<?xml version="1.0" encoding="UTF-8"?>
<bom serialNumber="urn:uuid:a48c0d4c-dd8e-4760-bba4-3497d7637056" version="1" xmlns="http://cyclonedx.org/schema/bom/1.4">
  <metadata>
    <timestamp>2025-04-08T10:56:37Z</timestamp>
    <tools>
      <tool>
        <vendor>OWASP Foundation</vendor>
        <name>CycloneDX Maven plugin</name>
        <version>2.7.7</version>
        <hashes>
          <hash alg="MD5">436dfb24c63a322708e4a5143d8543af</hash>
          <hash alg="SHA-1">3ef2e8728dc9eff2f129c34057e46e9d2b10629a</hash>
          <hash alg="SHA-256">c185b79bf0f9264f43bc8c222c44db67bea275bb727e3327cf9aea6bf45292c9</hash>
          <hash alg="SHA-512">41488733e31e6c5315327dcc86187c2b9a6b96cd08f7e2157ce130688afde29c313fc6a73edb8a76333a930c78874aa2eac874448920030c0f7af0ac05e65ced</hash>
          <hash alg="SHA-384">f9462f86240fd9fc0942f34981e6d2371f252aa1a4e5e8c3c14e7f0f1a4e4de69ef972e51cf09a749afb6d97c13e67ed</hash>
          <hash alg="SHA3-384">c755af6239348bc7dd1e1e6b5f14f7cf7e1560d689b252d9610cd865fa4b419d0b8e26260731dfc5da2176b6e706b414</hash>
          <hash alg="SHA3-256">309aac91005470c9c834354ab918759e2ae7ec52fc1676002621a5bbdf3b7827</hash>
          <hash alg="SHA3-512">c634570dcf8302e61005e5fa91a9a0d9b81542f731967b3c9f6d3ef89e3b945bd36d7ab69e2ebad8124b9c05da504361c8b36a8ce528d844409eeb7df4eea6ce</hash>
        </hashes>
      </tool>
    </tools>
    <component type="library" bom-ref="pkg:maven/io.confluent.flink/flink-test-utils@1.19.2-cp2?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>io.confluent.flink</group>
      <name>flink-test-utils</name>
      <version>1.19.2-cp2</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.confluent.flink/flink-test-utils@1.19.2-cp2?type=jar</purl>
      <externalReferences><reference type="website"><url>https://flink.apache.org/flink-test-utils-parent/flink-test-utils</url></reference><reference type="distribution"><url>s3://cp-flink-staging-654654529379-us-west-2/maven-staging/e376491b71b31739887d29e34e6552860f69668d</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink/flink-test-utils-parent/flink-test-utils</url></reference></externalReferences>
    </component>
    <properties>
      <property name="maven.goal">makeBom</property>
      <property name="maven.scopes">compile,provided,runtime,system</property>
    </properties>
  </metadata>
  <components>
    <component type="library" bom-ref="pkg:maven/io.confluent.flink/flink-table-common@1.19.2-cp2?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>io.confluent.flink</group>
      <name>flink-table-common</name>
      <version>1.19.2-cp2</version>
      <description>This module contains extension points of the Table/SQL API.
		It allows for implementing user-defined functions, custom
		formats, etc. with minimal dependencies.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">37deb432856e8b2f1742bd0bd70a9d24</hash>
        <hash alg="SHA-1">e07768c9fdd6e5d342197f2ba57495f8bba97ed3</hash>
        <hash alg="SHA-256">d09c8b271015d1412a6f80f7725b98c681fe9f026b7b379cec9baf93188f6b47</hash>
        <hash alg="SHA-512">72c74712d2240a21eb9c13903ce733f07aeb44f045b412645a45f580fdeedb89f37975573ca78592495f487dc9fe5332c867db6de34ae1d5e62332bbe35915a2</hash>
        <hash alg="SHA-384">7fa7a54e1640738bbaed523fe299aceeeba231e02a18fa2111a2e84bea0c030bb4ab5a54209af82a32393a53678bd7f9</hash>
        <hash alg="SHA3-384">bea7f084732f8aa8d0f57f0de3ead7ed6507c41f9e632afd607ba06b11abea7c9e56e56582157896a2d86d17072fe519</hash>
        <hash alg="SHA3-256">1ade30487a36dfe9e7b7926247d5d1c87bb297740c15557f82497dd61cd7e4f2</hash>
        <hash alg="SHA3-512">89e1edc88de0529b27103624f2f2b2aa64a6e89eb747a89409a0c0a97b5377958a9a119a90e008206895dc3a9d6e8fdbb02a5629e8398e44ec9025d7d4e19965</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.confluent.flink/flink-table-common@1.19.2-cp2?type=jar</purl>
      <externalReferences><reference type="website"><url>https://flink.apache.org/flink-table/flink-table-common</url></reference><reference type="distribution"><url>s3://cp-flink-staging-654654529379-us-west-2/maven-staging/e376491b71b31739887d29e34e6552860f69668d</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink/flink-table/flink-table-common</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.confluent.flink/flink-core@1.19.2-cp2?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>io.confluent.flink</group>
      <name>flink-core</name>
      <version>1.19.2-cp2</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">0359367380bd211d6038b82cf3f025e6</hash>
        <hash alg="SHA-1">47b60aef575636b92e61cc13760513d44860ce74</hash>
        <hash alg="SHA-256">c86624d00fd1878253b28c185d19ce4eb676f358bc89949594e384f5917c54d3</hash>
        <hash alg="SHA-512">aeb595854b04df66bf95d7f1e70d6b9ec5cc314e58ee9301a2ea55e1a6df45f0fe2ba9eab86b789f759c30171f2f988b79716d089dddfde41f4f13fc5608bd34</hash>
        <hash alg="SHA-384">78dd7df1bb52fc545afab630286d22815fdfaa036b574c1d775e9139f490dee96a02f8428883632262f441f83ba4beb6</hash>
        <hash alg="SHA3-384">550e39af694d3f673d97af02dd549edcafc36c0f7d057c5a0c804f1ccbd7ff979cd919003d04b0c4122e71f9ee531ce0</hash>
        <hash alg="SHA3-256">9572742e28f591a1b726bc2f9449a78ceab64d04ae235be71464fa64d22c32c6</hash>
        <hash alg="SHA3-512">7d50ccaab9d2c0d092ed6d467ff89318cf6b9869a45280ec4a3f11df14997f728e361451ceaa765d663c2ebe95fcdb9b66400ef47da4c8b90991cdb03a475d5e</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.confluent.flink/flink-core@1.19.2-cp2?type=jar</purl>
      <externalReferences><reference type="website"><url>https://flink.apache.org/flink-core</url></reference><reference type="distribution"><url>s3://cp-flink-staging-654654529379-us-west-2/maven-staging/e376491b71b31739887d29e34e6552860f69668d</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink/flink-core</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-shaded-asm-9@9.5-17.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-shaded-asm-9</name>
      <version>9.5-17.0</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <hashes>
        <hash alg="MD5">443601ddd70625d741be1d3382dcf012</hash>
        <hash alg="SHA-1">d09e84a77ad8258d26f6be6bbb31fe81e3f98658</hash>
        <hash alg="SHA-256">a79273d4fbea1683b5fe81bce25d7fe552a542690481132f7ded034a8f00169e</hash>
        <hash alg="SHA-512">b1414e5cd4cd63e1e8a2f4a18198834910a360dac22392e298458049d7bf05e74cea2a4206751026ad7dc2348112aa7f223d0ca6178a859cf343cf306a6bd4c8</hash>
        <hash alg="SHA-384">ff6195b15060e725158aa6c8406e441576c38318fa5ea26e27ffd09f4ed4596b5198579d69ef0192dbb6edb3fda79d40</hash>
        <hash alg="SHA3-384">2b29ecee21e6bf39e6a913cb1bb41d455ade8ec169b7574b6052972f4cf571fb5374d4dde1a24be0ec4d08246359348f</hash>
        <hash alg="SHA3-256">353458e2d9919279b41a1b74791b984fef6586f07232d2e71e42892a790052c9</hash>
        <hash alg="SHA3-512">e491cdd687aaa88d8d84e792caedc02a4ef27d2bdd78e4e9bf286876ce06518c03f0340ff984ffcd507d7982391e5a6f3c4c61e05fbf0e07bd9d5683d493393e</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-shaded-asm-9@9.5-17.0?type=jar</purl>
      <externalReferences><reference type="website"><url>http://flink.apache.org/flink-shaded-asm-9</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink-shaded/flink-shaded-asm-9</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.ibm.icu/icu4j@67.1?type=jar">
      <group>com.ibm.icu</group>
      <name>icu4j</name>
      <version>67.1</version>
      <description>International Component for Unicode for Java (ICU4J) is a mature, widely used Java library
    providing Unicode and Globalization support</description>
      <hashes>
        <hash alg="MD5">046a5f59abf6b67a464dea584d11e59d</hash>
        <hash alg="SHA-1">2e159807158095566726600534034030dddab6d0</hash>
        <hash alg="SHA-256">c4eb904caf5fba968a2f1a3b8aef14df801e9329b21697209ca30bfcf153867d</hash>
        <hash alg="SHA-512">b3036b162356a0a5dad39eee611dae27c6fbe53f9e5ec1f3529ab02d49d97093b58602f43dd855433a0bbe02f6253e46a9d1899911c8e2e73001ab2c9a79d68d</hash>
        <hash alg="SHA-384">c2b28649d0ef9bf68f258a9f432c627a553ead79670f0a7ada3d986091a0001c5ab9eca372f792734bff733370a61fb1</hash>
        <hash alg="SHA3-384">3726bfa8b77bd0cdd66564944044d82dca3ee1fcf2594ebf1a7acc6752faf4c11892a1744af27e5528dc4b991e4cd0c0</hash>
        <hash alg="SHA3-256">cb19cec2baad1dc610267b2c98325f5c742230caf2247ef6297dfe8d9be9f11d</hash>
        <hash alg="SHA3-512">f46e4ead1cc1c05c3825716485ce79c890500a5356f8e7ca578f3080c09fb2460fb1aed81d65d345c402706906ea4e96afc0ff03c50fb0ac5bbacd351a8f11ec</hash>
      </hashes>
      <licenses>
        <license>
          <name>Unicode/ICU License</name>
          <url>https://raw.githubusercontent.com/unicode-org/icu/master/icu4c/LICENSE</url>
        </license>
      </licenses>
      <purl>pkg:maven/com.ibm.icu/icu4j@67.1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://icu-project.org/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://unicode-org.atlassian.net/projects/ICU</url></reference><reference type="mailing-list"><url>http://sourceforge.net/mailarchive/forum.php?forum_name=icu-support</url></reference><reference type="vcs"><url>https://github.com/unicode-org/icu</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.confluent.flink/flink-test-utils-junit@1.19.2-cp2?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>io.confluent.flink</group>
      <name>flink-test-utils-junit</name>
      <version>1.19.2-cp2</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">f3d91002486f5fbf90644f686801a4f7</hash>
        <hash alg="SHA-1">d323452b888772d5072e5ba10ad27ef418a1537c</hash>
        <hash alg="SHA-256">02ce5feae946b17e5ce735c6009ac05c5d9f5b6c95bb3df050008a65a797e9ca</hash>
        <hash alg="SHA-512">789e4a1de9d901030218fbd21ae57d73aad7f7cec1b07e9f3a0929794a5d6645ab947bf89ed40969093cbb4574843293c80a6e1398621dc18c46147fa66fc898</hash>
        <hash alg="SHA-384">c1552b965d074615222c38916902b7978d5e1774fbf4af3fe1bed9129478bc6b6d58808371fae890f128f1561bc79254</hash>
        <hash alg="SHA3-384">25c3fe6bd0604bfe13f7c407f35f7d758837f1783a047a6e5c7d89249fc3159fef88736afb070c6ce7dc93a1a03742a1</hash>
        <hash alg="SHA3-256">ff2ebe5367f3880c14d7d42a7c20d0b920fc011588fed9416f028429a639f97d</hash>
        <hash alg="SHA3-512">5a0bc207e6531a52a24c7a8a31aa60fb049a8bca623ee170754b3037f711b0f680264afdfc69c1630c1987afe5b537cc2b770180c0ae599bc78a93e941859753</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.confluent.flink/flink-test-utils-junit@1.19.2-cp2?type=jar</purl>
      <externalReferences><reference type="website"><url>https://flink.apache.org/flink-test-utils-parent/flink-test-utils-junit</url></reference><reference type="distribution"><url>s3://cp-flink-staging-654654529379-us-west-2/maven-staging/e376491b71b31739887d29e34e6552860f69668d</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink/flink-test-utils-parent/flink-test-utils-junit</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.testcontainers/testcontainers@1.19.1?type=jar">
      <group>org.testcontainers</group>
      <name>testcontainers</name>
      <version>1.19.1</version>
      <description>Isolated container management for Java code testing</description>
      <hashes>
        <hash alg="MD5">76224f706bf65ca7d02dc8702652dd49</hash>
        <hash alg="SHA-1">eaad6e005a0792a1ee537bd3e7d3113e8d3315b1</hash>
        <hash alg="SHA-256">9107859eaf7077780742a807c4b4aea0c4bf7800a407482a433318b31ff26516</hash>
        <hash alg="SHA-512">bd5222462ab0f940006fdc8ec9524055605af1451f604e13c1d6e52642a512eb94c44c28cf7f820e0054d2f15c17dbe3559298de80f67ac1b22b2c5e34d5ee7c</hash>
        <hash alg="SHA-384">c04ea92f8b8fb21ad71bde704ed77d21eb7e90dbbac248cd4bd75c04f71deb24d87a7dee49550f5c5c045997065a665d</hash>
        <hash alg="SHA3-384">93317f2bebf5cd9f9af95960847023b09484ee90efcdaa35e6e58895207f490b46a347e838a7bb5b91a8fe296bc63c9d</hash>
        <hash alg="SHA3-256">22553ab446fdff385b9e1ce8b2947fab20f427f0d9d9b42afe10df7e1b0ed07a</hash>
        <hash alg="SHA3-512">ce83b181b756406f92e3d561a38a44934d0c48acf20e051fe4e39f923b7a911d4e5911d47072514b32d19e9ac1d8013814d05bbcc908b5c717f77b47e29ee955</hash>
      </hashes>
      <licenses>
        <license>
          <id>MIT</id>
          <url>https://opensource.org/licenses/MIT</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.testcontainers/testcontainers@1.19.1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://java.testcontainers.org</url></reference><reference type="issue-tracker"><url>https://github.com/testcontainers/testcontainers-java/issues</url></reference><reference type="vcs"><url>https://github.com/testcontainers/testcontainers-java/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.rnorth.duct-tape/duct-tape@1.0.8?type=jar">
      <group>org.rnorth.duct-tape</group>
      <name>duct-tape</name>
      <version>1.0.8</version>
      <description>General purpose resilience utilities for Java 8 (circuit breakers, timeouts, rate limiters, and handlers for unreliable or inconsistent results)</description>
      <hashes>
        <hash alg="MD5">af347a22d19d632616d7a3fb63024218</hash>
        <hash alg="SHA-1">92edc22a9ab2f3e17c9bf700aaee377d50e8b530</hash>
        <hash alg="SHA-256">31cef12ddec979d1f86d7cf708c41a17da523d05c685fd6642e9d0b2addb7240</hash>
        <hash alg="SHA-512">d0a041a0e6eb26b92f1554038dc169a87fcf0a935497b50b93c13d78dde89ac26339b45a0d69a5e8dcf076dea0d187dbe81cdf97a045f092d0936717d8e08c30</hash>
        <hash alg="SHA-384">de8dd0f7939e2127da9d1012fcf94ca672953d0ae2edfd45213e688e9b170ec1251b64f1b0fbf6e0394d39a49b84e548</hash>
        <hash alg="SHA3-384">f74101a4dc718fb1968838e81b7cd256cbdd8831c9179b7a491e0cf2b4f8d3b5115bae78ef6eb1200874a60ad542284f</hash>
        <hash alg="SHA3-256">b1c78074dece82fc2781b776222055ecd47d4040394c1ef29fd962c88517b406</hash>
        <hash alg="SHA3-512">4ab545b668dcfe87bf03179cdc550cabd1026de19c39f55fd7b54e7a3aaa08905cae0f7701c0d9863062693f9146f2ea06a6eaea7d75c632225d13a6a3b371dc</hash>
      </hashes>
      <licenses>
        <license>
          <id>MIT</id>
          <url>https://opensource.org/licenses/MIT</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.rnorth.duct-tape/duct-tape@1.0.8?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/rnorth/duct-tape</url></reference><reference type="distribution"><url>https://api.bintray.com/maven/richnorth/maven/duct-tape</url></reference><reference type="vcs"><url>https://github.com/rnorth/duct-tape</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.jetbrains/annotations@17.0.0?type=jar">
      <group>org.jetbrains</group>
      <name>annotations</name>
      <version>17.0.0</version>
      <description>A set of annotations used for code inspection support and code documentation.</description>
      <hashes>
        <hash alg="MD5">7b06437ed47fa7b4a8ec8909f4fb9022</hash>
        <hash alg="SHA-1">8ceead41f4e71821919dbdb7a9847608f1a938cb</hash>
        <hash alg="SHA-256">195fb0da046d55bb042e91543484cf1da68b02bb7afbfe031f229e45ac84b3f2</hash>
        <hash alg="SHA-512">839ec18d4a6f930ecd39827ebd4013c13a7176003543b8f60056770179032648faf1651e9e73109e811881b68a39757ca7e39731a61ff4a3461637b196fe4f7b</hash>
        <hash alg="SHA-384">c9d045a68ef2b0d5b12aa00b636e43af22de4c02f4dfcc6b5b7b04fdd57c98c7246decd2e5dc3eb9f1b10d929ac33a11</hash>
        <hash alg="SHA3-384">25ad733b460552705dd624634191beb909a6ed35f2475723faa06551d9542b87e724266f5f6003350c39965a92b5e54c</hash>
        <hash alg="SHA3-256">f731cde48fa6a20e57e97a829184492cfa5fe0e14a5082e7810205c2b9f1ac1c</hash>
        <hash alg="SHA3-512">b6698f9d65c0a364854717e64edd5df4fb1c97300d4dc3cc7ae7194b0b7b9e826b3d800dd362e2ad05417dac6ee3b2164294796c3ae46f4cbed840c2481b79b1</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.jetbrains/annotations@17.0.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/JetBrains/java-annotations</url></reference><reference type="vcs"><url>https://github.com/JetBrains/java-annotations</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.github.docker-java/docker-java-api@3.3.3?type=jar">
      <group>com.github.docker-java</group>
      <name>docker-java-api</name>
      <version>3.3.3</version>
      <description>Java API Client for Docker</description>
      <hashes>
        <hash alg="MD5">6f351c56b54a82bcfbba16d53df01552</hash>
        <hash alg="SHA-1">22f9e8d0dc5a89fbcfb8e5182b36a49d989f87a0</hash>
        <hash alg="SHA-256">8be2f41ddc33306b83f91e413fc1a07cee02db05e4c493456de3399e5bcb7b6c</hash>
        <hash alg="SHA-512">a7f860e391413929d46be0d2a7f33a4ef8a2c66fd131ecc41e2b3006268e57001bf14982225929fe5a0637767454ba788a72a2fb683e9c497a03ec8dd3978e29</hash>
        <hash alg="SHA-384">c1b97e0daef7e13d0550e8194d28ef94431501564ab1128d3becb924c3bc4e871f914c3b632a04ac1158c067fef3035b</hash>
        <hash alg="SHA3-384">1ac56a6addd3aefd99c3751001b40282e25b601a73296a9f687d547d6a5ace6cde82db8fff7409a2911de670ffe79581</hash>
        <hash alg="SHA3-256">2ddb2531bd4a85a45b9829a09f9ec88176d0b00a68b87628575eb112c7652aa8</hash>
        <hash alg="SHA3-512">5d7cfa69317e7f0d805fed88141b47f50a197e283c7928903c12dc060d4c78ce33c5dc055caeacdaa083482a676899af41e071e1ae69b18964b2d0f9ed230944</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.github.docker-java/docker-java-api@3.3.3?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/docker-java/docker-java</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.15.3?type=jar">
      <publisher>FasterXML</publisher>
      <group>com.fasterxml.jackson.core</group>
      <name>jackson-annotations</name>
      <version>2.15.3</version>
      <description>Core annotations used for value types, used by Jackson data binding package.</description>
      <hashes>
        <hash alg="MD5">f478f693731e4a2f0f0d3c7bba119b32</hash>
        <hash alg="SHA-1">79baf4e605eb3bbb60b1c475d44a7aecceea1d60</hash>
        <hash alg="SHA-256">aae865c3d88256d61b11523cb1e88bd48d5b9ad5855fa1fc859504fd2204708a</hash>
        <hash alg="SHA-512">c496afd736fa8acbf8126887e2ff375f162212f451326451fbb4b9194231d814e25bccacbaead9db98beec454f6b8d9ed706c5c88e2145bf7e1a37e13fd81af0</hash>
        <hash alg="SHA-384">13b4d153cc113a69008147974d8887f868f2f3f0a551ef0bacaccf0add17a3168465a94a471e075913f9c6649980a3cb</hash>
        <hash alg="SHA3-384">dcf8ed73f748eb32e1ab25eba3c294344cc0ddb2cc7bb4376814f1866df42c3093f1336291ce9ed9e1c8730663e0017c</hash>
        <hash alg="SHA3-256">59f42bc85ee3a8a5b422085b0462aed2a770cf52d7a3660f2cd6dd257ec6e694</hash>
        <hash alg="SHA3-512">1d1a6fd0e6851d419e79f82170f4060981c233ec8dc61656b84ce7988e9b71bbeecd7364cdadac066ddaf0b3de4dc8aa5acc411ebd1641f549a3af5ba214667b</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.15.3?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/FasterXML/jackson</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/FasterXML/jackson-annotations/issues</url></reference><reference type="vcs"><url>https://github.com/FasterXML/jackson-annotations</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.github.docker-java/docker-java-transport-zerodep@3.3.3?type=jar">
      <group>com.github.docker-java</group>
      <name>docker-java-transport-zerodep</name>
      <version>3.3.3</version>
      <description>Java API Client for Docker</description>
      <hashes>
        <hash alg="MD5">61164d91eb36389e77f6371d67514d80</hash>
        <hash alg="SHA-1">df303392ef9ee91d9069b259505eda84dcc4999b</hash>
        <hash alg="SHA-256">8620a66c13869a6d621ac80e921bceff6e9c43b527a21057b7d1b9b860d063e2</hash>
        <hash alg="SHA-512">3151a4992dca6a71a4bfedc8e0f3fdbfc222bb60d89de8bfc130c9a68ddf772fa6fa017204b9bee5ba3698dd5737a910b817cc0d1b28d0248535918d668a40f5</hash>
        <hash alg="SHA-384">e0d235c977c6cfd09fe308374f95ccdf55b15658672dc860cb3211c208030565e212f981fd081927d71663af70377c11</hash>
        <hash alg="SHA3-384">235edcf24d27d705f5114b234cc7d089ffd984e5f390c45fdbbcccc6aebd3b549366da79ba686d0fb9aea51251ecddf4</hash>
        <hash alg="SHA3-256">16bdcbad70b8077bbbe0ee3e756795fc18429b092e8e8d5958c97601c842a331</hash>
        <hash alg="SHA3-512">976fc84de7d4f565e1fad86d8c3b0567dc21f9de7f8476188febaf48c61398d09876502988ff48dd5e4ea218dec2132f24dd1226b8981000f8021f99fcb2abc7</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.github.docker-java/docker-java-transport-zerodep@3.3.3?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/docker-java/docker-java</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.github.docker-java/docker-java-transport@3.3.3?type=jar">
      <group>com.github.docker-java</group>
      <name>docker-java-transport</name>
      <version>3.3.3</version>
      <description>Java API Client for Docker</description>
      <hashes>
        <hash alg="MD5">3092d720cf36cbd11aeac0146802bba3</hash>
        <hash alg="SHA-1">13e7e159a902df2236f6ded371842bf579a8446b</hash>
        <hash alg="SHA-256">103b94685f398b036cf9243cb8899680bcdb4e54c32340a32b2b5737a87a33ba</hash>
        <hash alg="SHA-512">f36bd012b5604995e600df37173589c1d4de1ac8c287833e5d693896576505feda17c61139cfe1de91999a5e0e4d06206a47a1bb9792100324c5b77e787decc4</hash>
        <hash alg="SHA-384">ec41693b23cbc3478e064672a68f3b084e1fa7d255e1820345c156297d4b2c96164fd2624caa380a7b86b0815e99f3c1</hash>
        <hash alg="SHA3-384">8b6249332c37993cdb83ccbcac0d5e84693ceb67524bbbd81a976930170e2d7611735cf15bb50b7ffedf2ff159c3abcd</hash>
        <hash alg="SHA3-256">a51368ac93de84ddc0642a345f5ed27a9da5da7e0148d37062f09b0183fc8015</hash>
        <hash alg="SHA3-512">2acbb6e0c0c4d673017f7236464d32cbd880b1be04e99894f7f3a54b58d7503d6ef5e32596770b4958533a55d676ae7f528f55b9cb22af38b4449dcc3541a9b3</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.github.docker-java/docker-java-transport@3.3.3?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/docker-java/docker-java</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/net.java.dev.jna/jna@5.12.1?type=jar">
      <group>net.java.dev.jna</group>
      <name>jna</name>
      <version>5.12.1</version>
      <description>Java Native Access</description>
      <hashes>
        <hash alg="MD5">3bab13d7f5ca715013fcac64ceb4108d</hash>
        <hash alg="SHA-1">b1e93a735caea94f503e95e6fe79bf9cdc1e985d</hash>
        <hash alg="SHA-256">91a814ac4f40d60dee91d842e1a8ad874c62197984403d0e3c30d39e55cf53b3</hash>
        <hash alg="SHA-512">5403e494985a53475d9c9268baf1758e37103817bd54865847d67e1adf3dc45287175a12b08a9525837921e7783a55e934a1031cf76d02e55fd4ce6cb2626837</hash>
        <hash alg="SHA-384">5bd86a58007a752b1ef3f599a54546fda70267442f6c202548cf41fea7bc352bcd6747391be70f261f48a3d5334f99de</hash>
