<?xml version="1.0" encoding="UTF-8"?>
<bom version="1" xmlns="http://cyclonedx.org/schema/bom/1.4">
  <metadata>
    <tools>
      <tool>
        <vendor>OWASP Foundation</vendor>
        <name>CycloneDX Maven plugin</name>
        <version>2.7.10</version>
        <hashes>
          <hash alg="MD5">1cc7f6a0382f8bb2f758d6a6ea401d1b</hash>
          <hash alg="SHA-1">a4297947a1f2d7d453105db542651614bbd37f38</hash>
          <hash alg="SHA-256">bd0fdd8f2f2116eee5e715aeac1580f19eb7a10ec2b6f805b53567067658e872</hash>
          <hash alg="SHA-512">9cde8352a427e10b96cae01348fc7cfe5d4aa9cd0a5e5dd93b414ce3bb7d112993c3b3004e53af52567fbfa16de0704ec59a5556a635ad70571fd124ae389f39</hash>
          <hash alg="SHA-384">93d7bf5b5c735347edfbfbd66810273ca840f9a322b816d22d44c3d8e8255c09e86570bb23712aeb0cade0f478be5aeb</hash>
        </hashes>
      </tool>
    </tools>
    <component type="library" bom-ref="pkg:maven/org.apache.maven.surefire/surefire-booter@3.2.3?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven.surefire</group>
      <name>surefire-booter</name>
      <version>3.2.3</version>
      <description>API and Facilities used by forked tests running in JVM sub-process.</description>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven.surefire/surefire-booter@3.2.3?type=jar</purl>
      <externalReferences><reference type="website"><url>https://maven.apache.org/surefire/surefire-booter/</url></reference><reference type="build-system"><url>https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-surefire/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/SUREFIRE</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?users@maven.apache.org</url></reference><reference type="vcs"><url>https://github.com/apache/maven-surefire/tree/surefire-3.2.3/surefire-booter</url></reference></externalReferences>
    </component>
    <properties>
      <property name="maven.goal">makeBom</property>
      <property name="maven.scopes">compile,provided,runtime,system</property>
      <property name="cdx:reproducible">enabled</property>
    </properties>
  </metadata>
  <components>
    <component type="library" bom-ref="pkg:maven/org.apache.maven.surefire/surefire-api@3.2.3?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven.surefire</group>
      <name>surefire-api</name>
      <version>3.2.3</version>
      <description>API used in Surefire and Failsafe MOJO, Booter, Common and test framework providers.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">e9160f6b26fe2ba9e84bc7760217e1d7</hash>
        <hash alg="SHA-1">385fb784ecf415fd8c85eecaf528d752b639fc97</hash>
        <hash alg="SHA-256">a8de90dfd4e82505776587a233bc539f2edf319582b0331cdbb3779e54b52834</hash>
        <hash alg="SHA-512">45fa38e0871eaad158a5e68e89cb57e72118c031556977c19ece8a563321683b29440dd1fa3820d1b34585ba937bf877f8c766dcbf6e7774159499abdad5de52</hash>
        <hash alg="SHA-384">1a39cedd41f3ccc759122ba80aab0c869b92b0267924d4a09f749c3dd551932f2547d47e5abcbdfd3fabffabc1eb8411</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven.surefire/surefire-api@3.2.3?type=jar</purl>
      <externalReferences><reference type="website"><url>https://maven.apache.org/surefire/surefire-api/</url></reference><reference type="build-system"><url>https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-surefire/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/SUREFIRE</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?users@maven.apache.org</url></reference><reference type="vcs"><url>https://github.com/apache/maven-surefire/tree/surefire-3.2.3/surefire-api</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.maven.surefire/surefire-logger-api@3.2.3?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven.surefire</group>
      <name>surefire-logger-api</name>
      <version>3.2.3</version>
      <description>Interfaces and Utilities related only to internal SureFire Logger API. Free of dependencies.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">4583078b93a152321ed99fc889a48684</hash>
        <hash alg="SHA-1">963ab0611235695673656c42e56e9d88e38b4ec3</hash>
        <hash alg="SHA-256">b77ad337f49661dbc87c26f791009a591791598d63046b5bfbff0d7eec7e1efe</hash>
