{ "bomFormat" : "CycloneDX", "specVersion" : "1.4", "serialNumber" : "urn:uuid:b9da32e5-b0f6-3be4-b134-f8019ce56134", "version" : 1, "metadata" : { "tools" : [ { "vendor" : "OWASP Foundation", "name" : "CycloneDX Maven plugin", "version" : "2.7.11", "hashes" : [ { "alg" : "MD5", "content" : "a70e8b649ab4a2bb7922d360173c8237" }, { "alg" : "SHA-1", "content" : "4c3c0878c15561639076e5be7a48ffcd6111c5ee" }, { "alg" : "SHA-256", "content" : "70997d52dbffd4e797c467b2062c6ba9b8b5a7380ff2884779f2743b6172ebb5" }, { "alg" : "SHA-512", "content" : "bc1ce91190c642f68fd3571939d7668def3b879ec8e5a87a213a9710a106e0290f60f9e0414593d19cca958c4fcb5d4450bd2793bcd609948419c8a2a6a7f5c8" }, { "alg" : "SHA-384", "content" : "3c8421bdafd1754fb424f16dccc83bfe0827648c1cadfffc98bdf1c7da65475dfe48d2f4b16d233bb8819e155ba6a4f3" }, { "alg" : "SHA3-384", "content" : "ad88cf6a0e0a5d51df49a4dab5530a28de9df7eec8460c045dff3e1f9316b82a244a125d52b937fe9d4ee72e44f5d01a" }, { "alg" : "SHA3-256", "content" : "b4d9c3ef07c34517fd9f33178ba95ffc9618eb84a3671e71b0c82991ec3717e5" }, { "alg" : "SHA3-512", "content" : "935b43aba8999dc7d95d93288a251c97b6b32852841b7bef31516c27c8d65c8de7f8411f1829f765ee760f25930c766db6a49df68e5994e18721c0a71f606f1e" } ] } ], "component" : { "group" : "org.jdbi", "name" : "jdbi3-stringtemplate4", "version" : "3.45.4", "description" : "Use Stringtemplate 4 for query templating.", "licenses" : [ { "license" : { "id" : "Apache-2.0", "url" : "https://www.apache.org/licenses/LICENSE-2.0" } } ], "purl" : "pkg:maven/org.jdbi/jdbi3-stringtemplate4@3.45.4?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://jdbi.org/jdbi3-parent/jdbi3-stringtemplate4/" }, { "type" : "distribution", "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type" : "vcs", "url" : "https://github.com/jdbi/jdbi/jdbi3-stringtemplate4/" } ], "type" : "library", "bom-ref" : "pkg:maven/org.jdbi/jdbi3-stringtemplate4@3.45.4?type=jar" }, "properties" : [ { "name" : "maven.goal", "value" : "makeBom" }, { "name" : "maven.scopes", "value" : "compile,provided,runtime,system" }, { "name" : "cdx:reproducible", "value" : "enabled" } ] }, "components" : [ { "group" : "org.jdbi", "name" : "jdbi3-core", "version" : "3.45.4", "description" : "The Jdbi core API. Jdbi 3 is designed to provide convenient tabular data access in Java(tm) and other JVM based languages. It uses the Java collections framework for query results, provides a convenient means of externalizing SQL statements, and named parameter support for any database that supports JDBC.", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "208b92c43dfa1a071bbe258e12ed89ac" }, { "alg" : "SHA-1", "content" : "d659f9559ff5ef13808851d958b084eb5ed9a2ba" }, { "alg" : "SHA-256", "content" : "f8351186fdd59466643a4e19a25a972632d9544a467a01b8020826b183e28070" }, { "alg" : "SHA-512", "content" : "53a3e1d018899d1aa1185e809fddd7aecd60b5556906d82b6d9a4461ba96d4d3d2d42b7c537631547ad411f8e1a6bab4e75d689399ab950397cc7be037ae90cf" }, { "alg" : "SHA-384", "content" : "cf01af32fdbd6c3d45b1771e2c14607bdd77df505306512e1837d4167fa51f9e42cf61d6745ec30935065cdf24b27862" }, { "alg" : "SHA3-384", "content" : "7de24b4e78267a415a973285f7a4ebeff0d7b0c3ea4118fa32029b4ea707d190a1a98ef1f868cedd4871e406d7a65cfc" }, { "alg" : "SHA3-256", "content" : "14fdf2eeeba0a9dca7ad50947518ec729e6ee4770aa1c31e9464221098b21551" }, { "alg" : "SHA3-512", "content" : "15f2c4e7416026b511d68dea93d23225e61eac3ca1195e8eb2e9bd2bffcf07d59b1010f4004c1d3d8fb0ad2adbcdefd09706bbf84f059aeee1a5db59496ac381" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0", "url" : "https://www.apache.org/licenses/LICENSE-2.0" } } ], "purl" : "pkg:maven/org.jdbi/jdbi3-core@3.45.4?