2024-07-04T09:31:33Z OWASP Foundation CycloneDX Maven plugin 2.7.9 8e595cdb67f17e4b41e046456970591d 69e8ca804520d09ce4657e7235bae84d01cbffa6 aa09074fe5aa403c008cd4fc7ef8ce41cd244489337f16b3e91a3914158a4db8 1488a8112da8e675813d7585f57c5efb178aed32901118186ee12d0e4ae3d19c53774c7f860bf70d17d70f050119b69443a2637cf641675b4b5d9cdcdd69b89b b097295dfbf10887abc6eec58d4d0822cde5a73d1f5c1cf183a57bf569016ad5ced9d34efae3e574d82bb62837540c6c Confluent, Inc. io.confluent.security authorizer-client 7.3.9 Metadata Service primarily implementing RBAC security. Apache-2.0 https://www.apache.org/licenses/LICENSE-2.0 pkg:maven/io.confluent.security/authorizer-client@7.3.9?type=jar http://confluent.io/authorizer-clients3://staging-confluent-packages-maven-654654529379-us-west-2/v7.3.9-rc240704064029/mavenhttps://github.com/confluentinc/metadata-service/authorizer-client makeBom compile,provided,runtime,system,test io.confluent authorizer 7.3.9-ce required 292a7b8751616ba35c098c0ddb0bb5d1 c93bc4809fae0162f2f2a07795eebf02a66916b8 d3eb0bd53d6deb939cdb1363e65623667a3bfcefb11b3282d7502714049c94fe 7a4c58a31e8f36eec5d5bac144d2f9770a2663362e0cdb7e976c121d2d431e0a27d5356bac814bd193c67072128d2b73be19f8f2c861eeebf242c154612094d8 6e5f529696266af8cc70b9f99202409cbf48f46a511698a23886e99e81a7390616828152b9199d417fe06a2dad700d64 pkg:maven/io.confluent/authorizer@7.3.9-ce?type=jar https://kafka.apache.org org.apache.kafka kafka-server-common 7.3.9-ce required 9598e6a7583c034768eafebeee34638f 5e7cc7edeb04ea5759b06873f4e6e525388c4e0f b909e13954ae9d52d654c76dbcb0c95de92015631b77f86412f9fe1ca510e8ad 478df5d35602031ad4d72b16b33eec73c3fe17464bebd1e1dfc615ab11059decf847de138dc72651fc65f4c0dbd0ec27128e4f2234086b9967f5fc9014984b99 ab6b477736cddc3be3175ecc8cab86ecf2dca1ea80aaabc7e4229c7cdb9473a58d1c0aa9969b6e59005159e1fa124106 pkg:maven/org.apache.kafka/kafka-server-common@7.3.9-ce?type=jar https://kafka.apache.org com.yammer.metrics metrics-core 2.2.0 Yammer's Metrics library. required e9f8554d1924149fbfbdd9a8b345dfbd f82c035cfa786d3cbec362c38c22a5f5b1bc8724 6b7a14a6f34c10f8683f7b5e2f39df0f07b58c7dff0e468ebbc713905c46979c be650071978532268b3d0381cae820700fba6ac8d0c13f681a4e81ccbb6f097a258063aa5de942c6ebe8915f55c08a4c6df44f04de1cedcfccfdada6049a7f00 9022bb84e7ee987c40803d1e5dd584e39a976863a048e88d456065ba9e12eb3ade6dc853ab71aa03c870a994dbfe0f92 Apache-2.0 https://www.apache.org/licenses/LICENSE-2.0 pkg:maven/com.yammer.metrics/metrics-core@2.2.0?type=jar http://metrics.codahale.com/metrics-core/http://oss.sonatype.org/service/local/staging/deploy/maven2/http://github.com/codahale/metrics/issues#issue/http://github.com/codahale/metrics/metrics-core/ FasterXML com.fasterxml.jackson.core jackson-databind 2.14.2 General data-binding functionality for Jackson: works on core streaming API required c1b12dd14734cd1986132bf55042dd7e 01e71fddbc80bb86f71a6345ac1e8ab8a00e7134 501d3abce4d18dcc381058ec593c5b94477906bba6efbac14dae40a642f77424 