<?xml version="1.0" encoding="UTF-8"?>
<bom serialNumber="urn:uuid:230153d4-6ba3-3508-b37d-f077ee3eb4ee" version="1" xmlns="http://cyclonedx.org/schema/bom/1.6">
  <metadata>
    <timestamp>2026-05-13T04:44:58Z</timestamp>
    <lifecycles>
      <lifecycle>
        <phase>build</phase>
      </lifecycle>
    </lifecycles>
    <tools>
      <components>
        <component type="library">
          <author>OWASP Foundation</author>
          <group>org.cyclonedx</group>
          <name>cyclonedx-maven-plugin</name>
          <version>2.9.1</version>
          <description>CycloneDX Maven plugin</description>
          <hashes>
            <hash alg="MD5">9c7a565cf28cce58557d0c621c5ea4b1</hash>
            <hash alg="SHA-1">be882d5a22050bfa9d19090b1420c188617d0e1c</hash>
            <hash alg="SHA-256">698e0f37184a5b28c245c4065fd036dfce253b52f82fbb7113d81d36326cc249</hash>
            <hash alg="SHA-512">c0f0b11026858166f872a2eb54719492e5cecaa0bc9cd6b30b3ecb4a174eed220f4a1b5829d18d6734128e778d3cb3db7ffed177c92866133129cb29081814a0</hash>
            <hash alg="SHA-384">d80964707dfe5caca8c70521d5066f57589304c0a657e6fbc7c0614ea0fc7b3b3dbe7778361eee0f54ba111e9cb0ffcb</hash>
            <hash alg="SHA3-384">80bc3a275d9514bc457461ff52a72add8c7ecbbc01d8912efce57139016c544ee776981851be0a58fa977ab4221f703f</hash>
            <hash alg="SHA3-256">142317d6f245390f4fd2d0c100b16281b8dfc5c0c2cff86943bdcc97039cb699</hash>
            <hash alg="SHA3-512">af0fb9137c90b65d1a07f72e4d51ae509956cdb8800f35c961b037cdda1fe4a14ce3b496cef71ba85f1621affcfe29cd42704ae4191ff0b090a9602087c8997b</hash>
          </hashes>
        </component>
      </components>
    </tools>
    <component type="library" bom-ref="pkg:maven/org.docx4j/docx4j-openxml-objects-sml@11.5.13?type=jar">
      <group>org.docx4j</group>
      <name>docx4j-openxml-objects-sml</name>
      <version>11.5.13</version>
      <description>Our JAXB representation of OpenXML Spreadsheet Markup Language (sml)</description>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.docx4j/docx4j-openxml-objects-sml@11.5.13?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://www.docx4java.org/docx4j-openxml-objects-sml/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/plutext/docx4j/docx4j-openxml-objects-sml</url>
        </reference>
      </externalReferences>
    </component>
    <properties>
      <property name="maven.goal">makeBom</property>
      <property name="maven.scopes">compile,provided,runtime,system</property>
    </properties>
  </metadata>
  <components>
    <component type="library" bom-ref="pkg:maven/org.docx4j/docx4j-openxml-objects@11.5.13?type=jar">
      <group>org.docx4j</group>
      <name>docx4j-openxml-objects</name>
      <version>11.5.13</version>
      <description>Our JAXB representation of OpenXML, except for pml and sml (handled separately)</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">e3faca187ca7530d56725254615ef7a1</hash>
        <hash alg="SHA-1">a540467d82b1fc41ee79c6d608a30cec6b20cdba</hash>
        <hash alg="SHA-256">1fd6384de61d2cd972c08f3a799a65fe293b81e2b1cda3541d54cf47f88dfd7c</hash>
        <hash alg="SHA-512">a0eef3df5fbd1bd6387b6bddd1a888d73c31a362cf9dcba380e2505734b33efb1b0611434c843ba4d9c83d0959778c407a261ca902f8cb8e5143b5755ae8833c</hash>
        <hash alg="SHA-384">ead3831586f07d558a3a7ae4d12eeb11719fe704d90d594032422ac6b759c06f80b8a753e02fdc802c9e7805adc45e19</hash>
        <hash alg="SHA3-384">869b17ace7065a4f40b3d447eb9676e200fba1e17b5e120f7d4267e1e3ef4c9e0999e290497b2bbe7891dc53ad87331e</hash>
        <hash alg="SHA3-256">395fd8ebd594d086b226e72c5df85890755a2cacd31f36eb1858fae403706f22</hash>
        <hash alg="SHA3-512">8855974e9aeb3e04d57bd749d1333c10512f3030ec36bf54e6125d6a443b74c0845f4340e6cf8df6f5aed1e58337804262b964047eabd250ab9f2d731d3a3b71</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.docx4j/docx4j-openxml-objects@11.5.13?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://www.docx4java.org/docx4j-openxml-objects/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/plutext/docx4j/docx4j-openxml-objects</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@4.0.5?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>jakarta.xml.bind</group>
      <name>jakarta.xml.bind-api</name>
      <version>4.0.5</version>
      <description>Jakarta XML Binding API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">935053b2c792f34c7ea3a238ea96f3ac</hash>
        <hash alg="SHA-1">161811f36cad3c65991502e80317f2f6703361df</hash>
        <hash alg="SHA-256">5e489b6c874c4119e003ff1403db523ee3a8959ec499f3de29e77245efccf216</hash>
        <hash alg="SHA-512">3f3e522bd716ab6842ba2eed8bd44fc7d859ca5a3798e5adf2447eabde1c5d3b74b6f58d217d6cd772cbb034e4f003d9f9e10fafa15f4e108ea802548d1e5044</hash>
        <hash alg="SHA-384">0030a82d345127efdf52273c7ed5939deb67163821d73ba6050f51d5b6d918539c43a8c1e04594afce16e0b47b4576aa</hash>
