{
  "bomFormat" : "CycloneDX",
  "specVersion" : "1.5",
  "serialNumber" : "urn:uuid:b1be5bec-0e85-3e21-b0bc-a11c190d48a6",
  "version" : 1,
  "metadata" : {
    "timestamp" : "2026-03-12T10:14:54Z",
    "lifecycles" : [
      {
        "phase" : "build"
      }
    ],
    "tools" : {
      "components" : [
        {
          "type" : "library",
          "author" : "OWASP Foundation",
          "group" : "org.cyclonedx",
          "name" : "cyclonedx-maven-plugin",
          "version" : "2.9.0",
          "description" : "CycloneDX Maven plugin",
          "hashes" : [
            {
              "alg" : "MD5",
              "content" : "dfaeab7ec837ce07874e2ee66fdc57d3"
            },
            {
              "alg" : "SHA-1",
              "content" : "8bab47bafc8183d0a5f37790ff55ed05ead1ae2d"
            },
            {
              "alg" : "SHA-256",
              "content" : "67117e03eae4a03ca8bab3add044995f4899aa21798a2510b8265ef8101e90ac"
            },
            {
              "alg" : "SHA-512",
              "content" : "ae6b706516bb76da806b7854aef9e348fa593f5159ae9d693ad38942165c0ebc0846d977a477f6029612d43468fd2cd73a5aa253c228a94fb8d184e0acefc3d2"
            },
            {
              "alg" : "SHA-384",
              "content" : "ee872354d8b0dcd6f9835a913b3aaba70d9365a46043be78020183282a1e9fca812e969246cbe31d642541591b46648b"
            }
          ]
        }
      ]
    },
    "component" : {
      "type" : "library",
      "bom-ref" : "pkg:maven/io.confluent/monitoring-interceptors@7.9.6?type=jar",
      "publisher" : "Confluent, Inc.",
      "group" : "io.confluent",
      "name" : "monitoring-interceptors",
      "version" : "7.9.6",
      "description" : "Control Center for Kafka.",
      "licenses" : [
        {
          "license" : {
            "name" : "Confluent License Agreement",
            "url" : "https://www.confluent.io/legal/confluent-license-agreement/"
          }
        }
      ],
      "purl" : "pkg:maven/io.confluent/monitoring-interceptors@7.9.6?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://confluent.io/monitoring-interceptors"
        },
        {
          "type" : "distribution-intake",
          "url" : "s3://staging-confluent-packages-maven-654654529379-us-west-2/v7.9.6-rc260312075158/maven"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/confluentinc/blueway/monitoring-interceptors"
        }
      ]
    },
    "properties" : [
      {
        "name" : "maven.goal",
        "value" : "makeBom"
      },
      {
        "name" : "maven.scopes",
        "value" : "compile,provided,runtime,system,test"
      }
    ]
  },
  "components" : [
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/io.confluent/confluent-serializers-new@7.9.6-ce?type=jar",
      "group" : "io.confluent",
      "name" : "confluent-serializers-new",
      "version" : "7.9.6-ce",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "66de69b99d9ff699c033006ecd561c02"
        },
        {
          "alg" : "SHA-1",
          "content" : "84610634d520f0b730ef1747ebcff7078238f510"
        },
        {
          "alg" : "SHA-256",
          "content" : "f26da96f17d93c2654b0a539700ae7d788948ebdfa42030a4f103e644c6bc0e9"
        },
        {
          "alg" : "SHA-512",
          "content" : "8c351b578ee5b29ec69754a46eb53202f92c743a078b1a0e7602f2c07def12a7e1f0e1993eb73516e240ce0609473405f6e7e64f3807456a7772e75b56b3242e"
        },
        {
          "alg" : "SHA-384",
          "content" : "e38cadb6661ae76e06d4f1379aafc595d8c078d4f5ebad18c219f02d232d5111ed96316cff66dac089b07dbf6f95601c"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "Confluent License Agreement",
            "url" : "https://www.confluent.io/legal/confluent-license-agreement/"
          }
        }
      ],
      "purl" : "pkg:maven/io.confluent/confluent-serializers-new@7.9.6-ce?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://docs.confluent.io/platform/current/get-started/platform.html"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.protobuf/protobuf-java@3.25.5?type=jar",
      "group" : "com.google.protobuf",
      "name" : "protobuf-java",
      "version" : "3.25.5",
      "description" : "Core Protocol Buffers library. Protocol Buffers are a way of encoding structured data in an efficient yet extensible format.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "639cfcf9717cf4e4dd9e808e6f8d24a4"
        },
        {
          "alg" : "SHA-1",
          "content" : "5ae5c9ec39930ae9b5a61b32b93288818ec05ec1"
        },
        {
          "alg" : "SHA-256",
          "content" : "8540247fad9e06baefa8fb45eb313802d019f485f14300e0f9d6b556ed88e753"
        },
        {
          "alg" : "SHA-512",
          "content" : "432d8a9359e614d38fe416b7a4564aed3e358fd5f3c2c4f22caf97945a0f3e5cbd2220b690d6b822504e7bcbbd67458eb12d232232dd113f804683a172f8eb71"
        },
        {
          "alg" : "SHA-384",
          "content" : "e78be1eae5721143fa31d5e13b2219158b7cec75e88d24fbfcafadf1315bcefa0baed312ef6e3943ce32e6c388a4a318"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause",
            "url" : "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.protobuf/protobuf-java@3.25.5?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://developers.google.com/protocol-buffers/protobuf-java/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/protocolbuffers/protobuf/protobuf-java"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.code.gson/gson@2.9.0?type=jar",
      "group" : "com.google.code.gson",
      "name" : "gson",
      "version" : "2.9.0",
      "description" : "Gson JSON library",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "53fa3e6753e90d931d62cb89580fde2f"
        },
        {
          "alg" : "SHA-1",
          "content" : "8a1167e089096758b49f9b34066ef98b2f4b37aa"
        },
        {
          "alg" : "SHA-256",
          "content" : "c96d60551331a196dac54b745aa642cd078ef89b6f267146b705f2c2cbef052d"
        },
        {
          "alg" : "SHA-512",
          "content" : "13ff22a60ee6a72ba0c4e8fe3702b8f3f6be6b67ed4279079a9843f57ad0ca125d4ecc1564ac4e736eab10fb6254d2c011b2c08c514d708be7f8091332ed2c2c"
        },
        {
          "alg" : "SHA-384",
          "content" : "fde5b61066a8cdd711874ed42f20cb914e4193f1477456c431fb0ca32d86324414e92b0b2c5696f56d0b9d69521d8dee"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.code.gson/gson@2.9.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/google/gson/gson"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/google/gson/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/google/gson/gson/"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@2.3.3?type=jar",
      "publisher" : "Eclipse Foundation",
      "group" : "jakarta.xml.bind",
      "name" : "jakarta.xml.bind-api",
      "version" : "2.3.3",
      "description" : "Jakarta XML Binding API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "61286918ca0192e9f87d1358aef718dd"
        },
        {
          "alg" : "SHA-1",
          "content" : "48e3b9cfc10752fba3521d6511f4165bea951801"
        },
        {
          "alg" : "SHA-256",
          "content" : "c04539f472e9a6dd0c7685ea82d677282269ab8e7baca2e14500e381e0c6cec5"
        },
        {
          "alg" : "SHA-512",
          "content" : "adf6436a7a9dc6f64b97127861d7a89b78e82bea67f72bda800ef285163adcd84dbf006f679108a2a8c2eed013e0b771da2354087e0845479ff2b6318b881442"
        },
        {
          "alg" : "SHA-384",
          "content" : "bad8b9f52bf7a7e1d3974cb305a69c093fb32d2131539c18d34e471e3ec32bdd9dd136bb4b38bb14d84e99c562f208c7"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@2.3.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/eclipse-ee4j/jaxb-api/jakarta.xml.bind-api"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-ee4j/jaxb-api/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/jaxb-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse-ee4j/jaxb-api.git/jakarta.xml.bind-api"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/jakarta.activation/jakarta.activation-api@1.2.2?type=jar",
      "publisher" : "Eclipse Foundation",
      "group" : "jakarta.activation",
      "name" : "jakarta.activation-api",
      "version" : "1.2.2",
      "description" : "Jakarta Activation API jar",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "1cbb480310fa1987f9db7a3ed7118af7"
