{
  "bomFormat" : "CycloneDX",
  "specVersion" : "1.4",
  "serialNumber" : "urn:uuid:e917ef1c-fe08-4804-9c6d-8e3936aa9167",
  "version" : 1,
  "metadata" : {
    "timestamp" : "2025-01-31T05:51:01Z",
    "tools" : [
      {
        "vendor" : "OWASP Foundation",
        "name" : "CycloneDX Maven plugin",
        "version" : "2.7.0",
        "hashes" : [
          {
            "alg" : "MD5",
            "content" : "c3466195d086bf7c31fdd23f8ffd7a8d"
          },
          {
            "alg" : "SHA-1",
            "content" : "2fdea945fa3c30de50040220d11f14d80d981257"
          },
          {
            "alg" : "SHA-256",
            "content" : "c084484d62553a4d3d1d5e80704941e620b0e935ae56936fd9f31b92852b6bf9"
          },
          {
            "alg" : "SHA-384",
            "content" : "eaa63bb9fe43143350ef15d21608d755e007d810a349d6a8c98e1719a8110ef35318582bfa8220bea6c1db3e4a489db4"
          },
          {
            "alg" : "SHA-512",
            "content" : "a63bae3558190e5ac018c3b9358dfc45766814858a726967c435b11686ed3fc0925c35e4b5170179b0016241ee6843f7080c61799e71b6d029cdf0f5f3b69460"
          }
        ]
      }
    ],
    "component" : {
      "group" : "io.dropwizard.metrics",
      "name" : "metrics-caffeine",
      "version" : "4.1.32",
      "description" : "Metrics Integration for Caffeine.",
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.dropwizard.metrics/metrics-caffeine@4.1.32?type=bundle",
      "externalReferences" : [
        {
          "type" : "distribution",
          "url" : "https://s01.oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/dropwizard/metrics/issues/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/dropwizard/metrics/metrics-caffeine/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.dropwizard.metrics/metrics-caffeine@4.1.32?type=bundle"
    }
  },
  "components" : [
    {
      "group" : "com.github.ben-manes.caffeine",
      "name" : "caffeine",
      "version" : "2.9.3",
      "description" : "A high performance caching library",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "e0b9c5ccd60a1b5403df1dfe6de37d8e"
        },
        {
          "alg" : "SHA-1",
          "content" : "b162491f768824d21487551873f9b3b374a7fe19"
        },
        {
          "alg" : "SHA-256",
          "content" : "1e0a7bbef1dd791653143f3f05d0e489934bf5481e58a87c9e619cd46b68729b"
        },
        {
          "alg" : "SHA-384",
          "content" : "cbc875088f4189ba15d5d6a87ddc1750200b3448b6ef69eb749751fb24e21b10387b849f5b27230c580585afbf957abd"
        },
        {
          "alg" : "SHA-512",
          "content" : "9b039f7b9535d5686542a0352e2c39410df3e75f192f02a466a5e46b31f81584c00597a738d36afe05939c00ee8e366fdb1b52c87486bb9718954bb49e247935"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.github.ben-manes.caffeine/caffeine@2.9.3?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "https://github.com/ben-manes/caffeine"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.github.ben-manes.caffeine/caffeine@2.9.3?type=jar"
    },
    {
      "publisher" : "Google LLC",
      "group" : "com.google.errorprone",
      "name" : "error_prone_annotations",
      "version" : "2.10.0",
      "description" : "Error Prone is a static analysis tool for Java that catches common programming mistakes at compile-time.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "df93bd9f00b1d2b1e2ca6317fd8f6df3"
        },
        {
          "alg" : "SHA-1",
          "content" : "9bc20b94d3ac42489cf6ce1e42509c86f6f861a1"
        },
        {
          "alg" : "SHA-256",
          "content" : "a249d4d25dfb86d41e6c82fc335df580189f0c9feeabdc53233fc1e5060724a1"
        },
        {
          "alg" : "SHA-384",
          "content" : "255f696508f6aa95d99a171cce3ab1b9a3273cb08900d382d211a8eb206e7bbebaf2cc11b34bf7282959cbd4b746a458"
        },
        {
          "alg" : "SHA-512",
          "content" : "f44c30261f01e42658a253e8311852a49c29b42547c381c3c4a73f7a124be0ed173d832712c00be6de3a82a58fd9ab5503dec2cba7d30333ddc685c8a331ad31"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.10.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.google.com"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/google/error-prone"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.10.0?type=jar"
    },
    {
      "group" : "org.checkerframework",
      "name" : "checker-qual",
      "version" : "3.22.1",
      "description" : "checker-qual contains annotations (type qualifiers) that a programmer writes to specify Java code for type-checking by the Checker Framework.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "994b138475cb86da03c612ec14bc4b80"
        },
        {
          "alg" : "SHA-1",
          "content" : "c8069a56b461d656ec205f49526ee32c3ad60995"
        },
        {
          "alg" : "SHA-256",
          "content" : "8dfb8247a3b90da2c12cba6d92cb4cc1a0919996aa8c171680862cfbf2307a93"
        },
        {
          "alg" : "SHA-384",
          "content" : "1c121858b6c1cb1835baa601d71d887608c256908f94921b3c9064ce34c0f5dfbfbd4f462e58305e473083b917336cbf"
        },
        {
          "alg" : "SHA-512",
          "content" : "ea9a72df6d215582282cbe33398697bbc95331b73b22f21200cfa370a9e4af8208e5e6d8465c1c2568b8ea0dc2c045b6f18a74c0a81e9b91550ead0d1b7ecefe"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT"
          }
        }
      ],
      "purl" : "pkg:maven/org.checkerframework/checker-qual@3.22.1?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "https://github.com/typetools/checker-framework.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.checkerframework/checker-qual@3.22.1?type=jar"
    }
  ],
  "dependencies" : [
    {
      "ref" : "pkg:maven/io.dropwizard.metrics/metrics-caffeine@4.1.32?type=bundle",
      "dependsOn" : [
        "pkg:maven/io.dropwizard.metrics/metrics-core@4.1.32?type=jar",
        "pkg:maven/com.github.ben-manes.caffeine/caffeine@2.9.3?type=jar",
        "pkg:maven/org.checkerframework/checker-qual@3.22.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.dropwizard.metrics/metrics-core@4.1.32?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.github.ben-manes.caffeine/caffeine@2.9.3?type=jar",
      "dependsOn" : [
        "pkg:maven/org.checkerframework/checker-qual@3.22.1?type=jar",
        "pkg:maven/com.google.errorprone/error_prone_annotations@2.10.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.checkerframework/checker-qual@3.22.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.10.0?type=jar",
      "dependsOn" : [ ]
    }
  ]
}