OWASP Foundation CycloneDX Maven plugin 2.7.11 a70e8b649ab4a2bb7922d360173c8237 4c3c0878c15561639076e5be7a48ffcd6111c5ee 70997d52dbffd4e797c467b2062c6ba9b8b5a7380ff2884779f2743b6172ebb5 bc1ce91190c642f68fd3571939d7668def3b879ec8e5a87a213a9710a106e0290f60f9e0414593d19cca958c4fcb5d4450bd2793bcd609948419c8a2a6a7f5c8 3c8421bdafd1754fb424f16dccc83bfe0827648c1cadfffc98bdf1c7da65475dfe48d2f4b16d233bb8819e155ba6a4f3 ad88cf6a0e0a5d51df49a4dab5530a28de9df7eec8460c045dff3e1f9316b82a244a125d52b937fe9d4ee72e44f5d01a b4d9c3ef07c34517fd9f33178ba95ffc9618eb84a3671e71b0c82991ec3717e5 935b43aba8999dc7d95d93288a251c97b6b32852841b7bef31516c27c8d65c8de7f8411f1829f765ee760f25930c766db6a49df68e5994e18721c0a71f606f1e The Apache Software Foundation org.apache.avro avro-ipc 1.11.4 Avro inter-process communication components Apache-2.0 https://www.apache.org/licenses/LICENSE-2.0 pkg:maven/org.apache.avro/avro-ipc@1.11.4?type=bundle https://avro.apache.orghttps://repository.apache.org/service/local/staging/deploy/maven2https://issues.apache.org/jira/browse/AVROhttps://mail-archives.apache.org/mod_mbox/avro-dev/scm:git:https://github.com/apache/avro/lang/avro-parent/avro-ipc makeBom compile,provided,runtime,system enabled The Apache Software Foundation org.apache.avro avro 1.11.4 Avro core components required 915002011d651686f94b4e20d25234a6 25d54640c4a17aa342490c4c63c172759361bf56 eeba11b77070b9aa6337d886fdf778f6695f6c4c3dcfd2a02389925c885079fa 2133473bcafb3997f70dd0dc44e76872beed30910dc88522d898e639df0c58f8fefec4c734e46bf0244cf2ca1b49e90b0fdf5c9d7ccd06b41f8f9ad98da1cca5 701113d1e68c4582aad203692567bff7538d6ac2707195b413e9f831215e0c8622e83383adcc822a353524c28aba5dda 017e0363dfdf0019a2e75785c1f7a8aebe1a61f2c96393bacea3238d8f010d3d82ddcf3466d474ebb113ef67e9ecf192 135d7a5a6e9723e77cee8ede0687f459f8fbb828f4111dc351f747b2b72eb0dd 04d0041f4d215b51a446ec9c2b2998042285f81d85dd316f046b46420b71d459e3f66530ddbc2b98772ee5ced0d8788cb21c46b09d2139d311930ce5424ac3b9 Apache-2.0 https://www.apache.org/licenses/LICENSE-2.0 pkg:maven/org.apache.avro/avro@1.11.4?type=jar https://avro.apache.orghttps://repository.apache.org/service/local/staging/deploy/maven2https://issues.apache.org/jira/browse/AVROhttps://mail-archives.apache.org/mod_mbox/avro-dev/scm:git:https://github.com/apache/avro/lang/avro-parent/avro The Apache Software Foundation org.apache.commons commons-compress 1.26.2 Apache Commons Compress defines an API for working with compression and archive formats. These include bzip2, gzip, pack200, LZMA, XZ, Snappy, traditional Unix Compress, DEFLATE, DEFLATE64, LZ4, Brotli, Zstandard and ar, cpio, jar, tar, zip, dump, 7z, arj. required d2c5abbd0a822c0b79cf4f03ead483ee eb1f823447af685208e684fce84783b43517960c 9168a03141d8fc7eda21a2360d83cc0412bcbb1d6204d992bd48c2573cb3c6b8 7106a722d26da945f6d6eea6f0c61b420bff45749bf60c572d992c545b10ccd926dc4b9a9f366ff29d5940c99f26dfeca98f6c1c4b630632a65f04c2d7b94b26 8422ef0d5e9ca419a8b3a33a4c330348f4495b9edded4fde38636d11e99fc3f725df11769d310edc233beed2401daf53 