<?xml version="1.0" encoding="UTF-8"?>
<bom serialNumber="urn:uuid:e709476f-048a-3087-9b3c-f6c7051d1402" version="1" xmlns="http://cyclonedx.org/schema/bom/1.5">
  <metadata>
    <lifecycles>
      <lifecycle>
        <phase>build</phase>
      </lifecycle>
    </lifecycles>
    <tools>
      <tool>
        <vendor>OWASP Foundation</vendor>
        <name>CycloneDX Maven plugin</name>
        <version>2.8.0</version>
        <hashes>
          <hash alg="MD5">76ffec6a7ddd46b2b24517411874eb99</hash>
          <hash alg="SHA-1">5b0d5b41975b53be4799b9621b4af0cfc41d44b6</hash>
          <hash alg="SHA-256">6852aa0f4e42a2db745bab80e384951a6a65b9215d041081d675780999027e81</hash>
          <hash alg="SHA-512">417de20fcdcb11c9713bacbd57290d8e68037fdb4553fd31b8cb08bd760ad52dc65ea88ad4be15844ad3fd5a4d3e440d2f70326f2fe1e63ec78e059c9a883f8d</hash>
          <hash alg="SHA-384">5eb755c6492e7a7385fa9a1e1f4517875bcb834b2df437808a37a2d6f5285df428741762305980315a63fcef1406597d</hash>
          <hash alg="SHA3-384">0fe16a47cf7aab0b22251dafcc39939b68e8f1778093309d8d2060b51a08df445a8b8ed5a9561669faf2e55f907c76d8</hash>
          <hash alg="SHA3-256">3e5a1eb5ab7d0797498862794709ff8eaaa071fe4cc9ec77f52db7e2f97ef487</hash>
          <hash alg="SHA3-512">59281a3e29e76270d7f44b40b5b9f05e55f1ae3ec716d80add806f360940809e3813998ac7c5758043b8e248aed73b86e37dc506cdb4cde03c16bb617d8e5a3a</hash>
        </hashes>
      </tool>
    </tools>
    <component type="library" bom-ref="pkg:maven/org.apache.arrow/arrow-memory-netty-buffer-patch@17.0.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.arrow</group>
      <name>arrow-memory-netty-buffer-patch</name>
      <version>17.0.0</version>
      <description>Netty Buffer needed to patch that is consumed by Arrow Memory Netty</description>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.arrow/arrow-memory-netty-buffer-patch@17.0.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://arrow.apache.org/arrow-memory/arrow-memory-netty-buffer-patch/</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/arrow</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/arrow-dev/</url></reference><reference type="vcs"><url>https://github.com/apache/arrow/arrow-memory/arrow-memory-netty-buffer-patch</url></reference></externalReferences>
    </component>
    <properties>
      <property name="maven.goal">makeBom</property>
      <property name="maven.scopes">compile,provided,runtime,system</property>
      <property name="cdx:reproducible">enabled</property>
    </properties>
  </metadata>
  <components>
    <component type="library" bom-ref="pkg:maven/org.apache.arrow/arrow-memory-core@17.0.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.arrow</group>
      <name>arrow-memory-core</name>
      <version>17.0.0</version>
      <description>Core off-heap memory management libraries for Arrow ValueVectors.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">f6b5771fdddbaa03203b788776671d47</hash>
        <hash alg="SHA-1">51c5287ef5a624656bb38da7684078905b1a88c9</hash>
        <hash alg="SHA-256">27b7d85a152b23dc9b03356b71dec6ae3335c3a704ee70f6454f92791eb64e7a</hash>
        <hash alg="SHA-512">e221eb67090938f02c4c9ba7f83d1a86a9bfc58166fe331da13dd2c544ad8d4ad9d39df7a9ed8214115ba60d7bb4cf294923a2e6be6d6b588fa9a9228fe23db6</hash>
        <hash alg="SHA-384">5e3ba0325c376ea48dd50c8673f9ecfbef8db0c20c2ff3292825b461cfb97209e5b2f2382e9b75d47c73c1624221d322</hash>