        },
        {
          "alg" : "SHA-1",
          "content" : "99f53adba383cb1bf7c3862844488574b559621f"
        },
        {
          "alg" : "SHA-256",
          "content" : "a187a939103aef5849a7af84bd7e27be2d120c410af291437375ffe061f4f09d"
        },
        {
          "alg" : "SHA-512",
          "content" : "e3d846ff5f62ad9fef514f0726846c63d4aa74b2bb8f60c76258dba37701f83ae75872401071bf40da40697d43a8a6e36d08fa4ef39fe70797fb6f2b1712599f"
        },
        {
          "alg" : "SHA-384",
          "content" : "3e25702596eca7dd48f904b3985d64b4b394d162d3884a907d8b2ee647542808713a42a02f0eeff2c07518a206cc91cf"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/jakarta.activation/jakarta.activation-api@1.2.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/eclipse-ee4j/jaf/jakarta.activation-api"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-ee4j/jaf/issues/"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse-ee4j/jaf/jakarta.activation-api"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.protobuf/protobuf-java-util@3.25.5?type=jar",
      "group" : "com.google.protobuf",
      "name" : "protobuf-java-util",
      "version" : "3.25.5",
      "description" : "Utilities for Protocol Buffers",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "16ac8649c95e9ac6550190f4944665d6"
        },
        {
          "alg" : "SHA-1",
          "content" : "38cc5ce479603e36466feda2a9f1dfdb2210ef00"
        },
        {
          "alg" : "SHA-256",
          "content" : "dacc58b2c3d2fa8d4bddc1acb881e78d6cf7c137dd78bc1d67f6aca732436a8d"
        },
        {
          "alg" : "SHA-512",
          "content" : "bd9411eba3911839ded3dc26536e3383f3135738ec0f17ecd29681f99cbc8dd50dfce73b7da9ab80eca6adea5271cff337192e7d96fea17fe27ee92e69a4d07f"
        },
        {
          "alg" : "SHA-384",
          "content" : "eca054684915d1f1986ca6292ff81bdb6d7a42f57ba8a68bf961c1213531991018b185939b53b29591fd9294b6bf222b"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause",
            "url" : "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.protobuf/protobuf-java-util@3.25.5?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://developers.google.com/protocol-buffers/protobuf-java-util/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/protocolbuffers/protobuf/protobuf-java-util"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.guava/guava@32.0.1-jre?type=jar",
      "group" : "com.google.guava",
      "name" : "guava",
      "version" : "32.0.1-jre",
      "description" : "Guava is a suite of core and expanded libraries that include utility classes, Google's collections, I/O classes, and much more.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "6951895e804b36322214c95917e598d4"
        },
        {
          "alg" : "SHA-1",
          "content" : "6e5d51a72d142f2d40a57dfb897188b36a95b489"
        },
        {
          "alg" : "SHA-256",
          "content" : "bd7fa227591fb8509677d0d1122cf95158f3b8a9f45653f58281d879f6dc48c5"
        },
        {
          "alg" : "SHA-512",
          "content" : "5dbe7a697511cfbe44f3ffb954e32e997677ecc61f03bb7bb374f1b8fa4a931a95cd9d1f5288eb5d42e2aa380e3241b35059786c07edc48e5aa67c30cddad8a5"
        },
        {
          "alg" : "SHA-384",
          "content" : "abad4556e073fb38062c636b6599ceed992302c7d98150e3842d32ce92f6aac7d630633c56efa581523d591361fcf898"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.guava/guava@32.0.1-jre?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/google/guava"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/google/guava/actions"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/google/guava/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/google/guava/guava"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.guava/failureaccess@1.0.1?type=jar",
      "group" : "com.google.guava",
      "name" : "failureaccess",
      "version" : "1.0.1",
      "description" : "Contains com.google.common.util.concurrent.internal.InternalFutureFailureAccess and InternalFutures. Most users will never need to use this artifact. Its classes is conceptually a part of Guava, but they're in this separate artifact so that Android libraries can use them without pulling in all of Guava (just as they can use ListenableFuture by depending on the listenablefuture artifact).",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "091883993ef5bfa91da01dcc8fc52236"
        },
        {
          "alg" : "SHA-1",
          "content" : "1dcf1de382a0bf95a3d8b0849546c88bac1292c9"
        },
        {
          "alg" : "SHA-256",
          "content" : "a171ee4c734dd2da837e4b16be9df4661afab72a41adaf31eb84dfdaf936ca26"
        },
        {
          "alg" : "SHA-512",
          "content" : "f8d59b808d6ba617252305b66d5590937da9b2b843d492d06b8d0b1b1f397e39f360d5817707797b979a5bf20bf21987b35333e7a15c44ed7401fea2d2119cae"
        },
        {
          "alg" : "SHA-384",
          "content" : "67659dbd9647ec303d7f15128dc9dba19b98fd8d74758ee3b602451e32c855e236ccaafe08edf4bbfa245f981268440f"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.guava/failureaccess@1.0.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/google/guava/failureaccess"
        },
        {
          "type" : "build-system",
          "url" : "https://travis-ci.org/google/guava"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/google/guava/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/google/guava/failureaccess"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar",
      "group" : "com.google.guava",
      "name" : "listenablefuture",
      "version" : "9999.0-empty-to-avoid-conflict-with-guava",
      "description" : "An empty artifact that Guava depends on to signal that it is providing ListenableFuture -- but is also available in a second \"version\" that contains com.google.common.util.concurrent.ListenableFuture class, without any other Guava classes. The idea is: - If users want only ListenableFuture, they depend on listenablefuture-1.0. - If users want all of Guava, they depend on guava, which, as of Guava 27.0, depends on listenablefuture-9999.0-empty-to-avoid-conflict-with-guava. The 9999.0-... version number is enough for some build systems (notably, Gradle) to select that empty artifact over the \"real\" listenablefuture-1.0 -- avoiding a conflict with the copy of ListenableFuture in guava itself. If users are using an older version of Guava or a build system other than Gradle, they may see class conflicts. If so, they can solve them by manually excluding the listenablefuture artifact or manually forcing their build systems to use 9999.0-....",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "d094c22570d65e132c19cea5d352e381"
        },
        {
          "alg" : "SHA-1",
          "content" : "b421526c5f297295adef1c886e5246c39d4ac629"
        },
        {
          "alg" : "SHA-256",
          "content" : "b372a037d4230aa57fbeffdef30fd6123f9c0c2db85d0aced00c91b974f33f99"
        },
        {
          "alg" : "SHA-512",
          "content" : "c5987a979174cbacae2e78b319f080420cc71bcdbcf7893745731eeb93c23ed13bff8d4599441f373f3a246023d33df03e882de3015ee932a74a774afdd0782f"
        },
        {
          "alg" : "SHA-384",
          "content" : "caff9b74079f95832ca7f6029346b34b606051cc8c5a4389fac263511d277ada0c55f28b0d43011055b268c6eb7184d5"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/google/guava/listenablefuture"
        },
        {
          "type" : "build-system",
          "url" : "https://travis-ci.org/google/guava"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/google/guava/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/google/guava/listenablefuture"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar",
      "group" : "com.google.code.findbugs",
      "name" : "jsr305",
      "version" : "3.0.2",
      "description" : "JSR305 Annotations for Findbugs",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "dd83accb899363c32b07d7a1b2e4ce40"
        },
        {
          "alg" : "SHA-1",
          "content" : "25ea2e8b0c338a877313bd4672d3fe056ea78f0d"
        },
        {
          "alg" : "SHA-256",
          "content" : "766ad2a0783f2687962c8ad74ceecc38a28b9f72a2d085ee438b7813e928d0c7"
        },
