{
  "bomFormat" : "CycloneDX",
  "specVersion" : "1.6",
  "serialNumber" : "urn:uuid:014f229c-3671-3a8d-8885-8de5f18cbebf",
  "version" : 1,
  "metadata" : {
    "timestamp" : "2026-04-07T05:40:29Z",
    "lifecycles" : [
      {
        "phase" : "build"
      }
    ],
    "tools" : {
      "components" : [
        {
          "type" : "library",
          "author" : "OWASP Foundation",
          "group" : "org.cyclonedx",
          "name" : "cyclonedx-maven-plugin",
          "version" : "2.9.1",
          "description" : "CycloneDX Maven plugin",
          "hashes" : [
            {
              "alg" : "MD5",
              "content" : "9c7a565cf28cce58557d0c621c5ea4b1"
            },
            {
              "alg" : "SHA-1",
              "content" : "be882d5a22050bfa9d19090b1420c188617d0e1c"
            },
            {
              "alg" : "SHA-256",
              "content" : "698e0f37184a5b28c245c4065fd036dfce253b52f82fbb7113d81d36326cc249"
            },
            {
              "alg" : "SHA-512",
              "content" : "c0f0b11026858166f872a2eb54719492e5cecaa0bc9cd6b30b3ecb4a174eed220f4a1b5829d18d6734128e778d3cb3db7ffed177c92866133129cb29081814a0"
            },
            {
              "alg" : "SHA-384",
              "content" : "d80964707dfe5caca8c70521d5066f57589304c0a657e6fbc7c0614ea0fc7b3b3dbe7778361eee0f54ba111e9cb0ffcb"
            },
            {
              "alg" : "SHA3-384",
              "content" : "80bc3a275d9514bc457461ff52a72add8c7ecbbc01d8912efce57139016c544ee776981851be0a58fa977ab4221f703f"
            },
            {
              "alg" : "SHA3-256",
              "content" : "142317d6f245390f4fd2d0c100b16281b8dfc5c0c2cff86943bdcc97039cb699"
            },
            {
              "alg" : "SHA3-512",
              "content" : "af0fb9137c90b65d1a07f72e4d51ae509956cdb8800f35c961b037cdda1fe4a14ce3b496cef71ba85f1621affcfe29cd42704ae4191ff0b090a9602087c8997b"
            }
          ]
        }
      ]
    },
    "component" : {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.docx4j/docx4j-openxml-objects-sml@11.5.12?type=jar",
      "group" : "org.docx4j",
      "name" : "docx4j-openxml-objects-sml",
      "version" : "11.5.12",
      "description" : "Our JAXB representation of OpenXML Spreadsheet Markup Language (sml)",
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.docx4j/docx4j-openxml-objects-sml@11.5.12?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.docx4java.org/docx4j-openxml-objects-sml/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/plutext/docx4j/docx4j-openxml-objects-sml"
        }
      ]
    },
    "properties" : [
      {
        "name" : "maven.goal",
        "value" : "makeBom"
      },
      {
        "name" : "maven.scopes",
        "value" : "compile,provided,runtime,system"
      }
    ]
  },
  "components" : [
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.docx4j/docx4j-openxml-objects@11.5.12?type=jar",
      "group" : "org.docx4j",
      "name" : "docx4j-openxml-objects",
      "version" : "11.5.12",
      "description" : "Our JAXB representation of OpenXML, except for pml and sml (handled separately)",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f2bb09ddea05431d52c99bb64dc37dd8"
        },
        {
          "alg" : "SHA-1",
          "content" : "1486ccd85955635770c57a155710628a1fa53848"
        },
        {
          "alg" : "SHA-256",
          "content" : "e480d8dd0a03ed4e8d23ee574014500bb80787892ef7a070bb88a0a5e04c8ffa"
        },
        {
          "alg" : "SHA-512",
          "content" : "3869dd4e4b9ea63e7e1bf57c0de247f5c7515f8a1093dd30b384b21d67887b3c52f5f693626690138fffac68480a45c1f949d2275763fe98e78f5539076979d5"