        <hash alg="SHA3-384">43c58428512271295ecdf158d6951d6d86b8758072e81dd9ccda26ad59b81e8194c9c9ca8a2a6d748f69139927a92124</hash>
        <hash alg="SHA3-256">6125a65ff81d5af3118d3a1d95fc421aa0ac612f019099efcc1dec9ca614adfa</hash>
        <hash alg="SHA3-512">d073a2181db5026b0ceb22fbba41c9b84509aa0c5841a4d5f14ac1978bc5b4488c85246ec524d1372f42c7fe7ebf741c1256836cc247d3c4bb446c762549944f</hash>
      </hashes>
      <licenses>
        <license>
          <id>LGPL-2.1-or-later</id>
          <url>https://www.gnu.org/licenses/old-licenses/lgpl-2.1-standalone.html</url>
        </license>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/net.java.dev.jna/jna@5.12.1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/java-native-access/jna</url></reference><reference type="vcs"><url>https://github.com/java-native-access/jna</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.confluent.flink/flink-runtime@1.19.2-cp2?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>io.confluent.flink</group>
      <name>flink-runtime</name>
      <version>1.19.2-cp2</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">d06553db38e63a802fcba03c0bc921a1</hash>
        <hash alg="SHA-1">e1ccd7d57b1a727fa3db280c04725547876856ed</hash>
        <hash alg="SHA-256">c1cc1faa25df66d9e46b623c23558fb56e3726df92df23d31a70a127e56b5794</hash>
        <hash alg="SHA-512">9337cf16974262bfcff0bc1d3328655f7991506b5ed791d8263555f88d600b22f4d86aef9b68ddc4c5e1b221502b4e02ca47f405523d2e93153b1cec7026c4f9</hash>
        <hash alg="SHA-384">47222003cb9fbe91c2e92d1a598ffe1dde46f96fa9c6826b21b68c31e5fe3f60f129b25aea051d5dffe8e1c28ae4a3d8</hash>
        <hash alg="SHA3-384">321ac5bd0d4d5f561a8ef963ee71103cf9d013038eff5fff83f3b548e12e06170f6b5f994b29438ecfd8aa233abf90d7</hash>
        <hash alg="SHA3-256">58b7ee64acf1458e3a6dd0000cff8c396dfdaab2068400de6ddb6881a9264d2b</hash>
        <hash alg="SHA3-512">7e7a14a8f82bef2aba4187986b9b9c6f55e424aacb1cbbbc470a268ef3235ae05492554225768da9c1ba1a0f19f75cc315fb2494e43943d18980f94404905c3d</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.confluent.flink/flink-runtime@1.19.2-cp2?type=jar</purl>
      <externalReferences><reference type="website"><url>https://flink.apache.org/flink-runtime</url></reference><reference type="distribution"><url>s3://cp-flink-staging-654654529379-us-west-2/maven-staging/e376491b71b31739887d29e34e6552860f69668d</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink/flink-runtime</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.confluent.flink/flink-rpc-core@1.19.2-cp2?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>io.confluent.flink</group>
      <name>flink-rpc-core</name>
      <version>1.19.2-cp2</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <hashes>
        <hash alg="MD5">57cf881cb46ff5f4e684a29b4d9464aa</hash>
        <hash alg="SHA-1">d8faf02b41fd0f057786c54acaa320b6252361dc</hash>
        <hash alg="SHA-256">eaff7db20328c2e0bb87539796c9c0af1ab34430c250ea07a995d649f7f747cd</hash>
        <hash alg="SHA-512">cab157aaaf97634593b8a0fb211ed8263ec50d87b012d3d60d4735f31a220d05ed6aa09489d384faaf76ee7afa70b3770271a11c614bb997f19988474cfd177f</hash>
        <hash alg="SHA-384">c8f22998e33261a2d6b1ef486aacd85eef48f910e4895587966a83e4be9d26af27d5603e228b1eb2a446e7a1bdf773f4</hash>
        <hash alg="SHA3-384">6243fb0a1ef41d1cd0c26bd8a49715f7438c63de93862d90d24ceeaf442bcd775a44af379215e79e9c065f73a35c5c8d</hash>
        <hash alg="SHA3-256">5ecd860df7754824bd7b58f455e74068a254c11f77d71eaf660b8859e6d13b58</hash>
        <hash alg="SHA3-512">3457a6acaf261e96c178f23ebf0edb737112c8c388e839bb6057c3af8c68b1232e1a880d79ba7566f9a6ef83579a182a6a0f6f3f3c49d99a92e68193204dfa54</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.confluent.flink/flink-rpc-core@1.19.2-cp2?type=jar</purl>
      <externalReferences><reference type="website"><url>https://flink.apache.org/flink-rpc/flink-rpc-core</url></reference><reference type="distribution"><url>s3://cp-flink-staging-654654529379-us-west-2/maven-staging/e376491b71b31739887d29e34e6552860f69668d</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink/flink-rpc/flink-rpc-core</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.confluent.flink/flink-rpc-akka-loader@1.19.2-cp2?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>io.confluent.flink</group>
      <name>flink-rpc-akka-loader</name>
      <version>1.19.2-cp2</version>
      <description>This module contains the mechanism for loading flink-rpc-akka through a separate classloader.</description>
      <hashes>
        <hash alg="MD5">3ef16416d5cfc550280e11e631f0efde</hash>
        <hash alg="SHA-1">ad74347ecd2b1d9582e83a48b75cc9379f503693</hash>
        <hash alg="SHA-256">2496abcd70bcdc4accdbe3a000e681565c65f09094d322d0cb8f44242ed2ea2f</hash>
        <hash alg="SHA-512">10a71e9daefee7e878c37f958062497de0fe0453372c66f39c0efebe36a0a551eb94bc74ef22f6e4f39bfa55b8d42c7bd433a9e7ee320037db9103414cf22c47</hash>
        <hash alg="SHA-384">9d49d01c52f877f5fcbebdb6dcfcd1c06c2805094bed8e4dfd4521ed7df0b0fd6317a12ab198f5c811585004c1437267</hash>
        <hash alg="SHA3-384">57764bc1e712d45746de7f0b10c0c2789d69b55994ba17cc75e3aef771cf2d43846cf45513349903d56bccc3d451936d</hash>
        <hash alg="SHA3-256">0d1234f5fe996cdd4159c700b119039d0df013c4b37638d39d0815edcd3c7d2d</hash>
        <hash alg="SHA3-512">d2179766aaddf56385c77390b7ee896191e4a5d6a5f0d199922cb2f878e59baa95a022e9ca8de44438b10d597b061e0940c2a1b37234fe1986300d151b90dbdd</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.confluent.flink/flink-rpc-akka-loader@1.19.2-cp2?type=jar</purl>
      <externalReferences><reference type="website"><url>https://flink.apache.org/flink-rpc/flink-rpc-akka-loader</url></reference><reference type="distribution"><url>s3://cp-flink-staging-654654529379-us-west-2/maven-staging/e376491b71b31739887d29e34e6552860f69668d</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink/flink-rpc/flink-rpc-akka-loader</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.confluent.flink/flink-java@1.19.2-cp2?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>io.confluent.flink</group>
      <name>flink-java</name>
      <version>1.19.2-cp2</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">4dfa5509554a70b0140093a7fd17ff13</hash>
        <hash alg="SHA-1">c9bff2fd31efcdedfad24a041f175cca820f7bd2</hash>
        <hash alg="SHA-256">d3cd6ce32ed9e67d08e1070db0e4d44f287871936400b9dd87d6a214c68849ac</hash>
        <hash alg="SHA-512">f174900d5658df0a693d4a924391fc3ff09c656a09f8cdaffd604d22cfd31140e9e19ea49a86dfa800829f58a51b82253e1d88a4e89377c180b73dbdcf048a97</hash>
        <hash alg="SHA-384">eb774fce99b939001116510e05551a5c9603c1cdcbe0dc3ce3793c8649874aedf42b0e2454299c78ae2adec318c68797</hash>
        <hash alg="SHA3-384">8909e7a0ce9f86fc8031147c3b869d995f476ccec5814aad44f55943fff6fc18fbf184f546f0737786119469259b98ed</hash>
        <hash alg="SHA3-256">8c280d9c5cebac6bf094912dcbe48aac9cb16582189cd5b08e87acfc2def0845</hash>
        <hash alg="SHA3-512">d0eacb0981b0483cb57e928504a9220ecf4e5608596a8d7de651a67bacdb76796b77c8d991bbb8b688b63dd57b80dac2ccdb1dd2c80a55d4a6508b8979d02ffb</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.confluent.flink/flink-java@1.19.2-cp2?type=jar</purl>
      <externalReferences><reference type="website"><url>https://flink.apache.org/flink-java</url></reference><reference type="distribution"><url>s3://cp-flink-staging-654654529379-us-west-2/maven-staging/e376491b71b31739887d29e34e6552860f69668d</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink/flink-java</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.twitter/chill-java@0.7.6?type=jar">
      <publisher>com.twitter</publisher>
      <group>com.twitter</group>
      <name>chill-java</name>
      <version>0.7.6</version>
      <description>chill-java</description>
      <hashes>
        <hash alg="MD5">886eb8ef6db3880433f4a8e10ef37300</hash>
        <hash alg="SHA-1">a74b8d019d6941d82ff86d1612e382f4a0ae8259</hash>
        <hash alg="SHA-256">f7c41a2257be11e6c9bca97095c8f4b0299626941a3508469f90622eb8f8368e</hash>
        <hash alg="SHA-512">dc9973909b87cfb85ee45c90662612dd2bc137b7510172221eb47020f76b23eb3ea76c6b4fba4cee5d81e910f87aba71359136d33ae0f6424e3ce7123bf77dbf</hash>
        <hash alg="SHA-384">41e7faed7c2c22987868fba7cd6dac0d59d174d82d841ba4e5aa8675cc9265bf9d9df021553a781cfa24c4c9c7a35c5c</hash>
        <hash alg="SHA3-384">32751d6ecd77676ffa11a109dead8c8d19a6d1d78576b19ac5a8323d9446ba51fba87e0d60820dd2bac69fb705aa2061</hash>
        <hash alg="SHA3-256">6bdf2ed042c5b7f4f4d11bb52e448ce740e18563364f66730ca2b6b4eadf0401</hash>
        <hash alg="SHA3-512">0ab14bee65d85803d5080f3b0ad86183daafb61e3ca3a610e199bc04a11421b45436e405dc3c227b5d80a64178ca82739eccb5ad8ee157efa925d484d9daae28</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.twitter/chill-java@0.7.6?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/twitter/chill</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.confluent.flink/flink-queryable-state-client-java@1.19.2-cp2?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>io.confluent.flink</group>
      <name>flink-queryable-state-client-java</name>
      <version>1.19.2-cp2</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <hashes>
        <hash alg="MD5">4eba5a1ee37e737891728b234c48eb7a</hash>
        <hash alg="SHA-1">7cb8fb96c49709dffc5ac72a07ec21d75be7f2d6</hash>
        <hash alg="SHA-256">bae5d1e908288db358062f60deb974c31a82f5002ff0efe827def0aff6c3eeb0</hash>
        <hash alg="SHA-512">04f4f5de132a4a14e7d509340420f908f1824f103fd2dfbdc2ade20e55825fd13c54bbb0f844f62eaf48931b07132a0aa05a4550d0fd12c18a45e8a4a797faa9</hash>
        <hash alg="SHA-384">b8516ce2cf74239c1b6fe6120c13b87196b06e0a6931495ca08420da90f85600068287413051bf64ca6ea9eb3c531f83</hash>
        <hash alg="SHA3-384">2e284fed3b763f2bc6276e7b9afe625c3cbb07352e325d96e06b1992efb417f22fe575890be8c55ca00a9f02af829a03</hash>
        <hash alg="SHA3-256">bf4772d2c840ef72bdad687bc0d8d3454be0dc9878d76a5351779bcc1eafac0c</hash>
        <hash alg="SHA3-512">2a9db275d2ab94d92ac5211ede10921252357d12b37bdb24a7d7e036bd1c377203bac3a299697803c2f0cceed5aeaf099ad6dfa2faef1c7f6f97f7d34dfc6dc6</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.confluent.flink/flink-queryable-state-client-java@1.19.2-cp2?type=jar</purl>
      <externalReferences><reference type="website"><url>https://flink.apache.org/flink-queryable-state/flink-queryable-state-client-java</url></reference><reference type="distribution"><url>s3://cp-flink-staging-654654529379-us-west-2/maven-staging/e376491b71b31739887d29e34e6552860f69668d</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink/flink-queryable-state/flink-queryable-state-client-java</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.confluent.flink/flink-hadoop-fs@1.19.2-cp2?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>io.confluent.flink</group>
      <name>flink-hadoop-fs</name>
      <version>1.19.2-cp2</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <hashes>
        <hash alg="MD5">d07efa137e472cd60e46f15915185317</hash>
        <hash alg="SHA-1">ad2684048bcfa752bdc12bb9b79097672a25c5a4</hash>
        <hash alg="SHA-256">4d00431ee5343ed34c245ed0d3989d2eeed7798ff31190ffadc209a5a6397e68</hash>
        <hash alg="SHA-512">10b8fd27a17369ece201e4785d2a144aad88e46b7a3d1f06e829a35ce5222518065156f7b7fac708b55febb18d1fc88d3b0373e0fda5eafbcb30c3024df9b4bb</hash>
        <hash alg="SHA-384">9e685e5a5e2c162681aa4a7f3e52e701fd98df5e7c6e1d4d64f0457cc5a3c20a82ab1b42705afcd21dc73f7a733dd575</hash>
        <hash alg="SHA3-384">668c6920ba2c7c4dceca62c4eeaae30bab2d8fe54adcbe840dc50ac2ea309c5659a23a46d30234094fc232f275b8f290</hash>
        <hash alg="SHA3-256">79a580768606c51dd0357d496e0e9b9a28feb2416cd7c7783b065f5bdad86f91</hash>
        <hash alg="SHA3-512">670e161cd79b5ce044fedc4ea9b5d38dc69b37a661551e8fb686c053dacb079dfd403245cd0bc67cce4328b0a643577878249be6c5a9e421296d780f032e1021</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.confluent.flink/flink-hadoop-fs@1.19.2-cp2?type=jar</purl>
      <externalReferences><reference type="website"><url>https://flink.apache.org/flink-filesystems/flink-hadoop-fs</url></reference><reference type="distribution"><url>s3://cp-flink-staging-654654529379-us-west-2/maven-staging/e376491b71b31739887d29e34e6552860f69668d</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink/flink-filesystems/flink-hadoop-fs</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-io/commons-io@2.15.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>commons-io</group>
      <name>commons-io</name>
      <version>2.15.1</version>
      <description>The Apache Commons IO library contains utility classes, stream implementations, file filters,
file comparators, endian transformation classes, and much more.</description>
      <hashes>
        <hash alg="MD5">84351f7991a0e6722f00e96a4ccc376f</hash>
        <hash alg="SHA-1">f11560da189ab563a5c8e351941415430e9304ea</hash>
        <hash alg="SHA-256">a58af12ee1b68cfd2ebb0c27caef164f084381a00ec81a48cc275fd7ea54e154</hash>
        <hash alg="SHA-512">e9adaeed2d715ac0ae44de056ba165a743a92acbeb9871b535f7e58e0b3bc4fba276495b50429be195098a559f3adb7294048479754a0ee4d397da2efda5f81c</hash>
        <hash alg="SHA-384">028c72b59373d3894da22f9eb2c731aabd00f670993973f71a354d722670c12ca659686b83bbf8db32d060ca180f50b2</hash>
        <hash alg="SHA3-384">73cd585ab3736b4be50ec0f10dfe5ebfc3390eea8d56f07f29055f1fddb2dff8084310eaa6fb9f97ea639ed1abd7bc33</hash>
        <hash alg="SHA3-256">daf39bc99f1a3dc0075714a4a342a58d69a4cd62c25bc39a581f657ca72b1044</hash>
        <hash alg="SHA3-512">b003f8971d1536ea0fc4320dbfe17d7259d49e59314739f9fc83134e511facbff048b0ef4f86a9d0893781ca09c95cebc3b181a6c89a2d41e851870b96e76839</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/commons-io/commons-io@2.15.1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://commons.apache.org/proper/commons-io/</url></reference><reference type="build-system"><url>https://github.com/apache/commons-parent/actions</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/IO</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=commons-io.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-shaded-netty@4.1.91.Final-17.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-shaded-netty</name>
      <version>4.1.91.Final-17.0</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <hashes>
        <hash alg="MD5">f3e6fd4f43c7a8647604df2a9b712dab</hash>
        <hash alg="SHA-1">81b6e0b28e0309946cb6d03792199fabfc0d9f09</hash>
        <hash alg="SHA-256">c4d370f1b2bda0b55686fdec840c8a047950b9448f26cd01f1594a3bf0fde75b</hash>
        <hash alg="SHA-512">7f2010cda152f6baecc2a0c9d79f8bb2b7eee8a88f80dd8ed5bf2f723885cf3f9f60e373db77bd591225f3037f33f4a7c08d05e807356899a6af818225b6aa4c</hash>
        <hash alg="SHA-384">d1d99aee334155d4c2dfddcc63dfd1b8ce9d7e4a67bba29be0b6b5a54a717ea95decb0fa300ef9e05b589d273952e22e</hash>
        <hash alg="SHA3-384">3a4bcd8d36c45ef4e8d2fd5d1774fe2ba0913851e6034ec770c3af962db9bd9ef084aa3e2a94b83d4c098059f37800a2</hash>
        <hash alg="SHA3-256">8a9bde99e2876e545b7fbc0400a9980381162b7a51596132cff27d49caff7e55</hash>
        <hash alg="SHA3-512">9109ab1275822d476cb5dcde1d329625be51953ef07af0b586cac9040221a1cd65bcb98f7aa02d7b07372676960697ccb04f751c31150ba9b6b8b0e5e5b6b4a9</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-shaded-netty@4.1.91.Final-17.0?type=jar</purl>
      <externalReferences><reference type="website"><url>http://flink.apache.org/flink-shaded-netty</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink-shaded/flink-shaded-netty</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-shaded-guava@31.1-jre-17.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-shaded-guava</name>
      <version>31.1-jre-17.0</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <hashes>
        <hash alg="MD5">b8c5129f4164f8ee2086854bdb289690</hash>
        <hash alg="SHA-1">00fa393c1db1308f4fb920f010f79c4c774e2f39</hash>
        <hash alg="SHA-256">03442ae97c4ca34388568cbce0e67e9911b0137b2b3849dff7a550008d5a4336</hash>
        <hash alg="SHA-512">15bb65f24054768915fbc29a95dfa93307b0babc39a02a204ae65eff44f259357b471fef9967b864b7a78e07d266933ce8e3eda8a866fcc73643cc38bcc5653f</hash>
        <hash alg="SHA-384">c8e6f2630c0824bbd1902a25884f09c076efbbbe0265f5d3fb49370affcff81ee5dd8b7887ba4bf063915446b937117a</hash>
        <hash alg="SHA3-384">a2ffbdbcfb8be61c43891fa19275a765b71e6830b110fa9ab77d46ac35527d2be0943d895767a70591895916963048c6</hash>
        <hash alg="SHA3-256">5a73e8e370e9bb3d634495dade320f0b569f4ed307fc147cb8f3af547bb6b057</hash>
        <hash alg="SHA3-512">abd1618c0568eee546f5b32314085bef40f8de74ffa5e52f0aa7a5bed82713142af8a1bdaf79f18e2210b79f8c3592276c54b2356594d19d8f56185ec9a457d5</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-shaded-guava@31.1-jre-17.0?type=jar</purl>
      <externalReferences><reference type="website"><url>http://flink.apache.org/flink-shaded-guava</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink-shaded/flink-shaded-guava</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-shaded-jackson@2.14.2-17.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-shaded-jackson</name>
      <version>2.14.2-17.0</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <hashes>
        <hash alg="MD5">492259ac7642687cc959257a5512542f</hash>
        <hash alg="SHA-1">689daca4a6fc14e361831e15abd96283166d0f62</hash>
        <hash alg="SHA-256">37e87311498ae8da80adb2aa09ab6e9739d8611e09868e7220822206c739231e</hash>
        <hash alg="SHA-512">3f4434cf93f2cd12b686aa84c4b1910d7e0191b2ddad7ba8de6d2c3805d3b49afcf5da06e1052faf01b6cb0dda554594f78e39db69d83208119c1f4f2cd5dc8f</hash>
        <hash alg="SHA-384">9e689ab8b7e7f7db269fd5b1b0fc1dc5f13fed06b283c9b8ceec5c500fc9f6a4200674eef2bb884a9e67133de32e9a77</hash>
        <hash alg="SHA3-384">a67fd2fe9cfd6e8ef51ab3c0217fcaf0a9420178a8c4025770b86d6b590db65c8bb4d96acf05b4212d2661073e4409cc</hash>
        <hash alg="SHA3-256">e47b2c93363ff5d65ae47d619f3caa605b5d996e4e765811b4b7117f1c58c90e</hash>
        <hash alg="SHA3-512">af2b026aebfa279ca42602c04a8db054a12c9f39c5640a0e7804cfa5d06124a52099aea56e9dfc25d018da9baa742b274c5914aa98814dbdd0e9c5ebfa7035b6</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-shaded-jackson@2.14.2-17.0?type=jar</purl>
      <externalReferences><reference type="website"><url>http://flink.apache.org/flink-shaded-jackson-parent/flink-shaded-jackson</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink-shaded/flink-shaded-jackson-parent/flink-shaded-jackson</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-shaded-zookeeper-3@3.7.1-17.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-shaded-zookeeper-3</name>
      <version>3.7.1-17.0</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <hashes>
        <hash alg="MD5">a2737bcfc729e776a7d4dd3a13067999</hash>
        <hash alg="SHA-1">6206880a4f471a7f560fa824d1ad8b0596d7e59c</hash>
        <hash alg="SHA-256">e91cb263c67631a27e7a6cee147b75a9a638f3c52fcd053106fc4584feb6e585</hash>
        <hash alg="SHA-512">62cba94bbd87bd678f6cbbee07168dba3f2d1bac21371c4b5c1d035ef2596711bc46b1a273f4b89fe8110b2b855dc425614ca42fc866340a9edb89226f093c6a</hash>
        <hash alg="SHA-384">ee4a3d27059c35a13559599d5b00267b9db9514ea4c04b2b3432ade93d71fe4d8510fe2c3416fac2dada3b218019e454</hash>
        <hash alg="SHA3-384">501df884bf117eb9f420d9ccf92ccbae8d1833d1bb52314ff21bbcc99d9c262eb99b5941ed5da2aabdd1ee953a1320e1</hash>
        <hash alg="SHA3-256">8ba0e15658af1b2451f6e180ab4778930cf0a30ca4fe0b5a9156eac095118f1f</hash>
        <hash alg="SHA3-512">c604d9a6a533e806ed3779c328326ce0935c9e8d2f30922289755d35e91e5fe7152a7f1a29b082442e625a35f1217f6bb38021a94dec1c23818715653cef00ef</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-shaded-zookeeper-3@3.7.1-17.0?type=jar</purl>
      <externalReferences><reference type="website"><url>http://flink.apache.org/flink-shaded-zookeeper-parent/flink-shaded-zookeeper-3</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink-shaded/flink-shaded-zookeeper-parent/flink-shaded-zookeeper-3</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.commons</group>
      <name>commons-lang3</name>
      <version>3.12.0</version>
      <description>Apache Commons Lang, a package of Java utility classes for the
  classes that are in java.lang's hierarchy, or are considered to be so
  standard as to justify existence in java.lang.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">19fe50567358922bdad277959ea69545</hash>
        <hash alg="SHA-1">c6842c86792ff03b9f1d1fe2aab8dc23aa6c6f0e</hash>
        <hash alg="SHA-256">d919d904486c037f8d193412da0c92e22a9fa24230b9d67a57855c5c31c7e94e</hash>
        <hash alg="SHA-512">fbdbc0943cb3498b0148e86a39b773f97c8e6013740f72dbc727faeabea402073e2cc8c4d68198e5fc6b08a13b7700236292e99d4785f2c9989f2e5fac11fd81</hash>
        <hash alg="SHA-384">c34b8a0e0eba2168ad56fedeb7a1d710b6f1d3f1ce6aae99a4e0247bd120efbbadc8dcb2f731045b8a16e3efd30604dc</hash>
        <hash alg="SHA3-384">8ad6ebe7754bf0caa8cda7e59c0e95360d76e06a7ad6aeec5637985519dbd1dd06e7eed04711039f36ec4c49de280def</hash>
        <hash alg="SHA3-256">18ef639b2aeeb5aedffb18dbf20c79f33e300d99fb31b131689639cc470e6e4c</hash>
        <hash alg="SHA3-512">fbea96114dcf4f31cfaaa99987be756ddda3a6c74f8c835461997df794d54b92da1f60fe5c3f1f2a43cb8c5f5db7f4048bef77c70993673c7a93f3660fffc8da</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://commons.apache.org/proper/commons-lang/</url></reference><reference type="build-system"><url>https://builds.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/LANG</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=commons-lang.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.commons</group>
      <name>commons-text</name>
      <version>1.10.0</version>
      <description>Apache Commons Text is a library focused on algorithms working on strings.</description>
      <hashes>
        <hash alg="MD5">4afc9bfa2d31dbf7330c98fcc954b892</hash>
        <hash alg="SHA-1">3363381aef8cef2dbc1023b3e3a9433b08b64e01</hash>
        <hash alg="SHA-256">770cd903fa7b604d1f7ef7ba17f84108667294b2b478be8ed1af3bffb4ae0018</hash>
        <hash alg="SHA-512">afd836a1094449e0a791fee67363666c47b6d24acff353a5089b837b332c0f4af89565c354682521e37062d20e6b52d70c77bb4f24cca9b9532c274fc708a831</hash>
        <hash alg="SHA-384">06c56e6e513dd77cf10d0da46cdea08c34e220e81fa024735b668c6650df4234e564fe865ff5cafea963f56b1e8ffd4a</hash>
        <hash alg="SHA3-384">f09065ed066c25debf8c78cbb0bcc738e1ea283302ec992dcfb649acb90091cff879465c65a162e94534d454e3b4e9bb</hash>
