{ "bomFormat" : "CycloneDX", "specVersion" : "1.4", "serialNumber" : "urn:uuid:3e4ad7e4-adbe-3a11-93e7-9ec1ed7b6e41", "version" : 1, "metadata" : { "tools" : [ { "vendor" : "OWASP Foundation", "name" : "CycloneDX Maven plugin", "version" : "2.7.11", "hashes" : [ { "alg" : "MD5", "content" : "a70e8b649ab4a2bb7922d360173c8237" }, { "alg" : "SHA-1", "content" : "4c3c0878c15561639076e5be7a48ffcd6111c5ee" }, { "alg" : "SHA-256", "content" : "70997d52dbffd4e797c467b2062c6ba9b8b5a7380ff2884779f2743b6172ebb5" }, { "alg" : "SHA-512", "content" : "bc1ce91190c642f68fd3571939d7668def3b879ec8e5a87a213a9710a106e0290f60f9e0414593d19cca958c4fcb5d4450bd2793bcd609948419c8a2a6a7f5c8" }, { "alg" : "SHA-384", "content" : "3c8421bdafd1754fb424f16dccc83bfe0827648c1cadfffc98bdf1c7da65475dfe48d2f4b16d233bb8819e155ba6a4f3" }, { "alg" : "SHA3-384", "content" : "ad88cf6a0e0a5d51df49a4dab5530a28de9df7eec8460c045dff3e1f9316b82a244a125d52b937fe9d4ee72e44f5d01a" }, { "alg" : "SHA3-256", "content" : "b4d9c3ef07c34517fd9f33178ba95ffc9618eb84a3671e71b0c82991ec3717e5" }, { "alg" : "SHA3-512", "content" : "935b43aba8999dc7d95d93288a251c97b6b32852841b7bef31516c27c8d65c8de7f8411f1829f765ee760f25930c766db6a49df68e5994e18721c0a71f606f1e" } ] } ], "component" : { "group" : "org.jdbi", "name" : "jdbi3-stringtemplate4", "version" : "3.45.3", "description" : "Use Stringtemplate 4 for query templating.", "licenses" : [ { "license" : { "id" : "Apache-2.0", "url" : "https://www.apache.org/licenses/LICENSE-2.0" } } ], "purl" : "pkg:maven/org.jdbi/jdbi3-stringtemplate4@3.45.3?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://jdbi.org/jdbi3-parent/jdbi3-stringtemplate4/" }, { "type" : "distribution", "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type" : "vcs", "url" : "https://github.com/jdbi/jdbi/jdbi3-stringtemplate4/" } ], "type" : "library", "bom-ref" : "pkg:maven/org.jdbi/jdbi3-stringtemplate4@3.45.3?type=jar" }, "properties" : [ { "name" : "maven.goal", "value" : "makeBom" }, { "name" : "maven.scopes", "value" : "compile,provided,runtime,system" }, { "name" : "cdx:reproducible", "value" : "enabled" } ] }, "components" : [ { "group" : "org.jdbi", "name" : "jdbi3-core", "version" : "3.45.3", "description" : "The Jdbi core API. Jdbi 3 is designed to provide convenient tabular data access in Java(tm) and other JVM based languages. It uses the Java collections framework for query results, provides a convenient means of externalizing SQL statements, and named parameter support for any database that supports JDBC.", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "0f202ba190d807d5dbcf26d8db08834d" }, { "alg" : "SHA-1", "content" : "6dff53282dd5a89471a34a9cca2b1845668dd007" }, { "alg" : "SHA-256", "content" : "bfd3f50341f861bedbca6c6baba7f3d898e3151ccdc4b0710fea224ce9e109d5" }, { "alg" : "SHA-512", "content" : "56fe21c0374a7242eee6fa21717904b66ca7b7db21d402fdd0a306f5b6309fc14ad391a7779696fe34b766dc9898919a213d9ed290dd9e62f8fb22abec6a0c41" }, { "alg" : "SHA-384", "content" : "0d8579e8bf5af844404a27e279c737850c5cfc05463405a39e10fd34d46fd382495bedd0b2e603eca47b99a9014bb4d5" }, { "alg" : "SHA3-384", "content" : "979b600a0a2c24783e94a8759576c5ca2dd8a12fd62d3f37f9fb33bf683aabecbee3dd1bdbc27a58ffcd36505f493c6d" }, { "alg" : "SHA3-256", "content" : "b7120b37fa0826e393e7d2a1d2663c94834c2bb1c1237edc84297a3508ca01f6" }, { "alg" : "SHA3-512", "content" : "2b124c6208647ad8a0ee8feb6f6dc3e66a502b0c95ec21b73c4d3a469c81edadf54d4c961c71d7a06ab95d548488384be8769cb7116671479422f930ebd89d02" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0", "url" : "https://www.apache.org/licenses/LICENSE-2.0" } } ], "purl" : "pkg:maven/org.jdbi/jdbi3-core@3.45.3?