<?xml version="1.0" encoding="UTF-8"?>
<bom serialNumber="urn:uuid:014f229c-3671-3a8d-8885-8de5f18cbebf" version="1" xmlns="http://cyclonedx.org/schema/bom/1.6">
  <metadata>
    <timestamp>2026-04-07T05:40:29Z</timestamp>
    <lifecycles>
      <lifecycle>
        <phase>build</phase>
      </lifecycle>
    </lifecycles>
    <tools>
      <components>
        <component type="library">
          <author>OWASP Foundation</author>
          <group>org.cyclonedx</group>
          <name>cyclonedx-maven-plugin</name>
          <version>2.9.1</version>
          <description>CycloneDX Maven plugin</description>
          <hashes>
            <hash alg="MD5">9c7a565cf28cce58557d0c621c5ea4b1</hash>
            <hash alg="SHA-1">be882d5a22050bfa9d19090b1420c188617d0e1c</hash>
            <hash alg="SHA-256">698e0f37184a5b28c245c4065fd036dfce253b52f82fbb7113d81d36326cc249</hash>
            <hash alg="SHA-512">c0f0b11026858166f872a2eb54719492e5cecaa0bc9cd6b30b3ecb4a174eed220f4a1b5829d18d6734128e778d3cb3db7ffed177c92866133129cb29081814a0</hash>
            <hash alg="SHA-384">d80964707dfe5caca8c70521d5066f57589304c0a657e6fbc7c0614ea0fc7b3b3dbe7778361eee0f54ba111e9cb0ffcb</hash>
            <hash alg="SHA3-384">80bc3a275d9514bc457461ff52a72add8c7ecbbc01d8912efce57139016c544ee776981851be0a58fa977ab4221f703f</hash>
            <hash alg="SHA3-256">142317d6f245390f4fd2d0c100b16281b8dfc5c0c2cff86943bdcc97039cb699</hash>
            <hash alg="SHA3-512">af0fb9137c90b65d1a07f72e4d51ae509956cdb8800f35c961b037cdda1fe4a14ce3b496cef71ba85f1621affcfe29cd42704ae4191ff0b090a9602087c8997b</hash>
          </hashes>
        </component>
      </components>
    </tools>
    <component type="library" bom-ref="pkg:maven/org.docx4j/docx4j-openxml-objects-sml@11.5.12?type=jar">
      <group>org.docx4j</group>
      <name>docx4j-openxml-objects-sml</name>
      <version>11.5.12</version>
      <description>Our JAXB representation of OpenXML Spreadsheet Markup Language (sml)</description>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.docx4j/docx4j-openxml-objects-sml@11.5.12?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://www.docx4java.org/docx4j-openxml-objects-sml/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/plutext/docx4j/docx4j-openxml-objects-sml</url>
        </reference>
      </externalReferences>
    </component>
    <properties>
      <property name="maven.goal">makeBom</property>
      <property name="maven.scopes">compile,provided,runtime,system</property>
    </properties>
  </metadata>
  <components>
    <component type="library" bom-ref="pkg:maven/org.docx4j/docx4j-openxml-objects@11.5.12?type=jar">
      <group>org.docx4j</group>
      <name>docx4j-openxml-objects</name>
      <version>11.5.12</version>
      <description>Our JAXB representation of OpenXML, except for pml and sml (handled separately)</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">f2bb09ddea05431d52c99bb64dc37dd8</hash>
        <hash alg="SHA-1">1486ccd85955635770c57a155710628a1fa53848</hash>
        <hash alg="SHA-256">e480d8dd0a03ed4e8d23ee574014500bb80787892ef7a070bb88a0a5e04c8ffa</hash>
        <hash alg="SHA-512">3869dd4e4b9ea63e7e1bf57c0de247f5c7515f8a1093dd30b384b21d67887b3c52f5f693626690138fffac68480a45c1f949d2275763fe98e78f5539076979d5</hash>
        <hash alg="SHA-384">9cd8d167ca3473badfca6e6d9fb9ab9aaf1a8ed71dc14cc56924639d6fd68ac81daf04cb9c4ea5fba73b920bdeca21b5</hash>
        <hash alg="SHA3-384">5ff2c9fe7e9b85d2aeeb697fe9cbec784d728bc3d304ef1796f089b1b677100b97f59cdd8ac9384aa9522c5257bd57a3</hash>
        <hash alg="SHA3-256">bbdd3ba1286167788021fa6465e747ffbb225d5c854f7980e93508cd98f6b63a</hash>
        <hash alg="SHA3-512">a8b298d0b42d23afca6565b29291fe6ef045425e81e860b68ee865e044ec28e51e8bfd1a3841ad8a48c779d7c476f0ded1a624a27e935bfaa4e1e23635f87a3f</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.docx4j/docx4j-openxml-objects@11.5.12?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://www.docx4java.org/docx4j-openxml-objects/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/plutext/docx4j/docx4j-openxml-objects</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@4.0.5?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>jakarta.xml.bind</group>
      <name>jakarta.xml.bind-api</name>
      <version>4.0.5</version>
      <description>Jakarta XML Binding API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">935053b2c792f34c7ea3a238ea96f3ac</hash>
        <hash alg="SHA-1">161811f36cad3c65991502e80317f2f6703361df</hash>
        <hash alg="SHA-256">5e489b6c874c4119e003ff1403db523ee3a8959ec499f3de29e77245efccf216</hash>
        <hash alg="SHA-512">3f3e522bd716ab6842ba2eed8bd44fc7d859ca5a3798e5adf2447eabde1c5d3b74b6f58d217d6cd772cbb034e4f003d9f9e10fafa15f4e108ea802548d1e5044</hash>
        <hash alg="SHA-384">0030a82d345127efdf52273c7ed5939deb67163821d73ba6050f51d5b6d918539c43a8c1e04594afce16e0b47b4576aa</hash>
