{ "bomFormat" : "CycloneDX", "specVersion" : "1.4", "serialNumber" : "urn:uuid:6778b9a4-b2d5-3f95-9c2f-19725d0531ce", "version" : 1, "metadata" : { "tools" : [ { "vendor" : "OWASP Foundation", "name" : "CycloneDX Maven plugin", "version" : "2.7.11", "hashes" : [ { "alg" : "MD5", "content" : "a70e8b649ab4a2bb7922d360173c8237" }, { "alg" : "SHA-1", "content" : "4c3c0878c15561639076e5be7a48ffcd6111c5ee" }, { "alg" : "SHA-256", "content" : "70997d52dbffd4e797c467b2062c6ba9b8b5a7380ff2884779f2743b6172ebb5" }, { "alg" : "SHA-512", "content" : "bc1ce91190c642f68fd3571939d7668def3b879ec8e5a87a213a9710a106e0290f60f9e0414593d19cca958c4fcb5d4450bd2793bcd609948419c8a2a6a7f5c8" }, { "alg" : "SHA-384", "content" : "3c8421bdafd1754fb424f16dccc83bfe0827648c1cadfffc98bdf1c7da65475dfe48d2f4b16d233bb8819e155ba6a4f3" }, { "alg" : "SHA3-384", "content" : "ad88cf6a0e0a5d51df49a4dab5530a28de9df7eec8460c045dff3e1f9316b82a244a125d52b937fe9d4ee72e44f5d01a" }, { "alg" : "SHA3-256", "content" : "b4d9c3ef07c34517fd9f33178ba95ffc9618eb84a3671e71b0c82991ec3717e5" }, { "alg" : "SHA3-512", "content" : "935b43aba8999dc7d95d93288a251c97b6b32852841b7bef31516c27c8d65c8de7f8411f1829f765ee760f25930c766db6a49df68e5994e18721c0a71f606f1e" } ] } ], "component" : { "group" : "org.jdbi", "name" : "jdbi3-guice", "version" : "3.45.0", "description" : "Google Guice integration.", "licenses" : [ { "license" : { "id" : "Apache-2.0", "url" : "https://www.apache.org/licenses/LICENSE-2.0" } } ], "purl" : "pkg:maven/org.jdbi/jdbi3-guice@3.45.0?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://jdbi.org/jdbi3-parent/jdbi3-guice/" }, { "type" : "distribution", "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type" : "vcs", "url" : "https://github.com/jdbi/jdbi/jdbi3-guice/" } ], "type" : "library", "bom-ref" : "pkg:maven/org.jdbi/jdbi3-guice@3.45.0?type=jar" }, "properties" : [ { "name" : "maven.goal", "value" : "makeBom" }, { "name" : "maven.scopes", "value" : "compile,provided,runtime,system" }, { "name" : "cdx:reproducible", "value" : "enabled" } ] }, "components" : [ { "group" : "org.jdbi", "name" : "jdbi3-core", "version" : "3.45.0", "description" : "The Jdbi core API. Jdbi 3 is designed to provide convenient tabular data access in Java(tm) and other JVM based languages. It uses the Java collections framework for query results, provides a convenient means of externalizing SQL statements, and named parameter support for any database that supports JDBC.", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "76ddcdf1166e86d0c5b3cdb2bfec514b" }, { "alg" : "SHA-1", "content" : "905dd02d73cc0487666c0449ecc5d9c7a7c41442" }, { "alg" : "SHA-256", "content" : "639a5ec5cfde14d6218723b23f8ce79dd81abcd7cacac36fa6fa14f78784218a" }, { "alg" : "SHA-512", "content" : "3f5e7323bc0905659f48d7734e80e3a4ba712bfbb8894748a89651de4c913f863368cdd38d4905e1d845f45b545c1dd6b9300a4110a933f5f37ed9138cad825e" }, { "alg" : "SHA-384", "content" : "c5361db51cfe310ca7691bc089bee1a2d9ab502bdf0918a35d966e9e6c80e1ac582886bdeb9df107c3a1fdeca57ec81c" }, { "alg" : "SHA3-384", "content" : "f304142059007a2c686f573a7e2d0cafaf3783f1402139c497a064237a21cf0fa62c36aca4a3b2e7325e638d9da87933" }, { "alg" : "SHA3-256", "content" : "ec5ebe40c7bd4481b7e59f8ec287b866ce6ba92b5de58fc9545b220e824ab399" }, { "alg" : "SHA3-512", "content" : "f63c90b7e158c6ec4dd8194e7333355fd8bdc65efd4767afc61d9d232a1aa58dc778eef70a7f0798280b92bf30800744e509f27bb02ed071986e22b431a041c5" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0", "url" : "https://www.apache.org/licenses/LICENSE-2.0" } } ], "purl" : "pkg:maven/org.jdbi/jdbi3-core@3.45.0?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://jdbi.org/jdbi3-parent/jdbi3-core/" }, { "type" : "distribution", "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type" : "vcs", "url" : "https://github.com/jdbi/jdbi/jdbi3-core/" } ], "type" : "library", "bom-ref" : "pkg:maven/org.jdbi/jdbi3-core@3.45.0?type=jar" }, { "publisher" : "ANTLR", "group" : "org.antlr", "name" : "antlr4-runtime", "version" : "4.13.1", "description" : "The ANTLR 4 