
    {
      "group" : "org.opentest4j",
      "name" : "opentest4j",
      "version" : "1.3.0",
      "description" : "Open Test Alliance for the JVM",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "03c404f727531f3fd3b4c73997899327"
        },
        {
          "alg" : "SHA-1",
          "content" : "152ea56b3a72f655d4fd677fc0ef2596c3dd5e6e"
        },
        {
          "alg" : "SHA-256",
          "content" : "48e2df636cab6563ced64dcdff8abb2355627cb236ef0bf37598682ddf742f1b"
        },
        {
          "alg" : "SHA-512",
          "content" : "78fc698a7871bb50305e3657893c10500595f043348d875f57bc39ca4a6a51eda3967b7c8c8a7ec3e8f85f2171bca4aa98823e912e416e87e81c6ba5b70a37c3"
        },
        {
          "alg" : "SHA-384",
          "content" : "10398b6998c9202a0731e2e19ae1c3f9d8a83582c2663fe7bdda15794ee6fa816727dbd8f7c7164bd5395ee1cfe7c97e"
        },
        {
          "alg" : "SHA3-384",
          "content" : "3abe706fd78509c25a402c7bbf6f9ddf71ffb5b35054864ba0fdf7902207115f888a0ba728fd71d2e87a9360d2498121"
        },
        {
          "alg" : "SHA3-256",
          "content" : "d961907a1bfa1dcda329dca494ffbc251b31fabcaca5ab7095661a8ce3c1d654"
        },
        {
          "alg" : "SHA3-512",
          "content" : "0ad661617bcac51bcd26f7ad4611c69b1fd9811b50dbf734e041a3243ab1f845e7796620e8a7c40c4a2df3946864598b1251396c7d9bd813203d82710788cce0"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.opentest4j/opentest4j@1.3.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/ota4j-team/opentest4j"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/ota4j-team/opentest4j"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.opentest4j/opentest4j@1.3.0?type=jar"
    },
    {
      "group" : "org.junit.platform",
      "name" : "junit-platform-commons",
      "version" : "1.10.1",
      "description" : "Module \"junit-platform-commons\" of JUnit 5.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "cd430f3f7345c0888f8408ce8795c751"
        },
        {
          "alg" : "SHA-1",
          "content" : "2bfcd4a4e38b10c671b6916d7e543c20afe25579"
        },
        {
          "alg" : "SHA-256",
          "content" : "7d9855ee3f3f71f015eb1479559bf923783243c24fbfbd8b29bed8e8099b5672"
        },
        {
          "alg" : "SHA-512",
          "content" : "4aa83350e7a6df21feb9ba8756bb4a68986f33f8c6e384720d1daa448444016c0def1781729788e3e884664abd6703b1e3c0ec6b79893a9d5645c3a4809c0ad2"
        },
        {
          "alg" : "SHA-384",
          "content" : "d264f2c8ceaff384b0f22ee77890195ed3d918b01f338e35fc2ee12f82df15e59533918509f535883b4f4befed28595e"
        },
        {
          "alg" : "SHA3-384",
          "content" : "d1fa76d6b2567e831b37ff7843df6d7d65028d4e53c570c6f580cbbf13269d2aa2afedfedfe5a3f2cf92d7de6d3c89b2"
        },
        {
          "alg" : "SHA3-256",
          "content" : "eef0f968f2d2fc31f8b4a4ed43bafeb46977de1ac3d59477ab6e2b014f97e070"
        },
        {
          "alg" : "SHA3-512",
          "content" : "93340cc2c378c830c755b25006bc4f73ec77ad10661f05625b23efa0854d456da8e62bdbe7e7edf3418dda864e6e0d7a6b9d34cea23d525b8991258f3d75fc9c"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.junit.platform/junit-platform-commons@1.10.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://junit.org/junit5/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/junit-team/junit5"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.junit.platform/junit-platform-commons@1.10.1?type=jar"
    },
    {
      "group" : "org.junit.jupiter",
      "name" : "junit-jupiter-params",
      "version" : "5.10.1",
      "description" : "Module \"junit-jupiter-params\" of JUnit 5.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "5e8e17f6f2a5dedb42d9846a3352dd31"
        },
        {
          "alg" : "SHA-1",
          "content" : "c8f15d4e99940c4564098af78c10809c00fdca06"
        },
        {
          "alg" : "SHA-256",
          "content" : "c8cf62debcbb354deefe1ffd0671eff785514907567d22a615ff8a8de4522b21"
        },
        {
          "alg" : "SHA-512",
          "content" : "dbd8a3bca0a03b6eef54de2b489685c8125e0c6f23cbdb633174b21e07cc7b97a24b55dcb5b60ec1a496683a918bfdf1ea0459950689e3755aa965ea9e106ee9"
        },
        {
          "alg" : "SHA-384",
          "content" : "882b3106163d7c195867e08db9948a0997e1469a23c847bff523efa30a9b274c0588f8228fca98c78abf9b61709a7ff2"
        },
        {
          "alg" : "SHA3-384",
          "content" : "6e4e9a7dbb32cc3f16f21a14fe036aa13488c5b94e3cb6cc53b417c4588b90b5ae118caa3eb9f4bc9c513d06e2c1f408"
        },
        {
          "alg" : "SHA3-256",
          "content" : "171a08027b527e3be1ad66082405eacf4a55746dd983c46d9ff7ee5552276615"
        },
        {
          "alg" : "SHA3-512",
          "content" : "c435b4a17208b67f6fa35ebe74872c3d2c3557b290437bb682ac86701402bbe17d0e53446c674bb94c7feaae4bbfa99d888c7bf7181707e27fe08ff7934c00f6"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.junit.jupiter/junit-jupiter-params@5.10.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://junit.org/junit5/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/junit-team/junit5"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.junit.jupiter/junit-jupiter-params@5.10.1?type=jar"
    },
    {
      "group" : "org.junit.jupiter",
      "name" : "junit-jupiter-engine",
      "version" : "5.10.1",
      "description" : "Module \"junit-jupiter-engine\" of JUnit 5.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "71d86cd027062c4da0796c2493ae94fe"
        },
        {
          "alg" : "SHA-1",
          "content" : "6c9ff773f9aa842b91d1f2fe4658973252ce2428"
        },
        {
          "alg" : "SHA-256",
          "content" : "02930dfe495f93fe70b26550ace3a28f7e1b900c84426c2e4626ce020c7282d6"
        },
        {
          "alg" : "SHA-512",
          "content" : "1fcc9406d1e0301e27538757c9649545d784e83743a8800932971881cfd78a14a264ad13c0b92fad9ae1be50963c540427a19cb2d1fee06888ef48105aad4c8b"
        },
        {
          "alg" : "SHA-384",
          "content" : "6657ac1bb11d7a40bbcb020add01e57edbbc521645116908d857074d9ea319eab3e7b7f2e9fa1ff8df08b5db3774f4dc"
        },
        {
          "alg" : "SHA3-384",
          "content" : "607313914c11274c577b0aaaae6c68aa6ecf25d8302f55d4e334aa6b58df2e543d2399785e2019a56b85aac7716c9623"
        },
        {
          "alg" : "SHA3-256",
          "content" : "be3560971111d3f548bef24aa6660ec2a126fd17b3bd68b7deeb1ab48735a9d1"
        },
        {
          "alg" : "SHA3-512",
          "content" : "4ba6cb70f8fc1918dcedc874340488909c48e0f976d1834ec433f4b5c6cff55b16a996a0443a1b68a0d0ad84a37bf51386633905628728bde08b5820ee67dfaa"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.junit.jupiter/junit-jupiter-engine@5.10.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://junit.org/junit5/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/junit-team/junit5"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.junit.jupiter/junit-jupiter-engine@5.10.1?type=jar"
    },
    {
      "publisher" : "AssertJ",
      "group" : "org.assertj",
      "name" : "assertj-core",
      "version" : "3.23.1",
      "description" : "Rich and fluent assertions for testing for Java",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "3c5640639c17a5311ff5928e02204202"
        },
        {
          "alg" : "SHA-1",
          "content" : "d2bb60570f5b3d7ffa8f8000118c9c07b86eca93"
        },
        {
          "alg" : "SHA-256",
          "content" : "36af798af9fc20537669e02618bd39f2c797f4813824ef222108cb686fa4c88e"
        },
        {
          "alg" : "SHA-512",
          "content" : "0d0d6ff1b4b1561a005fb25d9d3b73052ea792cbc0913636e9ff7cb0c2e4a34871f8424facebefad06f52e5a126025554baa9ca8887c893e15b107dc376cd1ea"
        },
        {
          "alg" : "SHA-384",
          "content" : "647d0ce8fbdacc43b995f982eafccc7494f847a23ac5eff6d51d5c6bc9caf769c84dddd05192133a27225036bbe5a2db"
        },
        {
          "alg" : "SHA3-384",
          "content" : "0a40a6f41fc8a5185cbfed706cfcb2cb124dd4bbdf0ce309f69cd7b3fea78c033fa38758275c90ef315218ef80d7369e"
        },
        {
          "alg" : "SHA3-256",
          "content" : "41b57913563871a9e42974e31ce79808a943f133c6d41e063e568e5f8ab56736"
        },
        {
          "alg" : "SHA3-512",
          "content" : "2e6d4dcc2c83ac3718e6abf09c3fb48072fb661b989250b50694b6bd09196b8f72dbde46912d5c9f3ea1e3f95dd1463fd2e80572872943dfff0490b535f5c444"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.assertj/assertj-core@3.23.1?type=jar",
      "externalReferences" : [
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/assertj/assertj-core/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/assertj/assertj-core"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.assertj/assertj-core@3.23.1?type=jar"
    },
    {
      "group" : "net.bytebuddy",
      "name" : "byte-buddy",
      "version" : "1.14.4",
      "description" : "Byte Buddy is a Java library for creating Java classes at run time. This artifact is a build of Byte Buddy with all ASM dependencies repackaged into its own name space.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "21117c3c69db9aa3080d611640a27bb9"
        },
        {
          "alg" : "SHA-1",
          "content" : "20498aaec9b00a5cfdb831e7bf68feafa833ce4b"
        },
        {
          "alg" : "SHA-256",
          "content" : "7ae2b39ac230be9e3e09ce020406c017ff8ceba06eaf078c62a88c218a0ff2b4"
        },
        {
          "alg" : "SHA-512",
          "content" : "70f33b8da6492db126d414779cda791f919a6aa7ef66b34f86938ba5d905b5b3d7cf2b0e9faf1edd362f1b18cec6a921094af076f3c5a3a390ff2bb4c6186772"
        },
        {
          "alg" : "SHA-384",
          "content" : "9a9543a284b412365b1547e2b284c12a758f67a9f41a11c3cd64db225594391d47f95c14675a0e3696ce5182d80c1949"
        },
        {
          "alg" : "SHA3-384",
          "content" : "1a288d8032cc36c888e62ce034aa3c40e7c8df70bf10d76f6a3ebec3b9c5d88da61ad66a8b9fc74ab2e514bb964f617e"
        },
        {
          "alg" : "SHA3-256",
          "content" : "b519cf5ef8fab6c011fe8ad68ed1bf32e993ad5f13de84cc79b91a9f885b55a5"
        },
        {
          "alg" : "SHA3-512",
          "content" : "b68a097a4914411ca6e631ed0f84bc73c65ff5a53b2e13fe9662f107b64d239fa0d218151712252a7a39cfcabc67bc9e084704b9cdd6103633a1d2ceb566d84e"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/net.bytebuddy/byte-buddy@1.14.4?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://bytebuddy.net/byte-buddy"
        },
        {
          "type" : "distribution",
          "url" : "https://s01.oss.sonatype.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/raphw/byte-buddy/issues"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/net.bytebuddy/byte-buddy@1.14.4?type=jar"
    },
    {
      "publisher" : "Apache Software Foundation",
      "group" : "org.apache.hadoop",
      "name" : "hadoop-minikdc",
      "version" : "3.2.4",
      "description" : "Apache Hadoop MiniKDC",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "9e2419e01d42e4e417a53a029123f6fc"
        },
        {
          "alg" : "SHA-1",
          "content" : "89666b8d70bb3a70aee0a6b10b60e05a0f5d30f1"
        },
        {
          "alg" : "SHA-256",
          "content" : "71b94b9da0bb4abab62123fdaecb6c0810a7db2a33fd581d57bb6cf1d13905dd"
        },
        {
          "alg" : "SHA-512",
          "content" : "5eac88c2ef5c9768b6eed2f48dd05b2932c835908cec43ecc2c7b0548251c1fe2711aa53c5fadb70166c0400a54b9406051bc2c9fa55c54757044717ccfadf5e"
        },
        {
          "alg" : "SHA-384",
          "content" : "e052a1c15eb04fd4af23db362f2d24c99218935c9e9086f3a080e6921df3a51874041f11313a26bad1f3cfc92754b7be"
        },
        {
          "alg" : "SHA3-384",
          "content" : "a61acf8fa52083ffafc42b71a2e5ccf17ff38371fc507c1e1c58b39293489fba8c31261140a88b180f84e36092853984"
        },
        {
          "alg" : "SHA3-256",
          "content" : "81b2f9dd09250ac13f65ebfd0b66e52143d71ed1fef913a47bbbcc0104b54ec0"
        },
        {
          "alg" : "SHA3-512",
          "content" : "b114c895d0631d28e6a37649ec651471b08c027500928519786af8b71ca23cb93f0fbd4de433b516314c357e57db2edfd0f9def568724c743d9e00d517188ee9"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.hadoop/hadoop-minikdc@3.2.4?type=jar",
      "externalReferences" : [
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.hadoop/hadoop-minikdc@3.2.4?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.kerby",
      "name" : "kerb-simplekdc",
      "version" : "1.0.1",
      "description" : "Kerb Simple Kdc",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "16517ceeb9c76a7499d8ae5b98607c8a"
        },
        {
          "alg" : "SHA-1",
          "content" : "1e39adf7c3f5e87695789994b694d24c1dda5752"
        },
        {
          "alg" : "SHA-256",
          "content" : "9c9976a603833c001a8a4a4e5b2ea0a6775a84e5656b0eca1fe4eb4d068ceda7"
        },
        {
          "alg" : "SHA-512",
          "content" : "46a284944d9740718a068b8e30b1c37c56ea656c7a8af8dba553e193e070c8ca4dd58339d5f5b172185edb3e5581fcdfc3ee7402cfd1ccdd5a671fac0274ef42"
        },
        {
          "alg" : "SHA-384",
          "content" : "5815e709f59a329b8a9fc24c9e6e3630a7cdc84c4778a1d52e08512121d190915e5dfc329180ded1c29701a8c9f2ccef"
        },
        {
          "alg" : "SHA3-384",
          "content" : "1b745244fe51a11a6eeb1fbed6ce51e9a73d7927e68b546d20d7756aecf7eee2d5f2a0edf86888742ace35ee38e026fa"
        },
        {
          "alg" : "SHA3-256",
          "content" : "376c1d6b3159ebf3fefc26675f72532ef7fd9b0f8d35c40ad7dce366329d429e"
        },
        {
          "alg" : "SHA3-512",
          "content" : "a71d870032e09114dfc1b644c10ecff8263d56361546fb8d50cd2d6bdc71c57893b5dac02b5552c06a1c57de8a4bcb8eaca9867b17e67242d4c3cf3e9b925387"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.kerby/kerb-simplekdc@1.0.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://directory.apache.org/kerby/kerby-kerb/kerb-simplekdc"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/directory-kerby/kerby-kerb/kerb-simplekdc"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.kerby/kerb-simplekdc@1.0.1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.kerby",
      "name" : "kerb-client",
      "version" : "1.0.1",
      "description" : "Kerby-kerb Client",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "bf15f4b482bd784fa8b58a3f509a4d44"
        },
        {
          "alg" : "SHA-1",
          "content" : "a82d2503e718d17628fc9b4db411b001573f61b7"
        },
        {
          "alg" : "SHA-256",
          "content" : "020fa95a809b96358ab95d43666471838372659af1cbc3f24ef73c29374e9af0"
        },
        {
          "alg" : "SHA-512",
          "content" : "6286939bdf4e79f2602c4e466fb58e7faf36a16ec16e7abfa035155f67532371fd6743f0e2200cc37fd44efa32830cd36246ace912aa3960cd7832d367131a53"
        },
        {
          "alg" : "SHA-384",
          "content" : "dca413577181fa513f534ef6dc232010a3f7430262981e27ad03369d88cba55fa01a58db072598aae2ae704be911ca3b"
        },
        {
          "alg" : "SHA3-384",
          "content" : "06a2cb378078749f67d85b40a97908dc7e2b16e610c45c79881aa5c114d84bc3c467683b7b63c1f00840ba8411dc5509"
        },
        {
          "alg" : "SHA3-256",
          "content" : "cf7a918a08eed0506ee50cd03b80fe78780ecf6ef305e0081ca1dfa264fecf10"
        },
        {
          "alg" : "SHA3-512",
          "content" : "a0363161e892562bc782f62ee5cf109118fc362814c4493400cdcb264c22d1a238c0a826746ea7312ee15aabcd229ff0e9027c7aa42673b757464ddd8a457c91"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.kerby/kerb-client@1.0.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://directory.apache.org/kerby/kerby-kerb/kerb-client"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/directory-kerby/kerby-kerb/kerb-client"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.kerby/kerb-client@1.0.1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.kerby",
      "name" : "kerby-config",
      "version" : "1.0.1",