        <hash alg="SHA3-256">0b59c567164bb755f2353b78ba66744000a8c4b35e1df05255b080a21c3a3dd5</hash>
        <hash alg="SHA3-512">f0fbce02a862b70f472a27d0722c54ac111ca2eb94584b8b0b73d1926aec26047cd92542ad0b3cf980a6825077587f41b194aa93d6f6350d1b87e59e8df1be7c</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://commons.apache.org/proper/commons-text</url></reference><reference type="build-system"><url>https://github.com/apache/commons-parent/actions</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/TEXT</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=commons-text.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-cli/commons-cli@1.5.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>commons-cli</group>
      <name>commons-cli</name>
      <version>1.5.0</version>
      <description>Apache Commons CLI provides a simple API for presenting, processing and validating a Command Line Interface.</description>
      <hashes>
        <hash alg="MD5">6c3b2052160144196118b1f019504388</hash>
        <hash alg="SHA-1">dc98be5d5390230684a092589d70ea76a147925c</hash>
        <hash alg="SHA-256">bc8bb01fc0fad250385706e20f927ddcff6173f6339b387dc879237752567ac6</hash>
        <hash alg="SHA-512">b78ac2b418e9e9e7d0bc866664577199d320408a6f03151b3789bac365c986dd526df853599e633d7e50fe136cbf3eb9ce50c9cfa0ad38c3cc8d8ee416f61c40</hash>
        <hash alg="SHA-384">a7a2daa807c4007c506b5100f0a9b526c0052c4e1f6b699904ef9d2aba8195b6003dc4d47ca133b15e2f3e830bdbe6c4</hash>
        <hash alg="SHA3-384">44ca97514a2e34b5bf3de9b5d45c8e871f6eee517db7f3c4b4476eb3e8dfe9a9d8760f3181114708288c373727b42475</hash>
        <hash alg="SHA3-256">a0a47001d3a293f129ffc21f17f575a9d23ce5b88b440e651e4cd01edd0cc421</hash>
        <hash alg="SHA3-512">483dae23d6827a105d17847c8c813527f19042b65c4d09635dfc4bfd25990fe3ba2a997540460fd5b1d72ca3add9a38ca8b32004680764db972a9bb62f7f68d8</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/commons-cli/commons-cli@1.5.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://commons.apache.org/proper/commons-cli/</url></reference><reference type="build-system"><url>https://builds.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/CLI</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=commons-cli.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.javassist/javassist@3.24.0-GA?type=jar">
      <publisher>Shigeru Chiba, www.javassist.org</publisher>
      <group>org.javassist</group>
      <name>javassist</name>
      <version>3.24.0-GA</version>
      <description>Javassist (JAVA programming ASSISTant) makes Java bytecode manipulation
    simple.  It is a class library for editing bytecodes in Java.</description>
      <hashes>
        <hash alg="MD5">23fd22d0d089ddfac567a39ce0cb1a91</hash>
        <hash alg="SHA-1">d7466fc2e3af7c023e95c510f06448ad29b225b3</hash>
        <hash alg="SHA-256">aba81efa678b621203fb89aeff81d6f126f7a9dd709401e5609c42976684ae23</hash>
        <hash alg="SHA-512">e57dad74a3edef837ece841d06e4a7c96ffecab8fbcba56fe5f7eccd662f0c0d757880a6073793a8c75ad7a0a1d146346b75cdbfe4fd8a271048a54446e5d1a2</hash>
        <hash alg="SHA-384">4867afdb7522b3dbfa10a51264ac6c15a2a8083d16c8dbef318275d24687768f35130b1c17d8407ca8ecf855abd83dff</hash>
        <hash alg="SHA3-384">a52be891987d4fc7d319e6417e0cd9a28f189d8623b803d72b5429e118da73b9937899231825e793d37b434d7522d283</hash>
        <hash alg="SHA3-256">0cf8db7d2a5f7e1a70827538cb4b0b446fcc239f05ca55d9bf8f2a50f1e08af3</hash>
        <hash alg="SHA3-512">ed9675f9f070203801eb762092ac99636d376b7ef563f99508283006a65a0d2dfce38e1ba7ff2ccfebcede0376ba0724b76b459ca112477234aed8208807f785</hash>
      </hashes>
      <licenses>
        <license>
          <id>MPL-1.1</id>
        </license>
        <license>
          <id>LGPL-2.1-only</id>
        </license>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.javassist/javassist@3.24.0-GA?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.javassist.org/</url></reference><reference type="distribution"><url>https://repository.jboss.org/nexus/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://jira.jboss.org/jira/browse/JASSIST/</url></reference><reference type="vcs"><url>scm:git:git@github.com:jboss-javassist/javassist.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.xerial.snappy/snappy-java@1.1.10.4?type=jar">
      <publisher>xerial.org</publisher>
      <group>org.xerial.snappy</group>
      <name>snappy-java</name>
      <version>1.1.10.4</version>
      <description>snappy-java: A fast compression/decompression library</description>
      <hashes>
        <hash alg="MD5">d1d3b91e925c46a1a0f68b87298bafe8</hash>
        <hash alg="SHA-1">50d0390056017158bdc75c063efd5c2a898d5f0c</hash>
        <hash alg="SHA-256">55b30c94e5c4cc2d4b6976916098d0678a8a6cc7427fa8c875621bd94e731ac8</hash>
        <hash alg="SHA-512">9e52bad4eaa0d0a2e0083cdd3433d84c4bb44c4d3f0314a48c3d6eacbb64d0f4fb2d71197944115618a598eb4a4941c13af2a9ec676b003fb3462ddac58bbe41</hash>
        <hash alg="SHA-384">9539e8eb2dea244f07a7216db38970e3f336b5dc9d132cbe54e201c818dba3e02a1fc467b4529a18eca7127f86d742dd</hash>
        <hash alg="SHA3-384">d5d5ef5d8b050f200ae29855a4b6f5e278215d0a97a69d3653dc1aa716f9847b3c305312a3c994d46721615ba02fc7c8</hash>
        <hash alg="SHA3-256">bbbb3ff43a24094bf2c77dd8c8f94b06d62d158da0d2c3399de3a2993df9986e</hash>
        <hash alg="SHA3-512">de2aa7e7fada466f24ccda07123e2877446733dd48e4b914d25b0d296f677e17a24f182a0e9216e77b261143b774ccaadcfd2854dde1bf36cb2c6db6cdf78b3c</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.xerial.snappy/snappy-java@1.1.10.4?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/xerial/snappy-java</url></reference><reference type="vcs"><url>https://github.com/xerial/snappy-java</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/tools.profiler/async-profiler@2.9?type=jar">
      <group>tools.profiler</group>
      <name>async-profiler</name>
      <version>2.9</version>
      <description>Low overhead sampling profiler for Java</description>
      <hashes>
        <hash alg="MD5">4df6477a255b88e99f2ed4daa3c713cc</hash>
        <hash alg="SHA-1">4ed20e2a4640ee672e7cf23b1512dbdeb9a4b7e6</hash>
        <hash alg="SHA-256">6c4e993c28cf2882964cac82a0f96e81a325840043884526565017b2f62c5ba4</hash>
        <hash alg="SHA-512">60ba593a0cf529397e73e38ef71bc2e5def44f1111a60f40a724ac3472ef7afe92e02a61b0ad18c373122cd92216f49268d335e1150dc3a99ff2431c598aeb5c</hash>
        <hash alg="SHA-384">65107ddcd2a06b69ac4cdb9bd93452045c4e08b843826666a890816abe0486966599cf6a4b07ff87c5d95e86551bb115</hash>
        <hash alg="SHA3-384">4989b467a4791464d50c51782ccc60547bfc8105aebc0764656c67405bbd7d023a9d405a1fd864f86dbd186af8624928</hash>
        <hash alg="SHA3-256">225998977421a87839be6c09f49f9ebd972b063a65f53d374e61fc3d68416ca4</hash>
        <hash alg="SHA3-512">723c0651f61ae6a119624b11bc9d3959ae44de0bcef51f0a341c5d7ebdc6a0e677f3c43399db9a4a657334f46a1092ee55d45f92344b7e31e6e26669ffe41823</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/tools.profiler/async-profiler@2.9?type=jar</purl>
      <externalReferences><reference type="website"><url>https://profiler.tools</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2</url></reference><reference type="vcs"><url>https://github.com/jvm-profiling-tools/async-profiler</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.lz4/lz4-java@1.8.0?type=jar">
      <group>org.lz4</group>
      <name>lz4-java</name>
      <version>1.8.0</version>
      <description>Java ports and bindings of the LZ4 compression algorithm and the xxHash hashing algorithm</description>
      <hashes>
        <hash alg="MD5">936a927700aa8fc3b75d21d7571171f6</hash>
        <hash alg="SHA-1">4b986a99445e49ea5fbf5d149c4b63f6ed6c6780</hash>
        <hash alg="SHA-256">d74a3334fb35195009b338a951f918203d6bbca3d1d359033dc33edd1cadc9ef</hash>
        <hash alg="SHA-512">98d59086a6021ca571d9c1d64b715e43044c730e1ac563f514c40cf44302615d30378b6d5cc69990446522de6260dc8e7b303e3990a3139dc326d058dfb6dbd9</hash>
        <hash alg="SHA-384">8e3f2acdbb41a00c4d9cc5f328e63fb626ac7c6c84e1bf9502e2fcc76a591b2b819b2d27b29925ff986b95c297b30e2c</hash>
        <hash alg="SHA3-384">ec0d6a00760d0a4ecba13a41785d6ae57a64552b1687eaa3e292b3054bb1348e49ab8a938197ff126f9218c6cb96ee1c</hash>
        <hash alg="SHA3-256">7be684c102891105f66d378b61ea1297a392c1618b5aebf7e0b281f55217c206</hash>
        <hash alg="SHA3-512">0b2294570ea2bfbb50ced21dfa4bad956467ca447e9ab2dd602a3478371bcd0e9f13d2dff74d06827a28882409612cdde00bd91267be05bd3510c68268bf3166</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.lz4/lz4-java@1.8.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/lz4/lz4-java</url></reference><reference type="vcs"><url>git://github.com/lz4/lz4-java.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.confluent.flink/flink-runtime@1.19.2-cp2?classifier=tests&amp;type=test-jar">
      <group>io.confluent.flink</group>
      <name>flink-runtime</name>
      <version>1.19.2-cp2</version>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">0088f3b0f7e0c0d73dee2d1a02b87703</hash>
        <hash alg="SHA-1">395f6fb8595cfcd00a159c1b1496b09918a81dca</hash>
        <hash alg="SHA-256">ba410c814e2e7e02b45cc1b4008848af1f7b8cae422220ecb7afb808bc160b82</hash>
        <hash alg="SHA-512">7da51032dd9c0f3e45cc9c54321b84729a35c846f13156032a904e2f9fcf30aac07ccef052efa4ebf690ecefd2c65a5f1750dd275f6198dca189b725245bfd66</hash>
        <hash alg="SHA-384">8f4d8d1fd586f39c5526b2216c7fab865723ebb1d5b3bd39a59f5297de77490a06ad8aa0f72eaaa5bbc2ff4dfce23e7c</hash>
        <hash alg="SHA3-384">19d86a3e9bfe9ce7f6f6a82ff009e61c05ceb10339749cb9f26cd6b1b7b73a891878006949ba08f419ab89befa5dcab4</hash>
        <hash alg="SHA3-256">b7e8a356dfb9f3be2df9d79b1ecfb0154996a8b71a41371f67142124d4d669d1</hash>
        <hash alg="SHA3-512">9abc0ba37bb3e1923019278958e9581b0697cb6eb475322f949c039642a7ded7c407fb486a2159d7454c4279c1bef40f1b9a77e538c65659badd164672f9be42</hash>
      </hashes>
      <purl>pkg:maven/io.confluent.flink/flink-runtime@1.19.2-cp2?classifier=tests&amp;type=test-jar</purl>
    </component>
    <component type="library" bom-ref="pkg:maven/io.confluent.flink/flink-core@1.19.2-cp2?classifier=tests&amp;type=test-jar">
      <group>io.confluent.flink</group>
      <name>flink-core</name>
      <version>1.19.2-cp2</version>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">d6ec64b7ef168b9a3e0de8717bda248d</hash>
        <hash alg="SHA-1">c168215bc560ae088d971553acbc3b69602f5384</hash>
        <hash alg="SHA-256">3b0119e5d122e527294e4b3226687ddfc14d55394792141013a82decc65a8415</hash>
        <hash alg="SHA-512">68d829c6f9b376fbf4eaed8d2b638c04990b2399b37d35b58c74b594bc70e35b1b96bc87a65530909f6722ab1df92be193e03f439ce70da7067e8396f07eed5c</hash>
        <hash alg="SHA-384">4d8512b518d1eb34bf62c50e0e857ec68c683fd26e549019694da20a66da71b1de88e64eb68f033c3835a69251baca31</hash>
        <hash alg="SHA3-384">4c7a6ac7d03aedd24ef817f8e7b208e6c0e4a2bf97726951eef63009d2a7cef73333e5d626019add6eeeb01df49e3617</hash>
        <hash alg="SHA3-256">328f45686f1e1b5e8dc7afabf2fbb4a386abcf94645a663cf9bb01072193f606</hash>
        <hash alg="SHA3-512">e2006ee3daccfee505ee4f0bcfbd0eb69b286c92ba41c3d674949def652c76f0d81cc54fe7685d15349a162aabb654f716622acc28f3f7c15588ede8b5779ff6</hash>
      </hashes>
      <purl>pkg:maven/io.confluent.flink/flink-core@1.19.2-cp2?classifier=tests&amp;type=test-jar</purl>
    </component>
    <component type="library" bom-ref="pkg:maven/io.confluent.flink/flink-annotations@1.19.2-cp2?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>io.confluent.flink</group>
      <name>flink-annotations</name>
      <version>1.19.2-cp2</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">da359822fc8733286c9bbf4d16dd5293</hash>
        <hash alg="SHA-1">a889d438d12b954df02c5e777f11e2af28c2b08c</hash>
        <hash alg="SHA-256">536b55b5bef646e0014b1ff65cc82a6967b33a03885ff21ddbe60629a6466e6d</hash>
        <hash alg="SHA-512">c926fbfa229d13390a87f2a70db9fee3a3a53f999a521fb3e239e9cdf4646468b66ea9912c6c90d22c391f1e3b8d514ec91d4093ea8d5159222e5403df61b949</hash>
        <hash alg="SHA-384">0715267131e5138cc8b218bec33ca3607b202a4b3ace620b09c667610cd5d2b34183487df639490c904fa3b91d075c50</hash>
        <hash alg="SHA3-384">7b3bdd0440f45ebb86889f49820cfac75b82673312adcfac9ea06dd29ec9088bf89b1b318f69077f128bbe69ce8197c7</hash>
        <hash alg="SHA3-256">031afd88ab29c01b099237be1ed2063b575e8bccfe5887cdac52ec692970742c</hash>
        <hash alg="SHA3-512">422e502e6502ba2f5534991849076e83e1320d1341392ecdd0b7419c7aea77752cb6bc93633aa4c2b5db2862e95c5b3b5495f5875b227fdf99333c11600eece8</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.confluent.flink/flink-annotations@1.19.2-cp2?type=jar</purl>
      <externalReferences><reference type="website"><url>https://flink.apache.org/flink-annotations</url></reference><reference type="distribution"><url>s3://cp-flink-staging-654654529379-us-west-2/maven-staging/e376491b71b31739887d29e34e6552860f69668d</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink/flink-annotations</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.confluent.flink/flink-metrics-core@1.19.2-cp2?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>io.confluent.flink</group>
      <name>flink-metrics-core</name>
      <version>1.19.2-cp2</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">173ffb6346116e700288337e8e7409fe</hash>
        <hash alg="SHA-1">e0a2e3d0d93710e7f518e131c46d39d03c160f19</hash>
        <hash alg="SHA-256">fcc9ce6b456cfa2ed93dfbf4c66369a2f4143ee6da2b16c03c23881b238b4fdc</hash>
        <hash alg="SHA-512">79a0341fdcfb20dc7d00c4397c4c266c2dcbd688b7272a6b3aacf2eeb4e88f5b47210d5b3d543bc343e4b8ef7ef005518ba4e632c98713176035c2aa413d83ab</hash>
        <hash alg="SHA-384">4b9b6fbf563acc9c93cb897f4da9d4336c8f75920a7972c34da8ec103c75b49208e9287263c92d5d976e9c69d3718df2</hash>
        <hash alg="SHA3-384">5e0b837b44eb6c69d06681b031486a2934f7cbb2c5ec6ccc985875d5b566c2393a149dc89aba180e5967f4d0b05c4df4</hash>
        <hash alg="SHA3-256">d3a8ef2e222fe991f1a9b864cbf36a72a0c7b59b1103b1de5af1e3dc720b394d</hash>
        <hash alg="SHA3-512">f08e349a2eda8e3597272637840dc89f817841f946aee75219ff1d1c89d0e10d929c10d1ab3733f80a36924c21f195e8e75c168801bdde11a092aef6266af813</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.confluent.flink/flink-metrics-core@1.19.2-cp2?type=jar</purl>
      <externalReferences><reference type="website"><url>https://flink.apache.org/flink-metrics/flink-metrics-core</url></reference><reference type="distribution"><url>s3://cp-flink-staging-654654529379-us-west-2/maven-staging/e376491b71b31739887d29e34e6552860f69668d</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink/flink-metrics/flink-metrics-core</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.snakeyaml/snakeyaml-engine@2.6?type=jar">
      <group>org.snakeyaml</group>
      <name>snakeyaml-engine</name>
      <version>2.6</version>
      <description>Core YAML 1.2 parser and emitter for Java</description>
      <hashes>
        <hash alg="MD5">719bcfb9f917992d0a99a6f7106d8466</hash>
        <hash alg="SHA-1">235a7e571b33eda1a81e0f73a3173ef95dd020e5</hash>
        <hash alg="SHA-256">2652199af40c9aa2f1782400d2dfbbf4e5226208c4e05ddd4059c3d6d9cd1505</hash>
        <hash alg="SHA-512">c3b5e87ce323b37bcd9e65d060157ebb26d116b5dac30c6eaa185b30aa24c0be8dfd0ad604a9a12ce7010acadee54a9cea9f065cd2f434eeaed7bccce2e14a7d</hash>
        <hash alg="SHA-384">edfc3c9a95cc2fa524a322f20ec034ec16b3fad950a58bfd1ed774eaaab946304cddc5e9ea4e117a899ec568ba7fa620</hash>
        <hash alg="SHA3-384">63b9e0ed448431a1d4b34a4b0b97b65c2c7be6ef46f1ce3b10191373e3339422f9c06bc846ae861a982c3c3618abd9c6</hash>
        <hash alg="SHA3-256">19ce75167267903be79122e149ede2916c3e07bab0658db21ab40864e8c920cd</hash>
        <hash alg="SHA3-512">7777f37097a6951dafe18fb038d087e7fe0924bfb2a10c66a76a57d95aa65341d4b674c6ff1d9d453c436ffcb50e281c2bedc854ce687fefc30c9595b7352c8a</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.snakeyaml/snakeyaml-engine@2.6?type=jar</purl>
      <externalReferences><reference type="website"><url>https://bitbucket.org/snakeyaml/snakeyaml-engine</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://bitbucket.org/snakeyaml/snakeyaml-engine/issues</url></reference><reference type="vcs"><url>https://bitbucket.org/snakeyaml/snakeyaml-engine/src</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.esotericsoftware.kryo/kryo@2.24.0?type=jar">
      <group>com.esotericsoftware.kryo</group>
      <name>kryo</name>
      <version>2.24.0</version>
      <description>Fast, efficient Java serialization</description>
      <hashes>
        <hash alg="MD5">6cf0fa5b5d4f6b8226fd4a4bfb7532b8</hash>
        <hash alg="SHA-1">0c6b206e80cfd97e66a1364003724491c757b92f</hash>
        <hash alg="SHA-256">7e56b32c635058f9aa2820f88919ab702d029cbcd15285da9992e36cc0ae52f2</hash>
        <hash alg="SHA-512">a4c6ce768528a03c219cc6a41b22293f78e433c849c90391b64dda3f2376fd79951a89c5f4e6701bcbcb6eee9abffe2390cfb12dba3b885e4a3d411a26b78f40</hash>
        <hash alg="SHA-384">678ad1b7f4d99910b8ff44a6c8f78ccae91f823161ce23de39077397352919b7257e1e6e0dea90900be973291ea19282</hash>
        <hash alg="SHA3-384">671fc6aa9905f8131482e1d0f3fe26126562b13777893d51a66d0f84fc6f2aa3f13947e488ffba8f09c31a2cc0e9758a</hash>
        <hash alg="SHA3-256">46e89d8f12cbead0fe29ad707d5dba96e880dacce2a6b374ac4bf1ced9f36a79</hash>
        <hash alg="SHA3-512">c7cde437eef8343eccd4c5ecb8de5683529e3d4d8262e8cd1f7b7d0df9c632253b979737fd1b486314ec2728aee3a3782dee5d2032621485db4aa3b2a8262741</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.esotericsoftware.kryo/kryo@2.24.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/EsotericSoftware/kryo</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/EsotericSoftware/kryo</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.esotericsoftware.minlog/minlog@1.2?type=jar">
      <group>com.esotericsoftware.minlog</group>
      <name>minlog</name>
      <version>1.2</version>
      <description>Minimal overhead Java logging</description>
      <hashes>
        <hash alg="MD5">f7cfbdf63b67df0bbfa4c7cb260885bc</hash>
        <hash alg="SHA-1">59bfcd171d82f9981a5e242b9e840191f650e209</hash>
        <hash alg="SHA-256">a678cb1aa8f5d03d901c992c75741841d98a9bc3d55dad02e84d65315c4e60f2</hash>
        <hash alg="SHA-512">7b4082766ad740d86708783f3b08780ed72dd18062aa9ba422c4b9016b332d2334ae511f50ef7d89e4eedbdac5cebc51ab6ddaf4d1eea857a3250eb5962f0d08</hash>
        <hash alg="SHA-384">932a282a9c06864001f8212199e4be05543609adbd985c5f4517ee6eba734acd3fd8812213bc0c98af264637cbf9c78d</hash>
        <hash alg="SHA3-384">f36e9f494611c85f59febfef9ce93fc68f1f17db881400456204c1f099e623e334d2f10b41018392877c8af13de7f59a</hash>
        <hash alg="SHA3-256">37422ef85dce86abd8b14b4c9f7ad77261d728a472126c8eca38f356c98da395</hash>
        <hash alg="SHA3-512">74ba47271899706a284e942482ff41649ffd93e57a29320732e57864c47f3f0431377130ca7afb5e64cc6b68d4e5a5cdfc38027966cda4b5e512e3ce02bd8a99</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.esotericsoftware.minlog/minlog@1.2?type=jar</purl>
      <externalReferences><reference type="website"><url>http://code.google.com/p/minlog/</url></reference><reference type="vcs"><url>http://minlog.googlecode.com/svn/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-collections/commons-collections@3.2.2?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>commons-collections</group>
      <name>commons-collections</name>
      <version>3.2.2</version>
      <description>Types that extend and augment the Java Collections Framework.</description>
      <hashes>
        <hash alg="MD5">f54a8510f834a1a57166970bfc982e94</hash>
        <hash alg="SHA-1">8ad72fe39fa8c91eaaf12aadb21e0c3661fe26d5</hash>
        <hash alg="SHA-256">eeeae917917144a68a741d4c0dff66aa5c5c5fd85593ff217bced3fc8ca783b8</hash>
        <hash alg="SHA-512">51c72f9aca7726f3c387095e66be85a6df97c74b00a25434b89188c1b8eab6e2b55accf7b9bd412430d22bd09324dec076e300b3d1fa39fccad471f0f2a3da16</hash>
        <hash alg="SHA-384">dd4e99b3314bd3c1a1ee26296615d9e44dadf7a1f8a7bbba44fb95121803d331e36d4cca4260e7609af78a47ba3e4073</hash>
        <hash alg="SHA3-384">8ce03528e4a6e95c44283b56eca87e6a6d3bf1363411a55b538f4f9110cf7470581ea5c73925e877ddab08dba0603f40</hash>
        <hash alg="SHA3-256">fd3d6134b5f07077b82ccf93d148dacf7c4ce5c971209510edd0e77e3e38c19e</hash>
        <hash alg="SHA3-512">c2a523916fb7c7d55a05d5e3d9e9b33000733f4b20a71be174e4e093e3f06ea78ad831edd1505527da7388105f8647efb7d5666ba852c90b4e2d5bb74256efbc</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/commons-collections/commons-collections@3.2.2?type=jar</purl>
      <externalReferences><reference type="website"><url>http://commons.apache.org/collections/</url></reference><reference type="build-system"><url>https://continuum-ci.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/COLLECTIONS</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>http://svn.apache.org/viewvc/commons/proper/collections/trunk</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-compress@1.26.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.commons</group>
      <name>commons-compress</name>
      <version>1.26.0</version>
      <description>Apache Commons Compress defines an API for working with
compression and archive formats. These include bzip2, gzip, pack200,
LZMA, XZ, Snappy, traditional Unix Compress, DEFLATE, DEFLATE64, LZ4,
Brotli, Zstandard and ar, cpio, jar, tar, zip, dump, 7z, arj.</description>
      <hashes>
        <hash alg="MD5">cbc0bb8eca12b747ca21bf998d736e60</hash>
        <hash alg="SHA-1">659feffdd12280201c8aacb8f7be94f9a883c824</hash>
        <hash alg="SHA-256">051aceb8bbcc62d0f5b2b8ac72c53767f9c59bfbd050151e65bef6f51c8ed9c9</hash>
        <hash alg="SHA-512">acbeaa2909b809cd561e7156df18340d96abacb179325622d73bdd6b82cb9b387d6fcb1a44d8195aad4e786da299289e17598a1d337b7c7d1c0bc610cc128714</hash>
        <hash alg="SHA-384">052d4d0cd1929c4299dd9d37dd36eaea6ed2be6b04d6d83a94f8608a6d1138aa81f7a34f25113ac267e7ba25ce948c9a</hash>
        <hash alg="SHA3-384">8b0bf441e8ce793fb6513bc07551cc48ab4507696c18e6037b0fcf35bc4e1eb3e44ed962e2d3765c86d4d912770aa53e</hash>
        <hash alg="SHA3-256">e441768e06092053f4703844ec0c8f2b437e06e7c190d48fec9d7682beb94c40</hash>