Runtime", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "dd465ddb2a8dbf69eb6c94e69a0d5f0f" }, { "alg" : "SHA-1", "content" : "17125bae1d965624e265ef49552f6465a2bfa307" }, { "alg" : "SHA-256", "content" : "54665d2838cc66458343468efc539e454fc95b46a8a04b13c6ac43fc9be63505" }, { "alg" : "SHA-512", "content" : "63eb51bfcee49c52848d8b7c3c46d8b4d367d85fb3c3db7175eaacba94e4d0c227b78e5955a0e86e575e1c6206fc2a43e5fa96fb04ad7c16e24ec94015cfc18b" }, { "alg" : "SHA-384", "content" : "9e5e022d1eff5870f53e0e17d09d737eebb5b859c3403e78308af4616a86cde0830842b81a389ac4a0df871fb1032124" }, { "alg" : "SHA3-384", "content" : "20f3a927369f6bfd94bd8b244e0e9330d4438736414c403b712098f6aad9a1140bc17333cacf194f1b9e99c0f62ffdfa" }, { "alg" : "SHA3-256", "content" : "5696b3e757e6135c1aa56452b86ff0456425d13b97b33ace3f4d3dc6c752c4b6" }, { "alg" : "SHA3-512", "content" : "33251a06eaeaa56f274548e47b405cce279a9e54e34d65bc382d2482887bd470e5080da4f75c221658c3e70aea79e748bd0a3f47e49e37805174e23f71747b92" } ], "licenses" : [ { "license" : { "id" : "BSD-3-Clause", "url" : "https://opensource.org/licenses/BSD-3-Clause" } } ], "purl" : "pkg:maven/org.antlr/antlr4-runtime@4.13.1?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://www.antlr.org/antlr4-runtime/" }, { "type" : "distribution", "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type" : "issue-tracker", "url" : "https://github.com/antlr/antlr4/issues" }, { "type" : "mailing-list", "url" : "https://groups.google.com/forum/?fromgroups#!forum/antlr-discussion" }, { "type" : "vcs", "url" : "https://github.com/antlr/antlr4/tree/master/antlr4-runtime" } ], "type" : "library", "bom-ref" : "pkg:maven/org.antlr/antlr4-runtime@4.13.1?type=jar" }, { "publisher" : "QOS.ch", "group" : "org.slf4j", "name" : "slf4j-api", "version" : "1.7.36", "description" : "The slf4j API", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "872da51f5de7f3923da4de871d57fd85" }, { "alg" : "SHA-1", "content" : "6c62681a2f655b49963a5983b8b0950a6120ae14" }, { "alg" : "SHA-256", "content" : "d3ef575e3e4979678dc01bf1dcce51021493b4d11fb7f1be8ad982877c16a1c0" }, { "alg" : "SHA-512", "content" : "f9b033fc019a44f98b16048da7e2b59edd4a6a527ba60e358f65ab88e0afae03a9340f1b3e8a543d49fa542290f499c5594259affa1ff3e6e7bf3b428d4c610b" }, { "alg" : "SHA-384", "content" : "2b14ad035877087157e379d3277dcdcd79e58d6bdb147c47d29e377d75ce53ad42cafbf22f5fb7827c7e946ff4876b9a" }, { "alg" : "SHA3-384", "content" : "3bc3110dafb8d5be16a39f3b2671a466463cd99eb39610c0e4719a7bf2d928f2ea213c734887c6926a07c4cca7769e4b" }, { "alg" : "SHA3-256", "content" : "ba2608179fcf46e2291a90b9cbb4aa30d718e481f59c350cc21c73b88d826881" }, { "alg" : "SHA3-512", "content" : "14c4edcd19702ef607d78826839d8a6d3a39157df54b89a801d3d3cbbe1307131a77671b041c761122730fb1387888c5ec2e46bdd80e1cb07f8f144676441824" } ], "licenses" : [ { "license" : { "id" : "MIT", "url" : "https://opensource.org/licenses/MIT" } } ], "purl" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar", "externalReferences" : [ { "type" : "website", "url" : "http://www.slf4j.org" }, { "type" : "distribution", "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type" : "vcs", "url" : "https://github.com/qos-ch/slf4j/slf4j-api" } ], "type" : "library", "bom-ref" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar" }, { "group" : "io.leangen.geantyref", "name" : "geantyref", "version" : "1.3.15", "description" : "Generic type reflection library with support for AnnotatedType", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "724a6925325ec8a0ff4f7510b6f41652" }, { "alg" : "SHA-1", "content" : "1c9a807a35a02c57dae5e6fa13197e6c735bd721" }, { "alg" : "SHA-256", "content" : "6907affedb63ab3e77c7cd988141f3293cbd847ff3df58eec1e48c7d2990fb89" }, { "alg" : "SHA-512", "content" : "90bd66cbd8c0b4ef41073abb492bcca7ebedaebfca5dbce4270d30f62e9251ed63a6653f1577552de796364b770d323e0561925e686d5a4a0156b42e1fd8f490" }, { "alg" : "SHA-384", "content" : "b8a17a0410b52534a16bf713723013679e6d53dfa64854f0b4e58f91ac1950146cb1f975c68fb0cf656bcb95cc573150" }, { "alg" : "SHA3-384", "content" : "ca17a6da0f1b9e6a3632942f582ce805467c91f9290ec27402be8b9779de3f58995959398265bcccfb36d649fc8df8b0" }, { "alg" : "SHA3-256", "content" : "3f859c62c37c56067a67c4d8534cfe3a096511d347720f8a9c8453530b82b83e" }, { "alg" : "SHA3-512", "content" : "d8237d3d4c4a294cfe1431ca459c57bf8662a6174e632948ccf607ed54e679bb9a3cc5c3a0933b17f77aae1a9c712515bf7ddcefb82fb2a8ba2c8719ca2f6e28" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/io.leangen.geantyref/geantyref@1.3.15?