      "description" : "Kerby config library",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f70f90ed440cee40f4f59f9c75cd6b96"
        },
        {
          "alg" : "SHA-1",
          "content" : "a4c3885fa656a92508315aca9b4632197a454b18"
        },
        {
          "alg" : "SHA-256",
          "content" : "244520e9bd61e8cd40a475fe615fbea45ca042fc9d50780df30bc7146f77b8c9"
        },
        {
          "alg" : "SHA-512",
          "content" : "27bbf17b8fc1bf5b56e8463f1a2a23846296074a6fb963ef029eac1b6d632ad48065e583bb925b4ae744c86ba11dc83f433224c7e785fcb56d324da12d8ab0bd"
        },
        {
          "alg" : "SHA-384",
          "content" : "67cc4e0494f7f580adcc7a8d8e247ec0d6c2c678fdad9f9bdd64955a12517af05146f05310fddad7a77d5a06453a2482"
        },
        {
          "alg" : "SHA3-384",
          "content" : "eb05416de4059ad2c577afa807872ad4cacffd61d6379c8b0c873b5f2952df6ceadbc0229a53a4c3a4094863aa15c616"
        },
        {
          "alg" : "SHA3-256",
          "content" : "a91b595364611f8bda0f1d34b44fbeb955d70c11bba788d731681c323e8310ab"
        },
        {
          "alg" : "SHA3-512",
          "content" : "616ecbea3b4aba2369ab2517ed86af2b89cc437598cdc6f03f56261e497f4db6e8ea2e5758c15708028adfd899f568c00974ecb5de8be8707ed1e844440ec633"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.kerby/kerby-config@1.0.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://directory.apache.org/kerby/kerby-common/kerby-config"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/directory-kerby/kerby-common/kerby-config"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.kerby/kerby-config@1.0.1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.kerby",
      "name" : "kerb-core",
      "version" : "1.0.1",
      "description" : "Kerby-kerb core facilities",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "545c60f29fc4d57a1e50e3be72c88fe0"
        },
        {
          "alg" : "SHA-1",
          "content" : "82357e97a5c1b505beb0f6c227d9f39b2d7fdde0"
        },
        {
          "alg" : "SHA-256",
          "content" : "4db26bc4a106603044d8883f7280abc803b055b36f5c510a3fffc41e5de4c651"
        },
        {
          "alg" : "SHA-512",
          "content" : "76d63f27c1446c7e3394b7778f8839f19d86755b6aff2941526276bfa06b89c32c3dca1698b964cdc24a8b217a4ac4125a32f6aa051fce1183c37a3ac323fcd3"
        },
        {
          "alg" : "SHA-384",
          "content" : "85c6dc3fe4c582e5fdd3e084be158c67f31e93836ed7167205069f369884b1427fafef519182d0565bf92544aeabe626"
        },
        {
          "alg" : "SHA3-384",
          "content" : "87c952c555981cccd0523354d79dc072bd279eb1e276fcd94155f8fc72b982890c64cc7daff0f3d3b23a4abe0039c3aa"
        },
        {
          "alg" : "SHA3-256",
          "content" : "9287aea565531a53a6d4321c2a930ca6114277c09be70e01ca5e498edd7c24c9"
        },
        {
          "alg" : "SHA3-512",
          "content" : "7a53261c96600b7946fa3fc29f65566738cd4153b6fbe3c7551fef460d167c976174e3e2f8d2d4c6dd7be668804b84d09a916ec55165edce6a8389faa18e8b00"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.kerby/kerb-core@1.0.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://directory.apache.org/kerby/kerby-kerb/kerb-core"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/directory-kerby/kerby-kerb/kerb-core"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.kerby/kerb-core@1.0.1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.kerby",
      "name" : "kerby-pkix",
      "version" : "1.0.1",
      "description" : "Kerby PKIX Project",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "4f99a872b054dead71460c3ed3bca6ac"
        },
        {
          "alg" : "SHA-1",
          "content" : "4c1fd1f78ba7c16cf6fcd663ddad7eed34b4d911"
        },
        {
          "alg" : "SHA-256",
          "content" : "0410bc1950b57f4792ea6b86df59a2ee87e4ad69b33a17ded438e6686894346a"
        },
        {
          "alg" : "SHA-512",
          "content" : "b54347dc0e3f56cf9a9068dc39c8838368067920291520ba4df59184faf3eee43898d6d0d50cbcfce3111bf2c3bd1a5cb31ef1bc2ac47f1bb1e216ae39444d2f"
        },
        {
          "alg" : "SHA-384",
          "content" : "9e66f1d910deb0eaa3dba289811423b23fdf2d362287b3dd3cad8a63737303ded842a2a7d67255900413b15ad82e2937"
        },
        {
          "alg" : "SHA3-384",
          "content" : "3a1c35a54c2419610a1ce91542e339f156497621c0b4ebeb2dcf63fb4ff2f5dd7545d88ae4a7de513fe5d6e226293bcc"
        },
        {
          "alg" : "SHA3-256",
          "content" : "8be36b331e2c1712ed835bc915edcc880d880951114c323b5d318408ce118b42"
        },
        {
          "alg" : "SHA3-512",
          "content" : "3366dbb93faa59ddc9c9dae72a05c8ad1a52a28cbfa7f42ddd6d243a2f6b5e2189d639f7507b26d955e37eeb9ea1feed769694a8b370dca995636995fe86c5ac"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.kerby/kerby-pkix@1.0.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://directory.apache.org/kerby/kerby-pkix"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/directory-kerby/kerby-pkix"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.kerby/kerby-pkix@1.0.1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.kerby",
      "name" : "kerby-asn1",
      "version" : "1.0.1",
      "description" : "Kerby ASN1 Project",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "95c31186c0ec12b85bde99e286fe2f8c"
        },
        {
          "alg" : "SHA-1",
          "content" : "d54a9712c29c4e6d9d9ba483fad3d450be135fff"
        },
        {
          "alg" : "SHA-256",
          "content" : "010a3c33e5b652f11cb29a6e66826a24331e526cf58662dccb4d6695fc6ca59d"
        },
        {
          "alg" : "SHA-512",
          "content" : "db962f4aa3a8eb21c36badf1f268d1d68c2e95179f64f7d14fdaaa9b912af0edc989a58a79924c44a56f544b0b68df6de6d6e3bb4f8aa53aa37afc2767cb0684"
        },
        {
          "alg" : "SHA-384",
          "content" : "31997848a8dbae5fa350bcf6804603e4c24d3377d0d7ea2f8b07b250fc0cce9d8f7c7f5b7e08831b947e7e4a387c3d7a"
        },
        {
          "alg" : "SHA3-384",
          "content" : "65f9d92144d0995d68ab856c3098eeddaa9ee7eea7e753733f6ffa35a206795d6210e04900134e271be70016b2d92af0"
        },
        {
          "alg" : "SHA3-256",
          "content" : "46e0f7875638adf82fddcc92ec825c6bf252b11d4a2fcfe580ebed38e2f113fc"
        },
        {
          "alg" : "SHA3-512",
          "content" : "c81a17a79b83db92177df9fd2124acec97b8d838f3d146146ef1612d8797d2a4ee44a2b4284d8fa619d64799e064259c2828b37f1b20afb4282f2e475a8a4a4c"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.kerby/kerby-asn1@1.0.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://directory.apache.org/kerby/kerby-common/kerby-asn1"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/directory-kerby/kerby-common/kerby-asn1"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.kerby/kerby-asn1@1.0.1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.kerby",
      "name" : "kerby-util",
      "version" : "1.0.1",
      "description" : "Kerby common util, without any 3rd party dependency",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "21974b90e4e4d096b526268712dfd4cb"
        },
        {
          "alg" : "SHA-1",
          "content" : "389b730dc4e454f70d72ec19ddac2528047f157e"
        },
        {
          "alg" : "SHA-256",
          "content" : "db7e2f329e160aaac305268ccb7287c16cf5542cffdd786a8592212df7c315aa"
        },
        {
          "alg" : "SHA-512",
          "content" : "30de762e56e57f3b3d54c71ce80046fbbeb67795b8d5cdc493ad239271f2cddc1a9c485d6b49d1b8b970af37bd45fc424adc85684540127a1b4d7da08f8a82b8"
        },
        {
          "alg" : "SHA-384",
          "content" : "95c1891ff1e817767106ac887357d20f37de0e905a4fd3aee8e726d38b842f95ed30988ab905dfcf194d727621c10eec"
        },
        {
          "alg" : "SHA3-384",
          "content" : "eb02124b464073942eb37e2661599c5f814ad0652f13395b39ef9d552f4ebd068f686e1cc617f02f4a0fdf4904e47a3a"
        },
        {
          "alg" : "SHA3-256",
          "content" : "83ecfb600dd3d0923f0229c2fc18a2deef12a5550ff961fc8bf149fc54f10524"
        },
        {
          "alg" : "SHA3-512",
          "content" : "7103c01f884bcbfb23f5c794007ad6f3b7f90e8a578e6545b178d6f787ece30ae98f605b5e5de6be78b5ccd3e9d421f1cfcc9b32a9242230a34a05425973bc11"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.kerby/kerby-util@1.0.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://directory.apache.org/kerby/kerby-common/kerby-util"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/directory-kerby/kerby-common/kerby-util"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.kerby/kerby-util@1.0.1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.kerby",
      "name" : "kerb-common",
      "version" : "1.0.1",
      "description" : "Kerby-kerb Common facilities for both client and server",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "678e68224b54168f3106b5644ef6f45f"
        },
        {
          "alg" : "SHA-1",
          "content" : "e358016010b6355630e398db20d83925462fa4cd"
        },
        {
          "alg" : "SHA-256",
          "content" : "f62bb275781f8092bb6252e4ed201c9f5e4ab7a3d49b650ab58c87862b0bb2de"
        },
        {
          "alg" : "SHA-512",
          "content" : "e1a91d486633bb24c2f7021c21277cb5656aeb7b961fbbec733fe9e6d6c85aa915798b0d987f9efb2e633a0ff9d7bb772502b7918ef6c8304f0c20ef84873b5b"
        },
        {
          "alg" : "SHA-384",
          "content" : "6729901924d609d9b650a264aaee7ce6605719b01406fdc8943e13f9918c65881ce7bc7379a6b571903ccee9e6899f45"
        },
        {
          "alg" : "SHA3-384",
          "content" : "0df43c18fcfbf4ed5f52b848e891a287198e881e1debb3c6188aaf1d13466ba174a97cfa05de636d94527d618277df37"
        },
        {
          "alg" : "SHA3-256",
          "content" : "adb982ebfa46ea701f6dabebeae877028c8869c9874e7ae3e3b01a033a2fac39"
        },
        {
          "alg" : "SHA3-512",
          "content" : "1920d724f6aa018ce8901c24164ea1cd917c995299d9f1c0f15ee1700a973d892e02ee691097c28a7166bee17e51ad86e151becf227e36c06cf57790dc08b04a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.kerby/kerb-common@1.0.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://directory.apache.org/kerby/kerby-kerb/kerb-common"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/directory-kerby/kerby-kerb/kerb-common"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.kerby/kerb-common@1.0.1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.kerby",
      "name" : "kerb-crypto",
      "version" : "1.0.1",
      "description" : "Kerby-kerb Crypto facility",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "4a201fca38ffe52565f5816d7c708ccd"
        },
        {
          "alg" : "SHA-1",
          "content" : "66eab4bbf91fa01ed4f72ce771db28c59d35a843"
        },
        {
          "alg" : "SHA-256",
          "content" : "af94527564908b5a8ccfdfa8e67dd61c09e062459a0110d85115c42fc8f82b41"
        },
        {
          "alg" : "SHA-512",
          "content" : "e5d9dff3547fa2634b1704dcb2e294ef0a71f0b8f79f2e5e4e1c2a78f2f06d8e8c0aac2897c0751b972bc3c8c588512ed44fe145b7410e492f8ea2511bec9b31"
        },
        {
          "alg" : "SHA-384",
          "content" : "87e015986ad0c3ef473dfb9ab1e2ed2f21538741edcfe0459cfac22885610819fed9d34d9f4167cb96332d093f945635"
        },
        {
          "alg" : "SHA3-384",
          "content" : "be8f083717ba3c54b9a203411682034b00d38fd07280cbdf45e658a86da4a191c0c72dc30c2d215558c52166493b79d8"
        },
        {
          "alg" : "SHA3-256",
          "content" : "abedfca7869934feaa25910bb94a2b40002b191e1f84b4831eee41de1d2d8b22"
        },
        {
          "alg" : "SHA3-512",
          "content" : "929a330d44642157c0f52ebe82608280f28017e2ad7d80da9dfb8f8a67b6deddc50771228148936038e6a97ea7b4558d81cc0975c0ac092b82ea9cbdef95fa50"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.kerby/kerb-crypto@1.0.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://directory.apache.org/kerby/kerby-kerb/kerb-crypto"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/directory-kerby/kerby-kerb/kerb-crypto"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.kerby/kerb-crypto@1.0.1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.kerby",
      "name" : "kerb-util",
      "version" : "1.0.1",
      "description" : "Kerby-kerb Utilities",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "424542890d4dc9f61b1754a12a1c7758"
        },
        {
          "alg" : "SHA-1",
          "content" : "93d37f677addd2450b199e8da8fcac243ceb8a88"
        },
        {
          "alg" : "SHA-256",
          "content" : "9cb1a2715a35cbabc9e8f1be3287bb086100763847e2f17577b72a025f8adaab"
        },
        {
          "alg" : "SHA-512",
          "content" : "dab63ef1be0a122b3bd8a1986741a64ebf7361dc01a1a3ef23764dfc89fce85a15c2cfe43e3502f37093d0e866011980378c09d5efb45d9754c4cd4e5b686ac3"
        },
        {
          "alg" : "SHA-384",
          "content" : "dbfe62c73760d41565ec429e3de8a87cb71a35df2bbd28d1007489cef60106942d8893c8c05bf20435e2b09f11bcdb75"
        },
        {
          "alg" : "SHA3-384",
          "content" : "1a3d6eeacd28579ab6b66a381c260dccbc447fb8a36c4d1608d070db9021aa242eac3c1cb76f19ffc100a9357d37305b"
        },
        {
          "alg" : "SHA3-256",
          "content" : "e980a457ddce54bf0de49ed57206ebf6df1fdce24770decb19674764459320ee"
        },
        {
          "alg" : "SHA3-512",
          "content" : "223365170ac6d73d09675225dfd717d96bfecb4fbdcfd60e13a919fab47ead017200a3970dc391c70b1ddd621b055b3a96c86dc6a68f61a05cea2b0d3743a8e1"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.kerby/kerb-util@1.0.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://directory.apache.org/kerby/kerby-kerb/kerb-util"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/directory-kerby/kerby-kerb/kerb-util"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.kerby/kerb-util@1.0.1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.kerby",
      "name" : "token-provider",
      "version" : "1.0.1",
      "description" : "Token provider project",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "c9ebfeba17a28a69f33acbb5b6e831c5"
        },
        {
          "alg" : "SHA-1",
          "content" : "e6feb6b7c06600924e8b6bda3263c870cfb0a447"
        },
        {
          "alg" : "SHA-256",
          "content" : "022c92d7438b60789bc212f53f1f33ced2656ba8bf073a1f587df51e083e368a"
        },
        {
          "alg" : "SHA-512",
          "content" : "90c882d018cbaa389c6cd971c7dfa052c584337151501465366ae61f10107bd3d4c7471b1168177b9458c78c33791757398e6e25d3c93bbc352377958bcd4511"
        },
        {
          "alg" : "SHA-384",
          "content" : "37662a93ecd4ca9b6ade6842a6533f2cf3386eb1c67e22f7080f9fb6f486649eedb11ca084172c19bc2fbd5e062014a5"
        },
        {
          "alg" : "SHA3-384",
          "content" : "3efdc52a41c81c0737c3096c6a52eb6afb8b5f87b0101e239f86c11b380ca5cd311bac9a0bccbcf0a52831b6323e0410"
        },
        {
          "alg" : "SHA3-256",
          "content" : "2e2dc46673177e6872ad3fb76dbe00393dc1d53a0bdd51633303758a225b3f26"
        },
        {
          "alg" : "SHA3-512",
          "content" : "f5a1343299f72034e4ca89f0657fddda7ec216a8901960dd82ace01817183ff2ae129dafbbe8889550638a2ce0676c43ad393320ed0db74d109a6f20cb1f47e3"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.kerby/token-provider@1.0.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://directory.apache.org/kerby/kerby-provider/token-provider"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/directory-kerby/kerby-provider/token-provider"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.kerby/token-provider@1.0.1?type=jar"
    },
    {
      "publisher" : "Connect2id Ltd.",
      "group" : "com.nimbusds",
      "name" : "nimbus-jose-jwt",
      "version" : "3.10",
      "description" : "Java library for Javascript Object Signing and Encryption (JOSE) and JSON Web Tokens (JWT)",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f1fe6c1a874533ffd7238007019990df"
        },
        {
