{
  "bomFormat" : "CycloneDX",
  "specVersion" : "1.5",
  "serialNumber" : "urn:uuid:e709476f-048a-3087-9b3c-f6c7051d1402",
  "version" : 1,
  "metadata" : {
    "lifecycles" : [
      {
        "phase" : "build"
      }
    ],
    "tools" : [
      {
        "vendor" : "OWASP Foundation",
        "name" : "CycloneDX Maven plugin",
        "version" : "2.8.0",
        "hashes" : [
          {
            "alg" : "MD5",
            "content" : "76ffec6a7ddd46b2b24517411874eb99"
          },
          {
            "alg" : "SHA-1",
            "content" : "5b0d5b41975b53be4799b9621b4af0cfc41d44b6"
          },
          {
            "alg" : "SHA-256",
            "content" : "6852aa0f4e42a2db745bab80e384951a6a65b9215d041081d675780999027e81"
          },
          {
            "alg" : "SHA-512",
            "content" : "417de20fcdcb11c9713bacbd57290d8e68037fdb4553fd31b8cb08bd760ad52dc65ea88ad4be15844ad3fd5a4d3e440d2f70326f2fe1e63ec78e059c9a883f8d"
          },
          {
            "alg" : "SHA-384",
            "content" : "5eb755c6492e7a7385fa9a1e1f4517875bcb834b2df437808a37a2d6f5285df428741762305980315a63fcef1406597d"
          },
          {
            "alg" : "SHA3-384",
            "content" : "0fe16a47cf7aab0b22251dafcc39939b68e8f1778093309d8d2060b51a08df445a8b8ed5a9561669faf2e55f907c76d8"
          },
          {
            "alg" : "SHA3-256",
            "content" : "3e5a1eb5ab7d0797498862794709ff8eaaa071fe4cc9ec77f52db7e2f97ef487"
          },
          {
            "alg" : "SHA3-512",
            "content" : "59281a3e29e76270d7f44b40b5b9f05e55f1ae3ec716d80add806f360940809e3813998ac7c5758043b8e248aed73b86e37dc506cdb4cde03c16bb617d8e5a3a"
          }
        ]
      }
    ],
    "component" : {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.arrow",
      "name" : "arrow-memory-netty-buffer-patch",
      "version" : "17.0.0",
      "description" : "Netty Buffer needed to patch that is consumed by Arrow Memory Netty",
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.arrow/arrow-memory-netty-buffer-patch@17.0.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://arrow.apache.org/arrow-memory/arrow-memory-netty-buffer-patch/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/arrow"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/arrow-dev/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/arrow/arrow-memory/arrow-memory-netty-buffer-patch"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.arrow/arrow-memory-netty-buffer-patch@17.0.0?type=jar"
    },
    "properties" : [
      {
        "name" : "maven.goal",
        "value" : "makeBom"
      },
      {
        "name" : "maven.scopes",
        "value" : "compile,provided,runtime,system"
      },
      {
        "name" : "cdx:reproducible",
        "value" : "enabled"
      }
    ]
  },
  "components" : [
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.arrow",
      "name" : "arrow-memory-core",
      "version" : "17.0.0",
      "description" : "Core off-heap memory management libraries for Arrow ValueVectors.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f6b5771fdddbaa03203b788776671d47"
        },
        {
          "alg" : "SHA-1",
          "content" : "51c5287ef5a624656bb38da7684078905b1a88c9"
        },
        {
          "alg" : "SHA-256",
          "content" : "27b7d85a152b23dc9b03356b71dec6ae3335c3a704ee70f6454f92791eb64e7a"
        },
        {
          "alg" : "SHA-512",
          "content" : "e221eb67090938f02c4c9ba7f83d1a86a9bfc58166fe331da13dd2c544ad8d4ad9d39df7a9ed8214115ba60d7bb4cf294923a2e6be6d6b588fa9a9228fe23db6"
        },
        {
          "alg" : "SHA-384",
          "content" : "5e3ba0325c376ea48dd50c8673f9ecfbef8db0c20c2ff3292825b461cfb97209e5b2f2382e9b75d47c73c1624221d322"
        },
        {
          "alg" : "SHA3-384",
          "content" : "03854c627c52c8eae670b9a3afd059c0c8a0769598fe5c35b4cbde7a857460db51a03b144d7f05862c55c88463a90396"
        },
        {
          "alg" : "SHA3-256",
          "content" : "d1a8076a87a75a53392e37217a8ac8384f915158b20ae182101d4ba6b2396de9"
        },
        {
