{ "bomFormat" : "CycloneDX", "specVersion" : "1.5", "serialNumber" : "urn:uuid:3960a737-7b97-3d9f-8e09-4f5a546b99df", "version" : 1, "metadata" : { "timestamp" : "2025-11-11T14:38:26Z", "lifecycles" : [ { "phase" : "build" } ], "tools" : { "components" : [ { "type" : "library", "author" : "OWASP Foundation", "group" : "org.cyclonedx", "name" : "cyclonedx-maven-plugin", "version" : "2.9.0", "description" : "CycloneDX Maven plugin", "hashes" : [ { "alg" : "MD5", "content" : "dfaeab7ec837ce07874e2ee66fdc57d3" }, { "alg" : "SHA-1", "content" : "8bab47bafc8183d0a5f37790ff55ed05ead1ae2d" }, { "alg" : "SHA-256", "content" : "67117e03eae4a03ca8bab3add044995f4899aa21798a2510b8265ef8101e90ac" }, { "alg" : "SHA-512", "content" : "ae6b706516bb76da806b7854aef9e348fa593f5159ae9d693ad38942165c0ebc0846d977a477f6029612d43468fd2cd73a5aa253c228a94fb8d184e0acefc3d2" }, { "alg" : "SHA-384", "content" : "ee872354d8b0dcd6f9835a913b3aaba70d9365a46043be78020183282a1e9fca812e969246cbe31d642541591b46648b" } ] } ] }, "component" : { "type" : "library", "bom-ref" : "pkg:maven/io.confluent/kafka-schema-converter@7.7.7?type=jar", "publisher" : "Confluent, Inc.", "group" : "io.confluent", "name" : "kafka-schema-converter", "version" : "7.7.7", "description" : "Schema Registry provides a RESTful interface for storing and retrieving versioned Avro schemas for use with Kafka.", "licenses" : [ { "license" : { "id" : "Apache-2.0", "url" : "https://www.apache.org/licenses/LICENSE-2.0" } } ], "purl" : "pkg:maven/io.confluent/kafka-schema-converter@7.7.7?type=jar", "externalReferences" : [ { "type" : "website", "url" : "http://confluent.io/kafka-schema-converter" }, { "type" : "distribution-intake", "url" : "s3://staging-confluent-packages-maven-654654529379-us-west-2/v7.7.7-rc251111125610/maven" }, { "type" : "vcs", "url" : "https://github.com/confluentinc/schema-registry/kafka-schema-converter" } ] }, "properties" : [ { "name" : "maven.goal", "value" : "makeBom" }, { "name" : "maven.scopes", "value" : "compile,provided,runtime,system,test" } ] }, "components" : [ { "type" : "library", "bom-ref" : "pkg:maven/org.apache.kafka/connect-api@7.7.7-ccs?type=jar", "group" : "org.apache.kafka", "name" : "connect-api", "version" : "7.7.7-ccs", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "9a85bb95263b5a6cf53f2da178aca8e3" }, { "alg" : "SHA-1", "content" : "47230fee83630e35c01009382b4814b5fe69637d" }, { "alg" : "SHA-256", "content" : "d1072854b23ef145bdbfc2f97c09c4e96f92118078ba927c76b512482e2dfb98" }, { "alg" : "SHA-512", "content" : "c30b48b76377081eb6068ac4cecbbf9505581a06714ae32f1a917e4d3aff6eaa46043ccc12d9dad55e933c88a9958937647ca3b34e1d017696e9a58d785d77fc" }, { "alg" : "SHA-384", "content" : "5df25597d1749616ae0ec057e696b2ecb130c3487cad18fa736d511f21cca0b4eba16ed1c4da03eff2f707c5a7715c80" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/org.apache.kafka/connect-api@7.7.7-ccs?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://kafka.apache.org" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/org.apache.kafka/kafka-clients@7.7.7-ccs?type=jar", "group" : "org.apache.kafka", "name" : "kafka-clients", "version" : "7.7.7-ccs", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "1ab8af3645e18311362e712e9e4b4429" }, { "alg" : "SHA-1", "content" : "ffc6989e2fee86742102cdea8f91478c8dbd0639" }, { "alg" : "SHA-256", "content" : "8dc3c7097c52a4bc1a7f3046b2217b122deb245c202af85c911bb7876c813734" }, { "alg" : "SHA-512", "content" : "8b8357321e4920375dd6c100af99fbd9c715321cb9f7e195524e59ef46a3b59b9906ad86b297580e0ec5d2925cb16e9189d03a022498ef9b1a8bb2cdd25ee248" }, { "alg" : "SHA-384", "content" : "3e92ed3109f5af33b910c8fe8034d49cdf5971ba0187bbce3a8d4401cba8ed9f76c7897e3c10c1928046f62e7b4e3e49" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/org.apache.kafka/kafka-clients@7.7.7-ccs?