          "alg" : "SHA-1",
          "content" : "4c52cc9191abde51bee465ce3acefcee8803a17f"
        },
        {
          "alg" : "SHA-256",
          "content" : "00d42506fd80569892ffacebe9657fd144476cc1ddfdc479bd408418188debae"
        },
        {
          "alg" : "SHA-512",
          "content" : "53ba3fa586957990236ee2229756cdd118be394bb4cc1529460158321c9cbdd76a7a72435242812f2db57445e93557cad1800018adb3a8ca15eae8f5f9ea5b17"
        },
        {
          "alg" : "SHA-384",
          "content" : "ddc887b613596173a9c0ba3cb09e1ccda16f7dcb7fae144e25f603d409325f84422e1ad44a101d389429478a1719572b"
        },
        {
          "alg" : "SHA3-384",
          "content" : "a37d4481bfc48e01e8362035ef87733652c64ea9d7121126b6dd58641c2f06372028c7d7a226a7ea177b84cb54c81b41"
        },
        {
          "alg" : "SHA3-256",
          "content" : "c5c8a6ef9e74b44f38d279ef7e08e22edaf5ada319417aecd1dbe882fa770043"
        },
        {
          "alg" : "SHA3-512",
          "content" : "ee8ed3a25a4461adbc8a1b32289e62ca7ca728a76e4bcac20d216b48d46c15f5cbb067d449d623c486940a0f4d5f84f0605f38ca5a23eacc4b31d9a9f11cd9ad"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.nimbusds/nimbus-jose-jwt@3.10?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://bitbucket.org/connect2id/nimbus-jose-jwt"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://bitbucket.org/connect2id/nimbus-jose-jwt"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.nimbusds/nimbus-jose-jwt@3.10?type=jar"
    },
    {
      "group" : "net.jcip",
      "name" : "jcip-annotations",
      "version" : "1.0",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "9d5272954896c5a5d234f66b7372b17a"
        },
        {
          "alg" : "SHA-1",
          "content" : "afba4942caaeaf46aab0b976afd57cc7c181467e"
        },
        {
          "alg" : "SHA-256",
          "content" : "be5805392060c71474bf6c9a67a099471274d30b83eef84bfc4e0889a4f1dcc0"
        },
        {
          "alg" : "SHA-512",
          "content" : "cb312b3f571d91ef183c119d878f50464ffd97f853b7311cba386463f295e8b7b3a5a89ed4269a045cacd5aa7cb4c803d4882854a0fddefa9bbc28c72aa6c786"
        },
        {
          "alg" : "SHA-384",
          "content" : "20d12f4a68736b8df736b1de233baff5d8ac5d71b92a1ca10dc1eb61293ef88bd3cb434ab71e9027a6d303849e098f28"
        },
        {
          "alg" : "SHA3-384",
          "content" : "c8f2559f90cec25fae5d438059f6100294091315524e253cca0b1586497e4162b5c324ae25f5c4c0a91186092decf7cd"
        },
        {
          "alg" : "SHA3-256",
          "content" : "35970ea56e67fde943436fa5efd9f49e89c85dc863fe9ff868965d51e9be44c9"
        },
        {
          "alg" : "SHA3-512",
          "content" : "5e970df829d8f13436fe8a7b64bb0cbe4733e69789132ba60782a76d9377da3f5b044e9f47d731d8c5692548845e4d27bd1f8dedecf62357065324ce7f93c3a8"
        }
      ],
      "licenses" : [ ],
      "purl" : "pkg:maven/net.jcip/jcip-annotations@1.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://jcip.net/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/net.jcip/jcip-annotations@1.0?type=jar"
    },
    {
      "publisher" : "Chemouni Uriel",
      "group" : "net.minidev",
      "name" : "json-smart",
      "version" : "1.3.1",
      "description" : "JSON (JavaScript Object Notation) is a lightweight data-interchange format. It is easy for humans to read and write. It is easy for machines to parse and generate. It is based on a subset of the JavaScript Programming Language, Standard ECMA-262 3rd Edition - December 1999. JSON is a text format that is completely language independent but uses conventions that are familiar to programmers of the C-family of languages, including C, C++, C#, Java, JavaScript, Perl, Python, and many others. These properties make JSON an ideal data-interchange language.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "b4f09b247c03cc2d091502d5b1db1f7f"
        },
        {
          "alg" : "SHA-1",
          "content" : "69b3835e96d282ec85fc2e1517b8164c45ed639e"
        },
        {
          "alg" : "SHA-256",
          "content" : "ac3689112788e042088755e63ecd1f689adfeb04d7fb1cfd244513f94f82522c"
        },
        {
          "alg" : "SHA-512",
          "content" : "92fd0d0d276a1cd619857fb79aec20606bbc19405b5a7bfb6e4b968f877573184bec04bb4b28f1ffae7a3eaaf072f944338bbc1a795d62853b9eb0899f94edc6"
        },
        {
          "alg" : "SHA-384",
          "content" : "2f495d95c9b97a1e0cfef7ab90a9f29bb69f22232c1083250e414e0785265227febcee2fcae19ee1ee03ef5dc5fea634"
        },
        {
          "alg" : "SHA3-384",
          "content" : "25f3e2698dfdbb9f9727ab45e827b3a8b9cbbb1742c0af377335a39b25b6b89c45593d984ae81653b07952867263c32e"
        },
        {
          "alg" : "SHA3-256",
          "content" : "f2097c31a5796c4da739498aac1f23d4e7a2beed81a0478996687f3698f6887d"
        },
        {
          "alg" : "SHA3-512",
          "content" : "460154ecef1e86bbc5961236878e59a478e50aef42a81501fca644a1ca1bd6436d630c4e86573cc6d40f44146cf4378aacd2d209edca2be0af07fb3c500616f5"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/net.minidev/json-smart@1.3.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://json-smart/"
        },
        {
          "type" : "distribution",
          "url" : "http://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netplex/json-smart"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/net.minidev/json-smart@1.3.1?type=jar"
    },
    {
      "group" : "org.bouncycastle",
      "name" : "bcprov-jdk15on",
      "version" : "1.52",
      "description" : "The Bouncy Castle Crypto package is a Java implementation of cryptographic algorithms. This jar contains JCE provider and lightweight API for the Bouncy Castle Cryptography APIs for JDK 1.5 to JDK 1.8.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "873ac611cb0d7160c0a3d30eee964454"
        },
        {
          "alg" : "SHA-1",
          "content" : "88a941faf9819d371e3174b5ed56a3f3f7d73269"
        },
        {
          "alg" : "SHA-256",
          "content" : "0dc4d181e4d347893c2ddbd2e6cd5d7287fc651c03648fa64b2341c7366b1773"
        },
        {
          "alg" : "SHA-512",
          "content" : "0869118e0cd93c3a36265334663ed8e9f892dd212dcddc63664f34e1fed822b5b2096ff7bb8eea3f98d4ec4d026536c794485df62715f13e8de8d892347dcc73"
        },
        {
          "alg" : "SHA-384",
          "content" : "691469807f7acd91f5e06139bbdc5aaa88496eafc124425fd2f86bfdeeeb1242b5fa2acc0274e0089d3ca3662613dc35"
        },
        {
          "alg" : "SHA3-384",
          "content" : "90e627e11073ff5da1782657f12fccc5aa1c28a30ec6991d18e9525cac69b71ef6a8df3c5ccf1fbf939d77868c9ca78c"
        },
        {
          "alg" : "SHA3-256",
          "content" : "28553e2419eef6e59368cf5ee1942a15e809f0ba76c8b9625e56e75153d3c246"
        },
        {
          "alg" : "SHA3-512",
          "content" : "f00bbd8adaf704ac9877451a4251ef763753619860591de7e487d7cfa41ad8dfb7699b5c3a3faea4e0fd6260dcb1c57a02c066fd0a255054dad3e494e068aaba"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "Bouncy Castle Licence",
            "url" : "http://www.bouncycastle.org/licence.html"
          }
        }
      ],
      "purl" : "pkg:maven/org.bouncycastle/bcprov-jdk15on@1.52?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.bouncycastle.org/java.html"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://www.bouncycastle.org/jira/secure/Dashboard.jspa"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/bcgit/bc-java"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.bouncycastle/bcprov-jdk15on@1.52?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.kerby",
      "name" : "kerb-admin",
      "version" : "1.0.1",
      "description" : "Kerby-kerb Admin facilities",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "a673628234b00564b9d3254990348a85"
        },
        {
          "alg" : "SHA-1",
          "content" : "7868b29620b92aa1040fe20d21ba09f2506207aa"
        },
        {
          "alg" : "SHA-256",
          "content" : "27b012f556b02bdf4ecd0742a7ecdd725a562e95a194e3413662fe2e781ff889"
        },
        {
          "alg" : "SHA-512",
          "content" : "899bad1f5478c2687844190626ae71c8526d9918d2daf66d32594107219f1aac18d883fb95797180c770d4245be02e1e52c1dbf0052dd5bfb534a23b37c68333"
        },
        {
          "alg" : "SHA-384",
          "content" : "acfa9138d33cd22f60f662df93f27d4a6816db814e3d1325ab61da6fbfce175bec3241a246a5f89290d5231253962134"
        },
        {
          "alg" : "SHA3-384",
          "content" : "a1bad1a78cd122e5fa3a311f316556cf166316888a76fe270432309395cb8087ca11d7c9c05a2513c97af363201b97ee"
        },
        {
          "alg" : "SHA3-256",
          "content" : "8bc8762d39257cab3df4e5589397bcf058b95ad8c3808d5dc3558b8f713b4b03"
        },
        {
          "alg" : "SHA3-512",
          "content" : "02b652658f36e62413fb28c93191983f022b5851699f6408ec896ec2a66512a0a150fab724f88e60c9d7a7f70ec61c7c03df7be6e57e71b9f8fdf0c3c4919a1f"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.kerby/kerb-admin@1.0.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://directory.apache.org/kerby/kerby-kerb/kerb-admin"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/directory-kerby/kerby-kerb/kerb-admin"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.kerby/kerb-admin@1.0.1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.kerby",
      "name" : "kerb-server",
      "version" : "1.0.1",
      "description" : "Kerby-kerb Server",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "0c067e61bd55c894a2ed67d25c75b323"
        },
        {
          "alg" : "SHA-1",
          "content" : "c56ffb4a6541864daf9868895b79c0c33427fd8c"
        },
        {
          "alg" : "SHA-256",
          "content" : "dff4eebc6cadaa8bdc1084fc1d4c20fda954aed74913845e79c89572768e463f"
        },
        {
          "alg" : "SHA-512",
          "content" : "a3c1feb689f1ca216afee0f79ce4173f3d8d4d1dd7a4c591788d1f7228d582affff3e9340fa8d163d8fbcb8551f8d8768142d3e8ec1bf27475b5ae0aed390130"
        },
        {
          "alg" : "SHA-384",
          "content" : "0e38a7b58679f4027faab0b5b32d7b2b993986c4344472eb1de70158793727d108ad289ac8faeaa199107476e8076499"
        },
        {
          "alg" : "SHA3-384",
          "content" : "b37a07dd624887918d6da326bc865d5c28caf7201ca5c35e2c4b1d1ac5244f6ded6119e32adcb78c6eda326c8f4e8122"
        },
        {
          "alg" : "SHA3-256",
          "content" : "33c23af2999f6d40213bc9bf242180308c74d6f45bad0a97dcbf56d17fe8b9d7"
        },
        {
          "alg" : "SHA3-512",
          "content" : "522c138baecc6d68df6afbdc8ef1774c6853fb029e4864e8b9cd4c618103714b37886ddaa88f1a764f3304e625df0b3d759a3a505fd52423f548e824550b585f"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.kerby/kerb-server@1.0.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://directory.apache.org/kerby/kerby-kerb/kerb-server"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/directory-kerby/kerby-kerb/kerb-server"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.kerby/kerb-server@1.0.1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.kerby",
      "name" : "kerb-identity",
      "version" : "1.0.1",
      "description" : "Kerby-kerb Identity",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "b25172596ffaa92105bae3d5f54639ff"
        },
        {
          "alg" : "SHA-1",
          "content" : "eb91bc9b9ff26bfcca077cf1a888fb09e8ce72be"
        },
        {
          "alg" : "SHA-256",
          "content" : "35fd995cc7a0c71f86adaf716dee34f6e4d1e473eff452a74f4430bd196e6424"
        },
        {
          "alg" : "SHA-512",
          "content" : "a6d15629c637e7e66772bd5d1430ffe8a435261e50eb534c7a133a063292455ff4d237f09570defbddee6bca04a446e7ce30774ca8f32d540e6a2a19af2b92d3"
        },
        {
          "alg" : "SHA-384",
          "content" : "27beb9db175a5f8b114aff2a2bc4112bce7725a81522f8e1ed603d589e513cebc8fbdd932c29282607b5948e4eb6965c"
        },
        {
          "alg" : "SHA3-384",
          "content" : "b4604a02d635f27ffd134e92370f0b11328402e0a3132ba6845ba7d1cc178edecd8939fd1c71d7ff71f009c6c8d0692e"
        },
        {
          "alg" : "SHA3-256",
          "content" : "442539810b6066b12b3ae45397700eb34198e095ebfe7719a08ad9353ff274dd"
        },
        {
          "alg" : "SHA3-512",
          "content" : "d38b57eacbad2123d0667d9b464f34c0d68533e0ea6aefaee296ebee8b5c89b824c7f8e58de95bf77e01d7ff32fbeb566f5a9602906f77adb33cb4420b9b4458"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.kerby/kerb-identity@1.0.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://directory.apache.org/kerby/kerby-kerb/kerb-identity"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/directory-kerby/kerby-kerb/kerb-identity"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.kerby/kerb-identity@1.0.1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.kerby",
      "name" : "kerby-xdr",
      "version" : "1.0.1",
      "description" : "Kerby XDR Project",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "052ad9372894a4f0ef0f7792dd7daa9a"
        },
        {
          "alg" : "SHA-1",
          "content" : "7d1b5b69a5ea87fb2f62498710d9d788d17beb2b"
        },
        {
          "alg" : "SHA-256",
          "content" : "c24e2d9fbaef40a0a61ee36c19e41db5141bfbe7a2669be0227dee86ccca6d6f"
        },
        {
          "alg" : "SHA-512",
          "content" : "39cd6ac81c96839c28502ddd46efe32a0a74891ac497a61a7889a4bfef67c70806010402585b557a6617c522bf176cdb6021dc6bec80ad82fbeca3237f7c302d"
        },
        {
          "alg" : "SHA-384",
          "content" : "18ea9b65062387f526d7fd3af30c865f8686c2d8978147e6e3dcd11ae3eb609c3838d0e231ef3847062f6e804011616e"
        },
        {
          "alg" : "SHA3-384",
          "content" : "b08175b819e4829d99102b99a274bd785741870530041f5b7eec769855c2b4b46002e1cc6ab557a5c9a76dc507dbac63"
        },
        {
          "alg" : "SHA3-256",
          "content" : "edac6cf5fc5b0432b7f13ad9f7a511bd84114379bd80d81c9ee94ca2b803eb08"
        },
        {
          "alg" : "SHA3-512",
          "content" : "79eaa7c3543ffbf40a013300f5d8629ecd45e64fe9a03efe328223d431968703b492ab6bf4892b0cd2625f0c280894bd1fca7df279bb7d0b33121406887dcc88"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.kerby/kerby-xdr@1.0.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://directory.apache.org/kerby/kerby-common/kerby-xdr"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/directory-kerby/kerby-common/kerby-xdr"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.kerby/kerby-xdr@1.0.1?type=jar"
    },
    {
      "publisher" : "JUnit",
      "group" : "junit",
      "name" : "junit",
      "version" : "4.13.2",
      "description" : "JUnit is a unit testing framework for Java, created by Erich Gamma and Kent Beck.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "d98a9a02a99a9acd22d7653cbcc1f31f"
        },
        {
          "alg" : "SHA-1",
          "content" : "8ac9e16d933b6fb43bc7f576336b8f4d7eb5ba12"
        },
        {
          "alg" : "SHA-256",
          "content" : "8e495b634469d64fb8acfa3495a065cbacc8a0fff55ce1e31007be4c16dc57d3"
        },
        {
          "alg" : "SHA-512",
          "content" : "a31b9950f929a7e5a600d89787ef40e42a8a8e2392e210d0c0f45b3572937670a18a524f1815508cd1152cd1eaa7275cb7430ba45c053be365c83c231bccd3f0"
        },
        {
          "alg" : "SHA-384",
          "content" : "9f85c56a77c699eb87630b9e8224068a34c296bcd9aadb52248dd4665036f5bf1048fe75e5cb590b59e7855ca716acae"
        },
        {
          "alg" : "SHA3-384",
          "content" : "590cfd9396424583879ca8ad732870406bab18325ac72fb2bbe188b9611278d6341700badf7cfc32525b8ff42900c905"
        },
        {
          "alg" : "SHA3-256",
          "content" : "a06b3fd2fd1d9f4306b58125484e3605a395afe5ffe2c801e43ae462f366a430"
        },
        {
          "alg" : "SHA3-512",
          "content" : "a6d25ce3c14f9065f06dfd0e68e1dad5c03bd5de0a302c44ca4733d2cb87ec1bc6f0abd36d65aeee8caf328b6881432c4b682fa4b4b1fa931c3c950de5129fb2"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-1.0",
