2024-08-28T06:34:08Z OWASP Foundation CycloneDX Maven plugin 2.7.9 8e595cdb67f17e4b41e046456970591d 69e8ca804520d09ce4657e7235bae84d01cbffa6 aa09074fe5aa403c008cd4fc7ef8ce41cd244489337f16b3e91a3914158a4db8 1488a8112da8e675813d7585f57c5efb178aed32901118186ee12d0e4ae3d19c53774c7f860bf70d17d70f050119b69443a2637cf641675b4b5d9cdcdd69b89b b097295dfbf10887abc6eec58d4d0822cde5a73d1f5c1cf183a57bf569016ad5ced9d34efae3e574d82bb62837540c6c Confluent, Inc. io.confluent kafka-protobuf-types 7.1.14 Schema Registry provides a RESTful interface for storing and retrieving versioned Avro schemas for use with Kafka. Confluent Community License http://www.confluent.io/confluent-community-license Apache-2.0 https://www.apache.org/licenses/LICENSE-2.0 pkg:maven/io.confluent/kafka-protobuf-types@7.1.14?type=jar http://confluent.io/kafka-protobuf-typess3://staging-confluent-packages-maven-654654529379-us-west-2/v7.1.14-rc240828044459/mavenhttps://github.com/confluentinc/schema-registry/kafka-protobuf-types makeBom compile,provided,runtime,system,test com.google.protobuf protobuf-java 3.19.6 Core Protocol Buffers library. Protocol Buffers are a way of encoding structured data in an efficient yet extensible format. required da6ac3361efd3e3dabb08a3da7892648 578a2070b8106d3ea350fc737e777262bdc796b1 6a9a2dff91dcf71f85be71ae971f6164b5a631dcd34bff08f0618535ca44ad02 d144f8ae18bbe18845e3a826e0adb2cd7fcea3c3aa2656e800c7c94213d7e4d40abf2054b4d7dd39f49925c38622a8d8963f6ac9049a569c4de345545982d6c4 c8bfaf5222deb7c102838b418d194abede205960418c56c138356aa18478bc3541cffddb3846bc041313b07e31cdc44c BSD-3-Clause pkg:maven/com.google.protobuf/protobuf-java@3.19.6?type=jar https://developers.google.com/protocol-buffers/protobuf-java/https://oss.sonatype.org/service/local/staging/deploy/maven2/https://github.com/protocolbuffers/protobuf/protobuf-java com.google.protobuf protobuf-java-util 3.19.6 Utilities for Protocol Buffers required c9394e9ef585a7f4ab64297c5b7913fd fa07e79f9f81776bc8f33191e91ec8971b5e12b3 8c536b2ca85f4e0891b85060b9f697e9e61c074c3bcc887916904562d2ef8108 1c82ed8f75dd10887c56376588570ca4c60fbc218cbc8861db7ec7500688b6551efb32b11c0c9e3c0ffadd79cf6e5b80e545f0e374bf944426e5967137b4e38f 5d48349dfbf9d637e7b6453b048480df327ac98046ce779c223b398f8e72e4e194bdedab24e4cade738144289228cf77 BSD-3-Clause pkg:maven/com.google.protobuf/protobuf-java-util@3.19.6?type=jar https://developers.google.com/protocol-buffers/protobuf-java-util/https://oss.sonatype.org/service/local/staging/deploy/maven2/https://github.com/protocolbuffers/protobuf/protobuf-java-util com.google.guava guava 32.0.1-jre Guava is a suite of core and expanded libraries that include utility classes, Google's collections, I/O classes, and much more. required 6951895e804b36322214c95917e598d4 6e5d51a72d142f2d40a57dfb897188b36a95b489 bd7fa227591fb8509677d0d1122cf95158f3b8a9f45653f58281d879f6dc48c5 5dbe7a697511cfbe44f3ffb954e32e997677ecc61f03bb7bb374f1b8fa4a931a95cd9d1f5288eb5d42e2aa380e3241b35059786c07edc48e5aa67c30cddad8a5 abad4556e073fb38062c636b6599ceed992302c7d98150e3842d32ce92f6aac7d630633c56efa581523d591361fcf898 Apache-2.0 pkg:maven/com.google.guava/guava@32.0.1-jre?type=jar https://github.com/google/guavahttps://github.com/google/guava/actionshttps://oss.sonatype.org/service/local/staging/deploy/maven2/https://github.com/google/guava/issueshttps://github.com/google/guava/guava com.google.guava