{
  "bomFormat" : "CycloneDX",
  "specVersion" : "1.4",
  "version" : 1,
  "metadata" : {
    "tools" : [
      {
        "vendor" : "OWASP Foundation",
        "name" : "CycloneDX Maven plugin",
        "version" : "2.7.10",
        "hashes" : [
          {
            "alg" : "MD5",
            "content" : "1cc7f6a0382f8bb2f758d6a6ea401d1b"
          },
          {
            "alg" : "SHA-1",
            "content" : "a4297947a1f2d7d453105db542651614bbd37f38"
          },
          {
            "alg" : "SHA-256",
            "content" : "bd0fdd8f2f2116eee5e715aeac1580f19eb7a10ec2b6f805b53567067658e872"
          },
          {
            "alg" : "SHA-512",
            "content" : "9cde8352a427e10b96cae01348fc7cfe5d4aa9cd0a5e5dd93b414ce3bb7d112993c3b3004e53af52567fbfa16de0704ec59a5556a635ad70571fd124ae389f39"
          },
          {
            "alg" : "SHA-384",
            "content" : "93d7bf5b5c735347edfbfbd66810273ca840f9a322b816d22d44c3d8e8255c09e86570bb23712aeb0cade0f478be5aeb"
          }
        ]
      }
    ],
    "component" : {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven.surefire",
      "name" : "surefire-extensions-spi",
      "version" : "3.2.5",
      "description" : "Surefire is a test framework project. This is the aggregator POM in Apache Maven Surefire project.",
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven.surefire/surefire-extensions-spi@3.2.5?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/surefire/surefire-extensions-spi/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-surefire/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/SUREFIRE"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven-surefire/tree/surefire-3.2.5/surefire-extensions-spi"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven.surefire/surefire-extensions-spi@3.2.5?type=jar"
    },
    "properties" : [
      {
        "name" : "maven.goal",
        "value" : "makeBom"
      },
      {
        "name" : "maven.scopes",
        "value" : "compile,provided,runtime,system"
      },
      {
        "name" : "cdx:reproducible",
        "value" : "enabled"
      }
    ]
  },
  "components" : [
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven.surefire",
      "name" : "surefire-api",
      "version" : "3.2.5",
      "description" : "API used in Surefire and Failsafe MOJO, Booter, Common and test framework providers.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "edc80ec991d103143899b3da82c51803"
        },
        {
          "alg" : "SHA-1",
          "content" : "e3dce08c9fdd7536e9df5b81bd2c990a3758930e"
        },
        {
          "alg" : "SHA-256",
          "content" : "20a4b458d9f6d93223d6bb906c61032fa66925f9e867a0d6762d35bc0b528bb9"
        },
        {
          "alg" : "SHA-512",
          "content" : "619a0caf4ca7359d9e5e8e65ca3dcfbe0285306a8bde7a97bf70167ccaaaae36c4d17dd43faddda7eff5f02d34af75510f7a706e3732c2ee93313e5063a612cf"
        },
        {
          "alg" : "SHA-384",
          "content" : "b71b95fc4185b5e952c69eb70c3aaf793853b8f7eaea0027cf891099c526084a5d395d8ae8c706bba0af407b3de8dfba"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven.surefire/surefire-api@3.2.5?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/surefire/surefire-api/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-surefire/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/SUREFIRE"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven-surefire/tree/surefire-3.2.5/surefire-api"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven.surefire/surefire-api@3.2.5?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven.surefire",
      "name" : "surefire-logger-api",
      "version" : "3.2.5",
      "description" : "Interfaces and Utilities related only to internal SureFire Logger API. Free of dependencies.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "4dc594dfa4060d089ddeb6183ed646fd"
        },
        {
          "alg" : "SHA-1",
          "content" : "ec8e7d8c08cf98d128c5c2835f4c7ea46c212c22"
        },
        {
          "alg" : "SHA-256",
          "content" : "da275c04bd08355403f987d83f6ecef1afa54e92864cb73ca6ec89cc062ed50d"
        },
        {
          "alg" : "SHA-512",
          "content" : "47adbd54ac4796bcc57d66c7d2476f144cc78cb6bf70ba81bad9492073ee7947597f1d9da3ca6eb07b5cce8be88c15775f8aa15bb5cb3781d04c68fea703f6b3"
        },
        {
          "alg" : "SHA-384",
          "content" : "fe40ca558026ddc8231b014b55bc1dd93f3128c0867da8606d1cf1471516e9c7776175e77a8f08159696377b76f3743f"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven.surefire/surefire-logger-api@3.2.5?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/surefire/surefire-logger-api/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-surefire/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/SUREFIRE"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven-surefire/tree/surefire-3.2.5/surefire-logger-api"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven.surefire/surefire-logger-api@3.2.5?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven.surefire",