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://github.com/leangen/geantyref" }, { "type" : "distribution", "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type" : "issue-tracker", "url" : "https://github.com/leangen/geantyref/issues" }, { "type" : "vcs", "url" : "https://github.com/leangen/geantyref" } ], "type" : "library", "bom-ref" : "pkg:maven/io.leangen.geantyref/geantyref@1.3.15?type=jar" }, { "group" : "org.jdbi", "name" : "jdbi3-guava", "version" : "3.45.0", "description" : "Support for Google Guava data types.", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "072faeea78e2bfe63117863eafd2380b" }, { "alg" : "SHA-1", "content" : "ccfdca84bf2dc7a4d9fb3efd32fb77746e1c2295" }, { "alg" : "SHA-256", "content" : "671b1d5660a59cbf59ae485703bfd2a02b8ce7bb1a63be2e16d9efb7fe855c81" }, { "alg" : "SHA-512", "content" : "1152086b5f0b1a3b8ba2992c69c94393a5d742374871b55fa555d1fd21c199bcd66a3d3ccb1bfb6e2ee06f1e59516d642ca032737c8f8bda7f0c5dcc8ca5e87f" }, { "alg" : "SHA-384", "content" : "b6a4b39ca9c16a815eb8bbc59503272a73683edd60a11fd817fafc03417b632ead0105d1b867f01b458c2ca619011a1b" }, { "alg" : "SHA3-384", "content" : "fb381dcd51de65c9706a6f8b20dc33bc320240eb2274a33942210ba659a70fd6b273a5c81367579d2d058f6ce59073e0" }, { "alg" : "SHA3-256", "content" : "9c2e6e6bc7477cd36eaaa3c5871c04e8496f00dba69b3e948bb384eae5f8254f" }, { "alg" : "SHA3-512", "content" : "ff15288dd1f7e78de3213e3eea258ddd0fc7c417a46e02c6ce36975e4114d5a8d318c3dba12441864b7c5c6169140fb778ce6adf24a3cb8ba7a2056de3ca755f" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0", "url" : "https://www.apache.org/licenses/LICENSE-2.0" } } ], "purl" : "pkg:maven/org.jdbi/jdbi3-guava@3.45.0?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://jdbi.org/jdbi3-parent/jdbi3-guava/" }, { "type" : "distribution", "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type" : "vcs", "url" : "https://github.com/jdbi/jdbi/jdbi3-guava/" } ], "type" : "library", "bom-ref" : "pkg:maven/org.jdbi/jdbi3-guava@3.45.0?type=jar" }, { "group" : "com.google.guava", "name" : "guava", "version" : "33.0.0-jre", "description" : "Guava is a suite of core and expanded libraries that include utility classes, Google's collections, I/O classes, and much more.", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "5d8aefac09131c3a74d6dab4b01bcff6" }, { "alg" : "SHA-1", "content" : "161ba27964a62f241533807a46b8711b13c1d94b" }, { "alg" : "SHA-256", "content" : "f4d85c3e4d411694337cb873abea09b242b664bb013320be6105327c45991537" }, { "alg" : "SHA-512", "content" : "bb122b4c6df2ae3282eefdf313f8d4a3d75e363cfb30ae65a5e51f744105e6fb7b5b77c8cc07a1d37fea0947aa22ac3070063174826408b57a44b2f26856ff3b" }, { "alg" : "SHA-384", "content" : "dd0d01893159e2d734b885386635024c94606d5fe6259951e1f2ce37f026f60a419fefa536aaaa6274fdd2d5505e640a" }, { "alg" : "SHA3-384", "content" : "a1b5933d73ea9881293e19fab4bbef2b301a88e480f4fcb2d1187e383dba0d5c02c8884997fd3f0d20456ab8c27e3898" }, { "alg" : "SHA3-256", "content" : "ed01cc65afe540179c8e54dbc09331b679521cc5a6617389814fe2038603c7ba" }, { "alg" : "SHA3-512", "content" : "6a422f8b319cbc21a87c7e03ff94ac4da0eedd8b9960212fb14446bd21da281afd8140ec7f3d3043e80e8c5b16ce50b5c27a235908f23ae4127e8d925a16886a" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/com.google.guava/guava@33.0.0-jre?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://github.com/google/guava" }, { "type" : "build-system", "url" : "https://github.com/google/guava/actions" }, { "type" : "distribution", "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type" : "issue-tracker", "url" : "https://github.com/google/guava/issues" }, { "type" : "vcs", "url" : "https://github.com/google/guava/guava" } ], "type" : "library", "bom-ref" : "pkg:maven/com.google.guava/guava@33.0.0-jre?type=jar" }, { "group" : "com.google.guava", "name" : "failureaccess", "version" : "1.0.2", "description" : "Contains com.google.common.util.concurrent.internal.InternalFutureFailureAccess and InternalFutures. Most users will never need to use this artifact. Its classes are conceptually a part of Guava, but they're in this separate artifact so that Android libraries can use them without pulling in all of Guava (just as they can use ListenableFuture by depending on the listenablefuture