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://kafka.apache.org" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/com.github.luben/zstd-jni@1.5.6-4?type=jar", "publisher" : "com.github.luben", "group" : "com.github.luben", "name" : "zstd-jni", "version" : "1.5.6-4", "description" : "JNI bindings for Zstd native library that provides fast and high compression lossless algorithm for Java and all JVM languages.", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "808e96f7bc2d4a3c5f68e95786f74cc9" }, { "alg" : "SHA-1", "content" : "ba9e303e0b5e94cdd0017390d7d8c06f47fd61f7" }, { "alg" : "SHA-256", "content" : "793ca8734aa15687e7e64564eab8b6ae9ee2720eae27aa663074682144b1c386" }, { "alg" : "SHA-512", "content" : "91ae51e05bfe322e18875cd158f311a0aaef62059fd391b83c4d06447f31518863654fc218891eb99f72def102964c01d8122c73890498fef7288f060cb29e88" }, { "alg" : "SHA-384", "content" : "0c56933ba08e88187767e688325fdc8e281e8cb2838d6125819da484df8ecf07bfe0b88c9a5b12049efb24f8711f6f76" } ], "licenses" : [ { "license" : { "id" : "BSD-2-Clause" } } ], "purl" : "pkg:maven/com.github.luben/zstd-jni@1.5.6-4?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://github.com/luben/zstd-jni" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/org.lz4/lz4-java@1.8.0?type=jar", "group" : "org.lz4", "name" : "lz4-java", "version" : "1.8.0", "description" : "Java ports and bindings of the LZ4 compression algorithm and the xxHash hashing algorithm", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "936a927700aa8fc3b75d21d7571171f6" }, { "alg" : "SHA-1", "content" : "4b986a99445e49ea5fbf5d149c4b63f6ed6c6780" }, { "alg" : "SHA-256", "content" : "d74a3334fb35195009b338a951f918203d6bbca3d1d359033dc33edd1cadc9ef" }, { "alg" : "SHA-512", "content" : "98d59086a6021ca571d9c1d64b715e43044c730e1ac563f514c40cf44302615d30378b6d5cc69990446522de6260dc8e7b303e3990a3139dc326d058dfb6dbd9" }, { "alg" : "SHA-384", "content" : "8e3f2acdbb41a00c4d9cc5f328e63fb626ac7c6c84e1bf9502e2fcc76a591b2b819b2d27b29925ff986b95c297b30e2c" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/org.lz4/lz4-java@1.8.0?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://github.com/lz4/lz4-java" }, { "type" : "vcs", "url" : "git://github.com/lz4/lz4-java.git" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/org.xerial.snappy/snappy-java@1.1.10.5?type=jar", "publisher" : "xerial.org", "group" : "org.xerial.snappy", "name" : "snappy-java", "version" : "1.1.10.5", "description" : "snappy-java: A fast compression/decompression library", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "a52ffcdbbe525b486237a7098e5c5ff7" }, { "alg" : "SHA-1", "content" : "ac605269f3598506196e469f1fb0d7ed5c55059e" }, { "alg" : "SHA-256", "content" : "0f3f1857ed33116583f480b4df5c0218836c47bfbc9c6221c0d73f356decf37b" }, { "alg" : "SHA-512", "content" : "36c288aa84017b52362a49a20d1702151a16b9f58518b6877f11122941a549d94fab8d515f7f1ad6384fb94be569328abf862edaf970c10a16832498dfda853b" }, { "alg" : "SHA-384", "content" : "693a542ca2471dec4da5fe582563aff1bf5238e1a8d1a1f79cd8138334f94f1112094fbd270b1637d983c9290084a6e1" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0", "url" : "https://www.apache.org/licenses/LICENSE-2.0" } } ], "purl" : "pkg:maven/org.xerial.snappy/snappy-java@1.1.10.5?