      "name" : "surefire-shared-utils",
      "version" : "3.2.5",
      "description" : "Relocated Java packages of maven-shared-utils and several Apache Commons utilities in Surefire.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "ff370c037f7c27ca1f28499948a41f1d"
        },
        {
          "alg" : "SHA-1",
          "content" : "fcab7d410f08666df84d2e285a209abd3d86cb2f"
        },
        {
          "alg" : "SHA-256",
          "content" : "bb7023d1e770bd01e0bb82687eb35a746da19aaa2b84fd0e427f20aecccc73ac"
        },
        {
          "alg" : "SHA-512",
          "content" : "6e267990a51dd087480ed4383321207985902680eab77598f67108e0695a26f42889c86b3311dd21f4204ab9702c1f330990e0c3311ff65832ecfcda829d1092"
        },
        {
          "alg" : "SHA-384",
          "content" : "da9016c5cfb3d89cc349d048ce06444d3e286aeb0fe4bd7c61dcba111c4a1330014e02f1cd172facf137c80e83dee839"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven.surefire/surefire-shared-utils@3.2.5?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/surefire/surefire-shared-utils/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-surefire/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/SUREFIRE"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven-surefire/tree/surefire-3.2.5/surefire-shared-utils"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven.surefire/surefire-shared-utils@3.2.5?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven.shared",
      "name" : "maven-shared-utils",
      "version" : "3.3.4",
      "description" : "Shared utilities for use by Maven core and plugins",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "908f2a0107ff330ac9b856356a0acaef"
        },
        {
          "alg" : "SHA-1",
          "content" : "f87a61adb1e12a00dcc6cc6005a51e693aa7c4ac"
        },
        {
          "alg" : "SHA-256",
          "content" : "7925d9c5a0e2040d24b8fae3f612eb399cbffe5838b33ba368777dc7bddf6dda"
        },
        {
          "alg" : "SHA-512",
          "content" : "c6693f8a061de74ac59c61d185f5b130cb574405cfc37febb8e73806ea64eea822a4a75c24098fb49b7871373091543a6f4c526c0842589e528cacad40e5554a"
        },
        {
          "alg" : "SHA-384",
          "content" : "bc5b42831ff598f42dda54738be004a619d60201a009b04cb3aaa0dc343d0e4fbc423b19739391eb7c33efcac3c08dd5"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven.shared/maven-shared-utils@3.3.4?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/shared/maven-shared-utils/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-builds.apache.org/job/Maven/job/maven-box/job/maven-shared-utils/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/issues/?jql=project%20%3D%20MSHARED%20AND%20component%20%3D%20maven-shared-utils"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven-shared-utils/tree/maven-shared-utils-3.3.4"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven.shared/maven-shared-utils@3.3.4?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-io",
      "name" : "commons-io",
      "version" : "2.15.1",
      "description" : "The Apache Commons IO library contains utility classes, stream implementations, file filters, file comparators, endian transformation classes, and much more.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "84351f7991a0e6722f00e96a4ccc376f"
        },
        {
          "alg" : "SHA-1",
          "content" : "f11560da189ab563a5c8e351941415430e9304ea"
        },
        {
          "alg" : "SHA-256",
          "content" : "a58af12ee1b68cfd2ebb0c27caef164f084381a00ec81a48cc275fd7ea54e154"
        },
        {
          "alg" : "SHA-512",
          "content" : "e9adaeed2d715ac0ae44de056ba165a743a92acbeb9871b535f7e58e0b3bc4fba276495b50429be195098a559f3adb7294048479754a0ee4d397da2efda5f81c"
        },
        {
          "alg" : "SHA-384",
          "content" : "028c72b59373d3894da22f9eb2c731aabd00f670993973f71a354d722670c12ca659686b83bbf8db32d060ca180f50b2"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-io/commons-io@2.15.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-io/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-parent/actions"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/IO"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-io.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-io/commons-io@2.15.1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-lang3",
      "version" : "3.14.0",
      "description" : "Apache Commons Lang, a package of Java utility classes for the classes that are in java.lang's hierarchy, or are considered to be so standard as to justify existence in java.lang.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "4e5c3f5e6b0b965ef241d7d72ac8971f"