            "url" : "http://www.eclipse.org/legal/epl-v10.html"
          }
        }
      ],
      "purl" : "pkg:maven/junit/junit@4.13.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://junit.org"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/junit-team/junit4/actions"
        },
        {
          "type" : "distribution",
          "url" : "https://github.com/junit-team/junit4/wiki/Download-and-Install"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/junit-team/junit4/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/junit-team/junit4"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/junit/junit@4.13.2?type=jar"
    },
    {
      "group" : "org.hamcrest",
      "name" : "hamcrest-core",
      "version" : "1.3",
      "description" : "This is the core API of hamcrest matcher framework to be used by third-party framework providers. This includes the a foundation set of matcher implementations for common operations.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "6393363b47ddcbba82321110c3e07519"
        },
        {
          "alg" : "SHA-1",
          "content" : "42a25dc3219429f0e5d060061f71acb49bf010a0"
        },
        {
          "alg" : "SHA-256",
          "content" : "66fdef91e9739348df7a096aa384a5685f4e875584cce89386a7a47251c4d8e9"
        },
        {
          "alg" : "SHA-512",
          "content" : "e237ae735aac4fa5a7253ec693191f42ef7ddce384c11d29fbf605981c0be077d086757409acad53cb5b9e53d86a07cc428d459ff0f5b00d32a8cbbca390be49"
        },
        {
          "alg" : "SHA-384",
          "content" : "4b5297d2a12cc32b824153afc83f1ba9f1869ca288330f0a2f759659d09e4c420eb6ba4a1efbfa0657b625edd41293d5"
        },
        {
          "alg" : "SHA3-384",
          "content" : "b14d34985c0a78cf0ba19b5a18bffd403e08adcb2afde228ddef6e16121c7046dbebf58c04d3419311c4496c48aa93be"
        },
        {
          "alg" : "SHA3-256",
          "content" : "f679af77deedf69b3c3066f7916583848c6fd32a950f9c0b0e2ef1da121717ba"
        },
        {
          "alg" : "SHA3-512",
          "content" : "bca821931e438a1977b7b4356b5f8cebf485634f82159d505c48267c34e6a0f4fde9c2917331365f66dc0e52e2ca3a2db5256863584110c27ecebefc28741f63"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.hamcrest/hamcrest-core@1.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/hamcrest/JavaHamcrest/hamcrest-core"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/hamcrest/JavaHamcrest/hamcrest-core"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.hamcrest/hamcrest-core@1.3?type=jar"
    },
    {
      "group" : "io.confluent.flink",
      "name" : "flink-streaming-java",
      "version" : "1.19.2-cp2",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "a95d389b3178c75ee92563e3e9d8b451"
        },
        {
          "alg" : "SHA-1",
          "content" : "60be098d6d0386f8b90298e519a521555a9681dd"
        },
        {
          "alg" : "SHA-256",
          "content" : "f6d439090e37978b3466c217a1c5e243a64f629c9a7deb4b25bfdf510e31f417"
        },
        {
          "alg" : "SHA-512",
          "content" : "c090ca97cd950751b53e58183fd4846b8edb208b7d487d5c4e4c6550f3faf86b10ec24dc030cd52cb7693635714b56586285dc667e094300f7eacdb030ffd779"
        },
        {
          "alg" : "SHA-384",
          "content" : "194d405f3ef767881f3e2c496ff73935cbafdb072c63b3926b969e554bf5953697a752f60e342887ddbffb39743a98a9"
        },
        {
          "alg" : "SHA3-384",
          "content" : "5888c4b183f102c35dd82c89d114df4254bf0b79f3b1422e5b7b66945b0f2ba6669a00b7a61d2e0465aaefced57f2a13"
        },
        {
          "alg" : "SHA3-256",
          "content" : "ff79d344df91cab4d9a01cd102d929dc1cd00a76f3524d9bcc05704d6c71ca7c"
        },
        {
          "alg" : "SHA3-512",
          "content" : "d2754f33bc74a2ecb6d47e54b7b71f1b5caccc22d62d6ee115b0a76f6e64317e4d80d2bc273443973f56dca6210c20c342844a5ee04672db9e3e736cff72754f"
        }
      ],
      "purl" : "pkg:maven/io.confluent.flink/flink-streaming-java@1.19.2-cp2?classifier=tests&type=test-jar",
      "type" : "library",
      "bom-ref" : "pkg:maven/io.confluent.flink/flink-streaming-java@1.19.2-cp2?classifier=tests&type=test-jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "io.confluent.flink",
      "name" : "flink-statebackend-rocksdb",
      "version" : "1.19.2-cp2",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "40ac841f11b9fbd3e5ed6bdef40d24b2"
        },
        {
          "alg" : "SHA-1",
          "content" : "686a3ab5c92020cb08fbfec0166802fe970cb0fb"
        },
        {
          "alg" : "SHA-256",
          "content" : "04ab3799d43810c37cc9c271f9f9382f1ca6cc20e6ef4f77e5ce1b0ff70535a1"
        },
        {
          "alg" : "SHA-512",
          "content" : "f86ecfc28946ed0f9214831f64f350685df568a9ba3ea660f502282bc4b1851d3b7b327d85365d709350b5624a62408542a77b9f0e3a4bc3704979af3199d841"
        },
        {
          "alg" : "SHA-384",
          "content" : "32ad87a356a91def9a69ed1891871ff4cfea31e8674c8eedef42f8f28c7a3e238750a8eb4046ddeb99300a8b351ea976"
        },
        {
          "alg" : "SHA3-384",
          "content" : "338d6e2740229c0cd7f1b03b277ab77d8d559d60a6aa0716715a21ff5553fe8154c6f43c4f11af4557b199091be132de"
        },
        {
          "alg" : "SHA3-256",
          "content" : "ea88baa1a0411820a1ea19da7b3c568eb7e3965ce8edbe75423349ca53b1e6db"
        },
        {
          "alg" : "SHA3-512",
          "content" : "45e4e748d8c2e542e8298df5537e9a8d56168dadf682bdf034b9e773f6adf80e64d686d865f2ecfdbdb0892beaddc2efbfaad94eeb2bcfa619241e89ab506933"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.confluent.flink/flink-statebackend-rocksdb@1.19.2-cp2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://flink.apache.org/flink-state-backends/flink-statebackend-rocksdb"
        },
        {
          "type" : "distribution",
          "url" : "s3://cp-flink-staging-654654529379-us-west-2/maven-staging/e376491b71b31739887d29e34e6552860f69668d"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink/flink-state-backends/flink-statebackend-rocksdb"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.confluent.flink/flink-statebackend-rocksdb@1.19.2-cp2?type=jar"
    },
    {
      "publisher" : "Facebook",
      "group" : "com.ververica",
      "name" : "frocksdbjni",
      "version" : "6.20.3-ververica-2.0",
      "description" : "RocksDB fat jar with modifications specific for Apache Flink that contains .so files for linux32 and linux64 (glibc and musl-libc), jnilib files for Mac OSX, and a .dll for Windows x64.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "b312842e5ae7b60da4fa742214600fa6"
        },
        {
          "alg" : "SHA-1",
          "content" : "2847dfbbd8debea1bd0303a24408dba9fbe6afe8"
        },
        {
          "alg" : "SHA-256",
          "content" : "5e6e5063b75196a17fbeaf656f088a807f83177525d9ecbec7125b9f3630b966"
        },
        {
          "alg" : "SHA-512",
          "content" : "5df61a2acb0ab3ddb3cefd8efd12a53e61ab7349b1addfc8ae424eb94611da2b44b58705b43fd9f9a1d6a3092df40c32001dba37eaa58c59d663c1ff4330b8f3"
        },
        {
          "alg" : "SHA-384",
          "content" : "06e11032b60444d685d175e19364c6f7dacacc2aa7999d1bf3c89e6bffbb627833e030dcd7978d6d50378d08d9772a81"
        },
        {
          "alg" : "SHA3-384",
          "content" : "9363f90b3922947c09be9fb98b3e2fb8f5190b9dbc803ecf1c7816f26ad1d818127edd8761d95bc1bec58879077d6a50"
        },
        {
          "alg" : "SHA3-256",
          "content" : "81cd77f6fff3debf62a6f6a7d523e1c26c0c2c05938f6aaca17b555d74f878c8"
        },
        {
          "alg" : "SHA3-512",
          "content" : "02f51f2052afca0fcd6b944dfce56fc5542ffa6a0be1db6e7a344b30b97dc59d2a6f312413e04172387b0583f11f621c4610211c0a78766c25ebe3525919c240"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.ververica/frocksdbjni@6.20.3-ververica-2.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://rocksdb.org"
        },
        {
          "type" : "mailing-list",
          "url" : "https://groups.google.com/forum/#!forum/rocksdb"
        },
        {
          "type" : "vcs",
          "url" : "scm:git:https://github.com/ververica/frocksdb.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.ververica/frocksdbjni@6.20.3-ververica-2.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "io.confluent.flink",
      "name" : "flink-statebackend-changelog",
      "version" : "1.19.2-cp2",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "05611362e8721773315e0ca68aaf9339"
        },
        {
          "alg" : "SHA-1",
          "content" : "61b3412bce98493a4fa99f19822792076479ac3e"
        },
        {
          "alg" : "SHA-256",
          "content" : "bddd7f3750b2d03a8d141deeaa41d0d854d7d1827dae24e9b88e406ed2d68508"
        },
        {
          "alg" : "SHA-512",
          "content" : "6843d2272fbf1f5fdd24e4330a30b094d9c2ad3377991ea2234d76fd281c6b920aefc5fbadec72b567022a52e8e338621021fb7319b528343996f0e6f494b24a"
        },
        {
          "alg" : "SHA-384",
          "content" : "ea1670a6b90da2c3798a5626ba3da0b9f8dbc96d1bc44b3057c5fc921473b87db4923ee075f1145999259b47fb458ce9"
        },
        {
          "alg" : "SHA3-384",
          "content" : "925075346a48f7c3c34d21998c8aa8e598f6855ab2a5b344cf504ebc71a054316f71832c8a65352fb7bbbf69327e05bb"
        },
        {
          "alg" : "SHA3-256",
          "content" : "ed23c6dc1a82b8b55fa9d50d2940164a12beba4510afce8d8a702fa61071ec0a"
        },
        {
          "alg" : "SHA3-512",
          "content" : "9a45b62c33c067d7f230366414e83466919b5ead566d6e081262a5e97d6cc23531a6ef2f8d6a6860d7ee10e15be7d2d8be24002a24b0fa23d3d2271b9a2980f0"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.confluent.flink/flink-statebackend-changelog@1.19.2-cp2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://flink.apache.org/flink-state-backends/flink-statebackend-changelog"
        },
        {
          "type" : "distribution",
          "url" : "s3://cp-flink-staging-654654529379-us-west-2/maven-staging/e376491b71b31739887d29e34e6552860f69668d"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink/flink-state-backends/flink-statebackend-changelog"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.confluent.flink/flink-statebackend-changelog@1.19.2-cp2?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "io.confluent.flink",
      "name" : "flink-statebackend-common",
      "version" : "1.19.2-cp2",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "52eae05c2401695a10d51ee73056061b"
        },
        {
          "alg" : "SHA-1",
          "content" : "42d36fb3e8e9954f5f3be335b927ecfac4826638"
        },
        {
          "alg" : "SHA-256",
          "content" : "c86cc8474b33bc59c2c0295bac2c1fd1cb4b74c3ac7f1db1c25ff57c07592a1c"
        },
        {
          "alg" : "SHA-512",
          "content" : "143e9d68d2c45186b0fe518a9176c565cde980b6056187b6d914407b9ddc33fa73d8a7856ef2585192d3c63981a2a1d22d648dbca31f09e27f606658519a65af"
        },
        {
          "alg" : "SHA-384",
          "content" : "53722bf74b7c7c050e1a27f4b7efd1e361ac04df78aef2da67763a8e9040ed2e5121d5f275d2f7d35b5d32017ece2bc9"
        },
        {
          "alg" : "SHA3-384",
          "content" : "f5ef1626215dbbf6cbfd38ddaa41cf0ce3caba3630240fa5d221f828a78ff91e2bebd7379fdec0da137077a6e340e6c9"
        },
        {
          "alg" : "SHA3-256",
          "content" : "eb786fc84aaef623a9d4830c81b41e0ac51be07f99dd07749334cd78b2f464f0"
        },
        {
          "alg" : "SHA3-512",
          "content" : "f092f7fd659a07e7093023d7085e0106df27e825582675eaeec83939a5bb9f7e6160f60bf0549af26c51e4ca797c68d5938ad355c1f03f9525f43d84726831f2"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.confluent.flink/flink-statebackend-common@1.19.2-cp2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://flink.apache.org/flink-state-backends/flink-statebackend-common"
        },
        {
          "type" : "distribution",
          "url" : "s3://cp-flink-staging-654654529379-us-west-2/maven-staging/e376491b71b31739887d29e34e6552860f69668d"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink/flink-state-backends/flink-statebackend-common"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.confluent.flink/flink-statebackend-common@1.19.2-cp2?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "io.confluent.flink",
      "name" : "flink-dstl-dfs",
      "version" : "1.19.2-cp2",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "c5b56c6cf1915ecb27f253d82a291039"
        },
        {
          "alg" : "SHA-1",
          "content" : "cf2a99c4eb18ceb3faa38dbe5b0fa2b43fa76f62"
        },
        {
          "alg" : "SHA-256",
          "content" : "c0f85c9e1c1bd33e08c6f46b73ecddbf8ebfc0c516f7d55254ed8e9094000dc0"
        },
        {
          "alg" : "SHA-512",
          "content" : "b73202a0f25d35688a039515d40bbd541b083ae0f1e2e95c7e7bf5e94449a773f21a585e30a3bbb47a6a77da88c2b58ce833f079c3ff7637f6f0b1b892a1fd0f"
        },
        {
          "alg" : "SHA-384",
          "content" : "4cd1c14a8b420ed2ca51b9e5215f625fb5beb85dbd71f3b05c18842882894a9c513bfa2ec09449c3b7502c8f8c1535e2"
        },
        {
          "alg" : "SHA3-384",
          "content" : "a5cbda7554b4ae4dbcd002616f01136016737a10851052fc13adcdcfdc629896830968f1eb1a79599bba511243525b22"
        },
        {
          "alg" : "SHA3-256",
          "content" : "e9d7eee95c761360b608fa34a3593a3d31b34d0b0fdd770b7be15cd464ef23c6"
        },
        {
          "alg" : "SHA3-512",
          "content" : "3a35e6ce464aa53060dae7a8626f9d4b405ceb6b12e79acb7aa60962e281ff22aa47c7bf964f0512bcf5a18557f01ff587e7f07d8f978790c1257a969f694263"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.confluent.flink/flink-dstl-dfs@1.19.2-cp2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://flink.apache.org/flink-dstl/flink-dstl-dfs"
        },
        {
          "type" : "distribution",
          "url" : "s3://cp-flink-staging-654654529379-us-west-2/maven-staging/e376491b71b31739887d29e34e6552860f69668d"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink/flink-dstl/flink-dstl-dfs"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.confluent.flink/flink-dstl-dfs@1.19.2-cp2?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.curator",
      "name" : "curator-test",
      "version" : "5.4.0",
      "description" : "Unit testing utilities.",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "1039b67e2dafdfc64f58aedc43798039"
        },
        {
          "alg" : "SHA-1",
          "content" : "bdf76dcd0981ee3fed5df7db99778158c77b9e0c"
        },
        {
          "alg" : "SHA-256",
          "content" : "470a24f22eb392a945ca645d08ff6f38596ef94964cb0201ca40b765e00dddcd"
        },
        {
          "alg" : "SHA-512",
          "content" : "02f4543569ec76fce094e8491fcdacb9e421d50e1cd8e747b6dc6c9d7b562cdc9c3c41f46bfa24f60169ffa36c62f7a96e2e73a34d5c6853fe1eb5c9d43a359a"
        },
        {
          "alg" : "SHA-384",
          "content" : "ce2fc507a4a06b28f5e694a69d89a4b2cf64b9d5f8ab9ad3725106f409979a4186b0c406cc47f03ef06525e68ecb4735"
        },
        {
          "alg" : "SHA3-384",
          "content" : "0e10c50e501c8d87aac2c465a62b0a84a259e7d2cb5bdff87afc0beb5ff5627c6a869576d2eab7985a5dccdbc66f1f94"
        },
        {
          "alg" : "SHA3-256",
          "content" : "ce05f3790590feda7029644ba97d9a7883d7ea9c224d72a4a47a3683a2543af2"
        },
        {
          "alg" : "SHA3-512",
          "content" : "35906334dc9fa317de1604f00c4b95707fbb08a0c50201e2c24bb003597e9edcb6af70ed76c127d2cd9b9825a1d7ef5c5278e0659438580b32a41e725b2b362b"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.curator/curator-test@5.4.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://curator.apache.org/curator-test"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/job/Curator/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/CURATOR"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/curator-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/curator.git/curator-test"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.curator/curator-test@5.4.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.zookeeper",