        <hash alg="SHA-512">13b6a8ef3409a80416fc64d31a953295aad5d1c23b13c43d5f277ce54ca4ed8508869e54547a0e3c1a6f1edb16e2fb9ff6321036d0c106264d46a463f3dc64ba</hash>
        <hash alg="SHA-384">04696c27e4e4ebfb7082fb4b9aba487fe233149df7c375ba35001df53eefe122e428ab2ec247db96223b7b6800945ef2</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven.surefire/surefire-logger-api@3.2.3?type=jar</purl>
      <externalReferences><reference type="website"><url>https://maven.apache.org/surefire/surefire-logger-api/</url></reference><reference type="build-system"><url>https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-surefire/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/SUREFIRE</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?users@maven.apache.org</url></reference><reference type="vcs"><url>https://github.com/apache/maven-surefire/tree/surefire-3.2.3/surefire-logger-api</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.maven.surefire/surefire-shared-utils@3.2.3?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven.surefire</group>
      <name>surefire-shared-utils</name>
      <version>3.2.3</version>
      <description>Relocated Java packages of maven-shared-utils and several Apache Commons utilities in Surefire.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">0fdeabc9106cfd1ccb237dbd506cb985</hash>
        <hash alg="SHA-1">eb6095975873d98dfbb16e768307f3bc1cc16617</hash>
        <hash alg="SHA-256">b63df8785c206268c7ea094aaa63869f0f78d64080eaf8695558818e05008468</hash>
        <hash alg="SHA-512">411cdee14d9dfff350c4a9e1da24a52eafe2a5da37b7aa09c449141ad6325ec4159e917b291a1dbfa7194ac73d718178455d6410f5163071a7fbfd183f1bc242</hash>
        <hash alg="SHA-384">d6c21616a536f848d133773abbf987121c729933520bd4867967e07cd97f50781ba02dd4189c99dd250d82fe533d9929</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven.surefire/surefire-shared-utils@3.2.3?type=jar</purl>
      <externalReferences><reference type="website"><url>https://maven.apache.org/surefire/surefire-shared-utils/</url></reference><reference type="build-system"><url>https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-surefire/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/SUREFIRE</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?users@maven.apache.org</url></reference><reference type="vcs"><url>https://github.com/apache/maven-surefire/tree/surefire-3.2.3/surefire-shared-utils</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.maven.shared/maven-shared-utils@3.3.4?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven.shared</group>
      <name>maven-shared-utils</name>
      <version>3.3.4</version>
      <description>Shared utilities for use by Maven core and plugins</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">908f2a0107ff330ac9b856356a0acaef</hash>
        <hash alg="SHA-1">f87a61adb1e12a00dcc6cc6005a51e693aa7c4ac</hash>
        <hash alg="SHA-256">7925d9c5a0e2040d24b8fae3f612eb399cbffe5838b33ba368777dc7bddf6dda</hash>
        <hash alg="SHA-512">c6693f8a061de74ac59c61d185f5b130cb574405cfc37febb8e73806ea64eea822a4a75c24098fb49b7871373091543a6f4c526c0842589e528cacad40e5554a</hash>
        <hash alg="SHA-384">bc5b42831ff598f42dda54738be004a619d60201a009b04cb3aaa0dc343d0e4fbc423b19739391eb7c33efcac3c08dd5</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven.shared/maven-shared-utils@3.3.4?type=jar</purl>
      <externalReferences><reference type="website"><url>https://maven.apache.org/shared/maven-shared-utils/</url></reference><reference type="build-system"><url>https://ci-builds.apache.org/job/Maven/job/maven-box/job/maven-shared-utils/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/issues/?jql=project%20%3D%20MSHARED%20AND%20component%20%3D%20maven-shared-utils</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?users@maven.apache.org</url></reference><reference type="vcs"><url>https://github.com/apache/maven-shared-utils/tree/maven-shared-utils-3.3.4</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-io/commons-io@2.15.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>commons-io</group>
      <name>commons-io</name>