failureaccess 1.0.1 Contains com.google.common.util.concurrent.internal.InternalFutureFailureAccess and InternalFutures. Most users will never need to use this artifact. Its classes is conceptually a part of Guava, but they're in this separate artifact so that Android libraries can use them without pulling in all of Guava (just as they can use ListenableFuture by depending on the listenablefuture artifact). required 091883993ef5bfa91da01dcc8fc52236 1dcf1de382a0bf95a3d8b0849546c88bac1292c9 a171ee4c734dd2da837e4b16be9df4661afab72a41adaf31eb84dfdaf936ca26 f8d59b808d6ba617252305b66d5590937da9b2b843d492d06b8d0b1b1f397e39f360d5817707797b979a5bf20bf21987b35333e7a15c44ed7401fea2d2119cae 67659dbd9647ec303d7f15128dc9dba19b98fd8d74758ee3b602451e32c855e236ccaafe08edf4bbfa245f981268440f Apache-2.0 pkg:maven/com.google.guava/failureaccess@1.0.1?type=jar https://github.com/google/guava/failureaccesshttps://travis-ci.org/google/guavahttps://oss.sonatype.org/service/local/staging/deploy/maven2/https://github.com/google/guava/issueshttps://github.com/google/guava/failureaccess com.google.guava listenablefuture 9999.0-empty-to-avoid-conflict-with-guava An empty artifact that Guava depends on to signal that it is providing ListenableFuture -- but is also available in a second "version" that contains com.google.common.util.concurrent.ListenableFuture class, without any other Guava classes. The idea is: - If users want only ListenableFuture, they depend on listenablefuture-1.0. - If users want all of Guava, they depend on guava, which, as of Guava 27.0, depends on listenablefuture-9999.0-empty-to-avoid-conflict-with-guava. The 9999.0-... version number is enough for some build systems (notably, Gradle) to select that empty artifact over the "real" listenablefuture-1.0 -- avoiding a conflict with the copy of ListenableFuture in guava itself. If users are using an older version of Guava or a build system other than Gradle, they may see class conflicts. If so, they can solve them by manually excluding the listenablefuture artifact or manually forcing their build systems to use 9999.0-.... required d094c22570d65e132c19cea5d352e381 b421526c5f297295adef1c886e5246c39d4ac629 b372a037d4230aa57fbeffdef30fd6123f9c0c2db85d0aced00c91b974f33f99 c5987a979174cbacae2e78b319f080420cc71bcdbcf7893745731eeb93c23ed13bff8d4599441f373f3a246023d33df03e882de3015ee932a74a774afdd0782f caff9b74079f95832ca7f6029346b34b606051cc8c5a4389fac263511d277ada0c55f28b0d43011055b268c6eb7184d5 Apache-2.0 pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar https://github.com/google/guava/listenablefuturehttps://travis-ci.org/google/guavahttps://oss.sonatype.org/service/local/staging/deploy/maven2/https://github.com/google/guava/issueshttps://github.com/google/guava/listenablefuture org.checkerframework checker-qual 3.33.0 checker-qual contains annotations (type qualifiers) that a programmer writes to specify Java code for type-checking by the Checker Framework. required fc9418b779d9d57dcd52197006cbdb9b de2b60b62da487644fc11f734e73c8b0b431238f e316255bbfcd9fe50d165314b85abb2b33cb2a66a93c491db648e498a82c2de1 049c446677b7b386f3fb501bf65e032bdf2b1b29a3f545848035fff2b683cd275380cf302e30eea641af7f0801f779bcda3d82a71d928e4176f564f796640a64 ddf7a0f70421d1ed75e93c0a30434a4862c3905e433223e19861323cf0994e843392b746003040f10a7db6fc960b8aa6 MIT pkg:maven/org.checkerframework/checker-qual@3.33.0?type=jar