        {
          "alg" : "SHA-512",
          "content" : "bb09db62919a50fa5b55906013be6ca4fc7acb2e87455fac5eaf9ede2e41ce8bbafc0e5a385a561264ea4cd71bbbd3ef5a45e02d63277a201d06a0ae1636f804"
        },
        {
          "alg" : "SHA-384",
          "content" : "ca0b169d3eb2d0922dc031133a021f861a043bb3e405a88728215fd6ff00fa52fdc7347842dcc2031472e3726164bdc4"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://findbugs.sourceforge.net/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://code.google.com/p/jsr-305/"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.checkerframework/checker-qual@3.33.0?type=jar",
      "group" : "org.checkerframework",
      "name" : "checker-qual",
      "version" : "3.33.0",
      "description" : "checker-qual contains annotations (type qualifiers) that a programmer writes to specify Java code for type-checking by the Checker Framework.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "fc9418b779d9d57dcd52197006cbdb9b"
        },
        {
          "alg" : "SHA-1",
          "content" : "de2b60b62da487644fc11f734e73c8b0b431238f"
        },
        {
          "alg" : "SHA-256",
          "content" : "e316255bbfcd9fe50d165314b85abb2b33cb2a66a93c491db648e498a82c2de1"
        },
        {
          "alg" : "SHA-512",
          "content" : "049c446677b7b386f3fb501bf65e032bdf2b1b29a3f545848035fff2b683cd275380cf302e30eea641af7f0801f779bcda3d82a71d928e4176f564f796640a64"
        },
        {
          "alg" : "SHA-384",
          "content" : "ddf7a0f70421d1ed75e93c0a30434a4862c3905e433223e19861323cf0994e843392b746003040f10a7db6fc960b8aa6"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT"
          }
        }
      ],
      "purl" : "pkg:maven/org.checkerframework/checker-qual@3.33.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://checkerframework.org/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/typetools/checker-framework.git"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.18.0?type=jar",
      "publisher" : "Google LLC",
      "group" : "com.google.errorprone",
      "name" : "error_prone_annotations",
      "version" : "2.18.0",
      "description" : "Error Prone is a static analysis tool for Java that catches common programming mistakes at compile-time.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "64145d0e7fee5a69ed7b84cf402de998"
        },
        {
          "alg" : "SHA-1",
          "content" : "89b684257096f548fa39a7df9fdaa409d4d4df91"
        },
        {
          "alg" : "SHA-256",
          "content" : "9e6814cb71816988a4fd1b07a993a8f21bb7058d522c162b1de849e19bea54ae"
        },
        {
          "alg" : "SHA-512",
          "content" : "3cea86be94bb8ae40d21ad4bf7d7f6b2233e89593b7b741ad84c78840cd3837bb5136f52e62fe9ae0953d7b190c46ad3edc102dfa97b4c7ea472a80206bf5db7"
        },
        {
          "alg" : "SHA-384",
          "content" : "7622eb33f83f03ab32b710b36c2fe836e24c5318f65fb8c0631a99507ca3ae65c2df8e33b63a5ce853b9cab6d9cb32e5"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.18.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://errorprone.info/error_prone_annotations"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/google/error-prone/error_prone_annotations"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.j2objc/j2objc-annotations@2.8?type=jar",
      "group" : "com.google.j2objc",
      "name" : "j2objc-annotations",
      "version" : "2.8",
      "description" : "A set of annotations that provide additional information to the J2ObjC translator to modify the result of translation.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "c50af69b704dc91050efb98e0dff66d1"
        },
        {
          "alg" : "SHA-1",
          "content" : "c85270e307e7b822f1086b93689124b89768e273"
        },
        {
          "alg" : "SHA-256",
          "content" : "f02a95fa1a5e95edb3ed859fd0fb7df709d121a35290eff8b74dce2ab7f4d6ed"
        },
        {
          "alg" : "SHA-512",
          "content" : "f8263868a792b41707c9e7fe6fa5650a14cd93fbeafad20efe3772a3058fc933eb59782ec59e6eb9b9c569aa96da80134ae9fdf7547b69c44a97087efddceeff"
        },
        {
          "alg" : "SHA-384",
          "content" : "e6087ec31fec8289158496ad2ed6ce8472d5d513808a312e0782cedac3b86c37a62a63c0b5ea3839491d109fe9e148a1"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.j2objc/j2objc-annotations@2.8?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/google/j2objc/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.sonatype.org/spice/trunk/oss/oss-parent-9/j2objc-annotations"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.kafka/kafka-clients@7.9.6-ce?type=jar",
      "group" : "org.apache.kafka",
      "name" : "kafka-clients",
      "version" : "7.9.6-ce",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "c34aed1bf3608ddfa9f1dd08c68ba244"
        },
        {
          "alg" : "SHA-1",
          "content" : "f91f978f8200242119def511396fd0e26c776056"
        },
        {
          "alg" : "SHA-256",
          "content" : "6cfef1f9da6df3166666d32142c344e9067c2635a8e53391e526840184b90c11"
        },
        {
          "alg" : "SHA-512",
          "content" : "b600fe6e1a0cb1349d773e9c39af75cabba2d2d63d587e85d58ab3a0467471b36b0746d4572e90fb476d4f6a8aa3a9c4c59b695df556c4d07b0651c56606f4e5"
        },
        {
          "alg" : "SHA-384",
          "content" : "2a2f6b3c6788263a821b94edd30d0d3dd43fd6137be3743e3160de3897a2e9939bf80839c1fb8df387e8d0d2eecd03bc"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "Confluent License Agreement",
            "url" : "https://www.confluent.io/legal/confluent-license-agreement/"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.kafka/kafka-clients@7.9.6-ce?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://docs.confluent.io/platform/current/get-started/platform.html"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.github.luben/zstd-jni@1.5.6-4?type=jar",
      "publisher" : "com.github.luben",
      "group" : "com.github.luben",
      "name" : "zstd-jni",
      "version" : "1.5.6-4",
      "description" : "JNI bindings for Zstd native library that provides fast and high compression lossless algorithm for Java and all JVM languages.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "808e96f7bc2d4a3c5f68e95786f74cc9"
        },
        {
          "alg" : "SHA-1",
          "content" : "ba9e303e0b5e94cdd0017390d7d8c06f47fd61f7"
        },
        {
          "alg" : "SHA-256",
          "content" : "793ca8734aa15687e7e64564eab8b6ae9ee2720eae27aa663074682144b1c386"
        },
        {
          "alg" : "SHA-512",
          "content" : "91ae51e05bfe322e18875cd158f311a0aaef62059fd391b83c4d06447f31518863654fc218891eb99f72def102964c01d8122c73890498fef7288f060cb29e88"
        },
        {
          "alg" : "SHA-384",
          "content" : "0c56933ba08e88187767e688325fdc8e281e8cb2838d6125819da484df8ecf07bfe0b88c9a5b12049efb24f8711f6f76"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-2-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/com.github.luben/zstd-jni@1.5.6-4?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/luben/zstd-jni"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/at.yawk.lz4/lz4-java@1.10.2?type=jar",
      "group" : "at.yawk.lz4",
      "name" : "lz4-java",
      "version" : "1.10.2",
      "description" : "Java bindings and pure Java implementations of LZ4 and XXHash",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f9fe6db582e61989316715dca1c79f6d"
        },
        {
          "alg" : "SHA-1",
          "content" : "1df182cf1b030e347c81ca8768c24dab414a04d8"
        },
        {
          "alg" : "SHA-256",
          "content" : "252dabd586d22149a31661a8afc1a50747714eb1a298bd4a6e780c8c91a13866"
        },
        {
          "alg" : "SHA-512",
          "content" : "2634adf408910c3a1cff41f5bbde0f0643d6aa89b9c10c84ee5982628ceaf092015acaa0ed90eb56cdb0cc1c72b6667bc51b4312c8674662d5150a821c512f88"
        },
        {
          "alg" : "SHA-384",
          "content" : "0583dafa52d9c28aa84204fb3996528fd3fac71ed7c452b904bcc8f3f8fc07ca36da13fea1bd7a5eec34f9e6480925f5"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/at.yawk.lz4/lz4-java@1.10.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/yawkat/lz4-java"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/yawkat/lz4-java"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.xerial.snappy/snappy-java@1.1.10.5?type=jar",
