{
  "bomFormat" : "CycloneDX",
  "specVersion" : "1.4",
  "version" : 1,
  "metadata" : {
    "tools" : [
      {
        "vendor" : "OWASP Foundation",
        "name" : "CycloneDX Maven plugin",
        "version" : "2.7.10",
        "hashes" : [
          {
            "alg" : "MD5",
            "content" : "1cc7f6a0382f8bb2f758d6a6ea401d1b"
          },
          {
            "alg" : "SHA-1",
            "content" : "a4297947a1f2d7d453105db542651614bbd37f38"
          },
          {
            "alg" : "SHA-256",
            "content" : "bd0fdd8f2f2116eee5e715aeac1580f19eb7a10ec2b6f805b53567067658e872"
          },
          {
            "alg" : "SHA-512",
            "content" : "9cde8352a427e10b96cae01348fc7cfe5d4aa9cd0a5e5dd93b414ce3bb7d112993c3b3004e53af52567fbfa16de0704ec59a5556a635ad70571fd124ae389f39"
          },
          {
            "alg" : "SHA-384",
            "content" : "93d7bf5b5c735347edfbfbd66810273ca840f9a322b816d22d44c3d8e8255c09e86570bb23712aeb0cade0f478be5aeb"
          }
        ]
      }
    ],
    "component" : {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven.surefire",
      "name" : "common-junit3",
      "version" : "3.2.3",
      "description" : "Shared JUnit3 Provider Code",
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven.surefire/common-junit3@3.2.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/surefire/surefire-providers/common-junit3/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-surefire/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/SUREFIRE"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven-surefire/tree/surefire-3.2.3/surefire-providers/common-junit3"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven.surefire/common-junit3@3.2.3?type=jar"
    },
    "properties" : [
      {
        "name" : "maven.goal",
        "value" : "makeBom"
      },
      {
        "name" : "maven.scopes",
        "value" : "compile,provided,runtime,system"
      },
      {
        "name" : "cdx:reproducible",
        "value" : "enabled"
      }
    ]
  },
  "components" : [
    {
      "publisher" : "JUnit",
      "group" : "junit",
      "name" : "junit",
      "version" : "3.8.1",
      "description" : "JUnit is a regression testing framework written by Erich Gamma and Kent Beck. It is used by the developer who implements unit tests in Java.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "1f40fb782a4f2cf78f161d32670f7a3a"
        },
        {
          "alg" : "SHA-1",
          "content" : "99129f16442844f6a4a11ae22fbbee40b14d774f"
        },
        {
          "alg" : "SHA-256",
          "content" : "b58e459509e190bed737f3592bc1950485322846cf10e78ded1d065153012d70"
        },
        {
          "alg" : "SHA-512",
          "content" : "8e6f9fa5eb3ba93a8b1b5a39e01a81c142b33078264dbd0a2030d60dd26735407249a12e66f5cdcab8056e93a5687124fe66e741c233b4c7a06cc8e49f82e98b"
        },
        {
          "alg" : "SHA-384",
          "content" : "dc2d56e8a39724d0755da793b7fe16a6e0d095a26d4ce54914e9ae12e722868bf075014fd668910d524fcb4b031a082f"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "Common Public License Version 1.0",
            "url" : "http://www.opensource.org/licenses/cpl1.0.txt"
          }
        }
      ],
      "purl" : "pkg:maven/junit/junit@3.8.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://junit.org"
        },
        {
          "type" : "vcs",
          "url" : "http://junit.cvs.sourceforge.net/junit/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/junit/junit@3.8.1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven.surefire",
      "name" : "surefire-api",
      "version" : "3.2.3",
      "description" : "API used in Surefire and Failsafe MOJO, Booter, Common and test framework providers.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "e9160f6b26fe2ba9e84bc7760217e1d7"
        },
        {
          "alg" : "SHA-1",
          "content" : "385fb784ecf415fd8c85eecaf528d752b639fc97"
        },
        {
          "alg" : "SHA-256",
          "content" : "a8de90dfd4e82505776587a233bc539f2edf319582b0331cdbb3779e54b52834"
        },
        {
          "alg" : "SHA-512",
          "content" : "45fa38e0871eaad158a5e68e89cb57e72118c031556977c19ece8a563321683b29440dd1fa3820d1b34585ba937bf877f8c766dcbf6e7774159499abdad5de52"
        },
        {
          "alg" : "SHA-384",
          "content" : "1a39cedd41f3ccc759122ba80aab0c869b92b0267924d4a09f749c3dd551932f2547d47e5abcbdfd3fabffabc1eb8411"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven.surefire/surefire-api@3.2.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/surefire/surefire-api/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-surefire/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/SUREFIRE"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven-surefire/tree/surefire-3.2.3/surefire-api"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven.surefire/surefire-api@3.2.3?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven.surefire",
