{ "bomFormat" : "CycloneDX", "specVersion" : "1.4", "version" : 1, "metadata" : { "tools" : [ { "vendor" : "OWASP Foundation", "name" : "CycloneDX Maven plugin", "version" : "2.7.9", "hashes" : [ { "alg" : "MD5", "content" : "8e595cdb67f17e4b41e046456970591d" }, { "alg" : "SHA-1", "content" : "69e8ca804520d09ce4657e7235bae84d01cbffa6" }, { "alg" : "SHA-256", "content" : "aa09074fe5aa403c008cd4fc7ef8ce41cd244489337f16b3e91a3914158a4db8" }, { "alg" : "SHA-512", "content" : "1488a8112da8e675813d7585f57c5efb178aed32901118186ee12d0e4ae3d19c53774c7f860bf70d17d70f050119b69443a2637cf641675b4b5d9cdcdd69b89b" }, { "alg" : "SHA-384", "content" : "b097295dfbf10887abc6eec58d4d0822cde5a73d1f5c1cf183a57bf569016ad5ced9d34efae3e574d82bb62837540c6c" }, { "alg" : "SHA3-384", "content" : "289f9520bd73a2031276248a6ef8f0891c691062c2d1ea86a2bc9ea8db2c52377d92a53be9957179e71aee3deda26a8c" }, { "alg" : "SHA3-256", "content" : "32b50a7efe5d491a4039c0017eca3cf49d98b55fc66d06b3dd06209487323474" }, { "alg" : "SHA3-512", "content" : "1daf813da53e5d5cda4d0302ff3a5e388aa45d96ebe6dcbe240f35d33f14b1e6390f6bbe7f21f3ed8cf96ebd9f5516a08b18487b7339715109c81cebfc1563df" } ] } ], "component" : { "publisher" : "The Apache Software Foundation", "group" : "org.apache.wss4j", "name" : "wss4j-bindings", "version" : "2.4.3", "description" : "Apache WSS4J parent pom", "licenses" : [ { "license" : { "id" : "Apache-2.0", "url" : "https://www.apache.org/licenses/LICENSE-2.0" } } ], "purl" : "pkg:maven/org.apache.wss4j/wss4j-bindings@2.4.3?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://ws.apache.org/wss4j/wss4j-bindings/" }, { "type" : "distribution", "url" : "https://repository.apache.org/service/local/staging/deploy/maven2" }, { "type" : "issue-tracker", "url" : "https://issues.apache.org/jira/browse/WSS" }, { "type" : "mailing-list", "url" : "https://lists.apache.org/list.html?dev@ws.apache.org" }, { "type" : "vcs", "url" : "https://gitbox.apache.org/repos/asf?p=ws-wss4j.git;a=summary/wss4j-parent/wss4j-bindings" } ], "type" : "library", "bom-ref" : "pkg:maven/org.apache.wss4j/wss4j-bindings@2.4.3?type=jar" }, "properties" : [ { "name" : "maven.goal", "value" : "makeBom" }, { "name" : "maven.scopes", "value" : "compile,provided,runtime,system" }, { "name" : "maven.reproducible", "value" : "enabled" } ] }, "components" : [ { "publisher" : "The Apache Software Foundation", "group" : "org.apache.santuario", "name" : "xmlsec", "version" : "2.3.4", "description" : "Apache XML Security for Java supports XML-Signature Syntax and Processing, W3C Recommendation 12 February 2002, and XML Encryption Syntax and Processing, W3C Recommendation 10 December 2002. As of version 1.4, the library supports the standard Java API JSR-105: XML Digital Signature