85473a29d23292f49092af9e7a7a63993206847c53b3e71f3c67245d68f7b19cc7c341e0ece409eb5e96602df98a848e957d8691fdd2c5fcddd807df9078255e 5c54d6c497cb329c3424a30319bf657ea222349eadc5ae74c30e8dc1525d7b60b7785f4d20370267b03343dd738cc13e Apache-2.0 pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.14.2?type=jar https://github.com/FasterXML/jacksonhttps://oss.sonatype.org/service/local/staging/deploy/maven2/https://github.com/FasterXML/jackson-databind/issueshttps://github.com/FasterXML/jackson-databind FasterXML com.fasterxml.jackson.core jackson-core 2.14.2 Core Jackson processing abstractions (aka Streaming API), implementation for JSON required 6ee422ee4c481b2d5aacb2b5e36a7dc0 f804090e6399ce0cf78242db086017512dd71fcc b5d37a77c88277b97e3593c8740925216c06df8e4172bbde058528df04ad3e7a 208953cf72691b3bab1ca2f9a045cccd3d75c46c90099ba884fbf16bc3e45045e5cd014d2c68c96e8a8826f87a5f0e18cb34b35e7ef03348953869c21e197367 e806595862c5fcdae801d9845befc1d12c97e6036ee839d34590dbd785a422d5832cf4fc5c7ee6e1a5ee7a59f37740f0 Apache-2.0 pkg:maven/com.fasterxml.jackson.core/jackson-core@2.14.2?type=jar https://github.com/FasterXML/jackson-corehttps://oss.sonatype.org/service/local/staging/deploy/maven2/https://github.com/FasterXML/jackson-core/issueshttps://github.com/FasterXML/jackson-core FasterXML com.fasterxml.jackson.datatype jackson-datatype-jdk8 2.14.2 Add-on module for Jackson (http://jackson.codehaus.org) to support JDK 8 data types. required 5a3469a760da14d2cd6838dfe5393e9c 2f3c71211b6ea7a978eba33574d7135d536e07fb aa55d3d545e02d959a6e8c83927acc55c9937d717d4d3fd962d27ec7b431b8c4 f0ce5e4600c047adf347d973166cedf003b5aeac289c6518b12a955922bb3cc7c0692d427e395404194271002fc8c0ef5fb9be4f26aab45e520180a7f08f4970 294cbe0a6f44e0bb3eabcc6e3ad00af28224cbdf53122d9027d7fe892808734d7b4673592337923f3227334c1250a6e3 Apache-2.0 pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jdk8@2.14.2?type=jar https://github.com/FasterXML/jackson-modules-java8/jackson-datatype-jdk8https://oss.sonatype.org/service/local/staging/deploy/maven2/https://github.com/FasterXML/jackson-modules-java8/issueshttp://github.com/FasterXML/jackson-modules-java8/jackson-datatype-jdk8 QOS.ch org.slf4j slf4j-api 1.7.36 The slf4j API required 872da51f5de7f3923da4de871d57fd85 6c62681a2f655b49963a5983b8b0950a6120ae14 d3ef575e3e4979678dc01bf1dcce51021493b4d11fb7f1be8ad982877c16a1c0 f9b033fc019a44f98b16048da7e2b59edd4a6a527ba60e358f65ab88e0afae03a9340f1b3e8a543d49fa542290f499c5594259affa1ff3e6e7bf3b428d4c610b 2b14ad035877087157e379d3277dcdcd79e58d6bdb147c47d29e377d75ce53ad42cafbf22f5fb7827c7e946ff4876b9a MIT https://opensource.org/licenses/MIT pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar http://www.slf4j.orghttps://oss.sonatype.org/service/local/staging/deploy/maven2/https://github.com/qos-ch/slf4j/slf4j-api org.bitbucket.b_c jose4j 0.9.5 The jose.4.j library is a robust and easy to use open source implementation of JSON Web Token (JWT) and the JOSE specification suite (JWS, JWE, and JWK). It is written in Java and relies solely on the