artifact).", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "3f75955b49b6758fd6d1e1bd9bf777b3" }, { "alg" : "SHA-1", "content" : "c4a06a64e650562f30b7bf9aaec1bfed43aca12b" }, { "alg" : "SHA-256", "content" : "8a8f81cf9b359e3f6dfa691a1e776985c061ef2f223c9b2c80753e1b458e8064" }, { "alg" : "SHA-512", "content" : "ff4ee76aa661708989d53d45576cff3beea9ebbd86481dbbf2ee8c81bb22f882097b430588312b711025f0e890f22c6799d722ccd422a6a7278de08660fe2f51" }, { "alg" : "SHA-384", "content" : "85a7bd379da27ad57a4e5c02099fef206083caa52244597ac858a921b48e2912cfa7ef0e7d0c7a10ab2dd8d0f7d6ada0" }, { "alg" : "SHA3-384", "content" : "652b22d09b297320e62ac254801e7d3a0fd2a8038461c5cbf7a53a27d681f62b768b964aa62c864453c4e7af217c8c4a" }, { "alg" : "SHA3-256", "content" : "a650b2f7982affc2dbb7e2807fbb0fbf58b74fd8dc111cc6dc5e95a00179b7e3" }, { "alg" : "SHA3-512", "content" : "2c5ee7629a8fb1c952f437b80fcd1cff86c54ff81de02eda1eb73c0bbfe38d3f072946f8c6396c7f1e46e16a6d44ad393dfe6fd2dd96f75ebb854263d36bb193" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/com.google.guava/failureaccess@1.0.2?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://github.com/google/guava/failureaccess" }, { "type" : "build-system", "url" : "https://travis-ci.org/google/guava" }, { "type" : "distribution", "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type" : "issue-tracker", "url" : "https://github.com/google/guava/issues" }, { "type" : "vcs", "url" : "https://github.com/google/guava/failureaccess" } ], "type" : "library", "bom-ref" : "pkg:maven/com.google.guava/failureaccess@1.0.2?type=jar" }, { "group" : "com.google.guava", "name" : "listenablefuture", "version" : "9999.0-empty-to-avoid-conflict-with-guava", "description" : "An empty artifact that Guava depends on to signal that it is providing ListenableFuture -- but is also available in a second \"version\" that contains com.google.common.util.concurrent.ListenableFuture class, without any other Guava classes. The idea is: - If users want only ListenableFuture, they depend on listenablefuture-1.0. - If users want all of Guava, they depend on guava, which, as of Guava 27.0, depends on listenablefuture-9999.0-empty-to-avoid-conflict-with-guava. The 9999.0-... version number is enough for some build systems (notably, Gradle) to select that empty artifact over the \"real\" listenablefuture-1.0 -- avoiding a conflict with the copy of ListenableFuture in guava itself. If users are using an older version of Guava or a build system other than Gradle, they may see class conflicts. If so, they can solve them by manually excluding the listenablefuture artifact or manually forcing their build systems to use 9999.0-....", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "d094c22570d65e132c19cea5d352e381" }, { "alg" : "SHA-1", "content" : "b421526c5f297295adef1c886e5246c39d4ac629" }, { "alg" : "SHA-256", "content" : "b372a037d4230aa57fbeffdef30fd6123f9c0c2db85d0aced00c91b974f33f99" }, { "alg" : "SHA-512", "content" : "c5987a979174cbacae2e78b319f080420cc71bcdbcf7893745731eeb93c23ed13bff8d4599441f373f3a246023d33df03e882de3015ee932a74a774afdd0782f" }, { "alg" : "SHA-384", "content" : "caff9b74079f95832ca7f6029346b34b606051cc8c5a4389fac263511d277ada0c55f28b0d43011055b268c6eb7184d5" }, { "alg" : "SHA3-384", "content" : "e939f08df0545847ea0d3e4b04a114b08499ad069ba8ec9461d1779f87a56e0c37273630a0f4c14e78c348d3ac7eb97f" }, { "alg" : "SHA3-256", "content" : "1f0a8b1177773b3a8ace839df5eed63cbf56b24a38714898a6e4ed065c42559f" }, { "alg" : "SHA3-512", "content" : "6b495ecc2a18b17365cb08d124a0da47f04bcdde81927b5245edf3edd8e498c3c3fb92ce6a4127f660bac851bb1d3e4510e5c20d03be47ce99dc296d360db285" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://github.com/google/guava/listenablefuture" }, { "type" : "build-system", "url" : "https://travis-ci.org/google/guava" }, { "type" : "distribution", "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type" : "issue-tracker", "url" : "https://github.com/google/guava/issues" }, { "type" : "vcs", "url" : "https://github.com/google/guava/listenablefuture" } ], "type" : "library", "bom-ref" : "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar" }, { "group" : "com.google.code.findbugs", "name" : "jsr305", "version" : "3.0.2", "description" : "JSR305 Annotations for