b32406c91771cfc12e61722add9ab2ef8efa32bf16bdcf80b415f5604bb9b61977c08e6f87f2ef59705c761caca4ffb8 26c54771c66adc967a167306982bded1fc36a6a2d590401fc435303c9e6256a7 3f4054fd56ae8d4f012f2cae5469215010123c1ada8931bdcd634551027816afefd8bd871b2ee99f168e2d5a347e0e28c31427dd79e3f42cefcff2662a5603ff Apache-2.0 https://www.apache.org/licenses/LICENSE-2.0 pkg:maven/org.apache.commons/commons-compress@1.26.2?type=jar https://commons.apache.org/proper/commons-compress/https://github.com/apache/commons-parent/actionshttps://repository.apache.org/service/local/staging/deploy/maven2https://issues.apache.org/jira/browse/COMPRESShttps://mail-archives.apache.org/mod_mbox/commons-user/https://gitbox.apache.org/repos/asf?p=commons-compress.git The Apache Software Foundation commons-codec commons-codec 1.17.0 The Apache Commons Codec component contains encoder and decoders for various formats such as Base16, Base32, Base64, digest, and Hexadecimal. In addition to these widely used encoders and decoders, the codec package also maintains a collection of phonetic encoding utilities. required ca1f080782f7e77cb3aec451e7a7f02d 0dbe8eef6e14460e73da07f7b11bf994d6626355 f700de80ac270d0344fdea7468201d8b9c805e5c648331c3619f2ee067ccfc59 cb9c3b2055d0b31d106293f0bc3696f90a11a30953e5b05a1a3c453e98a563475c93d7c6d1707e75f59d0806fba5fd8e4486b8bd72e58bb6ae995bdbbeeb7e17 a0fd174b2f8a21b43828371a7ee03c915b79e69d7b0e16cfe6367f794e2f8e6bbebc261e8a4ba35a79779b2338a774a4 803fb227bd6770cc21c701b9529606f95ba05c30ea3d807b18b3681fde0c7cabd0e2f40ab36567832f63e0c42b77d0f2 41b9b86fd0b19ff44d19d108302d7b0111ed86d07a65a90efe1023537fad8748 eaacc9eafccf4bda0c72c5151dbd7e99954842782c91b501af8c7ca462a04b6c59d7ab8e1ef43b3ebc1b12ca62f4574544bc31df10f33f4a15cd3c3399bd808b Apache-2.0 https://www.apache.org/licenses/LICENSE-2.0 pkg:maven/commons-codec/commons-codec@1.17.0?type=jar https://commons.apache.org/proper/commons-codec/https://github.com/apache/commons-parent/actionshttps://repository.apache.org/service/local/staging/deploy/maven2https://issues.apache.org/jira/browse/CODEChttps://mail-archives.apache.org/mod_mbox/commons-user/https://github.com/apache/commons-codec The Apache Software Foundation commons-io commons-io 2.16.1 The Apache Commons IO library contains utility classes, stream implementations, file filters, file comparators, endian transformation classes, and much more. required ed8191a5a217940140001b0acfed18d9 377d592e740dc77124e0901291dbfaa6810a200e f41f7baacd716896447ace9758621f62c1c6b0a91d89acee488da26fc477c84f 97eab31b073c5c57c8bcfaa2fec7b481a15a9a1f9ed864dfdc63b57f062b230557caa734c3133aca1165facb588c58db0185c07832241d70159e87a4bcf48008 bd78e2eb3d005046d1329557d3a77529e98384d4d87940374eef432d73d5a06ef20fb7b0c44389de64496fe134dcf199 f9acc2f04f076328d17e2d0615da4367470b45b15f828008d8df57033401ae6b3b83b21cf9bc1745ff3cfe5a102bc48e 5d4bbe43356c92e3970b69892b44a10cc736ef8cb1bedfc753cc8df050520161 29440ccf2551b383c7e6cbdf78ef7784a421322e418da1be3fcd3251c8a826ffd5c6d1bea32b9c80e74744c035cc9cd8483e629e407110ff3133a05cb34bef93 