        },
        {
          "alg" : "SHA-1",
          "content" : "1ed471194b02f2c6cb734a0cd6f6f107c673afae"
        },
        {
          "alg" : "SHA-256",
          "content" : "7b96bf3ee68949abb5bc465559ac270e0551596fa34523fddf890ec418dde13c"
        },
        {
          "alg" : "SHA-512",
          "content" : "0338b50767166e5746ada6d6aa2e071e7221d699323bfb629f7f204b294c1dc4cad140610a129ed751798443b43e74e0818989c7df7d33c5915aa29742be9ba8"
        },
        {
          "alg" : "SHA-384",
          "content" : "908d0a22dc17aaa04caa5104cff7cad5b88b77eecb78dd5b3b3fefa22ff71ac50a4fb9e31c897ac243f9d841e4b3453d"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-lang/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-parent/actions"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/LANG"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-lang.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-compress",
      "version" : "1.25.0",
      "description" : "Apache Commons Compress defines an API for working with compression and archive formats. These include: bzip2, gzip, pack200, LZMA, XZ, Snappy, traditional Unix Compress, DEFLATE, DEFLATE64, LZ4, Brotli, Zstandard and ar, cpio, jar, tar, zip, dump, 7z, arj.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "45f94488e95ceeaf2f401c4f5542b35c"
        },
        {
          "alg" : "SHA-1",
          "content" : "9d35aec423da6c8a7f93d7e9e1c6b1d9fe14bb5e"
        },
        {
          "alg" : "SHA-256",
          "content" : "d0ec8014ebbb0749f471803122b21796afddf2e98e194e4374622e5fbaf69f49"
        },
        {
          "alg" : "SHA-512",
          "content" : "262ba7771cef5b3eee9e8790102cbe022bb52f5e4bd7f69e3ab132563472bbd5ae6de653df467bfbd7e9828d5edf9b81a6c43236b3ae65ac757ba745abb4f764"
        },
        {
          "alg" : "SHA-384",
          "content" : "73124bf7ce8a827d1bb42c4a7fddf2cbf6a89b84f32a7e0cac4a7bbcc99c5a7267a679c8fb0ae3bfb631e7824250da0c"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-compress@1.25.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-compress/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-parent/actions"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/COMPRESS"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-compress.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-compress@1.25.0?type=jar"
    },
    {
      "group" : "com.google.code.findbugs",
      "name" : "jsr305",
      "version" : "3.0.2",
      "description" : "JSR305 Annotations for Findbugs",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "dd83accb899363c32b07d7a1b2e4ce40"
        },
        {
          "alg" : "SHA-1",
          "content" : "25ea2e8b0c338a877313bd4672d3fe056ea78f0d"
        },
        {
          "alg" : "SHA-256",
          "content" : "766ad2a0783f2687962c8ad74ceecc38a28b9f72a2d085ee438b7813e928d0c7"
        },
        {
          "alg" : "SHA-512",
          "content" : "bb09db62919a50fa5b55906013be6ca4fc7acb2e87455fac5eaf9ede2e41ce8bbafc0e5a385a561264ea4cd71bbbd3ef5a45e02d63277a201d06a0ae1636f804"
        },
        {
          "alg" : "SHA-384",
          "content" : "ca0b169d3eb2d0922dc031133a021f861a043bb3e405a88728215fd6ff00fa52fdc7347842dcc2031472e3726164bdc4"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://findbugs.sourceforge.net/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://code.google.com/p/jsr-305/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar"
    }
  ],
  "dependencies" : [
    {
      "ref" : "pkg:maven/org.apache.maven.surefire/surefire-extensions-spi@3.2.5?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.maven.surefire/surefire-api@3.2.5?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven.surefire/surefire-api@3.2.5?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.maven.surefire/surefire-logger-api@3.2.5?type=jar",
        "pkg:maven/org.apache.maven.surefire/surefire-shared-utils@3.2.5?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven.surefire/surefire-logger-api@3.2.5?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven.surefire/surefire-shared-utils@3.2.5?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.maven.shared/maven-shared-utils@3.3.4?type=jar",
        "pkg:maven/commons-io/commons-io@2.15.1?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar",
        "pkg:maven/org.apache.commons/commons-compress@1.25.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven.shared/maven-shared-utils@3.3.4?type=jar",
      "dependsOn" : [
        "pkg:maven/commons-io/commons-io@2.15.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/commons-io/commons-io@2.15.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-compress@1.25.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar",
      "dependsOn" : [ ]
    }
  ]
}