JCA APIs for cryptography. Please see https://bitbucket.org/b_c/jose4j/wiki/Home for more info, examples, etc.. required fb939f8894b9509332ab43f40df3cc47 e4ca26802488e6f16e24558d74ac8775a955fdd3 808fb3166f3e67dad9811c331029ab1681242fd52b735bc3f33f281167fcc72e d475aa9e74a173e27aa72f4361eef288d259f337f8082eafa572aad763150ea679829e2433cb03cb0249eb58a83d68bfbc54d124154dd71b745fc7182620c59f 171c03f06df7ab8bd69318b900863b2d69126769bda9f6c96bd0a2977079a45b1b6a4949bfcadb3ca58dc31d545c5a4e Apache-2.0 pkg:maven/org.bitbucket.b_c/jose4j@0.9.5?type=jar https://bitbucket.org/b_c/jose4j/https://oss.sonatype.org/service/local/staging/deploy/maven2/https://bitbucket.org/b_c/jose4j FasterXML com.fasterxml.jackson.core jackson-annotations 2.14.2 Core annotations used for value types, used by Jackson data binding package. required 10d19982a8890f6eb37557af2f58e272 a7aae9525864930723e3453ab799521fdfd9d873 2c6869d505cf60dc066734b7d50339f975bd3adc635e26a78abb71acb4473c0d a978384791bdc074df8039ffc95bb93f0f60d14d476861ee2a0ce208b33a991c486a07345cb80559252c3ff1dea14d3efb818c19bdc18435946dc8754d8e6ee3 d5111c69020666689414921ae4a8950f9fbdf86dec1360f6827beeee9ebd3f78db74e69c76e0becaba47eb34fdaaeb5a Apache-2.0 pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.14.2?type=jar https://github.com/FasterXML/jacksonhttps://oss.sonatype.org/service/local/staging/deploy/maven2/https://github.com/FasterXML/jackson-annotations/issueshttps://github.com/FasterXML/jackson-annotations org.testng testng 7.5.1 Testing framework for Java required 86e2f3f5080bdca34ee7e6097647d600 6673f647a35826fb01ff3129edc241d88bd27b88 a5ac92d2362ccb3a509abe68e385ca809a7c96fcbaf851b3ee8bacb2ac899e2f 0bdf858bd678e0887709cc2598f8857b4b86184af7a7dbb3cd20bb6b39c20587ea135fa3bbe645d9d863df78ed4cd67637edd248ed6c454db4551cbc4d5ee68a f291628b8085521e977da9b86b720578187754199c6ac88b34c6f9e4b369c55b6bdf7ada80aaf4b475376adce5bc9b1c Apache-2.0 pkg:maven/org.testng/testng@7.5.1?type=jar https://testng.orghttps://github.com/cbeust/testng/issueshttps://github.com/cbeust/testng.git com.google.code.findbugs jsr305 3.0.1 JSR305 Annotations for Findbugs required c6532beb3f7cc54a8d73d25d5602b9e4 f7be08ec23c21485b9b5a1cf1654c2ec8c58168d c885ce34249682bc0236b4a7d56efcc12048e6135a5baf7a9cde8ad8cda13fcd cd537b74b44421f398832d610142c161a292851ad3b1657cfd8c530749b1fb16a13ae596abd58e419093b258d6db943ce9535b7d4a2094871a0d20d29d12c408 045b35afb978db023ef70c49232d6eecefd4423f1b08247c236477229f4ec7766cb7a0ae2a5d2ef81b3b69f61b5acbd4 Apache-2.0 pkg:maven/com.google.code.findbugs/jsr305@3.0.1?type=jar http://findbugs.sourceforge.net/https://oss.sonatype.org/service/local/staging/deploy/maven2/https://code.google.com/p/jsr-305/ com.beust jcommander 1.78 Command line parser library for Java required 50552e69ce8115d80b9a31ec93c87bc3 a3927de9bd6f351429bcf763712c9890629d8f51 7891debb84b5f83e9bd57593ebece3399abbe0fd938cf306b3534c57913b9615 5ee2ef4c12888a48d7c830189d06ee8a653c7664a53c9b6fa935d4e7866b0454111f8092d7ece086ec80c61edab2856187a1e247873e5c8e4724efb02c37504b