Apache-2.0 https://www.apache.org/licenses/LICENSE-2.0 pkg:maven/commons-io/commons-io@2.16.1?type=jar https://commons.apache.org/proper/commons-io/https://github.com/apache/commons-parent/actionshttps://repository.apache.org/service/local/staging/deploy/maven2https://issues.apache.org/jira/browse/IOhttps://mail-archives.apache.org/mod_mbox/commons-user/https://gitbox.apache.org/repos/asf?p=commons-io.git FasterXML com.fasterxml.jackson.core jackson-core 2.14.3 Core Jackson processing abstractions (aka Streaming API), implementation for JSON required abb25b80cda20ddc2cd3bbd8fccd0d34 4fa101f81504ed6811bf1823270adb51a9b45ff3 7ee2debad3c002e97b28b84d5f1b2044a38e780abb673948238f5bc656e2fe44 7907fbde57f1ebd18d0935d34c5c9657e7dcff924c540b6ba732f87ed2e9e653ee499b21b464b3b74fa569d5865ffa717b8e2098d600a5f74cef4e97f39cc7d5 0d584c6b0ce820441e7e8f341d567924ab236de62f4ad8a40f1af37e983946ea07a9de3a4b607b76bf3c421a02720d0e 4163ac7d8f4fe59319c2fb76bfadcca883bc5fb92b9525d2d930284063cb384b4a7faac49829c4195aaffe64f4054447 52215985453eacefd6659967b51b684d7ebcc30a26163f31b8b7b0f5864fb7b4 e15a4a70c5bf68f77f535931c9d4ab4907efc80ce9d60a49d02fbd259511284e307f0fbbdbf60dcd2930c017a2f9a39c25541a528b6947d1d2388a28db299022 Apache-2.0 pkg:maven/com.fasterxml.jackson.core/jackson-core@2.14.3?type=jar https://github.com/FasterXML/jackson-corehttps://oss.sonatype.org/service/local/staging/deploy/maven2/https://github.com/FasterXML/jackson-core/issueshttps://github.com/FasterXML/jackson-core FasterXML com.fasterxml.jackson.core jackson-databind 2.14.3 General data-binding functionality for Jackson: works on core streaming API required d9aed5b42f6769cb06d6802250aed19b ba0373b04bf0f03b0cd268cd2e5e8444aaaf9208 ef0694046dc86e8a601e69efef24cda88a85773aaf012f5b9b1167d6f2e7de45 54f4842e09b4166bc0c0851407bdf988a0f88d5f68d58134eb0d393c80e20b337545fffa96c3563b79b71b105d9e55713815749af48cab752633d98c0dbfcf99 624b07a0b597c07a2c82cd6fbbb31d796c69a189931b73b7ce9c35dd0aca6dfca378d08c05e943b10c7f12e06904bb04 4f4a4e2f2c75e03a48d163ece5d9902cdec5959cfb23079b68559fa5ef481bc2582c77c428a2380b87470819d4c4d706 0882e9419fc6aaf3bbab0be8e78cd915336e1f4d3806dcaf9cdc17117e37c9ea a62a293254cc190f1ef40eec99ef95e7342b3c2858673e4f881144084d28393009f19a49137ace8c4f44f551d5e99b163f8d8e73d9d4b951e133d08b106af7b1 Apache-2.0 pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.14.3?type=jar https://github.com/FasterXML/jacksonhttps://oss.sonatype.org/service/local/staging/deploy/maven2/https://github.com/FasterXML/jackson-databind/issueshttps://github.com/FasterXML/jackson-databind FasterXML com.fasterxml.jackson.core jackson-annotations 2.14.3 Core annotations used for value types, used by Jackson data binding package. required f6ee414687751fbadc55998ec49b3ea6 b49701acb02b8e95ae1967821cfbafc220cf5795 ea1b3a9ec60a353f4d7e78559c7140abb9bcf71b31456e9d57c8289f7cf397f1 d265ba6cc1d20721ba7803416005f25d70036cd659bf6071f4d3250d7dab272a2522d7db282e50aeae994907556ef63155d2c0bcc0bd1c96c6460143ff5a8d53 