      "publisher" : "xerial.org",
      "group" : "org.xerial.snappy",
      "name" : "snappy-java",
      "version" : "1.1.10.5",
      "description" : "snappy-java: A fast compression/decompression library",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "a52ffcdbbe525b486237a7098e5c5ff7"
        },
        {
          "alg" : "SHA-1",
          "content" : "ac605269f3598506196e469f1fb0d7ed5c55059e"
        },
        {
          "alg" : "SHA-256",
          "content" : "0f3f1857ed33116583f480b4df5c0218836c47bfbc9c6221c0d73f356decf37b"
        },
        {
          "alg" : "SHA-512",
          "content" : "36c288aa84017b52362a49a20d1702151a16b9f58518b6877f11122941a549d94fab8d515f7f1ad6384fb94be569328abf862edaf970c10a16832498dfda853b"
        },
        {
          "alg" : "SHA-384",
          "content" : "693a542ca2471dec4da5fe582563aff1bf5238e1a8d1a1f79cd8138334f94f1112094fbd270b1637d983c9290084a6e1"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.xerial.snappy/snappy-java@1.1.10.5?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/xerial/snappy-java"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/xerial/snappy-java"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/junit/junit@4.13.2?type=jar",
      "publisher" : "JUnit",
      "group" : "junit",
      "name" : "junit",
      "version" : "4.13.2",
      "description" : "JUnit is a unit testing framework for Java, created by Erich Gamma and Kent Beck.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "d98a9a02a99a9acd22d7653cbcc1f31f"
        },
        {
          "alg" : "SHA-1",
          "content" : "8ac9e16d933b6fb43bc7f576336b8f4d7eb5ba12"
        },
        {
          "alg" : "SHA-256",
          "content" : "8e495b634469d64fb8acfa3495a065cbacc8a0fff55ce1e31007be4c16dc57d3"
        },
        {
          "alg" : "SHA-512",
          "content" : "a31b9950f929a7e5a600d89787ef40e42a8a8e2392e210d0c0f45b3572937670a18a524f1815508cd1152cd1eaa7275cb7430ba45c053be365c83c231bccd3f0"
        },
        {
          "alg" : "SHA-384",
          "content" : "9f85c56a77c699eb87630b9e8224068a34c296bcd9aadb52248dd4665036f5bf1048fe75e5cb590b59e7855ca716acae"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-1.0",
            "url" : "http://www.eclipse.org/legal/epl-v10.html"
          }
        }
      ],
      "purl" : "pkg:maven/junit/junit@4.13.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://junit.org"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/junit-team/junit4/actions"
        },
        {
          "type" : "distribution",
          "url" : "https://github.com/junit-team/junit4/wiki/Download-and-Install"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/junit-team/junit4/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/junit-team/junit4"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.slf4j/slf4j-reload4j@1.7.36?type=jar",
      "publisher" : "QOS.ch",
      "group" : "org.slf4j",
      "name" : "slf4j-reload4j",
      "version" : "1.7.36",
      "description" : "SLF4J Reload4j Binding",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "ebfedc67cca7891e9c535e5899930f07"
        },
        {
          "alg" : "SHA-1",
          "content" : "db708f7d959dee1857ac524636e85ecf2e1781c1"
        },
        {
          "alg" : "SHA-256",
          "content" : "ae6fdd5c9547896114d5ec7fa7503733b7d2890573d3886fb548b3119c4d3f67"
        },
        {
          "alg" : "SHA-512",
          "content" : "595a00905b67886376adb45d6964b6d35a7e7fe90cfe0e26ed3b852c755ac4de96894974aac5fc590df689d3a28fa7198d899b544f30e83c320a2befe88fcb24"
        },
        {
          "alg" : "SHA-384",
          "content" : "700e92389464261381690cee669d9446bf912b58fd94be50837e1456c8f42a4586960036c097b7e08c2b32eab190adc1"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/license/mit/"
          }
        }
      ],
      "purl" : "pkg:maven/org.slf4j/slf4j-reload4j@1.7.36?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://reload4j.qos.ch"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/qos-ch/slf4j/slf4j-reload4j"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/ch.qos.reload4j/reload4j@1.2.25?type=jar",
      "publisher" : "QOS.CH Sarl (Switzerland)",
      "group" : "ch.qos.reload4j",
      "name" : "reload4j",
      "version" : "1.2.25",
      "description" : "Reload4j revives EOLed log4j 1.x",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "ca989b9d69c90159dde3b1594e99d58c"
        },
        {
          "alg" : "SHA-1",
          "content" : "45921e383a1001c2a599fc4c6cf59af80cdd1cf1"
        },
        {
          "alg" : "SHA-256",
          "content" : "e71115175c4b080cf51dd72097165ea001ff9fafdc4f79d88049d0b1ecca979c"
        },
        {
          "alg" : "SHA-512",
          "content" : "a81e53780dccb36677471b9e6fbf25fdad49f68105a36b9a6708b1419ca9adb2957187ee1f8213add8c17a8a8bed1e744414fcf2833710990596fb780731bf5e"
        },
        {
          "alg" : "SHA-384",
          "content" : "4202e04f302bdd94fa3bfc39361794cff964749b5fbb825fc4ff4a749f85cd373f0dd2d807911e81b4bcff86165a33cf"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/ch.qos.reload4j/reload4j@1.2.25?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://reload4j.qos.ch"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/qos-ch/reload4j"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/io.confluent/logredactor@1.0.17?type=jar",
      "publisher" : "Confluent, Inc.",
      "group" : "io.confluent",
      "name" : "logredactor",
      "version" : "1.0.17",
      "description" : "Log Redactor",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "940f755241c744233e6f291f59749fbb"
        },
        {
          "alg" : "SHA-1",
          "content" : "d786e36778ba3000eb7b78917b0a5c9222f4bdc9"
        },
        {
          "alg" : "SHA-256",
          "content" : "285d36202b92eeaaff61cc260db3d862c7d63b1284c180bd89046e467e592fe6"
        },
        {
          "alg" : "SHA-512",
          "content" : "809520cf32695a8fa662a1c072e08c23c3e0d1f42a7f42a4c7b0bbeec5de9d9963bce52c3198a0bc985d83ee02ed0196f5e2f5886cab467f96959a6a48b88ecc"
        },
        {
          "alg" : "SHA-384",
          "content" : "0c24985a83127fc27dacb5efa56fbb2de1d6311980192555f235607218198dfa53b2d907d8b13135a2d64f79ac437524"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.confluent/logredactor@1.0.17?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/confluentinc/logredactor"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/confluentinc/logredactor.git/logredactor"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.powermock/powermock-api-mockito2@2.0.9?type=jar",
      "group" : "org.powermock",
      "name" : "powermock-api-mockito2",
      "version" : "2.0.9",
      "description" : "PowerMock API for Mockito 2.+..",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "82b1083d26ee79dfabc2933f65a38457"
        },
        {
          "alg" : "SHA-1",
          "content" : "7e16a11ab06b718121a7537476c55b3c9551ae03"
        },
        {
          "alg" : "SHA-256",
          "content" : "fe3b61dff44163724c6046605919a0ccb5f24bf0e14f2f3b8a44894ef04fbf2c"
        },
        {
          "alg" : "SHA-512",
          "content" : "872afc361fae131778be0f1d9fb976ad18759fd2cfbc88355bfec4f66cedd1acafeba933bd5cae3b3eacd41f745adf7953037fbd8339ca9b44d7c4a3170e6493"
        },
        {
          "alg" : "SHA-384",
          "content" : "c35ed7c45a25c3079389412a98f1be43f169d570027d7454323b96ef572afcb0a77cefa106f97f21c4fd699acc29d8df"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.powermock/powermock-api-mockito2@2.0.9?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.powermock.org"
        },
        {
          "type" : "build-system",
          "url" : "https://travis-ci.org/powermock/powermock"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/powermock/powermock/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/powermock/powermock.git"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.powermock/powermock-api-easymock@2.0.9?type=jar",
      "group" : "org.powermock",
      "name" : "powermock-api-easymock",
      "version" : "2.0.9",