          "alg" : "SHA3-512",
          "content" : "a1d831015ddea044d2ebd2bc9f0f3f414bdb945b3eae9873affaf862e63f95b746029ff7087db54b5e9e1ec752512c0f689f7ff5150841468bbb0757aa9f76f9"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.arrow/arrow-memory-core@17.0.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://arrow.apache.org/arrow-memory/arrow-memory-core/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/arrow"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/arrow-dev/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/arrow/arrow-memory/arrow-memory-core"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.arrow/arrow-memory-core@17.0.0?type=jar"
    },
    {
      "group" : "com.google.code.findbugs",
      "name" : "jsr305",
      "version" : "3.0.2",
      "description" : "JSR305 Annotations for Findbugs",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "dd83accb899363c32b07d7a1b2e4ce40"
        },
        {
          "alg" : "SHA-1",
          "content" : "25ea2e8b0c338a877313bd4672d3fe056ea78f0d"
        },
        {
          "alg" : "SHA-256",
          "content" : "766ad2a0783f2687962c8ad74ceecc38a28b9f72a2d085ee438b7813e928d0c7"
        },
        {
          "alg" : "SHA-512",
          "content" : "bb09db62919a50fa5b55906013be6ca4fc7acb2e87455fac5eaf9ede2e41ce8bbafc0e5a385a561264ea4cd71bbbd3ef5a45e02d63277a201d06a0ae1636f804"
        },
        {
          "alg" : "SHA-384",
          "content" : "ca0b169d3eb2d0922dc031133a021f861a043bb3e405a88728215fd6ff00fa52fdc7347842dcc2031472e3726164bdc4"
        },
        {
          "alg" : "SHA3-384",
          "content" : "9903fd7505218999f8262efedb3d935d64bcef84aae781064ab5e1b24755466b269517cada562fa140cd1d417ede57a1"
        },
        {
          "alg" : "SHA3-256",
          "content" : "223fda9a89a461afaae73b177a2dc20ed4a90f2f8757f5c65f3241b0510f00ff"
        },
        {
          "alg" : "SHA3-512",
          "content" : "3996b5af57a5d5c6a0cd62b11773360fb051dd86a2ba968476806a2a5d32049b82d69a24a3c694e8fe4d735be6a28e41000cc500cc2a9fb577e058045855d2d6"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://findbugs.sourceforge.net/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://code.google.com/p/jsr-305/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar"
    },
    {
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-buffer",
      "version" : "4.1.110.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "0c236a18b9527908fe425a703d7ebc30"
        },
        {
          "alg" : "SHA-1",
          "content" : "3d918a9ee057d995c362902b54634fc307132aac"
        },
        {
          "alg" : "SHA-256",
          "content" : "46d74e79125aacc055c31f18152fdc5d4a569aa8d60091203d0baa833973ac3c"
        },
        {
          "alg" : "SHA-512",
          "content" : "4c7c3fde964bf295cd31130e6b0e791f6791042cc526c83fcf2be5376de06c294fcbf49d3199907866e5e8ad27ff873deb66c294b16057135a161f43cf5e617e"
        },
        {
          "alg" : "SHA-384",
          "content" : "138d21f28610eca0face439b114dbea25abf9f09e45ef341a719f958bcc5efd22abc17a106a4c77ec6b0444705920b1f"
        },
        {
          "alg" : "SHA3-384",
          "content" : "ccabb11df1a980b6164f33013f8cbe93b53940673e7a3f9d02a9f2da140cf5a955555c21d52db60153b39471e2177258"
        },
        {
          "alg" : "SHA3-256",
          "content" : "912525e3abff4b57179fb3e251564332f0f1986f334a3db3a30a8560214a52f6"
        },
        {
          "alg" : "SHA3-512",
          "content" : "1bbe9146474e689eeb9d0582f8503e7b022ecb283d0528deb4ca0124fb98a448b0b9c4ced9d4952d656ee0491cb406ecc21997244789bbd700ca337e49cfa084"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-buffer@4.1.110.Final?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/netty-buffer/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty/netty-buffer"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-buffer@4.1.110.Final?type=jar"
    },
    {
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-common",
      "version" : "4.1.110.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "a0cd1e4f10d9325d205a5ddfbfa4897a"
        },