      <version>2.15.0</version>
      <description>The Apache Commons IO library contains utility classes, stream implementations, file filters,
file comparators, endian transformation classes, and much more.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">125a9d3dc2477b10cc6fa6e89c699e81</hash>
        <hash alg="SHA-1">5c3c2db10f6f797430a7f9c696b4d1273768c924</hash>
        <hash alg="SHA-256">a328dad730921d197b6a9b195dffa00e41c974c2dac8fe37e84d31706bca7792</hash>
        <hash alg="SHA-512">49cf3897bf456f9639900aa9ebb396666718c5828b93bc6a95195e8cdafc15db5b436567b15752d9f3cd1cc0d9eebe4447320fccaac6733d883aac451e93fcc7</hash>
        <hash alg="SHA-384">906eafa0f5b574cf3bad0b0377547766acc8a8bd7bbaf2cedf9756c98f5a7e2fe7ec7138ff7de00ac883efaab6f8126c</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/commons-io/commons-io@2.15.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://commons.apache.org/proper/commons-io/</url></reference><reference type="build-system"><url>https://github.com/apache/commons-parent/actions</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/IO</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=commons-io.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.commons</group>
      <name>commons-lang3</name>
      <version>3.14.0</version>
      <description>Apache Commons Lang, a package of Java utility classes for the
  classes that are in java.lang's hierarchy, or are considered to be so
  standard as to justify existence in java.lang.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">4e5c3f5e6b0b965ef241d7d72ac8971f</hash>
        <hash alg="SHA-1">1ed471194b02f2c6cb734a0cd6f6f107c673afae</hash>
        <hash alg="SHA-256">7b96bf3ee68949abb5bc465559ac270e0551596fa34523fddf890ec418dde13c</hash>
        <hash alg="SHA-512">0338b50767166e5746ada6d6aa2e071e7221d699323bfb629f7f204b294c1dc4cad140610a129ed751798443b43e74e0818989c7df7d33c5915aa29742be9ba8</hash>
        <hash alg="SHA-384">908d0a22dc17aaa04caa5104cff7cad5b88b77eecb78dd5b3b3fefa22ff71ac50a4fb9e31c897ac243f9d841e4b3453d</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://commons.apache.org/proper/commons-lang/</url></reference><reference type="build-system"><url>https://github.com/apache/commons-parent/actions</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/LANG</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=commons-lang.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-compress@1.25.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.commons</group>
      <name>commons-compress</name>
      <version>1.25.0</version>
      <description>Apache Commons Compress defines an API for working with
compression and archive formats.  These include: bzip2, gzip, pack200,
LZMA, XZ, Snappy, traditional Unix Compress, DEFLATE, DEFLATE64, LZ4,
Brotli, Zstandard and ar, cpio, jar, tar, zip, dump, 7z, arj.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">45f94488e95ceeaf2f401c4f5542b35c</hash>
        <hash alg="SHA-1">9d35aec423da6c8a7f93d7e9e1c6b1d9fe14bb5e</hash>
        <hash alg="SHA-256">d0ec8014ebbb0749f471803122b21796afddf2e98e194e4374622e5fbaf69f49</hash>
        <hash alg="SHA-512">262ba7771cef5b3eee9e8790102cbe022bb52f5e4bd7f69e3ab132563472bbd5ae6de653df467bfbd7e9828d5edf9b81a6c43236b3ae65ac757ba745abb4f764</hash>
        <hash alg="SHA-384">73124bf7ce8a827d1bb42c4a7fddf2cbf6a89b84f32a7e0cac4a7bbcc99c5a7267a679c8fb0ae3bfb631e7824250da0c</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.commons/commons-compress@1.25.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://commons.apache.org/proper/commons-compress/</url></reference><reference type="build-system"><url>https://github.com/apache/commons-parent/actions</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/COMPRESS</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=commons-compress.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.maven.surefire/surefire-extensions-spi@3.2.3?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven.surefire</group>
      <name>surefire-extensions-spi</name>
      <version>3.2.3</version>
      <description>Surefire is a test framework project.