      "description" : "PowerMock API for EasyMock.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "cb2c7c2f9888ff961a49b01672cf17c9"
        },
        {
          "alg" : "SHA-1",
          "content" : "ace3f16a82c0f1f4edbb810699b76705a1a50b6c"
        },
        {
          "alg" : "SHA-256",
          "content" : "d61dcaca5e2c0ac4f65d3ae6845deab175adc91779ed33a544142fe88497ee64"
        },
        {
          "alg" : "SHA-512",
          "content" : "048e408b3ad33e2b46fe320e792a326b82bab22bd3b6f76bfd43504f82cb6984f0978d8de1b7df0c2ad00e52c26c14b4a893a194762fce6fd179645fb4b3f560"
        },
        {
          "alg" : "SHA-384",
          "content" : "8c1453817fee91be0977baeb19a51ad231ae7a4b8e328697134660c40e1db5e5524f6cae9f93216f5f9c9f4f57fe7ad9"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.powermock/powermock-api-easymock@2.0.9?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.powermock.org"
        },
        {
          "type" : "build-system",
          "url" : "https://travis-ci.org/powermock/powermock"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/powermock/powermock/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/powermock/powermock.git"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.powermock/powermock-core@2.0.9?type=jar",
      "group" : "org.powermock",
      "name" : "powermock-core",
      "version" : "2.0.9",
      "description" : "Various utilities for accessing internals of a class.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "e3599c532ef3b70a3228197b43b2f8db"
        },
        {
          "alg" : "SHA-1",
          "content" : "50e5d2652fd311ee9c33919dfadd44504a582210"
        },
        {
          "alg" : "SHA-256",
          "content" : "e5183d1e197bcd67e8f86eeb5acc4cc4b4a7aa993e9daa249f8d8d6973f06c49"
        },
        {
          "alg" : "SHA-512",
          "content" : "43483fc26bdcc4e1ff846d2d2d03909740dea6d91598e5d84aa0b63cbebc9a73b096269a33bf9849a9cd02014ed3059d496573125c0e14f7185e65ffb54b5d0f"
        },
        {
          "alg" : "SHA-384",
          "content" : "91219e7d7ccd26d2127051fe5d25fa82d69d9c00621f435f868ea8f7937e81e53329281072a2a94264123dd2b80035b8"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.powermock/powermock-core@2.0.9?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.powermock.org"
        },
        {
          "type" : "build-system",
          "url" : "https://travis-ci.org/powermock/powermock"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/powermock/powermock/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/powermock/powermock.git"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.powermock/powermock-module-junit4@2.0.9?type=jar",
      "group" : "org.powermock",
      "name" : "powermock-module-junit4",
      "version" : "2.0.9",
      "description" : "PowerMock support module for JUnit 4.x.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "30c9ae211d0d03e092c005263ed4e0a4"
        },
        {
          "alg" : "SHA-1",
          "content" : "09f13da80a3d75cc9579b55389e919f661ec42f0"
        },
        {
          "alg" : "SHA-256",
          "content" : "d0e8a83183a9a8a18ff83e1592a611fa206cab0838466ce367e3d0a851a274e2"
        },
        {
          "alg" : "SHA-512",
          "content" : "08504cc05d5f066c5f91e05ce535614bde0f8da2663ab5c83d1306b55e8f33fa983b6dbfcda5b280975f3bffa39d1dc38b9c7640e742bb4c877b08d0c0e75c3e"
        },
        {
          "alg" : "SHA-384",
          "content" : "cbf15e68c35b63ef8c74f9aba7c1a9a8796d3a1dbfea2cab12be66b9c49594984d3e0feae31cc4313374d7a0fde3da23"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.powermock/powermock-module-junit4@2.0.9?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.powermock.org"
        },
        {
          "type" : "build-system",
          "url" : "https://travis-ci.org/powermock/powermock"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/powermock/powermock/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/powermock/powermock.git"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.easymock/easymock@5.2.0?type=jar",
      "publisher" : "<a href=\"http://easymock.org/contributors.html\" target=\"_blank\">EasyMock contributors</a>",
      "group" : "org.easymock",
      "name" : "easymock",
      "version" : "5.2.0",
      "description" : "EasyMock provides an easy way to create Mock Objects for interfaces and classes generating them on the fly",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "1f14fa7d3967662fefc6c6edf3f79736"
        },
        {
          "alg" : "SHA-1",
          "content" : "ceb40330d6ecc2da3cdac41663f193e300497238"
        },
        {
          "alg" : "SHA-256",
          "content" : "e63a6494b96553cbd0dfde13b5f23dabbd811854410d6ebc53a6a6684a1763b5"
        },
        {
          "alg" : "SHA-512",
          "content" : "34c2b94f7d1e46931f8ff2526d258fff07933508992ff1919eddc5538313dee306a994572c9a75c1bc7081833abc2d166dc77f1257d0b4fb04a2218ad0c48022"
        },
        {
          "alg" : "SHA-384",
          "content" : "b30be1de4d5e167ecdbec0da8a8c77874178157471b687b116a0bf1cbcf551bdab587acd52ad8df59fa7d5627a359a01"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.easymock/easymock@5.2.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://easymock.org/easymock"
        },
        {
          "type" : "build-system",
          "url" : "https://travis-ci.org/easymock/easymock"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/easymock/easymock/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://gitter.im/easymock/easymock"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/easymock/easymock/easymock"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.nimbusds/nimbus-jose-jwt@10.0.2?type=jar",
      "publisher" : "Connect2id Ltd.",
      "group" : "com.nimbusds",
      "name" : "nimbus-jose-jwt",
      "version" : "10.0.2",
      "description" : "Java library for Javascript Object Signing and Encryption (JOSE) and JSON Web Tokens (JWT)",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "98ebb498f6bbcee1049de8a64ff7c52c"
        },
        {
          "alg" : "SHA-1",
          "content" : "93347ea9247ae09e095575e10f9cae79c195fbb8"
        },
        {
          "alg" : "SHA-256",
          "content" : "960b978a6cd6cbc3319648adc73959789f6742a2bf1e8dd0c843dbc91624218a"
        },
        {
          "alg" : "SHA-512",
          "content" : "d96e3b740b18eadd986d6ff15976d7b530e8edf58934bd4c4bd0d8065a225dbae434240c690f0516284cbdb7ba03526bffd5b6578bb12ea9e7790c73aab5e09b"
        },
        {
          "alg" : "SHA-384",
          "content" : "7fa47cc0ba36ab5ff4273619e29cac90d8c21a4be26b8932af5fd6a0b0d8d2fdb33271fa9113eef53c1c41c16357b7f2"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.nimbusds/nimbus-jose-jwt@10.0.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://bitbucket.org/connect2id/nimbus-jose-jwt"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://bitbucket.org/connect2id/nimbus-jose-jwt"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-lang3",
      "version" : "3.18.0",
      "description" : "Apache Commons Lang, a package of Java utility classes for the classes that are in java.lang's hierarchy, or are considered to be so standard as to justify existence in java.lang. The code is tested using the latest revision of the JDK for supported LTS releases: 8, 11, 17 and 21 currently. See https://github.com/apache/commons-lang/blob/master/.github/workflows/maven.yml Please ensure your build environment is up-to-date and kindly report any build issues.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "48b9886957920a4cdb602780ca345087"
        },
        {
          "alg" : "SHA-1",
          "content" : "fb14946f0e39748a6571de0635acbe44e7885491"
        },
        {
          "alg" : "SHA-256",
          "content" : "4eeeae8d20c078abb64b015ec158add383ac581571cddc45c68f0c9ae0230720"
        },
        {
          "alg" : "SHA-512",
          "content" : "c2c9d497fc1be411050f4011b2407764b78aa098eb42925af8a197eabdbc25b507f09fb898805e9bed4815f35236a508ee5b096e36f363df4d407232d50fc832"
        },
        {
          "alg" : "SHA-384",