        <hash alg="SHA3-384">03854c627c52c8eae670b9a3afd059c0c8a0769598fe5c35b4cbde7a857460db51a03b144d7f05862c55c88463a90396</hash>
        <hash alg="SHA3-256">d1a8076a87a75a53392e37217a8ac8384f915158b20ae182101d4ba6b2396de9</hash>
        <hash alg="SHA3-512">a1d831015ddea044d2ebd2bc9f0f3f414bdb945b3eae9873affaf862e63f95b746029ff7087db54b5e9e1ec752512c0f689f7ff5150841468bbb0757aa9f76f9</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.arrow/arrow-memory-core@17.0.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://arrow.apache.org/arrow-memory/arrow-memory-core/</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/arrow</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/arrow-dev/</url></reference><reference type="vcs"><url>https://github.com/apache/arrow/arrow-memory/arrow-memory-core</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar">
      <group>com.google.code.findbugs</group>
      <name>jsr305</name>
      <version>3.0.2</version>
      <description>JSR305 Annotations for Findbugs</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">dd83accb899363c32b07d7a1b2e4ce40</hash>
        <hash alg="SHA-1">25ea2e8b0c338a877313bd4672d3fe056ea78f0d</hash>
        <hash alg="SHA-256">766ad2a0783f2687962c8ad74ceecc38a28b9f72a2d085ee438b7813e928d0c7</hash>
        <hash alg="SHA-512">bb09db62919a50fa5b55906013be6ca4fc7acb2e87455fac5eaf9ede2e41ce8bbafc0e5a385a561264ea4cd71bbbd3ef5a45e02d63277a201d06a0ae1636f804</hash>
        <hash alg="SHA-384">ca0b169d3eb2d0922dc031133a021f861a043bb3e405a88728215fd6ff00fa52fdc7347842dcc2031472e3726164bdc4</hash>
        <hash alg="SHA3-384">9903fd7505218999f8262efedb3d935d64bcef84aae781064ab5e1b24755466b269517cada562fa140cd1d417ede57a1</hash>
        <hash alg="SHA3-256">223fda9a89a461afaae73b177a2dc20ed4a90f2f8757f5c65f3241b0510f00ff</hash>
        <hash alg="SHA3-512">3996b5af57a5d5c6a0cd62b11773360fb051dd86a2ba968476806a2a5d32049b82d69a24a3c694e8fe4d735be6a28e41000cc500cc2a9fb577e058045855d2d6</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar</purl>
      <externalReferences><reference type="website"><url>http://findbugs.sourceforge.net/</url></reference><reference type="distribution-intake"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://code.google.com/p/jsr-305/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.netty/netty-buffer@4.1.110.Final?type=jar">
      <publisher>The Netty Project</publisher>
      <group>io.netty</group>
      <name>netty-buffer</name>
      <version>4.1.110.Final</version>
      <description>Netty is an asynchronous event-driven network application framework for
    rapid development of maintainable high performance protocol servers and
    clients.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">0c236a18b9527908fe425a703d7ebc30</hash>
        <hash alg="SHA-1">3d918a9ee057d995c362902b54634fc307132aac</hash>
        <hash alg="SHA-256">46d74e79125aacc055c31f18152fdc5d4a569aa8d60091203d0baa833973ac3c</hash>
        <hash alg="SHA-512">4c7c3fde964bf295cd31130e6b0e791f6791042cc526c83fcf2be5376de06c294fcbf49d3199907866e5e8ad27ff873deb66c294b16057135a161f43cf5e617e</hash>
        <hash alg="SHA-384">138d21f28610eca0face439b114dbea25abf9f09e45ef341a719f958bcc5efd22abc17a106a4c77ec6b0444705920b1f</hash>
