{
  "bomFormat" : "CycloneDX",
  "specVersion" : "1.5",
  "serialNumber" : "urn:uuid:69d47a2d-e8ff-31f0-ae8a-8eb29e15e007",
  "version" : 1,
  "metadata" : {
    "timestamp" : "2025-11-11T14:31:53Z",
    "lifecycles" : [
      {
        "phase" : "build"
      }
    ],
    "tools" : {
      "components" : [
        {
          "type" : "library",
          "author" : "OWASP Foundation",
          "group" : "org.cyclonedx",
          "name" : "cyclonedx-maven-plugin",
          "version" : "2.9.0",
          "description" : "CycloneDX Maven plugin",
          "hashes" : [
            {
              "alg" : "MD5",
              "content" : "dfaeab7ec837ce07874e2ee66fdc57d3"
            },
            {
              "alg" : "SHA-1",
              "content" : "8bab47bafc8183d0a5f37790ff55ed05ead1ae2d"
            },
            {
              "alg" : "SHA-256",
              "content" : "67117e03eae4a03ca8bab3add044995f4899aa21798a2510b8265ef8101e90ac"
            },
            {
              "alg" : "SHA-512",
              "content" : "ae6b706516bb76da806b7854aef9e348fa593f5159ae9d693ad38942165c0ebc0846d977a477f6029612d43468fd2cd73a5aa253c228a94fb8d184e0acefc3d2"
            },
            {
              "alg" : "SHA-384",
              "content" : "ee872354d8b0dcd6f9835a913b3aaba70d9365a46043be78020183282a1e9fca812e969246cbe31d642541591b46648b"
            }
          ]
        }
      ]
    },
    "component" : {
      "type" : "library",
      "bom-ref" : "pkg:maven/io.confluent.security/authorizer-client@7.4.13?type=jar",
      "publisher" : "Confluent, Inc.",
      "group" : "io.confluent.security",
      "name" : "authorizer-client",
      "version" : "7.4.13",
      "description" : "Metadata Service primarily implementing RBAC security.",
      "licenses" : [
        {
          "license" : {
            "name" : "Confluent License Agreement",
            "url" : "https://www.confluent.io/legal/confluent-license-agreement/"
          }
        }
      ],
      "purl" : "pkg:maven/io.confluent.security/authorizer-client@7.4.13?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://confluent.io/authorizer-client"
        },
        {
          "type" : "distribution-intake",
          "url" : "s3://staging-confluent-packages-maven-654654529379-us-west-2/v7.4.13-rc251111125610/maven"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/confluentinc/metadata-service/authorizer-client"
        }
      ]
    },
    "properties" : [
      {
        "name" : "maven.goal",
        "value" : "makeBom"
      },
      {
        "name" : "maven.scopes",
        "value" : "compile,provided,runtime,system,test"
      }
    ]
  },
  "components" : [
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/io.confluent/authorizer@7.4.13-ce?type=jar",
      "group" : "io.confluent",
      "name" : "authorizer",
      "version" : "7.4.13-ce",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "92d7ad56198a110e359c2bbc5f735d61"
        },
        {
          "alg" : "SHA-1",
          "content" : "3696b68e819675dc9f8f61b7f3106a838712ed68"
        },
        {
          "alg" : "SHA-256",
          "content" : "40ddc75c79e363af44b744706bc3c43b9cf409713ef9ca927cc75c2664ff47ed"
        },
        {
          "alg" : "SHA-512",
          "content" : "a5dae55f3d6097663e08597ada13eea6ed47f5395242667446e79bd0f20550073a4f36e572c5ef54e6993678ef319356cd55035385768e74585fb9b41b075e18"
        },
        {
          "alg" : "SHA-384",
          "content" : "531e86f79a85dbdcb31d27d48db8a8373eb389630cae0660e46caf9515dcc7180c1ecb78746de2cfb281fcef6e637728"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "Confluent License Agreement",
            "url" : "https://www.confluent.io/legal/confluent-license-agreement/"
          }
        }
      ],
      "purl" : "pkg:maven/io.confluent/authorizer@7.4.13-ce?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://docs.confluent.io/platform/current/get-started/platform.html"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.kafka/kafka-server-common@7.4.13-ce?type=jar",
      "group" : "org.apache.kafka",
      "name" : "kafka-server-common",
      "version" : "7.4.13-ce",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f0e3cafad6edbd1dc9bb89c914743d56"
        },
        {
          "alg" : "SHA-1",
          "content" : "3c9cc9f20e7ae54c3626ab2ed8b0c0a8618ce7be"
        },
        {
          "alg" : "SHA-256",
          "content" : "45a5b59f71effb016ae0e344d3edf3e6a368bf73b2e5095290f2d0c038cbe765"
        },
        {
          "alg" : "SHA-512",
          "content" : "ebc9f93150eadbe5be6d3800830a12fedb893ef10132b63d4383a1767b3ef89eb10e8480f9851eb54974a68461b3e148976797c6a9d3a157910d24c4261a485b"
        },
        {
          "alg" : "SHA-384",
          "content" : "9e8d2e3e7eb3f9f4632d947ccebb5a95e93b2edec94066a8d77c5bddcaa23972e7598589f5a2b8b7e764e7670a49ddf9"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "Confluent License Agreement",
            "url" : "https://www.confluent.io/legal/confluent-license-agreement/"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.kafka/kafka-server-common@7.4.13-ce?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://docs.confluent.io/platform/current/get-started/platform.html"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.yammer.metrics/metrics-core@2.2.0?type=jar",
      "group" : "com.yammer.metrics",
      "name" : "metrics-core",
      "version" : "2.2.0",
      "description" : "Yammer's Metrics library.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "e9f8554d1924149fbfbdd9a8b345dfbd"
        },
        {
          "alg" : "SHA-1",
          "content" : "f82c035cfa786d3cbec362c38c22a5f5b1bc8724"
        },
        {
          "alg" : "SHA-256",
          "content" : "6b7a14a6f34c10f8683f7b5e2f39df0f07b58c7dff0e468ebbc713905c46979c"
        },
        {
          "alg" : "SHA-512",
          "content" : "be650071978532268b3d0381cae820700fba6ac8d0c13f681a4e81ccbb6f097a258063aa5de942c6ebe8915f55c08a4c6df44f04de1cedcfccfdada6049a7f00"
        },
        {
          "alg" : "SHA-384",
          "content" : "9022bb84e7ee987c40803d1e5dd584e39a976863a048e88d456065ba9e12eb3ade6dc853ab71aa03c870a994dbfe0f92"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.yammer.metrics/metrics-core@2.2.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://metrics.codahale.com/metrics-core/"
        },
        {