      "name" : "zookeeper",
      "version" : "3.7.1",
      "description" : "ZooKeeper server",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "5a983ef4352f2dc062dd764a6d3bb17d"
        },
        {
          "alg" : "SHA-1",
          "content" : "b598708e153ff74dd2ebb800419df96df8a01c2d"
        },
        {
          "alg" : "SHA-256",
          "content" : "1d119d812782388589725f1ab5b49080a0ea931da0dc93c7c0f1d9ee51a32fe8"
        },
        {
          "alg" : "SHA-512",
          "content" : "9e709a8f0a488f892e667dba09934443da431691dcdd331dda512b160f7ffbf8b7361abd287111d6c22c964885255bef257a7776c21bc4a4d05cb0e380f2744c"
        },
        {
          "alg" : "SHA-384",
          "content" : "9826f4986bd35167ce2ec6a5ade6c170af9835d1e2829553a35ba4f2de56b20dfb034481f72d93551ac4af0660c402da"
        },
        {
          "alg" : "SHA3-384",
          "content" : "312e7e7efe01a4e25becc7d7a0ce4c770272ae5b7ec69335e70e98b9d7108fb5dcda59dd3c95222be13244d514975ec4"
        },
        {
          "alg" : "SHA3-256",
          "content" : "4ae196c75e34b44d6fcde8ec87cf80004489e20fbd32384887507088fcab35e0"
        },
        {
          "alg" : "SHA3-512",
          "content" : "e6d56da76b433aa1103ad75c9db60ebc3e6c9feb44bb5db99cfd2afb7c3008c01e31ec711d6c10c40ababc96f6d8dca5a40a24fd07a5d0cb88dc380aba80f625"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.zookeeper/zookeeper@3.7.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://zookeeper.apache.org/zookeeper"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-hadoop.apache.org/view/ZooKeeper/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/ZOOKEEPER"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/zookeeper-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf/zookeeper.git/zookeeper"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.zookeeper/zookeeper@3.7.1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.zookeeper",
      "name" : "zookeeper-jute",
      "version" : "3.7.1",
      "description" : "ZooKeeper jute",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "2fddc39d1851933f49f2c9dd79d6ec0f"
        },
        {
          "alg" : "SHA-1",
          "content" : "569a3fa7bad2127d74219bd2aaaac56a89c21b02"
        },
        {
          "alg" : "SHA-256",
          "content" : "ee6e6c0c3cbf2da1eb171272055b915351ecfdf4abdea5cc0371baf0275197d4"
        },
        {
          "alg" : "SHA-512",
          "content" : "163c9a75888d28072b964d08ef6650be2f46810a1b0c46ff3f96e48a2ecea994b71f9e5a655b8d4e13b2522e97a26921399ce55207301b6f6a14dc0724fb24b5"
        },
        {
          "alg" : "SHA-384",
          "content" : "56931db6c37b820bb97c3263cab82d196a4ad2eedd65ce3ce63864668b21045f9677a74c8d6c8a04093541a2127e6a7a"
        },
        {
          "alg" : "SHA3-384",
          "content" : "d9025aaef93bf2c59082a6dc1f4c38f12a81a2514d5b266c871e06927d883dfcc1dd28b601a649b2870565b9f8b2d534"
        },
        {
          "alg" : "SHA3-256",
          "content" : "b6417bf23b335b62d5b9b20290c537c051744329b12e73a55eed0085ad605617"
        },
        {
          "alg" : "SHA3-512",
          "content" : "a40b8187a6f20043cae0e533709dccf5b581c81ef40272ae049affd814071dcd2cf753f9cf21fa8e8aa087a1c4fdbd19b47b1c306fd59d91e974b106441e2621"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.zookeeper/zookeeper-jute@3.7.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://zookeeper.apache.org/zookeeper-jute"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-hadoop.apache.org/view/ZooKeeper/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/ZOOKEEPER"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/zookeeper-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf/zookeeper.git/zookeeper-jute"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.zookeeper/zookeeper-jute@3.7.1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.yetus",
      "name" : "audience-annotations",
      "version" : "0.12.0",
      "description" : "Annotations for defining API boundaries and tools for managing javadocs",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "76ba71bbe18c4724d96bec68bbe12ff1"
        },
        {
          "alg" : "SHA-1",
          "content" : "e0efa60318229590103e31c69ebdaae56d903644"
        },
        {
          "alg" : "SHA-256",
          "content" : "ffb101fc066360ff3c77457c927fd7967fb096a6ee9e046ab7071447d8208efc"
        },
        {
          "alg" : "SHA-512",
          "content" : "264a5251272ec55eca1fae5a8fb9336d1eca1ee3bfb586d1ebc382fcfd37077c21cbfa9e198daf4e1eebe9f6fa90487bec2f85bc1c55cf5666cbbfc4d18b1715"
        },
        {
          "alg" : "SHA-384",
          "content" : "f936d92b5c3b3c88428fc7452871e4df112935dd25356396d15deb73dd39790f45909a3d14f038e9f585cee79622ad47"
        },
        {
          "alg" : "SHA3-384",
          "content" : "67ca97a525d98c3dab9ffda40e11d6c683f6f4208ae4a5b28dbd3e2b8b37187dfdcd1d9b89222dc69e5b84ac212f4428"
        },
        {
          "alg" : "SHA3-256",
          "content" : "fd99b55afe40884b5f6cfd9ffbdcd07fa32833443dead288390ca8e737dd3337"
        },
        {
          "alg" : "SHA3-512",
          "content" : "4aaece7bdadc2c2d9660b16345218cfc68a2ea344374d0ffbcdcc3722ff6be5f06c92231ae68ec3884f1aa9b99956cb5135b4060c5457f463251f3767003ad20"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.yetus/audience-annotations@0.12.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://yetus.apache.org/audience-annotations"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/YETUS"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/yetus-dev/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/yetus.git/audience-annotations"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.yetus/audience-annotations@0.12.0?type=jar"
    },
    {
      "group" : "io.dropwizard.metrics",
      "name" : "metrics-core",
      "version" : "3.2.5",
      "description" : "Metrics is a Java library which gives you unparalleled insight into what your code does in production. Metrics provides a powerful toolkit of ways to measure the behavior of critical components in your production environment.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "1f580bf5834f0f4db1a93c784bda9953"
        },
        {
          "alg" : "SHA-1",
          "content" : "ea2316646e9787c5b2d14ca97f4ef7ad5c6b94e9"
        },
        {
          "alg" : "SHA-256",
          "content" : "3844be6a6a4ef065abe336c6eadf7d5e880ca13759a0c13a01d0d08ea4d05a8c"
        },
        {
          "alg" : "SHA-512",
          "content" : "3fbbe2ea938d4d1ac35bc62c067bc382eb438b9417193e65e461c9932336f119eaecdfa2d7db0a14c4c70aebcc11190ecf0506f29505bd1c1642d076bdf268d2"
        },
        {
          "alg" : "SHA-384",
          "content" : "0fd3be839d72c4f573407cf4c202d6a3fcffdf6c869183e249ceeaed50a3b4db8c54112be0b94abfebacdeeee8458b8e"
        },
        {
          "alg" : "SHA3-384",
          "content" : "6b7299283d2c47126054d2bb21becfcd504a1ee9fee493ae232635ec6d90c04d4f502854a3c530f8f44e4b29638db18b"
        },
        {
          "alg" : "SHA3-256",
          "content" : "d06d4214809d8c4cf21ea542debfd162a3af4877399608f4488601cd0268a3ed"
        },
        {
          "alg" : "SHA3-512",
          "content" : "f8688e857db524d19b5c02b256b2a859de010227890b7e9b02431cc696ec682964392deba5133499eb6ea4b8ce9a98fcfe1bd0b39b58e9fb39977527e312ff66"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.dropwizard.metrics/metrics-core@3.2.5?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://metrics.dropwizard.io/metrics-core/"
        },
        {
          "type" : "distribution",
          "url" : "http://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://github.com/dropwizard/metrics/issues#issue/"
        },
        {
          "type" : "vcs",
          "url" : "http://github.com/dropwizard/metrics/metrics-core/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.dropwizard.metrics/metrics-core@3.2.5?type=jar"
    },
    {
      "group" : "com.google.guava",
      "name" : "guava",
      "version" : "31.1-jre",
      "description" : "Guava is a suite of core and expanded libraries that include utility classes, Google's collections, I/O classes, and much more.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "e37782d974104aa3b0a7bee9927c8042"
        },
        {
          "alg" : "SHA-1",
          "content" : "60458f877d055d0c9114d9e1a2efb737b4bc282c"
        },
        {
          "alg" : "SHA-256",
          "content" : "a42edc9cab792e39fe39bb94f3fca655ed157ff87a8af78e1d6ba5b07c4a00ab"
        },
        {
          "alg" : "SHA-512",
          "content" : "532664e3dd33699bdfb296e355bc58fde77edc019c10f464ae49fe2494a68fd25d1623a9c86bc72830ca9f1354226366ac6f3c09d77be952641e971386a4ebbb"
        },
        {
          "alg" : "SHA-384",
          "content" : "829ba1c473782158d43a0e56c932b45139f121a504613b27eacf6b0774354e52c5eccaab5c2da3753b5686b93f0169b4"
        },
        {
          "alg" : "SHA3-384",
          "content" : "55f70ee4afad92540faa9d260109c00190e6d1bbacf10b22e52f599103284c1a8b2a2043d8fafbe1309245290b5fe614"
        },
        {
          "alg" : "SHA3-256",
          "content" : "dd534fb7df6b380d8701290b0b0c4e388cf42f8179a436c509c0899afde91e5c"
        },
        {
          "alg" : "SHA3-512",
          "content" : "617288cc45858588e0626edd21382d38b87cd0e6c78221e3a1626f579d5b4acd4adff37b72e3e51c73e91132f43951d12369624dd515f87bcc0c54213db43ede"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.guava/guava@31.1-jre?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/google/guava"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/google/guava/actions"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/google/guava/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/google/guava/guava"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.guava/guava@31.1-jre?type=jar"
    },
    {
      "group" : "com.google.guava",
      "name" : "failureaccess",
      "version" : "1.0.1",
      "description" : "Contains com.google.common.util.concurrent.internal.InternalFutureFailureAccess and InternalFutures. Most users will never need to use this artifact. Its classes is conceptually a part of Guava, but they're in this separate artifact so that Android libraries can use them without pulling in all of Guava (just as they can use ListenableFuture by depending on the listenablefuture artifact).",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "091883993ef5bfa91da01dcc8fc52236"
        },
        {
          "alg" : "SHA-1",
          "content" : "1dcf1de382a0bf95a3d8b0849546c88bac1292c9"
        },
        {
          "alg" : "SHA-256",
          "content" : "a171ee4c734dd2da837e4b16be9df4661afab72a41adaf31eb84dfdaf936ca26"
        },
        {
          "alg" : "SHA-512",
          "content" : "f8d59b808d6ba617252305b66d5590937da9b2b843d492d06b8d0b1b1f397e39f360d5817707797b979a5bf20bf21987b35333e7a15c44ed7401fea2d2119cae"
        },
        {
          "alg" : "SHA-384",
          "content" : "67659dbd9647ec303d7f15128dc9dba19b98fd8d74758ee3b602451e32c855e236ccaafe08edf4bbfa245f981268440f"
        },
        {
          "alg" : "SHA3-384",
          "content" : "1460875f0331c5fa3791772a6a322a7db180261bc2adacf7271df1fbf3b088a587a755a604c039982cb593c5cfc1f101"
        },
        {
          "alg" : "SHA3-256",
          "content" : "ea86406e75fcd93eafe3cde1b3135ba485f1bb9b75fed98894a0bf1f0aee04f0"
        },
        {
          "alg" : "SHA3-512",
          "content" : "52ac0f487ab5dd27c9f2e54fd1d84c7a620cae9d49be4072aa2b11501787bf4391ddaa13d02eccdf19e8eea46aecbea5f6064b26777c1b836108a280652e04ac"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.guava/failureaccess@1.0.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/google/guava/failureaccess"
        },
        {
          "type" : "build-system",
          "url" : "https://travis-ci.org/google/guava"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/google/guava/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/google/guava/failureaccess"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.guava/failureaccess@1.0.1?type=jar"
    },
    {
      "group" : "com.google.guava",
      "name" : "listenablefuture",
      "version" : "9999.0-empty-to-avoid-conflict-with-guava",
      "description" : "An empty artifact that Guava depends on to signal that it is providing ListenableFuture -- but is also available in a second \"version\" that contains com.google.common.util.concurrent.ListenableFuture class, without any other Guava classes. The idea is: - If users want only ListenableFuture, they depend on listenablefuture-1.0. - If users want all of Guava, they depend on guava, which, as of Guava 27.0, depends on listenablefuture-9999.0-empty-to-avoid-conflict-with-guava. The 9999.0-... version number is enough for some build systems (notably, Gradle) to select that empty artifact over the \"real\" listenablefuture-1.0 -- avoiding a conflict with the copy of ListenableFuture in guava itself. If users are using an older version of Guava or a build system other than Gradle, they may see class conflicts. If so, they can solve them by manually excluding the listenablefuture artifact or manually forcing their build systems to use 9999.0-....",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "d094c22570d65e132c19cea5d352e381"
        },
        {
          "alg" : "SHA-1",
          "content" : "b421526c5f297295adef1c886e5246c39d4ac629"
        },
        {
          "alg" : "SHA-256",
          "content" : "b372a037d4230aa57fbeffdef30fd6123f9c0c2db85d0aced00c91b974f33f99"
        },
        {
          "alg" : "SHA-512",
          "content" : "c5987a979174cbacae2e78b319f080420cc71bcdbcf7893745731eeb93c23ed13bff8d4599441f373f3a246023d33df03e882de3015ee932a74a774afdd0782f"
        },
        {
          "alg" : "SHA-384",
          "content" : "caff9b74079f95832ca7f6029346b34b606051cc8c5a4389fac263511d277ada0c55f28b0d43011055b268c6eb7184d5"
        },
        {
          "alg" : "SHA3-384",
          "content" : "e939f08df0545847ea0d3e4b04a114b08499ad069ba8ec9461d1779f87a56e0c37273630a0f4c14e78c348d3ac7eb97f"
        },
        {
          "alg" : "SHA3-256",
          "content" : "1f0a8b1177773b3a8ace839df5eed63cbf56b24a38714898a6e4ed065c42559f"
        },
        {
          "alg" : "SHA3-512",
          "content" : "6b495ecc2a18b17365cb08d124a0da47f04bcdde81927b5245edf3edd8e498c3c3fb92ce6a4127f660bac851bb1d3e4510e5c20d03be47ce99dc296d360db285"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/google/guava/listenablefuture"
        },
        {
          "type" : "build-system",
          "url" : "https://travis-ci.org/google/guava"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/google/guava/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/google/guava/listenablefuture"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar"
    },
    {
      "group" : "org.checkerframework",
      "name" : "checker-qual",
      "version" : "3.12.0",
      "description" : "checker-qual contains annotations (type qualifiers) that a programmer writes to specify Java code for type-checking by the Checker Framework.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "ab1ae0e2f2f63601597a5a96fca8a54f"
        },
        {
          "alg" : "SHA-1",
          "content" : "d5692f0526415fcc6de94bb5bfbd3afd9dd3b3e5"
        },
        {
          "alg" : "SHA-256",
          "content" : "ff10785ac2a357ec5de9c293cb982a2cbb605c0309ea4cc1cb9b9bc6dbe7f3cb"
        },
        {
          "alg" : "SHA-512",
          "content" : "ff20c424e130c31c30b4f4f5b4374f8f98f94ddae2b123f3c213f147be6b3de57854ee5651b02dd97d352c1c1df2a8bfeef73d5307a71372f46a6002eab24d78"
        },
        {
          "alg" : "SHA-384",
          "content" : "60641d5967c60154359437cf49d8b0c14e7c1d876ab1fff4932590b19edcad0e65975299004ac896fb190f45b69ef1a1"
        },
        {