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://github.com/xerial/snappy-java" }, { "type" : "vcs", "url" : "https://github.com/xerial/snappy-java" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar", "publisher" : "QOS.ch", "group" : "org.slf4j", "name" : "slf4j-api", "version" : "1.7.36", "description" : "The slf4j API", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "872da51f5de7f3923da4de871d57fd85" }, { "alg" : "SHA-1", "content" : "6c62681a2f655b49963a5983b8b0950a6120ae14" }, { "alg" : "SHA-256", "content" : "d3ef575e3e4979678dc01bf1dcce51021493b4d11fb7f1be8ad982877c16a1c0" }, { "alg" : "SHA-512", "content" : "f9b033fc019a44f98b16048da7e2b59edd4a6a527ba60e358f65ab88e0afae03a9340f1b3e8a543d49fa542290f499c5594259affa1ff3e6e7bf3b428d4c610b" }, { "alg" : "SHA-384", "content" : "2b14ad035877087157e379d3277dcdcd79e58d6bdb147c47d29e377d75ce53ad42cafbf22f5fb7827c7e946ff4876b9a" } ], "licenses" : [ { "license" : { "id" : "MIT", "url" : "https://opensource.org/license/mit/" } } ], "purl" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar", "externalReferences" : [ { "type" : "website", "url" : "http://www.slf4j.org" }, { "type" : "distribution-intake", "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type" : "vcs", "url" : "https://github.com/qos-ch/slf4j/slf4j-api" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/javax.ws.rs/javax.ws.rs-api@2.1.1?type=jar", "publisher" : "Eclipse Foundation", "group" : "javax.ws.rs", "name" : "javax.ws.rs-api", "version" : "2.1.1", "description" : "Java API for RESTful Web Services", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "23b81452f9e2076ffefede649975b0d1" }, { "alg" : "SHA-1", "content" : "d3466bc9321fe84f268a1adb3b90373fc14b0eb5" }, { "alg" : "SHA-256", "content" : "2c309eb2c9455ffee9da8518c70a3b6d46be2a269b2e2a101c806a537efe79a4" }, { "alg" : "SHA-512", "content" : "308ffdd33a48f85d27988d702e917c1ac607b758155552ea45a251735ff9e5aed7f7fd4b59b6cb683f8b3adb8ac52d5de928635c3c843291e6d17998ba7d4108" }, { "alg" : "SHA-384", "content" : "437b4947c5a6ed2ba8f894ab4c362a6898ec501e695b3655d350f538768f66580fd71712753c185bf7182fe261c4f9af" } ], "licenses" : [ { "license" : { "id" : "EPL-2.0" } }, { "license" : { "id" : "GPL-2.0-with-classpath-exception" } } ], "purl" : "pkg:maven/javax.ws.rs/javax.ws.rs-api@2.1.1?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://github.com/eclipse-ee4j/jaxrs-api" }, { "type" : "distribution-intake", "url" : "https://repo.eclipse.org/content/repositories/jax-rs-api-releases/" }, { "type" : "issue-tracker", "url" : "https://github.com/eclipse-ee4j/jaxrs-api/issues" }, { "type" : "mailing-list", "url" : "jaxrs-dev@eclipse.org" }, { "type" : "vcs", "url" : "https://github.com/eclipse-ee4j/jaxrs-api" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/junit/junit@4.13.2?type=jar", "publisher" : "JUnit", "group" : "junit", "name" : "junit", "version" : "4.13.2", "description" : "JUnit is a unit testing framework for Java, created by Erich Gamma and Kent