cfd68158d572057bb9114e066e44c5bfba57e549b90c547686fe97454c3c35a244f65e59384dc956396b65246cd193ae Apache-2.0 pkg:maven/com.beust/jcommander@1.78?type=jar https://jcommander.orghttps://github.com/cbeust/jcommander/issueshttp://example.com/my-library/ org.webjars jquery 3.5.1 WebJar for jQuery required 4873982991d54d745f0d94a1daab7694 2392938e374f561c27c53872bdc9b6b351b6ba34 83168112220ac912a3dba0eebae90a4da5bf1e24b1bafd401e3d4f9f598bb2cb 9f560415b36875958ff1d3c6d37fa79d6d134c5f5fc7719dd21db36d1f24dec39787834b2a9ffb104ec6b56e725ccc524a8ff9b189ced3d68e24296b2daae720 522c18d09a188c8bc6f9981afcc3bb89e350d7c86bb34227d3373b4c9802bfe8d0bd63970111a9760cb4cf692edb40da MIT https://opensource.org/licenses/MIT pkg:maven/org.webjars/jquery@3.5.1?type=jar http://webjars.orghttps://oss.sonatype.org/service/local/staging/deploy/maven2/http://github.com/webjars/jquery com.squareup.retrofit2 retrofit 2.9.0 A type-safe HTTP client for Android and Java. required 890d951895e6d080185377c741526002 d8fdfbd5da952141a665a403348b74538efc05ff e6ea1929c46852f5bec66ab3357da383476cef4e8d1deefdbf195b79cc4d6581 8abaaf318db60f5c85f7b6c0d0c6514cf3872f07961e731b6011dea99b1f6c75fdb9a54a841df6073f0dd81d433047dbb4ebba8551c98aecc8b63a38f2b01168 985cf8250284e75c9fe22210b9036924345bcfc7479b02082d029cb5a9f40a627a9ffbdacc8f38fbd6a7feaf4d5658f9 Apache-2.0 pkg:maven/com.squareup.retrofit2/retrofit@2.9.0?type=jar https://github.com/square/retrofithttps://github.com/square/retrofit/ com.squareup.okhttp3 okhttp 3.14.9 An HTTP+HTTP/2 client for Android and Java applications required 69e22f2ccb614cf1bcfcca5cf7711045 3e6d101343c7ea687cd593e4990f73b25c878383 2570fab55515cbf881d7a4ceef49fc515490bc027057e666776a2832465aeca0 25a7282ba15ece63784e880520e2f1a6dde97712a7a596a96072ba1b4d9fb4e3e82879f2669289305bc9a2396aff5fe3f7dd2bb0b082f5e5fe32fe5bc65659b6 2fc5c21d4ba4769330b55db12231f33bb760b10eee787bd907ff5e915786604fd12f4cbf35cea15c5c3b8474c896a219 Apache-2.0 pkg:maven/com.squareup.okhttp3/okhttp@3.14.9?type=jar https://github.com/square/okhttp/okhttphttps://oss.sonatype.org/service/local/staging/deploy/maven2/https://github.com/square/okhttp/issueshttps://github.com/square/okhttp/okhttp/ com.squareup.okio okio 1.17.2 A modern I/O API for Java required 54a6a8979bd8e64e1fbf21d511654737 78c7820b205002da4d2d137f6f312bd64b3d6049 f80ce42d2ffac47ad4c47e1d6f980d604d247ceb1a886705cf4581ab0c9fe2b8 3ad9127705ad00962b96a10d134a06378a3ef5558b0c5955ace54e15a771027a11503981a8dcf0959fb806d35ba8da9b12282a5a2f3d6dd7c71266120a4e0b4d 98a16e221860faf4ae809743fbc956614aa32b0d78b35703d8ceb78c42a42e9afe7f1b3c8c9df5c63b9ee6e0fcfcd98c Apache-2.0 pkg:maven/com.squareup.okio/okio@1.17.2?type=jar https://github.com/square/okio/okiohttps://oss.sonatype.org/service/local/staging/deploy/maven2/https://github.com/square/okio/issueshttps://github.com/square/okio/okio/ org.apache.kafka kafka-clients 7.3.9-ce required 982b183e158bd0b7a07de9270ac26ec1 abdd72b3de1e272b6466a9aff951a518c7944486 