          "type" : "distribution-intake",
          "url" : "http://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://github.com/codahale/metrics/issues#issue/"
        },
        {
          "type" : "vcs",
          "url" : "http://github.com/codahale/metrics/metrics-core/"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.16.0?type=jar",
      "publisher" : "FasterXML",
      "group" : "com.fasterxml.jackson.core",
      "name" : "jackson-databind",
      "version" : "2.16.0",
      "description" : "General data-binding functionality for Jackson: works on core streaming API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f9ae3e3bd773be8b474cb1b98dcf7ee6"
        },
        {
          "alg" : "SHA-1",
          "content" : "3a6b7f8ff7b30d518bbd65678e9c30cd881f19a7"
        },
        {
          "alg" : "SHA-256",
          "content" : "8aaf1753823be70b798290e5826ab5bfe015d35b3a36a5d3c2ec9f57d4b0138b"
        },
        {
          "alg" : "SHA-512",
          "content" : "2f0a4211c1723bd88299380093a935840290694838a4c5ae0989bad46a615e02017b707ba7f3b825d0f0163f42a392efd0a1629024594992b5a4edee415c207a"
        },
        {
          "alg" : "SHA-384",
          "content" : "8113432d108a152cd08ff4b12e4ea649d3240db070d3194a64712459436c1ea0c4b5362ec86ed076dc92c013215b043c"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.16.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/FasterXML/jackson"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/FasterXML/jackson-databind/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/FasterXML/jackson-databind"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.16.0?type=jar",
      "publisher" : "FasterXML",
      "group" : "com.fasterxml.jackson.core",
      "name" : "jackson-core",
      "version" : "2.16.0",
      "description" : "Core Jackson processing abstractions (aka Streaming API), implementation for JSON",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "e2510fa60b7d363566a9016a8c40710f"
        },
        {
          "alg" : "SHA-1",
          "content" : "899e5cf01be55fbf094ad72b2edb0c5df99111ee"
        },
        {
          "alg" : "SHA-256",
          "content" : "66e2cde4cc7e565d5fce2a2998b64e991777bf9fad4d220735c525fd8d01c31a"
        },
        {
          "alg" : "SHA-512",
          "content" : "89b134b2808c34562f751ff39b938e8c1b67030c4cfb8fd0418d76aed1d6b8f256915a5e88d9935f472322b414a7002e59d92160854cbd01774b28eed61c5315"
        },
        {
          "alg" : "SHA-384",
          "content" : "fae7b757f776419e32e2f598f12c92c576c37e0ca489250a4aabf2db118913163aba958a9d5414da47d770810b20594a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.16.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/FasterXML/jackson-core"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/FasterXML/jackson-core/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/FasterXML/jackson-core"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jdk8@2.16.0?type=jar",
      "publisher" : "FasterXML",
      "group" : "com.fasterxml.jackson.datatype",
      "name" : "jackson-datatype-jdk8",
      "version" : "2.16.0",
      "description" : "Add-on module for Jackson (http://jackson.codehaus.org) to support JDK 8 data types.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "90a345c79790ef01d916cbb27673bb6a"
        },
        {
          "alg" : "SHA-1",
          "content" : "20ebeb699640f96fc6dd8d3852cb52a57da13333"
        },
        {
          "alg" : "SHA-256",
          "content" : "197056dd721fb460b483660e423c04142af4b9d408be856f7626ca0aca63966c"
        },
        {
          "alg" : "SHA-512",
          "content" : "4764bb4f8a86a39d3cca353d15c825c11e1dd90ff6320492a43559a15b1017d7833592b6d73661650d2737a9dfd060d59c100ee6363f9ddbc11e54d43bb24e07"
        },
        {
          "alg" : "SHA-384",
          "content" : "15e4a4ea88a4567b1d3871d14a744e4df50591b09e22ecca270753f71f8e32a691cef1fd303242d5d286ccdffb5dc827"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jdk8@2.16.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/FasterXML/jackson-modules-java8/jackson-datatype-jdk8"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/FasterXML/jackson-modules-java8/issues"
        },
        {
          "type" : "vcs",
          "url" : "http://github.com/FasterXML/jackson-modules-java8/jackson-datatype-jdk8"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
      "publisher" : "QOS.ch",
      "group" : "org.slf4j",
      "name" : "slf4j-api",
      "version" : "1.7.36",
      "description" : "The slf4j API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "872da51f5de7f3923da4de871d57fd85"
        },
        {
          "alg" : "SHA-1",
          "content" : "6c62681a2f655b49963a5983b8b0950a6120ae14"
        },
        {
          "alg" : "SHA-256",
          "content" : "d3ef575e3e4979678dc01bf1dcce51021493b4d11fb7f1be8ad982877c16a1c0"
        },
        {
          "alg" : "SHA-512",
          "content" : "f9b033fc019a44f98b16048da7e2b59edd4a6a527ba60e358f65ab88e0afae03a9340f1b3e8a543d49fa542290f499c5594259affa1ff3e6e7bf3b428d4c610b"
        },
        {
          "alg" : "SHA-384",
          "content" : "2b14ad035877087157e379d3277dcdcd79e58d6bdb147c47d29e377d75ce53ad42cafbf22f5fb7827c7e946ff4876b9a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/license/mit/"
          }
        }
      ],
      "purl" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.slf4j.org"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/qos-ch/slf4j/slf4j-api"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.bitbucket.b_c/jose4j@0.9.5?type=jar",
      "group" : "org.bitbucket.b_c",
      "name" : "jose4j",
      "version" : "0.9.5",
      "description" : "The jose.4.j library is a robust and easy to use open source implementation of JSON Web Token (JWT) and the JOSE specification suite (JWS, JWE, and JWK). It is written in Java and relies solely on the JCA APIs for cryptography. Please see https://bitbucket.org/b_c/jose4j/wiki/Home for more info, examples, etc..",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "fb939f8894b9509332ab43f40df3cc47"
        },
        {
          "alg" : "SHA-1",
          "content" : "e4ca26802488e6f16e24558d74ac8775a955fdd3"
        },
        {
          "alg" : "SHA-256",
          "content" : "808fb3166f3e67dad9811c331029ab1681242fd52b735bc3f33f281167fcc72e"
        },
        {
          "alg" : "SHA-512",