Findbugs", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "dd83accb899363c32b07d7a1b2e4ce40" }, { "alg" : "SHA-1", "content" : "25ea2e8b0c338a877313bd4672d3fe056ea78f0d" }, { "alg" : "SHA-256", "content" : "766ad2a0783f2687962c8ad74ceecc38a28b9f72a2d085ee438b7813e928d0c7" }, { "alg" : "SHA-512", "content" : "bb09db62919a50fa5b55906013be6ca4fc7acb2e87455fac5eaf9ede2e41ce8bbafc0e5a385a561264ea4cd71bbbd3ef5a45e02d63277a201d06a0ae1636f804" }, { "alg" : "SHA-384", "content" : "ca0b169d3eb2d0922dc031133a021f861a043bb3e405a88728215fd6ff00fa52fdc7347842dcc2031472e3726164bdc4" }, { "alg" : "SHA3-384", "content" : "9903fd7505218999f8262efedb3d935d64bcef84aae781064ab5e1b24755466b269517cada562fa140cd1d417ede57a1" }, { "alg" : "SHA3-256", "content" : "223fda9a89a461afaae73b177a2dc20ed4a90f2f8757f5c65f3241b0510f00ff" }, { "alg" : "SHA3-512", "content" : "3996b5af57a5d5c6a0cd62b11773360fb051dd86a2ba968476806a2a5d32049b82d69a24a3c694e8fe4d735be6a28e41000cc500cc2a9fb577e058045855d2d6" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar", "externalReferences" : [ { "type" : "website", "url" : "http://findbugs.sourceforge.net/" }, { "type" : "distribution", "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type" : "vcs", "url" : "https://code.google.com/p/jsr-305/" } ], "type" : "library", "bom-ref" : "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar" }, { "group" : "org.checkerframework", "name" : "checker-qual", "version" : "3.42.0", "description" : "checker-qual contains annotations (type qualifiers) that a programmer writes to specify Java code for type-checking by the Checker Framework.", "scope" : "optional", "hashes" : [ { "alg" : "MD5", "content" : "4c55448dcbfe9c3702f7758fc8fe0086" }, { "alg" : "SHA-1", "content" : "638ec33f363a94d41a4f03c3e7d3dcfba64e402d" }, { "alg" : "SHA-256", "content" : "ccaedd33af0b7894d9f2f3b644f4d19e43928e32902e61ac4d10777830f5aac7" }, { "alg" : "SHA-512", "content" : "85f66a42a079b4578256b5b6daa4b1ba5aa684614982cab2c9cd83324f2c3fcdde420de6ad51b2f439c4c809be10b376f80f5a45110a1ee6caa59e6298c0ec95" }, { "alg" : "SHA-384", "content" : "1ee2061f8da04e77b577030edc21904b0700aceb241fcb5a549767d44c9b71267217850dc89aca41e65d188e148f8d58" }, { "alg" : "SHA3-384", "content" : "5d89ffdcafb432d84503340827bc6fae5f6fc290fde59c1eb491996c15fd92ad00dfd1e781d8c9d6ef4ca9c4f3e5b264" }, { "alg" : "SHA3-256", "content" : "25c061a632fc0263f974761afad7f4209dd6582a461f3049e39d260640308393" }, { "alg" : "SHA3-512", "content" : "75a743fb2577bb3252de16a86cf10922626689e75918136c83caa3a26db669f7c770779cfb9b9003ba5b181ffc9f7d871ab250cccfc4ff19e587a0384b448929" } ], "licenses" : [ { "license" : { "id" : "MIT" } } ], "purl" : "pkg:maven/org.checkerframework/checker-qual@3.42.0?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://checkerframework.org/" }, { "type" : "vcs", "url" : "https://github.com/typetools/checker-framework.git" } ], "type" : "library", "bom-ref" : "pkg:maven/org.checkerframework/checker-qual@3.42.0?type=jar" }, { "publisher" : "Google LLC", "group" : "com.google.errorprone", "name" : "error_prone_annotations", "version" : "2.24.0", "description" : "Error Prone is a static analysis tool for Java that catches common programming mistakes at compile-time.", "scope" : "optional", "hashes" : [ { "alg" : "MD5", "content" : "f816bc67aa465617b44aa5cf3fbc0820" }, { "alg" : "SHA-1", "content" : "29dca9118b577ad24533e563438feb8fad51427e" }, { "alg" : "SHA-256", "content" : "a88bd88124c8d4c9851ab823adc3a8f04b0a13af15c9d80b5ecf49f5a7a321d2" }, { "alg" : "SHA-512", "content" : "f0d9aa14e63be4fb5c0fb84c750bfa4a306d0ac26fd06f6bd0f67a544a63a342061e859539ad9642677cea53f327ad68bda98130f3e188011c94b7e0d27cad09" }, { "alg" : "SHA-384", "content" : "e7ba0d77df96d31c79c1c2d4f546aa51530952838b64def079505ca3c73f7850f280b7623b88c7265203aa3c09e390c6" }, { "alg" : "SHA3-384", "content" : "fbea7ff80697029fedf73344fe95af6208f9ecc1e1f49502aa1547b2a483d400decf56cbc8e983b82dd31902de21e77f" }, { "alg" : "SHA3-256", "content" : "a4f2c024424ec4ee39927b3f6da5f615400c9b05169628a9ad040670bdcfbb41" }, { "alg" : "SHA3-512", "content" : "2f8f471e3746f9651c496f4f64151caaccb649a7e051aa964467c75f5504804d783e0b0bbae30975d14a35755d5125d6f2e5cc05ed795f3f52ff1f725eb1bcd5" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.24.0?