c5b92d013fcf9113771a17d555c6830a7ace5f654031faec8d1ba857b39656d6 0c26e22a0ec7e52cedf4b5a8e7683e57e7a39b82fd096a13bf4b12b4630cfc4bf2e6fe293ab3ce97e69d609c8c68b73bef71e596efc3c50c77cc512cb23f97b7 fb7757e8ec6432d23f024ba589aa46c24e5cd33fb83553aadc62bed139d4e50012db474efa0f533268ce86ee6fc249fb pkg:maven/org.apache.kafka/kafka-clients@7.3.9-ce?type=jar https://kafka.apache.org io.confluent telemetry-events-api 7.3.9-ce required d40816410c508ee41bf060f139e9652f 71271f5221169d7437bcb5d3a451c8367c9597b9 2d69ccad00dc14178ba4d8bc768acb89ba94174db009c861126581776a28e139 88efa456124617a969d507128e713d9837efe59d5a5a59c0ab262f2859f273cd83f5af57c50604ebde3cbcc90f7958e31f8b3ccf8488e1a771bbf6387c14ff76 dd0064d027b6b2098625b6c5d9790c67d30bc40562de68b82291a20bb08ea70fcc54b13c1b4a41714db328ed9f6c2848 pkg:maven/io.confluent/telemetry-events-api@7.3.9-ce?type=jar https://kafka.apache.org com.github.luben com.github.luben zstd-jni 1.5.2-1 JNI bindings for Zstd native library that provides fast and high compression lossless algorithm for Java and all JVM languages. required 2909788860e8e3ee29d51b327a43ca24 fad786abc1d1b81570e8d9a2fc8a1ef479bc27b6 93f7e4cbc907c2650f89f9f0bec94873735a58f1e4b66a54973294e4ec1878e8 92174059714b98d4275dca1b057c857766267afe6ae2b27bfdfe50395cb90a3ec973032977a074c5ce516a3769336e6bf63d3bbde95bea165c409f1c990a651d cdc9284a4537fcf83166bae1c4731463d94ad9615f91200c4da6368ddbd769314e87453e9114649c694966e6c77d4883 BSD-2-Clause pkg:maven/com.github.luben/zstd-jni@1.5.2-1?type=jar https://github.com/luben/zstd-jni org.lz4 lz4-java 1.8.0 Java ports and bindings of the LZ4 compression algorithm and the xxHash hashing algorithm required 936a927700aa8fc3b75d21d7571171f6 4b986a99445e49ea5fbf5d149c4b63f6ed6c6780 d74a3334fb35195009b338a951f918203d6bbca3d1d359033dc33edd1cadc9ef 98d59086a6021ca571d9c1d64b715e43044c730e1ac563f514c40cf44302615d30378b6d5cc69990446522de6260dc8e7b303e3990a3139dc326d058dfb6dbd9 8e3f2acdbb41a00c4d9cc5f328e63fb626ac7c6c84e1bf9502e2fcc76a591b2b819b2d27b29925ff986b95c297b30e2c Apache-2.0 pkg:maven/org.lz4/lz4-java@1.8.0?type=jar https://github.com/lz4/lz4-javagit://github.com/lz4/lz4-java.git xerial.org org.xerial.snappy snappy-java 1.1.10.5 snappy-java: A fast compression/decompression library required a52ffcdbbe525b486237a7098e5c5ff7 ac605269f3598506196e469f1fb0d7ed5c55059e 0f3f1857ed33116583f480b4df5c0218836c47bfbc9c6221c0d73f356decf37b 36c288aa84017b52362a49a20d1702151a16b9f58518b6877f11122941a549d94fab8d515f7f1ad6384fb94be569328abf862edaf970c10a16832498dfda853b 693a542ca2471dec4da5fe582563aff1bf5238e1a8d1a1f79cd8138334f94f1112094fbd270b1637d983c9290084a6e1 Apache-2.0 https://www.apache.org/licenses/LICENSE-2.0 pkg:maven/org.xerial.snappy/snappy-java@1.1.10.5?type=jar https://github.com/xerial/snappy-javahttps://github.com/xerial/snappy-java com.squareup.retrofit2 converter-scalars 2.9.0 A Retrofit Converter for Java's scalar value types. required 6e2e258b8b91ce475cd6bb38b3419cb5 e9ee6f35fb7ba877a35519f9a8f55c648df820d4 