        <hash alg="SHA3-384">9161e41f583009e64c236660b561acb1c04e3f46adde5383cb0006a31a71884c6580548ba583530460d04801507447a9</hash>
        <hash alg="SHA3-256">f5490e1ab440817067b53e3c381c7d6eb4fa86d8eeed297f89ae1b7e5f31424a</hash>
        <hash alg="SHA3-512">4f4d18ab8edf47e5debf05fdd52f92f2d18d4089e7d705300830be0964bba93c6ff810e308bad2f5e4875e5588cab171221027c4704315388ca4668b195d25eb</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@4.0.5?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/jakartaee/jaxb-api/jakarta.xml.bind-api</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/jakartaee/jaxb-api/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://dev.eclipse.org/mhonarc/lists/jaxb-dev</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/jakartaee/jaxb-api.git/jakarta.xml.bind-api</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/jakarta.activation/jakarta.activation-api@2.1.4?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>jakarta.activation</group>
      <name>jakarta.activation-api</name>
      <version>2.1.4</version>
      <description>Jakarta Activation API 2.1 Specification</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">bc1602eee7bc61a0b86f14bbbb0cc794</hash>
        <hash alg="SHA-1">9e5c2a0d75dde71a0bedc4dbdbe47b78a5dc50f8</hash>
        <hash alg="SHA-256">c9db52100ce6c8aac95cc39075f95720d2e561b11f8051b81c121ad4effd7004</hash>
        <hash alg="SHA-512">cd078772acb5ebf1f90f7c737f372b7e86a5ce31b995ed759526a9eee73fd89f97e506f9a208ba3b73e757cb78830b829733411cf7989680aea2272abba7323b</hash>
        <hash alg="SHA-384">0b9a413939a024f562c15e60b11f85c336620987441fb053645499704960464d01ae83e9989b43ae6cd4f2164eb0cebe</hash>
        <hash alg="SHA3-384">d2fa51a3e18ced20f097ae019982cbd945942103df59327f319c64eeef1c109d6262d1de332fa2b6dfde41c98a9e7b2c</hash>
        <hash alg="SHA3-256">b259d17f48ae1f357a28b9c33b66fbcae50eaa86d61ac3c8cbc5184e7914d2d5</hash>
        <hash alg="SHA3-512">aae6a55fe1fa397b13b1bcb5a05ccc3e4e87049865233482dc09a8ab2af3eb128646394e3ef529609031e7c6c2215c91ffd27de06cd97ca9ae7e07bd4b9595bd</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/jakarta.activation/jakarta.activation-api@2.1.4?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/jakartaee/jaf-api</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/jakartaee/jaf-api/issues/</url>
        </reference>
        <reference type="mailing-list">
          <url>https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/jakartaee/jaf-api</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar">
      <publisher>QOS.ch</publisher>
      <group>org.slf4j</group>
      <name>slf4j-api</name>
      <version>2.0.18</version>
      <description>The slf4j API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">fe2837bd49bfb76657419002fed20ca9</hash>
        <hash alg="SHA-1">78a9e7a37cd6360e0b818e86341b24123d28d4df</hash>
        <hash alg="SHA-256">44508fd1576500688c790b190acdd16fec4f8c79a3e0b900afd70503cf055f55</hash>
        <hash alg="SHA-512">539288fa0c96cea750d11293dbed4c562630587aa7cd88bbf76ad04390d1c40636506da48faa6453090c7e9baa6b690b9fbded55a7e2b4a91547eeea011f971a</hash>
        <hash alg="SHA-384">917885c7812289f5178f68e3c421153d55abd7fe5cc9a071ffdc5de48b7afc79c352c667a20a3ad0f3b4660952932513</hash>
        <hash alg="SHA3-384">d6898eb5dd2e5caa2185c6cd2804735802b3848a3041b82ef7faa7904b3eaf5ac382d43a70a71e22b77a929e10ae2aaf</hash>
        <hash alg="SHA3-256">6bbc9103bec05ef3280dd895d8c6267ccf8b940df03c9f5145cfaa77f6e9a41a</hash>
        <hash alg="SHA3-512">e2913e96e4b1c94e7cb5c46828d1afe68c5a7248293d5c16aaa9ab462ee8e0ff97dd3d1155d2a64f66ccd9bc1ac0c83476cc886b675004b2f84aaaf50e2b2af2</hash>
      </hashes>
      <licenses>
        <license>
          <id>MIT</id>
          <url>https://opensource.org/license/mit/</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://www.slf4j.org</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/qos-ch/slf4j/slf4j-parent/slf4j-api</url>
        </reference>
      </externalReferences>
    </component>
  </components>
  <dependencies>
    <dependency ref="pkg:maven/org.docx4j/docx4j-openxml-objects-sml@11.5.13?type=jar">
      <dependency ref="pkg:maven/org.docx4j/docx4j-openxml-objects@11.5.13?type=jar"/>
      <dependency ref="pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@4.0.5?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.docx4j/docx4j-openxml-objects@11.5.13?type=jar">
      <dependency ref="pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@4.0.5?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@4.0.5?type=jar">
      <dependency ref="pkg:maven/jakarta.activation/jakarta.activation-api@2.1.4?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/jakarta.activation/jakarta.activation-api@2.1.4?type=jar"/>
    <dependency ref="pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar"/>
  </dependencies>
</bom>