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://errorprone.info/error_prone_annotations" }, { "type" : "vcs", "url" : "https://github.com/google/error-prone/error_prone_annotations" } ], "type" : "library", "bom-ref" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.24.0?type=jar" }, { "group" : "com.google.j2objc", "name" : "j2objc-annotations", "version" : "2.8", "description" : "A set of annotations that provide additional information to the J2ObjC translator to modify the result of translation.", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "c50af69b704dc91050efb98e0dff66d1" }, { "alg" : "SHA-1", "content" : "c85270e307e7b822f1086b93689124b89768e273" }, { "alg" : "SHA-256", "content" : "f02a95fa1a5e95edb3ed859fd0fb7df709d121a35290eff8b74dce2ab7f4d6ed" }, { "alg" : "SHA-512", "content" : "f8263868a792b41707c9e7fe6fa5650a14cd93fbeafad20efe3772a3058fc933eb59782ec59e6eb9b9c569aa96da80134ae9fdf7547b69c44a97087efddceeff" }, { "alg" : "SHA-384", "content" : "e6087ec31fec8289158496ad2ed6ce8472d5d513808a312e0782cedac3b86c37a62a63c0b5ea3839491d109fe9e148a1" }, { "alg" : "SHA3-384", "content" : "10add34bfeb8612283eef89ac96747a3c9b755acd80ad526e1addaeb7efd6323c52b9bfa1a3d34adb40e1ccb963ee65d" }, { "alg" : "SHA3-256", "content" : "b3336f8abd6b1f73b9f06d306974557000a000073bfbae6b54fda26d17dbb072" }, { "alg" : "SHA3-512", "content" : "d376c184a6df071c4e93b913d175b5c2e63deac37105dc20342c19bdda62e4e9598ca1e8bfb4f4fd5cdee6dd5ac3b8af49e2c5193e324d59a59ce1f7adeab627" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/com.google.j2objc/j2objc-annotations@2.8?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://github.com/google/j2objc/" }, { "type" : "distribution", "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type" : "vcs", "url" : "http://svn.sonatype.org/spice/trunk/oss/oss-parent-9/j2objc-annotations" } ], "type" : "library", "bom-ref" : "pkg:maven/com.google.j2objc/j2objc-annotations@2.8?type=jar" }, { "publisher" : "Google, Inc.", "group" : "com.google.inject", "name" : "guice", "version" : "5.1.0", "description" : "Guice is a lightweight dependency injection framework for Java 6 and above", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "2560169296aa94492af34af2115e9511" }, { "alg" : "SHA-1", "content" : "da25056c694c54ba16e78e4fc35f17fc60f0d1b4" }, { "alg" : "SHA-256", "content" : "4130e50bfac48099c860f0d903b91860c81a249c90f38245f8fed58fc817bc26" }, { "alg" : "SHA-512", "content" : "b9c7a9b815d9ce387ebf6d58a71541da1be3cb8d847358133dc1f35ca45315bb9db11c13f3238adb643670759a58fd106247039f42c10759374a9b361c62e99e" }, { "alg" : "SHA-384", "content" : "1f7e6e7555c97752e2a3a7dc07473384762467c24a0fc8f4c93c0f209ef361ecd4bf2be847281798dd84f68fc8c54b2f" }, { "alg" : "SHA3-384", "content" : "59b895108174073d9889ba3e18566eb5e0785310e90dbd918dfb06af5bdf0d72e8a54094c6109090f43e242daa4d6ebf" }, { "alg" : "SHA3-256", "content" : "5a9518cdc72dd7fb8d7848500cb8c97c7689e64a52028dabf44e61a933ffd853" }, { "alg" : "SHA3-512", "content" : "5b53b7ee09cf057f83acf86de3f35fc45c04cd95c01e78b59fc1b4d9322e17ecaec1d6c5d37cd37084b602c1a74f6457342e27c6271fd140ade3190448c9fb27" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/com.google.inject/guice@5.1.0?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://github.com/google/guice/guice" }, { "type" : "build-system", "url" : "https://travis-ci.org/google/guice" }, { "type" : "distribution", "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type" : "issue-tracker", "url" : "https://github.com/google/guice/issues/" }, { "type" : "mailing-list", "url" : "http://groups.google.com/group/google-guice/topics" }, { "type" : "vcs", "url" : "https://github.com/google/guice/guice" } ], "type" : "library", "bom-ref" : "pkg:maven/com.google.inject/guice@5.1.0?type=jar" }, { "group" : "aopalliance", "name" : "aopalliance", "version" : "1.0", "description" : "AOP