        {
          "alg" : "SHA-1",
          "content" : "ec361e7e025c029be50c55c8480080cabcbc01e7"
        },
        {
          "alg" : "SHA-256",
          "content" : "9851ec66548b9e0d41164ce98943cdd4bbe305f68ddbd24eae52e4501a0d7b1a"
        },
        {
          "alg" : "SHA-512",
          "content" : "5c09ddc68f497a749e0d318e3cec216e18d1f380ad67fa70d55ce109ba552cd3cd02a4717535cef1567f8502dfe1a8f1772e0583f8bc526bea4cfc18fd5fe5dd"
        },
        {
          "alg" : "SHA-384",
          "content" : "9a4fc20bc4a4017ff777aa62e1e7f88150dbcbe635e6911e778485f1ed30e77eb9c47f8812cba9addf05e9cb0e89c4fc"
        },
        {
          "alg" : "SHA3-384",
          "content" : "d51ce6c73e170fa93f6c263db102ba4146c0fcfdc73c6b76251bca9d7f2c2bb9c9eecb335d6e028cca129dd89fd9c710"
        },
        {
          "alg" : "SHA3-256",
          "content" : "9ed432591c9db501bbeb74a9fff1c5148d4783c2ad277ced1795e2b9b25c4efc"
        },
        {
          "alg" : "SHA3-512",
          "content" : "68ef21152986527597e6eb33379dc504519f8ca16737fd0cdae777ac629710efaab9b4efab479032e73745f029fba45702bd21aea35e85a86ab0af0e7b83094d"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-common@4.1.110.Final?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/netty-common/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty/netty-common"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-common@4.1.110.Final?type=jar"
    },
    {
      "publisher" : "QOS.ch",
      "group" : "org.slf4j",
      "name" : "slf4j-api",
      "version" : "2.0.13",
      "description" : "The slf4j API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "7f4028aa04f75427327f3f30cd62ba4e"
        },
        {
          "alg" : "SHA-1",
          "content" : "80229737f704b121a318bba5d5deacbcf395bc77"
        },
        {
          "alg" : "SHA-256",
          "content" : "e7c2a48e8515ba1f49fa637d57b4e2f590b3f5bd97407ac699c3aa5efb1204a9"
        },
        {
          "alg" : "SHA-512",
          "content" : "b4eeb5757118e264ec7f107d879270784357380d6f53471b7874dd7e0166fdf5686a95eb66bab867abbe9536da032ab052e207165211391c293cbf6178431fb6"
        },
        {
          "alg" : "SHA-384",
          "content" : "b67cbb4ef32141423000dd4e067bf32e0c1dd2c4689c611522b9fedfc1744513175a22f4b1276f2cec4721c9467cf882"
        },
        {
          "alg" : "SHA3-384",
          "content" : "817fc9641f4fc52bfd76006886c6eba975f6f09b2a7cc59334729a8cc033807c8e89be9ec4309acfc16ed65ff6eee018"
        },
        {
          "alg" : "SHA3-256",
          "content" : "f26080cceb5a2e605f3844d6dc8dd3f14c543cb14510765d841d71a64fa454dc"
        },
        {
          "alg" : "SHA3-512",
          "content" : "00646c78d65ec854e157638f40735f1888aa585ede59915d58386c599c2fe54ec8c1da73284aeff00ce3142165e33c4c995ad39d08843c31e9e4d7e32c746836"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl" : "pkg:maven/org.slf4j/slf4j-api@2.0.13?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.slf4j.org"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/qos-ch/slf4j/slf4j-parent/slf4j-api"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.slf4j/slf4j-api@2.0.13?type=jar"
    }
  ],
  "dependencies" : [
    {
      "ref" : "pkg:maven/org.apache.arrow/arrow-memory-netty-buffer-patch@17.0.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.arrow/arrow-memory-core@17.0.0?type=jar",
        "pkg:maven/io.netty/netty-buffer@4.1.110.Final?type=jar",
        "pkg:maven/io.netty/netty-common@4.1.110.Final?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.13?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.arrow/arrow-memory-core@17.0.0?type=jar",
      "dependsOn" : [
        "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.13?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.slf4j/slf4j-api@2.0.13?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.netty/netty-buffer@4.1.110.Final?type=jar",
      "dependsOn" : [
        "pkg:maven/io.netty/netty-common@4.1.110.Final?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.netty/netty-common@4.1.110.Final?type=jar",
      "dependsOn" : [ ]
    }
  ]
}