https://checkerframework.org/https://github.com/typetools/checker-framework.git com.google.errorprone error_prone_annotations 2.5.1 Sonatype helps open source projects to set up Maven repositories on https://oss.sonatype.org/ required 2bf3239388cf5c817cd83ecb692b045f 562d366678b89ce5d6b6b82c1a073880341e3fba ff80626baaf12a09342befd4e84cba9d50662f5fcd7f7a9b3490a6b7cf87e66c 24d512c97bbea2b972addff6bb28b9e7edae62249dfb6693835f077fe239395bb15ce82ad58d4ee42d8c4891a0e62b51398450ad6c9dec473173eacb6c6bcd3a f6d6abc35181b26b4dc66ceafd20f0712f881d9ff4043f39c82bb37ac22dcc7c7850fcc6e125d480f657f1c06b343e9a Apache-2.0 pkg:maven/com.google.errorprone/error_prone_annotations@2.5.1?type=jar http://nexus.sonatype.org/oss-repository-hosting.html/error_prone_parent/error_prone_annotationshttps://oss.sonatype.org/service/local/staging/deploy/maven2/https://github.com/google/error-prone/error_prone_annotations com.google.j2objc j2objc-annotations 1.3 A set of annotations that provide additional information to the J2ObjC translator to modify the result of translation. required 5fa4ec4ec0c5aa70af8a7d4922df1931 ba035118bc8bac37d7eff77700720999acd9986d 21af30c92267bd6122c0e0b4d20cccb6641a37eaf956c6540ec471d584e64a7b 51ea975179f809cb260751d11a513881b643bf016d15949bcb63b57d3c8868a2197e0620ccbaa5739e032797ec6faa3aa6d64606e999fce32930314780ca4115 d2a54e4bb17793a98f85fb8f91138cd3b3d311385b7fb2c09d05c3112d42218a6da29154ba184f00031919548022aa71 Apache-2.0 pkg:maven/com.google.j2objc/j2objc-annotations@1.3?type=jar https://github.com/google/j2objc/https://oss.sonatype.org/service/local/staging/deploy/maven2/http://svn.sonatype.org/spice/tags/oss-parent-7/j2objc-annotations com.google.code.findbugs jsr305 3.0.2 JSR305 Annotations for Findbugs required dd83accb899363c32b07d7a1b2e4ce40 25ea2e8b0c338a877313bd4672d3fe056ea78f0d 766ad2a0783f2687962c8ad74ceecc38a28b9f72a2d085ee438b7813e928d0c7 bb09db62919a50fa5b55906013be6ca4fc7acb2e87455fac5eaf9ede2e41ce8bbafc0e5a385a561264ea4cd71bbbd3ef5a45e02d63277a201d06a0ae1636f804 ca0b169d3eb2d0922dc031133a021f861a043bb3e405a88728215fd6ff00fa52fdc7347842dcc2031472e3726164bdc4 Apache-2.0 pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar http://findbugs.sourceforge.net/https://oss.sonatype.org/service/local/staging/deploy/maven2/https://code.google.com/p/jsr-305/ com.google.code.gson gson 2.9.0 Gson JSON library required 53fa3e6753e90d931d62cb89580fde2f 8a1167e089096758b49f9b34066ef98b2f4b37aa c96d60551331a196dac54b745aa642cd078ef89b6f267146b705f2c2cbef052d 13ff22a60ee6a72ba0c4e8fe3702b8f3f6be6b67ed4279079a9843f57ad0ca125d4ecc1564ac4e736eab10fb6254d2c011b2c08c514d708be7f8091332ed2c2c fde5b61066a8cdd711874ed42f20cb914e4193f1477456c431fb0ca32d86324414e92b0b2c5696f56d0b9d69521d8dee Apache-2.0 https://www.apache.org/licenses/LICENSE-2.0 pkg:maven/com.google.code.gson/gson@2.9.0?type=jar https://github.com/google/gson/gsonhttps://oss.sonatype.org/service/local/staging/deploy/maven2/https://github.com/google/gson/issueshttps://github.com/google/gson/gson/ Google LLC com.google.api.grpc proto-google-common-protos 2.22.1 PROTO library for proto-google-common-protos required 09ec07d7c038fb5d16a6c39777ff653f ef4c6423126ce60fd80da3a685a429b0c6f2528b b0642455c9b3fbbf9bd805c3a31bdaf865b5f1d3b535df5874219e5eeaf75c37 83efa7c22de348916289940b1b36cb7bc40e1970635fa63f629d2a104d24e615699f80038526c684a5e8933fab3c3eedf0358eb909b995547c428a43470d3cb6 