          "content" : "d475aa9e74a173e27aa72f4361eef288d259f337f8082eafa572aad763150ea679829e2433cb03cb0249eb58a83d68bfbc54d124154dd71b745fc7182620c59f"
        },
        {
          "alg" : "SHA-384",
          "content" : "171c03f06df7ab8bd69318b900863b2d69126769bda9f6c96bd0a2977079a45b1b6a4949bfcadb3ca58dc31d545c5a4e"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.bitbucket.b_c/jose4j@0.9.5?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://bitbucket.org/b_c/jose4j/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://bitbucket.org/b_c/jose4j"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.16.0?type=jar",
      "publisher" : "FasterXML",
      "group" : "com.fasterxml.jackson.core",
      "name" : "jackson-annotations",
      "version" : "2.16.0",
      "description" : "Core annotations used for value types, used by Jackson data binding package.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "9caec6e7cdd5cc18e18f99359b9e8d95"
        },
        {
          "alg" : "SHA-1",
          "content" : "dc30995f7428c0a405eba9b8c619b20d2b3b9905"
        },
        {
          "alg" : "SHA-256",
          "content" : "c4b90ea0c0074da17efdc3aa23973525f25d6f34725692169748f529547334a6"
        },
        {
          "alg" : "SHA-512",
          "content" : "2c7d70c88b7e8dd710863f8c920d3e2fe56f8ecc01c757011bd9bbd195228028402566fbf4feaa083192453348a86a70732bf5d3f6eebb75ab4e5b3a525f6148"
        },
        {
          "alg" : "SHA-384",
          "content" : "99413ce47a9980b0954051f651068565e75b6300c0b801179c87f347053e9c9f31c60c698a7e1ee9d1ff664facbb6c8e"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.16.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/FasterXML/jackson"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/FasterXML/jackson-annotations/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/FasterXML/jackson-annotations"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.testng/testng@7.5.1?type=jar",
      "group" : "org.testng",
      "name" : "testng",
      "version" : "7.5.1",
      "description" : "Testing framework for Java",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "86e2f3f5080bdca34ee7e6097647d600"
        },
        {
          "alg" : "SHA-1",
          "content" : "6673f647a35826fb01ff3129edc241d88bd27b88"
        },
        {
          "alg" : "SHA-256",
          "content" : "a5ac92d2362ccb3a509abe68e385ca809a7c96fcbaf851b3ee8bacb2ac899e2f"
        },
        {
          "alg" : "SHA-512",
          "content" : "0bdf858bd678e0887709cc2598f8857b4b86184af7a7dbb3cd20bb6b39c20587ea135fa3bbe645d9d863df78ed4cd67637edd248ed6c454db4551cbc4d5ee68a"
        },
        {
          "alg" : "SHA-384",
          "content" : "f291628b8085521e977da9b86b720578187754199c6ac88b34c6f9e4b369c55b6bdf7ada80aaf4b475376adce5bc9b1c"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.testng/testng@7.5.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://testng.org"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/cbeust/testng/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/cbeust/testng.git"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.code.findbugs/jsr305@3.0.1?type=jar",
      "group" : "com.google.code.findbugs",
      "name" : "jsr305",
      "version" : "3.0.1",
      "description" : "JSR305 Annotations for Findbugs",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "c6532beb3f7cc54a8d73d25d5602b9e4"
        },
        {
          "alg" : "SHA-1",
          "content" : "f7be08ec23c21485b9b5a1cf1654c2ec8c58168d"
        },
        {
          "alg" : "SHA-256",
          "content" : "c885ce34249682bc0236b4a7d56efcc12048e6135a5baf7a9cde8ad8cda13fcd"
        },
        {
          "alg" : "SHA-512",
          "content" : "cd537b74b44421f398832d610142c161a292851ad3b1657cfd8c530749b1fb16a13ae596abd58e419093b258d6db943ce9535b7d4a2094871a0d20d29d12c408"
        },
        {
          "alg" : "SHA-384",
          "content" : "045b35afb978db023ef70c49232d6eecefd4423f1b08247c236477229f4ec7766cb7a0ae2a5d2ef81b3b69f61b5acbd4"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.code.findbugs/jsr305@3.0.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://findbugs.sourceforge.net/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://code.google.com/p/jsr-305/"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.beust/jcommander@1.78?type=jar",
      "group" : "com.beust",
      "name" : "jcommander",
      "version" : "1.78",
      "description" : "Command line parser library for Java",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "50552e69ce8115d80b9a31ec93c87bc3"
        },
        {
          "alg" : "SHA-1",
          "content" : "a3927de9bd6f351429bcf763712c9890629d8f51"
        },
        {
          "alg" : "SHA-256",
          "content" : "7891debb84b5f83e9bd57593ebece3399abbe0fd938cf306b3534c57913b9615"
        },
        {
          "alg" : "SHA-512",
          "content" : "5ee2ef4c12888a48d7c830189d06ee8a653c7664a53c9b6fa935d4e7866b0454111f8092d7ece086ec80c61edab2856187a1e247873e5c8e4724efb02c37504b"
        },
        {
          "alg" : "SHA-384",
          "content" : "cfd68158d572057bb9114e066e44c5bfba57e549b90c547686fe97454c3c35a244f65e59384dc956396b65246cd193ae"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.beust/jcommander@1.78?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://jcommander.org"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/cbeust/jcommander/issues"
        },
        {
          "type" : "vcs",
          "url" : "http://example.com/my-library/"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.webjars/jquery@3.5.1?type=jar",
      "group" : "org.webjars",
      "name" : "jquery",
      "version" : "3.5.1",
      "description" : "WebJar for jQuery",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "4873982991d54d745f0d94a1daab7694"
        },
        {
          "alg" : "SHA-1",
          "content" : "2392938e374f561c27c53872bdc9b6b351b6ba34"
        },
        {
          "alg" : "SHA-256",
          "content" : "83168112220ac912a3dba0eebae90a4da5bf1e24b1bafd401e3d4f9f598bb2cb"
        },
        {
          "alg" : "SHA-512",
          "content" : "9f560415b36875958ff1d3c6d37fa79d6d134c5f5fc7719dd21db36d1f24dec39787834b2a9ffb104ec6b56e725ccc524a8ff9b189ced3d68e24296b2daae720"
        },
        {
          "alg" : "SHA-384",
