<?xml version="1.0" encoding="UTF-8"?>
<bom serialNumber="urn:uuid:a89e1d57-2b10-477c-ba61-5626b11d059a" version="1" xmlns="http://cyclonedx.org/schema/bom/1.4">
  <metadata>
    <timestamp>2025-01-31T05:51:02Z</timestamp>
    <tools>
      <tool>
        <vendor>OWASP Foundation</vendor>
        <name>CycloneDX Maven plugin</name>
        <version>2.7.0</version>
        <hashes>
          <hash alg="MD5">c3466195d086bf7c31fdd23f8ffd7a8d</hash>
          <hash alg="SHA-1">2fdea945fa3c30de50040220d11f14d80d981257</hash>
          <hash alg="SHA-256">c084484d62553a4d3d1d5e80704941e620b0e935ae56936fd9f31b92852b6bf9</hash>
          <hash alg="SHA-384">eaa63bb9fe43143350ef15d21608d755e007d810a349d6a8c98e1719a8110ef35318582bfa8220bea6c1db3e4a489db4</hash>
          <hash alg="SHA-512">a63bae3558190e5ac018c3b9358dfc45766814858a726967c435b11686ed3fc0925c35e4b5170179b0016241ee6843f7080c61799e71b6d029cdf0f5f3b69460</hash>
        </hashes>
      </tool>
    </tools>
    <component type="library" bom-ref="pkg:maven/io.dropwizard.metrics/metrics-logback@4.1.32?type=bundle">
      <group>io.dropwizard.metrics</group>
      <name>metrics-logback</name>
      <version>4.1.32</version>
      <description>An instrumented appender for Logback.</description>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/io.dropwizard.metrics/metrics-logback@4.1.32?type=bundle</purl>
      <externalReferences><reference type="distribution"><url>https://s01.oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/dropwizard/metrics/issues/</url></reference><reference type="vcs"><url>https://github.com/dropwizard/metrics/metrics-logback/</url></reference></externalReferences>
    </component>
  </metadata>
  <components>
    <component type="library" bom-ref="pkg:maven/ch.qos.logback/logback-core@1.2.11?type=jar">
      <publisher>QOS.ch</publisher>
      <group>ch.qos.logback</group>
      <name>logback-core</name>
      <version>1.2.11</version>
      <description>logback-core module</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">115da115b5e66ef64e774ec35af1fb1a</hash>
        <hash alg="SHA-1">a01230df5ca5c34540cdaa3ad5efb012f1f1f792</hash>
        <hash alg="SHA-256">6ce1e9397be8298a2e99029f55f955c6fa3cef255171c554d0b9c201cffd0159</hash>
        <hash alg="SHA-384">2afd896ebe6333d99e5baa553d80b7851d8ff51c06c725267e061df81bc9a878b74a65394699ae853f9738a08963aa0a</hash>
        <hash alg="SHA-512">86b12a74c2a822a12ba2e9a7b0db5013803f18784a3cb1201c95d5f7872a6aa8cf06d5861a5c35777a7decc7ea26df7b4388fab3b3b71aab7274527d9b339318</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-1.0</id>
        </license>
        <license>
          <name>GNU Lesser General Public License</name>
          <url>http://www.gnu.org/licenses/old-licenses/lgpl-2.1.html</url>
        </license>
      </licenses>
      <purl>pkg:maven/ch.qos.logback/logback-core@1.2.11?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.qos.ch</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/ceki/logback</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/ch.qos.logback/logback-classic@1.2.11?type=jar">
      <publisher>QOS.ch</publisher>
      <group>ch.qos.logback</group>
      <name>logback-classic</name>
      <version>1.2.11</version>
      <description>logback-classic module</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">e13679004cc76ad5792f275f04884fab</hash>
        <hash alg="SHA-1">4741689214e9d1e8408b206506cbe76d1c6a7d60</hash>
        <hash alg="SHA-256">4d8e899621a3006c2f66e19feab002b11e6cfc5cb1854fc41f01532c00deb2aa</hash>
        <hash alg="SHA-384">d480881d1a0d58c94aba0b719d56cd492147bc6481b67370dc7426ea7a81326af5b19f32d6a95fee714f37b90a5eed76</hash>
        <hash alg="SHA-512">6df8b42396c5d3257f11fb19c280533aa28d66e647115816d4ebfd6a58c9b5adf0e098504772261b29435df75b86cb2b9a47f846ed45d770179c9d10f39941de</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-1.0</id>
        </license>
        <license>
          <name>GNU Lesser General Public License</name>
          <url>http://www.gnu.org/licenses/old-licenses/lgpl-2.1.html</url>
        </license>
      </licenses>
      <purl>pkg:maven/ch.qos.logback/logback-classic@1.2.11?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.qos.ch</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/ceki/logback</url></reference></externalReferences>
    </component>
  </components>
  <dependencies>
    <dependency ref="pkg:maven/io.dropwizard.metrics/metrics-logback@4.1.32?type=bundle">
      <dependency ref="pkg:maven/io.dropwizard.metrics/metrics-core@4.1.32?type=jar"/>
      <dependency ref="pkg:maven/ch.qos.logback/logback-core@1.2.11?type=jar"/>
      <dependency ref="pkg:maven/ch.qos.logback/logback-classic@1.2.11?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/io.dropwizard.metrics/metrics-core@4.1.32?type=jar">
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    <dependency ref="pkg:maven/ch.qos.logback/logback-core@1.2.11?type=jar"/>
    <dependency ref="pkg:maven/ch.qos.logback/logback-classic@1.2.11?type=jar">
      <dependency ref="pkg:maven/ch.qos.logback/logback-core@1.2.11?type=jar"/>
    </dependency>
  </dependencies>
</bom>