cbd8736c6c2e7efc202edd0a5cc9ec34667c58e3cd15c5ba587ebd1136c6beabae0008e924792e319296af66a42d231e Apache-2.0 https://www.apache.org/licenses/LICENSE-2.0 pkg:maven/com.google.api.grpc/proto-google-common-protos@2.22.1?type=jar https://github.com/googleapis/sdk-platform-javahttps://google.oss.sonatype.org/service/local/staging/deploy/maven2/https://github.com/googleapis/sdk-platform-java/issueshttps://github.com/googleapis/sdk-platform-java org.mockito mockito-core 3.11.2 Mockito mock objects library core API and implementation required df9ab9acb7d1611fc504100ecbe0ca14 bb97012477172d7c04ff2193e31fcb38dd171879 a135e56bca2f0afec578f15e72f2c29050b66821c7f58e4aaaf3dbfffae7f904 d2e4fcb088856a2027a54c135a1c1b340113caa341852c4834f6413d3253544f85285a3d6c913ac2a58a6a8f86249c6a00c435cb42857101484e12c97f592301 4a3615d2ddbe1d19d257e5f9ca38a5a50d1d69a7fe46c7c8c8f0372b3288aa7a9c3cec367ecb58418470e5db95b864b2 MIT pkg:maven/org.mockito/mockito-core@3.11.2?type=jar https://github.com/mockito/mockitohttps://github.com/mockito/mockito/actionshttps://github.com/mockito/mockito/issueshttps://github.com/mockito/mockito.git net.bytebuddy byte-buddy 1.11.3 Byte Buddy is a Java library for creating Java classes at run time. This artifact is a build of Byte Buddy with all ASM dependencies repackaged into its own name space. required 294befea1a81276eaf4f094a0e2779ef c2a818c3b71127167edff8b9dd1caa946f1c8c49 7c21260b3b5f22b4042aa83ab49dd673078aed7e4d01f7de021de2d73facbfee 93ce82b0c66bcaaadfe4fa2183533a9f0b79451f4271a5f4e0551949d8f2579c11f2584a2b6751efff38b7f7a03700fee6c3942e7afc0de67fd4d29a4b1375d4 80bbd3c8e0cd58d98ac9e4ea1c20a52e0d7514651d01a5203d46feab44ba0635734a70551ffe74cacff1325f216b8680 Apache-2.0 pkg:maven/net.bytebuddy/byte-buddy@1.11.3?type=jar https://bytebuddy.net/byte-buddyhttps://oss.sonatype.org/service/local/staging/deploy/maven2https://github.com/raphw/byte-buddy/issues net.bytebuddy byte-buddy-agent 1.11.3 The Byte Buddy agent offers convenience for attaching an agent to the local or a remote VM. required 8d8a9410791829c64e9b3eefad3d65df 5f479f9714aa0bbde019d3ad04f728fc47f0f16f a908312b82c3fe6b245cf4513be447be83f80b6aff2896211ca5622d51ea6106 1e8d06f4bfd58b10e774659ece2d3ee421fd45f987f21cbfe91e19e489f62ced96586300cb1f1aeeb390981acc87ad00880c127fb95529e3e3f677fd15163022 cc142ec3522b856031c9d526f1ad6ff6c3eb867c00f03387cf97926a95ae560724062c235714271aa9aa562e639a5d39 Apache-2.0 pkg:maven/net.bytebuddy/byte-buddy-agent@1.11.3?type=jar https://bytebuddy.net/byte-buddy-agenthttps://oss.sonatype.org/service/local/staging/deploy/maven2https://github.com/raphw/byte-buddy/issues Joe Walnes, Henri Tremblay, Leonardo Mesquita org.objenesis objenesis 3.2 A library for instantiating Java objects required 5c1ee20481a06561af295034ea89c4b4 7fadf57620c8b8abdf7519533e5527367cb51f09 03d960bd5aef03c653eb000413ada15eb77cdd2b8e4448886edf5692805e35f3 13dbec3062b19c5b9920c0b69e842a9648f2a148c57b6977d90deea22b829cdbce4eaff1ae7763f397f6465ccb35b31e097078de507dc6de25cb95ec796045f7 7d70ab00e728b4233e38729f0eb392d14e828e857421ad66fc678cd162cf22d34958993d5c38fd8a0d8355d3859b763e Apache-2.0 pkg:maven/org.objenesis/objenesis@3.2?type=jar http://objenesis.org/objenesishttps://oss.sonatype.org/service/local/staging/deploy/maven2/https://github.com/easymock/objenesis/objenesis JUnit junit junit 4.13.1 JUnit is a unit testing