          "content" : "522c18d09a188c8bc6f9981afcc3bb89e350d7c86bb34227d3373b4c9802bfe8d0bd63970111a9760cb4cf692edb40da"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/license/mit/"
          }
        }
      ],
      "purl" : "pkg:maven/org.webjars/jquery@3.5.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://webjars.org"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "http://github.com/webjars/jquery"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.squareup.retrofit2/retrofit@2.9.0?type=jar",
      "group" : "com.squareup.retrofit2",
      "name" : "retrofit",
      "version" : "2.9.0",
      "description" : "A type-safe HTTP client for Android and Java.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "890d951895e6d080185377c741526002"
        },
        {
          "alg" : "SHA-1",
          "content" : "d8fdfbd5da952141a665a403348b74538efc05ff"
        },
        {
          "alg" : "SHA-256",
          "content" : "e6ea1929c46852f5bec66ab3357da383476cef4e8d1deefdbf195b79cc4d6581"
        },
        {
          "alg" : "SHA-512",
          "content" : "8abaaf318db60f5c85f7b6c0d0c6514cf3872f07961e731b6011dea99b1f6c75fdb9a54a841df6073f0dd81d433047dbb4ebba8551c98aecc8b63a38f2b01168"
        },
        {
          "alg" : "SHA-384",
          "content" : "985cf8250284e75c9fe22210b9036924345bcfc7479b02082d029cb5a9f40a627a9ffbdacc8f38fbd6a7feaf4d5658f9"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.squareup.retrofit2/retrofit@2.9.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/square/retrofit"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/square/retrofit/"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.squareup.okhttp3/okhttp@3.14.9?type=jar",
      "group" : "com.squareup.okhttp3",
      "name" : "okhttp",
      "version" : "3.14.9",
      "description" : "An HTTP+HTTP/2 client for Android and Java applications",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "69e22f2ccb614cf1bcfcca5cf7711045"
        },
        {
          "alg" : "SHA-1",
          "content" : "3e6d101343c7ea687cd593e4990f73b25c878383"
        },
        {
          "alg" : "SHA-256",
          "content" : "2570fab55515cbf881d7a4ceef49fc515490bc027057e666776a2832465aeca0"
        },
        {
          "alg" : "SHA-512",
          "content" : "25a7282ba15ece63784e880520e2f1a6dde97712a7a596a96072ba1b4d9fb4e3e82879f2669289305bc9a2396aff5fe3f7dd2bb0b082f5e5fe32fe5bc65659b6"
        },
        {
          "alg" : "SHA-384",
          "content" : "2fc5c21d4ba4769330b55db12231f33bb760b10eee787bd907ff5e915786604fd12f4cbf35cea15c5c3b8474c896a219"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.squareup.okhttp3/okhttp@3.14.9?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/square/okhttp/okhttp"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/square/okhttp/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/square/okhttp/okhttp/"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.squareup.okio/okio@1.17.2?type=jar",
      "group" : "com.squareup.okio",
      "name" : "okio",
      "version" : "1.17.2",
      "description" : "A modern I/O API for Java",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "54a6a8979bd8e64e1fbf21d511654737"
        },
        {
          "alg" : "SHA-1",
          "content" : "78c7820b205002da4d2d137f6f312bd64b3d6049"
        },
        {
          "alg" : "SHA-256",
          "content" : "f80ce42d2ffac47ad4c47e1d6f980d604d247ceb1a886705cf4581ab0c9fe2b8"
        },
        {
          "alg" : "SHA-512",
          "content" : "3ad9127705ad00962b96a10d134a06378a3ef5558b0c5955ace54e15a771027a11503981a8dcf0959fb806d35ba8da9b12282a5a2f3d6dd7c71266120a4e0b4d"
        },
        {
          "alg" : "SHA-384",
          "content" : "98a16e221860faf4ae809743fbc956614aa32b0d78b35703d8ceb78c42a42e9afe7f1b3c8c9df5c63b9ee6e0fcfcd98c"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.squareup.okio/okio@1.17.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/square/okio/okio"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/square/okio/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/square/okio/okio/"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.kafka/kafka-clients@7.4.13-ce?type=jar",
      "group" : "org.apache.kafka",
      "name" : "kafka-clients",
      "version" : "7.4.13-ce",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "aa2c2eb3e7ab200be0d40e9e7816a235"
        },
        {
          "alg" : "SHA-1",
          "content" : "2c076ad68d06ac4b3f733f51de5efaa442367933"
        },
        {
          "alg" : "SHA-256",
          "content" : "6617b5d07869d58fb3b9ad2a387e2df6ee50353201aa0a358881f895cd3841cf"
        },
        {
          "alg" : "SHA-512",
          "content" : "d4978b8c1d3e47a97e720c607d98f10380cda0601dfb497086b100a05304505186898f2f821562655d8a1b5b0a2e72daa7d54122248f1c822421ac9fbbd50467"
        },
        {
          "alg" : "SHA-384",
          "content" : "c8560a736f9cde01151a7ae27959c9f49b81c46f56c7d159f8daabca5c2d0ff4d8b8180a1ddc58b0f9a167ae297f3878"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "Confluent License Agreement",
            "url" : "https://www.confluent.io/legal/confluent-license-agreement/"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.kafka/kafka-clients@7.4.13-ce?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://docs.confluent.io/platform/current/get-started/platform.html"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/io.confluent/telemetry-events-api@7.4.13-ce?type=jar",
      "group" : "io.confluent",
      "name" : "telemetry-events-api",
      "version" : "7.4.13-ce",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "95f3386fd6790627cc819241b971c5fc"
        },
        {
          "alg" : "SHA-1",
          "content" : "0239b7257e4ad1464811de0001a372941312d35a"
        },
        {
          "alg" : "SHA-256",
          "content" : "188cfb87befbc7e993638515a3b6ed341110e40cea93c82710f83baae65043cf"
        },
        {
          "alg" : "SHA-512",
          "content" : "8f353d418764866afba7a0ff759e471f7dab4f8f4b4f1a4bd6f825ec4bb11da2bf513b87706dc9a87a402a8123c6bed0c0e94b7b621758d4c90f9ac7cb4e2744"
        },
        {
          "alg" : "SHA-384",
          "content" : "dba151fef7cf556c0856f7b4b108484b4fb97efb9bd9dc136c0f566162e2ee07f5f70254f4a5c8de145d34beb64c7107"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "Confluent License Agreement",
            "url" : "https://www.confluent.io/legal/confluent-license-agreement/"