Beck.", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "d98a9a02a99a9acd22d7653cbcc1f31f" }, { "alg" : "SHA-1", "content" : "8ac9e16d933b6fb43bc7f576336b8f4d7eb5ba12" }, { "alg" : "SHA-256", "content" : "8e495b634469d64fb8acfa3495a065cbacc8a0fff55ce1e31007be4c16dc57d3" }, { "alg" : "SHA-512", "content" : "a31b9950f929a7e5a600d89787ef40e42a8a8e2392e210d0c0f45b3572937670a18a524f1815508cd1152cd1eaa7275cb7430ba45c053be365c83c231bccd3f0" }, { "alg" : "SHA-384", "content" : "9f85c56a77c699eb87630b9e8224068a34c296bcd9aadb52248dd4665036f5bf1048fe75e5cb590b59e7855ca716acae" } ], "licenses" : [ { "license" : { "id" : "EPL-1.0", "url" : "http://www.eclipse.org/legal/epl-v10.html" } } ], "purl" : "pkg:maven/junit/junit@4.13.2?type=jar", "externalReferences" : [ { "type" : "website", "url" : "http://junit.org" }, { "type" : "build-system", "url" : "https://github.com/junit-team/junit4/actions" }, { "type" : "distribution", "url" : "https://github.com/junit-team/junit4/wiki/Download-and-Install" }, { "type" : "distribution-intake", "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type" : "issue-tracker", "url" : "https://github.com/junit-team/junit4/issues" }, { "type" : "vcs", "url" : "https://github.com/junit-team/junit4" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/org.hamcrest/hamcrest-core@1.3?type=jar", "group" : "org.hamcrest", "name" : "hamcrest-core", "version" : "1.3", "description" : "This is the core API of hamcrest matcher framework to be used by third-party framework providers. This includes the a foundation set of matcher implementations for common operations.", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "6393363b47ddcbba82321110c3e07519" }, { "alg" : "SHA-1", "content" : "42a25dc3219429f0e5d060061f71acb49bf010a0" }, { "alg" : "SHA-256", "content" : "66fdef91e9739348df7a096aa384a5685f4e875584cce89386a7a47251c4d8e9" }, { "alg" : "SHA-512", "content" : "e237ae735aac4fa5a7253ec693191f42ef7ddce384c11d29fbf605981c0be077d086757409acad53cb5b9e53d86a07cc428d459ff0f5b00d32a8cbbca390be49" }, { "alg" : "SHA-384", "content" : "4b5297d2a12cc32b824153afc83f1ba9f1869ca288330f0a2f759659d09e4c420eb6ba4a1efbfa0657b625edd41293d5" } ], "licenses" : [ { "license" : { "id" : "BSD-3-Clause" } } ], "purl" : "pkg:maven/org.hamcrest/hamcrest-core@1.3?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://github.com/hamcrest/JavaHamcrest/hamcrest-core" }, { "type" : "vcs", "url" : "https://github.com/hamcrest/JavaHamcrest/hamcrest-core" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/io.confluent/common-utils@7.7.7?type=jar", "publisher" : "Confluent, Inc.", "group" : "io.confluent", "name" : "common-utils", "version" : "7.7.7", "description" : "Common utilities, including metrics and config.", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "19fa714459ba4f7454b8e9cd7c6e1d1b" }, { "alg" : "SHA-1", "content" : "d1e3ae9e392b763ec532245dc74249c9bdde55d9" }, { "alg" : "SHA-256", "content" : "cfcf41c580153be39066234aa48d8858d2063fee882c7bf32f90c7f078b553eb" }, { "alg" : "SHA-512", "content" : "7ef465c634097474deb0f182684479670d9af979badb107f2a2be20ae0cff72fb581c7b5867330873e1ce66ce52f0ba0b529e190bb1183dafa1e946e3467788f" }, { "alg" : "SHA-384", "content" : "85715df56fa4552d54a49d8a6ca6463f78ca7fcb49a88753cfc977e97c8202c8e18c9c6fe4ea50de86c9567911f2d8c6" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0", "url" : "https://www.apache.org/licenses/LICENSE-2.0" } } ], "purl" : "pkg:maven/io.confluent/common-utils@7.7.7?