        <hash alg="SHA3-512">5984f9f08f83789555677f6800f25fa8e80a9eb2e4d46b5fb117b8efc24753644fa103a2f6b619827661a41677991bc827965172ef25f1313d8a59154e615e8d</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.commons/commons-compress@1.26.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://commons.apache.org/proper/commons-compress/</url></reference><reference type="build-system"><url>https://github.com/apache/commons-parent/actions</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/COMPRESS</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=commons-compress.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.confluent.flink/flink-rpc-akka-loader@1.19.2-cp2?classifier=tests&amp;type=test-jar">
      <group>io.confluent.flink</group>
      <name>flink-rpc-akka-loader</name>
      <version>1.19.2-cp2</version>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">08321602248c03bd531b1d5886389c20</hash>
        <hash alg="SHA-1">ead953cf4f11fcebbc6e656c147959c42cc2de82</hash>
        <hash alg="SHA-256">4f048817182293e5f01595190c92fc80d4c29fed86d8e4e02785e78b0f3839eb</hash>
        <hash alg="SHA-512">01f22ddfca2780288b9f9ea4ddcf7b6859a8578dfaf1b1b259ae014855cfcea73161a206c84b84b5e47489212bcd2717ab0b942c67daa7c5946611f0bcb812c6</hash>
        <hash alg="SHA-384">7d486cc118282823f114e2339eff721c1ad5979b145f813e346760cb8e7984ca7b6639d44f87f96c60fd84b6a122b4dd</hash>
        <hash alg="SHA3-384">ee2ce9b8b387fd9e1d7bbc194ee9f57d01390bb7fed00b2fcdca595605441cac62890b5607f5c6e8f7dc608e144d420a</hash>
        <hash alg="SHA3-256">09323ef1f1cc14d0b0eb37c21538d78a1ba710a87919593704b96ef1c57d2a16</hash>
        <hash alg="SHA3-512">0009f9f8d85618cd53837312b0793aad9cdc3aca26324359c1a246804da4d614582aa1640b94f1e632b18163362f35d52273db9cdf245b7d42028edcf877a7f8</hash>
      </hashes>
      <purl>pkg:maven/io.confluent.flink/flink-rpc-akka-loader@1.19.2-cp2?classifier=tests&amp;type=test-jar</purl>
    </component>
    <component type="library" bom-ref="pkg:maven/io.confluent.flink/flink-clients@1.19.2-cp2?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>io.confluent.flink</group>
      <name>flink-clients</name>
      <version>1.19.2-cp2</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">3ea1b494173e7cc468016864e3782b1d</hash>
        <hash alg="SHA-1">597d0de9b77ee411ccdabb037bf6744ab5399197</hash>
        <hash alg="SHA-256">7afb5560ae0dd8a7737799d06ab2242ae7ee9c99aebda597259c63c66163f097</hash>
        <hash alg="SHA-512">68ff2e1f02f5ce2a59206202c2e9bd90bd330557c46cd8fc884fdda439500023a7894391c1e6feffdb099fb77613e80316a31d2a97759103a73709dbc5f29237</hash>
        <hash alg="SHA-384">b818ab06b75a3f8b66cd0bad27d620f9ccc90582e04ba14b813f08b7fa174d78eca47465586489936fb206f5d0167f26</hash>
        <hash alg="SHA3-384">87ddcf2c0b2313982a48c90f721a0e09e83003996c3598cf6b2072da4792030b52b100b604747c6b02a1cd842b6d03c7</hash>
        <hash alg="SHA3-256">f6cb58067d0bf387e0c6b44130a55a2e09ce7fa239ad39e5b3510f01a81f8fda</hash>
        <hash alg="SHA3-512">bd91238b8ab63c488eb938d91d54e91ecd405dc157f98cf20718527cc456551c87383084c68cb5a1f4a3850dc2e595e2ff4bda5f54da2ffa8f32ef0a2996a6c1</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.confluent.flink/flink-clients@1.19.2-cp2?type=jar</purl>
      <externalReferences><reference type="website"><url>https://flink.apache.org/flink-clients</url></reference><reference type="distribution"><url>s3://cp-flink-staging-654654529379-us-west-2/maven-staging/e376491b71b31739887d29e34e6552860f69668d</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink/flink-clients</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.confluent.flink/flink-optimizer@1.19.2-cp2?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>io.confluent.flink</group>
      <name>flink-optimizer</name>
      <version>1.19.2-cp2</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <hashes>
        <hash alg="MD5">8518ff3531eb82c86372d76922d3814f</hash>
        <hash alg="SHA-1">c26778a58d14ed28a38e0efe580eb899b7c1b676</hash>
        <hash alg="SHA-256">1cf4369889cfba9bd189f73d02a3434ddd80fd99c439300edfa8f4c0a395130f</hash>
        <hash alg="SHA-512">cf46aa00a96de747a060137d621943674b67c95b759fb514817c1cafcf406e525bf7660e580bf5026d9412a6db2261fc3d74780d7cdc9e5c730eb7c0173424c8</hash>
        <hash alg="SHA-384">1d5905203a55358d8e6dbf4511ff5e5e019906dc7632ff13867137ac9e7292e0ae24e5b09bda6b5f15439ffc11ffa139</hash>
        <hash alg="SHA3-384">ee8f226fabd0b9abbbe03987af99e9c34a0cea182c1853e3451a6814a2d80f0251a69b2015adef0d2cd5d2bc8739883f</hash>
        <hash alg="SHA3-256">a0df2b50256fd7954d8d7f8102de77bb7f651854681bddaaa19d87b2b9bf74ed</hash>
        <hash alg="SHA3-512">4b825059b7d04290af60c3071a6ed4e7c5b2de248ffeabfac2369c0b90cf730c5b0d628c14b7f49b4de3895de668f154a99c2ef1ce9195f4b8f51d2974d5459e</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.confluent.flink/flink-optimizer@1.19.2-cp2?type=jar</purl>
      <externalReferences><reference type="website"><url>https://flink.apache.org/flink-optimizer</url></reference><reference type="distribution"><url>s3://cp-flink-staging-654654529379-us-west-2/maven-staging/e376491b71b31739887d29e34e6552860f69668d</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink/flink-optimizer</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.confluent.flink/flink-streaming-java@1.19.2-cp2?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>io.confluent.flink</group>
      <name>flink-streaming-java</name>
      <version>1.19.2-cp2</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">c58f5fcf96dcec8aa7c8e187227c2be0</hash>
        <hash alg="SHA-1">c04c407df048e74efb22628a7cf02244c03a209c</hash>
        <hash alg="SHA-256">7a000114c041ef38b0ead3d53cf91ce2d23ced0e1457d4d88d6dd3d489b2bd6b</hash>
        <hash alg="SHA-512">8431edbe549c20a469e442b820c375ce5b56cd6bbf83eab977aa4c20b7664c8a936e52a041a2a9ead20839efe7c61193b10464f490726d02fec1488749045c06</hash>
        <hash alg="SHA-384">7bea67bb9f069e9d3dbfe83c6072ca57128402cc4689417ba2cc089dae9891e7072955695342cd65439d46f673f579bd</hash>
        <hash alg="SHA3-384">64a15cc2f51173ddf71ddc7808fa572e7a625332e22f78981800284a354c3360d1efc52e4fa6e2bddc91699b3bb1b3f4</hash>
        <hash alg="SHA3-256">58ef0b9ecc7e2ee3bfe08ea906b0bea0d8471e8f474e345087e39a0e4a317835</hash>
        <hash alg="SHA3-512">376de8e16a15cbc780ddeea619c44828a766c9afc4f0dd5c143ced0ee2f10d747ef67be8765184645ce5514243ffd32e4af0775640d806cd360f5220e5384188</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.confluent.flink/flink-streaming-java@1.19.2-cp2?type=jar</purl>
      <externalReferences><reference type="website"><url>https://flink.apache.org/flink-streaming-java</url></reference><reference type="distribution"><url>s3://cp-flink-staging-654654529379-us-west-2/maven-staging/e376491b71b31739887d29e34e6552860f69668d</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink/flink-streaming-java</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.confluent.flink/flink-file-sink-common@1.19.2-cp2?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>io.confluent.flink</group>
      <name>flink-file-sink-common</name>
      <version>1.19.2-cp2</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <hashes>
        <hash alg="MD5">5d441c1ca44fa7c3f0df79f9edebe047</hash>
        <hash alg="SHA-1">d50febbb0717661c8f886226b726b22e9b91effd</hash>
        <hash alg="SHA-256">bb567e565aa1b887234a6acd10d2e022d6f64d28c711f5a49adc7913475d9f89</hash>
        <hash alg="SHA-512">285be2bca61b6a37b9617ed50dd761504ef513b57338ed29a6491be76ae6e5035c69b5940b6fe03e21fece31e4db1cd85cf46aede1eae48d4449e9df9875c009</hash>
        <hash alg="SHA-384">01d19fdea110f5a54d838f61852c49a25aad1bde1a9a28c182c3f61668fa9647a92a028f949242d9dfc60e9241ec3cc7</hash>
        <hash alg="SHA3-384">559cb106aaf6f37403d8f4c87e2b7257c7610406340d8c70595d063d410a902dc8920457b13c6a1190ac63b1588048d7</hash>
        <hash alg="SHA3-256">f1068122797471f4caead6d66ca49906b60ce35a502452ef5327a9b9cfdbca47</hash>
        <hash alg="SHA3-512">124f6a26adedbd2e62d1c7c1a4023413d090e282240e1a158e653913d85722780e31c829d4d349c5badc65afaf6174e72fabb175742f7ad9f4930d56f3170344</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.confluent.flink/flink-file-sink-common@1.19.2-cp2?type=jar</purl>
      <externalReferences><reference type="website"><url>https://flink.apache.org/flink-connectors/flink-file-sink-common</url></reference><reference type="distribution"><url>s3://cp-flink-staging-654654529379-us-west-2/maven-staging/e376491b71b31739887d29e34e6552860f69668d</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink/flink-connectors/flink-file-sink-common</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-math3@3.6.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.commons</group>
      <name>commons-math3</name>
      <version>3.6.1</version>
      <description>The Apache Commons Math project is a library of lightweight, self-contained mathematics and statistics components addressing the most common practical problems not immediately available in the Java programming language or commons-lang.</description>
      <hashes>
        <hash alg="MD5">5b730d97e4e6368069de1983937c508e</hash>
        <hash alg="SHA-1">e4ba98f1d4b3c80ec46392f25e094a6a2e58fcbf</hash>
        <hash alg="SHA-256">1e56d7b058d28b65abd256b8458e3885b674c1d588fa43cd7d1cbb9c7ef2b308</hash>
        <hash alg="SHA-512">8bc2438b3b4d9a6be4a47a58410b2d4d0e56e05787ab24badab8cbc9075d61857e8d2f0bffedad33f18f8a356541d00f80a8597b5dedb995be8480d693d03226</hash>
        <hash alg="SHA-384">95d1186d9ca06a3ea2e6437ddec3a55698e2493d3e72f6f554746b74fa929892bd71a2ab501a4e7b1ce56b7cd64e7ab4</hash>
        <hash alg="SHA3-384">f85bb3e46a00fc4940a3be1331301302b0eb728e2d1fe2c1842d4761e5a0bc7a420c0c705ae60250ca1c7b03d3694b9e</hash>
        <hash alg="SHA3-256">919c15ae4b1aef2a58aa6ea4b700bc5562e78dbc382f3393169425ca91ad368c</hash>
        <hash alg="SHA3-512">dbe54d586c898cdbd7df6c31c131ca3525db17fcea5c7f5da8cbfe617e2afc667289290c76771ec5c9567a56fb2b177b0a31d67abcc656410c90287da4d88999</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.commons/commons-math3@3.6.1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://commons.apache.org/proper/commons-math/</url></reference><reference type="build-system"><url>https://continuum-ci.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/MATH</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>https://git-wip-us.apache.org/repos/asf?p=commons-math.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.confluent.flink/flink-connector-datagen@1.19.2-cp2?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>io.confluent.flink</group>
      <name>flink-connector-datagen</name>
      <version>1.19.2-cp2</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <hashes>
        <hash alg="MD5">e6d6f1b895d80c88db557f06bac90a04</hash>
        <hash alg="SHA-1">c922cc3c72c3841ccd8160538f2b7aee132fc429</hash>
        <hash alg="SHA-256">7ac2472b762b1287e6b81f77d39e861e634cb6388d47dc306dde3689fa032019</hash>
        <hash alg="SHA-512">3812937840ac438c46ff11c1082eb28dd07e08962891a86929b67651a84739c9a7ae2a0c0eca01e5c74ba4d41a6bd4ced911f120e64cb7b2c18826e020139a47</hash>
        <hash alg="SHA-384">ad45a345c34940c8f8c47efc05afb26f40fa02e18de5e76cd4b33fc03da9cf0d008230761435b6ca06a183a95d1ae93f</hash>
        <hash alg="SHA3-384">eac26b2938761b361f141a70fb875738cfcd05b35d13956656d0169d91a5b0cd7bfde7cca5ef9f75ef86133d6a3ae00e</hash>
        <hash alg="SHA3-256">1829afe84807820ff3a624decb5161449d34c88446f487071b2da6202d000641</hash>
        <hash alg="SHA3-512">6c4494bfc24e8149409332d633be3a232137d8c71a5ca8dc92bc8a4512e1f3f11130a6068145957d6e48769d46400cef4e2723e23a0e514431f461d786f6c83c</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.confluent.flink/flink-connector-datagen@1.19.2-cp2?type=jar</purl>
      <externalReferences><reference type="website"><url>https://flink.apache.org/flink-connectors/flink-connector-datagen</url></reference><reference type="distribution"><url>s3://cp-flink-staging-654654529379-us-west-2/maven-staging/e376491b71b31739887d29e34e6552860f69668d</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink/flink-connectors/flink-connector-datagen</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.junit.jupiter/junit-jupiter@5.10.1?type=jar">
      <group>org.junit.jupiter</group>
      <name>junit-jupiter</name>
      <version>5.10.1</version>
      <description>Module "junit-jupiter" of JUnit 5.</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">32fd55a03f648868767c1bebedd198df</hash>
        <hash alg="SHA-1">6e5c7dd668d6349cb99e52ab8321e73479a309bc</hash>
        <hash alg="SHA-256">c1a386e901fae28e493185a47c8cea988fb1a37422b353a0f8b4df2e6c5d6037</hash>
        <hash alg="SHA-512">c97a2f9eefa6f34441fc0c97744873040bbe49d335954edab43bab25876a33f4b3f11347459420569ef660449728aa093bbae5d42c0fa733a0b624706b57a65d</hash>
        <hash alg="SHA-384">873dfccaf8366ce5b14dc0b5498205debecd90ecba20b1f1c924721764d546b5b9629dd57c486e5a5a2bc38954bf3824</hash>
        <hash alg="SHA3-384">67f09e3174ae3fac6ddea13b56dcf078165e715cb18afd73d86bb980357e365cef6e62083231f09ae2accddfe62f5bcb</hash>
        <hash alg="SHA3-256">1c2a60003b13025c959e7728b3f4469b67bad8649d2080c0871418fb52b1c078</hash>
        <hash alg="SHA3-512">7c03cfaeabed9c57b26e083bcb0ca9a114c491216fc7e9652a39a5468579175e575ace315493610fdc7711c6557eff11933fbd28f5433c237d2277bee102c5a6</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.junit.jupiter/junit-jupiter@5.10.1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://junit.org/junit5/</url></reference><reference type="vcs"><url>https://github.com/junit-team/junit5</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.junit.jupiter/junit-jupiter-api@5.10.1?type=jar">
      <group>org.junit.jupiter</group>
      <name>junit-jupiter-api</name>
      <version>5.10.1</version>
      <description>Module "junit-jupiter-api" of JUnit 5.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">c6b8b04f2910f6cef6ac10846f43a92d</hash>
        <hash alg="SHA-1">eb90c7d8bfaae8fdc97b225733fcb595ddd72843</hash>
        <hash alg="SHA-256">60d5c398c32dc7039b99282514ad6064061d8417cf959a1f6bd2038cc907c913</hash>
        <hash alg="SHA-512">b1fef44d4aa781bb119ab723c3c2a6f0d27efc4493a1fa26b603c7c7a8884c4d6274bccec6536f120d55f876f8d052aaf6cc003074c27cc704deb2c4bc08b6f0</hash>
        <hash alg="SHA-384">0fd81f893be859a50766bfbf3bd74bd7d359c6d481b7fe3099e220402f585d3d46b6ad42a36b1d88eefbb6fd27a3cefa</hash>
        <hash alg="SHA3-384">5e13ba92f757499ca52d719869d318cade9bde9c948ee9c68d753a21ec273f7b56ad68ff8cb281614efeef1d4c479db0</hash>
        <hash alg="SHA3-256">997c9e0cc57d61a85a8eec568d0f014d47af5bf655602a2c3518b6530b089905</hash>
        <hash alg="SHA3-512">e97c3e2c1faa1f77b174ef6ce7b24a2339e547f5976a4e40348653e84498e0c3bb96068447facef6df6b54d4af34b807f19b4d2bb1d31e26f97d6dae07843bf6</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.junit.jupiter/junit-jupiter-api@5.10.1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://junit.org/junit5/</url></reference><reference type="vcs"><url>https://github.com/junit-team/junit5</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.opentest4j/opentest4j@1.3.0?type=jar">
      <group>org.opentest4j</group>
      <name>opentest4j</name>
      <version>1.3.0</version>
      <description>Open Test Alliance for the JVM</description>
      <hashes>
        <hash alg="MD5">03c404f727531f3fd3b4c73997899327</hash>
        <hash alg="SHA-1">152ea56b3a72f655d4fd677fc0ef2596c3dd5e6e</hash>
        <hash alg="SHA-256">48e2df636cab6563ced64dcdff8abb2355627cb236ef0bf37598682ddf742f1b</hash>
        <hash alg="SHA-512">78fc698a7871bb50305e3657893c10500595f043348d875f57bc39ca4a6a51eda3967b7c8c8a7ec3e8f85f2171bca4aa98823e912e416e87e81c6ba5b70a37c3</hash>
        <hash alg="SHA-384">10398b6998c9202a0731e2e19ae1c3f9d8a83582c2663fe7bdda15794ee6fa816727dbd8f7c7164bd5395ee1cfe7c97e</hash>
        <hash alg="SHA3-384">3abe706fd78509c25a402c7bbf6f9ddf71ffb5b35054864ba0fdf7902207115f888a0ba728fd71d2e87a9360d2498121</hash>
        <hash alg="SHA3-256">d961907a1bfa1dcda329dca494ffbc251b31fabcaca5ab7095661a8ce3c1d654</hash>
        <hash alg="SHA3-512">0ad661617bcac51bcd26f7ad4611c69b1fd9811b50dbf734e041a3243ab1f845e7796620e8a7c40c4a2df3946864598b1251396c7d9bd813203d82710788cce0</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.opentest4j/opentest4j@1.3.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/ota4j-team/opentest4j</url></reference><reference type="vcs"><url>https://github.com/ota4j-team/opentest4j</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.junit.platform/junit-platform-commons@1.10.1?type=jar">
      <group>org.junit.platform</group>
      <name>junit-platform-commons</name>
      <version>1.10.1</version>
      <description>Module "junit-platform-commons" of JUnit 5.</description>
      <hashes>
        <hash alg="MD5">cd430f3f7345c0888f8408ce8795c751</hash>
        <hash alg="SHA-1">2bfcd4a4e38b10c671b6916d7e543c20afe25579</hash>
        <hash alg="SHA-256">7d9855ee3f3f71f015eb1479559bf923783243c24fbfbd8b29bed8e8099b5672</hash>
        <hash alg="SHA-512">4aa83350e7a6df21feb9ba8756bb4a68986f33f8c6e384720d1daa448444016c0def1781729788e3e884664abd6703b1e3c0ec6b79893a9d5645c3a4809c0ad2</hash>
        <hash alg="SHA-384">d264f2c8ceaff384b0f22ee77890195ed3d918b01f338e35fc2ee12f82df15e59533918509f535883b4f4befed28595e</hash>
        <hash alg="SHA3-384">d1fa76d6b2567e831b37ff7843df6d7d65028d4e53c570c6f580cbbf13269d2aa2afedfedfe5a3f2cf92d7de6d3c89b2</hash>
        <hash alg="SHA3-256">eef0f968f2d2fc31f8b4a4ed43bafeb46977de1ac3d59477ab6e2b014f97e070</hash>
        <hash alg="SHA3-512">93340cc2c378c830c755b25006bc4f73ec77ad10661f05625b23efa0854d456da8e62bdbe7e7edf3418dda864e6e0d7a6b9d34cea23d525b8991258f3d75fc9c</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.junit.platform/junit-platform-commons@1.10.1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://junit.org/junit5/</url></reference><reference type="vcs"><url>https://github.com/junit-team/junit5</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.junit.jupiter/junit-jupiter-params@5.10.1?type=jar">
      <group>org.junit.jupiter</group>
      <name>junit-jupiter-params</name>
      <version>5.10.1</version>
      <description>Module "junit-jupiter-params" of JUnit 5.</description>
      <hashes>
        <hash alg="MD5">5e8e17f6f2a5dedb42d9846a3352dd31</hash>
        <hash alg="SHA-1">c8f15d4e99940c4564098af78c10809c00fdca06</hash>
        <hash alg="SHA-256">c8cf62debcbb354deefe1ffd0671eff785514907567d22a615ff8a8de4522b21</hash>
        <hash alg="SHA-512">dbd8a3bca0a03b6eef54de2b489685c8125e0c6f23cbdb633174b21e07cc7b97a24b55dcb5b60ec1a496683a918bfdf1ea0459950689e3755aa965ea9e106ee9</hash>
        <hash alg="SHA-384">882b3106163d7c195867e08db9948a0997e1469a23c847bff523efa30a9b274c0588f8228fca98c78abf9b61709a7ff2</hash>
        <hash alg="SHA3-384">6e4e9a7dbb32cc3f16f21a14fe036aa13488c5b94e3cb6cc53b417c4588b90b5ae118caa3eb9f4bc9c513d06e2c1f408</hash>
        <hash alg="SHA3-256">171a08027b527e3be1ad66082405eacf4a55746dd983c46d9ff7ee5552276615</hash>
        <hash alg="SHA3-512">c435b4a17208b67f6fa35ebe74872c3d2c3557b290437bb682ac86701402bbe17d0e53446c674bb94c7feaae4bbfa99d888c7bf7181707e27fe08ff7934c00f6</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.junit.jupiter/junit-jupiter-params@5.10.1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://junit.org/junit5/</url></reference><reference type="vcs"><url>https://github.com/junit-team/junit5</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.junit.jupiter/junit-jupiter-engine@5.10.1?type=jar">
      <group>org.junit.jupiter</group>
      <name>junit-jupiter-engine</name>
      <version>5.10.1</version>
      <description>Module "junit-jupiter-engine" of JUnit 5.</description>
      <hashes>
        <hash alg="MD5">71d86cd027062c4da0796c2493ae94fe</hash>
        <hash alg="SHA-1">6c9ff773f9aa842b91d1f2fe4658973252ce2428</hash>
        <hash alg="SHA-256">02930dfe495f93fe70b26550ace3a28f7e1b900c84426c2e4626ce020c7282d6</hash>
        <hash alg="SHA-512">1fcc9406d1e0301e27538757c9649545d784e83743a8800932971881cfd78a14a264ad13c0b92fad9ae1be50963c540427a19cb2d1fee06888ef48105aad4c8b</hash>
        <hash alg="SHA-384">6657ac1bb11d7a40bbcb020add01e57edbbc521645116908d857074d9ea319eab3e7b7f2e9fa1ff8df08b5db3774f4dc</hash>
        <hash alg="SHA3-384">607313914c11274c577b0aaaae6c68aa6ecf25d8302f55d4e334aa6b58df2e543d2399785e2019a56b85aac7716c9623</hash>
        <hash alg="SHA3-256">be3560971111d3f548bef24aa6660ec2a126fd17b3bd68b7deeb1ab48735a9d1</hash>
        <hash alg="SHA3-512">4ba6cb70f8fc1918dcedc874340488909c48e0f976d1834ec433f4b5c6cff55b16a996a0443a1b68a0d0ad84a37bf51386633905628728bde08b5820ee67dfaa</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.junit.jupiter/junit-jupiter-engine@5.10.1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://junit.org/junit5/</url></reference><reference type="vcs"><url>https://github.com/junit-team/junit5</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.assertj/assertj-core@3.23.1?type=jar">
      <publisher>AssertJ</publisher>
      <group>org.assertj</group>
      <name>assertj-core</name>
      <version>3.23.1</version>
      <description>Rich and fluent assertions for testing for Java</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">3c5640639c17a5311ff5928e02204202</hash>
        <hash alg="SHA-1">d2bb60570f5b3d7ffa8f8000118c9c07b86eca93</hash>
        <hash alg="SHA-256">36af798af9fc20537669e02618bd39f2c797f4813824ef222108cb686fa4c88e</hash>
        <hash alg="SHA-512">0d0d6ff1b4b1561a005fb25d9d3b73052ea792cbc0913636e9ff7cb0c2e4a34871f8424facebefad06f52e5a126025554baa9ca8887c893e15b107dc376cd1ea</hash>
        <hash alg="SHA-384">647d0ce8fbdacc43b995f982eafccc7494f847a23ac5eff6d51d5c6bc9caf769c84dddd05192133a27225036bbe5a2db</hash>
        <hash alg="SHA3-384">0a40a6f41fc8a5185cbfed706cfcb2cb124dd4bbdf0ce309f69cd7b3fea78c033fa38758275c90ef315218ef80d7369e</hash>
        <hash alg="SHA3-256">41b57913563871a9e42974e31ce79808a943f133c6d41e063e568e5f8ab56736</hash>
        <hash alg="SHA3-512">2e6d4dcc2c83ac3718e6abf09c3fb48072fb661b989250b50694b6bd09196b8f72dbde46912d5c9f3ea1e3f95dd1463fd2e80572872943dfff0490b535f5c444</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.assertj/assertj-core@3.23.1?type=jar</purl>
      <externalReferences><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/assertj/assertj-core/issues</url></reference><reference type="vcs"><url>https://github.com/assertj/assertj-core</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/net.bytebuddy/byte-buddy@1.14.4?type=jar">
      <group>net.bytebuddy</group>
      <name>byte-buddy</name>
      <version>1.14.4</version>
      <description>Byte Buddy is a Java library for creating Java classes at run time.