        },
        {
          "alg" : "SHA-384",
          "content" : "9cd8d167ca3473badfca6e6d9fb9ab9aaf1a8ed71dc14cc56924639d6fd68ac81daf04cb9c4ea5fba73b920bdeca21b5"
        },
        {
          "alg" : "SHA3-384",
          "content" : "5ff2c9fe7e9b85d2aeeb697fe9cbec784d728bc3d304ef1796f089b1b677100b97f59cdd8ac9384aa9522c5257bd57a3"
        },
        {
          "alg" : "SHA3-256",
          "content" : "bbdd3ba1286167788021fa6465e747ffbb225d5c854f7980e93508cd98f6b63a"
        },
        {
          "alg" : "SHA3-512",
          "content" : "a8b298d0b42d23afca6565b29291fe6ef045425e81e860b68ee865e044ec28e51e8bfd1a3841ad8a48c779d7c476f0ded1a624a27e935bfaa4e1e23635f87a3f"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.docx4j/docx4j-openxml-objects@11.5.12?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.docx4java.org/docx4j-openxml-objects/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/plutext/docx4j/docx4j-openxml-objects"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@4.0.5?type=jar",
      "publisher" : "Eclipse Foundation",
      "group" : "jakarta.xml.bind",
      "name" : "jakarta.xml.bind-api",
      "version" : "4.0.5",
      "description" : "Jakarta XML Binding API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "935053b2c792f34c7ea3a238ea96f3ac"
        },
        {
          "alg" : "SHA-1",
          "content" : "161811f36cad3c65991502e80317f2f6703361df"
        },
        {
          "alg" : "SHA-256",
          "content" : "5e489b6c874c4119e003ff1403db523ee3a8959ec499f3de29e77245efccf216"
        },
        {
          "alg" : "SHA-512",
          "content" : "3f3e522bd716ab6842ba2eed8bd44fc7d859ca5a3798e5adf2447eabde1c5d3b74b6f58d217d6cd772cbb034e4f003d9f9e10fafa15f4e108ea802548d1e5044"
        },
        {
          "alg" : "SHA-384",
          "content" : "0030a82d345127efdf52273c7ed5939deb67163821d73ba6050f51d5b6d918539c43a8c1e04594afce16e0b47b4576aa"
        },
        {
          "alg" : "SHA3-384",
          "content" : "9161e41f583009e64c236660b561acb1c04e3f46adde5383cb0006a31a71884c6580548ba583530460d04801507447a9"
        },
        {
          "alg" : "SHA3-256",
          "content" : "f5490e1ab440817067b53e3c381c7d6eb4fa86d8eeed297f89ae1b7e5f31424a"
        },
        {
          "alg" : "SHA3-512",
          "content" : "4f4d18ab8edf47e5debf05fdd52f92f2d18d4089e7d705300830be0964bba93c6ff810e308bad2f5e4875e5588cab171221027c4704315388ca4668b195d25eb"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@4.0.5?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/jakartaee/jaxb-api/jakarta.xml.bind-api"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/jakartaee/jaxb-api/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/jaxb-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/jakartaee/jaxb-api.git/jakarta.xml.bind-api"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/jakarta.activation/jakarta.activation-api@2.1.4?type=jar",
      "publisher" : "Eclipse Foundation",
      "group" : "jakarta.activation",
      "name" : "jakarta.activation-api",
      "version" : "2.1.4",
      "description" : "Jakarta Activation API 2.1 Specification",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "bc1602eee7bc61a0b86f14bbbb0cc794"
        },
        {
          "alg" : "SHA-1",
          "content" : "9e5c2a0d75dde71a0bedc4dbdbe47b78a5dc50f8"
        },
        {
          "alg" : "SHA-256",
          "content" : "c9db52100ce6c8aac95cc39075f95720d2e561b11f8051b81c121ad4effd7004"
        },
        {
          "alg" : "SHA-512",