          "content" : "4fb3f101106e4ce3666d5c15d276ba86f7683a0ef35f0384edfcd579ea454275edbb7400795d265ec3a38e39997e79b8"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-lang/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-lang/actions"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/LANG"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf/commons-lang.git"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
      "publisher" : "QOS.ch",
      "group" : "org.slf4j",
      "name" : "slf4j-api",
      "version" : "1.7.36",
      "description" : "The slf4j API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "872da51f5de7f3923da4de871d57fd85"
        },
        {
          "alg" : "SHA-1",
          "content" : "6c62681a2f655b49963a5983b8b0950a6120ae14"
        },
        {
          "alg" : "SHA-256",
          "content" : "d3ef575e3e4979678dc01bf1dcce51021493b4d11fb7f1be8ad982877c16a1c0"
        },
        {
          "alg" : "SHA-512",
          "content" : "f9b033fc019a44f98b16048da7e2b59edd4a6a527ba60e358f65ab88e0afae03a9340f1b3e8a543d49fa542290f499c5594259affa1ff3e6e7bf3b428d4c610b"
        },
        {
          "alg" : "SHA-384",
          "content" : "2b14ad035877087157e379d3277dcdcd79e58d6bdb147c47d29e377d75ce53ad42cafbf22f5fb7827c7e946ff4876b9a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/license/mit/"
          }
        }
      ],
      "purl" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.slf4j.org"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/qos-ch/slf4j/slf4j-api"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.junit.jupiter/junit-jupiter-engine@5.8.2?type=jar",
      "group" : "org.junit.jupiter",
      "name" : "junit-jupiter-engine",
      "version" : "5.8.2",
      "description" : "Module \"junit-jupiter-engine\" of JUnit 5.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "1bddf5761ce2a60e6d84663e6b79e280"
        },
        {
          "alg" : "SHA-1",
          "content" : "c598b4328d2f397194d11df3b1648d68d7d990e3"
        },
        {
          "alg" : "SHA-256",
          "content" : "753b7726cdd158bb34cedb94c161e2291896f47832a1e9eda53d970020a8184e"
        },
        {
          "alg" : "SHA-512",
          "content" : "f6c8460d6048aab121cbb0153d71517a916dc020be3deec0f7a022c04ad7679c23155cc50167c6191730704a19943b0d1b6209e68f0e5078d8e1fd66ae8fb9f4"
        },
        {
          "alg" : "SHA-384",
          "content" : "adadbd35b1b36de1a71b7129f24a0206f60eeb9af4dc14e6c8859983c6d90ccd3be0f71dd0f8d35597c4db0c55236d64"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.junit.jupiter/junit-jupiter-engine@5.8.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://junit.org/junit5/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/junit-team/junit5"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.junit.vintage/junit-vintage-engine@5.8.2?type=jar",
      "group" : "org.junit.vintage",
      "name" : "junit-vintage-engine",
      "version" : "5.8.2",
      "description" : "Module \"junit-vintage-engine\" of JUnit 5.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "a2e0d078b1cffaa71f444b50eebe26b0"
        },
        {
          "alg" : "SHA-1",
          "content" : "64dde404f2db8b0e2ec6a53d31f4a076e298b1d1"
        },
        {
          "alg" : "SHA-256",
          "content" : "ebd567b84e380d5373c47de3c9616d84f7bef91f9f8a8e7fc925be68240c1ba4"
        },
        {
          "alg" : "SHA-512",
          "content" : "b0d65c6f0192dfd0a9e80ff2dfeb4ce69b6d987df9e83c81eec4ffa19dc3c86a6300faab23d5aa322640425f82164bce562f0859c02923e6b3b08d49f57d5678"
        },
        {
          "alg" : "SHA-384",
          "content" : "083b8ee1c67dd85815903f26bad0988b0ddebbb88f8983394889c8daee0021bb6dbd7c0ad2d9e058c01aae815f048dc9"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.junit.vintage/junit-vintage-engine@5.8.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://junit.org/junit5/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/junit-team/junit5"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-io/commons-io@2.16.0?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-io",
      "name" : "commons-io",
      "version" : "2.16.0",
      "description" : "The Apache Commons IO library contains utility classes, stream implementations, file filters, file comparators, endian transformation classes, and much more.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "4e115587dca5dd3c178e7c8f17a371b3"
        },
        {
          "alg" : "SHA-1",
          "content" : "27875a7935f1ddcc13267eb6fae1f719e0409572"
        },
        {
          "alg" : "SHA-256",
          "content" : "d1e417901235fae3aa0cb9736baeaf5b74de7349817d1c72390d82e3d83d3a97"
        },
        {
          "alg" : "SHA-512",
          "content" : "afba6cc8fdef9d347aaccb3bff327ba8e2c17135989cf01179fdb2e3ca8d0afdce37defb08659eb1e99b8730e2baaaec95c7d3599f7ebf526c97c8edc477b852"
        },
        {
          "alg" : "SHA-384",
          "content" : "0413eda39746809f3c7ce44336f6d88d8d72e2781db4b74c98a206f34b94639a39024697fde25f310edda8cf628fd376"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-io/commons-io@2.16.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-io/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-parent/actions"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/IO"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-io.git"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.mockito/mockito-core@4.6.1?type=jar",
      "group" : "org.mockito",
      "name" : "mockito-core",
      "version" : "4.6.1",
      "description" : "Mockito mock objects library core API and implementation",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "67c6f27b8607f4634bb64c4ffe42987b"
        },
        {
          "alg" : "SHA-1",
          "content" : "545665913b140db2793a0c37e6a686affd9c08b5"
        },
        {
          "alg" : "SHA-256",
          "content" : "ee3b91cdf4c23cff92960c32364371c683ee6415f1ec4678317bcea79c9f9819"
        },
        {
          "alg" : "SHA-512",
          "content" : "50dd388a7d24ad340fb387f30a65dabe1e613e1e086611f58691c5c4b05ce038b9eb5ab79ce52f1ca9abbe55c302a4802a86f228d952afd9d3e9fbceef42e7c5"
        },
        {
          "alg" : "SHA-384",
          "content" : "b34472c5a18b06580675b78a5b2c461e13d373c29a0e8ef8d1d3e750e68875edb004a8de8f0755436e9954468abde252"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT"
          }
        }
      ],
      "purl" : "pkg:maven/org.mockito/mockito-core@4.6.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/mockito/mockito"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/mockito/mockito/actions"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/mockito/mockito/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/mockito/mockito.git"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.mockito/mockito-inline@4.6.1?type=jar",
      "group" : "org.mockito",
      "name" : "mockito-inline",
      "version" : "4.6.1",
      "description" : "Mockito preconfigured inline mock maker (intermediate and to be superseeded by automatic usage in a future version)",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "0e57e26c5abe9f279ff8844a5beac889"
        },
        {
          "alg" : "SHA-1",
          "content" : "3d1dffee9a8a1998ec782383ca2f818848f2d5f1"
        },
        {
          "alg" : "SHA-256",
          "content" : "ee52e1c299a632184fba274a9370993e09140429f5e516e6c5570fd6574b297f"
        },
        {
          "alg" : "SHA-512",
          "content" : "9c948cf7fc88f7f747faba78a03497b2ff6153a9d944fa2e1a477dadc4528afc21721854e3d43d53e190d5abe24dbfad69eaf37457e67a34ac099b332bea1350"
        },
        {
          "alg" : "SHA-384",
          "content" : "556d230ee47962f5dc0c97084f95b440475361c389fbdf105fee2690012365a363e80bdc67a53736670eecd65c809852"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT"
          }
        }
      ],
      "purl" : "pkg:maven/org.mockito/mockito-inline@4.6.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/mockito/mockito"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/mockito/mockito/actions"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/mockito/mockito/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/mockito/mockito.git"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.bouncycastle/bc-fips@2.1.2?type=jar",
      "group" : "org.bouncycastle",
      "name" : "bc-fips",
      "version" : "2.1.2",