551a607644bcb3f3c06ac9c94861858a0d8f2b62b9120d34f5c2aad94a3a0e75478a94dca7eb290d9814c8dec739905e 79bef0386d15bd152d94ba9e67849eb25c7c4eafd3e8a50c504304dad4653423d78cb8cb54d3853370334519219b5c80 6ed193820d6577652884528ce3d0378516483d51a87652aa7209f3f7ef8326f2 bc5748486a715352e318d809fb3483de615e15422c3264cc52806f4a367035cfbfdaf5258ba460b13e55d25adfc38ee39444f4b7460dfd2cf927817c4c6776ac Apache-2.0 pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.14.3?type=jar https://github.com/FasterXML/jacksonhttps://oss.sonatype.org/service/local/staging/deploy/maven2/https://github.com/FasterXML/jackson-annotations/issueshttps://github.com/FasterXML/jackson-annotations The Apache Software Foundation org.apache.velocity velocity-engine-core 2.3 Apache Velocity is a general purpose template engine. required e761e6088b946b42289c5d676a515581 e2133b723d0e42be74880d34de6bf6538ea7f915 b086cee8fd8183e240b4afcf54fe38ec33dd8eb0da414636e5bf7aa4d9856629 ec8ccd36d6cefd4325f39d6c215f4177900b7c0fb1e4e96b3c0d9391c033df4d5fb83b7899530f32738afa78c193d4dae700cd5c674954a34e7cf627a4fa1204 5aa3f60e17efb01e2bae1d1169da36a55d7b3ede1d90b1f3e1d3984d2b78fa4bbbba2772ac404e9dae7b37812df11f13 5bc7a76a774653896a0b789726a581de3fbcfa40875945e514f5d8c2e972aeb43ffb2ce5c0da6d4a65b2ef442fc56afc 6ff993b508c05170c3dbd65f6080edf5cdb8b8fd2fa7b94f7d64f20a79d3de9c c44791f0b9e6b3d28717ca56582e2c55bff208aa5bc7bc2cc91003afde0ec0111a55d585c9f09717747ee7e78a688e894b7962fb55a56eaf57413a9c365c567b Apache-2.0 pkg:maven/org.apache.velocity/velocity-engine-core@2.3?type=jar http://velocity.apache.org/engine/devel/velocity-engine-core/https://repository.apache.org/service/local/staging/deploy/maven2https://issues.apache.org/jira/browse/VELOCITYhttps://lists.apache.org/list.html?general@velocity.apache.orghttps://gitbox.apache.org/repos/asf?p=velocity-engine.git/velocity-engine-core The Apache Software Foundation org.apache.commons commons-lang3 3.11 Apache Commons Lang, a package of Java utility classes for the classes that are in java.lang's hierarchy, or are considered to be so standard as to justify existence in java.lang. required c592f49f703f9b3ab25556559b1ff379 68e9a6adf7cf8eb7e9d31bbc554c7c75eeaac568 4ee380259c068d1dbe9e84ab52186f2acd65de067ec09beff731fca1697fdb16 c1f6b5cb9ac47cfb612423a71b347568f3697cf88018b5808678be5234c50b22888db23cb833b7d8d458d39707ab9e4d839107d1d3306de2e4e422010c95180f 80e7831b2b08150b5d05d53b29f1904b298e9194fd02c61989755da04fa2f20e44f6a0f29d13bfde33ce1dbefc7afc52 a62ff933793a247d9dea0b975995bfc0ecf8c6d2fcf4e38fae09b49bcd75428acaca8bc1fa46202a5e9ab6762bd352d5 e2b825a32979ce00595cb3f7dd5cf407cb179fd93f7786a061bf1c13762c4779 833272210e60e151749bb86ed2ac29b1799974f925f1eb392fbbc6a11e1fc8de1bb2a57ef86777c0095ea13834af7774286b5364b1d24000622a9ece96bedc7f Apache-2.0 pkg:maven/org.apache.commons/commons-lang3@3.11?type=jar https://commons.apache.org/proper/commons-lang/https://builds.apache.org/https://repository.apache.org/service/local/staging/deploy/maven2https://issues.apache.org/jira/browse/LANGhttps://mail-archives.apache.org/mod_mbox/commons-user/https://gitbox.apache.org/repos/asf?p=commons-lang.git