          }
        }
      ],
      "purl" : "pkg:maven/io.confluent/telemetry-events-api@7.4.13-ce?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://docs.confluent.io/platform/current/get-started/platform.html"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.guava/guava@32.0.1-jre?type=jar",
      "group" : "com.google.guava",
      "name" : "guava",
      "version" : "32.0.1-jre",
      "description" : "Guava is a suite of core and expanded libraries that include utility classes, Google's collections, I/O classes, and much more.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "6951895e804b36322214c95917e598d4"
        },
        {
          "alg" : "SHA-1",
          "content" : "6e5d51a72d142f2d40a57dfb897188b36a95b489"
        },
        {
          "alg" : "SHA-256",
          "content" : "bd7fa227591fb8509677d0d1122cf95158f3b8a9f45653f58281d879f6dc48c5"
        },
        {
          "alg" : "SHA-512",
          "content" : "5dbe7a697511cfbe44f3ffb954e32e997677ecc61f03bb7bb374f1b8fa4a931a95cd9d1f5288eb5d42e2aa380e3241b35059786c07edc48e5aa67c30cddad8a5"
        },
        {
          "alg" : "SHA-384",
          "content" : "abad4556e073fb38062c636b6599ceed992302c7d98150e3842d32ce92f6aac7d630633c56efa581523d591361fcf898"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.guava/guava@32.0.1-jre?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/google/guava"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/google/guava/actions"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/google/guava/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/google/guava/guava"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.guava/failureaccess@1.0.1?type=jar",
      "group" : "com.google.guava",
      "name" : "failureaccess",
      "version" : "1.0.1",
      "description" : "Contains com.google.common.util.concurrent.internal.InternalFutureFailureAccess and InternalFutures. Most users will never need to use this artifact. Its classes is conceptually a part of Guava, but they're in this separate artifact so that Android libraries can use them without pulling in all of Guava (just as they can use ListenableFuture by depending on the listenablefuture artifact).",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "091883993ef5bfa91da01dcc8fc52236"
        },
        {
          "alg" : "SHA-1",
          "content" : "1dcf1de382a0bf95a3d8b0849546c88bac1292c9"
        },
        {
          "alg" : "SHA-256",
          "content" : "a171ee4c734dd2da837e4b16be9df4661afab72a41adaf31eb84dfdaf936ca26"
        },
        {
          "alg" : "SHA-512",
          "content" : "f8d59b808d6ba617252305b66d5590937da9b2b843d492d06b8d0b1b1f397e39f360d5817707797b979a5bf20bf21987b35333e7a15c44ed7401fea2d2119cae"
        },
        {
          "alg" : "SHA-384",
          "content" : "67659dbd9647ec303d7f15128dc9dba19b98fd8d74758ee3b602451e32c855e236ccaafe08edf4bbfa245f981268440f"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.guava/failureaccess@1.0.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/google/guava/failureaccess"
        },
        {
          "type" : "build-system",
          "url" : "https://travis-ci.org/google/guava"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/google/guava/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/google/guava/failureaccess"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar",
      "group" : "com.google.guava",
      "name" : "listenablefuture",
      "version" : "9999.0-empty-to-avoid-conflict-with-guava",
      "description" : "An empty artifact that Guava depends on to signal that it is providing ListenableFuture -- but is also available in a second \"version\" that contains com.google.common.util.concurrent.ListenableFuture class, without any other Guava classes. The idea is: - If users want only ListenableFuture, they depend on listenablefuture-1.0. - If users want all of Guava, they depend on guava, which, as of Guava 27.0, depends on listenablefuture-9999.0-empty-to-avoid-conflict-with-guava. The 9999.0-... version number is enough for some build systems (notably, Gradle) to select that empty artifact over the \"real\" listenablefuture-1.0 -- avoiding a conflict with the copy of ListenableFuture in guava itself. If users are using an older version of Guava or a build system other than Gradle, they may see class conflicts. If so, they can solve them by manually excluding the listenablefuture artifact or manually forcing their build systems to use 9999.0-....",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "d094c22570d65e132c19cea5d352e381"
        },
        {
          "alg" : "SHA-1",
          "content" : "b421526c5f297295adef1c886e5246c39d4ac629"
        },
        {
          "alg" : "SHA-256",
          "content" : "b372a037d4230aa57fbeffdef30fd6123f9c0c2db85d0aced00c91b974f33f99"
        },
        {
          "alg" : "SHA-512",
          "content" : "c5987a979174cbacae2e78b319f080420cc71bcdbcf7893745731eeb93c23ed13bff8d4599441f373f3a246023d33df03e882de3015ee932a74a774afdd0782f"
        },
        {
          "alg" : "SHA-384",
          "content" : "caff9b74079f95832ca7f6029346b34b606051cc8c5a4389fac263511d277ada0c55f28b0d43011055b268c6eb7184d5"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/google/guava/listenablefuture"
        },
        {
          "type" : "build-system",
          "url" : "https://travis-ci.org/google/guava"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/google/guava/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/google/guava/listenablefuture"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.checkerframework/checker-qual@3.33.0?type=jar",
      "group" : "org.checkerframework",
      "name" : "checker-qual",
      "version" : "3.33.0",
      "description" : "checker-qual contains annotations (type qualifiers) that a programmer writes to specify Java code for type-checking by the Checker Framework.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "fc9418b779d9d57dcd52197006cbdb9b"
        },
        {
          "alg" : "SHA-1",
          "content" : "de2b60b62da487644fc11f734e73c8b0b431238f"
        },
        {
          "alg" : "SHA-256",
          "content" : "e316255bbfcd9fe50d165314b85abb2b33cb2a66a93c491db648e498a82c2de1"
        },
        {
          "alg" : "SHA-512",
          "content" : "049c446677b7b386f3fb501bf65e032bdf2b1b29a3f545848035fff2b683cd275380cf302e30eea641af7f0801f779bcda3d82a71d928e4176f564f796640a64"