      "description" : "The BC-FJA 2.1.* series is a FIPS 140-3 certified Java implementation with additional Intel native hardware support for AES-NI and SHA-256 where supported. The package has been certified to FIPS 140-3 level 1. This jar contains JCE provider and low-level API for the BC-FJA version 2.1.2, a patched version of BC-FJA-2.1.0, interim FIPS Certificate #4943. Please see certificate for certified platform details.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "0e3ce147f5132e096e7c3b22ab23a079"
        },
        {
          "alg" : "SHA-1",
          "content" : "061fbe8383f70489dda95a11a2a4739eb818ff2c"
        },
        {
          "alg" : "SHA-256",
          "content" : "044fcd8a29d236edea8a5b414406cdae63b475f9ad9f05fe2dc904a277941115"
        },
        {
          "alg" : "SHA-512",
          "content" : "c20da957f38fc09b7fc6def8afe9c9f4137a8de56d8d602719be6e1eb7ea0d2dface092bdf0a16d2a178eb57078553e53db60fbbcda166038cddb0a22087f69b"
        },
        {
          "alg" : "SHA-384",
          "content" : "f51856ec6c00f67f454747e75118c6204abaa433a4d6289610a0624cbc0cec2316663df06cbf876ba4ad8cee8748252e"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "Bouncy Castle Licence",
            "url" : "https://www.bouncycastle.org/licence.html"
          }
        }
      ],
      "purl" : "pkg:maven/org.bouncycastle/bc-fips@2.1.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.bouncycastle.org/download/bouncy-castle-java-fips/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://www.bouncycastle.org/support"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.bouncycastle/bcpkix-fips@2.1.9?type=jar",
      "group" : "org.bouncycastle",
      "name" : "bcpkix-fips",
      "version" : "2.1.9",
      "description" : "The Bouncy Castle Java APIs for CMS, PKCS, EAC, TSP, CMP, CRMF, OCSP, S/MIME and certificate generation. The APIs are designed primarily to be used in conjunction with the BC FIPS provider. The APIs may also be used with other providers although if being used in a FIPS context it is the responsibility of the user to ensure that any other providers used are FIPS certified and used appropriately.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "e295dcb91f2cab6403dc434013aa5cf9"
        },
        {
          "alg" : "SHA-1",
          "content" : "722eaefa83fd8c53e1fc019bde25e353258ed22b"
        },
        {
          "alg" : "SHA-256",
          "content" : "c31a4aeeda18f98b06deab50f6c5fa972eb87555ef134268be28eed95fadece7"
        },
        {
          "alg" : "SHA-512",
          "content" : "6ff3f1d12fe2bb6a102975f94864f74459523dd7aeb2b1f293bfc76eebd2688ec1cdb5d72cdd2c5bffb0c41e2593c9364b8b15f411c298f5866138ce6c79d6a2"
        },
        {
          "alg" : "SHA-384",
          "content" : "e8c31873b24176818285303a2b14144cfbb5844081461a3b2d7d0935f618d1620d2c7da49458b15687377ad42ab095ff"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "Bouncy Castle Licence",
            "url" : "https://www.bouncycastle.org/licence.html"
          }
        }
      ],
      "purl" : "pkg:maven/org.bouncycastle/bcpkix-fips@2.1.9?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.bouncycastle.org/download/bouncy-castle-java-fips"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://www.bouncycastle.org/support"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.bouncycastle/bcutil-fips@2.1.4?type=jar",
      "group" : "org.bouncycastle",
      "name" : "bcutil-fips",
      "version" : "2.1.4",
      "description" : "The Bouncy Castle Java APIs for ASN.1 extension and utility APIs used to support bcpkix and bctls with the BC FIPS provider. The APIs may also be used with other providers although if being used in a FIPS context it is the responsibility of the user to ensure that any other providers used are FIPS certified and used appropriately.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "9323a42a9772823f806ce7b8d3965175"
        },
        {
          "alg" : "SHA-1",
          "content" : "1d37b7a28560684f5b8e4fd65478c9130d4015d0"
        },
        {
          "alg" : "SHA-256",
          "content" : "e169519e6441fb19cabf633d44fcef211506793e5be499ac9215648bd20634e0"
        },
        {
          "alg" : "SHA-512",
          "content" : "6a149e7fbeaf15928e2f79039d0f730c8d1b52c12db7a1eed9491de88a0eeaae821b9bb7616d50e244f8bd754efcf90d7ac9f1c42cdd728c3601df4905935a3d"
        },
        {
          "alg" : "SHA-384",
          "content" : "51b38b4b6dd559b30cd9f4b72300124bc100e1c4944098077a6bfb14fa93e07716149e87523b8ec200cecfb5cdfd8028"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "Bouncy Castle Licence",
            "url" : "https://www.bouncycastle.org/licence.html"
          }
        }
      ],
      "purl" : "pkg:maven/org.bouncycastle/bcutil-fips@2.1.4?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.bouncycastle.org/download/bouncy-castle-java-fips"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://www.bouncycastle.org/support"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.bouncycastle/bctls-fips@2.1.20?type=jar",
      "group" : "org.bouncycastle",
      "name" : "bctls-fips",
      "version" : "2.1.20",
      "description" : "The Bouncy Castle Java APIs for the TLS, including a JSSE provider. The APIs are designed primarily to be used in conjunction with the BC FIPS provider. The APIs may also be used with other providers although if being used in a FIPS context it is the responsibility of the user to ensure that any other providers used are FIPS certified and used appropriately.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f81962ca7e492deb4d65f165c38e96de"
        },
        {
          "alg" : "SHA-1",
          "content" : "9c0632a6c5ca09a86434cf5e02e72c221e1c930f"
        },
        {
          "alg" : "SHA-256",
          "content" : "c058a438442ea46d8abdefc95e581ebf2834e50504bda925a945b1f4ceb48d86"
        },
        {
          "alg" : "SHA-512",
          "content" : "7af89150b7b6ad23a3e8859976cd4e7cf8e152c16f8a376760b94a77b02b6f3072dc6d0a1ad916e5a28190b3e25c8f92a0720dd040bbb94fb9d1dd72df9492f3"
        },
        {
          "alg" : "SHA-384",
          "content" : "793d1411f41c6a8a0b964ce0d4e3b8dada545a33ce616aabf65c204f49dfb4c64ce02c79043ae5eb81ccc1d84a385f0a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "Bouncy Castle Licence",
            "url" : "https://www.bouncycastle.org/licence.html"
          }
        }
      ],
      "purl" : "pkg:maven/org.bouncycastle/bctls-fips@2.1.20?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.bouncycastle.org/download/bouncy-castle-java-fips"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://www.bouncycastle.org/support"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/io.confluent/common-utils@7.9.6?type=jar",
      "publisher" : "Confluent, Inc.",
      "group" : "io.confluent",
      "name" : "common-utils",
      "version" : "7.9.6",
      "description" : "Common utilities, including metrics and config.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f91788a4e6caec428288af30dc0ce5ec"
        },
        {
          "alg" : "SHA-1",
          "content" : "0eaf3dc0a56ed73c33018b74946d0ba05796b716"
        },
        {
          "alg" : "SHA-256",
          "content" : "9f2a0ad377abf3d5624722beb8456ef11e94581fc26d28c617497c0dc18bef8b"
        },
        {
          "alg" : "SHA-512",
          "content" : "2cc80c4e5dbe151db847bdb0706424d553dd4254766c8227b0561cc08d1285eac70e9a726db60a58d1e7de81d918fcc83f85c67da2458bbe4d3ca9e288e3dd85"
        },
        {
          "alg" : "SHA-384",
          "content" : "12e25674f8d8551cd36555596bb26413b814bbac1832c4a8e54ecac571a26e1c5485e35b83d9cdb114d008b80b0a1bbf"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.confluent/common-utils@7.9.6?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://confluent.io/common-utils"
        },
        {
          "type" : "distribution-intake",
          "url" : "s3://staging-confluent-packages-maven-654654529379-us-west-2/v7.9.6-rc260312075158/maven"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/confluentinc/common/common-utils"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/io.confluent/assembly-plugin-boilerplate@7.9.6?classifier=resources&type=zip",
      "group" : "io.confluent",
      "name" : "assembly-plugin-boilerplate",