APIs.", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "bad235ebfca40a0514fba17fd742df51" }, { "alg" : "SHA-1", "content" : "7f2baecd896ae8e8b02b6090220537bd950eccbc" }, { "alg" : "SHA-256", "content" : "5513e7417edc1eb7188adc4de0312e93156bd7ca6d6c1e6072d3e0006defff23" }, { "alg" : "SHA-512", "content" : "a948e1988f5bbacf7df1734d4779e3dd6022ded212eda83c784b295371ad2b89b5e7e476cc1673e592abe7a3f0fc153255251467ae7b023ff98ac22f476b1e2e" }, { "alg" : "SHA-384", "content" : "d2f2631261d48530edf19d9a04ecec293d15ffa75e56912e705ccf7b08ae63a560e5bc49a1b24ad912be920316e4e216" }, { "alg" : "SHA3-384", "content" : "0ff82e0fcdb6a9b891a24160e19ca5db8558b41bf32f5eda45581a7982d903b81121a385f0030b90cb4a280b861217c1" }, { "alg" : "SHA3-256", "content" : "355c1921dff3f01ece0170e63e55b599eec335dac51fdb055f9e46c1c15b105d" }, { "alg" : "SHA3-512", "content" : "c158de9564db780b0f04b482d3d155c55119e94fd1887cc9abcc54a0ef9f44455b3e29b08596c3834928c2f15b6493ba73c957693484a3bd42f817597ad050fb" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0", "url" : "https://www.apache.org/licenses/LICENSE-2.0" } } ], "purl" : "pkg:maven/org.apache.santuario/xmlsec@2.3.4?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://santuario.apache.org/" }, { "type" : "distribution", "url" : "https://repository.apache.org/service/local/staging/deploy/maven2" }, { "type" : "issue-tracker", "url" : "https://issues.apache.org/jira/browse/SANTUARIO" }, { "type" : "mailing-list", "url" : "http://news.gmane.org/gmane.text.xml.security.devel" }, { "type" : "vcs", "url" : "https://gitbox.apache.org/repos/asf?p=santuario-xml-security-java.git;a=summary" } ], "type" : "library", "bom-ref" : "pkg:maven/org.apache.santuario/xmlsec@2.3.4?type=jar" }, { "publisher" : "QOS.ch", "group" : "org.slf4j", "name" : "slf4j-api", "version" : "1.7.36", "description" : "The slf4j API", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "872da51f5de7f3923da4de871d57fd85" }, { "alg" : "SHA-1", "content" : "6c62681a2f655b49963a5983b8b0950a6120ae14" }, { "alg" : "SHA-256", "content" : "d3ef575e3e4979678dc01bf1dcce51021493b4d11fb7f1be8ad982877c16a1c0" }, { "alg" : "SHA-512", "content" : "f9b033fc019a44f98b16048da7e2b59edd4a6a527ba60e358f65ab88e0afae03a9340f1b3e8a543d49fa542290f499c5594259affa1ff3e6e7bf3b428d4c610b" }, { "alg" : "SHA-384", "content" : "2b14ad035877087157e379d3277dcdcd79e58d6bdb147c47d29e377d75ce53ad42cafbf22f5fb7827c7e946ff4876b9a" }, { "alg" : "SHA3-384", "content" : "3bc3110dafb8d5be16a39f3b2671a466463cd99eb39610c0e4719a7bf2d928f2ea213c734887c6926a07c4cca7769e4b" }, { "alg" : "SHA3-256", "content" : "ba2608179fcf46e2291a90b9cbb4aa30d718e481f59c350cc21c73b88d826881" }, { "alg" : "SHA3-512", "content" : "14c4edcd19702ef607d78826839d8a6d3a39157df54b89a801d3d3cbbe1307131a77671b041c761122730fb1387888c5ec2e46bdd80e1cb07f8f144676441824" } ], "licenses" : [ { "license" : { "id" : "MIT", "url" : "https://opensource.org/licenses/MIT" } } ], "purl" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar", "externalReferences" : [ { "type" : "website", "url" : "http://www.slf4j.org" }, { "type" : "distribution", "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type" : "vcs", "url" : "https://github.com/qos-ch/slf4j/slf4j-api" } ], "type" : "library", "bom-ref" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar" }, { "publisher" : "The Apache Software Foundation", "group" : "commons-codec", "name" : "commons-codec", "version" : "1.15", "description" : "The Apache Commons Codec package contains simple