        },
        {
          "alg" : "SHA-384",
          "content" : "ddf7a0f70421d1ed75e93c0a30434a4862c3905e433223e19861323cf0994e843392b746003040f10a7db6fc960b8aa6"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT"
          }
        }
      ],
      "purl" : "pkg:maven/org.checkerframework/checker-qual@3.33.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://checkerframework.org/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/typetools/checker-framework.git"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.18.0?type=jar",
      "publisher" : "Google LLC",
      "group" : "com.google.errorprone",
      "name" : "error_prone_annotations",
      "version" : "2.18.0",
      "description" : "Error Prone is a static analysis tool for Java that catches common programming mistakes at compile-time.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "64145d0e7fee5a69ed7b84cf402de998"
        },
        {
          "alg" : "SHA-1",
          "content" : "89b684257096f548fa39a7df9fdaa409d4d4df91"
        },
        {
          "alg" : "SHA-256",
          "content" : "9e6814cb71816988a4fd1b07a993a8f21bb7058d522c162b1de849e19bea54ae"
        },
        {
          "alg" : "SHA-512",
          "content" : "3cea86be94bb8ae40d21ad4bf7d7f6b2233e89593b7b741ad84c78840cd3837bb5136f52e62fe9ae0953d7b190c46ad3edc102dfa97b4c7ea472a80206bf5db7"
        },
        {
          "alg" : "SHA-384",
          "content" : "7622eb33f83f03ab32b710b36c2fe836e24c5318f65fb8c0631a99507ca3ae65c2df8e33b63a5ce853b9cab6d9cb32e5"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.18.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://errorprone.info/error_prone_annotations"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/google/error-prone/error_prone_annotations"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.j2objc/j2objc-annotations@2.8?type=jar",
      "group" : "com.google.j2objc",
      "name" : "j2objc-annotations",
      "version" : "2.8",
      "description" : "A set of annotations that provide additional information to the J2ObjC translator to modify the result of translation.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "c50af69b704dc91050efb98e0dff66d1"
        },
        {
          "alg" : "SHA-1",
          "content" : "c85270e307e7b822f1086b93689124b89768e273"
        },
        {
          "alg" : "SHA-256",
          "content" : "f02a95fa1a5e95edb3ed859fd0fb7df709d121a35290eff8b74dce2ab7f4d6ed"
        },
        {
          "alg" : "SHA-512",
          "content" : "f8263868a792b41707c9e7fe6fa5650a14cd93fbeafad20efe3772a3058fc933eb59782ec59e6eb9b9c569aa96da80134ae9fdf7547b69c44a97087efddceeff"
        },
        {
          "alg" : "SHA-384",
          "content" : "e6087ec31fec8289158496ad2ed6ce8472d5d513808a312e0782cedac3b86c37a62a63c0b5ea3839491d109fe9e148a1"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.j2objc/j2objc-annotations@2.8?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/google/j2objc/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.sonatype.org/spice/trunk/oss/oss-parent-9/j2objc-annotations"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.github.luben/zstd-jni@1.5.2-1?type=jar",
      "publisher" : "com.github.luben",
      "group" : "com.github.luben",
      "name" : "zstd-jni",
      "version" : "1.5.2-1",
      "description" : "JNI bindings for Zstd native library that provides fast and high compression lossless algorithm for Java and all JVM languages.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "2909788860e8e3ee29d51b327a43ca24"
        },
        {
          "alg" : "SHA-1",
          "content" : "fad786abc1d1b81570e8d9a2fc8a1ef479bc27b6"
        },
        {
          "alg" : "SHA-256",
          "content" : "93f7e4cbc907c2650f89f9f0bec94873735a58f1e4b66a54973294e4ec1878e8"
        },
        {
          "alg" : "SHA-512",
          "content" : "92174059714b98d4275dca1b057c857766267afe6ae2b27bfdfe50395cb90a3ec973032977a074c5ce516a3769336e6bf63d3bbde95bea165c409f1c990a651d"
        },
        {
          "alg" : "SHA-384",
          "content" : "cdc9284a4537fcf83166bae1c4731463d94ad9615f91200c4da6368ddbd769314e87453e9114649c694966e6c77d4883"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-2-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/com.github.luben/zstd-jni@1.5.2-1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/luben/zstd-jni"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.lz4/lz4-java@1.8.0?type=jar",
      "group" : "org.lz4",
      "name" : "lz4-java",
      "version" : "1.8.0",
      "description" : "Java ports and bindings of the LZ4 compression algorithm and the xxHash hashing algorithm",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "936a927700aa8fc3b75d21d7571171f6"
        },
        {
          "alg" : "SHA-1",
          "content" : "4b986a99445e49ea5fbf5d149c4b63f6ed6c6780"
        },
        {
          "alg" : "SHA-256",
          "content" : "d74a3334fb35195009b338a951f918203d6bbca3d1d359033dc33edd1cadc9ef"
        },
        {
          "alg" : "SHA-512",
          "content" : "98d59086a6021ca571d9c1d64b715e43044c730e1ac563f514c40cf44302615d30378b6d5cc69990446522de6260dc8e7b303e3990a3139dc326d058dfb6dbd9"
        },
        {
          "alg" : "SHA-384",
          "content" : "8e3f2acdbb41a00c4d9cc5f328e63fb626ac7c6c84e1bf9502e2fcc76a591b2b819b2d27b29925ff986b95c297b30e2c"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.lz4/lz4-java@1.8.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/lz4/lz4-java"
        },
        {
          "type" : "vcs",
          "url" : "git://github.com/lz4/lz4-java.git"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.xerial.snappy/snappy-java@1.1.10.5?type=jar",
      "publisher" : "xerial.org",
      "group" : "org.xerial.snappy",
      "name" : "snappy-java",
      "version" : "1.1.10.5",
      "description" : "snappy-java: A fast compression/decompression library",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "a52ffcdbbe525b486237a7098e5c5ff7"
        },
        {
          "alg" : "SHA-1",
          "content" : "ac605269f3598506196e469f1fb0d7ed5c55059e"
        },
        {
          "alg" : "SHA-256",
          "content" : "0f3f1857ed33116583f480b4df5c0218836c47bfbc9c6221c0d73f356decf37b"
        },
        {
          "alg" : "SHA-512",