      "version" : "7.9.6",
      "description" : "Maven Assembly Plugin boilerplate for Dockerized projects",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "2abdb27bbbad56b2c76793c5d682903d"
        },
        {
          "alg" : "SHA-1",
          "content" : "6be2242940d34ae65b4e3b8831a63a59a936af8d"
        },
        {
          "alg" : "SHA-256",
          "content" : "fa4a03ab1fe5d47f953119b635abc74d7b5032d6a809fa2ec8239376970c2c08"
        },
        {
          "alg" : "SHA-512",
          "content" : "79183ba718f42a7e71f56fecf26edff52e801e356a0c780dfba23c3132f23f78125803d13970ea29967fedfbccdc0907840a479fbc1b18d14fc39a1a78d72b16"
        },
        {
          "alg" : "SHA-384",
          "content" : "4feef37000861868898f8af7b81d567c6445b6a43cae834ed0c30d50fa27c046e79ef9e8ae25f88e2c6a4a99c225732b"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.confluent/assembly-plugin-boilerplate@7.9.6?classifier=resources&type=zip",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/confluentinc/common"
        },
        {
          "type" : "distribution-intake",
          "url" : "s3://staging-confluent-packages-maven-654654529379-us-west-2/v7.9.6-rc260312075158/maven"
        }
      ]
    }
  ],
  "dependencies" : [
    {
      "ref" : "pkg:maven/io.confluent/monitoring-interceptors@7.9.6?type=jar",
      "dependsOn" : [
        "pkg:maven/io.confluent/confluent-serializers-new@7.9.6-ce?type=jar",
        "pkg:maven/com.google.guava/guava@32.0.1-jre?type=jar",
        "pkg:maven/org.apache.kafka/kafka-clients@7.9.6-ce?type=jar",
        "pkg:maven/junit/junit@4.13.2?type=jar",
        "pkg:maven/org.slf4j/slf4j-reload4j@1.7.36?type=jar",
        "pkg:maven/ch.qos.reload4j/reload4j@1.2.25?type=jar",
        "pkg:maven/io.confluent/logredactor@1.0.17?type=jar",
        "pkg:maven/org.powermock/powermock-api-mockito2@2.0.9?type=jar",
        "pkg:maven/org.powermock/powermock-api-easymock@2.0.9?type=jar",
        "pkg:maven/org.powermock/powermock-core@2.0.9?type=jar",
        "pkg:maven/org.powermock/powermock-module-junit4@2.0.9?type=jar",
        "pkg:maven/org.easymock/easymock@5.2.0?type=jar",
        "pkg:maven/com.nimbusds/nimbus-jose-jwt@10.0.2?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/org.junit.jupiter/junit-jupiter-engine@5.8.2?type=jar",
        "pkg:maven/org.junit.vintage/junit-vintage-engine@5.8.2?type=jar",
        "pkg:maven/commons-io/commons-io@2.16.0?type=jar",
        "pkg:maven/org.mockito/mockito-core@4.6.1?type=jar",
        "pkg:maven/org.mockito/mockito-inline@4.6.1?type=jar",
        "pkg:maven/org.bouncycastle/bc-fips@2.1.2?type=jar",
        "pkg:maven/org.bouncycastle/bcpkix-fips@2.1.9?type=jar",
        "pkg:maven/org.bouncycastle/bctls-fips@2.1.20?type=jar",
        "pkg:maven/io.confluent/common-utils@7.9.6?type=jar",
        "pkg:maven/io.confluent/assembly-plugin-boilerplate@7.9.6?classifier=resources&type=zip"
      ]
    },
    {
      "ref" : "pkg:maven/io.confluent/confluent-serializers-new@7.9.6-ce?type=jar",
      "dependsOn" : [
        "pkg:maven/com.google.protobuf/protobuf-java@3.25.5?type=jar",
        "pkg:maven/org.apache.kafka/kafka-clients@7.9.6-ce?type=jar",
        "pkg:maven/com.google.code.gson/gson@2.9.0?type=jar",
        "pkg:maven/com.google.guava/guava@32.0.1-jre?type=jar",
        "pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@2.3.3?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java-util@3.25.5?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.google.protobuf/protobuf-java@3.25.5?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.kafka/kafka-clients@7.9.6-ce?type=jar",
      "dependsOn" : [
        "pkg:maven/com.github.luben/zstd-jni@1.5.6-4?type=jar",
        "pkg:maven/at.yawk.lz4/lz4-java@1.10.2?type=jar",
        "pkg:maven/org.xerial.snappy/snappy-java@1.1.10.5?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.github.luben/zstd-jni@1.5.6-4?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/at.yawk.lz4/lz4-java@1.10.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.xerial.snappy/snappy-java@1.1.10.5?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.google.code.gson/gson@2.9.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.google.guava/guava@32.0.1-jre?type=jar",
      "dependsOn" : [
        "pkg:maven/com.google.guava/failureaccess@1.0.1?type=jar",
        "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar",
        "pkg:maven/org.checkerframework/checker-qual@3.33.0?type=jar",
        "pkg:maven/com.google.errorprone/error_prone_annotations@2.18.0?type=jar",
        "pkg:maven/com.google.j2objc/j2objc-annotations@2.8?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.google.guava/failureaccess@1.0.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.checkerframework/checker-qual@3.33.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.18.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.google.j2objc/j2objc-annotations@2.8?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@2.3.3?type=jar",
      "dependsOn" : [
        "pkg:maven/jakarta.activation/jakarta.activation-api@1.2.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/jakarta.activation/jakarta.activation-api@1.2.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.google.protobuf/protobuf-java-util@3.25.5?type=jar",
      "dependsOn" : [
        "pkg:maven/com.google.protobuf/protobuf-java@3.25.5?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar",
        "pkg:maven/com.google.code.gson/gson@2.9.0?type=jar",
        "pkg:maven/com.google.errorprone/error_prone_annotations@2.18.0?type=jar",
        "pkg:maven/com.google.guava/guava@32.0.1-jre?type=jar",
        "pkg:maven/com.google.j2objc/j2objc-annotations@2.8?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/junit/junit@4.13.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.slf4j/slf4j-reload4j@1.7.36?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/ch.qos.reload4j/reload4j@1.2.25?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/ch.qos.reload4j/reload4j@1.2.25?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.confluent/logredactor@1.0.17?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.powermock/powermock-api-mockito2@2.0.9?type=jar",
      "dependsOn" : [
        "pkg:maven/org.mockito/mockito-core@4.6.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.mockito/mockito-core@4.6.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.powermock/powermock-api-easymock@2.0.9?type=jar",
      "dependsOn" : [
        "pkg:maven/org.easymock/easymock@5.2.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.easymock/easymock@5.2.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.powermock/powermock-core@2.0.9?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.powermock/powermock-module-junit4@2.0.9?type=jar",
      "dependsOn" : [
        "pkg:maven/junit/junit@4.13.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.nimbusds/nimbus-jose-jwt@10.0.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.junit.jupiter/junit-jupiter-engine@5.8.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.junit.vintage/junit-vintage-engine@5.8.2?type=jar",
      "dependsOn" : [
        "pkg:maven/junit/junit@4.13.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/commons-io/commons-io@2.16.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.mockito/mockito-inline@4.6.1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.mockito/mockito-core@4.6.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.bouncycastle/bc-fips@2.1.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.bouncycastle/bcpkix-fips@2.1.9?type=jar",
      "dependsOn" : [
        "pkg:maven/org.bouncycastle/bcutil-fips@2.1.4?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.bouncycastle/bcutil-fips@2.1.4?type=jar",
      "dependsOn" : [
        "pkg:maven/org.bouncycastle/bc-fips@2.1.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.bouncycastle/bctls-fips@2.1.20?type=jar",
      "dependsOn" : [
        "pkg:maven/org.bouncycastle/bcutil-fips@2.1.4?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.confluent/common-utils@7.9.6?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.confluent/assembly-plugin-boilerplate@7.9.6?classifier=resources&type=zip",
      "dependsOn" : [ ]
    }
  ]
}