framework for Java, created by Erich Gamma and Kent Beck. required 83d91f209ddcb104776fa41c448c7ee2 cdd00374f1fee76b11e2a9d127405aa3f6be5b6a c30719db974d6452793fe191b3638a5777005485bae145924044530ffa5f6122 29769fb462c7db2fcca6de3a24b445ae252a7570950f9a2163e14c478f854e47056444d90b2d40f4cf4e3f37c03faacf694c2db12763e173c44362af50176b1f f98da9852bdc5fc022399a85c1fa234ba80d3bf8f492034971175f70464cd9f2d08d65954f92f33ae250050d9f5ae160 EPL-1.0 http://www.eclipse.org/legal/epl-v10.html pkg:maven/junit/junit@4.13.1?type=jar http://junit.orghttps://travis-ci.org/junit-team/junit4https://github.com/junit-team/junit4/wiki/Download-and-Installhttps://github.com/junit-team/junit4/issueshttps://github.com/junit-team/junit4 org.hamcrest hamcrest-core 1.3 This is the core API of hamcrest matcher framework to be used by third-party framework providers. This includes the a foundation set of matcher implementations for common operations. required 6393363b47ddcbba82321110c3e07519 42a25dc3219429f0e5d060061f71acb49bf010a0 66fdef91e9739348df7a096aa384a5685f4e875584cce89386a7a47251c4d8e9 e237ae735aac4fa5a7253ec693191f42ef7ddce384c11d29fbf605981c0be077d086757409acad53cb5b9e53d86a07cc428d459ff0f5b00d32a8cbbca390be49 4b5297d2a12cc32b824153afc83f1ba9f1869ca288330f0a2f759659d09e4c420eb6ba4a1efbfa0657b625edd41293d5 BSD-3-Clause pkg:maven/org.hamcrest/hamcrest-core@1.3?type=jar https://github.com/hamcrest/JavaHamcrest/hamcrest-corehttps://github.com/hamcrest/JavaHamcrest/hamcrest-core Confluent, Inc. io.confluent common-utils 7.1.14 Common utilities, including metrics and config. required 834b5ea93993bc6a44082a4d6672e227 e6047bc4332b3238cb07ce89593b16d9496f7a78 336248646f67da8b62864329095201dabedbb9197c69dbbe1955e2ed26aafed0 553aa8afb69250cb26c76ad55b1feeca02ab88be9f937bfb2c2dda4849ceca991f4d513819b1132f24574bfee0af7e539954aafdf9683b73c6b80c312a7af4cc 732c07a662dbbe0ac98916fe89e61195beb59b9e4f56c17c1232636fb20f5ef08d4003c90e40bb16b390795ca80340ea Apache-2.0 https://www.apache.org/licenses/LICENSE-2.0 pkg:maven/io.confluent/common-utils@7.1.14?type=jar https://confluent.io/common-utilss3://staging-confluent-packages-maven-654654529379-us-west-2/v7.1.14-rc240828044459/mavenhttps://github.com/confluentinc/common/common-utils QOS.ch org.slf4j slf4j-api 1.7.36 The slf4j API required 872da51f5de7f3923da4de871d57fd85 6c62681a2f655b49963a5983b8b0950a6120ae14 d3ef575e3e4979678dc01bf1dcce51021493b4d11fb7f1be8ad982877c16a1c0 f9b033fc019a44f98b16048da7e2b59edd4a6a527ba60e358f65ab88e0afae03a9340f1b3e8a543d49fa542290f499c5594259affa1ff3e6e7bf3b428d4c610b 2b14ad035877087157e379d3277dcdcd79e58d6bdb147c47d29e377d75ce53ad42cafbf22f5fb7827c7e946ff4876b9a MIT https://opensource.org/licenses/MIT pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar http://www.slf4j.orghttps://oss.sonatype.org/service/local/staging/deploy/maven2/https://github.com/qos-ch/slf4j/slf4j-api io.confluent assembly-plugin-boilerplate 7.1.14 required 43ab04e650687b2affdcc5891fac197c a9477e46a7d82f0869b81cd456f41ee8129d0d17 9f32ce1ac131f34c6e525f87c5b0b3011a4e9f97f2866c53374d0070dcf810be c94fa6c1c541c6ce14e407dd244352f248811de4f465f637bb1b32d881d3fbe84e735aef27cfbc9fa8f819dfa490a340ea7d2a13f8353402227876499163d68e ae4a9e151a53bedb7daf4002b2bc50051e20b99ddccae6745ab0b94f9b32788b639cb4436b800c332d7866c7423554f4 pkg:maven/io.confluent/assembly-plugin-boilerplate@7.1.14?classifier=resources&type=zip