        This artifact is a build of Byte Buddy with all ASM dependencies repackaged into its own name space.</description>
      <hashes>
        <hash alg="MD5">21117c3c69db9aa3080d611640a27bb9</hash>
        <hash alg="SHA-1">20498aaec9b00a5cfdb831e7bf68feafa833ce4b</hash>
        <hash alg="SHA-256">7ae2b39ac230be9e3e09ce020406c017ff8ceba06eaf078c62a88c218a0ff2b4</hash>
        <hash alg="SHA-512">70f33b8da6492db126d414779cda791f919a6aa7ef66b34f86938ba5d905b5b3d7cf2b0e9faf1edd362f1b18cec6a921094af076f3c5a3a390ff2bb4c6186772</hash>
        <hash alg="SHA-384">9a9543a284b412365b1547e2b284c12a758f67a9f41a11c3cd64db225594391d47f95c14675a0e3696ce5182d80c1949</hash>
        <hash alg="SHA3-384">1a288d8032cc36c888e62ce034aa3c40e7c8df70bf10d76f6a3ebec3b9c5d88da61ad66a8b9fc74ab2e514bb964f617e</hash>
        <hash alg="SHA3-256">b519cf5ef8fab6c011fe8ad68ed1bf32e993ad5f13de84cc79b91a9f885b55a5</hash>
        <hash alg="SHA3-512">b68a097a4914411ca6e631ed0f84bc73c65ff5a53b2e13fe9662f107b64d239fa0d218151712252a7a39cfcabc67bc9e084704b9cdd6103633a1d2ceb566d84e</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/net.bytebuddy/byte-buddy@1.14.4?type=jar</purl>
      <externalReferences><reference type="website"><url>https://bytebuddy.net/byte-buddy</url></reference><reference type="distribution"><url>https://s01.oss.sonatype.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://github.com/raphw/byte-buddy/issues</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.hadoop/hadoop-minikdc@3.2.4?type=jar">
      <publisher>Apache Software Foundation</publisher>
      <group>org.apache.hadoop</group>
      <name>hadoop-minikdc</name>
      <version>3.2.4</version>
      <description>Apache Hadoop MiniKDC</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">9e2419e01d42e4e417a53a029123f6fc</hash>
        <hash alg="SHA-1">89666b8d70bb3a70aee0a6b10b60e05a0f5d30f1</hash>
        <hash alg="SHA-256">71b94b9da0bb4abab62123fdaecb6c0810a7db2a33fd581d57bb6cf1d13905dd</hash>
        <hash alg="SHA-512">5eac88c2ef5c9768b6eed2f48dd05b2932c835908cec43ecc2c7b0548251c1fe2711aa53c5fadb70166c0400a54b9406051bc2c9fa55c54757044717ccfadf5e</hash>
        <hash alg="SHA-384">e052a1c15eb04fd4af23db362f2d24c99218935c9e9086f3a080e6921df3a51874041f11313a26bad1f3cfc92754b7be</hash>
        <hash alg="SHA3-384">a61acf8fa52083ffafc42b71a2e5ccf17ff38371fc507c1e1c58b39293489fba8c31261140a88b180f84e36092853984</hash>
        <hash alg="SHA3-256">81b2f9dd09250ac13f65ebfd0b66e52143d71ed1fef913a47bbbcc0104b54ec0</hash>
        <hash alg="SHA3-512">b114c895d0631d28e6a37649ec651471b08c027500928519786af8b71ca23cb93f0fbd4de433b516314c357e57db2edfd0f9def568724c743d9e00d517188ee9</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.hadoop/hadoop-minikdc@3.2.4?type=jar</purl>
      <externalReferences><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.kerby/kerb-simplekdc@1.0.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.kerby</group>
      <name>kerb-simplekdc</name>
      <version>1.0.1</version>
      <description>Kerb Simple Kdc</description>
      <hashes>
        <hash alg="MD5">16517ceeb9c76a7499d8ae5b98607c8a</hash>
        <hash alg="SHA-1">1e39adf7c3f5e87695789994b694d24c1dda5752</hash>
        <hash alg="SHA-256">9c9976a603833c001a8a4a4e5b2ea0a6775a84e5656b0eca1fe4eb4d068ceda7</hash>
        <hash alg="SHA-512">46a284944d9740718a068b8e30b1c37c56ea656c7a8af8dba553e193e070c8ca4dd58339d5f5b172185edb3e5581fcdfc3ee7402cfd1ccdd5a671fac0274ef42</hash>
        <hash alg="SHA-384">5815e709f59a329b8a9fc24c9e6e3630a7cdc84c4778a1d52e08512121d190915e5dfc329180ded1c29701a8c9f2ccef</hash>
        <hash alg="SHA3-384">1b745244fe51a11a6eeb1fbed6ce51e9a73d7927e68b546d20d7756aecf7eee2d5f2a0edf86888742ace35ee38e026fa</hash>
        <hash alg="SHA3-256">376c1d6b3159ebf3fefc26675f72532ef7fd9b0f8d35c40ad7dce366329d429e</hash>
        <hash alg="SHA3-512">a71d870032e09114dfc1b644c10ecff8263d56361546fb8d50cd2d6bdc71c57893b5dac02b5552c06a1c57de8a4bcb8eaca9867b17e67242d4c3cf3e9b925387</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.kerby/kerb-simplekdc@1.0.1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://directory.apache.org/kerby/kerby-kerb/kerb-simplekdc</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/directory-kerby/kerby-kerb/kerb-simplekdc</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.kerby/kerb-client@1.0.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.kerby</group>
      <name>kerb-client</name>
      <version>1.0.1</version>
      <description>Kerby-kerb Client</description>
      <hashes>
        <hash alg="MD5">bf15f4b482bd784fa8b58a3f509a4d44</hash>
        <hash alg="SHA-1">a82d2503e718d17628fc9b4db411b001573f61b7</hash>
        <hash alg="SHA-256">020fa95a809b96358ab95d43666471838372659af1cbc3f24ef73c29374e9af0</hash>
        <hash alg="SHA-512">6286939bdf4e79f2602c4e466fb58e7faf36a16ec16e7abfa035155f67532371fd6743f0e2200cc37fd44efa32830cd36246ace912aa3960cd7832d367131a53</hash>
        <hash alg="SHA-384">dca413577181fa513f534ef6dc232010a3f7430262981e27ad03369d88cba55fa01a58db072598aae2ae704be911ca3b</hash>
        <hash alg="SHA3-384">06a2cb378078749f67d85b40a97908dc7e2b16e610c45c79881aa5c114d84bc3c467683b7b63c1f00840ba8411dc5509</hash>
        <hash alg="SHA3-256">cf7a918a08eed0506ee50cd03b80fe78780ecf6ef305e0081ca1dfa264fecf10</hash>
        <hash alg="SHA3-512">a0363161e892562bc782f62ee5cf109118fc362814c4493400cdcb264c22d1a238c0a826746ea7312ee15aabcd229ff0e9027c7aa42673b757464ddd8a457c91</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.kerby/kerb-client@1.0.1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://directory.apache.org/kerby/kerby-kerb/kerb-client</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/directory-kerby/kerby-kerb/kerb-client</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.kerby/kerby-config@1.0.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.kerby</group>
      <name>kerby-config</name>
      <version>1.0.1</version>
      <description>Kerby config library</description>
      <hashes>
        <hash alg="MD5">f70f90ed440cee40f4f59f9c75cd6b96</hash>
        <hash alg="SHA-1">a4c3885fa656a92508315aca9b4632197a454b18</hash>
        <hash alg="SHA-256">244520e9bd61e8cd40a475fe615fbea45ca042fc9d50780df30bc7146f77b8c9</hash>
        <hash alg="SHA-512">27bbf17b8fc1bf5b56e8463f1a2a23846296074a6fb963ef029eac1b6d632ad48065e583bb925b4ae744c86ba11dc83f433224c7e785fcb56d324da12d8ab0bd</hash>
        <hash alg="SHA-384">67cc4e0494f7f580adcc7a8d8e247ec0d6c2c678fdad9f9bdd64955a12517af05146f05310fddad7a77d5a06453a2482</hash>
        <hash alg="SHA3-384">eb05416de4059ad2c577afa807872ad4cacffd61d6379c8b0c873b5f2952df6ceadbc0229a53a4c3a4094863aa15c616</hash>
        <hash alg="SHA3-256">a91b595364611f8bda0f1d34b44fbeb955d70c11bba788d731681c323e8310ab</hash>
        <hash alg="SHA3-512">616ecbea3b4aba2369ab2517ed86af2b89cc437598cdc6f03f56261e497f4db6e8ea2e5758c15708028adfd899f568c00974ecb5de8be8707ed1e844440ec633</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.kerby/kerby-config@1.0.1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://directory.apache.org/kerby/kerby-common/kerby-config</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/directory-kerby/kerby-common/kerby-config</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.kerby/kerb-core@1.0.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.kerby</group>
      <name>kerb-core</name>
      <version>1.0.1</version>
      <description>Kerby-kerb core facilities</description>
      <hashes>
        <hash alg="MD5">545c60f29fc4d57a1e50e3be72c88fe0</hash>
        <hash alg="SHA-1">82357e97a5c1b505beb0f6c227d9f39b2d7fdde0</hash>
        <hash alg="SHA-256">4db26bc4a106603044d8883f7280abc803b055b36f5c510a3fffc41e5de4c651</hash>
        <hash alg="SHA-512">76d63f27c1446c7e3394b7778f8839f19d86755b6aff2941526276bfa06b89c32c3dca1698b964cdc24a8b217a4ac4125a32f6aa051fce1183c37a3ac323fcd3</hash>
        <hash alg="SHA-384">85c6dc3fe4c582e5fdd3e084be158c67f31e93836ed7167205069f369884b1427fafef519182d0565bf92544aeabe626</hash>
        <hash alg="SHA3-384">87c952c555981cccd0523354d79dc072bd279eb1e276fcd94155f8fc72b982890c64cc7daff0f3d3b23a4abe0039c3aa</hash>
        <hash alg="SHA3-256">9287aea565531a53a6d4321c2a930ca6114277c09be70e01ca5e498edd7c24c9</hash>
        <hash alg="SHA3-512">7a53261c96600b7946fa3fc29f65566738cd4153b6fbe3c7551fef460d167c976174e3e2f8d2d4c6dd7be668804b84d09a916ec55165edce6a8389faa18e8b00</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.kerby/kerb-core@1.0.1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://directory.apache.org/kerby/kerby-kerb/kerb-core</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/directory-kerby/kerby-kerb/kerb-core</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.kerby/kerby-pkix@1.0.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.kerby</group>
      <name>kerby-pkix</name>
      <version>1.0.1</version>
      <description>Kerby PKIX Project</description>
      <hashes>
        <hash alg="MD5">4f99a872b054dead71460c3ed3bca6ac</hash>
        <hash alg="SHA-1">4c1fd1f78ba7c16cf6fcd663ddad7eed34b4d911</hash>
        <hash alg="SHA-256">0410bc1950b57f4792ea6b86df59a2ee87e4ad69b33a17ded438e6686894346a</hash>
        <hash alg="SHA-512">b54347dc0e3f56cf9a9068dc39c8838368067920291520ba4df59184faf3eee43898d6d0d50cbcfce3111bf2c3bd1a5cb31ef1bc2ac47f1bb1e216ae39444d2f</hash>
        <hash alg="SHA-384">9e66f1d910deb0eaa3dba289811423b23fdf2d362287b3dd3cad8a63737303ded842a2a7d67255900413b15ad82e2937</hash>
        <hash alg="SHA3-384">3a1c35a54c2419610a1ce91542e339f156497621c0b4ebeb2dcf63fb4ff2f5dd7545d88ae4a7de513fe5d6e226293bcc</hash>
        <hash alg="SHA3-256">8be36b331e2c1712ed835bc915edcc880d880951114c323b5d318408ce118b42</hash>
        <hash alg="SHA3-512">3366dbb93faa59ddc9c9dae72a05c8ad1a52a28cbfa7f42ddd6d243a2f6b5e2189d639f7507b26d955e37eeb9ea1feed769694a8b370dca995636995fe86c5ac</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.kerby/kerby-pkix@1.0.1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://directory.apache.org/kerby/kerby-pkix</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/directory-kerby/kerby-pkix</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.kerby/kerby-asn1@1.0.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.kerby</group>
      <name>kerby-asn1</name>
      <version>1.0.1</version>
      <description>Kerby ASN1 Project</description>
      <hashes>
        <hash alg="MD5">95c31186c0ec12b85bde99e286fe2f8c</hash>
        <hash alg="SHA-1">d54a9712c29c4e6d9d9ba483fad3d450be135fff</hash>
        <hash alg="SHA-256">010a3c33e5b652f11cb29a6e66826a24331e526cf58662dccb4d6695fc6ca59d</hash>
        <hash alg="SHA-512">db962f4aa3a8eb21c36badf1f268d1d68c2e95179f64f7d14fdaaa9b912af0edc989a58a79924c44a56f544b0b68df6de6d6e3bb4f8aa53aa37afc2767cb0684</hash>
        <hash alg="SHA-384">31997848a8dbae5fa350bcf6804603e4c24d3377d0d7ea2f8b07b250fc0cce9d8f7c7f5b7e08831b947e7e4a387c3d7a</hash>
        <hash alg="SHA3-384">65f9d92144d0995d68ab856c3098eeddaa9ee7eea7e753733f6ffa35a206795d6210e04900134e271be70016b2d92af0</hash>
        <hash alg="SHA3-256">46e0f7875638adf82fddcc92ec825c6bf252b11d4a2fcfe580ebed38e2f113fc</hash>
        <hash alg="SHA3-512">c81a17a79b83db92177df9fd2124acec97b8d838f3d146146ef1612d8797d2a4ee44a2b4284d8fa619d64799e064259c2828b37f1b20afb4282f2e475a8a4a4c</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.kerby/kerby-asn1@1.0.1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://directory.apache.org/kerby/kerby-common/kerby-asn1</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/directory-kerby/kerby-common/kerby-asn1</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.kerby/kerby-util@1.0.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.kerby</group>
      <name>kerby-util</name>
      <version>1.0.1</version>
      <description>Kerby common util, without any 3rd party dependency</description>
      <hashes>
        <hash alg="MD5">21974b90e4e4d096b526268712dfd4cb</hash>
        <hash alg="SHA-1">389b730dc4e454f70d72ec19ddac2528047f157e</hash>
        <hash alg="SHA-256">db7e2f329e160aaac305268ccb7287c16cf5542cffdd786a8592212df7c315aa</hash>
        <hash alg="SHA-512">30de762e56e57f3b3d54c71ce80046fbbeb67795b8d5cdc493ad239271f2cddc1a9c485d6b49d1b8b970af37bd45fc424adc85684540127a1b4d7da08f8a82b8</hash>
        <hash alg="SHA-384">95c1891ff1e817767106ac887357d20f37de0e905a4fd3aee8e726d38b842f95ed30988ab905dfcf194d727621c10eec</hash>
        <hash alg="SHA3-384">eb02124b464073942eb37e2661599c5f814ad0652f13395b39ef9d552f4ebd068f686e1cc617f02f4a0fdf4904e47a3a</hash>
        <hash alg="SHA3-256">83ecfb600dd3d0923f0229c2fc18a2deef12a5550ff961fc8bf149fc54f10524</hash>
        <hash alg="SHA3-512">7103c01f884bcbfb23f5c794007ad6f3b7f90e8a578e6545b178d6f787ece30ae98f605b5e5de6be78b5ccd3e9d421f1cfcc9b32a9242230a34a05425973bc11</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.kerby/kerby-util@1.0.1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://directory.apache.org/kerby/kerby-common/kerby-util</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/directory-kerby/kerby-common/kerby-util</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.kerby/kerb-common@1.0.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.kerby</group>
      <name>kerb-common</name>
      <version>1.0.1</version>
      <description>Kerby-kerb Common facilities for both client and server</description>
      <hashes>
        <hash alg="MD5">678e68224b54168f3106b5644ef6f45f</hash>
        <hash alg="SHA-1">e358016010b6355630e398db20d83925462fa4cd</hash>
        <hash alg="SHA-256">f62bb275781f8092bb6252e4ed201c9f5e4ab7a3d49b650ab58c87862b0bb2de</hash>
        <hash alg="SHA-512">e1a91d486633bb24c2f7021c21277cb5656aeb7b961fbbec733fe9e6d6c85aa915798b0d987f9efb2e633a0ff9d7bb772502b7918ef6c8304f0c20ef84873b5b</hash>
        <hash alg="SHA-384">6729901924d609d9b650a264aaee7ce6605719b01406fdc8943e13f9918c65881ce7bc7379a6b571903ccee9e6899f45</hash>
        <hash alg="SHA3-384">0df43c18fcfbf4ed5f52b848e891a287198e881e1debb3c6188aaf1d13466ba174a97cfa05de636d94527d618277df37</hash>
        <hash alg="SHA3-256">adb982ebfa46ea701f6dabebeae877028c8869c9874e7ae3e3b01a033a2fac39</hash>
        <hash alg="SHA3-512">1920d724f6aa018ce8901c24164ea1cd917c995299d9f1c0f15ee1700a973d892e02ee691097c28a7166bee17e51ad86e151becf227e36c06cf57790dc08b04a</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.kerby/kerb-common@1.0.1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://directory.apache.org/kerby/kerby-kerb/kerb-common</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/directory-kerby/kerby-kerb/kerb-common</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.kerby/kerb-crypto@1.0.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.kerby</group>
      <name>kerb-crypto</name>
      <version>1.0.1</version>
      <description>Kerby-kerb Crypto facility</description>
      <hashes>
        <hash alg="MD5">4a201fca38ffe52565f5816d7c708ccd</hash>
        <hash alg="SHA-1">66eab4bbf91fa01ed4f72ce771db28c59d35a843</hash>
        <hash alg="SHA-256">af94527564908b5a8ccfdfa8e67dd61c09e062459a0110d85115c42fc8f82b41</hash>
        <hash alg="SHA-512">e5d9dff3547fa2634b1704dcb2e294ef0a71f0b8f79f2e5e4e1c2a78f2f06d8e8c0aac2897c0751b972bc3c8c588512ed44fe145b7410e492f8ea2511bec9b31</hash>
        <hash alg="SHA-384">87e015986ad0c3ef473dfb9ab1e2ed2f21538741edcfe0459cfac22885610819fed9d34d9f4167cb96332d093f945635</hash>
        <hash alg="SHA3-384">be8f083717ba3c54b9a203411682034b00d38fd07280cbdf45e658a86da4a191c0c72dc30c2d215558c52166493b79d8</hash>
        <hash alg="SHA3-256">abedfca7869934feaa25910bb94a2b40002b191e1f84b4831eee41de1d2d8b22</hash>
        <hash alg="SHA3-512">929a330d44642157c0f52ebe82608280f28017e2ad7d80da9dfb8f8a67b6deddc50771228148936038e6a97ea7b4558d81cc0975c0ac092b82ea9cbdef95fa50</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.kerby/kerb-crypto@1.0.1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://directory.apache.org/kerby/kerby-kerb/kerb-crypto</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/directory-kerby/kerby-kerb/kerb-crypto</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.kerby/kerb-util@1.0.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.kerby</group>
      <name>kerb-util</name>
      <version>1.0.1</version>
      <description>Kerby-kerb Utilities</description>
      <hashes>
        <hash alg="MD5">424542890d4dc9f61b1754a12a1c7758</hash>
        <hash alg="SHA-1">93d37f677addd2450b199e8da8fcac243ceb8a88</hash>
        <hash alg="SHA-256">9cb1a2715a35cbabc9e8f1be3287bb086100763847e2f17577b72a025f8adaab</hash>
        <hash alg="SHA-512">dab63ef1be0a122b3bd8a1986741a64ebf7361dc01a1a3ef23764dfc89fce85a15c2cfe43e3502f37093d0e866011980378c09d5efb45d9754c4cd4e5b686ac3</hash>
        <hash alg="SHA-384">dbfe62c73760d41565ec429e3de8a87cb71a35df2bbd28d1007489cef60106942d8893c8c05bf20435e2b09f11bcdb75</hash>
        <hash alg="SHA3-384">1a3d6eeacd28579ab6b66a381c260dccbc447fb8a36c4d1608d070db9021aa242eac3c1cb76f19ffc100a9357d37305b</hash>
        <hash alg="SHA3-256">e980a457ddce54bf0de49ed57206ebf6df1fdce24770decb19674764459320ee</hash>
        <hash alg="SHA3-512">223365170ac6d73d09675225dfd717d96bfecb4fbdcfd60e13a919fab47ead017200a3970dc391c70b1ddd621b055b3a96c86dc6a68f61a05cea2b0d3743a8e1</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.kerby/kerb-util@1.0.1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://directory.apache.org/kerby/kerby-kerb/kerb-util</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/directory-kerby/kerby-kerb/kerb-util</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.kerby/token-provider@1.0.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.kerby</group>
      <name>token-provider</name>
      <version>1.0.1</version>
      <description>Token provider project</description>
      <hashes>
        <hash alg="MD5">c9ebfeba17a28a69f33acbb5b6e831c5</hash>
        <hash alg="SHA-1">e6feb6b7c06600924e8b6bda3263c870cfb0a447</hash>
        <hash alg="SHA-256">022c92d7438b60789bc212f53f1f33ced2656ba8bf073a1f587df51e083e368a</hash>
        <hash alg="SHA-512">90c882d018cbaa389c6cd971c7dfa052c584337151501465366ae61f10107bd3d4c7471b1168177b9458c78c33791757398e6e25d3c93bbc352377958bcd4511</hash>
        <hash alg="SHA-384">37662a93ecd4ca9b6ade6842a6533f2cf3386eb1c67e22f7080f9fb6f486649eedb11ca084172c19bc2fbd5e062014a5</hash>
        <hash alg="SHA3-384">3efdc52a41c81c0737c3096c6a52eb6afb8b5f87b0101e239f86c11b380ca5cd311bac9a0bccbcf0a52831b6323e0410</hash>
        <hash alg="SHA3-256">2e2dc46673177e6872ad3fb76dbe00393dc1d53a0bdd51633303758a225b3f26</hash>
        <hash alg="SHA3-512">f5a1343299f72034e4ca89f0657fddda7ec216a8901960dd82ace01817183ff2ae129dafbbe8889550638a2ce0676c43ad393320ed0db74d109a6f20cb1f47e3</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.kerby/token-provider@1.0.1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://directory.apache.org/kerby/kerby-provider/token-provider</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/directory-kerby/kerby-provider/token-provider</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.nimbusds/nimbus-jose-jwt@3.10?type=jar">
      <publisher>Connect2id Ltd.</publisher>
      <group>com.nimbusds</group>
      <name>nimbus-jose-jwt</name>
      <version>3.10</version>
      <description>Java library for Javascript Object Signing and Encryption (JOSE) and
        JSON Web Tokens (JWT)</description>
      <hashes>
        <hash alg="MD5">f1fe6c1a874533ffd7238007019990df</hash>
        <hash alg="SHA-1">4c52cc9191abde51bee465ce3acefcee8803a17f</hash>
        <hash alg="SHA-256">00d42506fd80569892ffacebe9657fd144476cc1ddfdc479bd408418188debae</hash>
        <hash alg="SHA-512">53ba3fa586957990236ee2229756cdd118be394bb4cc1529460158321c9cbdd76a7a72435242812f2db57445e93557cad1800018adb3a8ca15eae8f5f9ea5b17</hash>
        <hash alg="SHA-384">ddc887b613596173a9c0ba3cb09e1ccda16f7dcb7fae144e25f603d409325f84422e1ad44a101d389429478a1719572b</hash>
        <hash alg="SHA3-384">a37d4481bfc48e01e8362035ef87733652c64ea9d7121126b6dd58641c2f06372028c7d7a226a7ea177b84cb54c81b41</hash>
        <hash alg="SHA3-256">c5c8a6ef9e74b44f38d279ef7e08e22edaf5ada319417aecd1dbe882fa770043</hash>
        <hash alg="SHA3-512">ee8ed3a25a4461adbc8a1b32289e62ca7ca728a76e4bcac20d216b48d46c15f5cbb067d449d623c486940a0f4d5f84f0605f38ca5a23eacc4b31d9a9f11cd9ad</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.nimbusds/nimbus-jose-jwt@3.10?type=jar</purl>
      <externalReferences><reference type="website"><url>https://bitbucket.org/connect2id/nimbus-jose-jwt</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://bitbucket.org/connect2id/nimbus-jose-jwt</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/net.jcip/jcip-annotations@1.0?type=jar">
      <group>net.jcip</group>
      <name>jcip-annotations</name>
      <version>1.0</version>
      <hashes>
        <hash alg="MD5">9d5272954896c5a5d234f66b7372b17a</hash>
        <hash alg="SHA-1">afba4942caaeaf46aab0b976afd57cc7c181467e</hash>
        <hash alg="SHA-256">be5805392060c71474bf6c9a67a099471274d30b83eef84bfc4e0889a4f1dcc0</hash>
        <hash alg="SHA-512">cb312b3f571d91ef183c119d878f50464ffd97f853b7311cba386463f295e8b7b3a5a89ed4269a045cacd5aa7cb4c803d4882854a0fddefa9bbc28c72aa6c786</hash>
        <hash alg="SHA-384">20d12f4a68736b8df736b1de233baff5d8ac5d71b92a1ca10dc1eb61293ef88bd3cb434ab71e9027a6d303849e098f28</hash>
        <hash alg="SHA3-384">c8f2559f90cec25fae5d438059f6100294091315524e253cca0b1586497e4162b5c324ae25f5c4c0a91186092decf7cd</hash>
        <hash alg="SHA3-256">35970ea56e67fde943436fa5efd9f49e89c85dc863fe9ff868965d51e9be44c9</hash>
        <hash alg="SHA3-512">5e970df829d8f13436fe8a7b64bb0cbe4733e69789132ba60782a76d9377da3f5b044e9f47d731d8c5692548845e4d27bd1f8dedecf62357065324ce7f93c3a8</hash>
      </hashes>
      <licenses/>
      <purl>pkg:maven/net.jcip/jcip-annotations@1.0?type=jar</purl>
      <externalReferences><reference type="website"><url>http://jcip.net/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/net.minidev/json-smart@1.3.1?type=jar">
      <publisher>Chemouni Uriel</publisher>
      <group>net.minidev</group>
      <name>json-smart</name>
      <version>1.3.1</version>
      <description>JSON (JavaScript Object Notation) is a lightweight data-interchange format.
    It is easy for humans to read and write. It is easy for machines to parse and generate.
    It is based on a subset of the JavaScript Programming Language, Standard ECMA-262 3rd Edition
    - December 1999. JSON is a text format that is completely language independent but uses
    conventions that are familiar to programmers of the C-family of languages, including C, C++, C#,
    Java, JavaScript, Perl, Python, and many others.