Alliance", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "04177054e180d09e3998808efa0401c7" }, { "alg" : "SHA-1", "content" : "0235ba8b489512805ac13a8f9ea77a1ca5ebe3e8" }, { "alg" : "SHA-256", "content" : "0addec670fedcd3f113c5c8091d783280d23f75e3acb841b61a9cdb079376a08" }, { "alg" : "SHA-512", "content" : "3f44a932d8c00cfeee2eb057bcd7c301a2d029063e0a916e1e20b3aec4877d19d67a2fd8aaf58fa2d5a00133d1602128a7f50912ffb6cabc7b0fdc7fbda3f8a1" }, { "alg" : "SHA-384", "content" : "4dddf44338b5aff9580da2532b81c0ac3e1d09e1f28c6db871a55cad442b705dd7791eb07f9d4577d49d0be3673ba783" }, { "alg" : "SHA3-384", "content" : "2bd64cbaf769c6e4e85e34f7a6119d89e16fbf55af3fc5d6cbd52eb214c367dec1ac7b9062ee0fb35a2e0acfc7c477e1" }, { "alg" : "SHA3-256", "content" : "d4a726b2bf8aa58197021a7d8fca674b4b2790d4c48de43a92f728866a91c2f0" }, { "alg" : "SHA3-512", "content" : "830bc3f8328be76897990e9b9fc42eef02623115e456af96ad09b20900ad615519c8c8de60155ac04fb332eaa9510110d52edd13911af76271c71d91cbd789cc" } ], "licenses" : [ { "license" : { "name" : "Public Domain" } } ], "purl" : "pkg:maven/aopalliance/aopalliance@1.0?type=jar", "externalReferences" : [ { "type" : "website", "url" : "http://aopalliance.sourceforge.net" } ], "type" : "library", "bom-ref" : "pkg:maven/aopalliance/aopalliance@1.0?type=jar" }, { "publisher" : "Eclipse Foundation", "group" : "jakarta.annotation", "name" : "jakarta.annotation-api", "version" : "2.1.1", "description" : "Jakarta Annotations API", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "5dac2f68e8288d0add4dc92cb161711d" }, { "alg" : "SHA-1", "content" : "48b9bda22b091b1f48b13af03fe36db3be6e1ae3" }, { "alg" : "SHA-256", "content" : "5f65fdaf424eee2b55e1d882ba9bb376be93fb09b37b808be6e22e8851c909fe" }, { "alg" : "SHA-512", "content" : "eabe8b855b735663684052ec4cc357cc737936fa57cebf144eb09f70b3b6c600db7fa6f1c93a4f36c5994b1b37dad2dfcec87a41448872e69552accfd7f52af6" }, { "alg" : "SHA-384", "content" : "798597a6b80b423844d70609c54b00d725a357031888da7e5c3efd3914d1770be69aa7135de13ddb89a4420a5550e35b" }, { "alg" : "SHA3-384", "content" : "9629b8ca82f61674f5573723bbb3c137060e1442062eb52fa9c90fc8f57ea7d836eb2fb765d160ec8bf300bcb6b820be" }, { "alg" : "SHA3-256", "content" : "f71ffc2a2c2bd1a00dfc00c4be67dbe5f374078bd50d5b24c0b29fbcc6634ecb" }, { "alg" : "SHA3-512", "content" : "aa4e29025a55878db6edb0d984bd3a0633f3af03fa69e1d26c97c87c6d29339714003c96e29ff0a977132ce9c2729d0e27e36e9e245a7488266138239bdba15e" } ], "licenses" : [ { "license" : { "id" : "EPL-2.0" } }, { "license" : { "id" : "GPL-2.0-with-classpath-exception" } } ], "purl" : "pkg:maven/jakarta.annotation/jakarta.annotation-api@2.1.1?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://projects.eclipse.org/projects/ee4j.ca" }, { "type" : "distribution", "url" : "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type" : "issue-tracker", "url" : "https://github.com/eclipse-ee4j/common-annotations-api/issues" }, { "type" : "mailing-list", "url" : "https://dev.eclipse.org/mhonarc/lists/ca-dev" }, { "type" : "vcs", "url" : "https://github.com/eclipse-ee4j/common-annotations-api" } ], "type" : "library", "bom-ref" : "pkg:maven/jakarta.annotation/jakarta.annotation-api@2.1.1?type=jar" }, { "publisher" : "Eclipse Foundation", "group" : "jakarta.inject", "name" : "jakarta.inject-api", "version" : "2.0.1.MR", "description" : "Jakarta Dependency Injection", "scope" : "optional", "hashes" : [ { "alg" : "MD5", "content" : "438122a42dc62a4b791925ca56bacf11" }, { "alg" : "SHA-1", "content" : "552baa98c0b55365301167c093901ca5754c733a" }, { "alg" : "SHA-256", "content" : "c6020d26574f3c5eca0a4f28861408d947b663b977450987ec4e265dfaf168a2" }, { "alg" : "SHA-512", "content" : "253f277d9721596447ec65ba5142db04fd7c7e1d0a8366f251df55f0357244c30cd1b7c952e0fe4f2cde75aec3ec3de3aa3aac61fcbc7447d79a793ed5ce5eac" }, { "alg" : "SHA-384", "content" : "0f3cec3ccb81749dcce98353fe646ca6d3930ff6b2d6f43f8d89633a9a6bc57d2a056ffcc6378ca4f03f17764f58ab25" }, { "alg" : "SHA3-384", "content" : "62296fde24d84c3def3b8b5a6bd1745742c078b539eb0c46129d9512db230374d08430c0a73ea722ab93cf6c37f2c72b" }, { "alg" : "SHA3-256", "content" : "fe97e6d58b812590186724d1262b823efededca36d20b3a50811d8e77ce444ba" }, { "alg" : "SHA3-512", "content" : "d4cb62393b2b6169adddb3c85797b0735a440d8d06de7df7ea1521b437ef823da91409fe333bc96005d055cd562d4dbddc077993bb749f606a7a99804a055bbe" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/jakarta.inject/jakarta.inject-api@2.0.1.MR?