encoder and decoders for various formats such as Base64 and Hexadecimal. In addition to these widely used encoders and decoders, the codec package also maintains a collection of phonetic encoding utilities.", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "303baf002ce6d382198090aedd9d79a2" }, { "alg" : "SHA-1", "content" : "49d94806b6e3dc933dacbd8acb0fdbab8ebd1e5d" }, { "alg" : "SHA-256", "content" : "b3e9f6d63a790109bf0d056611fbed1cf69055826defeb9894a71369d246ed63" }, { "alg" : "SHA-512", "content" : "da30a716770795fce390e4dd340a8b728f220c6572383ffef55bd5839655d5611fcc06128b2144f6cdcb36f53072a12ec80b04afee787665e7ad0b6e888a6787" }, { "alg" : "SHA-384", "content" : "05d0506283716472175d44c2a4766523397bf8a007c18848f9c9a61718cc8aa437f9cb4b91771037ab29a960860b62a0" }, { "alg" : "SHA3-384", "content" : "12fad4ef78274b06f97b1243cea6f970088abde082d2de9377d915a34b44f7d7d67807c03e59c849b69f1544e2a9a1be" }, { "alg" : "SHA3-256", "content" : "87be248f33f241121f54aad61a9a460a79eabefbf1b5b0dd22aeb95b581f727e" }, { "alg" : "SHA3-512", "content" : "8c992c9c569ebaa0bf956a4c5b34fbf5e1ed1c212c2dd896fa216183ee0bcd341e96698af4b9cec7e8880762faa081a3d3a27f51349aa457cb8e373e4f57c788" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/commons-codec/commons-codec@1.15?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://commons.apache.org/proper/commons-codec/" }, { "type" : "build-system", "url" : "https://builds.apache.org/" }, { "type" : "distribution", "url" : "https://repository.apache.org/service/local/staging/deploy/maven2" }, { "type" : "issue-tracker", "url" : "https://issues.apache.org/jira/browse/CODEC" }, { "type" : "mailing-list", "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/" }, { "type" : "vcs", "url" : "https://github.com/apache/commons-codec" } ], "type" : "library", "bom-ref" : "pkg:maven/commons-codec/commons-codec@1.15?type=jar" }, { "publisher" : "FasterXML", "group" : "com.fasterxml.woodstox", "name" : "woodstox-core", "version" : "6.5.0", "description" : "Woodstox is a high-performance XML processor that implements Stax (JSR-173), SAX2 and Stax2 APIs", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "7faa8bf352ed3d280244cbc43f55c658" }, { "alg" : "SHA-1", "content" : "cafa8aac5ddf104d28f172f19294d88d5e8c24c0" }, { "alg" : "SHA-256", "content" : "21ad5f842f5332e0e2b56631178df45a8d205921d8370e2d5f557dc7f76cf4e2" }, { "alg" : "SHA-512", "content" : "491e0659c8ffe61a8aa8a5e099af6722e6c13313b9607490b28c389b35cc15683df1c360b1e5e161d6067540064188213a481f53f434445979c99925fcd2aaff" }, { "alg" : "SHA-384", "content" : "1f20ddfb41422b3a829d0ee2440c37c597e919a1c336df812bb6946639702895b112b6b13859dce195389e2e140a326b" }, { "alg" : "SHA3-384", "content" : "f595086bcb02ea7f2d403dbf8f640da6ec11eecad366849dded6ee35cc757280084dc1aa98fb4dd07a52bad745ea38d5" }, { "alg" : "SHA3-256", "content" : "19bacb8d935f29a492edde2d2a0c36b74714c37181aa8cfdc5232383ae0015d4" }, { "alg" : "SHA3-512", "content" : "678f14a93c4e60ea806aae894db1e89ed3ff3fdf53e899071ad96d4f9038169f0f50d6ea427436a47337273de3fa2f82ba67849180e9b89ce8ebf9252645fa85" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/com.fasterxml.woodstox/woodstox-core@6.5.0?