    These properties make JSON an ideal data-interchange language.</description>
      <hashes>
        <hash alg="MD5">b4f09b247c03cc2d091502d5b1db1f7f</hash>
        <hash alg="SHA-1">69b3835e96d282ec85fc2e1517b8164c45ed639e</hash>
        <hash alg="SHA-256">ac3689112788e042088755e63ecd1f689adfeb04d7fb1cfd244513f94f82522c</hash>
        <hash alg="SHA-512">92fd0d0d276a1cd619857fb79aec20606bbc19405b5a7bfb6e4b968f877573184bec04bb4b28f1ffae7a3eaaf072f944338bbc1a795d62853b9eb0899f94edc6</hash>
        <hash alg="SHA-384">2f495d95c9b97a1e0cfef7ab90a9f29bb69f22232c1083250e414e0785265227febcee2fcae19ee1ee03ef5dc5fea634</hash>
        <hash alg="SHA3-384">25f3e2698dfdbb9f9727ab45e827b3a8b9cbbb1742c0af377335a39b25b6b89c45593d984ae81653b07952867263c32e</hash>
        <hash alg="SHA3-256">f2097c31a5796c4da739498aac1f23d4e7a2beed81a0478996687f3698f6887d</hash>
        <hash alg="SHA3-512">460154ecef1e86bbc5961236878e59a478e50aef42a81501fca644a1ca1bd6436d630c4e86573cc6d40f44146cf4378aacd2d209edca2be0af07fb3c500616f5</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/net.minidev/json-smart@1.3.1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://json-smart/</url></reference><reference type="distribution"><url>http://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/netplex/json-smart</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.bouncycastle/bcprov-jdk15on@1.52?type=jar">
      <group>org.bouncycastle</group>
      <name>bcprov-jdk15on</name>
      <version>1.52</version>
      <description>The Bouncy Castle Crypto package is a Java implementation of cryptographic algorithms. This jar contains JCE provider and lightweight API for the Bouncy Castle Cryptography APIs for JDK 1.5 to JDK 1.8.</description>
      <hashes>
        <hash alg="MD5">873ac611cb0d7160c0a3d30eee964454</hash>
        <hash alg="SHA-1">88a941faf9819d371e3174b5ed56a3f3f7d73269</hash>
        <hash alg="SHA-256">0dc4d181e4d347893c2ddbd2e6cd5d7287fc651c03648fa64b2341c7366b1773</hash>
        <hash alg="SHA-512">0869118e0cd93c3a36265334663ed8e9f892dd212dcddc63664f34e1fed822b5b2096ff7bb8eea3f98d4ec4d026536c794485df62715f13e8de8d892347dcc73</hash>
        <hash alg="SHA-384">691469807f7acd91f5e06139bbdc5aaa88496eafc124425fd2f86bfdeeeb1242b5fa2acc0274e0089d3ca3662613dc35</hash>
        <hash alg="SHA3-384">90e627e11073ff5da1782657f12fccc5aa1c28a30ec6991d18e9525cac69b71ef6a8df3c5ccf1fbf939d77868c9ca78c</hash>
        <hash alg="SHA3-256">28553e2419eef6e59368cf5ee1942a15e809f0ba76c8b9625e56e75153d3c246</hash>
        <hash alg="SHA3-512">f00bbd8adaf704ac9877451a4251ef763753619860591de7e487d7cfa41ad8dfb7699b5c3a3faea4e0fd6260dcb1c57a02c066fd0a255054dad3e494e068aaba</hash>
      </hashes>
      <licenses>
        <license>
          <name>Bouncy Castle Licence</name>
          <url>http://www.bouncycastle.org/licence.html</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.bouncycastle/bcprov-jdk15on@1.52?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.bouncycastle.org/java.html</url></reference><reference type="issue-tracker"><url>http://www.bouncycastle.org/jira/secure/Dashboard.jspa</url></reference><reference type="vcs"><url>https://github.com/bcgit/bc-java</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.kerby/kerb-admin@1.0.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.kerby</group>
      <name>kerb-admin</name>
      <version>1.0.1</version>
      <description>Kerby-kerb Admin facilities</description>
      <hashes>
        <hash alg="MD5">a673628234b00564b9d3254990348a85</hash>
        <hash alg="SHA-1">7868b29620b92aa1040fe20d21ba09f2506207aa</hash>
        <hash alg="SHA-256">27b012f556b02bdf4ecd0742a7ecdd725a562e95a194e3413662fe2e781ff889</hash>
        <hash alg="SHA-512">899bad1f5478c2687844190626ae71c8526d9918d2daf66d32594107219f1aac18d883fb95797180c770d4245be02e1e52c1dbf0052dd5bfb534a23b37c68333</hash>
        <hash alg="SHA-384">acfa9138d33cd22f60f662df93f27d4a6816db814e3d1325ab61da6fbfce175bec3241a246a5f89290d5231253962134</hash>
        <hash alg="SHA3-384">a1bad1a78cd122e5fa3a311f316556cf166316888a76fe270432309395cb8087ca11d7c9c05a2513c97af363201b97ee</hash>
        <hash alg="SHA3-256">8bc8762d39257cab3df4e5589397bcf058b95ad8c3808d5dc3558b8f713b4b03</hash>
        <hash alg="SHA3-512">02b652658f36e62413fb28c93191983f022b5851699f6408ec896ec2a66512a0a150fab724f88e60c9d7a7f70ec61c7c03df7be6e57e71b9f8fdf0c3c4919a1f</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.kerby/kerb-admin@1.0.1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://directory.apache.org/kerby/kerby-kerb/kerb-admin</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/directory-kerby/kerby-kerb/kerb-admin</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.kerby/kerb-server@1.0.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.kerby</group>
      <name>kerb-server</name>
      <version>1.0.1</version>
      <description>Kerby-kerb Server</description>
      <hashes>
        <hash alg="MD5">0c067e61bd55c894a2ed67d25c75b323</hash>
        <hash alg="SHA-1">c56ffb4a6541864daf9868895b79c0c33427fd8c</hash>
        <hash alg="SHA-256">dff4eebc6cadaa8bdc1084fc1d4c20fda954aed74913845e79c89572768e463f</hash>
        <hash alg="SHA-512">a3c1feb689f1ca216afee0f79ce4173f3d8d4d1dd7a4c591788d1f7228d582affff3e9340fa8d163d8fbcb8551f8d8768142d3e8ec1bf27475b5ae0aed390130</hash>
        <hash alg="SHA-384">0e38a7b58679f4027faab0b5b32d7b2b993986c4344472eb1de70158793727d108ad289ac8faeaa199107476e8076499</hash>
        <hash alg="SHA3-384">b37a07dd624887918d6da326bc865d5c28caf7201ca5c35e2c4b1d1ac5244f6ded6119e32adcb78c6eda326c8f4e8122</hash>
        <hash alg="SHA3-256">33c23af2999f6d40213bc9bf242180308c74d6f45bad0a97dcbf56d17fe8b9d7</hash>
        <hash alg="SHA3-512">522c138baecc6d68df6afbdc8ef1774c6853fb029e4864e8b9cd4c618103714b37886ddaa88f1a764f3304e625df0b3d759a3a505fd52423f548e824550b585f</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.kerby/kerb-server@1.0.1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://directory.apache.org/kerby/kerby-kerb/kerb-server</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/directory-kerby/kerby-kerb/kerb-server</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.kerby/kerb-identity@1.0.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.kerby</group>
      <name>kerb-identity</name>
      <version>1.0.1</version>
      <description>Kerby-kerb Identity</description>
      <hashes>
        <hash alg="MD5">b25172596ffaa92105bae3d5f54639ff</hash>
        <hash alg="SHA-1">eb91bc9b9ff26bfcca077cf1a888fb09e8ce72be</hash>
        <hash alg="SHA-256">35fd995cc7a0c71f86adaf716dee34f6e4d1e473eff452a74f4430bd196e6424</hash>
        <hash alg="SHA-512">a6d15629c637e7e66772bd5d1430ffe8a435261e50eb534c7a133a063292455ff4d237f09570defbddee6bca04a446e7ce30774ca8f32d540e6a2a19af2b92d3</hash>
        <hash alg="SHA-384">27beb9db175a5f8b114aff2a2bc4112bce7725a81522f8e1ed603d589e513cebc8fbdd932c29282607b5948e4eb6965c</hash>
        <hash alg="SHA3-384">b4604a02d635f27ffd134e92370f0b11328402e0a3132ba6845ba7d1cc178edecd8939fd1c71d7ff71f009c6c8d0692e</hash>
        <hash alg="SHA3-256">442539810b6066b12b3ae45397700eb34198e095ebfe7719a08ad9353ff274dd</hash>
        <hash alg="SHA3-512">d38b57eacbad2123d0667d9b464f34c0d68533e0ea6aefaee296ebee8b5c89b824c7f8e58de95bf77e01d7ff32fbeb566f5a9602906f77adb33cb4420b9b4458</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.kerby/kerb-identity@1.0.1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://directory.apache.org/kerby/kerby-kerb/kerb-identity</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/directory-kerby/kerby-kerb/kerb-identity</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.kerby/kerby-xdr@1.0.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.kerby</group>
      <name>kerby-xdr</name>
      <version>1.0.1</version>
      <description>Kerby XDR Project</description>
      <hashes>
        <hash alg="MD5">052ad9372894a4f0ef0f7792dd7daa9a</hash>
        <hash alg="SHA-1">7d1b5b69a5ea87fb2f62498710d9d788d17beb2b</hash>
        <hash alg="SHA-256">c24e2d9fbaef40a0a61ee36c19e41db5141bfbe7a2669be0227dee86ccca6d6f</hash>
        <hash alg="SHA-512">39cd6ac81c96839c28502ddd46efe32a0a74891ac497a61a7889a4bfef67c70806010402585b557a6617c522bf176cdb6021dc6bec80ad82fbeca3237f7c302d</hash>
        <hash alg="SHA-384">18ea9b65062387f526d7fd3af30c865f8686c2d8978147e6e3dcd11ae3eb609c3838d0e231ef3847062f6e804011616e</hash>
        <hash alg="SHA3-384">b08175b819e4829d99102b99a274bd785741870530041f5b7eec769855c2b4b46002e1cc6ab557a5c9a76dc507dbac63</hash>
        <hash alg="SHA3-256">edac6cf5fc5b0432b7f13ad9f7a511bd84114379bd80d81c9ee94ca2b803eb08</hash>
        <hash alg="SHA3-512">79eaa7c3543ffbf40a013300f5d8629ecd45e64fe9a03efe328223d431968703b492ab6bf4892b0cd2625f0c280894bd1fca7df279bb7d0b33121406887dcc88</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.kerby/kerby-xdr@1.0.1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://directory.apache.org/kerby/kerby-common/kerby-xdr</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/directory-kerby/kerby-common/kerby-xdr</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/junit/junit@4.13.2?type=jar">
      <publisher>JUnit</publisher>
      <group>junit</group>
      <name>junit</name>
      <version>4.13.2</version>
      <description>JUnit is a unit testing framework for Java, created by Erich Gamma and Kent Beck.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">d98a9a02a99a9acd22d7653cbcc1f31f</hash>
        <hash alg="SHA-1">8ac9e16d933b6fb43bc7f576336b8f4d7eb5ba12</hash>
        <hash alg="SHA-256">8e495b634469d64fb8acfa3495a065cbacc8a0fff55ce1e31007be4c16dc57d3</hash>
        <hash alg="SHA-512">a31b9950f929a7e5a600d89787ef40e42a8a8e2392e210d0c0f45b3572937670a18a524f1815508cd1152cd1eaa7275cb7430ba45c053be365c83c231bccd3f0</hash>
        <hash alg="SHA-384">9f85c56a77c699eb87630b9e8224068a34c296bcd9aadb52248dd4665036f5bf1048fe75e5cb590b59e7855ca716acae</hash>
        <hash alg="SHA3-384">590cfd9396424583879ca8ad732870406bab18325ac72fb2bbe188b9611278d6341700badf7cfc32525b8ff42900c905</hash>
        <hash alg="SHA3-256">a06b3fd2fd1d9f4306b58125484e3605a395afe5ffe2c801e43ae462f366a430</hash>
        <hash alg="SHA3-512">a6d25ce3c14f9065f06dfd0e68e1dad5c03bd5de0a302c44ca4733d2cb87ec1bc6f0abd36d65aeee8caf328b6881432c4b682fa4b4b1fa931c3c950de5129fb2</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-1.0</id>
          <url>http://www.eclipse.org/legal/epl-v10.html</url>
        </license>
      </licenses>
      <purl>pkg:maven/junit/junit@4.13.2?type=jar</purl>
      <externalReferences><reference type="website"><url>http://junit.org</url></reference><reference type="build-system"><url>https://github.com/junit-team/junit4/actions</url></reference><reference type="distribution"><url>https://github.com/junit-team/junit4/wiki/Download-and-Install</url></reference><reference type="issue-tracker"><url>https://github.com/junit-team/junit4/issues</url></reference><reference type="vcs"><url>https://github.com/junit-team/junit4</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.hamcrest/hamcrest-core@1.3?type=jar">
      <group>org.hamcrest</group>
      <name>hamcrest-core</name>
      <version>1.3</version>
      <description>This is the core API of hamcrest matcher framework to be used by third-party framework providers. This includes the a foundation set of matcher implementations for common operations.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">6393363b47ddcbba82321110c3e07519</hash>
        <hash alg="SHA-1">42a25dc3219429f0e5d060061f71acb49bf010a0</hash>
        <hash alg="SHA-256">66fdef91e9739348df7a096aa384a5685f4e875584cce89386a7a47251c4d8e9</hash>
        <hash alg="SHA-512">e237ae735aac4fa5a7253ec693191f42ef7ddce384c11d29fbf605981c0be077d086757409acad53cb5b9e53d86a07cc428d459ff0f5b00d32a8cbbca390be49</hash>
        <hash alg="SHA-384">4b5297d2a12cc32b824153afc83f1ba9f1869ca288330f0a2f759659d09e4c420eb6ba4a1efbfa0657b625edd41293d5</hash>
        <hash alg="SHA3-384">b14d34985c0a78cf0ba19b5a18bffd403e08adcb2afde228ddef6e16121c7046dbebf58c04d3419311c4496c48aa93be</hash>
        <hash alg="SHA3-256">f679af77deedf69b3c3066f7916583848c6fd32a950f9c0b0e2ef1da121717ba</hash>
        <hash alg="SHA3-512">bca821931e438a1977b7b4356b5f8cebf485634f82159d505c48267c34e6a0f4fde9c2917331365f66dc0e52e2ca3a2db5256863584110c27ecebefc28741f63</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.hamcrest/hamcrest-core@1.3?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/hamcrest/JavaHamcrest/hamcrest-core</url></reference><reference type="vcs"><url>https://github.com/hamcrest/JavaHamcrest/hamcrest-core</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.confluent.flink/flink-streaming-java@1.19.2-cp2?classifier=tests&amp;type=test-jar">
      <group>io.confluent.flink</group>
      <name>flink-streaming-java</name>
      <version>1.19.2-cp2</version>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">a95d389b3178c75ee92563e3e9d8b451</hash>
        <hash alg="SHA-1">60be098d6d0386f8b90298e519a521555a9681dd</hash>
        <hash alg="SHA-256">f6d439090e37978b3466c217a1c5e243a64f629c9a7deb4b25bfdf510e31f417</hash>
        <hash alg="SHA-512">c090ca97cd950751b53e58183fd4846b8edb208b7d487d5c4e4c6550f3faf86b10ec24dc030cd52cb7693635714b56586285dc667e094300f7eacdb030ffd779</hash>
        <hash alg="SHA-384">194d405f3ef767881f3e2c496ff73935cbafdb072c63b3926b969e554bf5953697a752f60e342887ddbffb39743a98a9</hash>
        <hash alg="SHA3-384">5888c4b183f102c35dd82c89d114df4254bf0b79f3b1422e5b7b66945b0f2ba6669a00b7a61d2e0465aaefced57f2a13</hash>
        <hash alg="SHA3-256">ff79d344df91cab4d9a01cd102d929dc1cd00a76f3524d9bcc05704d6c71ca7c</hash>
        <hash alg="SHA3-512">d2754f33bc74a2ecb6d47e54b7b71f1b5caccc22d62d6ee115b0a76f6e64317e4d80d2bc273443973f56dca6210c20c342844a5ee04672db9e3e736cff72754f</hash>
      </hashes>
      <purl>pkg:maven/io.confluent.flink/flink-streaming-java@1.19.2-cp2?classifier=tests&amp;type=test-jar</purl>
    </component>
    <component type="library" bom-ref="pkg:maven/io.confluent.flink/flink-statebackend-rocksdb@1.19.2-cp2?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>io.confluent.flink</group>
      <name>flink-statebackend-rocksdb</name>
      <version>1.19.2-cp2</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">40ac841f11b9fbd3e5ed6bdef40d24b2</hash>
        <hash alg="SHA-1">686a3ab5c92020cb08fbfec0166802fe970cb0fb</hash>
        <hash alg="SHA-256">04ab3799d43810c37cc9c271f9f9382f1ca6cc20e6ef4f77e5ce1b0ff70535a1</hash>
        <hash alg="SHA-512">f86ecfc28946ed0f9214831f64f350685df568a9ba3ea660f502282bc4b1851d3b7b327d85365d709350b5624a62408542a77b9f0e3a4bc3704979af3199d841</hash>
        <hash alg="SHA-384">32ad87a356a91def9a69ed1891871ff4cfea31e8674c8eedef42f8f28c7a3e238750a8eb4046ddeb99300a8b351ea976</hash>
        <hash alg="SHA3-384">338d6e2740229c0cd7f1b03b277ab77d8d559d60a6aa0716715a21ff5553fe8154c6f43c4f11af4557b199091be132de</hash>
        <hash alg="SHA3-256">ea88baa1a0411820a1ea19da7b3c568eb7e3965ce8edbe75423349ca53b1e6db</hash>
        <hash alg="SHA3-512">45e4e748d8c2e542e8298df5537e9a8d56168dadf682bdf034b9e773f6adf80e64d686d865f2ecfdbdb0892beaddc2efbfaad94eeb2bcfa619241e89ab506933</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.confluent.flink/flink-statebackend-rocksdb@1.19.2-cp2?type=jar</purl>
      <externalReferences><reference type="website"><url>https://flink.apache.org/flink-state-backends/flink-statebackend-rocksdb</url></reference><reference type="distribution"><url>s3://cp-flink-staging-654654529379-us-west-2/maven-staging/e376491b71b31739887d29e34e6552860f69668d</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink/flink-state-backends/flink-statebackend-rocksdb</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.ververica/frocksdbjni@6.20.3-ververica-2.0?type=jar">
      <publisher>Facebook</publisher>
      <group>com.ververica</group>
      <name>frocksdbjni</name>
      <version>6.20.3-ververica-2.0</version>
      <description>RocksDB fat jar with modifications specific for Apache Flink that contains .so files for linux32 and linux64 (glibc and musl-libc), jnilib files
        for Mac OSX, and a .dll for Windows x64.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">b312842e5ae7b60da4fa742214600fa6</hash>
        <hash alg="SHA-1">2847dfbbd8debea1bd0303a24408dba9fbe6afe8</hash>
        <hash alg="SHA-256">5e6e5063b75196a17fbeaf656f088a807f83177525d9ecbec7125b9f3630b966</hash>
        <hash alg="SHA-512">5df61a2acb0ab3ddb3cefd8efd12a53e61ab7349b1addfc8ae424eb94611da2b44b58705b43fd9f9a1d6a3092df40c32001dba37eaa58c59d663c1ff4330b8f3</hash>
        <hash alg="SHA-384">06e11032b60444d685d175e19364c6f7dacacc2aa7999d1bf3c89e6bffbb627833e030dcd7978d6d50378d08d9772a81</hash>
        <hash alg="SHA3-384">9363f90b3922947c09be9fb98b3e2fb8f5190b9dbc803ecf1c7816f26ad1d818127edd8761d95bc1bec58879077d6a50</hash>
        <hash alg="SHA3-256">81cd77f6fff3debf62a6f6a7d523e1c26c0c2c05938f6aaca17b555d74f878c8</hash>
        <hash alg="SHA3-512">02f51f2052afca0fcd6b944dfce56fc5542ffa6a0be1db6e7a344b30b97dc59d2a6f312413e04172387b0583f11f621c4610211c0a78766c25ebe3525919c240</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/com.ververica/frocksdbjni@6.20.3-ververica-2.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://rocksdb.org</url></reference><reference type="mailing-list"><url>https://groups.google.com/forum/#!forum/rocksdb</url></reference><reference type="vcs"><url>scm:git:https://github.com/ververica/frocksdb.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.confluent.flink/flink-statebackend-changelog@1.19.2-cp2?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>io.confluent.flink</group>
      <name>flink-statebackend-changelog</name>
      <version>1.19.2-cp2</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">05611362e8721773315e0ca68aaf9339</hash>
        <hash alg="SHA-1">61b3412bce98493a4fa99f19822792076479ac3e</hash>
        <hash alg="SHA-256">bddd7f3750b2d03a8d141deeaa41d0d854d7d1827dae24e9b88e406ed2d68508</hash>
        <hash alg="SHA-512">6843d2272fbf1f5fdd24e4330a30b094d9c2ad3377991ea2234d76fd281c6b920aefc5fbadec72b567022a52e8e338621021fb7319b528343996f0e6f494b24a</hash>
        <hash alg="SHA-384">ea1670a6b90da2c3798a5626ba3da0b9f8dbc96d1bc44b3057c5fc921473b87db4923ee075f1145999259b47fb458ce9</hash>
        <hash alg="SHA3-384">925075346a48f7c3c34d21998c8aa8e598f6855ab2a5b344cf504ebc71a054316f71832c8a65352fb7bbbf69327e05bb</hash>
        <hash alg="SHA3-256">ed23c6dc1a82b8b55fa9d50d2940164a12beba4510afce8d8a702fa61071ec0a</hash>
        <hash alg="SHA3-512">9a45b62c33c067d7f230366414e83466919b5ead566d6e081262a5e97d6cc23531a6ef2f8d6a6860d7ee10e15be7d2d8be24002a24b0fa23d3d2271b9a2980f0</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.confluent.flink/flink-statebackend-changelog@1.19.2-cp2?type=jar</purl>
      <externalReferences><reference type="website"><url>https://flink.apache.org/flink-state-backends/flink-statebackend-changelog</url></reference><reference type="distribution"><url>s3://cp-flink-staging-654654529379-us-west-2/maven-staging/e376491b71b31739887d29e34e6552860f69668d</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink/flink-state-backends/flink-statebackend-changelog</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.confluent.flink/flink-statebackend-common@1.19.2-cp2?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>io.confluent.flink</group>
      <name>flink-statebackend-common</name>
      <version>1.19.2-cp2</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <hashes>
        <hash alg="MD5">52eae05c2401695a10d51ee73056061b</hash>
        <hash alg="SHA-1">42d36fb3e8e9954f5f3be335b927ecfac4826638</hash>
        <hash alg="SHA-256">c86cc8474b33bc59c2c0295bac2c1fd1cb4b74c3ac7f1db1c25ff57c07592a1c</hash>
        <hash alg="SHA-512">143e9d68d2c45186b0fe518a9176c565cde980b6056187b6d914407b9ddc33fa73d8a7856ef2585192d3c63981a2a1d22d648dbca31f09e27f606658519a65af</hash>
        <hash alg="SHA-384">53722bf74b7c7c050e1a27f4b7efd1e361ac04df78aef2da67763a8e9040ed2e5121d5f275d2f7d35b5d32017ece2bc9</hash>
        <hash alg="SHA3-384">f5ef1626215dbbf6cbfd38ddaa41cf0ce3caba3630240fa5d221f828a78ff91e2bebd7379fdec0da137077a6e340e6c9</hash>
        <hash alg="SHA3-256">eb786fc84aaef623a9d4830c81b41e0ac51be07f99dd07749334cd78b2f464f0</hash>
        <hash alg="SHA3-512">f092f7fd659a07e7093023d7085e0106df27e825582675eaeec83939a5bb9f7e6160f60bf0549af26c51e4ca797c68d5938ad355c1f03f9525f43d84726831f2</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.confluent.flink/flink-statebackend-common@1.19.2-cp2?type=jar</purl>
      <externalReferences><reference type="website"><url>https://flink.apache.org/flink-state-backends/flink-statebackend-common</url></reference><reference type="distribution"><url>s3://cp-flink-staging-654654529379-us-west-2/maven-staging/e376491b71b31739887d29e34e6552860f69668d</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink/flink-state-backends/flink-statebackend-common</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.confluent.flink/flink-dstl-dfs@1.19.2-cp2?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>io.confluent.flink</group>
      <name>flink-dstl-dfs</name>
      <version>1.19.2-cp2</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">c5b56c6cf1915ecb27f253d82a291039</hash>
        <hash alg="SHA-1">cf2a99c4eb18ceb3faa38dbe5b0fa2b43fa76f62</hash>
        <hash alg="SHA-256">c0f85c9e1c1bd33e08c6f46b73ecddbf8ebfc0c516f7d55254ed8e9094000dc0</hash>
        <hash alg="SHA-512">b73202a0f25d35688a039515d40bbd541b083ae0f1e2e95c7e7bf5e94449a773f21a585e30a3bbb47a6a77da88c2b58ce833f079c3ff7637f6f0b1b892a1fd0f</hash>
        <hash alg="SHA-384">4cd1c14a8b420ed2ca51b9e5215f625fb5beb85dbd71f3b05c18842882894a9c513bfa2ec09449c3b7502c8f8c1535e2</hash>
        <hash alg="SHA3-384">a5cbda7554b4ae4dbcd002616f01136016737a10851052fc13adcdcfdc629896830968f1eb1a79599bba511243525b22</hash>
        <hash alg="SHA3-256">e9d7eee95c761360b608fa34a3593a3d31b34d0b0fdd770b7be15cd464ef23c6</hash>
        <hash alg="SHA3-512">3a35e6ce464aa53060dae7a8626f9d4b405ceb6b12e79acb7aa60962e281ff22aa47c7bf964f0512bcf5a18557f01ff587e7f07d8f978790c1257a969f694263</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.confluent.flink/flink-dstl-dfs@1.19.2-cp2?type=jar</purl>
      <externalReferences><reference type="website"><url>https://flink.apache.org/flink-dstl/flink-dstl-dfs</url></reference><reference type="distribution"><url>s3://cp-flink-staging-654654529379-us-west-2/maven-staging/e376491b71b31739887d29e34e6552860f69668d</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink/flink-dstl/flink-dstl-dfs</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.curator/curator-test@5.4.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.curator</group>
      <name>curator-test</name>
      <version>5.4.0</version>
      <description>Unit testing utilities.</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">1039b67e2dafdfc64f58aedc43798039</hash>
        <hash alg="SHA-1">bdf76dcd0981ee3fed5df7db99778158c77b9e0c</hash>
        <hash alg="SHA-256">470a24f22eb392a945ca645d08ff6f38596ef94964cb0201ca40b765e00dddcd</hash>
        <hash alg="SHA-512">02f4543569ec76fce094e8491fcdacb9e421d50e1cd8e747b6dc6c9d7b562cdc9c3c41f46bfa24f60169ffa36c62f7a96e2e73a34d5c6853fe1eb5c9d43a359a</hash>
        <hash alg="SHA-384">ce2fc507a4a06b28f5e694a69d89a4b2cf64b9d5f8ab9ad3725106f409979a4186b0c406cc47f03ef06525e68ecb4735</hash>
        <hash alg="SHA3-384">0e10c50e501c8d87aac2c465a62b0a84a259e7d2cb5bdff87afc0beb5ff5627c6a869576d2eab7985a5dccdbc66f1f94</hash>
        <hash alg="SHA3-256">ce05f3790590feda7029644ba97d9a7883d7ea9c224d72a4a47a3683a2543af2</hash>
        <hash alg="SHA3-512">35906334dc9fa317de1604f00c4b95707fbb08a0c50201e2c24bb003597e9edcb6af70ed76c127d2cd9b9825a1d7ef5c5278e0659438580b32a41e725b2b362b</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.curator/curator-test@5.4.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://curator.apache.org/curator-test</url></reference><reference type="build-system"><url>https://builds.apache.org/job/Curator/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/CURATOR</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/curator-user/</url></reference><reference type="vcs"><url>https://github.com/apache/curator.git/curator-test</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.zookeeper/zookeeper@3.7.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.zookeeper</group>
      <name>zookeeper</name>
      <version>3.7.1</version>
      <description>ZooKeeper server</description>
      <hashes>
        <hash alg="MD5">5a983ef4352f2dc062dd764a6d3bb17d</hash>
        <hash alg="SHA-1">b598708e153ff74dd2ebb800419df96df8a01c2d</hash>
        <hash alg="SHA-256">1d119d812782388589725f1ab5b49080a0ea931da0dc93c7c0f1d9ee51a32fe8</hash>
        <hash alg="SHA-512">9e709a8f0a488f892e667dba09934443da431691dcdd331dda512b160f7ffbf8b7361abd287111d6c22c964885255bef257a7776c21bc4a4d05cb0e380f2744c</hash>
        <hash alg="SHA-384">9826f4986bd35167ce2ec6a5ade6c170af9835d1e2829553a35ba4f2de56b20dfb034481f72d93551ac4af0660c402da</hash>
        <hash alg="SHA3-384">312e7e7efe01a4e25becc7d7a0ce4c770272ae5b7ec69335e70e98b9d7108fb5dcda59dd3c95222be13244d514975ec4</hash>
        <hash alg="SHA3-256">4ae196c75e34b44d6fcde8ec87cf80004489e20fbd32384887507088fcab35e0</hash>
        <hash alg="SHA3-512">e6d56da76b433aa1103ad75c9db60ebc3e6c9feb44bb5db99cfd2afb7c3008c01e31ec711d6c10c40ababc96f6d8dca5a40a24fd07a5d0cb88dc380aba80f625</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.zookeeper/zookeeper@3.7.1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://zookeeper.apache.org/zookeeper</url></reference><reference type="build-system"><url>https://ci-hadoop.apache.org/view/ZooKeeper/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/ZOOKEEPER</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/zookeeper-user/</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf/zookeeper.git/zookeeper</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.zookeeper/zookeeper-jute@3.7.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.zookeeper</group>
      <name>zookeeper-jute</name>
      <version>3.7.1</version>
      <description>ZooKeeper jute</description>
      <hashes>
        <hash alg="MD5">2fddc39d1851933f49f2c9dd79d6ec0f</hash>
        <hash alg="SHA-1">569a3fa7bad2127d74219bd2aaaac56a89c21b02</hash>
        <hash alg="SHA-256">ee6e6c0c3cbf2da1eb171272055b915351ecfdf4abdea5cc0371baf0275197d4</hash>
        <hash alg="SHA-512">163c9a75888d28072b964d08ef6650be2f46810a1b0c46ff3f96e48a2ecea994b71f9e5a655b8d4e13b2522e97a26921399ce55207301b6f6a14dc0724fb24b5</hash>
        <hash alg="SHA-384">56931db6c37b820bb97c3263cab82d196a4ad2eedd65ce3ce63864668b21045f9677a74c8d6c8a04093541a2127e6a7a</hash>
        <hash alg="SHA3-384">d9025aaef93bf2c59082a6dc1f4c38f12a81a2514d5b266c871e06927d883dfcc1dd28b601a649b2870565b9f8b2d534</hash>
        <hash alg="SHA3-256">b6417bf23b335b62d5b9b20290c537c051744329b12e73a55eed0085ad605617</hash>
        <hash alg="SHA3-512">a40b8187a6f20043cae0e533709dccf5b581c81ef40272ae049affd814071dcd2cf753f9cf21fa8e8aa087a1c4fdbd19b47b1c306fd59d91e974b106441e2621</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.zookeeper/zookeeper-jute@3.7.1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://zookeeper.apache.org/zookeeper-jute</url></reference><reference type="build-system"><url>https://ci-hadoop.apache.org/view/ZooKeeper/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/ZOOKEEPER</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/zookeeper-user/</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf/zookeeper.git/zookeeper-jute</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.yetus/audience-annotations@0.12.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.yetus</group>
      <name>audience-annotations</name>
      <version>0.12.0</version>
      <description>Annotations for defining API boundaries and tools for managing javadocs</description>
      <hashes>
        <hash alg="MD5">76ba71bbe18c4724d96bec68bbe12ff1</hash>
        <hash alg="SHA-1">e0efa60318229590103e31c69ebdaae56d903644</hash>
        <hash alg="SHA-256">ffb101fc066360ff3c77457c927fd7967fb096a6ee9e046ab7071447d8208efc</hash>
        <hash alg="SHA-512">264a5251272ec55eca1fae5a8fb9336d1eca1ee3bfb586d1ebc382fcfd37077c21cbfa9e198daf4e1eebe9f6fa90487bec2f85bc1c55cf5666cbbfc4d18b1715</hash>
        <hash alg="SHA-384">f936d92b5c3b3c88428fc7452871e4df112935dd25356396d15deb73dd39790f45909a3d14f038e9f585cee79622ad47</hash>
        <hash alg="SHA3-384">67ca97a525d98c3dab9ffda40e11d6c683f6f4208ae4a5b28dbd3e2b8b37187dfdcd1d9b89222dc69e5b84ac212f4428</hash>
        <hash alg="SHA3-256">fd99b55afe40884b5f6cfd9ffbdcd07fa32833443dead288390ca8e737dd3337</hash>
        <hash alg="SHA3-512">4aaece7bdadc2c2d9660b16345218cfc68a2ea344374d0ffbcdcc3722ff6be5f06c92231ae68ec3884f1aa9b99956cb5135b4060c5457f463251f3767003ad20</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.yetus/audience-annotations@0.12.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://yetus.apache.org/audience-annotations</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/YETUS</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/yetus-dev/</url></reference><reference type="vcs"><url>https://github.com/apache/yetus.git/audience-annotations</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.dropwizard.metrics/metrics-core@3.2.5?type=jar">
      <group>io.dropwizard.metrics</group>
      <name>metrics-core</name>
      <version>3.2.5</version>
      <description>Metrics is a Java library which gives you unparalleled insight into what your code does in
        production. Metrics provides a powerful toolkit of ways to measure the behavior of critical
        components in your production environment.</description>
      <hashes>
        <hash alg="MD5">1f580bf5834f0f4db1a93c784bda9953</hash>
        <hash alg="SHA-1">ea2316646e9787c5b2d14ca97f4ef7ad5c6b94e9</hash>
        <hash alg="SHA-256">3844be6a6a4ef065abe336c6eadf7d5e880ca13759a0c13a01d0d08ea4d05a8c</hash>
        <hash alg="SHA-512">3fbbe2ea938d4d1ac35bc62c067bc382eb438b9417193e65e461c9932336f119eaecdfa2d7db0a14c4c70aebcc11190ecf0506f29505bd1c1642d076bdf268d2</hash>
        <hash alg="SHA-384">0fd3be839d72c4f573407cf4c202d6a3fcffdf6c869183e249ceeaed50a3b4db8c54112be0b94abfebacdeeee8458b8e</hash>
        <hash alg="SHA3-384">6b7299283d2c47126054d2bb21becfcd504a1ee9fee493ae232635ec6d90c04d4f502854a3c530f8f44e4b29638db18b</hash>
        <hash alg="SHA3-256">d06d4214809d8c4cf21ea542debfd162a3af4877399608f4488601cd0268a3ed</hash>
        <hash alg="SHA3-512">f8688e857db524d19b5c02b256b2a859de010227890b7e9b02431cc696ec682964392deba5133499eb6ea4b8ce9a98fcfe1bd0b39b58e9fb39977527e312ff66</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/io.dropwizard.metrics/metrics-core@3.2.5?type=jar</purl>
      <externalReferences><reference type="website"><url>http://metrics.dropwizard.io/metrics-core/</url></reference><reference type="distribution"><url>http://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>http://github.com/dropwizard/metrics/issues#issue/</url></reference><reference type="vcs"><url>http://github.com/dropwizard/metrics/metrics-core/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.guava/guava@31.1-jre?type=jar">
      <group>com.google.guava</group>
      <name>guava</name>
      <version>31.1-jre</version>
      <description>Guava is a suite of core and expanded libraries that include
    utility classes, Google's collections, I/O classes, and
    much more.</description>
      <hashes>
        <hash alg="MD5">e37782d974104aa3b0a7bee9927c8042</hash>
        <hash alg="SHA-1">60458f877d055d0c9114d9e1a2efb737b4bc282c</hash>
        <hash alg="SHA-256">a42edc9cab792e39fe39bb94f3fca655ed157ff87a8af78e1d6ba5b07c4a00ab</hash>
        <hash alg="SHA-512">532664e3dd33699bdfb296e355bc58fde77edc019c10f464ae49fe2494a68fd25d1623a9c86bc72830ca9f1354226366ac6f3c09d77be952641e971386a4ebbb</hash>
        <hash alg="SHA-384">829ba1c473782158d43a0e56c932b45139f121a504613b27eacf6b0774354e52c5eccaab5c2da3753b5686b93f0169b4</hash>
        <hash alg="SHA3-384">55f70ee4afad92540faa9d260109c00190e6d1bbacf10b22e52f599103284c1a8b2a2043d8fafbe1309245290b5fe614</hash>
        <hash alg="SHA3-256">dd534fb7df6b380d8701290b0b0c4e388cf42f8179a436c509c0899afde91e5c</hash>
        <hash alg="SHA3-512">617288cc45858588e0626edd21382d38b87cd0e6c78221e3a1626f579d5b4acd4adff37b72e3e51c73e91132f43951d12369624dd515f87bcc0c54213db43ede</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.guava/guava@31.1-jre?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/google/guava</url></reference><reference type="build-system"><url>https://github.com/google/guava/actions</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/google/guava/issues</url></reference><reference type="vcs"><url>https://github.com/google/guava/guava</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.guava/failureaccess@1.0.1?type=jar">
      <group>com.google.guava</group>
      <name>failureaccess</name>
      <version>1.0.1</version>
      <description>Contains
    com.google.common.util.concurrent.internal.InternalFutureFailureAccess and
    InternalFutures. Most users will never need to use this artifact. Its
    classes is conceptually a part of Guava, but they're in this separate
    artifact so that Android libraries can use them without pulling in all of
    Guava (just as they can use ListenableFuture by depending on the
    listenablefuture artifact).</description>
      <hashes>
        <hash alg="MD5">091883993ef5bfa91da01dcc8fc52236</hash>
        <hash alg="SHA-1">1dcf1de382a0bf95a3d8b0849546c88bac1292c9</hash>
        <hash alg="SHA-256">a171ee4c734dd2da837e4b16be9df4661afab72a41adaf31eb84dfdaf936ca26</hash>
        <hash alg="SHA-512">f8d59b808d6ba617252305b66d5590937da9b2b843d492d06b8d0b1b1f397e39f360d5817707797b979a5bf20bf21987b35333e7a15c44ed7401fea2d2119cae</hash>
        <hash alg="SHA-384">67659dbd9647ec303d7f15128dc9dba19b98fd8d74758ee3b602451e32c855e236ccaafe08edf4bbfa245f981268440f</hash>
        <hash alg="SHA3-384">1460875f0331c5fa3791772a6a322a7db180261bc2adacf7271df1fbf3b088a587a755a604c039982cb593c5cfc1f101</hash>
        <hash alg="SHA3-256">ea86406e75fcd93eafe3cde1b3135ba485f1bb9b75fed98894a0bf1f0aee04f0</hash>
        <hash alg="SHA3-512">52ac0f487ab5dd27c9f2e54fd1d84c7a620cae9d49be4072aa2b11501787bf4391ddaa13d02eccdf19e8eea46aecbea5f6064b26777c1b836108a280652e04ac</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.guava/failureaccess@1.0.1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/google/guava/failureaccess</url></reference><reference type="build-system"><url>https://travis-ci.org/google/guava</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/google/guava/issues</url></reference><reference type="vcs"><url>https://github.com/google/guava/failureaccess</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar">
      <group>com.google.guava</group>
      <name>listenablefuture</name>
      <version>9999.0-empty-to-avoid-conflict-with-guava</version>
      <description>An empty artifact that Guava depends on to signal that it is providing
    ListenableFuture -- but is also available in a second "version" that
    contains com.google.common.util.concurrent.ListenableFuture class, without
    any other Guava classes. The idea is:

    - If users want only ListenableFuture, they depend on listenablefuture-1.0.