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://github.com/eclipse-ee4j/injection-api" }, { "type" : "distribution", "url" : "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type" : "issue-tracker", "url" : "https://github.com/eclipse-ee4j/ee4j/issues" }, { "type" : "mailing-list", "url" : "https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/" }, { "type" : "vcs", "url" : "https://github.com/eclipse-ee4j/injection-api" } ], "type" : "library", "bom-ref" : "pkg:maven/jakarta.inject/jakarta.inject-api@2.0.1.MR?type=jar" }, { "group" : "javax.inject", "name" : "javax.inject", "version" : "1", "description" : "The javax.inject API", "scope" : "optional", "hashes" : [ { "alg" : "MD5", "content" : "289075e48b909e9e74e6c915b3631d2e" }, { "alg" : "SHA-1", "content" : "6975da39a7040257bd51d21a231b76c915872d38" }, { "alg" : "SHA-256", "content" : "91c77044a50c481636c32d916fd89c9118a72195390452c81065080f957de7ff" }, { "alg" : "SHA-512", "content" : "e126b7ccf3e42fd1984a0beef1004a7269a337c202e59e04e8e2af714280d2f2d8d2ba5e6f59481b8dcd34aaf35c966a688d0b48ec7e96f102c274dc0d3b381e" }, { "alg" : "SHA-384", "content" : "ac04c9f03ccbe35a25deb8b50280a0ca01dbe6aff0dd795d55af6112bfe3cd5817eb82f32fb18378d86cd64b07597190" }, { "alg" : "SHA3-384", "content" : "fca090ecb1edeacb9fe865dc515cd1d109b323cd742d4a9733ff199a96ee96e0db4f924079520b9c189ef750f255475d" }, { "alg" : "SHA3-256", "content" : "5b0054e39e522de0e0ffc4034d12f72270291fb24d94d5ffc9c4d69c25035fc6" }, { "alg" : "SHA3-512", "content" : "fb290f5a70b1efc1dff12f40a0b2d7b94019f66da42e78010c0b8e61f222c4f267b67e356a9e9c346eb801e5515e36243888f280c5cb95c2dd69016a30cadeb9" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/javax.inject/javax.inject@1?type=jar", "externalReferences" : [ { "type" : "website", "url" : "http://code.google.com/p/atinject/" }, { "type" : "vcs", "url" : "http://code.google.com/p/atinject/source/checkout" } ], "type" : "library", "bom-ref" : "pkg:maven/javax.inject/javax.inject@1?type=jar" } ], "dependencies" : [ { "ref" : "pkg:maven/org.jdbi/jdbi3-guice@3.45.0?type=jar", "dependsOn" : [ "pkg:maven/org.jdbi/jdbi3-core@3.45.0?type=jar", "pkg:maven/org.jdbi/jdbi3-guava@3.45.0?type=jar", "pkg:maven/com.google.guava/guava@33.0.0-jre?type=jar", "pkg:maven/com.google.inject/guice@5.1.0?type=jar", "pkg:maven/jakarta.annotation/jakarta.annotation-api@2.1.1?type=jar", "pkg:maven/jakarta.inject/jakarta.inject-api@2.0.1.MR?type=jar", "pkg:maven/javax.inject/javax.inject@1?type=jar" ] }, { "ref" : "pkg:maven/org.jdbi/jdbi3-core@3.45.0?type=jar", "dependsOn" : [ "pkg:maven/org.antlr/antlr4-runtime@4.13.1?type=jar", "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar", "pkg:maven/io.leangen.geantyref/geantyref@1.3.15?type=jar" ] }, { "ref" : "pkg:maven/org.antlr/antlr4-runtime@4.13.1?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/io.leangen.geantyref/geantyref@1.3.15?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/org.jdbi/jdbi3-guava@3.45.0?type=jar", "dependsOn" : [ "pkg:maven/org.jdbi/jdbi3-core@3.45.0?type=jar", "pkg:maven/com.google.guava/guava@33.0.0-jre?type=jar" ] }, { "ref" : "pkg:maven/com.google.guava/guava@33.0.0-jre?type=jar", "dependsOn" : [ "pkg:maven/com.google.guava/failureaccess@1.0.2?type=jar", "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar", "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar", "pkg:maven/org.checkerframework/checker-qual@3.42.0?type=jar", "pkg:maven/com.google.errorprone/error_prone_annotations@2.24.0?type=jar", "pkg:maven/com.google.j2objc/j2objc-annotations@2.8?type=jar" ] }, { "ref" : "pkg:maven/com.google.guava/failureaccess@1.0.2?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/org.checkerframework/checker-qual@3.42.0?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.24.0?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/com.google.j2objc/j2objc-annotations@2.8?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/com.google.inject/guice@5.1.0?type=jar", "dependsOn" : [ "pkg:maven/javax.inject/javax.inject@1?type=jar", "pkg:maven/aopalliance/aopalliance@1.0?type=jar", "pkg:maven/com.google.guava/guava@33.0.0-jre?type=jar" ] }, { "ref" : "pkg:maven/javax.inject/javax.inject@1?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/aopalliance/aopalliance@1.0?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/jakarta.annotation/jakarta.annotation-api@2.1.1?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/jakarta.inject/jakarta.inject-api@2.0.1.MR?type=jar", "dependsOn" : [ ] } ] }