8ed09e0b4a7c8ea602c03f5f3def9c0f6672dfad66201d642908dca818a990af 86cee47fd344ffea614f97173f6031c2d940e0eadee869784e538b8b7d641735674a0938a7c33ddfb5d50022e07a0414aa70c07df2350016fb556c8ff215b693 9d8470dd857781d5b7eb3f56c5ea78e3360dbd2e95c0dbd8ff88f5d1e51ef6e95caf496c689e9c0e62a04098f22967a3 Apache-2.0 pkg:maven/com.squareup.retrofit2/converter-scalars@2.9.0?type=jar https://github.com/square/retrofithttps://github.com/square/retrofit/ com.squareup.retrofit2 converter-jackson 2.9.0 A Retrofit Converter which uses Jackson for serialization. required cd5b07f9feb365f9d082cb1791e3fe86 19b4010914e747601e26f46c6a403044bbe0b2bf 7d94ccd114408ce1b1e30c52d0e412acf3285ea2d3debd734d17558a629c3b28 02602c4098227f0cd5e4d834647bf3b1cd276021902461662746c821497aca440187a10dc0be9dddebe85af17e447bf1f75ea454e51c72fca29efef208b9185f 9866f6cb1d29747ab7b7fedbf6ae05bff52f7cddeb61cb19e55ab1754a3399bf03d0101db113fcb5fba515c5b6622837 Apache-2.0 pkg:maven/com.squareup.retrofit2/converter-jackson@2.9.0?type=jar https://github.com/square/retrofithttps://github.com/square/retrofit/ com.github.tomakehurst wiremock-jre8-standalone 2.31.0 A web service test double for all occasions - standalone edition required 85ae33a2b797934187602c45f35c61d3 eadd51cfc0f19fb8e51a392438861f2dd8fc304d c5cd526e04c57293ec847d845733b017c4052d2132653332e05a54272934a305 6805061d36a27e3323d7f8a34e58befd294e2c30bf84887f96976873a184214ddd7e8f6d98c7606f0339baaa4b8547a4a796474e6147b7c978b103231e1c55e1 0afb5b6f8d0bbdacb8d3c891a9118069264606bcd0219c75bee1eaee1f7761b1c38989233bf735265556ddf2ef1d3e94 Apache-2.0 pkg:maven/com.github.tomakehurst/wiremock-jre8-standalone@2.31.0?type=jar http://wiremock.orghttps://tomakehurst@github.com/tomakehurst/wiremock.git Confluent, Inc. io.confluent common-utils 7.3.9 Common utilities, including metrics and config. required 9de453f8c035b8aededc7b0bbd543f21 e09d9a647e9c4a1ebde6138c967e26c964e18ca6 2cc7ded693b98c54e08deed99d895e6d4554996784b6abb661b60a02b2ab2e48 8377f528beda6e15be72a9ae9f2f78e1863b82f66cd40cce356a7b0a72480de40ce31fe346debc7d6074cbd6461fa5aa788cd7466d8567cc1b70a92e0a1d00cf 25bbb56ef6f96e2e4053a91d4f71b6105fe1180465fcf92cbf01810e238814f4cfbda5302fcc5d4102c64723d330e53e Apache-2.0 https://www.apache.org/licenses/LICENSE-2.0 pkg:maven/io.confluent/common-utils@7.3.9?type=jar https://confluent.io/common-utilss3://staging-confluent-packages-maven-654654529379-us-west-2/v7.3.9-rc240704064029/mavenhttps://github.com/confluentinc/common/common-utils io.confluent assembly-plugin-boilerplate 7.3.9 required e4357c84c07a08927403165c3e9fe5d8 841f77e73fc92e7507ffab7d1ab826faf715ecdf 71a55f1ff1bfd3c1aa3bfd17d5ed8a3e7d91742caaf5ced791f9a4ed1097ea62 afa35468453545a584955a03cccb1aedc633beb1c279e798e37b3241b9a6bb6f00f869a29d072d3c374a4a52042d2e97f0d9cee5786bf4d32d308b14b2f8c03f 292109552ef8ab7fe4807abe0f6f2d8fcee1a5c526f69252f24ee9d77d199898cf4c0231bca18fb81eaccef1946ff8a4 pkg:maven/io.confluent/assembly-plugin-boilerplate@7.3.9?classifier=resources&type=zip