GlassFish Community javax.servlet javax.servlet-api 4.0.1 Java.net - The Source for Java Technology Collaboration required b80414033bf3397de334b95e892a2f44 a27082684a2ff0bf397666c3943496c44541d1ca 83a03dd877d3674576f0da7b90755c8524af099ccf0607fc61aa971535ad7c60 763dec9801f647b1a45e492eb2a67f6a60fc608bef4738eb7b1a92d93f1f6db02b32f4c6553d4557c320dfc25c0ea0b9854c59e793262b6ca453c71caf05ef38 9f4522458bdb1c7cbc0e88271d1e4326193c8e4d422ef8b75c3dcadf0bf86a91389890ab2d25a8cc6cf276f625475cd3 be8a209d1912492e86e611fc42e59512a89c464aa78cea3c5badd3290a6564d8bde55933a7c5d8113d9acc848a382751 f94dd8bf0908ca77e5213d166035a427e658ff4a59d35daa7e281c5fb2fc390a 3abbd3cad570557be24b69f700c217c7c8e1736d4db74f3ac28dd96b80822ac1c7631b3a9a15b9738754a3d68e4e7f13b732820eb8b8e8e329690ec2a23c621c (CDDL-1.0 OR GPL-2.0-with-classpath-exception) pkg:maven/javax.servlet/javax.servlet-api@4.0.1?type=jar https://javaee.github.io/servlet-spec/https://maven.java.net/service/local/staging/deploy/maven2/https://github.com/javaee/servlet-spec/issuesservlet-spec@javaee.groups.iohttps://github.com/javaee/servlet-spec GlassFish Community javax.annotation javax.annotation-api 1.3.2 Common Annotations for the JavaTM Platform API required 2ab1973eefffaa2aeec47d50b9e40b9d 934c04d3cfef185a8008e7bf34331b79730a9d43 e04ba5195bcd555dc95650f7cc614d151e4bcd52d29a10b8aa2197f3ab89ab9b 679cf44c3b9d635b43ed122a555d570292c3f0937c33871c40438a1a53e2058c80578694ec9466eac9e280e19bfb7a95b261594cc4c1161c85dc97df6235e553 fc0058495e54efb6e05a34e3ff422e7c8347bcc77d6d9b87e9253424968dee6ef6a215c318d7e54f8705276be81f0682 ed6464b715de6ced0d9981a3f28140824946a4b7a02ffaff6116c833bb36e8f77a6282ce63c0d82cfe841d4fd6916891 ecfc9bef24ae28cf94c6775ecf6e2086d90a25d8d5476a4f6bb24001601b6cd0 f2b333527faedf504f60aa70a3d491972fa76f7e61e6351027f74613f41001157656824fe312b6e1df6dc4979704fe2a745b618d5368a97fe0bf8749739de9e2 (CDDL-1.0 OR GPL-2.0-with-classpath-exception) pkg:maven/javax.annotation/javax.annotation-api@1.3.2?type=jar http://jcp.org/en/jsr/detail?id=250https://maven.java.net/service/local/staging/deploy/maven2/https://github.com/javaee/javax.annotation/issuesjavaee-spec@javaee.groups.iohttps://github.com/javaee/javax.annotation xerial.org org.xerial.snappy snappy-java 1.1.10.5 snappy-java: A fast compression/decompression library required a52ffcdbbe525b486237a7098e5c5ff7 ac605269f3598506196e469f1fb0d7ed5c55059e 0f3f1857ed33116583f480b4df5c0218836c47bfbc9c6221c0d73f356decf37b 36c288aa84017b52362a49a20d1702151a16b9f58518b6877f11122941a549d94fab8d515f7f1ad6384fb94be569328abf862edaf970c10a16832498dfda853b 693a542ca2471dec4da5fe582563aff1bf5238e1a8d1a1f79cd8138334f94f1112094fbd270b1637d983c9290084a6e1 41cbbb20b4bc0bd9a80521904568335fb131602a6931783f5bf6a1c8287b8ccd92c8169b8bb2399d27208fc067ef2321 38dc41c5a0d827c58e1409a63e902d0568a03d67cdb99708ccc63921000ddc55 