      "name" : "surefire-logger-api",
      "version" : "3.2.3",
      "description" : "Interfaces and Utilities related only to internal SureFire Logger API. Free of dependencies.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "4583078b93a152321ed99fc889a48684"
        },
        {
          "alg" : "SHA-1",
          "content" : "963ab0611235695673656c42e56e9d88e38b4ec3"
        },
        {
          "alg" : "SHA-256",
          "content" : "b77ad337f49661dbc87c26f791009a591791598d63046b5bfbff0d7eec7e1efe"
        },
        {
          "alg" : "SHA-512",
          "content" : "13b6a8ef3409a80416fc64d31a953295aad5d1c23b13c43d5f277ce54ca4ed8508869e54547a0e3c1a6f1edb16e2fb9ff6321036d0c106264d46a463f3dc64ba"
        },
        {
          "alg" : "SHA-384",
          "content" : "04696c27e4e4ebfb7082fb4b9aba487fe233149df7c375ba35001df53eefe122e428ab2ec247db96223b7b6800945ef2"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven.surefire/surefire-logger-api@3.2.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/surefire/surefire-logger-api/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-surefire/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/SUREFIRE"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven-surefire/tree/surefire-3.2.3/surefire-logger-api"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven.surefire/surefire-logger-api@3.2.3?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven.surefire",
      "name" : "surefire-shared-utils",
      "version" : "3.2.3",
      "description" : "Relocated Java packages of maven-shared-utils and several Apache Commons utilities in Surefire.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "0fdeabc9106cfd1ccb237dbd506cb985"
        },
        {
          "alg" : "SHA-1",
          "content" : "eb6095975873d98dfbb16e768307f3bc1cc16617"
        },
        {
          "alg" : "SHA-256",
          "content" : "b63df8785c206268c7ea094aaa63869f0f78d64080eaf8695558818e05008468"
        },
        {
          "alg" : "SHA-512",
          "content" : "411cdee14d9dfff350c4a9e1da24a52eafe2a5da37b7aa09c449141ad6325ec4159e917b291a1dbfa7194ac73d718178455d6410f5163071a7fbfd183f1bc242"
        },
        {
          "alg" : "SHA-384",
          "content" : "d6c21616a536f848d133773abbf987121c729933520bd4867967e07cd97f50781ba02dd4189c99dd250d82fe533d9929"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven.surefire/surefire-shared-utils@3.2.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/surefire/surefire-shared-utils/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-surefire/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/SUREFIRE"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven-surefire/tree/surefire-3.2.3/surefire-shared-utils"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven.surefire/surefire-shared-utils@3.2.3?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven.shared",
      "name" : "maven-shared-utils",
      "version" : "3.3.4",
      "description" : "Shared utilities for use by Maven core and plugins",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "908f2a0107ff330ac9b856356a0acaef"
        },
        {
          "alg" : "SHA-1",
          "content" : "f87a61adb1e12a00dcc6cc6005a51e693aa7c4ac"
        },
        {
          "alg" : "SHA-256",
          "content" : "7925d9c5a0e2040d24b8fae3f612eb399cbffe5838b33ba368777dc7bddf6dda"
        },
        {
          "alg" : "SHA-512",
          "content" : "c6693f8a061de74ac59c61d185f5b130cb574405cfc37febb8e73806ea64eea822a4a75c24098fb49b7871373091543a6f4c526c0842589e528cacad40e5554a"
        },
        {
          "alg" : "SHA-384",
          "content" : "bc5b42831ff598f42dda54738be004a619d60201a009b04cb3aaa0dc343d0e4fbc423b19739391eb7c33efcac3c08dd5"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven.shared/maven-shared-utils@3.3.4?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/shared/maven-shared-utils/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-builds.apache.org/job/Maven/job/maven-box/job/maven-shared-utils/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/issues/?jql=project%20%3D%20MSHARED%20AND%20component%20%3D%20maven-shared-utils"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven-shared-utils/tree/maven-shared-utils-3.3.4"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven.shared/maven-shared-utils@3.3.4?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-io",
      "name" : "commons-io",
      "version" : "2.15.0",
      "description" : "The Apache Commons IO library contains utility classes, stream implementations, file filters, file comparators, endian transformation classes, and much more.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "125a9d3dc2477b10cc6fa6e89c699e81"
        },
        {
          "alg" : "SHA-1",
          "content" : "5c3c2db10f6f797430a7f9c696b4d1273768c924"
        },
        {
          "alg" : "SHA-256",