    This is the aggregator POM in Apache Maven Surefire project.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">5bf8611d8c865c945af236c667c47bd6</hash>
        <hash alg="SHA-1">70f26226daf70aaeff7f8d39e7c577e62eca1d96</hash>
        <hash alg="SHA-256">5eae9d42b9da855b005adc385a35ddd62659aefbe0a3ebeab4dff2c56762c56f</hash>
        <hash alg="SHA-512">cb20ef9257e3767d1b0035e71feaf68380ef4d70a12756512953e14ee18011063609da894ad5dba0ad09c7f8d130cdd4817702b7c93488c9e2749acffce65c48</hash>
        <hash alg="SHA-384">ab1178d4600108210bbffd7a09a05fd7a8826459827e1b4e36566eab1105c665f869764b039eed2b4df0ddbf39cd43da</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven.surefire/surefire-extensions-spi@3.2.3?type=jar</purl>
      <externalReferences><reference type="website"><url>https://maven.apache.org/surefire/surefire-extensions-spi/</url></reference><reference type="build-system"><url>https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-surefire/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/SUREFIRE</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?users@maven.apache.org</url></reference><reference type="vcs"><url>https://github.com/apache/maven-surefire/tree/surefire-3.2.3/surefire-extensions-spi</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar">
      <group>com.google.code.findbugs</group>
      <name>jsr305</name>
      <version>3.0.2</version>
      <description>JSR305 Annotations for Findbugs</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">dd83accb899363c32b07d7a1b2e4ce40</hash>
        <hash alg="SHA-1">25ea2e8b0c338a877313bd4672d3fe056ea78f0d</hash>
        <hash alg="SHA-256">766ad2a0783f2687962c8ad74ceecc38a28b9f72a2d085ee438b7813e928d0c7</hash>
        <hash alg="SHA-512">bb09db62919a50fa5b55906013be6ca4fc7acb2e87455fac5eaf9ede2e41ce8bbafc0e5a385a561264ea4cd71bbbd3ef5a45e02d63277a201d06a0ae1636f804</hash>
        <hash alg="SHA-384">ca0b169d3eb2d0922dc031133a021f861a043bb3e405a88728215fd6ff00fa52fdc7347842dcc2031472e3726164bdc4</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar</purl>
      <externalReferences><reference type="website"><url>http://findbugs.sourceforge.net/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://code.google.com/p/jsr-305/</url></reference></externalReferences>
    </component>
  </components>
  <dependencies>
    <dependency ref="pkg:maven/org.apache.maven.surefire/surefire-booter@3.2.3?type=jar">
      <dependency ref="pkg:maven/org.apache.maven.surefire/surefire-api@3.2.3?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven.surefire/surefire-extensions-spi@3.2.3?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.maven.surefire/surefire-api@3.2.3?type=jar">
      <dependency ref="pkg:maven/org.apache.maven.surefire/surefire-logger-api@3.2.3?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven.surefire/surefire-shared-utils@3.2.3?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.maven.surefire/surefire-logger-api@3.2.3?type=jar"/>
    <dependency ref="pkg:maven/org.apache.maven.surefire/surefire-shared-utils@3.2.3?type=jar">
      <dependency ref="pkg:maven/org.apache.maven.shared/maven-shared-utils@3.3.4?type=jar"/>
      <dependency ref="pkg:maven/commons-io/commons-io@2.15.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-compress@1.25.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.maven.shared/maven-shared-utils@3.3.4?type=jar">
      <dependency ref="pkg:maven/commons-io/commons-io@2.15.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/commons-io/commons-io@2.15.0?type=jar"/>
    <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar"/>
    <dependency ref="pkg:maven/org.apache.commons/commons-compress@1.25.0?type=jar"/>
    <dependency ref="pkg:maven/org.apache.maven.surefire/surefire-extensions-spi@3.2.3?type=jar">
      <dependency ref="pkg:maven/org.apache.maven.surefire/surefire-api@3.2.3?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar"/>
  </dependencies>
</bom>