          "alg" : "SHA3-384",
          "content" : "aa56f81cc52d6fa2bf40be155584ea7bed253b29fa9d7aa9b56d898ea01909b217efd676ceb8c7c913c4d800bfee7529"
        },
        {
          "alg" : "SHA3-256",
          "content" : "85ce7342830164963b1cff7257c1e07aec3eb134ba4ff7102e77de8c33191c87"
        },
        {
          "alg" : "SHA3-512",
          "content" : "29ff1fc98ce64a52fc15796f127b5b100522ef88e15c5e129941c4954a3ef1b51a3059c131cb36ba4838c5ab76b2e0f2ab2dd4e9f6edba0ec8154c450c0a2130"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT"
          }
        }
      ],
      "purl" : "pkg:maven/org.checkerframework/checker-qual@3.12.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://checkerframework.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/typetools/checker-framework.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.checkerframework/checker-qual@3.12.0?type=jar"
    },
    {
      "publisher" : "Google LLC",
      "group" : "com.google.errorprone",
      "name" : "error_prone_annotations",
      "version" : "2.11.0",
      "description" : "Error Prone is a static analysis tool for Java that catches common programming mistakes at compile-time.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "656ad66261b7e7ea472ed0ffeea773ea"
        },
        {
          "alg" : "SHA-1",
          "content" : "c5a0ace696d3f8b1c1d8cc036d8c03cc0cbe6b69"
        },
        {
          "alg" : "SHA-256",
          "content" : "721cb91842b46fa056847d104d5225c8b8e1e8b62263b993051e1e5a0137b7ec"
        },
        {
          "alg" : "SHA-512",
          "content" : "defcaf30b7def5071243f3982d0d81c47c05b1a95c4d6143b3af86451e97c212c8d620d7220784e541fe8ee95f7fc59452fa6392fa37dac2d5705bfaf06105ba"
        },
        {
          "alg" : "SHA-384",
          "content" : "92221cb62c44dc982a8e9c54b99a1c75e0e4c48cd2f03b3272badcd03ab1b8bfc8bcbbe426a8d08074edba69b09a2b79"
        },
        {
          "alg" : "SHA3-384",
          "content" : "545c6c45a970b5ac7eb236b0d5d4b98e48e9a36336d8052bac36b409a7489a3d6d68f5a7bb58cfb21189bdab477d4b92"
        },
        {
          "alg" : "SHA3-256",
          "content" : "dd2ca92808ddd03f50e3776b6e9aa86d92bdbf170ebe06d47e7c45940b435739"
        },
        {
          "alg" : "SHA3-512",
          "content" : "2cdc44a85ce2fb11e54bdd6487978f181f8daca32c40895b252f4be352f9a631e35bc0fabc026216365a05980f4548b2d59dc737b0d465e0005c0a1f325e281e"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.11.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://errorprone.info/error_prone_annotations"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/google/error-prone/error_prone_annotations"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.11.0?type=jar"
    },
    {
      "group" : "com.google.j2objc",
      "name" : "j2objc-annotations",
      "version" : "1.3",
      "description" : "A set of annotations that provide additional information to the J2ObjC translator to modify the result of translation.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "5fa4ec4ec0c5aa70af8a7d4922df1931"
        },
        {
          "alg" : "SHA-1",
          "content" : "ba035118bc8bac37d7eff77700720999acd9986d"
        },
        {
          "alg" : "SHA-256",
          "content" : "21af30c92267bd6122c0e0b4d20cccb6641a37eaf956c6540ec471d584e64a7b"
        },
        {
          "alg" : "SHA-512",
          "content" : "51ea975179f809cb260751d11a513881b643bf016d15949bcb63b57d3c8868a2197e0620ccbaa5739e032797ec6faa3aa6d64606e999fce32930314780ca4115"
        },
        {
          "alg" : "SHA-384",
          "content" : "d2a54e4bb17793a98f85fb8f91138cd3b3d311385b7fb2c09d05c3112d42218a6da29154ba184f00031919548022aa71"
        },
        {
          "alg" : "SHA3-384",
          "content" : "8ba512ee47d36d5712335849e8f0fae21498c983c48fc2b4749ac7dfb4eeddf75dd51d21366667f90d6414db032a7b5b"
        },
        {
          "alg" : "SHA3-256",
          "content" : "e97bbe4e1ac9f9785ad0b81fd29fc9c6b0d9e37acc6da6d0b31ce9e6da072664"
        },
        {
          "alg" : "SHA3-512",
          "content" : "864bc6181c8ad8372e0a05ec3b0bdebc876571692331d3519e19df54a21ef333e992fe5c4e84759f010cf0657f9ea1c435bea8f103735ec3dc9dd31493e7d4a6"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.j2objc/j2objc-annotations@1.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/google/j2objc/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.sonatype.org/spice/tags/oss-parent-7/j2objc-annotations"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.j2objc/j2objc-annotations@1.3?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.flink",
      "name" : "flink-shaded-force-shading",
      "version" : "17.0",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "6890ff555c82f3bb156cf9c73bf09cf9"
        },
        {
          "alg" : "SHA-1",
          "content" : "345c153973a17fb8a98d368352e14893edcbd610"
        },
        {
          "alg" : "SHA-256",
          "content" : "dcc7dff160a40b74fa5db2805b2004153ffd0517968f3c7843a8ee43be82e710"
        },
        {
          "alg" : "SHA-512",
          "content" : "9de23513832248618b78e279c0e3900f5cafb7193254ef6818b4f0b6f3b70045dd9cc4fdd13caeeca8b70a44f38201ce055f07248cdf08930a20e1b7a73997ff"
        },
        {
          "alg" : "SHA-384",
          "content" : "063611872b4b1a1718e0472e32198bded0d74fa656e5c47a7b20038cd5ff70106e3109b60fe882880feea486e1ef83bf"
        },
        {
          "alg" : "SHA3-384",
          "content" : "26f9225d2c401391133dabc97340d1048504deaaae3c6b02ba20b83d4efe8c53a6d4f4e63a04e4317f9bce6b1a1ee013"
        },
        {
          "alg" : "SHA3-256",
          "content" : "aae3e6da763019cc2fd4919df572a3653b46aedaf60a3adb3d28bc7f94023523"
        },
        {
          "alg" : "SHA3-512",
          "content" : "e616e089fb70dc79503b6c235bd8d14c6e7c8e608c87bb4fcd02fe86d6ba27985bac4f144843af9fc7a7c495de7057320ccddea9f571c42bdcaa1c73966f265f"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.flink/flink-shaded-force-shading@17.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://flink.apache.org/flink-shaded-force-shading"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink-shaded/flink-shaded-force-shading"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.flink/flink-shaded-force-shading@17.0?type=jar"
    },
    {
      "publisher" : "QOS.ch",
      "group" : "org.slf4j",
      "name" : "slf4j-api",
      "version" : "1.7.36",
      "description" : "The slf4j API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "872da51f5de7f3923da4de871d57fd85"
        },
        {
          "alg" : "SHA-1",
          "content" : "6c62681a2f655b49963a5983b8b0950a6120ae14"
        },
        {
          "alg" : "SHA-256",
          "content" : "d3ef575e3e4979678dc01bf1dcce51021493b4d11fb7f1be8ad982877c16a1c0"
        },
        {
          "alg" : "SHA-512",
          "content" : "f9b033fc019a44f98b16048da7e2b59edd4a6a527ba60e358f65ab88e0afae03a9340f1b3e8a543d49fa542290f499c5594259affa1ff3e6e7bf3b428d4c610b"
        },
        {
          "alg" : "SHA-384",
          "content" : "2b14ad035877087157e379d3277dcdcd79e58d6bdb147c47d29e377d75ce53ad42cafbf22f5fb7827c7e946ff4876b9a"
        },
        {
          "alg" : "SHA3-384",
          "content" : "3bc3110dafb8d5be16a39f3b2671a466463cd99eb39610c0e4719a7bf2d928f2ea213c734887c6926a07c4cca7769e4b"
        },
        {
          "alg" : "SHA3-256",
          "content" : "ba2608179fcf46e2291a90b9cbb4aa30d718e481f59c350cc21c73b88d826881"
        },
        {
          "alg" : "SHA3-512",
          "content" : "14c4edcd19702ef607d78826839d8a6d3a39157df54b89a801d3d3cbbe1307131a77671b041c761122730fb1387888c5ec2e46bdd80e1cb07f8f144676441824"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.slf4j.org"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/qos-ch/slf4j/slf4j-api"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
    },
    {
      "group" : "com.google.code.findbugs",
      "name" : "jsr305",
      "version" : "1.3.9",
      "description" : "JSR305 Annotations for Findbugs",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "1d5a772e400b04bb67a7ef4a0e0996d8"
        },
        {
          "alg" : "SHA-1",
          "content" : "40719ea6961c0cb6afaeb6a921eaa1f6afd4cfdf"
        },
        {
          "alg" : "SHA-256",
          "content" : "905721a0eea90a81534abb7ee6ef4ea2e5e645fa1def0a5cd88402df1b46c9ed"
        },
        {
          "alg" : "SHA-512",
          "content" : "06da282cfd8e30d9f8cf17702b8709172b00e22b75a627a1d85f8989615b8a1a401bc25d9aee7b14aed1d9b5df73bf2ea8d66f9c8468d9577c29f0ccfa2cc70a"
        },
        {
          "alg" : "SHA-384",
          "content" : "56e6b41ef62eb5edfed0203802cefae9c2df86388148e420bb0c687abb2b80e14d5c2a82d5b35dce4badaf148f94eada"
        },
        {
          "alg" : "SHA3-384",
          "content" : "58c3bf89fa1afa75c2c5078159fd28e27b2273d437f26aaaa7391310b6f0823f3cf476a24f5631c0881f3f7e946d99be"
        },
        {
          "alg" : "SHA3-256",
          "content" : "c333ea5faedfa78e0614a2620438d5724eab093df4e960918391b6a44c2915b0"
        },
        {
          "alg" : "SHA3-512",
          "content" : "67ec31448e156cc72dd036060b460bb2667a13b1cbe500b6b7eed3235b1994b44c39f440ebd07b21ec9595b166ad61121d4f6a132b5b313c558ab21b72599425"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://findbugs.sourceforge.net/"
        },
        {
          "type" : "vcs",
          "url" : "http://findbugs.googlecode.com/svn/trunk/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"
    },
    {
      "group" : "org.junit.vintage",
      "name" : "junit-vintage-engine",
      "version" : "5.10.1",
      "description" : "Module \"junit-vintage-engine\" of JUnit 5.",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "41ca5da6c302cadb487c4a6e0b9e12b8"
        },
        {
          "alg" : "SHA-1",
          "content" : "25cf537c2c253e83ea23eb605310947661c6f763"
        },
        {
          "alg" : "SHA-256",
          "content" : "96385222c8a415ffe8a2362e73eb2516a7e262f85b10387c6e990a56765604d5"
        },
        {
          "alg" : "SHA-512",
          "content" : "ca3edd5e33978b983a1f157650a2b1a05d4b856e44348c789e65712d18183e4a8947fa8e7946fe4ad4b617b08f3ef3e7fea910bfc253bff6144abe751f6978d9"
        },
        {
          "alg" : "SHA-384",
          "content" : "f865c9de202758057145110aab05d5ce8f94ae566be8f9b474cca891aaa9c23c01a87c1e0902852ef030f09b03ca4ed9"
        },
        {
          "alg" : "SHA3-384",
          "content" : "775716e395203838cc5bc8a490a0b68b7a4d51090ec0c1bdb988c21b88ea5cacf27f7bec44a94cc471443c4284397498"
        },
        {
          "alg" : "SHA3-256",
          "content" : "b654cdbfece37aa9c794975924f3cd61c1f71f737b12cac066a4adf6368cb82c"
        },
        {
          "alg" : "SHA3-512",
          "content" : "495de0eb9d1fad8300e1de520584f754f6d57b6d6723709a60d5509466e0d4de7a69af234ec43f598cda23cead5f36fe9542e0378f8c744e4168e463c3821a0b"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.junit.vintage/junit-vintage-engine@5.10.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://junit.org/junit5/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/junit-team/junit5"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.junit.vintage/junit-vintage-engine@5.10.1?type=jar"
    },
    {
      "group" : "org.junit.platform",
      "name" : "junit-platform-engine",
      "version" : "1.10.1",
      "description" : "Module \"junit-platform-engine\" of JUnit 5.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "4d571057589cd109f3f4bedf7bbf5e7a"
        },
        {
          "alg" : "SHA-1",
          "content" : "f32ae4af74fde68414b8a3d2b7cf1fb43824a83a"
        },
        {
          "alg" : "SHA-256",
          "content" : "baa48e470d6dee7369a0a8820c51da89c1463279eda6e13a304d11f45922c760"
        },
        {
          "alg" : "SHA-512",
          "content" : "52ea2f11ec2ef0457384335d1b09263f4efecf63d9df99c5f8396f74d972722c51f8f766370e85e030f4476e805dac72603296942593c5bbe56993454b9d8e30"
        },
        {
          "alg" : "SHA-384",
          "content" : "7c520e04c995a47c19c94fdcbbcba9bb117696191e6a989a82d9f960e0e315e5cf87d28022ac5cb2701c85d5f38eefde"
        },
        {
          "alg" : "SHA3-384",
          "content" : "79d4f2fb987d6a44174dda99b1bd827e8dfd0399495c3e994371d4f69631212768dee8b891313aac89045388a1bed9db"
        },
        {
          "alg" : "SHA3-256",
          "content" : "5c3fcec688368188688cb6949c1230c2822211e53f3a65b7b3abf4a38051798b"
        },
        {
          "alg" : "SHA3-512",
          "content" : "30a0834e88bbc62287e5f49302c4a07b6da1bf4d9774faddbe7e606fb296c0dcd71c7e90ef8fff3e18dd050e5a19f7b903c91674ff4806cdb97111e4f0cfc199"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.junit.platform/junit-platform-engine@1.10.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://junit.org/junit5/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/junit-team/junit5"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.junit.platform/junit-platform-engine@1.10.1?type=jar"
    },
    {
      "group" : "org.apiguardian",
      "name" : "apiguardian-api",
      "version" : "1.1.2",
      "description" : "@API Guardian",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "8c7de3f82037fa4a2e8be2a2f13092af"
        },
        {
          "alg" : "SHA-1",
          "content" : "a231e0d844d2721b0fa1b238006d15c6ded6842a"
        },
        {
          "alg" : "SHA-256",
          "content" : "b509448ac506d607319f182537f0b35d71007582ec741832a1f111e5b5b70b38"
        },
        {
          "alg" : "SHA-512",
          "content" : "d7ccd0e7019f1a997de39d66dc0ad4efe150428fdd7f4c743c93884f1602a3e90135ad34baea96d5b6d925ad6c0c8487c8e78304f0a089a12383d4a62e2c9a61"
        },
        {
          "alg" : "SHA-384",
          "content" : "5ae11cfedcee7da43a506a67946ddc8a7a2622284a924ba78f74541e9a22db6868a15f5d84edb91a541e38afded734ea"
        },
        {
          "alg" : "SHA3-384",
          "content" : "c146116b3dfd969200b2ce52d96b92dd02d6f5a45a86e7e85edf35600ddbc2f3c6e8a1ad7e2db4dcd2c398c09fad0927"
        },
        {
          "alg" : "SHA3-256",
          "content" : "b4b436d7f615fc0b820204e69f83c517d1c1ccc5f6b99e459209ede4482268de"
        },
        {
          "alg" : "SHA3-512",
          "content" : "7b95b7ac68a6891b8901b5507acd2c24a0c1e20effa63cd513764f513eab4eb55f8de5178edbe0a400c11f3a18d3f56243569d6d663100f06dd98288504c09c5"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apiguardian/apiguardian-api@1.1.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/apiguardian-team/apiguardian"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apiguardian-team/apiguardian"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apiguardian/apiguardian-api@1.1.2?type=jar"
    },
    {
      "publisher" : "Joe Walnes, Henri Tremblay, Leonardo Mesquita",
      "group" : "org.objenesis",
      "name" : "objenesis",
      "version" : "2.1",
      "description" : "A library for instantiating Java objects",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "32ccb1d20a42b5aaaceb90c9082a2efa"
        },
        {
          "alg" : "SHA-1",
          "content" : "87c0ea803b69252868d09308b4618f766f135a96"
        },
        {
          "alg" : "SHA-256",
          "content" : "c74330cc6b806c804fd37e74487b4fe5d7c2750c5e15fbc6efa13bdee1bdef80"
        },
        {
          "alg" : "SHA-512",
          "content" : "1dec9ee30812b8006e536a2749c5781ccdc4b446539efb6fa534f22e70562033876bf2eb22c6946d617695729bd65f0f65b984f15f05ac63db5bed215e74427c"
        },
        {
          "alg" : "SHA-384",
          "content" : "657b8a3b80a5475f198425396f7264301f9e0f3ad5dc336ef0c7b46874f5544861a8a2fd48cdb5f672e199a6935c19d1"
        },
        {
          "alg" : "SHA3-384",
          "content" : "e526937d722aad1857869b2d2a0ba5c88815609308c00b776b51614e501de5d93d54978f5bb9cf496bdcc28b1dbd5775"
        },
        {
          "alg" : "SHA3-256",
          "content" : "436cfbb9c208dd03c951708fa4ba6525e2a0b26a873d594a6fbe93ab49082c97"
