<?xml version="1.0" encoding="UTF-8"?>
<bom serialNumber="urn:uuid:b3817dd7-139c-4064-81c6-6d930114f759" version="1" xmlns="http://cyclonedx.org/schema/bom/1.4">
  <metadata>
    <timestamp>2025-01-31T05:51:02Z</timestamp>
    <tools>
      <tool>
        <vendor>OWASP Foundation</vendor>
        <name>CycloneDX Maven plugin</name>
        <version>2.7.0</version>
        <hashes>
          <hash alg="MD5">c3466195d086bf7c31fdd23f8ffd7a8d</hash>
          <hash alg="SHA-1">2fdea945fa3c30de50040220d11f14d80d981257</hash>
          <hash alg="SHA-256">c084484d62553a4d3d1d5e80704941e620b0e935ae56936fd9f31b92852b6bf9</hash>
          <hash alg="SHA-384">eaa63bb9fe43143350ef15d21608d755e007d810a349d6a8c98e1719a8110ef35318582bfa8220bea6c1db3e4a489db4</hash>
          <hash alg="SHA-512">a63bae3558190e5ac018c3b9358dfc45766814858a726967c435b11686ed3fc0925c35e4b5170179b0016241ee6843f7080c61799e71b6d029cdf0f5f3b69460</hash>
        </hashes>
      </tool>
    </tools>
    <component type="library" bom-ref="pkg:maven/io.dropwizard.metrics/metrics-log4j2@4.1.32?type=bundle">
      <group>io.dropwizard.metrics</group>
      <name>metrics-log4j2</name>
      <version>4.1.32</version>
      <description>An instrumented appender for Log4j 2.x.</description>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/io.dropwizard.metrics/metrics-log4j2@4.1.32?type=bundle</purl>
      <externalReferences><reference type="distribution"><url>https://s01.oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/dropwizard/metrics/issues/</url></reference><reference type="vcs"><url>https://github.com/dropwizard/metrics/metrics-log4j2/</url></reference></externalReferences>
    </component>
  </metadata>
  <components>
    <component type="library" bom-ref="pkg:maven/org.apache.logging.log4j/log4j-api@2.17.2?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.logging.log4j</group>
      <name>log4j-api</name>
      <version>2.17.2</version>
      <description>The Apache Log4j API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">0c39d90e7819c92c111e447bdf786a90</hash>
        <hash alg="SHA-1">f42d6afa111b4dec5d2aea0fe2197240749a4ea6</hash>
        <hash alg="SHA-256">09351b5a03828f369cdcff76f4ed39e6a6fc20f24f046935d0b28ef5152f8ce4</hash>
        <hash alg="SHA-384">e4ba0afbfd91ef295e6c1c1edfa7854e216a29705b5c4b520f803697ae6badf3630c5d55e56394954988fa88e62176b4</hash>
        <hash alg="SHA-512">8f986171ee6ca94ba8eacfc83b5b45bb87221c176076eb152715fcb4e1f351c4e9f88d56420fc02ee166ebe0b896fb52eda21355dec49302ab3e83a56b245d04</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.logging.log4j/log4j-api@2.17.2?type=jar</purl>
      <externalReferences><reference type="build-system"><url>https://ci-builds.apache.org/job/Logging/job/log4j/</url></reference><reference type="distribution"><url>https://logging.apache.org/log4j/2.x/download.html</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/LOG4J2</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?log4j-user@logging.apache.org</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=logging-log4j2.git</url></reference><reference type="website"><url>https://www.apache.org/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.logging.log4j/log4j-core@2.17.2?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.logging.log4j</group>
      <name>log4j-core</name>
      <version>2.17.2</version>
      <description>The Apache Log4j Implementation</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">b35d06ffd3ea52e5ba9efe455108745c</hash>
        <hash alg="SHA-1">fa43ba4467f5300b16d1e0742934149bfc5ac564</hash>
        <hash alg="SHA-256">5adb34ff4197cd16a8d24f63035856a933cb59562a6888dde86e9450fcfef646</hash>
        <hash alg="SHA-384">a8e03c55833df8f96d7066645440281ba212040af247733db6f4debcb38b7fe8e1e9ac79eb9b67105670e82136125e7c</hash>
        <hash alg="SHA-512">c2fc60a1e8c866c09f4787d1edb1bd87a5a5fe114c477d065a3c43f4e513f055d61560b597f06ef6d95c09763b6adb3be17812c8611c00df6f4959311bc9599d</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.logging.log4j/log4j-core@2.17.2?type=jar</purl>
      <externalReferences><reference type="build-system"><url>https://ci-builds.apache.org/job/Logging/job/log4j/</url></reference><reference type="distribution"><url>https://logging.apache.org/log4j/2.x/download.html</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/LOG4J2</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?log4j-user@logging.apache.org</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=logging-log4j2.git</url></reference><reference type="website"><url>https://www.apache.org/</url></reference></externalReferences>
    </component>
  </components>
  <dependencies>
    <dependency ref="pkg:maven/io.dropwizard.metrics/metrics-log4j2@4.1.32?type=bundle">
      <dependency ref="pkg:maven/io.dropwizard.metrics/metrics-core@4.1.32?type=jar"/>
      <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-api@2.17.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-core@2.17.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/io.dropwizard.metrics/metrics-core@4.1.32?type=jar">
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-api@2.17.2?type=jar"/>
    <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-core@2.17.2?type=jar">
      <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-api@2.17.2?type=jar"/>
    </dependency>
  </dependencies>
</bom>