    - If users want all of Guava, they depend on guava, which, as of Guava
    27.0, depends on
    listenablefuture-9999.0-empty-to-avoid-conflict-with-guava. The 9999.0-...
    version number is enough for some build systems (notably, Gradle) to select
    that empty artifact over the "real" listenablefuture-1.0 -- avoiding a
    conflict with the copy of ListenableFuture in guava itself. If users are
    using an older version of Guava or a build system other than Gradle, they
    may see class conflicts. If so, they can solve them by manually excluding
    the listenablefuture artifact or manually forcing their build systems to
    use 9999.0-....</description>
      <hashes>
        <hash alg="MD5">d094c22570d65e132c19cea5d352e381</hash>
        <hash alg="SHA-1">b421526c5f297295adef1c886e5246c39d4ac629</hash>
        <hash alg="SHA-256">b372a037d4230aa57fbeffdef30fd6123f9c0c2db85d0aced00c91b974f33f99</hash>
        <hash alg="SHA-512">c5987a979174cbacae2e78b319f080420cc71bcdbcf7893745731eeb93c23ed13bff8d4599441f373f3a246023d33df03e882de3015ee932a74a774afdd0782f</hash>
        <hash alg="SHA-384">caff9b74079f95832ca7f6029346b34b606051cc8c5a4389fac263511d277ada0c55f28b0d43011055b268c6eb7184d5</hash>
        <hash alg="SHA3-384">e939f08df0545847ea0d3e4b04a114b08499ad069ba8ec9461d1779f87a56e0c37273630a0f4c14e78c348d3ac7eb97f</hash>
        <hash alg="SHA3-256">1f0a8b1177773b3a8ace839df5eed63cbf56b24a38714898a6e4ed065c42559f</hash>
        <hash alg="SHA3-512">6b495ecc2a18b17365cb08d124a0da47f04bcdde81927b5245edf3edd8e498c3c3fb92ce6a4127f660bac851bb1d3e4510e5c20d03be47ce99dc296d360db285</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/google/guava/listenablefuture</url></reference><reference type="build-system"><url>https://travis-ci.org/google/guava</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/google/guava/issues</url></reference><reference type="vcs"><url>https://github.com/google/guava/listenablefuture</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.checkerframework/checker-qual@3.12.0?type=jar">
      <group>org.checkerframework</group>
      <name>checker-qual</name>
      <version>3.12.0</version>
      <description>checker-qual contains annotations (type qualifiers) that a programmer
writes to specify Java code for type-checking by the Checker Framework.</description>
      <hashes>
        <hash alg="MD5">ab1ae0e2f2f63601597a5a96fca8a54f</hash>
        <hash alg="SHA-1">d5692f0526415fcc6de94bb5bfbd3afd9dd3b3e5</hash>
        <hash alg="SHA-256">ff10785ac2a357ec5de9c293cb982a2cbb605c0309ea4cc1cb9b9bc6dbe7f3cb</hash>
        <hash alg="SHA-512">ff20c424e130c31c30b4f4f5b4374f8f98f94ddae2b123f3c213f147be6b3de57854ee5651b02dd97d352c1c1df2a8bfeef73d5307a71372f46a6002eab24d78</hash>
        <hash alg="SHA-384">60641d5967c60154359437cf49d8b0c14e7c1d876ab1fff4932590b19edcad0e65975299004ac896fb190f45b69ef1a1</hash>
        <hash alg="SHA3-384">aa56f81cc52d6fa2bf40be155584ea7bed253b29fa9d7aa9b56d898ea01909b217efd676ceb8c7c913c4d800bfee7529</hash>
        <hash alg="SHA3-256">85ce7342830164963b1cff7257c1e07aec3eb134ba4ff7102e77de8c33191c87</hash>
        <hash alg="SHA3-512">29ff1fc98ce64a52fc15796f127b5b100522ef88e15c5e129941c4954a3ef1b51a3059c131cb36ba4838c5ab76b2e0f2ab2dd4e9f6edba0ec8154c450c0a2130</hash>
      </hashes>
      <licenses>
        <license>
          <id>MIT</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.checkerframework/checker-qual@3.12.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://checkerframework.org</url></reference><reference type="vcs"><url>https://github.com/typetools/checker-framework.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.errorprone/error_prone_annotations@2.11.0?type=jar">
      <publisher>Google LLC</publisher>
      <group>com.google.errorprone</group>
      <name>error_prone_annotations</name>
      <version>2.11.0</version>
      <description>Error Prone is a static analysis tool for Java that catches common programming mistakes at compile-time.</description>
      <hashes>
        <hash alg="MD5">656ad66261b7e7ea472ed0ffeea773ea</hash>
        <hash alg="SHA-1">c5a0ace696d3f8b1c1d8cc036d8c03cc0cbe6b69</hash>
        <hash alg="SHA-256">721cb91842b46fa056847d104d5225c8b8e1e8b62263b993051e1e5a0137b7ec</hash>
        <hash alg="SHA-512">defcaf30b7def5071243f3982d0d81c47c05b1a95c4d6143b3af86451e97c212c8d620d7220784e541fe8ee95f7fc59452fa6392fa37dac2d5705bfaf06105ba</hash>
        <hash alg="SHA-384">92221cb62c44dc982a8e9c54b99a1c75e0e4c48cd2f03b3272badcd03ab1b8bfc8bcbbe426a8d08074edba69b09a2b79</hash>
        <hash alg="SHA3-384">545c6c45a970b5ac7eb236b0d5d4b98e48e9a36336d8052bac36b409a7489a3d6d68f5a7bb58cfb21189bdab477d4b92</hash>
        <hash alg="SHA3-256">dd2ca92808ddd03f50e3776b6e9aa86d92bdbf170ebe06d47e7c45940b435739</hash>
        <hash alg="SHA3-512">2cdc44a85ce2fb11e54bdd6487978f181f8daca32c40895b252f4be352f9a631e35bc0fabc026216365a05980f4548b2d59dc737b0d465e0005c0a1f325e281e</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.errorprone/error_prone_annotations@2.11.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://errorprone.info/error_prone_annotations</url></reference><reference type="vcs"><url>https://github.com/google/error-prone/error_prone_annotations</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.j2objc/j2objc-annotations@1.3?type=jar">
      <group>com.google.j2objc</group>
      <name>j2objc-annotations</name>
      <version>1.3</version>
      <description>A set of annotations that provide additional information to the J2ObjC
    translator to modify the result of translation.</description>
      <hashes>
        <hash alg="MD5">5fa4ec4ec0c5aa70af8a7d4922df1931</hash>
        <hash alg="SHA-1">ba035118bc8bac37d7eff77700720999acd9986d</hash>
        <hash alg="SHA-256">21af30c92267bd6122c0e0b4d20cccb6641a37eaf956c6540ec471d584e64a7b</hash>
        <hash alg="SHA-512">51ea975179f809cb260751d11a513881b643bf016d15949bcb63b57d3c8868a2197e0620ccbaa5739e032797ec6faa3aa6d64606e999fce32930314780ca4115</hash>
        <hash alg="SHA-384">d2a54e4bb17793a98f85fb8f91138cd3b3d311385b7fb2c09d05c3112d42218a6da29154ba184f00031919548022aa71</hash>
        <hash alg="SHA3-384">8ba512ee47d36d5712335849e8f0fae21498c983c48fc2b4749ac7dfb4eeddf75dd51d21366667f90d6414db032a7b5b</hash>
        <hash alg="SHA3-256">e97bbe4e1ac9f9785ad0b81fd29fc9c6b0d9e37acc6da6d0b31ce9e6da072664</hash>
        <hash alg="SHA3-512">864bc6181c8ad8372e0a05ec3b0bdebc876571692331d3519e19df54a21ef333e992fe5c4e84759f010cf0657f9ea1c435bea8f103735ec3dc9dd31493e7d4a6</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.j2objc/j2objc-annotations@1.3?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/google/j2objc/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>http://svn.sonatype.org/spice/tags/oss-parent-7/j2objc-annotations</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-shaded-force-shading@17.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-shaded-force-shading</name>
      <version>17.0</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">6890ff555c82f3bb156cf9c73bf09cf9</hash>
        <hash alg="SHA-1">345c153973a17fb8a98d368352e14893edcbd610</hash>
        <hash alg="SHA-256">dcc7dff160a40b74fa5db2805b2004153ffd0517968f3c7843a8ee43be82e710</hash>
        <hash alg="SHA-512">9de23513832248618b78e279c0e3900f5cafb7193254ef6818b4f0b6f3b70045dd9cc4fdd13caeeca8b70a44f38201ce055f07248cdf08930a20e1b7a73997ff</hash>
        <hash alg="SHA-384">063611872b4b1a1718e0472e32198bded0d74fa656e5c47a7b20038cd5ff70106e3109b60fe882880feea486e1ef83bf</hash>
        <hash alg="SHA3-384">26f9225d2c401391133dabc97340d1048504deaaae3c6b02ba20b83d4efe8c53a6d4f4e63a04e4317f9bce6b1a1ee013</hash>
        <hash alg="SHA3-256">aae3e6da763019cc2fd4919df572a3653b46aedaf60a3adb3d28bc7f94023523</hash>
        <hash alg="SHA3-512">e616e089fb70dc79503b6c235bd8d14c6e7c8e608c87bb4fcd02fe86d6ba27985bac4f144843af9fc7a7c495de7057320ccddea9f571c42bdcaa1c73966f265f</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-shaded-force-shading@17.0?type=jar</purl>
      <externalReferences><reference type="website"><url>http://flink.apache.org/flink-shaded-force-shading</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink-shaded/flink-shaded-force-shading</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar">
      <publisher>QOS.ch</publisher>
      <group>org.slf4j</group>
      <name>slf4j-api</name>
      <version>1.7.36</version>
      <description>The slf4j API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">872da51f5de7f3923da4de871d57fd85</hash>
        <hash alg="SHA-1">6c62681a2f655b49963a5983b8b0950a6120ae14</hash>
        <hash alg="SHA-256">d3ef575e3e4979678dc01bf1dcce51021493b4d11fb7f1be8ad982877c16a1c0</hash>
        <hash alg="SHA-512">f9b033fc019a44f98b16048da7e2b59edd4a6a527ba60e358f65ab88e0afae03a9340f1b3e8a543d49fa542290f499c5594259affa1ff3e6e7bf3b428d4c610b</hash>
        <hash alg="SHA-384">2b14ad035877087157e379d3277dcdcd79e58d6bdb147c47d29e377d75ce53ad42cafbf22f5fb7827c7e946ff4876b9a</hash>
        <hash alg="SHA3-384">3bc3110dafb8d5be16a39f3b2671a466463cd99eb39610c0e4719a7bf2d928f2ea213c734887c6926a07c4cca7769e4b</hash>
        <hash alg="SHA3-256">ba2608179fcf46e2291a90b9cbb4aa30d718e481f59c350cc21c73b88d826881</hash>
        <hash alg="SHA3-512">14c4edcd19702ef607d78826839d8a6d3a39157df54b89a801d3d3cbbe1307131a77671b041c761122730fb1387888c5ec2e46bdd80e1cb07f8f144676441824</hash>
      </hashes>
      <licenses>
        <license>
          <id>MIT</id>
          <url>https://opensource.org/licenses/MIT</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.slf4j.org</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/qos-ch/slf4j/slf4j-api</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar">
      <group>com.google.code.findbugs</group>
      <name>jsr305</name>
      <version>1.3.9</version>
      <description>JSR305 Annotations for Findbugs</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">1d5a772e400b04bb67a7ef4a0e0996d8</hash>
        <hash alg="SHA-1">40719ea6961c0cb6afaeb6a921eaa1f6afd4cfdf</hash>
        <hash alg="SHA-256">905721a0eea90a81534abb7ee6ef4ea2e5e645fa1def0a5cd88402df1b46c9ed</hash>
        <hash alg="SHA-512">06da282cfd8e30d9f8cf17702b8709172b00e22b75a627a1d85f8989615b8a1a401bc25d9aee7b14aed1d9b5df73bf2ea8d66f9c8468d9577c29f0ccfa2cc70a</hash>
        <hash alg="SHA-384">56e6b41ef62eb5edfed0203802cefae9c2df86388148e420bb0c687abb2b80e14d5c2a82d5b35dce4badaf148f94eada</hash>
        <hash alg="SHA3-384">58c3bf89fa1afa75c2c5078159fd28e27b2273d437f26aaaa7391310b6f0823f3cf476a24f5631c0881f3f7e946d99be</hash>
        <hash alg="SHA3-256">c333ea5faedfa78e0614a2620438d5724eab093df4e960918391b6a44c2915b0</hash>
        <hash alg="SHA3-512">67ec31448e156cc72dd036060b460bb2667a13b1cbe500b6b7eed3235b1994b44c39f440ebd07b21ec9595b166ad61121d4f6a132b5b313c558ab21b72599425</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar</purl>
      <externalReferences><reference type="website"><url>http://findbugs.sourceforge.net/</url></reference><reference type="vcs"><url>http://findbugs.googlecode.com/svn/trunk/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.junit.vintage/junit-vintage-engine@5.10.1?type=jar">
      <group>org.junit.vintage</group>
      <name>junit-vintage-engine</name>
      <version>5.10.1</version>
      <description>Module "junit-vintage-engine" of JUnit 5.</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">41ca5da6c302cadb487c4a6e0b9e12b8</hash>
        <hash alg="SHA-1">25cf537c2c253e83ea23eb605310947661c6f763</hash>
        <hash alg="SHA-256">96385222c8a415ffe8a2362e73eb2516a7e262f85b10387c6e990a56765604d5</hash>
        <hash alg="SHA-512">ca3edd5e33978b983a1f157650a2b1a05d4b856e44348c789e65712d18183e4a8947fa8e7946fe4ad4b617b08f3ef3e7fea910bfc253bff6144abe751f6978d9</hash>
        <hash alg="SHA-384">f865c9de202758057145110aab05d5ce8f94ae566be8f9b474cca891aaa9c23c01a87c1e0902852ef030f09b03ca4ed9</hash>
        <hash alg="SHA3-384">775716e395203838cc5bc8a490a0b68b7a4d51090ec0c1bdb988c21b88ea5cacf27f7bec44a94cc471443c4284397498</hash>
        <hash alg="SHA3-256">b654cdbfece37aa9c794975924f3cd61c1f71f737b12cac066a4adf6368cb82c</hash>
        <hash alg="SHA3-512">495de0eb9d1fad8300e1de520584f754f6d57b6d6723709a60d5509466e0d4de7a69af234ec43f598cda23cead5f36fe9542e0378f8c744e4168e463c3821a0b</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.junit.vintage/junit-vintage-engine@5.10.1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://junit.org/junit5/</url></reference><reference type="vcs"><url>https://github.com/junit-team/junit5</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.junit.platform/junit-platform-engine@1.10.1?type=jar">
      <group>org.junit.platform</group>
      <name>junit-platform-engine</name>
      <version>1.10.1</version>
      <description>Module "junit-platform-engine" of JUnit 5.</description>
      <hashes>
        <hash alg="MD5">4d571057589cd109f3f4bedf7bbf5e7a</hash>
        <hash alg="SHA-1">f32ae4af74fde68414b8a3d2b7cf1fb43824a83a</hash>
        <hash alg="SHA-256">baa48e470d6dee7369a0a8820c51da89c1463279eda6e13a304d11f45922c760</hash>
        <hash alg="SHA-512">52ea2f11ec2ef0457384335d1b09263f4efecf63d9df99c5f8396f74d972722c51f8f766370e85e030f4476e805dac72603296942593c5bbe56993454b9d8e30</hash>
        <hash alg="SHA-384">7c520e04c995a47c19c94fdcbbcba9bb117696191e6a989a82d9f960e0e315e5cf87d28022ac5cb2701c85d5f38eefde</hash>
        <hash alg="SHA3-384">79d4f2fb987d6a44174dda99b1bd827e8dfd0399495c3e994371d4f69631212768dee8b891313aac89045388a1bed9db</hash>
        <hash alg="SHA3-256">5c3fcec688368188688cb6949c1230c2822211e53f3a65b7b3abf4a38051798b</hash>
        <hash alg="SHA3-512">30a0834e88bbc62287e5f49302c4a07b6da1bf4d9774faddbe7e606fb296c0dcd71c7e90ef8fff3e18dd050e5a19f7b903c91674ff4806cdb97111e4f0cfc199</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.junit.platform/junit-platform-engine@1.10.1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://junit.org/junit5/</url></reference><reference type="vcs"><url>https://github.com/junit-team/junit5</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apiguardian/apiguardian-api@1.1.2?type=jar">
      <group>org.apiguardian</group>
      <name>apiguardian-api</name>
      <version>1.1.2</version>
      <description>@API Guardian</description>
      <hashes>
        <hash alg="MD5">8c7de3f82037fa4a2e8be2a2f13092af</hash>
        <hash alg="SHA-1">a231e0d844d2721b0fa1b238006d15c6ded6842a</hash>
        <hash alg="SHA-256">b509448ac506d607319f182537f0b35d71007582ec741832a1f111e5b5b70b38</hash>
        <hash alg="SHA-512">d7ccd0e7019f1a997de39d66dc0ad4efe150428fdd7f4c743c93884f1602a3e90135ad34baea96d5b6d925ad6c0c8487c8e78304f0a089a12383d4a62e2c9a61</hash>
        <hash alg="SHA-384">5ae11cfedcee7da43a506a67946ddc8a7a2622284a924ba78f74541e9a22db6868a15f5d84edb91a541e38afded734ea</hash>
        <hash alg="SHA3-384">c146116b3dfd969200b2ce52d96b92dd02d6f5a45a86e7e85edf35600ddbc2f3c6e8a1ad7e2db4dcd2c398c09fad0927</hash>
        <hash alg="SHA3-256">b4b436d7f615fc0b820204e69f83c517d1c1ccc5f6b99e459209ede4482268de</hash>
        <hash alg="SHA3-512">7b95b7ac68a6891b8901b5507acd2c24a0c1e20effa63cd513764f513eab4eb55f8de5178edbe0a400c11f3a18d3f56243569d6d663100f06dd98288504c09c5</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apiguardian/apiguardian-api@1.1.2?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/apiguardian-team/apiguardian</url></reference><reference type="vcs"><url>https://github.com/apiguardian-team/apiguardian</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.objenesis/objenesis@2.1?type=jar">
      <publisher>Joe Walnes, Henri Tremblay, Leonardo Mesquita</publisher>
      <group>org.objenesis</group>
      <name>objenesis</name>
      <version>2.1</version>
      <description>A library for instantiating Java objects</description>
      <hashes>
        <hash alg="MD5">32ccb1d20a42b5aaaceb90c9082a2efa</hash>
        <hash alg="SHA-1">87c0ea803b69252868d09308b4618f766f135a96</hash>
        <hash alg="SHA-256">c74330cc6b806c804fd37e74487b4fe5d7c2750c5e15fbc6efa13bdee1bdef80</hash>
        <hash alg="SHA-512">1dec9ee30812b8006e536a2749c5781ccdc4b446539efb6fa534f22e70562033876bf2eb22c6946d617695729bd65f0f65b984f15f05ac63db5bed215e74427c</hash>
        <hash alg="SHA-384">657b8a3b80a5475f198425396f7264301f9e0f3ad5dc336ef0c7b46874f5544861a8a2fd48cdb5f672e199a6935c19d1</hash>
        <hash alg="SHA3-384">e526937d722aad1857869b2d2a0ba5c88815609308c00b776b51614e501de5d93d54978f5bb9cf496bdcc28b1dbd5775</hash>
        <hash alg="SHA3-256">436cfbb9c208dd03c951708fa4ba6525e2a0b26a873d594a6fbe93ab49082c97</hash>
        <hash alg="SHA3-512">1e7ee9411df7cfbf0669c38e4ef029155dd718b91db1d182841c740caf8c1057ed273a77f8e32d724c48aaf96815a26ab099c776511ffc5ef351d70ebfa70344</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.objenesis/objenesis@2.1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://objenesis.org</url></reference><reference type="distribution"><url>http://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/easymock/easymock/objenesis</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.logging.log4j/log4j-slf4j-impl@2.17.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.logging.log4j</group>
      <name>log4j-slf4j-impl</name>
      <version>2.17.1</version>
      <description>The Apache Log4j SLF4J API binding to Log4j 2 Core</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">8d0e5934a9c341dbc3493d4039afd985</hash>
        <hash alg="SHA-1">84692d456bcce689355d33d68167875e486954dd</hash>
        <hash alg="SHA-256">e9a03720e5d5076009c2530635da9d08485e28a0b0ec20708dadc51afb78e41e</hash>
        <hash alg="SHA-512">3559e139a0c6d47fa0af233ac079fbde2227d701a846d6e6f7463129f7237e587bc3c337aebe5e4088f633ea83d1456dbc5b1999d1d485da67bfe2d5c12cde21</hash>
        <hash alg="SHA-384">ba0f5d2de2c0a7f816cb7ef98e9449e4a975ba5e34f1634e8eae6f84855df84ae6b2baf0c4762636fe5c337d6c561ef9</hash>
        <hash alg="SHA3-384">5aad3fca6b7600c428992b117e96e772c747927f71cbb4ba90ea8922266e64963584676d7a2ffcc9d293fbe8edf4dcd6</hash>
        <hash alg="SHA3-256">b077fe134c26804f8eafda8a0bb91703a54e499ec96859220cddfff8e561dd06</hash>
        <hash alg="SHA3-512">b5b10d7d8f416c3fa70146ceab14513a002f723e83f3418f39e1b67bf394faeeed10262743f6c1cc5ea26c29162b1445283523c0133be2374c62a7066c4cd916</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.logging.log4j/log4j-slf4j-impl@2.17.1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://logging.apache.org/log4j/2.x/log4j-slf4j-impl/</url></reference><reference type="build-system"><url>https://ci-builds.apache.org/job/Logging/job/log4j/</url></reference><reference type="distribution"><url>https://logging.apache.org/log4j/2.x/download.html</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/LOG4J2</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?log4j-user@logging.apache.org</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=logging-log4j2.git/log4j-slf4j-impl</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.logging.log4j/log4j-api@2.17.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.logging.log4j</group>
      <name>log4j-api</name>
      <version>2.17.1</version>
      <description>The Apache Log4j API</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">dfd5f2d81aba31583ee87fe16c7b78f8</hash>
        <hash alg="SHA-1">d771af8e336e372fb5399c99edabe0919aeaf5b2</hash>
        <hash alg="SHA-256">b0d8a4c8ab4fb8b1888d0095822703b0e6d4793c419550203da9e69196161de4</hash>
        <hash alg="SHA-512">48a58c2f317d451ac1622bdfbfa5d3cd9de45d40d5d5df98f39fe6d53c74da56e200f8e3d19a309d4e1ea364369379c0ef9d79b928fc20ea743857f347259c03</hash>
        <hash alg="SHA-384">3686abf7edebe4bd29bdae0495a6b881d38cfe7a870350d1f1b43056f51c25cd39a5fccb74a28abf62069862dd25e416</hash>
        <hash alg="SHA3-384">34ded426dd53323c7588f09cb17afc37798d090914608c4a8e88ff3cdcf872a6dccf042423a6bf2d92e9ab35252de92b</hash>
        <hash alg="SHA3-256">5b1dce647c9dfb24ced20d78c87c213d96d697ed17c1db97e538071c0c06702d</hash>
        <hash alg="SHA3-512">2e9070e21fd4b9b9aaa7794dea2da75144dd116fbc9f24935d57b32306c1901f815dbaa1fd9c76712990481ac399ccb51bb27e9ee3a3a27b42bcfbc2d68f371d</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.logging.log4j/log4j-api@2.17.1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://logging.apache.org/log4j/2.x/log4j-api/</url></reference><reference type="build-system"><url>https://ci-builds.apache.org/job/Logging/job/log4j/</url></reference><reference type="distribution"><url>https://logging.apache.org/log4j/2.x/download.html</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/LOG4J2</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?log4j-user@logging.apache.org</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=logging-log4j2.git/log4j-api</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.logging.log4j/log4j-core@2.17.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.logging.log4j</group>
      <name>log4j-core</name>
      <version>2.17.1</version>
      <description>The Apache Log4j Implementation</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">8d2f5c52700336dae846b2c3ecde7a6e</hash>
        <hash alg="SHA-1">779f60f3844dadc3ef597976fcb1e5127b1f343d</hash>
        <hash alg="SHA-256">c967f223487980b9364e94a7c7f9a8a01fd3ee7c19bdbf0b0f9f8cb8511f3d41</hash>
        <hash alg="SHA-512">8d3d6a17afc41cde43b19c9a696793d009d9271bc6430762f10157018453f8a53cde6e6aa4f3f0b703eaf1f2944d047398d29b470924ecc3290d1923b0e29750</hash>
        <hash alg="SHA-384">28500f2bb8fa430788eb526d8197671b9bcb49cc8a04fac22b12ae0c46bfefd682f1ce363cb237e41ae87185635e8ff3</hash>
        <hash alg="SHA3-384">5814742e87b0ba1308c883194b5cc16a57c2003aaac774e0c0b09d829231b9844dd16591af3711024cad90043ebecbf6</hash>
        <hash alg="SHA3-256">4cd95a3c8d119b4033f263c00ec414c7f3c8ccee68d013bdfae161d33872677f</hash>
        <hash alg="SHA3-512">c9b7e15624039cc442ab92e0eccf1ce2c2020f636d39d49da9a33fa95997db89c991c57f087bc1321980c319b894a07d631bd6d7c10c611a9cfb29ee5550003f</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.logging.log4j/log4j-core@2.17.1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://logging.apache.org/log4j/2.x/log4j-core/</url></reference><reference type="build-system"><url>https://ci-builds.apache.org/job/Logging/job/log4j/</url></reference><reference type="distribution"><url>https://logging.apache.org/log4j/2.x/download.html</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/LOG4J2</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?log4j-user@logging.apache.org</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=logging-log4j2.git/log4j-core</url></reference></externalReferences>
    </component>
  </components>
  <dependencies>
    <dependency ref="pkg:maven/io.confluent.flink/flink-test-utils@1.19.2-cp2?type=jar">
      <dependency ref="pkg:maven/io.confluent.flink/flink-table-common@1.19.2-cp2?type=jar"/>
      <dependency ref="pkg:maven/io.confluent.flink/flink-test-utils-junit@1.19.2-cp2?type=jar"/>
      <dependency ref="pkg:maven/io.confluent.flink/flink-runtime@1.19.2-cp2?type=jar"/>
      <dependency ref="pkg:maven/io.confluent.flink/flink-runtime@1.19.2-cp2?classifier=tests&amp;type=test-jar"/>
      <dependency ref="pkg:maven/io.confluent.flink/flink-core@1.19.2-cp2?classifier=tests&amp;type=test-jar"/>
      <dependency ref="pkg:maven/io.confluent.flink/flink-rpc-akka-loader@1.19.2-cp2?classifier=tests&amp;type=test-jar"/>
      <dependency ref="pkg:maven/io.confluent.flink/flink-clients@1.19.2-cp2?type=jar"/>
      <dependency ref="pkg:maven/io.confluent.flink/flink-streaming-java@1.19.2-cp2?type=jar"/>
      <dependency ref="pkg:maven/org.junit.jupiter/junit-jupiter@5.10.1?type=jar"/>
      <dependency ref="pkg:maven/org.assertj/assertj-core@3.23.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.hadoop/hadoop-minikdc@3.2.4?type=jar"/>
      <dependency ref="pkg:maven/io.confluent.flink/flink-streaming-java@1.19.2-cp2?classifier=tests&amp;type=test-jar"/>
      <dependency ref="pkg:maven/io.confluent.flink/flink-statebackend-rocksdb@1.19.2-cp2?type=jar"/>
      <dependency ref="pkg:maven/io.confluent.flink/flink-statebackend-changelog@1.19.2-cp2?type=jar"/>
      <dependency ref="pkg:maven/io.confluent.flink/flink-dstl-dfs@1.19.2-cp2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.curator/curator-test@5.4.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-force-shading@17.0?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/io.confluent.flink/flink-table-common@1.19.2-cp2?type=jar">