        },
        {
          "alg" : "SHA3-512",
          "content" : "1e7ee9411df7cfbf0669c38e4ef029155dd718b91db1d182841c740caf8c1057ed273a77f8e32d724c48aaf96815a26ab099c776511ffc5ef351d70ebfa70344"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.objenesis/objenesis@2.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://objenesis.org"
        },
        {
          "type" : "distribution",
          "url" : "http://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/easymock/easymock/objenesis"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.objenesis/objenesis@2.1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.logging.log4j",
      "name" : "log4j-slf4j-impl",
      "version" : "2.17.1",
      "description" : "The Apache Log4j SLF4J API binding to Log4j 2 Core",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "8d0e5934a9c341dbc3493d4039afd985"
        },
        {
          "alg" : "SHA-1",
          "content" : "84692d456bcce689355d33d68167875e486954dd"
        },
        {
          "alg" : "SHA-256",
          "content" : "e9a03720e5d5076009c2530635da9d08485e28a0b0ec20708dadc51afb78e41e"
        },
        {
          "alg" : "SHA-512",
          "content" : "3559e139a0c6d47fa0af233ac079fbde2227d701a846d6e6f7463129f7237e587bc3c337aebe5e4088f633ea83d1456dbc5b1999d1d485da67bfe2d5c12cde21"
        },
        {
          "alg" : "SHA-384",
          "content" : "ba0f5d2de2c0a7f816cb7ef98e9449e4a975ba5e34f1634e8eae6f84855df84ae6b2baf0c4762636fe5c337d6c561ef9"
        },
        {
          "alg" : "SHA3-384",
          "content" : "5aad3fca6b7600c428992b117e96e772c747927f71cbb4ba90ea8922266e64963584676d7a2ffcc9d293fbe8edf4dcd6"
        },
        {
          "alg" : "SHA3-256",
          "content" : "b077fe134c26804f8eafda8a0bb91703a54e499ec96859220cddfff8e561dd06"
        },
        {
          "alg" : "SHA3-512",
          "content" : "b5b10d7d8f416c3fa70146ceab14513a002f723e83f3418f39e1b67bf394faeeed10262743f6c1cc5ea26c29162b1445283523c0133be2374c62a7066c4cd916"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.logging.log4j/log4j-slf4j-impl@2.17.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://logging.apache.org/log4j/2.x/log4j-slf4j-impl/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-builds.apache.org/job/Logging/job/log4j/"
        },
        {
          "type" : "distribution",
          "url" : "https://logging.apache.org/log4j/2.x/download.html"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/LOG4J2"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?log4j-user@logging.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=logging-log4j2.git/log4j-slf4j-impl"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.logging.log4j/log4j-slf4j-impl@2.17.1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.logging.log4j",
      "name" : "log4j-api",
      "version" : "2.17.1",
      "description" : "The Apache Log4j API",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "dfd5f2d81aba31583ee87fe16c7b78f8"
        },
        {
          "alg" : "SHA-1",
          "content" : "d771af8e336e372fb5399c99edabe0919aeaf5b2"
        },
        {
          "alg" : "SHA-256",
          "content" : "b0d8a4c8ab4fb8b1888d0095822703b0e6d4793c419550203da9e69196161de4"
        },
        {
          "alg" : "SHA-512",
          "content" : "48a58c2f317d451ac1622bdfbfa5d3cd9de45d40d5d5df98f39fe6d53c74da56e200f8e3d19a309d4e1ea364369379c0ef9d79b928fc20ea743857f347259c03"
        },
        {
          "alg" : "SHA-384",
          "content" : "3686abf7edebe4bd29bdae0495a6b881d38cfe7a870350d1f1b43056f51c25cd39a5fccb74a28abf62069862dd25e416"
        },
        {
          "alg" : "SHA3-384",
          "content" : "34ded426dd53323c7588f09cb17afc37798d090914608c4a8e88ff3cdcf872a6dccf042423a6bf2d92e9ab35252de92b"
        },
        {
          "alg" : "SHA3-256",
          "content" : "5b1dce647c9dfb24ced20d78c87c213d96d697ed17c1db97e538071c0c06702d"
        },
        {
          "alg" : "SHA3-512",
          "content" : "2e9070e21fd4b9b9aaa7794dea2da75144dd116fbc9f24935d57b32306c1901f815dbaa1fd9c76712990481ac399ccb51bb27e9ee3a3a27b42bcfbc2d68f371d"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.logging.log4j/log4j-api@2.17.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://logging.apache.org/log4j/2.x/log4j-api/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-builds.apache.org/job/Logging/job/log4j/"
        },
        {
          "type" : "distribution",
          "url" : "https://logging.apache.org/log4j/2.x/download.html"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/LOG4J2"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?log4j-user@logging.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=logging-log4j2.git/log4j-api"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.logging.log4j/log4j-api@2.17.1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.logging.log4j",
      "name" : "log4j-core",
      "version" : "2.17.1",
      "description" : "The Apache Log4j Implementation",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "8d2f5c52700336dae846b2c3ecde7a6e"
        },
        {
          "alg" : "SHA-1",
          "content" : "779f60f3844dadc3ef597976fcb1e5127b1f343d"
        },
        {
          "alg" : "SHA-256",
          "content" : "c967f223487980b9364e94a7c7f9a8a01fd3ee7c19bdbf0b0f9f8cb8511f3d41"
        },
        {
          "alg" : "SHA-512",
          "content" : "8d3d6a17afc41cde43b19c9a696793d009d9271bc6430762f10157018453f8a53cde6e6aa4f3f0b703eaf1f2944d047398d29b470924ecc3290d1923b0e29750"
        },
        {
          "alg" : "SHA-384",
          "content" : "28500f2bb8fa430788eb526d8197671b9bcb49cc8a04fac22b12ae0c46bfefd682f1ce363cb237e41ae87185635e8ff3"
        },
        {
          "alg" : "SHA3-384",
          "content" : "5814742e87b0ba1308c883194b5cc16a57c2003aaac774e0c0b09d829231b9844dd16591af3711024cad90043ebecbf6"
        },
        {
          "alg" : "SHA3-256",
          "content" : "4cd95a3c8d119b4033f263c00ec414c7f3c8ccee68d013bdfae161d33872677f"
        },
        {
          "alg" : "SHA3-512",
          "content" : "c9b7e15624039cc442ab92e0eccf1ce2c2020f636d39d49da9a33fa95997db89c991c57f087bc1321980c319b894a07d631bd6d7c10c611a9cfb29ee5550003f"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.logging.log4j/log4j-core@2.17.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://logging.apache.org/log4j/2.x/log4j-core/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-builds.apache.org/job/Logging/job/log4j/"
        },
        {
          "type" : "distribution",
          "url" : "https://logging.apache.org/log4j/2.x/download.html"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/LOG4J2"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?log4j-user@logging.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=logging-log4j2.git/log4j-core"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.logging.log4j/log4j-core@2.17.1?type=jar"
    }
  ],
  "dependencies" : [
    {
      "ref" : "pkg:maven/io.confluent.flink/flink-test-utils@1.19.2-cp2?type=jar",
      "dependsOn" : [
        "pkg:maven/io.confluent.flink/flink-table-common@1.19.2-cp2?type=jar",
        "pkg:maven/io.confluent.flink/flink-test-utils-junit@1.19.2-cp2?type=jar",
        "pkg:maven/io.confluent.flink/flink-runtime@1.19.2-cp2?type=jar",
        "pkg:maven/io.confluent.flink/flink-runtime@1.19.2-cp2?classifier=tests&type=test-jar",
        "pkg:maven/io.confluent.flink/flink-core@1.19.2-cp2?classifier=tests&type=test-jar",
        "pkg:maven/io.confluent.flink/flink-rpc-akka-loader@1.19.2-cp2?classifier=tests&type=test-jar",
        "pkg:maven/io.confluent.flink/flink-clients@1.19.2-cp2?type=jar",
        "pkg:maven/io.confluent.flink/flink-streaming-java@1.19.2-cp2?type=jar",
        "pkg:maven/org.junit.jupiter/junit-jupiter@5.10.1?type=jar",
        "pkg:maven/org.assertj/assertj-core@3.23.1?type=jar",
        "pkg:maven/org.apache.hadoop/hadoop-minikdc@3.2.4?type=jar",
        "pkg:maven/io.confluent.flink/flink-streaming-java@1.19.2-cp2?classifier=tests&type=test-jar",
        "pkg:maven/io.confluent.flink/flink-statebackend-rocksdb@1.19.2-cp2?type=jar",
        "pkg:maven/io.confluent.flink/flink-statebackend-changelog@1.19.2-cp2?type=jar",
        "pkg:maven/io.confluent.flink/flink-dstl-dfs@1.19.2-cp2?type=jar",
        "pkg:maven/org.apache.curator/curator-test@5.4.0?type=jar",
        "pkg:maven/org.apache.flink/flink-shaded-force-shading@17.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.confluent.flink/flink-table-common@1.19.2-cp2?type=jar",
      "dependsOn" : [
        "pkg:maven/io.confluent.flink/flink-core@1.19.2-cp2?type=jar",
        "pkg:maven/org.apache.flink/flink-shaded-asm-9@9.5-17.0?type=jar",
        "pkg:maven/com.ibm.icu/icu4j@67.1?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.confluent.flink/flink-core@1.19.2-cp2?type=jar",
      "dependsOn" : [
        "pkg:maven/io.confluent.flink/flink-annotations@1.19.2-cp2?type=jar",
        "pkg:maven/io.confluent.flink/flink-metrics-core@1.19.2-cp2?type=jar",
        "pkg:maven/org.apache.flink/flink-shaded-asm-9@9.5-17.0?type=jar",
        "pkg:maven/org.apache.flink/flink-shaded-jackson@2.14.2-17.0?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar",
        "pkg:maven/org.snakeyaml/snakeyaml-engine@2.6?type=jar",
        "pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar",
        "pkg:maven/com.esotericsoftware.kryo/kryo@2.24.0?type=jar",
        "pkg:maven/commons-collections/commons-collections@3.2.2?type=jar",
        "pkg:maven/org.apache.commons/commons-compress@1.26.0?type=jar",
        "pkg:maven/org.apache.flink/flink-shaded-guava@31.1-jre-17.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.confluent.flink/flink-annotations@1.19.2-cp2?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.confluent.flink/flink-metrics-core@1.19.2-cp2?type=jar",
      "dependsOn" : [
        "pkg:maven/io.confluent.flink/flink-annotations@1.19.2-cp2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.flink/flink-shaded-asm-9@9.5-17.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.flink/flink-shaded-jackson@2.14.2-17.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.snakeyaml/snakeyaml-engine@2.6?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.esotericsoftware.kryo/kryo@2.24.0?type=jar",
      "dependsOn" : [
        "pkg:maven/com.esotericsoftware.minlog/minlog@1.2?type=jar",
        "pkg:maven/org.objenesis/objenesis@2.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.esotericsoftware.minlog/minlog@1.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.objenesis/objenesis@2.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/commons-collections/commons-collections@3.2.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-compress@1.26.0?type=jar",
      "dependsOn" : [
        "pkg:maven/commons-io/commons-io@2.15.1?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/commons-io/commons-io@2.15.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.flink/flink-shaded-guava@31.1-jre-17.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.ibm.icu/icu4j@67.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.confluent.flink/flink-test-utils-junit@1.19.2-cp2?type=jar",
      "dependsOn" : [
        "pkg:maven/org.junit.jupiter/junit-jupiter@5.10.1?type=jar",
        "pkg:maven/org.junit.vintage/junit-vintage-engine@5.10.1?type=jar",
        "pkg:maven/org.apache.logging.log4j/log4j-slf4j-impl@2.17.1?type=jar",
        "pkg:maven/org.apache.logging.log4j/log4j-api@2.17.1?type=jar",
        "pkg:maven/org.apache.logging.log4j/log4j-core@2.17.1?type=jar",
        "pkg:maven/org.testcontainers/testcontainers@1.19.1?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.junit.jupiter/junit-jupiter@5.10.1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.junit.jupiter/junit-jupiter-api@5.10.1?type=jar",
        "pkg:maven/org.junit.jupiter/junit-jupiter-params@5.10.1?type=jar",
        "pkg:maven/org.junit.jupiter/junit-jupiter-engine@5.10.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.junit.jupiter/junit-jupiter-api@5.10.1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.opentest4j/opentest4j@1.3.0?type=jar",
        "pkg:maven/org.junit.platform/junit-platform-commons@1.10.1?type=jar",
        "pkg:maven/org.apiguardian/apiguardian-api@1.1.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.opentest4j/opentest4j@1.3.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.junit.platform/junit-platform-commons@1.10.1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apiguardian/apiguardian-api@1.1.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apiguardian/apiguardian-api@1.1.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.junit.jupiter/junit-jupiter-params@5.10.1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.junit.jupiter/junit-jupiter-api@5.10.1?type=jar",
        "pkg:maven/org.apiguardian/apiguardian-api@1.1.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.junit.jupiter/junit-jupiter-engine@5.10.1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.junit.platform/junit-platform-engine@1.10.1?type=jar",
        "pkg:maven/org.junit.jupiter/junit-jupiter-api@5.10.1?type=jar",
        "pkg:maven/org.apiguardian/apiguardian-api@1.1.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.junit.platform/junit-platform-engine@1.10.1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.opentest4j/opentest4j@1.3.0?type=jar",
        "pkg:maven/org.junit.platform/junit-platform-commons@1.10.1?type=jar",
        "pkg:maven/org.apiguardian/apiguardian-api@1.1.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.junit.vintage/junit-vintage-engine@5.10.1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.junit.platform/junit-platform-engine@1.10.1?type=jar",
        "pkg:maven/junit/junit@4.13.2?type=jar",
        "pkg:maven/org.apiguardian/apiguardian-api@1.1.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/junit/junit@4.13.2?type=jar",
      "dependsOn" : [
        "pkg:maven/org.hamcrest/hamcrest-core@1.3?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.hamcrest/hamcrest-core@1.3?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.logging.log4j/log4j-slf4j-impl@2.17.1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/org.apache.logging.log4j/log4j-api@2.17.1?type=jar",
        "pkg:maven/org.apache.logging.log4j/log4j-core@2.17.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.logging.log4j/log4j-api@2.17.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.logging.log4j/log4j-core@2.17.1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.logging.log4j/log4j-api@2.17.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.testcontainers/testcontainers@1.19.1?type=jar",
      "dependsOn" : [
        "pkg:maven/junit/junit@4.13.2?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/org.apache.commons/commons-compress@1.26.0?type=jar",
        "pkg:maven/org.rnorth.duct-tape/duct-tape@1.0.8?type=jar",
        "pkg:maven/com.github.docker-java/docker-java-api@3.3.3?type=jar",
        "pkg:maven/com.github.docker-java/docker-java-transport-zerodep@3.3.3?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.rnorth.duct-tape/duct-tape@1.0.8?type=jar",
      "dependsOn" : [
        "pkg:maven/org.jetbrains/annotations@17.0.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.jetbrains/annotations@17.0.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.github.docker-java/docker-java-api@3.3.3?type=jar",
      "dependsOn" : [
        "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.15.3?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.15.3?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.github.docker-java/docker-java-transport-zerodep@3.3.3?type=jar",
      "dependsOn" : [