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://jdbi.org/jdbi3-parent/jdbi3-core/" }, { "type" : "distribution", "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type" : "vcs", "url" : "https://github.com/jdbi/jdbi/jdbi3-core/" } ], "type" : "library", "bom-ref" : "pkg:maven/org.jdbi/jdbi3-core@3.45.3?type=jar" }, { "publisher" : "ANTLR", "group" : "org.antlr", "name" : "antlr4-runtime", "version" : "4.13.1", "description" : "The ANTLR 4 Runtime", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "dd465ddb2a8dbf69eb6c94e69a0d5f0f" }, { "alg" : "SHA-1", "content" : "17125bae1d965624e265ef49552f6465a2bfa307" }, { "alg" : "SHA-256", "content" : "54665d2838cc66458343468efc539e454fc95b46a8a04b13c6ac43fc9be63505" }, { "alg" : "SHA-512", "content" : "63eb51bfcee49c52848d8b7c3c46d8b4d367d85fb3c3db7175eaacba94e4d0c227b78e5955a0e86e575e1c6206fc2a43e5fa96fb04ad7c16e24ec94015cfc18b" }, { "alg" : "SHA-384", "content" : "9e5e022d1eff5870f53e0e17d09d737eebb5b859c3403e78308af4616a86cde0830842b81a389ac4a0df871fb1032124" }, { "alg" : "SHA3-384", "content" : "20f3a927369f6bfd94bd8b244e0e9330d4438736414c403b712098f6aad9a1140bc17333cacf194f1b9e99c0f62ffdfa" }, { "alg" : "SHA3-256", "content" : "5696b3e757e6135c1aa56452b86ff0456425d13b97b33ace3f4d3dc6c752c4b6" }, { "alg" : "SHA3-512", "content" : "33251a06eaeaa56f274548e47b405cce279a9e54e34d65bc382d2482887bd470e5080da4f75c221658c3e70aea79e748bd0a3f47e49e37805174e23f71747b92" } ], "licenses" : [ { "license" : { "id" : "BSD-3-Clause", "url" : "https://opensource.org/licenses/BSD-3-Clause" } } ], "purl" : "pkg:maven/org.antlr/antlr4-runtime@4.13.1?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://www.antlr.org/antlr4-runtime/" }, { "type" : "distribution", "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type" : "issue-tracker", "url" : "https://github.com/antlr/antlr4/issues" }, { "type" : "mailing-list", "url" : "https://groups.google.com/forum/?fromgroups#!forum/antlr-discussion" }, { "type" : "vcs", "url" : "https://github.com/antlr/antlr4/tree/master/antlr4-runtime" } ], "type" : "library", "bom-ref" : "pkg:maven/org.antlr/antlr4-runtime@4.13.1?type=jar" }, { "publisher" : "QOS.ch", "group" : "org.slf4j", "name" : "slf4j-api", "version" : "1.7.36", "description" : "The slf4j API", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "872da51f5de7f3923da4de871d57fd85" }, { "alg" : "SHA-1", "content" : "6c62681a2f655b49963a5983b8b0950a6120ae14" }, { "alg" : "SHA-256", "content" : "d3ef575e3e4979678dc01bf1dcce51021493b4d11fb7f1be8ad982877c16a1c0" }, { "alg" : "SHA-512", "content" : "f9b033fc019a44f98b16048da7e2b59edd4a6a527ba60e358f65ab88e0afae03a9340f1b3e8a543d49fa542290f499c5594259affa1ff3e6e7bf3b428d4c610b" }, { "alg" : "SHA-384", "content" : "2b14ad035877087157e379d3277dcdcd79e58d6bdb147c47d29e377d75ce53ad42cafbf22f5fb7827c7e946ff4876b9a" }, { "alg" : "SHA3-384", "content" : "3bc3110dafb8d5be16a39f3b2671a466463cd99eb39610c0e4719a7bf2d928f2ea213c734887c6926a07c4cca7769e4b" }, { "alg" : "SHA3-256", "content" : "ba2608179fcf46e2291a90b9cbb4aa30d718e481f59c350cc21c73b88d826881" }, { "alg" : "SHA3-512", "content" : "14c4edcd19702ef607d78826839d8a6d3a39157df54b89a801d3d3cbbe1307131a77671b041c761122730fb1387888c5ec2e46bdd80e1cb07f8f144676441824" } ], "licenses" : [ { "license" : { "id" : "MIT", "url" : "https://opensource.org/licenses/MIT" } } ], "purl" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar", "externalReferences" : [ { "type" : "website", "url" : "http://www.slf4j.org" }, { "type" : "distribution", "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type" : "vcs", "url" : "https://github.com/qos-ch/slf4j/slf4j-api" } ], "type" : "library", "bom-ref" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar" }, { "group" : "io.leangen.geantyref", "name" : "geantyref", "version" : "1.3.15", "description" : "Generic type reflection library with support for AnnotatedType", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "724a6925325ec8a0ff4f7510b6f41652" }, { "alg" : "SHA-1", "content" : "1c9a807a35a02c57dae5e6fa13197e6c735bd721" }, { "alg" : "SHA-256", "content" : "6907affedb63ab3e77c7cd988141f3293cbd847ff3df58eec1e48c7d2990fb89" }, { "alg" : "SHA-512", "content" : "90bd66cbd8c0b4ef41073abb492bcca7ebedaebfca5dbce4270d30f62e9251ed63a6653f1577552de796364b770d323e0561925e686d5a4a0156b42e1fd8f490" }, { "alg" : "SHA-384", "content" : "b8a17a0410b52534a16bf713723013679e6d53dfa64854f0b4e58f91ac1950146cb1f975c68fb0cf656bcb95cc573150" }, { "alg" : "SHA3-384", "content" : "ca17a6da0f1b9e6a3632942f582ce805467c91f9290ec27402be8b9779de3f58995959398265bcccfb36d649fc8df8b0" }, { "alg" : "SHA3-256", "content" : "3f859c62c37c56067a67c4d8534cfe3a096511d347720f8a9c8453530b82b83e" }, { "alg" : "SHA3-512", "content" : "d8237d3d4c4a294cfe1431ca459c57bf8662a6174e632948ccf607ed54e679bb9a3cc5c3a0933b17f77aae1a9c712515bf7ddcefb82fb2a8ba2c8719ca2f6e28" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/io.leangen.geantyref/geantyref@1.3.15?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://github.com/leangen/geantyref" }, { "type" : "distribution", "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type" : "issue-tracker", "url" : "https://github.com/leangen/geantyref/issues" }, { "type" : "vcs", "url" : "https://github.com/leangen/geantyref" } ], "type" : "library", "bom-ref" : "pkg:maven/io.leangen.geantyref/geantyref@1.3.15?type=jar" }, { "group" : "org.jdbi", "name" : "jdbi3-sqlobject", "version" : "3.45.3", "description" : "SqlObject is a declarative, annotation-driven API for database access. It complements the core API. Jdbi 3 is designed to provide convenient tabular data access in Java(tm) and other JVM based languages. It uses the Java collections framework for query results, provides a convenient means of externalizing SQL statements, and named parameter support for any database that supports JDBC.", "scope" : "optional", "hashes" : [ { "alg" : "MD5", "content" : "4955c5c83fb43d40af663ffb5d4b433b" }, { "alg" : "SHA-1", "content" : "9d710cb95ffe152751b265aa62a03c080eaa1f5b" }, { "alg" : "SHA-256", "content" : "3840f5b03176b8a6ab9a4db1c6d24d3344d42008cfbf85c851961810e3c28ac9" }, { "alg" : "SHA-512", "content" : "148cef1a5e6ab19bc5291f56cae99df7585b951839571a7a0a28ec08675fa92bebd8373b9f022cd5c3b792293eb4fc0e90c392fc103521a7de0c894434a5c3da" }, { "alg" : "SHA-384", "content" : "989de8634ffafee7ff25c3ada51c247e7094ce68ab5974bfb48672bbf3d31bb5abe078b9e746190f6649a5d06039d5af" }, { "alg" : "SHA3-384", "content" : "aa1e9ef6a42603df63b2781b6acac6cd66e65d0ec563452ef7168b21af10e28ba535b947d0b4f57e31441addb67a4abc" }, { "alg" : "SHA3-256", "content" : "288fb01e657cad0952797a6916babdfa166bd17af0d0210e0a49f49a537ecaad" }, { "alg" : "SHA3-512", "content" : "ac3d55954a063313bc866d13ad7228086f895b266d0a2a7c77796adb6af08ed943c381161a0d4cf432fde99311f20ae59ea414602629b60ad673c26b504ceebf" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0", "url" : "https://www.apache.org/licenses/LICENSE-2.0" } } ], "purl" : "pkg:maven/org.jdbi/jdbi3-sqlobject@3.45.3?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://jdbi.org/jdbi3-parent/jdbi3-sqlobject/" }, { "type" : "distribution", "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type" : "vcs", "url" : "https://github.com/jdbi/jdbi/jdbi3-sqlobject/" } ], "type" : "library", "bom-ref" : "pkg:maven/org.jdbi/jdbi3-sqlobject@3.45.3?type=jar" }, { "group" : "org.antlr", "name" : "ST4", "version" : "4.3.4", "description" : "StringTemplate is a java template engine for generating source code, web pages, emails, or any other formatted text output. StringTemplate is particularly good at multi-targeted code generators, multiple site skins, and internationalization/localization. It evolved over years of effort developing jGuru.com. StringTemplate also powers the ANTLR 3 and 4 code generator. Its distinguishing characteristic is that unlike other engines, it strictly enforces model-view separation. Strict separation makes websites and code generators more flexible and maintainable; it also provides an excellent defense against malicious template authors.", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "a6de791d02497d94d2f53047c8db6e1c" }, { "alg" : "SHA-1", "content" : "bf68d049dd4e6e104055a79ac3bf9e6307d29258" }, { "alg" : "SHA-256", "content" : "f927ac384c46d749f8b5ec68972a53aed21e00313509299616edb73bfa15ff33" }, { "alg" : "SHA-512", "content" : "ec40080db7c7612ed04f3ff5faa6f2a38304f252d2e246c026fc76b47e03f83427f71aef9dc7cb131b3451e31b68bcd7e597f7b929504186428f517274401199" }, { "alg" : "SHA-384", "content" : "0ba5c388705713c8b87d616416e20175916dffc332f645f4f23bc24b50d21e1111813de7c029421d916fa6057d8b28ac" }, { "alg" : "SHA3-384", "content" : "8de5be57b8a149afeb2db13c7ac1c5d4223471cb85e7210fdbf06ea754c7d3321b97a32ab4c0e8465ddbce6dfcb6d75b" }, { "alg" : "SHA3-256", "content" : "9b1a9b33d836b7ff89d5eeae381bda73efa342d1fd5a3e107ca2d4d4af6c5165" }, { "alg" : "SHA3-512", "content" : "4a0c087514432b884f7f3b00602fa6436bfe5702f9ce7372f5c8a601ef6d22b67df5ba8258272b532e70895ec5fb78ab3190616133ad68ebf5b8d6157010c4b2" } ], "licenses" : [ { "license" : { "id" : "BSD-4-Clause" } } ], "purl" : "pkg:maven/org.antlr/ST4@4.3.4?type=jar", "externalReferences" : [ { "type" : "website", "url" : "http://nexus.sonatype.org/oss-repository-hosting.html/ST4" }, { "type" : "distribution", "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type" : "vcs", "url" : "https://github.com/antlr/stringtemplate4/tree/master" } ], "type" : "library", "bom-ref" : "pkg:maven/org.antlr/ST4@4.3.4?type=jar" }, { "publisher" : "ANTLR", "group" : "org.antlr", "name" : "antlr-runtime", "version" : "3.5.3", "description" : "A framework for constructing recognizers, compilers, and translators from grammatical descriptions containing Java, C#, C++, or Python actions.", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "0b5c0ce1bb9c8190e2e60401fc439daa" }, { "alg" : "SHA-1", "content" : "9011fb189c5ed6d99e5f3322514848d1ec1e1416" }, { "alg" : "SHA-256", "content" : "68bf9f5a33dfcb34033495c587e6236bef4e37aa6612919f5b1e843b90669fb9" }, { "alg" : "SHA-512", "content" : "7714970915d7187d7abb32610b3764305e67798d8289f8a59461ebb3bf7f26a09b933279de1cf95c14bbb60f213bf3f1af6aa8f20e75b26768223883a6883aaa" }, { "alg" : "SHA-384", "content" : "e2c7c6211b673413739f34a28420af990809a4ed3ef4832d12ce3910c409be42adfbf0a90b949b17f88aaf8980dd124e" }, { "alg" : "SHA3-384", "content" : "08924b6c5772c6d588b4bf3a026c79d4cd69b19f460758e94169a72a210efe9da2d8684ea0c029008d028a8a5414cc9f" }, { "alg" : "SHA3-256", "content" : "86a8aa88ee5c27c2f90600c9cbedece6a3ac6b8e7762543299e6af7f64729121" }, { "alg" : "SHA3-512", "content" : "ef4d5408027ccf3db7ac34065d610d978b59ef759964301103c720a7d6d97d832aa46554ef4e8e70b469d132e870627bd050e7bd165b2385ddc98bd621b3059c" } ], "licenses" : [ { "license" : { "name" : "BSD licence", "url" : "http://antlr.org/license.html" } } ], "purl" : "pkg:maven/org.antlr/antlr-runtime@3.5.3?type=jar", "externalReferences" : [ { "type" : "website", "url" : "http://www.antlr.org" }, { "type" : "distribution", "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type" : "issue-tracker", "url" : "https://github.com/antlr/antlr3/issues" }, { "type" : "mailing-list", "url" : "https://groups.google.com/forum/?fromgroups#!forum/antlr-discussion" }, { "type" : "vcs", "url" : "https://github.com/antlr/antlr3/tree/master/antlr-runtime" } ], "type" : "library", "bom-ref" : "pkg:maven/org.antlr/antlr-runtime@3.5.3?type=jar" } ], "dependencies" : [ { "ref" : "pkg:maven/org.jdbi/jdbi3-stringtemplate4@3.45.3?type=jar", "dependsOn" : [ "pkg:maven/org.jdbi/jdbi3-core@3.45.3?type=jar", "pkg:maven/org.jdbi/jdbi3-sqlobject@3.45.3?type=jar", "pkg:maven/org.antlr/ST4@4.3.4?type=jar" ] }, { "ref" : "pkg:maven/org.jdbi/jdbi3-core@3.45.3?type=jar", "dependsOn" : [ "pkg:maven/org.antlr/antlr4-runtime@4.13.1?type=jar", "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar", "pkg:maven/io.leangen.geantyref/geantyref@1.3.15?type=jar" ] }, { "ref" : "pkg:maven/org.antlr/antlr4-runtime@4.13.1?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/io.leangen.geantyref/geantyref@1.3.15?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/org.jdbi/jdbi3-sqlobject@3.45.3?type=jar", "dependsOn" : [ "pkg:maven/org.jdbi/jdbi3-core@3.45.3?type=jar" ] }, { "ref" : "pkg:maven/org.antlr/ST4@4.3.4?type=jar", "dependsOn" : [ "pkg:maven/org.antlr/antlr-runtime@3.5.3?type=jar" ] }, { "ref" : "pkg:maven/org.antlr/antlr-runtime@3.5.3?type=jar", "dependsOn" : [ ] } ] }