          "content" : "a328dad730921d197b6a9b195dffa00e41c974c2dac8fe37e84d31706bca7792"
        },
        {
          "alg" : "SHA-512",
          "content" : "49cf3897bf456f9639900aa9ebb396666718c5828b93bc6a95195e8cdafc15db5b436567b15752d9f3cd1cc0d9eebe4447320fccaac6733d883aac451e93fcc7"
        },
        {
          "alg" : "SHA-384",
          "content" : "906eafa0f5b574cf3bad0b0377547766acc8a8bd7bbaf2cedf9756c98f5a7e2fe7ec7138ff7de00ac883efaab6f8126c"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-io/commons-io@2.15.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-io/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-parent/actions"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/IO"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-io.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-io/commons-io@2.15.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-lang3",
      "version" : "3.14.0",
      "description" : "Apache Commons Lang, a package of Java utility classes for the classes that are in java.lang's hierarchy, or are considered to be so standard as to justify existence in java.lang.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "4e5c3f5e6b0b965ef241d7d72ac8971f"
        },
        {
          "alg" : "SHA-1",
          "content" : "1ed471194b02f2c6cb734a0cd6f6f107c673afae"
        },
        {
          "alg" : "SHA-256",
          "content" : "7b96bf3ee68949abb5bc465559ac270e0551596fa34523fddf890ec418dde13c"
        },
        {
          "alg" : "SHA-512",
          "content" : "0338b50767166e5746ada6d6aa2e071e7221d699323bfb629f7f204b294c1dc4cad140610a129ed751798443b43e74e0818989c7df7d33c5915aa29742be9ba8"
        },
        {
          "alg" : "SHA-384",
          "content" : "908d0a22dc17aaa04caa5104cff7cad5b88b77eecb78dd5b3b3fefa22ff71ac50a4fb9e31c897ac243f9d841e4b3453d"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-lang/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-parent/actions"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/LANG"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-lang.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-compress",
      "version" : "1.25.0",
      "description" : "Apache Commons Compress defines an API for working with compression and archive formats. These include: bzip2, gzip, pack200, LZMA, XZ, Snappy, traditional Unix Compress, DEFLATE, DEFLATE64, LZ4, Brotli, Zstandard and ar, cpio, jar, tar, zip, dump, 7z, arj.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "45f94488e95ceeaf2f401c4f5542b35c"
        },
        {
          "alg" : "SHA-1",
          "content" : "9d35aec423da6c8a7f93d7e9e1c6b1d9fe14bb5e"
        },
        {
          "alg" : "SHA-256",
          "content" : "d0ec8014ebbb0749f471803122b21796afddf2e98e194e4374622e5fbaf69f49"
        },
        {
          "alg" : "SHA-512",
          "content" : "262ba7771cef5b3eee9e8790102cbe022bb52f5e4bd7f69e3ab132563472bbd5ae6de653df467bfbd7e9828d5edf9b81a6c43236b3ae65ac757ba745abb4f764"
        },
        {
          "alg" : "SHA-384",
          "content" : "73124bf7ce8a827d1bb42c4a7fddf2cbf6a89b84f32a7e0cac4a7bbcc99c5a7267a679c8fb0ae3bfb631e7824250da0c"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-compress@1.25.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-compress/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-parent/actions"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/COMPRESS"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-compress.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-compress@1.25.0?type=jar"
    }
  ],
  "dependencies" : [
    {
      "ref" : "pkg:maven/org.apache.maven.surefire/common-junit3@3.2.3?type=jar",
      "dependsOn" : [
        "pkg:maven/junit/junit@3.8.1?type=jar",
        "pkg:maven/org.apache.maven.surefire/surefire-api@3.2.3?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/junit/junit@3.8.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven.surefire/surefire-api@3.2.3?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.maven.surefire/surefire-logger-api@3.2.3?type=jar",
        "pkg:maven/org.apache.maven.surefire/surefire-shared-utils@3.2.3?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven.surefire/surefire-logger-api@3.2.3?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven.surefire/surefire-shared-utils@3.2.3?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.maven.shared/maven-shared-utils@3.3.4?type=jar",
        "pkg:maven/commons-io/commons-io@2.15.0?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar",
        "pkg:maven/org.apache.commons/commons-compress@1.25.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven.shared/maven-shared-utils@3.3.4?type=jar",
      "dependsOn" : [
        "pkg:maven/commons-io/commons-io@2.15.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/commons-io/commons-io@2.15.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-compress@1.25.0?type=jar",
      "dependsOn" : [ ]
    }
  ]
}