        "pkg:maven/com.github.docker-java/docker-java-transport@3.3.3?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/net.java.dev.jna/jna@5.12.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.github.docker-java/docker-java-transport@3.3.3?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/net.java.dev.jna/jna@5.12.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.confluent.flink/flink-runtime@1.19.2-cp2?type=jar",
      "dependsOn" : [
        "pkg:maven/io.confluent.flink/flink-core@1.19.2-cp2?type=jar",
        "pkg:maven/io.confluent.flink/flink-rpc-core@1.19.2-cp2?type=jar",
        "pkg:maven/io.confluent.flink/flink-rpc-akka-loader@1.19.2-cp2?type=jar",
        "pkg:maven/io.confluent.flink/flink-java@1.19.2-cp2?type=jar",
        "pkg:maven/io.confluent.flink/flink-queryable-state-client-java@1.19.2-cp2?type=jar",
        "pkg:maven/io.confluent.flink/flink-hadoop-fs@1.19.2-cp2?type=jar",
        "pkg:maven/commons-io/commons-io@2.15.1?type=jar",
        "pkg:maven/org.apache.flink/flink-shaded-netty@4.1.91.Final-17.0?type=jar",
        "pkg:maven/org.apache.flink/flink-shaded-guava@31.1-jre-17.0?type=jar",
        "pkg:maven/org.apache.flink/flink-shaded-jackson@2.14.2-17.0?type=jar",
        "pkg:maven/org.apache.flink/flink-shaded-zookeeper-3@3.7.1-17.0?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar",
        "pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar",
        "pkg:maven/commons-cli/commons-cli@1.5.0?type=jar",
        "pkg:maven/org.javassist/javassist@3.24.0-GA?type=jar",
        "pkg:maven/org.xerial.snappy/snappy-java@1.1.10.4?type=jar",
        "pkg:maven/tools.profiler/async-profiler@2.9?type=jar",
        "pkg:maven/org.lz4/lz4-java@1.8.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.confluent.flink/flink-rpc-core@1.19.2-cp2?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.confluent.flink/flink-rpc-akka-loader@1.19.2-cp2?type=jar",
      "dependsOn" : [
        "pkg:maven/io.confluent.flink/flink-core@1.19.2-cp2?type=jar",
        "pkg:maven/io.confluent.flink/flink-rpc-core@1.19.2-cp2?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.confluent.flink/flink-java@1.19.2-cp2?type=jar",
      "dependsOn" : [
        "pkg:maven/io.confluent.flink/flink-core@1.19.2-cp2?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar",
        "pkg:maven/org.apache.commons/commons-math3@3.6.1?type=jar",
        "pkg:maven/com.twitter/chill-java@0.7.6?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-math3@3.6.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.twitter/chill-java@0.7.6?type=jar",
      "dependsOn" : [
        "pkg:maven/com.esotericsoftware.kryo/kryo@2.24.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.confluent.flink/flink-queryable-state-client-java@1.19.2-cp2?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.flink/flink-shaded-netty@4.1.91.Final-17.0?type=jar",
        "pkg:maven/org.apache.flink/flink-shaded-guava@31.1-jre-17.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.flink/flink-shaded-netty@4.1.91.Final-17.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.confluent.flink/flink-hadoop-fs@1.19.2-cp2?type=jar",
      "dependsOn" : [
        "pkg:maven/io.confluent.flink/flink-core@1.19.2-cp2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.flink/flink-shaded-zookeeper-3@3.7.1-17.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/commons-cli/commons-cli@1.5.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.javassist/javassist@3.24.0-GA?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.xerial.snappy/snappy-java@1.1.10.4?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/tools.profiler/async-profiler@2.9?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.lz4/lz4-java@1.8.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.confluent.flink/flink-runtime@1.19.2-cp2?classifier=tests&type=test-jar",
      "dependsOn" : [
        "pkg:maven/io.confluent.flink/flink-core@1.19.2-cp2?type=jar",
        "pkg:maven/io.confluent.flink/flink-rpc-core@1.19.2-cp2?type=jar",
        "pkg:maven/io.confluent.flink/flink-rpc-akka-loader@1.19.2-cp2?type=jar",
        "pkg:maven/io.confluent.flink/flink-java@1.19.2-cp2?type=jar",
        "pkg:maven/io.confluent.flink/flink-queryable-state-client-java@1.19.2-cp2?type=jar",
        "pkg:maven/io.confluent.flink/flink-hadoop-fs@1.19.2-cp2?type=jar",
        "pkg:maven/commons-io/commons-io@2.15.1?type=jar",
        "pkg:maven/org.apache.flink/flink-shaded-netty@4.1.91.Final-17.0?type=jar",
        "pkg:maven/org.apache.flink/flink-shaded-guava@31.1-jre-17.0?type=jar",
        "pkg:maven/org.apache.flink/flink-shaded-jackson@2.14.2-17.0?type=jar",
        "pkg:maven/org.apache.flink/flink-shaded-zookeeper-3@3.7.1-17.0?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar",
        "pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar",
        "pkg:maven/commons-cli/commons-cli@1.5.0?type=jar",
        "pkg:maven/org.javassist/javassist@3.24.0-GA?type=jar",
        "pkg:maven/org.xerial.snappy/snappy-java@1.1.10.4?type=jar",
        "pkg:maven/tools.profiler/async-profiler@2.9?type=jar",
        "pkg:maven/org.lz4/lz4-java@1.8.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.confluent.flink/flink-core@1.19.2-cp2?classifier=tests&type=test-jar",
      "dependsOn" : [
        "pkg:maven/io.confluent.flink/flink-annotations@1.19.2-cp2?type=jar",
        "pkg:maven/io.confluent.flink/flink-metrics-core@1.19.2-cp2?type=jar",
        "pkg:maven/org.apache.flink/flink-shaded-asm-9@9.5-17.0?type=jar",
        "pkg:maven/org.apache.flink/flink-shaded-jackson@2.14.2-17.0?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar",
        "pkg:maven/org.snakeyaml/snakeyaml-engine@2.6?type=jar",
        "pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar",
        "pkg:maven/com.esotericsoftware.kryo/kryo@2.24.0?type=jar",
        "pkg:maven/commons-collections/commons-collections@3.2.2?type=jar",
        "pkg:maven/org.apache.commons/commons-compress@1.26.0?type=jar",
        "pkg:maven/org.apache.flink/flink-shaded-guava@31.1-jre-17.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.confluent.flink/flink-rpc-akka-loader@1.19.2-cp2?classifier=tests&type=test-jar",
      "dependsOn" : [
        "pkg:maven/io.confluent.flink/flink-core@1.19.2-cp2?type=jar",
        "pkg:maven/io.confluent.flink/flink-rpc-core@1.19.2-cp2?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.confluent.flink/flink-clients@1.19.2-cp2?type=jar",
      "dependsOn" : [
        "pkg:maven/io.confluent.flink/flink-core@1.19.2-cp2?type=jar",
        "pkg:maven/io.confluent.flink/flink-runtime@1.19.2-cp2?type=jar",
        "pkg:maven/io.confluent.flink/flink-optimizer@1.19.2-cp2?type=jar",
        "pkg:maven/io.confluent.flink/flink-java@1.19.2-cp2?type=jar",
        "pkg:maven/commons-cli/commons-cli@1.5.0?type=jar",
        "pkg:maven/io.confluent.flink/flink-streaming-java@1.19.2-cp2?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.confluent.flink/flink-optimizer@1.19.2-cp2?type=jar",
      "dependsOn" : [
        "pkg:maven/io.confluent.flink/flink-core@1.19.2-cp2?type=jar",
        "pkg:maven/io.confluent.flink/flink-runtime@1.19.2-cp2?type=jar",
        "pkg:maven/io.confluent.flink/flink-java@1.19.2-cp2?type=jar",
        "pkg:maven/org.apache.flink/flink-shaded-guava@31.1-jre-17.0?type=jar",
        "pkg:maven/org.apache.flink/flink-shaded-jackson@2.14.2-17.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.confluent.flink/flink-streaming-java@1.19.2-cp2?type=jar",
      "dependsOn" : [
        "pkg:maven/io.confluent.flink/flink-core@1.19.2-cp2?type=jar",
        "pkg:maven/io.confluent.flink/flink-file-sink-common@1.19.2-cp2?type=jar",
        "pkg:maven/io.confluent.flink/flink-runtime@1.19.2-cp2?type=jar",
        "pkg:maven/io.confluent.flink/flink-java@1.19.2-cp2?type=jar",
        "pkg:maven/org.apache.flink/flink-shaded-guava@31.1-jre-17.0?type=jar",
        "pkg:maven/org.apache.commons/commons-math3@3.6.1?type=jar",
        "pkg:maven/io.confluent.flink/flink-connector-datagen@1.19.2-cp2?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.confluent.flink/flink-file-sink-common@1.19.2-cp2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.confluent.flink/flink-connector-datagen@1.19.2-cp2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.assertj/assertj-core@3.23.1?type=jar",
      "dependsOn" : [
        "pkg:maven/net.bytebuddy/byte-buddy@1.14.4?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/net.bytebuddy/byte-buddy@1.14.4?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.hadoop/hadoop-minikdc@3.2.4?type=jar",
      "dependsOn" : [
        "pkg:maven/commons-io/commons-io@2.15.1?type=jar",
        "pkg:maven/org.apache.kerby/kerb-simplekdc@1.0.1?type=jar",
        "pkg:maven/junit/junit@4.13.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.kerby/kerb-simplekdc@1.0.1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.kerby/kerb-client@1.0.1?type=jar",
        "pkg:maven/org.apache.kerby/kerb-admin@1.0.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.kerby/kerb-client@1.0.1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.kerby/kerby-config@1.0.1?type=jar",
        "pkg:maven/org.apache.kerby/kerb-core@1.0.1?type=jar",
        "pkg:maven/org.apache.kerby/kerb-common@1.0.1?type=jar",
        "pkg:maven/org.apache.kerby/kerb-util@1.0.1?type=jar",
        "pkg:maven/org.apache.kerby/token-provider@1.0.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.kerby/kerby-config@1.0.1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.kerby/kerb-core@1.0.1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.kerby/kerby-pkix@1.0.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.kerby/kerby-pkix@1.0.1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.kerby/kerby-asn1@1.0.1?type=jar",
        "pkg:maven/org.apache.kerby/kerby-util@1.0.1?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.kerby/kerby-asn1@1.0.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.kerby/kerby-util@1.0.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.kerby/kerb-common@1.0.1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.kerby/kerby-config@1.0.1?type=jar",
        "pkg:maven/org.apache.kerby/kerb-crypto@1.0.1?type=jar",
        "pkg:maven/commons-io/commons-io@2.15.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.kerby/kerb-crypto@1.0.1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.kerby/kerby-util@1.0.1?type=jar",
        "pkg:maven/org.apache.kerby/kerb-core@1.0.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.kerby/kerb-util@1.0.1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.kerby/kerby-config@1.0.1?type=jar",
        "pkg:maven/org.apache.kerby/kerb-core@1.0.1?type=jar",
        "pkg:maven/org.apache.kerby/kerb-crypto@1.0.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.kerby/token-provider@1.0.1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.kerby/kerb-core@1.0.1?type=jar",
        "pkg:maven/com.nimbusds/nimbus-jose-jwt@3.10?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.nimbusds/nimbus-jose-jwt@3.10?type=jar",
      "dependsOn" : [
        "pkg:maven/net.jcip/jcip-annotations@1.0?type=jar",
        "pkg:maven/net.minidev/json-smart@1.3.1?type=jar",
        "pkg:maven/org.bouncycastle/bcprov-jdk15on@1.52?type=jar",
        "pkg:maven/commons-io/commons-io@2.15.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/net.jcip/jcip-annotations@1.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/net.minidev/json-smart@1.3.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.bouncycastle/bcprov-jdk15on@1.52?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.kerby/kerb-admin@1.0.1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.kerby/kerb-server@1.0.1?type=jar",
        "pkg:maven/org.apache.kerby/kerb-util@1.0.1?type=jar",
        "pkg:maven/org.apache.kerby/kerby-xdr@1.0.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.kerby/kerb-server@1.0.1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.kerby/kerb-common@1.0.1?type=jar",
        "pkg:maven/org.apache.kerby/kerb-identity@1.0.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.kerby/kerb-identity@1.0.1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.kerby/kerby-config@1.0.1?type=jar",
        "pkg:maven/org.apache.kerby/kerb-core@1.0.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.kerby/kerby-xdr@1.0.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.confluent.flink/flink-streaming-java@1.19.2-cp2?classifier=tests&type=test-jar",
      "dependsOn" : [
        "pkg:maven/io.confluent.flink/flink-core@1.19.2-cp2?type=jar",
        "pkg:maven/io.confluent.flink/flink-file-sink-common@1.19.2-cp2?type=jar",
        "pkg:maven/io.confluent.flink/flink-runtime@1.19.2-cp2?type=jar",
        "pkg:maven/io.confluent.flink/flink-java@1.19.2-cp2?type=jar",
        "pkg:maven/org.apache.flink/flink-shaded-guava@31.1-jre-17.0?type=jar",
        "pkg:maven/org.apache.commons/commons-math3@3.6.1?type=jar",
        "pkg:maven/io.confluent.flink/flink-connector-datagen@1.19.2-cp2?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.confluent.flink/flink-statebackend-rocksdb@1.19.2-cp2?type=jar",
      "dependsOn" : [
        "pkg:maven/com.ververica/frocksdbjni@6.20.3-ververica-2.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.ververica/frocksdbjni@6.20.3-ververica-2.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.confluent.flink/flink-statebackend-changelog@1.19.2-cp2?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.flink/flink-shaded-guava@31.1-jre-17.0?type=jar",
        "pkg:maven/io.confluent.flink/flink-statebackend-common@1.19.2-cp2?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.confluent.flink/flink-statebackend-common@1.19.2-cp2?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.flink/flink-shaded-guava@31.1-jre-17.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.confluent.flink/flink-dstl-dfs@1.19.2-cp2?type=jar",
      "dependsOn" : [
        "pkg:maven/io.confluent.flink/flink-core@1.19.2-cp2?type=jar",
        "pkg:maven/io.confluent.flink/flink-runtime@1.19.2-cp2?type=jar",
        "pkg:maven/io.confluent.flink/flink-streaming-java@1.19.2-cp2?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.curator/curator-test@5.4.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.zookeeper/zookeeper@3.7.1?type=jar",
        "pkg:maven/io.dropwizard.metrics/metrics-core@3.2.5?type=jar",
        "pkg:maven/org.xerial.snappy/snappy-java@1.1.10.4?type=jar",
        "pkg:maven/com.google.guava/guava@31.1-jre?type=jar",
        "pkg:maven/org.junit.jupiter/junit-jupiter-api@5.10.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.zookeeper/zookeeper@3.7.1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.zookeeper/zookeeper-jute@3.7.1?type=jar",
        "pkg:maven/org.apache.yetus/audience-annotations@0.12.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.zookeeper/zookeeper-jute@3.7.1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.yetus/audience-annotations@0.12.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.yetus/audience-annotations@0.12.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.dropwizard.metrics/metrics-core@3.2.5?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.google.guava/guava@31.1-jre?type=jar",
      "dependsOn" : [
        "pkg:maven/com.google.guava/failureaccess@1.0.1?type=jar",
        "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar",
        "pkg:maven/org.checkerframework/checker-qual@3.12.0?type=jar",
        "pkg:maven/com.google.errorprone/error_prone_annotations@2.11.0?type=jar",
        "pkg:maven/com.google.j2objc/j2objc-annotations@1.3?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.google.guava/failureaccess@1.0.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.checkerframework/checker-qual@3.12.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.11.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.google.j2objc/j2objc-annotations@1.3?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.flink/flink-shaded-force-shading@17.0?type=jar",
      "dependsOn" : [ ]
    }
  ]
}