          "content" : "36c288aa84017b52362a49a20d1702151a16b9f58518b6877f11122941a549d94fab8d515f7f1ad6384fb94be569328abf862edaf970c10a16832498dfda853b"
        },
        {
          "alg" : "SHA-384",
          "content" : "693a542ca2471dec4da5fe582563aff1bf5238e1a8d1a1f79cd8138334f94f1112094fbd270b1637d983c9290084a6e1"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.xerial.snappy/snappy-java@1.1.10.5?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/xerial/snappy-java"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/xerial/snappy-java"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.squareup.retrofit2/converter-scalars@2.9.0?type=jar",
      "group" : "com.squareup.retrofit2",
      "name" : "converter-scalars",
      "version" : "2.9.0",
      "description" : "A Retrofit Converter for Java's scalar value types.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "6e2e258b8b91ce475cd6bb38b3419cb5"
        },
        {
          "alg" : "SHA-1",
          "content" : "e9ee6f35fb7ba877a35519f9a8f55c648df820d4"
        },
        {
          "alg" : "SHA-256",
          "content" : "8ed09e0b4a7c8ea602c03f5f3def9c0f6672dfad66201d642908dca818a990af"
        },
        {
          "alg" : "SHA-512",
          "content" : "86cee47fd344ffea614f97173f6031c2d940e0eadee869784e538b8b7d641735674a0938a7c33ddfb5d50022e07a0414aa70c07df2350016fb556c8ff215b693"
        },
        {
          "alg" : "SHA-384",
          "content" : "9d8470dd857781d5b7eb3f56c5ea78e3360dbd2e95c0dbd8ff88f5d1e51ef6e95caf496c689e9c0e62a04098f22967a3"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.squareup.retrofit2/converter-scalars@2.9.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/square/retrofit"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/square/retrofit/"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.squareup.retrofit2/converter-jackson@2.9.0?type=jar",
      "group" : "com.squareup.retrofit2",
      "name" : "converter-jackson",
      "version" : "2.9.0",
      "description" : "A Retrofit Converter which uses Jackson for serialization.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "cd5b07f9feb365f9d082cb1791e3fe86"
        },
        {
          "alg" : "SHA-1",
          "content" : "19b4010914e747601e26f46c6a403044bbe0b2bf"
        },
        {
          "alg" : "SHA-256",
          "content" : "7d94ccd114408ce1b1e30c52d0e412acf3285ea2d3debd734d17558a629c3b28"
        },
        {
          "alg" : "SHA-512",
          "content" : "02602c4098227f0cd5e4d834647bf3b1cd276021902461662746c821497aca440187a10dc0be9dddebe85af17e447bf1f75ea454e51c72fca29efef208b9185f"
        },
        {
          "alg" : "SHA-384",
          "content" : "9866f6cb1d29747ab7b7fedbf6ae05bff52f7cddeb61cb19e55ab1754a3399bf03d0101db113fcb5fba515c5b6622837"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.squareup.retrofit2/converter-jackson@2.9.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/square/retrofit"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/square/retrofit/"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.github.tomakehurst/wiremock-jre8-standalone@2.35.1?type=jar",
      "group" : "com.github.tomakehurst",
      "name" : "wiremock-jre8-standalone",
      "version" : "2.35.1",
      "description" : "A web service test double for all occasions - standalone edition",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "c83c9c3098b283f616bdb5f0dc1f144c"
        },
        {
          "alg" : "SHA-1",
          "content" : "8501e7492c5807077e4c2ddd40a0090c68258891"
        },
        {
          "alg" : "SHA-256",
          "content" : "8b32f05e02489a8f7c0e5f467caee026f9fb1842791a75b9d7442f61871170a5"
        },
        {
          "alg" : "SHA-512",
          "content" : "9fb412370ef15de168be2deae53a4575680e05d974329aa015d0a8e24fb345065527a068e958b72543204fce0f874c8e48211836deec3d427e871755f2b85f82"
        },
        {
          "alg" : "SHA-384",
          "content" : "e72a4e257017baa4e0dceac3c5ef6b6d1a549475e1e87f4a8d0c4612d03d5b80904a383e876e71db8efcac497f6bfe31"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.github.tomakehurst/wiremock-jre8-standalone@2.35.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://wiremock.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/wiremock/wiremock"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/io.confluent/common-utils@7.4.13?type=jar",
      "publisher" : "Confluent, Inc.",
      "group" : "io.confluent",
      "name" : "common-utils",
      "version" : "7.4.13",
      "description" : "Common utilities, including metrics and config.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "ae47a91a969a178937e0d00772a4bbe5"
        },
        {
          "alg" : "SHA-1",
          "content" : "31fd1cc3d8a4d051cd9e724280a33ea658f66c62"
        },
        {
          "alg" : "SHA-256",
          "content" : "b731ada03f9dc68d001f976e09d99fa0995d848f652a4ea021037763dd4a0b8b"
        },
        {
          "alg" : "SHA-512",
          "content" : "4875c5f5a53d18c4703b0ce3eb2cd0a5ed53a215dbdfa7660c5d783afb073c3c38f040b643efd3b2fb192a49e5cab4fd5965f91b3435eef661a8a1b2fd397d22"
        },
        {
          "alg" : "SHA-384",
          "content" : "223c66c265fab31f78006fc2fdc1ff34eb8f968bae0ab00cc692b097c34c04ffc225b9638b281670644c09845799b22a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.confluent/common-utils@7.4.13?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://confluent.io/common-utils"
        },
        {
          "type" : "distribution-intake",
          "url" : "s3://staging-confluent-packages-maven-654654529379-us-west-2/v7.4.13-rc251111125610/maven"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/confluentinc/common/common-utils"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/io.confluent/assembly-plugin-boilerplate@7.4.13?classifier=resources&type=zip",
      "group" : "io.confluent",
      "name" : "assembly-plugin-boilerplate",
      "version" : "7.4.13",
      "description" : "Maven Assembly Plugin boilerplate for Dockerized projects",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "c441d39ae2cbf99a248dba213d2c6bc3"
        },
        {
          "alg" : "SHA-1",
          "content" : "82cad53f018ea039eae6e72bd978d8fd04ad7713"
        },
        {
          "alg" : "SHA-256",
          "content" : "1444060bfb92571e52584bf0e7fe9c6500b18983e4ddf61a28c365cdca9e4341"
        },
        {
          "alg" : "SHA-512",