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://jdbi.org/jdbi3-parent/jdbi3-core/" }, { "type" : "distribution", "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type" : "vcs", "url" : "https://github.com/jdbi/jdbi/jdbi3-core/" } ], "type" : "library", "bom-ref" : "pkg:maven/org.jdbi/jdbi3-core@3.45.4?type=jar" }, { "publisher" : "ANTLR", "group" : "org.antlr", "name" : "antlr4-runtime", "version" : "4.13.1", "description" : "The ANTLR 4 Runtime", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "dd465ddb2a8dbf69eb6c94e69a0d5f0f" }, { "alg" : "SHA-1", "content" : "17125bae1d965624e265ef49552f6465a2bfa307" }, { "alg" : "SHA-256", "content" : "54665d2838cc66458343468efc539e454fc95b46a8a04b13c6ac43fc9be63505" }, { "alg" : "SHA-512", "content" : "63eb51bfcee49c52848d8b7c3c46d8b4d367d85fb3c3db7175eaacba94e4d0c227b78e5955a0e86e575e1c6206fc2a43e5fa96fb04ad7c16e24ec94015cfc18b" }, { "alg" : "SHA-384", "content" : "9e5e022d1eff5870f53e0e17d09d737eebb5b859c3403e78308af4616a86cde0830842b81a389ac4a0df871fb1032124" }, { "alg" : "SHA3-384", "content" : "20f3a927369f6bfd94bd8b244e0e9330d4438736414c403b712098f6aad9a1140bc17333cacf194f1b9e99c0f62ffdfa" }, { "alg" : "SHA3-256", "content" : "5696b3e757e6135c1aa56452b86ff0456425d13b97b33ace3f4d3dc6c752c4b6" }, { "alg" : "SHA3-512", "content" : "33251a06eaeaa56f274548e47b405cce279a9e54e34d65bc382d2482887bd470e5080da4f75c221658c3e70aea79e748bd0a3f47e49e37805174e23f71747b92" } ], "licenses" : [ { "license" : { "id" : "BSD-3-Clause", "url" : "https://opensource.org/licenses/BSD-3-Clause" } } ], "purl" : "pkg:maven/org.antlr/antlr4-runtime@4.13.1?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://www.antlr.org/antlr4-runtime/" }, { "type" : "distribution", "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type" : "issue-tracker", "url" : "https://github.com/antlr/antlr4/issues" }, { "type" : "mailing-list", "url" : "https://groups.google.com/forum/?fromgroups#!forum/antlr-discussion" }, { "type" : "vcs", "url" : "https://github.com/antlr/antlr4/tree/master/antlr4-runtime" } ], "type" : "library", "bom-ref" : "pkg:maven/org.antlr/antlr4-runtime@4.13.1?type=jar" }, { "publisher" : "QOS.ch", "group" : "org.slf4j", "name" : "slf4j-api", "version" : "1.7.36", "description" : "The slf4j API", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "872da51f5de7f3923da4de871d57fd85" }, { "alg" : "SHA-1", "content" : "6c62681a2f655b49963a5983b8b0950a6120ae14" }, { "alg" : "SHA-256", "content" : "d3ef575e3e4979678dc01bf1dcce51021493b4d11fb7f1be8ad982877c16a1c0" }, { "alg" : "SHA-512", "content" : "f9b033fc019a44f98b16048da7e2b59edd4a6a527ba60e358f65ab88e0afae03a9340f1b3e8a543d49fa542290f499c5594259affa1ff3e6e7bf3b428d4c610b" }, { "alg" : "SHA-384", "content" : "2b14ad035877087157e379d3277dcdcd79e58d6bdb147c47d29e377d75ce53ad42cafbf22f5fb7827c7e946ff4876b9a" }, { "alg" : "SHA3-384", "content" : "3bc3110dafb8d5be16a39f3b2671a466463cd99eb39610c0e4719a7bf2d928f2ea213c734887c6926a07c4cca7769e4b" }, { "alg" : "SHA3-256", "content" : "ba2608179fcf46e2291a90b9cbb4aa30d718e481f59c350cc21c73b88d826881" }, { "alg" : "SHA3-512", "content" : "14c4edcd19702ef607d78826839d8a6d3a39157df54b89a801d3d3cbbe1307131a77671b041c761122730fb1387888c5ec2e46bdd80e1cb07f8f144676441824" } ], "licenses" : [ { "license" : { "id" : "MIT", "url" : "https://opensource.org/licenses/MIT" } } ], "purl" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar", "externalReferences" : [ { "type" : "website", "url" : "http://www.slf4j.org" }, { "type" : "distribution", "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type" : "vcs", "url" : "https://github.com/qos-ch/slf4j/slf4j-api" } ], "type" : "library", "bom-ref" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar" }, { "group" : "io.leangen.geantyref", "name" : "geantyref", "version" : "1.3.15", "description" : "Generic type reflection library with support for AnnotatedType", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "724a6925325ec8a0ff4f7510b6f41652" }, { "alg" : "SHA-1", "content" : "1c9a807a35a02c57dae5e6fa13197e6c735bd721" }, { "alg" : "SHA-256", "content" : "6907affedb63ab3e77c7cd988141f3293cbd847ff3df58eec1e48c7d2990fb89" }, { "alg" : "SHA-512", "content" : "90bd66cbd8c0b4ef41073abb492bcca7ebedaebfca5dbce4270d30f62e9251ed63a6653f1577552de796364b770d323e0561925e686d5a4a0156b42e1fd8f490" }, { "alg" : "SHA-384", "content" : "b8a17a0410b52534a16bf713723013679e6d53dfa64854f0b4e58f91ac1950146cb1f975c68fb0cf656bcb95cc573150" }, { "alg" : "SHA3-384", "content" : "ca17a6da0f1b9e6a3632942f582ce805467c91f9290ec27402be8b9779de3f58995959398265bcccfb36d649fc8df8b0" }, { "alg" : "SHA3-256", "content" : "3f859c62c37c56067a67c4d8534cfe3a096511d347720f8a9c8453530b82b83e" }, { "alg" : "SHA3-512", "content" : "d8237d3d4c4a294cfe1431ca459c57bf8662a6174e632948ccf607ed54e679bb9a3cc5c3a0933b17f77aae1a9c712515bf7ddcefb82fb2a8ba2c8719ca2f6e28" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/io.leangen.geantyref/geantyref@1.3.15?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://github.com/leangen/geantyref" }, { "type" : "distribution", "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type" : "issue-tracker", "url" : "https://github.com/leangen/geantyref/issues" }, { "type" : "vcs", "url" : "https://github.com/leangen/geantyref" } ], "type" : "library", "bom-ref" : "pkg:maven/io.leangen.geantyref/geantyref@1.3.15?type=jar" }, { "group" : "org.jdbi", "name" : "jdbi3-sqlobject", "version" : "3.45.4", "description" : "SqlObject is a declarative, annotation-driven API for database access. It complements the core API. Jdbi 3 is designed to provide convenient tabular data access in Java(tm) and other JVM based languages. It uses the Java collections framework for query results, provides a convenient means of externalizing SQL statements, and named parameter support for any database that supports JDBC.", "scope" : "optional", "hashes" : [ { "alg" : "MD5", "content" : "7872d3446aa7b92e28183e0818e5317d" }, { "alg" : "SHA-1", "content" : "2feb2dcbb1ccff9b4ec5f3e3a580d846a187e430" }, { "alg" : "SHA-256", "content" : "9b8ae63c02b304f9c651505e7f54c0020a232066dabd0baaa9b10220f3fe01f3" }, { "alg" : "SHA-512", "content" : "e912b192059c203daf275636fb825b782ed3e873ba0a47e9b2b3b0db15320abcbd04137af7eaadbd713dc8efd911ec554f6c37b596161a46ed21d3878ef63e25" }, { "alg" : "SHA-384", "content" : "0740d260da2a8defde93a71a303c4acc5eeef10cfbc8aa716d01ecc6278c2c49bc19f55a85581f764473a249ce648c27" }, { "alg" : "SHA3-384", "content" : "d8ce3d7509be7692fe7045d211b659a07a91dd1688e1c722040952084c49753804a26c18f3fbc8abc1b05dec1635f3bd" }, { "alg" : "SHA3-256", "content" : "88c6afc35f0909e1e8c793e9e70c4bc5d36193f33868119631a7ce4ab48bd22b" }, { "alg" : "SHA3-512", "content" : "fa55d9c8cbebadb738777a90d988836c83bb3fc6405c8eedc48517fcb9c1baa9179dffec2f3496bf91123aad3b26c815d51caa18b505a50d94cebc79e365ef46" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0", "url" : "https://www.apache.org/licenses/LICENSE-2.0" } } ], "purl" : "pkg:maven/org.jdbi/jdbi3-sqlobject@3.45.4?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://jdbi.org/jdbi3-parent/jdbi3-sqlobject/" }, { "type" : "distribution", "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type" : "vcs", "url" : "https://github.com/jdbi/jdbi/jdbi3-sqlobject/" } ], "type" : "library", "bom-ref" : "pkg:maven/org.jdbi/jdbi3-sqlobject@3.45.4?type=jar" }, { "group" : "org.antlr", "name" : "ST4", "version" : "4.3.4", "description" : "StringTemplate is a java template engine for generating source code, web pages, emails, or any other formatted text output. StringTemplate is particularly good at multi-targeted code generators, multiple site skins, and internationalization/localization. It evolved over years of effort developing jGuru.com. StringTemplate also powers the ANTLR 3 and 4 code generator. Its distinguishing characteristic is that unlike other engines, it strictly enforces model-view separation. Strict separation makes websites and code generators more flexible and maintainable; it also provides an excellent defense against malicious template authors.", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "a6de791d02497d94d2f53047c8db6e1c" }, { "alg" : "SHA-1", "content" : "bf68d049dd4e6e104055a79ac3bf9e6307d29258" }, { "alg" : "SHA-256", "content" : "f927ac384c46d749f8b5ec68972a53aed21e00313509299616edb73bfa15ff33" }, { "alg" : "SHA-512", "content" : "ec40080db7c7612ed04f3ff5faa6f2a38304f252d2e246c026fc76b47e03f83427f71aef9dc7cb131b3451e31b68bcd7e597f7b929504186428f517274401199" }, { "alg" : "SHA-384", "content" : "0ba5c388705713c8b87d616416e20175916dffc332f645f4f23bc24b50d21e1111813de7c029421d916fa6057d8b28ac" }, { "alg" : "SHA3-384", "content" : "8de5be57b8a149afeb2db13c7ac1c5d4223471cb85e7210fdbf06ea754c7d3321b97a32ab4c0e8465ddbce6dfcb6d75b" }, { "alg" : "SHA3-256", "content" : "9b1a9b33d836b7ff89d5eeae381bda73efa342d1fd5a3e107ca2d4d4af6c5165" }, { "alg" : "SHA3-512", "content" : "4a0c087514432b884f7f3b00602fa6436bfe5702f9ce7372f5c8a601ef6d22b67df5ba8258272b532e70895ec5fb78ab3190616133ad68ebf5b8d6157010c4b2" } ], "licenses" : [ { "license" : { "id" : "BSD-4-Clause" } } ], "purl" : "pkg:maven/org.antlr/ST4@4.3.4?type=jar", "externalReferences" : [ { "type" : "website", "url" : "http://nexus.sonatype.org/oss-repository-hosting.html/ST4" }, { "type" : "distribution", "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type" : "vcs", "url" : "https://github.com/antlr/stringtemplate4/tree/master" } ], "type" : "library", "bom-ref" : "pkg:maven/org.antlr/ST4@4.3.4?type=jar" }, { "publisher" : "ANTLR", "group" : "org.antlr", "name" : "antlr-runtime", "version" : "3.5.3", "description" : "A framework for constructing recognizers, compilers, and translators from grammatical descriptions containing Java, C#, C++, or Python actions.", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "0b5c0ce1bb9c8190e2e60401fc439daa" }, { "alg" : "SHA-1", "content" : "9011fb189c5ed6d99e5f3322514848d1ec1e1416" }, { "alg" : "SHA-256", "content" : "68bf9f5a33dfcb34033495c587e6236bef4e37aa6612919f5b1e843b90669fb9" }, { "alg" : "SHA-512", "content" : "7714970915d7187d7abb32610b3764305e67798d8289f8a59461ebb3bf7f26a09b933279de1cf95c14bbb60f213bf3f1af6aa8f20e75b26768223883a6883aaa" }, { "alg" : "SHA-384", "content" : "e2c7c6211b673413739f34a28420af990809a4ed3ef4832d12ce3910c409be42adfbf0a90b949b17f88aaf8980dd124e" }, { "alg" : "SHA3-384", "content" : "08924b6c5772c6d588b4bf3a026c79d4cd69b19f460758e94169a72a210efe9da2d8684ea0c029008d028a8a5414cc9f" }, { "alg" : "SHA3-256", "content" : "86a8aa88ee5c27c2f90600c9cbedece6a3ac6b8e7762543299e6af7f64729121" }, { "alg" : "SHA3-512", "content" : "ef4d5408027ccf3db7ac34065d610d978b59ef759964301103c720a7d6d97d832aa46554ef4e8e70b469d132e870627bd050e7bd165b2385ddc98bd621b3059c" } ], "licenses" : [ { "license" : { "name" : "BSD licence", "url" : "http://antlr.org/license.html" } } ], "purl" : "pkg:maven/org.antlr/antlr-runtime@3.5.3?type=jar", "externalReferences" : [ { "type" : "website", "url" : "http://www.antlr.org" }, { "type" : "distribution", "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type" : "issue-tracker", "url" : "https://github.com/antlr/antlr3/issues" }, { "type" : "mailing-list", "url" : "https://groups.google.com/forum/?fromgroups#!forum/antlr-discussion" }, { "type" : "vcs", "url" : "https://github.com/antlr/antlr3/tree/master/antlr-runtime" } ], "type" : "library", "bom-ref" : "pkg:maven/org.antlr/antlr-runtime@3.5.3?type=jar" } ], "dependencies" : [ { "ref" : "pkg:maven/org.jdbi/jdbi3-stringtemplate4@3.45.4?type=jar", "dependsOn" : [ "pkg:maven/org.jdbi/jdbi3-core@3.45.4?type=jar", "pkg:maven/org.jdbi/jdbi3-sqlobject@3.45.4?type=jar", "pkg:maven/org.antlr/ST4@4.3.4?type=jar" ] }, { "ref" : "pkg:maven/org.jdbi/jdbi3-core@3.45.4?type=jar", "dependsOn" : [ "pkg:maven/org.antlr/antlr4-runtime@4.13.1?type=jar", "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar", "pkg:maven/io.leangen.geantyref/geantyref@1.3.15?type=jar" ] }, { "ref" : "pkg:maven/org.antlr/antlr4-runtime@4.13.1?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/io.leangen.geantyref/geantyref@1.3.15?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/org.jdbi/jdbi3-sqlobject@3.45.4?type=jar", "dependsOn" : [ "pkg:maven/org.jdbi/jdbi3-core@3.45.4?type=jar" ] }, { "ref" : "pkg:maven/org.antlr/ST4@4.3.4?type=jar", "dependsOn" : [ "pkg:maven/org.antlr/antlr-runtime@3.5.3?type=jar" ] }, { "ref" : "pkg:maven/org.antlr/antlr-runtime@3.5.3?type=jar", "dependsOn" : [ ] } ] }