      <dependency ref="pkg:maven/io.confluent.flink/flink-core@1.19.2-cp2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-asm-9@9.5-17.0?type=jar"/>
      <dependency ref="pkg:maven/com.ibm.icu/icu4j@67.1?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/io.confluent.flink/flink-core@1.19.2-cp2?type=jar">
      <dependency ref="pkg:maven/io.confluent.flink/flink-annotations@1.19.2-cp2?type=jar"/>
      <dependency ref="pkg:maven/io.confluent.flink/flink-metrics-core@1.19.2-cp2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-asm-9@9.5-17.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-jackson@2.14.2-17.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar"/>
      <dependency ref="pkg:maven/org.snakeyaml/snakeyaml-engine@2.6?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar"/>
      <dependency ref="pkg:maven/com.esotericsoftware.kryo/kryo@2.24.0?type=jar"/>
      <dependency ref="pkg:maven/commons-collections/commons-collections@3.2.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-compress@1.26.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-guava@31.1-jre-17.0?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/io.confluent.flink/flink-annotations@1.19.2-cp2?type=jar">
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"/>
    <dependency ref="pkg:maven/io.confluent.flink/flink-metrics-core@1.19.2-cp2?type=jar">
      <dependency ref="pkg:maven/io.confluent.flink/flink-annotations@1.19.2-cp2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.flink/flink-shaded-asm-9@9.5-17.0?type=jar"/>
    <dependency ref="pkg:maven/org.apache.flink/flink-shaded-jackson@2.14.2-17.0?type=jar"/>
    <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar"/>
    <dependency ref="pkg:maven/org.snakeyaml/snakeyaml-engine@2.6?type=jar"/>
    <dependency ref="pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar">
      <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.esotericsoftware.kryo/kryo@2.24.0?type=jar">
      <dependency ref="pkg:maven/com.esotericsoftware.minlog/minlog@1.2?type=jar"/>
      <dependency ref="pkg:maven/org.objenesis/objenesis@2.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.esotericsoftware.minlog/minlog@1.2?type=jar"/>
    <dependency ref="pkg:maven/org.objenesis/objenesis@2.1?type=jar"/>
    <dependency ref="pkg:maven/commons-collections/commons-collections@3.2.2?type=jar"/>
    <dependency ref="pkg:maven/org.apache.commons/commons-compress@1.26.0?type=jar">
      <dependency ref="pkg:maven/commons-io/commons-io@2.15.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/commons-io/commons-io@2.15.1?type=jar"/>
    <dependency ref="pkg:maven/org.apache.flink/flink-shaded-guava@31.1-jre-17.0?type=jar"/>
    <dependency ref="pkg:maven/com.ibm.icu/icu4j@67.1?type=jar"/>
    <dependency ref="pkg:maven/io.confluent.flink/flink-test-utils-junit@1.19.2-cp2?type=jar">
      <dependency ref="pkg:maven/org.junit.jupiter/junit-jupiter@5.10.1?type=jar"/>
      <dependency ref="pkg:maven/org.junit.vintage/junit-vintage-engine@5.10.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-slf4j-impl@2.17.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-api@2.17.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-core@2.17.1?type=jar"/>
      <dependency ref="pkg:maven/org.testcontainers/testcontainers@1.19.1?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.junit.jupiter/junit-jupiter@5.10.1?type=jar">
      <dependency ref="pkg:maven/org.junit.jupiter/junit-jupiter-api@5.10.1?type=jar"/>
      <dependency ref="pkg:maven/org.junit.jupiter/junit-jupiter-params@5.10.1?type=jar"/>
      <dependency ref="pkg:maven/org.junit.jupiter/junit-jupiter-engine@5.10.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.junit.jupiter/junit-jupiter-api@5.10.1?type=jar">
      <dependency ref="pkg:maven/org.opentest4j/opentest4j@1.3.0?type=jar"/>
      <dependency ref="pkg:maven/org.junit.platform/junit-platform-commons@1.10.1?type=jar"/>
      <dependency ref="pkg:maven/org.apiguardian/apiguardian-api@1.1.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.opentest4j/opentest4j@1.3.0?type=jar"/>
    <dependency ref="pkg:maven/org.junit.platform/junit-platform-commons@1.10.1?type=jar">
      <dependency ref="pkg:maven/org.apiguardian/apiguardian-api@1.1.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apiguardian/apiguardian-api@1.1.2?type=jar"/>
    <dependency ref="pkg:maven/org.junit.jupiter/junit-jupiter-params@5.10.1?type=jar">
      <dependency ref="pkg:maven/org.junit.jupiter/junit-jupiter-api@5.10.1?type=jar"/>
      <dependency ref="pkg:maven/org.apiguardian/apiguardian-api@1.1.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.junit.jupiter/junit-jupiter-engine@5.10.1?type=jar">
      <dependency ref="pkg:maven/org.junit.platform/junit-platform-engine@1.10.1?type=jar"/>
      <dependency ref="pkg:maven/org.junit.jupiter/junit-jupiter-api@5.10.1?type=jar"/>
      <dependency ref="pkg:maven/org.apiguardian/apiguardian-api@1.1.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.junit.platform/junit-platform-engine@1.10.1?type=jar">
      <dependency ref="pkg:maven/org.opentest4j/opentest4j@1.3.0?type=jar"/>
      <dependency ref="pkg:maven/org.junit.platform/junit-platform-commons@1.10.1?type=jar"/>
      <dependency ref="pkg:maven/org.apiguardian/apiguardian-api@1.1.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.junit.vintage/junit-vintage-engine@5.10.1?type=jar">
      <dependency ref="pkg:maven/org.junit.platform/junit-platform-engine@1.10.1?type=jar"/>
      <dependency ref="pkg:maven/junit/junit@4.13.2?type=jar"/>
      <dependency ref="pkg:maven/org.apiguardian/apiguardian-api@1.1.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/junit/junit@4.13.2?type=jar">
      <dependency ref="pkg:maven/org.hamcrest/hamcrest-core@1.3?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.hamcrest/hamcrest-core@1.3?type=jar"/>
    <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-slf4j-impl@2.17.1?type=jar">
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-api@2.17.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-core@2.17.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-api@2.17.1?type=jar"/>
    <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-core@2.17.1?type=jar">
      <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-api@2.17.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.testcontainers/testcontainers@1.19.1?type=jar">
      <dependency ref="pkg:maven/junit/junit@4.13.2?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-compress@1.26.0?type=jar"/>
      <dependency ref="pkg:maven/org.rnorth.duct-tape/duct-tape@1.0.8?type=jar"/>
      <dependency ref="pkg:maven/com.github.docker-java/docker-java-api@3.3.3?type=jar"/>
      <dependency ref="pkg:maven/com.github.docker-java/docker-java-transport-zerodep@3.3.3?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.rnorth.duct-tape/duct-tape@1.0.8?type=jar">
      <dependency ref="pkg:maven/org.jetbrains/annotations@17.0.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.jetbrains/annotations@17.0.0?type=jar"/>
    <dependency ref="pkg:maven/com.github.docker-java/docker-java-api@3.3.3?type=jar">
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.15.3?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.15.3?type=jar"/>
    <dependency ref="pkg:maven/com.github.docker-java/docker-java-transport-zerodep@3.3.3?type=jar">
      <dependency ref="pkg:maven/com.github.docker-java/docker-java-transport@3.3.3?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/net.java.dev.jna/jna@5.12.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.github.docker-java/docker-java-transport@3.3.3?type=jar"/>
    <dependency ref="pkg:maven/net.java.dev.jna/jna@5.12.1?type=jar"/>
    <dependency ref="pkg:maven/io.confluent.flink/flink-runtime@1.19.2-cp2?type=jar">
      <dependency ref="pkg:maven/io.confluent.flink/flink-core@1.19.2-cp2?type=jar"/>
      <dependency ref="pkg:maven/io.confluent.flink/flink-rpc-core@1.19.2-cp2?type=jar"/>
      <dependency ref="pkg:maven/io.confluent.flink/flink-rpc-akka-loader@1.19.2-cp2?type=jar"/>
      <dependency ref="pkg:maven/io.confluent.flink/flink-java@1.19.2-cp2?type=jar"/>
      <dependency ref="pkg:maven/io.confluent.flink/flink-queryable-state-client-java@1.19.2-cp2?type=jar"/>
      <dependency ref="pkg:maven/io.confluent.flink/flink-hadoop-fs@1.19.2-cp2?type=jar"/>
      <dependency ref="pkg:maven/commons-io/commons-io@2.15.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-netty@4.1.91.Final-17.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-guava@31.1-jre-17.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-jackson@2.14.2-17.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-zookeeper-3@3.7.1-17.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar"/>
      <dependency ref="pkg:maven/commons-cli/commons-cli@1.5.0?type=jar"/>
      <dependency ref="pkg:maven/org.javassist/javassist@3.24.0-GA?type=jar"/>
      <dependency ref="pkg:maven/org.xerial.snappy/snappy-java@1.1.10.4?type=jar"/>
      <dependency ref="pkg:maven/tools.profiler/async-profiler@2.9?type=jar"/>
      <dependency ref="pkg:maven/org.lz4/lz4-java@1.8.0?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/io.confluent.flink/flink-rpc-core@1.19.2-cp2?type=jar">
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/io.confluent.flink/flink-rpc-akka-loader@1.19.2-cp2?type=jar">
      <dependency ref="pkg:maven/io.confluent.flink/flink-core@1.19.2-cp2?type=jar"/>
      <dependency ref="pkg:maven/io.confluent.flink/flink-rpc-core@1.19.2-cp2?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/io.confluent.flink/flink-java@1.19.2-cp2?type=jar">
      <dependency ref="pkg:maven/io.confluent.flink/flink-core@1.19.2-cp2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-math3@3.6.1?type=jar"/>
      <dependency ref="pkg:maven/com.twitter/chill-java@0.7.6?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.commons/commons-math3@3.6.1?type=jar"/>
    <dependency ref="pkg:maven/com.twitter/chill-java@0.7.6?type=jar">
      <dependency ref="pkg:maven/com.esotericsoftware.kryo/kryo@2.24.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/io.confluent.flink/flink-queryable-state-client-java@1.19.2-cp2?type=jar">
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-netty@4.1.91.Final-17.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-guava@31.1-jre-17.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.flink/flink-shaded-netty@4.1.91.Final-17.0?type=jar"/>
    <dependency ref="pkg:maven/io.confluent.flink/flink-hadoop-fs@1.19.2-cp2?type=jar">
      <dependency ref="pkg:maven/io.confluent.flink/flink-core@1.19.2-cp2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.flink/flink-shaded-zookeeper-3@3.7.1-17.0?type=jar"/>
    <dependency ref="pkg:maven/commons-cli/commons-cli@1.5.0?type=jar"/>
    <dependency ref="pkg:maven/org.javassist/javassist@3.24.0-GA?type=jar"/>
    <dependency ref="pkg:maven/org.xerial.snappy/snappy-java@1.1.10.4?type=jar"/>
    <dependency ref="pkg:maven/tools.profiler/async-profiler@2.9?type=jar"/>
    <dependency ref="pkg:maven/org.lz4/lz4-java@1.8.0?type=jar"/>
    <dependency ref="pkg:maven/io.confluent.flink/flink-runtime@1.19.2-cp2?classifier=tests&amp;type=test-jar">
      <dependency ref="pkg:maven/io.confluent.flink/flink-core@1.19.2-cp2?type=jar"/>
      <dependency ref="pkg:maven/io.confluent.flink/flink-rpc-core@1.19.2-cp2?type=jar"/>
      <dependency ref="pkg:maven/io.confluent.flink/flink-rpc-akka-loader@1.19.2-cp2?type=jar"/>
      <dependency ref="pkg:maven/io.confluent.flink/flink-java@1.19.2-cp2?type=jar"/>
      <dependency ref="pkg:maven/io.confluent.flink/flink-queryable-state-client-java@1.19.2-cp2?type=jar"/>
      <dependency ref="pkg:maven/io.confluent.flink/flink-hadoop-fs@1.19.2-cp2?type=jar"/>
      <dependency ref="pkg:maven/commons-io/commons-io@2.15.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-netty@4.1.91.Final-17.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-guava@31.1-jre-17.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-jackson@2.14.2-17.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-zookeeper-3@3.7.1-17.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar"/>
      <dependency ref="pkg:maven/commons-cli/commons-cli@1.5.0?type=jar"/>
      <dependency ref="pkg:maven/org.javassist/javassist@3.24.0-GA?type=jar"/>
      <dependency ref="pkg:maven/org.xerial.snappy/snappy-java@1.1.10.4?type=jar"/>
      <dependency ref="pkg:maven/tools.profiler/async-profiler@2.9?type=jar"/>
      <dependency ref="pkg:maven/org.lz4/lz4-java@1.8.0?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/io.confluent.flink/flink-core@1.19.2-cp2?classifier=tests&amp;type=test-jar">
      <dependency ref="pkg:maven/io.confluent.flink/flink-annotations@1.19.2-cp2?type=jar"/>
      <dependency ref="pkg:maven/io.confluent.flink/flink-metrics-core@1.19.2-cp2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-asm-9@9.5-17.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-jackson@2.14.2-17.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar"/>
      <dependency ref="pkg:maven/org.snakeyaml/snakeyaml-engine@2.6?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar"/>
      <dependency ref="pkg:maven/com.esotericsoftware.kryo/kryo@2.24.0?type=jar"/>
      <dependency ref="pkg:maven/commons-collections/commons-collections@3.2.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-compress@1.26.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-guava@31.1-jre-17.0?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/io.confluent.flink/flink-rpc-akka-loader@1.19.2-cp2?classifier=tests&amp;type=test-jar">
      <dependency ref="pkg:maven/io.confluent.flink/flink-core@1.19.2-cp2?type=jar"/>
      <dependency ref="pkg:maven/io.confluent.flink/flink-rpc-core@1.19.2-cp2?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/io.confluent.flink/flink-clients@1.19.2-cp2?type=jar">
      <dependency ref="pkg:maven/io.confluent.flink/flink-core@1.19.2-cp2?type=jar"/>
      <dependency ref="pkg:maven/io.confluent.flink/flink-runtime@1.19.2-cp2?type=jar"/>
      <dependency ref="pkg:maven/io.confluent.flink/flink-optimizer@1.19.2-cp2?type=jar"/>
      <dependency ref="pkg:maven/io.confluent.flink/flink-java@1.19.2-cp2?type=jar"/>
      <dependency ref="pkg:maven/commons-cli/commons-cli@1.5.0?type=jar"/>
      <dependency ref="pkg:maven/io.confluent.flink/flink-streaming-java@1.19.2-cp2?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/io.confluent.flink/flink-optimizer@1.19.2-cp2?type=jar">
      <dependency ref="pkg:maven/io.confluent.flink/flink-core@1.19.2-cp2?type=jar"/>
      <dependency ref="pkg:maven/io.confluent.flink/flink-runtime@1.19.2-cp2?type=jar"/>
      <dependency ref="pkg:maven/io.confluent.flink/flink-java@1.19.2-cp2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-guava@31.1-jre-17.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-jackson@2.14.2-17.0?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/io.confluent.flink/flink-streaming-java@1.19.2-cp2?type=jar">
      <dependency ref="pkg:maven/io.confluent.flink/flink-core@1.19.2-cp2?type=jar"/>
      <dependency ref="pkg:maven/io.confluent.flink/flink-file-sink-common@1.19.2-cp2?type=jar"/>
      <dependency ref="pkg:maven/io.confluent.flink/flink-runtime@1.19.2-cp2?type=jar"/>
      <dependency ref="pkg:maven/io.confluent.flink/flink-java@1.19.2-cp2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-guava@31.1-jre-17.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-math3@3.6.1?type=jar"/>
      <dependency ref="pkg:maven/io.confluent.flink/flink-connector-datagen@1.19.2-cp2?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/io.confluent.flink/flink-file-sink-common@1.19.2-cp2?type=jar"/>
    <dependency ref="pkg:maven/io.confluent.flink/flink-connector-datagen@1.19.2-cp2?type=jar"/>
    <dependency ref="pkg:maven/org.assertj/assertj-core@3.23.1?type=jar">
      <dependency ref="pkg:maven/net.bytebuddy/byte-buddy@1.14.4?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/net.bytebuddy/byte-buddy@1.14.4?type=jar"/>
    <dependency ref="pkg:maven/org.apache.hadoop/hadoop-minikdc@3.2.4?type=jar">
      <dependency ref="pkg:maven/commons-io/commons-io@2.15.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.kerby/kerb-simplekdc@1.0.1?type=jar"/>
      <dependency ref="pkg:maven/junit/junit@4.13.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.kerby/kerb-simplekdc@1.0.1?type=jar">
      <dependency ref="pkg:maven/org.apache.kerby/kerb-client@1.0.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.kerby/kerb-admin@1.0.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.kerby/kerb-client@1.0.1?type=jar">
      <dependency ref="pkg:maven/org.apache.kerby/kerby-config@1.0.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.kerby/kerb-core@1.0.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.kerby/kerb-common@1.0.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.kerby/kerb-util@1.0.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.kerby/token-provider@1.0.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.kerby/kerby-config@1.0.1?type=jar">
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.kerby/kerb-core@1.0.1?type=jar">
      <dependency ref="pkg:maven/org.apache.kerby/kerby-pkix@1.0.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.kerby/kerby-pkix@1.0.1?type=jar">
      <dependency ref="pkg:maven/org.apache.kerby/kerby-asn1@1.0.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.kerby/kerby-util@1.0.1?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.kerby/kerby-asn1@1.0.1?type=jar"/>
    <dependency ref="pkg:maven/org.apache.kerby/kerby-util@1.0.1?type=jar"/>
    <dependency ref="pkg:maven/org.apache.kerby/kerb-common@1.0.1?type=jar">
      <dependency ref="pkg:maven/org.apache.kerby/kerby-config@1.0.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.kerby/kerb-crypto@1.0.1?type=jar"/>
      <dependency ref="pkg:maven/commons-io/commons-io@2.15.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.kerby/kerb-crypto@1.0.1?type=jar">
      <dependency ref="pkg:maven/org.apache.kerby/kerby-util@1.0.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.kerby/kerb-core@1.0.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.kerby/kerb-util@1.0.1?type=jar">
      <dependency ref="pkg:maven/org.apache.kerby/kerby-config@1.0.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.kerby/kerb-core@1.0.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.kerby/kerb-crypto@1.0.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.kerby/token-provider@1.0.1?type=jar">
      <dependency ref="pkg:maven/org.apache.kerby/kerb-core@1.0.1?type=jar"/>
      <dependency ref="pkg:maven/com.nimbusds/nimbus-jose-jwt@3.10?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.nimbusds/nimbus-jose-jwt@3.10?type=jar">
      <dependency ref="pkg:maven/net.jcip/jcip-annotations@1.0?type=jar"/>
      <dependency ref="pkg:maven/net.minidev/json-smart@1.3.1?type=jar"/>
      <dependency ref="pkg:maven/org.bouncycastle/bcprov-jdk15on@1.52?type=jar"/>
      <dependency ref="pkg:maven/commons-io/commons-io@2.15.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/net.jcip/jcip-annotations@1.0?type=jar"/>
    <dependency ref="pkg:maven/net.minidev/json-smart@1.3.1?type=jar"/>
    <dependency ref="pkg:maven/org.bouncycastle/bcprov-jdk15on@1.52?type=jar"/>
    <dependency ref="pkg:maven/org.apache.kerby/kerb-admin@1.0.1?type=jar">
      <dependency ref="pkg:maven/org.apache.kerby/kerb-server@1.0.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.kerby/kerb-util@1.0.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.kerby/kerby-xdr@1.0.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.kerby/kerb-server@1.0.1?type=jar">
      <dependency ref="pkg:maven/org.apache.kerby/kerb-common@1.0.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.kerby/kerb-identity@1.0.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.kerby/kerb-identity@1.0.1?type=jar">
      <dependency ref="pkg:maven/org.apache.kerby/kerby-config@1.0.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.kerby/kerb-core@1.0.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.kerby/kerby-xdr@1.0.1?type=jar"/>
    <dependency ref="pkg:maven/io.confluent.flink/flink-streaming-java@1.19.2-cp2?classifier=tests&amp;type=test-jar">
      <dependency ref="pkg:maven/io.confluent.flink/flink-core@1.19.2-cp2?type=jar"/>
      <dependency ref="pkg:maven/io.confluent.flink/flink-file-sink-common@1.19.2-cp2?type=jar"/>
      <dependency ref="pkg:maven/io.confluent.flink/flink-runtime@1.19.2-cp2?type=jar"/>
      <dependency ref="pkg:maven/io.confluent.flink/flink-java@1.19.2-cp2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-guava@31.1-jre-17.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-math3@3.6.1?type=jar"/>
      <dependency ref="pkg:maven/io.confluent.flink/flink-connector-datagen@1.19.2-cp2?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/io.confluent.flink/flink-statebackend-rocksdb@1.19.2-cp2?type=jar">
      <dependency ref="pkg:maven/com.ververica/frocksdbjni@6.20.3-ververica-2.0?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.ververica/frocksdbjni@6.20.3-ververica-2.0?type=jar"/>
    <dependency ref="pkg:maven/io.confluent.flink/flink-statebackend-changelog@1.19.2-cp2?type=jar">
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-guava@31.1-jre-17.0?type=jar"/>
      <dependency ref="pkg:maven/io.confluent.flink/flink-statebackend-common@1.19.2-cp2?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/io.confluent.flink/flink-statebackend-common@1.19.2-cp2?type=jar">
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-guava@31.1-jre-17.0?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/io.confluent.flink/flink-dstl-dfs@1.19.2-cp2?type=jar">
      <dependency ref="pkg:maven/io.confluent.flink/flink-core@1.19.2-cp2?type=jar"/>
      <dependency ref="pkg:maven/io.confluent.flink/flink-runtime@1.19.2-cp2?type=jar"/>
      <dependency ref="pkg:maven/io.confluent.flink/flink-streaming-java@1.19.2-cp2?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.curator/curator-test@5.4.0?type=jar">
      <dependency ref="pkg:maven/org.apache.zookeeper/zookeeper@3.7.1?type=jar"/>
      <dependency ref="pkg:maven/io.dropwizard.metrics/metrics-core@3.2.5?type=jar"/>
      <dependency ref="pkg:maven/org.xerial.snappy/snappy-java@1.1.10.4?type=jar"/>
      <dependency ref="pkg:maven/com.google.guava/guava@31.1-jre?type=jar"/>
      <dependency ref="pkg:maven/org.junit.jupiter/junit-jupiter-api@5.10.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.zookeeper/zookeeper@3.7.1?type=jar">
      <dependency ref="pkg:maven/org.apache.zookeeper/zookeeper-jute@3.7.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.yetus/audience-annotations@0.12.0?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.zookeeper/zookeeper-jute@3.7.1?type=jar">
      <dependency ref="pkg:maven/org.apache.yetus/audience-annotations@0.12.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.yetus/audience-annotations@0.12.0?type=jar"/>
    <dependency ref="pkg:maven/io.dropwizard.metrics/metrics-core@3.2.5?type=jar"/>
    <dependency ref="pkg:maven/com.google.guava/guava@31.1-jre?type=jar">
      <dependency ref="pkg:maven/com.google.guava/failureaccess@1.0.1?type=jar"/>
      <dependency ref="pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"/>
      <dependency ref="pkg:maven/org.checkerframework/checker-qual@3.12.0?type=jar"/>
      <dependency ref="pkg:maven/com.google.errorprone/error_prone_annotations@2.11.0?type=jar"/>
      <dependency ref="pkg:maven/com.google.j2objc/j2objc-annotations@1.3?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.google.guava/failureaccess@1.0.1?type=jar"/>
    <dependency ref="pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar"/>
    <dependency ref="pkg:maven/org.checkerframework/checker-qual@3.12.0?type=jar"/>
    <dependency ref="pkg:maven/com.google.errorprone/error_prone_annotations@2.11.0?type=jar"/>
    <dependency ref="pkg:maven/com.google.j2objc/j2objc-annotations@1.3?type=jar"/>
    <dependency ref="pkg:maven/org.apache.flink/flink-shaded-force-shading@17.0?type=jar"/>
  </dependencies>
</bom>