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://confluent.io/common-utils" }, { "type" : "distribution-intake", "url" : "s3://staging-confluent-packages-maven-654654529379-us-west-2/v7.7.7-rc251111125610/maven" }, { "type" : "vcs", "url" : "https://github.com/confluentinc/common/common-utils" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/io.confluent/assembly-plugin-boilerplate@7.7.7?classifier=resources&type=zip", "group" : "io.confluent", "name" : "assembly-plugin-boilerplate", "version" : "7.7.7", "description" : "Maven Assembly Plugin boilerplate for Dockerized projects", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "cc39f240c89dff9d59187f168c16d860" }, { "alg" : "SHA-1", "content" : "4f2b69e6b9742e97d714536601c6c42414d57d51" }, { "alg" : "SHA-256", "content" : "8f46d66b32d0927e6e33be79306b8a3b96ef91d5d2597402a5212def1c6b41b6" }, { "alg" : "SHA-512", "content" : "3900da31a9aad899fd84e5d3db7c0ffea613d767947414b73da71d830d0dd77514a7b074ed5464173e3ec0c771fb9883973787464a48b33c9fde4d2d81c5b687" }, { "alg" : "SHA-384", "content" : "e3d75a9fea68481151a3515cff824d3fabf7945e08783f9a8ada0348ec0c9faca6348f8b43a55b68bdaae46e78316b23" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0", "url" : "https://www.apache.org/licenses/LICENSE-2.0" } } ], "purl" : "pkg:maven/io.confluent/assembly-plugin-boilerplate@7.7.7?classifier=resources&type=zip", "externalReferences" : [ { "type" : "website", "url" : "https://github.com/confluentinc/common" }, { "type" : "distribution-intake", "url" : "s3://staging-confluent-packages-maven-654654529379-us-west-2/v7.7.7-rc251111125610/maven" } ] } ], "dependencies" : [ { "ref" : "pkg:maven/io.confluent/kafka-schema-converter@7.7.7?type=jar", "dependsOn" : [ "pkg:maven/org.apache.kafka/connect-api@7.7.7-ccs?type=jar", "pkg:maven/junit/junit@4.13.2?type=jar", "pkg:maven/io.confluent/common-utils@7.7.7?type=jar", "pkg:maven/io.confluent/assembly-plugin-boilerplate@7.7.7?classifier=resources&type=zip" ] }, { "ref" : "pkg:maven/org.apache.kafka/connect-api@7.7.7-ccs?type=jar", "dependsOn" : [ "pkg:maven/org.apache.kafka/kafka-clients@7.7.7-ccs?type=jar", "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar", "pkg:maven/javax.ws.rs/javax.ws.rs-api@2.1.1?type=jar" ] }, { "ref" : "pkg:maven/org.apache.kafka/kafka-clients@7.7.7-ccs?type=jar", "dependsOn" : [ "pkg:maven/com.github.luben/zstd-jni@1.5.6-4?type=jar", "pkg:maven/org.lz4/lz4-java@1.8.0?type=jar", "pkg:maven/org.xerial.snappy/snappy-java@1.1.10.5?type=jar", "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar" ] }, { "ref" : "pkg:maven/com.github.luben/zstd-jni@1.5.6-4?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/org.lz4/lz4-java@1.8.0?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/org.xerial.snappy/snappy-java@1.1.10.5?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/javax.ws.rs/javax.ws.rs-api@2.1.1?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/junit/junit@4.13.2?type=jar", "dependsOn" : [ "pkg:maven/org.hamcrest/hamcrest-core@1.3?type=jar" ] }, { "ref" : "pkg:maven/org.hamcrest/hamcrest-core@1.3?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/io.confluent/common-utils@7.7.7?type=jar", "dependsOn" : [ "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar" ] }, { "ref" : "pkg:maven/io.confluent/assembly-plugin-boilerplate@7.7.7?classifier=resources&type=zip", "dependsOn" : [ ] } ] }