        <hash alg="SHA3-384">9161e41f583009e64c236660b561acb1c04e3f46adde5383cb0006a31a71884c6580548ba583530460d04801507447a9</hash>
        <hash alg="SHA3-256">f5490e1ab440817067b53e3c381c7d6eb4fa86d8eeed297f89ae1b7e5f31424a</hash>
        <hash alg="SHA3-512">4f4d18ab8edf47e5debf05fdd52f92f2d18d4089e7d705300830be0964bba93c6ff810e308bad2f5e4875e5588cab171221027c4704315388ca4668b195d25eb</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@4.0.5?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/jakartaee/jaxb-api/jakarta.xml.bind-api</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/jakartaee/jaxb-api/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://dev.eclipse.org/mhonarc/lists/jaxb-dev</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/jakartaee/jaxb-api.git/jakarta.xml.bind-api</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/jakarta.activation/jakarta.activation-api@2.1.4?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>jakarta.activation</group>
      <name>jakarta.activation-api</name>
      <version>2.1.4</version>
      <description>Jakarta Activation API 2.1 Specification</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">bc1602eee7bc61a0b86f14bbbb0cc794</hash>
        <hash alg="SHA-1">9e5c2a0d75dde71a0bedc4dbdbe47b78a5dc50f8</hash>
        <hash alg="SHA-256">c9db52100ce6c8aac95cc39075f95720d2e561b11f8051b81c121ad4effd7004</hash>
        <hash alg="SHA-512">cd078772acb5ebf1f90f7c737f372b7e86a5ce31b995ed759526a9eee73fd89f97e506f9a208ba3b73e757cb78830b829733411cf7989680aea2272abba7323b</hash>
        <hash alg="SHA-384">0b9a413939a024f562c15e60b11f85c336620987441fb053645499704960464d01ae83e9989b43ae6cd4f2164eb0cebe</hash>
        <hash alg="SHA3-384">d2fa51a3e18ced20f097ae019982cbd945942103df59327f319c64eeef1c109d6262d1de332fa2b6dfde41c98a9e7b2c</hash>
        <hash alg="SHA3-256">b259d17f48ae1f357a28b9c33b66fbcae50eaa86d61ac3c8cbc5184e7914d2d5</hash>
        <hash alg="SHA3-512">aae6a55fe1fa397b13b1bcb5a05ccc3e4e87049865233482dc09a8ab2af3eb128646394e3ef529609031e7c6c2215c91ffd27de06cd97ca9ae7e07bd4b9595bd</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/jakarta.activation/jakarta.activation-api@2.1.4?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/jakartaee/jaf-api</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/jakartaee/jaf-api/issues/</url>
        </reference>
        <reference type="mailing-list">
          <url>https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/jakartaee/jaf-api</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar">
      <publisher>QOS.ch</publisher>
      <group>org.slf4j</group>
      <name>slf4j-api</name>
      <version>2.0.17</version>
      <description>The slf4j API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">b6480d114a23683498ac3f746f959d2f</hash>
        <hash alg="SHA-1">d9e58ac9c7779ba3bf8142aff6c830617a7fe60f</hash>
        <hash alg="SHA-256">7b751d952061954d5abfed7181c1f645d336091b679891591d63329c622eb832</hash>
        <hash alg="SHA-512">9a3e79db6666a6096a3021bb2e1d918f30f589d8de51d6b600f8ebd92515a510ae2d8f87919cc2dfa8365d64f10194cac8dfa0fb950160eef0e9da06f6caaeb9</hash>
        <hash alg="SHA-384">6ea24f814a9b6ece428cfd0535e2f3b8927005745ef61006b50fdb5a90126ee5ea05650155382b3b755c5bce38ef3944</hash>
        <hash alg="SHA3-384">9b1015052f0ec43f9be09764e131834157599611cb52f6fe591c4ac6a8ab4817518f2a4b8871e5e738c8678e93af5557</hash>
        <hash alg="SHA3-256">00559b4f4066b4917ba4fe2a6f23111eaeada321112d030910d218ced9084b5e</hash>
        <hash alg="SHA3-512">9579c2f7e7516e177c2d493ccc9eb8150978cf19f6f09b28d116f6935239fd56dc6af2b62b3336f79b0b462445550cd1fb5377a07001a6f44aaab6a32fa2fa47</hash>
      </hashes>
      <licenses>
        <license>
          <id>MIT</id>
          <url>https://opensource.org/license/mit/</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://www.slf4j.org</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/qos-ch/slf4j/slf4j-parent/slf4j-api</url>
        </reference>
      </externalReferences>
    </component>
  </components>
  <dependencies>
    <dependency ref="pkg:maven/org.docx4j/docx4j-openxml-objects-sml@11.5.12?type=jar">
      <dependency ref="pkg:maven/org.docx4j/docx4j-openxml-objects@11.5.12?type=jar"/>
      <dependency ref="pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@4.0.5?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.docx4j/docx4j-openxml-objects@11.5.12?type=jar">
      <dependency ref="pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@4.0.5?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@4.0.5?type=jar">
      <dependency ref="pkg:maven/jakarta.activation/jakarta.activation-api@2.1.4?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/jakarta.activation/jakarta.activation-api@2.1.4?type=jar"/>
    <dependency ref="pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar"/>
  </dependencies>
</bom>