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://github.com/FasterXML/woodstox" }, { "type" : "distribution", "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type" : "issue-tracker", "url" : "https://github.com/FasterXML/woodstox/issues" }, { "type" : "vcs", "url" : "https://github.com/FasterXML/woodstox" } ], "type" : "library", "bom-ref" : "pkg:maven/com.fasterxml.woodstox/woodstox-core@6.5.0?type=jar" }, { "publisher" : "fasterxml.com", "group" : "org.codehaus.woodstox", "name" : "stax2-api", "version" : "4.2.1", "description" : "tax2 API is an extension to basic Stax 1.0 API that adds significant new functionality, such as full-featured bi-direction validation interface and high-performance Typed Access API.", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "af8377bc7882332e22456616a9f164f6" }, { "alg" : "SHA-1", "content" : "a3f7325c52240418c2ba257b103c3c550e140c83" }, { "alg" : "SHA-256", "content" : "678567e48b51a42c65c699f266539ad3d676d4b1a5b0ad7d89ece8b9d5772579" }, { "alg" : "SHA-512", "content" : "00efc5d4d17540fb180c5b20d456630a8b3262dff46676689ae916ba16f0fbd9b1a71c7badfb254faad6597f94fed1edb96f77c15f40178eaf4d8cd35cea5e8d" }, { "alg" : "SHA-384", "content" : "97a6a9f0cc666776e4a4f08729c303d2a602ce5c25ee633cd6c54c72f12d11e9d43634ca6ca4ef7da5973a52030384da" }, { "alg" : "SHA3-384", "content" : "683a1f110ab84333e7517dabe175b91d7ea2fbead2f9d02acf798c588a7508bc67580642afa8d57441bc56ce610d5b0f" }, { "alg" : "SHA3-256", "content" : "5e8e54209fb6b580e928e703ef11645aff1a21dfd47cca2dc0e53d0befaef09c" }, { "alg" : "SHA3-512", "content" : "d79338a481605c94e144c967cb7adbc6cfd06ee6a1182b5ebc8cd8ad3deedd707931e404aa197bc94d3b5a5d82a2e6dd6a2f6cc9dafc42ce3ad5061076b05199" } ], "licenses" : [ { "license" : { "id" : "BSD-4-Clause" } } ], "purl" : "pkg:maven/org.codehaus.woodstox/stax2-api@4.2.1?type=jar", "externalReferences" : [ { "type" : "website", "url" : "http://github.com/FasterXML/stax2-api" }, { "type" : "distribution", "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type" : "issue-tracker", "url" : "https://github.com/FasterXML/stax2-api/issues" }, { "type" : "vcs", "url" : "http://github.com/FasterXML/stax2-api" } ], "type" : "library", "bom-ref" : "pkg:maven/org.codehaus.woodstox/stax2-api@4.2.1?type=jar" } ], "dependencies" : [ { "ref" : "pkg:maven/org.apache.wss4j/wss4j-bindings@2.4.3?type=jar", "dependsOn" : [ "pkg:maven/org.apache.santuario/xmlsec@2.3.4?type=jar" ] }, { "ref" : "pkg:maven/org.apache.santuario/xmlsec@2.3.4?type=jar", "dependsOn" : [ "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar", "pkg:maven/commons-codec/commons-codec@1.15?type=jar", "pkg:maven/com.fasterxml.woodstox/woodstox-core@6.5.0?type=jar" ] }, { "ref" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/commons-codec/commons-codec@1.15?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/com.fasterxml.woodstox/woodstox-core@6.5.0?type=jar", "dependsOn" : [ "pkg:maven/org.codehaus.woodstox/stax2-api@4.2.1?type=jar" ] }, { "ref" : "pkg:maven/org.codehaus.woodstox/stax2-api@4.2.1?type=jar", "dependsOn" : [ ] } ] }