b07d178cc94f6385d5f09d7730d2dd161c6f7d6815ae779e742421c0c1fb92043c8ec8ce5ee67660760f5287bd959eba1028924257a6ff36fb5439d8f81bd049 Apache-2.0 https://www.apache.org/licenses/LICENSE-2.0 pkg:maven/org.xerial.snappy/snappy-java@1.1.10.5?type=jar https://github.com/xerial/snappy-javahttps://github.com/xerial/snappy-java org.tukaani xz 1.9 XZ data compression required 57c2fbfeb55e307ccae52e5322082e02 1ea4bec1a921180164852c65006d928617bd2caf 211b306cfc44f8f96df3a0a3ddaf75ba8c5289eed77d60d72f889bb855f535e5 a4362db234d4e83683e90f5baf90c82107450cc4404acab96e3fab14b8a3d4588a19722171d32f27d18463682a6994cad9af0b1065c954e3a77ea7bdcf586bac aa30349b094723369908369a18e2cb5beb5b7ca0b24b4d56c2f5725fae152220f6526466672b22bfec939e2e0622a01d b3e1fee7784188df5e1931c9e8137ac0e20e63f66f93e7f938a448fc0b3adb4be5205c7a5f1835007e233fee2696fc2c 92eff603ed0aab557e1a45e17a74e80d8ec656b5f137197b23c429c903fa448f b290f92958f8cd91705331d8411140c23957ab8b568fbe19a70f4f1dc97eddc13d3a200df28a02ab5911ce18f546c33f720878be0f727edac839a6e63ee66ece Public Domain pkg:maven/org.tukaani/xz@1.9?type=jar https://tukaani.org/xz/java.htmlhttps://git.tukaani.org/?p=xz-java.git com.github.luben com.github.luben zstd-jni 1.5.5-5 JNI bindings for Zstd native library that provides fast and high compression lossless algorithm for Java and all JVM languages. required 0e164757192c4dcf3c524f6cabeb8494 74ffdc5f140080adacf5278287aadd950179f848 c78d4e139894f555d956d12fbfcf3d45af751d4b2f183880ed5f99b69b284416 00e9e20c68e74a890be0089b6f10a677876a2ecfc6b1b98f449bcf13d0fa91d4c68c7cc3dc7fec5fc575053d778517af52e0a7ffcb1c26d8e7bc02ed304edda5 fec680d74af046105be755c727f04cc753872820405fee71e1c7c27cd0ef18c77f629925e379f8b54f6daafada85b809 bf25464025522c6555d14fa7c05dbec1316aba69b5c2cf0b1a2ae334c47289b23a176cab853977d023b9c706ef9034b0 68ef7b45e04c61c16991172e9dc67273c466729b1e9969aa2c3cd7bd010f1ece 050d8a505a924a31da1190c76c0b70c4fbe9589c907c94a5ad08469ec5bb7f13a10ca7f78fd5f96799a1561f793d8853452ebd638b68b5936da0f300bd4a009e BSD-2-Clause pkg:maven/com.github.luben/zstd-jni@1.5.5-5?type=jar https://github.com/luben/zstd-jni QOS.ch org.slf4j slf4j-api 1.7.36 The slf4j API required 872da51f5de7f3923da4de871d57fd85 6c62681a2f655b49963a5983b8b0950a6120ae14 d3ef575e3e4979678dc01bf1dcce51021493b4d11fb7f1be8ad982877c16a1c0 f9b033fc019a44f98b16048da7e2b59edd4a6a527ba60e358f65ab88e0afae03a9340f1b3e8a543d49fa542290f499c5594259affa1ff3e6e7bf3b428d4c610b 2b14ad035877087157e379d3277dcdcd79e58d6bdb147c47d29e377d75ce53ad42cafbf22f5fb7827c7e946ff4876b9a 3bc3110dafb8d5be16a39f3b2671a466463cd99eb39610c0e4719a7bf2d928f2ea213c734887c6926a07c4cca7769e4b ba2608179fcf46e2291a90b9cbb4aa30d718e481f59c350cc21c73b88d826881 14c4edcd19702ef607d78826839d8a6d3a39157df54b89a801d3d3cbbe1307131a77671b041c761122730fb1387888c5ec2e46bdd80e1cb07f8f144676441824 MIT https://opensource.org/licenses/MIT pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar http://www.slf4j.orghttps://oss.sonatype.org/service/local/staging/deploy/maven2/https://github.com/qos-ch/slf4j/slf4j-api