          "content" : "8d11a50bf3841521aeeea36e9dbb7c2b9e621c3fe0d125df4d6b5dd7944fceac5939374e687841d92ef496326bb116b0f068aa5a8c01894c3fe80a5f4b069c05"
        },
        {
          "alg" : "SHA-384",
          "content" : "c2c11de00d856f8d7bf09a07c838b52562d968e57625b4ef6cf9e0d82849c27e751c70ea000e8aa3a96115558741ba32"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.confluent/assembly-plugin-boilerplate@7.4.13?classifier=resources&type=zip",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/confluentinc/common"
        },
        {
          "type" : "distribution-intake",
          "url" : "s3://staging-confluent-packages-maven-654654529379-us-west-2/v7.4.13-rc251111125610/maven"
        }
      ]
    }
  ],
  "dependencies" : [
    {
      "ref" : "pkg:maven/io.confluent.security/authorizer-client@7.4.13?type=jar",
      "dependsOn" : [
        "pkg:maven/io.confluent/authorizer@7.4.13-ce?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.16.0?type=jar",
        "pkg:maven/org.testng/testng@7.5.1?type=jar",
        "pkg:maven/com.squareup.retrofit2/retrofit@2.9.0?type=jar",
        "pkg:maven/org.apache.kafka/kafka-clients@7.4.13-ce?type=jar",
        "pkg:maven/com.squareup.retrofit2/converter-scalars@2.9.0?type=jar",
        "pkg:maven/com.squareup.retrofit2/converter-jackson@2.9.0?type=jar",
        "pkg:maven/com.github.tomakehurst/wiremock-jre8-standalone@2.35.1?type=jar",
        "pkg:maven/io.confluent/common-utils@7.4.13?type=jar",
        "pkg:maven/io.confluent/assembly-plugin-boilerplate@7.4.13?classifier=resources&type=zip"
      ]
    },
    {
      "ref" : "pkg:maven/io.confluent/authorizer@7.4.13-ce?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.kafka/kafka-server-common@7.4.13-ce?type=jar",
        "pkg:maven/org.apache.kafka/kafka-clients@7.4.13-ce?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.16.0?type=jar",
        "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jdk8@2.16.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/org.bitbucket.b_c/jose4j@0.9.5?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.kafka/kafka-server-common@7.4.13-ce?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.kafka/kafka-clients@7.4.13-ce?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.16.0?type=jar",
        "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jdk8@2.16.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/com.yammer.metrics/metrics-core@2.2.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.kafka/kafka-clients@7.4.13-ce?type=jar",
      "dependsOn" : [
        "pkg:maven/io.confluent/telemetry-events-api@7.4.13-ce?type=jar",
        "pkg:maven/com.google.guava/guava@32.0.1-jre?type=jar",
        "pkg:maven/com.github.luben/zstd-jni@1.5.2-1?type=jar",
        "pkg:maven/org.lz4/lz4-java@1.8.0?type=jar",
        "pkg:maven/org.xerial.snappy/snappy-java@1.1.10.5?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.confluent/telemetry-events-api@7.4.13-ce?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.google.guava/guava@32.0.1-jre?type=jar",
      "dependsOn" : [
        "pkg:maven/com.google.guava/failureaccess@1.0.1?type=jar",
        "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@3.0.1?type=jar",
        "pkg:maven/org.checkerframework/checker-qual@3.33.0?type=jar",
        "pkg:maven/com.google.errorprone/error_prone_annotations@2.18.0?type=jar",
        "pkg:maven/com.google.j2objc/j2objc-annotations@2.8?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.google.guava/failureaccess@1.0.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.google.code.findbugs/jsr305@3.0.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.checkerframework/checker-qual@3.33.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.18.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.google.j2objc/j2objc-annotations@2.8?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.github.luben/zstd-jni@1.5.2-1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.lz4/lz4-java@1.8.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.xerial.snappy/snappy-java@1.1.10.5?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.16.0?type=jar",
      "dependsOn" : [
        "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.16.0?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.16.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.16.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.16.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jdk8@2.16.0?type=jar",
      "dependsOn" : [
        "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.16.0?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.16.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.yammer.metrics/metrics-core@2.2.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.bitbucket.b_c/jose4j@0.9.5?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.testng/testng@7.5.1?type=jar",
      "dependsOn" : [
        "pkg:maven/com.google.code.findbugs/jsr305@3.0.1?type=jar",
        "pkg:maven/com.beust/jcommander@1.78?type=jar",
        "pkg:maven/org.webjars/jquery@3.5.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.beust/jcommander@1.78?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.webjars/jquery@3.5.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.squareup.retrofit2/retrofit@2.9.0?type=jar",
      "dependsOn" : [
        "pkg:maven/com.squareup.okhttp3/okhttp@3.14.9?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.squareup.okhttp3/okhttp@3.14.9?type=jar",
      "dependsOn" : [
        "pkg:maven/com.squareup.okio/okio@1.17.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.squareup.okio/okio@1.17.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.squareup.retrofit2/converter-scalars@2.9.0?type=jar",
      "dependsOn" : [
        "pkg:maven/com.squareup.retrofit2/retrofit@2.9.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.squareup.retrofit2/converter-jackson@2.9.0?type=jar",
      "dependsOn" : [
        "pkg:maven/com.squareup.retrofit2/retrofit@2.9.0?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.16.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.github.tomakehurst/wiremock-jre8-standalone@2.35.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.confluent/common-utils@7.4.13?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.confluent/assembly-plugin-boilerplate@7.4.13?classifier=resources&type=zip",
      "dependsOn" : [ ]
    }
  ]
}