<?xml version="1.0" encoding="UTF-8"?>
<bom serialNumber="urn:uuid:e917ef1c-fe08-4804-9c6d-8e3936aa9167" version="1" xmlns="http://cyclonedx.org/schema/bom/1.4">
  <metadata>
    <timestamp>2025-01-31T05:51:01Z</timestamp>
    <tools>
      <tool>
        <vendor>OWASP Foundation</vendor>
        <name>CycloneDX Maven plugin</name>
        <version>2.7.0</version>
        <hashes>
          <hash alg="MD5">c3466195d086bf7c31fdd23f8ffd7a8d</hash>
          <hash alg="SHA-1">2fdea945fa3c30de50040220d11f14d80d981257</hash>
          <hash alg="SHA-256">c084484d62553a4d3d1d5e80704941e620b0e935ae56936fd9f31b92852b6bf9</hash>
          <hash alg="SHA-384">eaa63bb9fe43143350ef15d21608d755e007d810a349d6a8c98e1719a8110ef35318582bfa8220bea6c1db3e4a489db4</hash>
          <hash alg="SHA-512">a63bae3558190e5ac018c3b9358dfc45766814858a726967c435b11686ed3fc0925c35e4b5170179b0016241ee6843f7080c61799e71b6d029cdf0f5f3b69460</hash>
        </hashes>
      </tool>
    </tools>
    <component type="library" bom-ref="pkg:maven/io.dropwizard.metrics/metrics-caffeine@4.1.32?type=bundle">
      <group>io.dropwizard.metrics</group>
      <name>metrics-caffeine</name>
      <version>4.1.32</version>
      <description>Metrics Integration for Caffeine.</description>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/io.dropwizard.metrics/metrics-caffeine@4.1.32?type=bundle</purl>
      <externalReferences><reference type="distribution"><url>https://s01.oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/dropwizard/metrics/issues/</url></reference><reference type="vcs"><url>https://github.com/dropwizard/metrics/metrics-caffeine/</url></reference></externalReferences>
    </component>
  </metadata>
  <components>
    <component type="library" bom-ref="pkg:maven/com.github.ben-manes.caffeine/caffeine@2.9.3?type=jar">
      <group>com.github.ben-manes.caffeine</group>
      <name>caffeine</name>
      <version>2.9.3</version>
      <description>A high performance caching library</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">e0b9c5ccd60a1b5403df1dfe6de37d8e</hash>
        <hash alg="SHA-1">b162491f768824d21487551873f9b3b374a7fe19</hash>
        <hash alg="SHA-256">1e0a7bbef1dd791653143f3f05d0e489934bf5481e58a87c9e619cd46b68729b</hash>
        <hash alg="SHA-384">cbc875088f4189ba15d5d6a87ddc1750200b3448b6ef69eb749751fb24e21b10387b849f5b27230c580585afbf957abd</hash>
        <hash alg="SHA-512">9b039f7b9535d5686542a0352e2c39410df3e75f192f02a466a5e46b31f81584c00597a738d36afe05939c00ee8e366fdb1b52c87486bb9718954bb49e247935</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.github.ben-manes.caffeine/caffeine@2.9.3?type=jar</purl>
      <externalReferences><reference type="vcs"><url>https://github.com/ben-manes/caffeine</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.errorprone/error_prone_annotations@2.10.0?type=jar">
      <publisher>Google LLC</publisher>
      <group>com.google.errorprone</group>
      <name>error_prone_annotations</name>
      <version>2.10.0</version>
      <description>Error Prone is a static analysis tool for Java that catches common programming mistakes at compile-time.</description>
      <hashes>
        <hash alg="MD5">df93bd9f00b1d2b1e2ca6317fd8f6df3</hash>
        <hash alg="SHA-1">9bc20b94d3ac42489cf6ce1e42509c86f6f861a1</hash>
        <hash alg="SHA-256">a249d4d25dfb86d41e6c82fc335df580189f0c9feeabdc53233fc1e5060724a1</hash>
        <hash alg="SHA-384">255f696508f6aa95d99a171cce3ab1b9a3273cb08900d382d211a8eb206e7bbebaf2cc11b34bf7282959cbd4b746a458</hash>
        <hash alg="SHA-512">f44c30261f01e42658a253e8311852a49c29b42547c381c3c4a73f7a124be0ed173d832712c00be6de3a82a58fd9ab5503dec2cba7d30333ddc685c8a331ad31</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.errorprone/error_prone_annotations@2.10.0?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.google.com</url></reference><reference type="vcs"><url>https://github.com/google/error-prone</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.checkerframework/checker-qual@3.22.1?type=jar">
      <group>org.checkerframework</group>
      <name>checker-qual</name>
      <version>3.22.1</version>
      <description>checker-qual contains annotations (type qualifiers) that a programmer
writes to specify Java code for type-checking by the Checker Framework.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">994b138475cb86da03c612ec14bc4b80</hash>
        <hash alg="SHA-1">c8069a56b461d656ec205f49526ee32c3ad60995</hash>
        <hash alg="SHA-256">8dfb8247a3b90da2c12cba6d92cb4cc1a0919996aa8c171680862cfbf2307a93</hash>
        <hash alg="SHA-384">1c121858b6c1cb1835baa601d71d887608c256908f94921b3c9064ce34c0f5dfbfbd4f462e58305e473083b917336cbf</hash>
        <hash alg="SHA-512">ea9a72df6d215582282cbe33398697bbc95331b73b22f21200cfa370a9e4af8208e5e6d8465c1c2568b8ea0dc2c045b6f18a74c0a81e9b91550ead0d1b7ecefe</hash>
      </hashes>
      <licenses>
        <license>
          <id>MIT</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.checkerframework/checker-qual@3.22.1?type=jar</purl>
      <externalReferences><reference type="vcs"><url>https://github.com/typetools/checker-framework.git</url></reference></externalReferences>
    </component>
  </components>
  <dependencies>
    <dependency ref="pkg:maven/io.dropwizard.metrics/metrics-caffeine@4.1.32?type=bundle">
      <dependency ref="pkg:maven/io.dropwizard.metrics/metrics-core@4.1.32?type=jar"/>
      <dependency ref="pkg:maven/com.github.ben-manes.caffeine/caffeine@2.9.3?type=jar"/>
      <dependency ref="pkg:maven/org.checkerframework/checker-qual@3.22.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/io.dropwizard.metrics/metrics-core@4.1.32?type=jar">
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    <dependency ref="pkg:maven/com.github.ben-manes.caffeine/caffeine@2.9.3?type=jar">
      <dependency ref="pkg:maven/org.checkerframework/checker-qual@3.22.1?type=jar"/>
      <dependency ref="pkg:maven/com.google.errorprone/error_prone_annotations@2.10.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.checkerframework/checker-qual@3.22.1?type=jar"/>
    <dependency ref="pkg:maven/com.google.errorprone/error_prone_annotations@2.10.0?type=jar"/>
  </dependencies>
</bom>