          "content" : "cd078772acb5ebf1f90f7c737f372b7e86a5ce31b995ed759526a9eee73fd89f97e506f9a208ba3b73e757cb78830b829733411cf7989680aea2272abba7323b"
        },
        {
          "alg" : "SHA-384",
          "content" : "0b9a413939a024f562c15e60b11f85c336620987441fb053645499704960464d01ae83e9989b43ae6cd4f2164eb0cebe"
        },
        {
          "alg" : "SHA3-384",
          "content" : "d2fa51a3e18ced20f097ae019982cbd945942103df59327f319c64eeef1c109d6262d1de332fa2b6dfde41c98a9e7b2c"
        },
        {
          "alg" : "SHA3-256",
          "content" : "b259d17f48ae1f357a28b9c33b66fbcae50eaa86d61ac3c8cbc5184e7914d2d5"
        },
        {
          "alg" : "SHA3-512",
          "content" : "aae6a55fe1fa397b13b1bcb5a05ccc3e4e87049865233482dc09a8ab2af3eb128646394e3ef529609031e7c6c2215c91ffd27de06cd97ca9ae7e07bd4b9595bd"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/jakarta.activation/jakarta.activation-api@2.1.4?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/jakartaee/jaf-api"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/jakartaee/jaf-api/issues/"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/jakartaee/jaf-api"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar",
      "publisher" : "QOS.ch",
      "group" : "org.slf4j",
      "name" : "slf4j-api",
      "version" : "2.0.17",
      "description" : "The slf4j API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "b6480d114a23683498ac3f746f959d2f"
        },
        {
          "alg" : "SHA-1",
          "content" : "d9e58ac9c7779ba3bf8142aff6c830617a7fe60f"
        },
        {
          "alg" : "SHA-256",
          "content" : "7b751d952061954d5abfed7181c1f645d336091b679891591d63329c622eb832"
        },
        {
          "alg" : "SHA-512",
          "content" : "9a3e79db6666a6096a3021bb2e1d918f30f589d8de51d6b600f8ebd92515a510ae2d8f87919cc2dfa8365d64f10194cac8dfa0fb950160eef0e9da06f6caaeb9"
        },
        {
          "alg" : "SHA-384",
          "content" : "6ea24f814a9b6ece428cfd0535e2f3b8927005745ef61006b50fdb5a90126ee5ea05650155382b3b755c5bce38ef3944"
        },
        {
          "alg" : "SHA3-384",
          "content" : "9b1015052f0ec43f9be09764e131834157599611cb52f6fe591c4ac6a8ab4817518f2a4b8871e5e738c8678e93af5557"
        },
        {
          "alg" : "SHA3-256",
          "content" : "00559b4f4066b4917ba4fe2a6f23111eaeada321112d030910d218ced9084b5e"
        },
        {
          "alg" : "SHA3-512",
          "content" : "9579c2f7e7516e177c2d493ccc9eb8150978cf19f6f09b28d116f6935239fd56dc6af2b62b3336f79b0b462445550cd1fb5377a07001a6f44aaab6a32fa2fa47"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/license/mit/"
          }
        }
      ],
      "purl" : "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.slf4j.org"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/qos-ch/slf4j/slf4j-parent/slf4j-api"
        }
      ]
    }
  ],
  "dependencies" : [
    {
      "ref" : "pkg:maven/org.docx4j/docx4j-openxml-objects-sml@11.5.12?type=jar",
      "dependsOn" : [
        "pkg:maven/org.docx4j/docx4j-openxml-objects@11.5.12?type=jar",
        "pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@4.0.5?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.docx4j/docx4j-openxml-objects@11.5.12?type=jar",
      "dependsOn" : [
        "pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@4.0.5?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@4.0.5?type=jar",
      "dependsOn" : [
        "pkg:maven/jakarta.activation/jakarta.activation-api@2.1.4?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/jakarta.activation/jakarta.activation-api@2.1.4?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar",
      "dependsOn" : [ ]
    }
  ]
}