        <hash alg="SHA3-384">ccabb11df1a980b6164f33013f8cbe93b53940673e7a3f9d02a9f2da140cf5a955555c21d52db60153b39471e2177258</hash>
        <hash alg="SHA3-256">912525e3abff4b57179fb3e251564332f0f1986f334a3db3a30a8560214a52f6</hash>
        <hash alg="SHA3-512">1bbe9146474e689eeb9d0582f8503e7b022ecb283d0528deb4ca0124fb98a448b0b9c4ced9d4952d656ee0491cb406ecc21997244789bbd700ca337e49cfa084</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.netty/netty-buffer@4.1.110.Final?type=jar</purl>
      <externalReferences><reference type="website"><url>https://netty.io/netty-buffer/</url></reference><reference type="distribution-intake"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/netty/netty/netty-buffer</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.netty/netty-common@4.1.110.Final?type=jar">
      <publisher>The Netty Project</publisher>
      <group>io.netty</group>
      <name>netty-common</name>
      <version>4.1.110.Final</version>
      <description>Netty is an asynchronous event-driven network application framework for
    rapid development of maintainable high performance protocol servers and
    clients.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">a0cd1e4f10d9325d205a5ddfbfa4897a</hash>
        <hash alg="SHA-1">ec361e7e025c029be50c55c8480080cabcbc01e7</hash>
        <hash alg="SHA-256">9851ec66548b9e0d41164ce98943cdd4bbe305f68ddbd24eae52e4501a0d7b1a</hash>
        <hash alg="SHA-512">5c09ddc68f497a749e0d318e3cec216e18d1f380ad67fa70d55ce109ba552cd3cd02a4717535cef1567f8502dfe1a8f1772e0583f8bc526bea4cfc18fd5fe5dd</hash>
        <hash alg="SHA-384">9a4fc20bc4a4017ff777aa62e1e7f88150dbcbe635e6911e778485f1ed30e77eb9c47f8812cba9addf05e9cb0e89c4fc</hash>
        <hash alg="SHA3-384">d51ce6c73e170fa93f6c263db102ba4146c0fcfdc73c6b76251bca9d7f2c2bb9c9eecb335d6e028cca129dd89fd9c710</hash>
        <hash alg="SHA3-256">9ed432591c9db501bbeb74a9fff1c5148d4783c2ad277ced1795e2b9b25c4efc</hash>
        <hash alg="SHA3-512">68ef21152986527597e6eb33379dc504519f8ca16737fd0cdae777ac629710efaab9b4efab479032e73745f029fba45702bd21aea35e85a86ab0af0e7b83094d</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.netty/netty-common@4.1.110.Final?type=jar</purl>
      <externalReferences><reference type="website"><url>https://netty.io/netty-common/</url></reference><reference type="distribution-intake"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/netty/netty/netty-common</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.slf4j/slf4j-api@2.0.13?type=jar">
      <publisher>QOS.ch</publisher>
      <group>org.slf4j</group>
      <name>slf4j-api</name>
      <version>2.0.13</version>
      <description>The slf4j API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">7f4028aa04f75427327f3f30cd62ba4e</hash>
        <hash alg="SHA-1">80229737f704b121a318bba5d5deacbcf395bc77</hash>
        <hash alg="SHA-256">e7c2a48e8515ba1f49fa637d57b4e2f590b3f5bd97407ac699c3aa5efb1204a9</hash>
        <hash alg="SHA-512">b4eeb5757118e264ec7f107d879270784357380d6f53471b7874dd7e0166fdf5686a95eb66bab867abbe9536da032ab052e207165211391c293cbf6178431fb6</hash>
        <hash alg="SHA-384">b67cbb4ef32141423000dd4e067bf32e0c1dd2c4689c611522b9fedfc1744513175a22f4b1276f2cec4721c9467cf882</hash>
        <hash alg="SHA3-384">817fc9641f4fc52bfd76006886c6eba975f6f09b2a7cc59334729a8cc033807c8e89be9ec4309acfc16ed65ff6eee018</hash>
        <hash alg="SHA3-256">f26080cceb5a2e605f3844d6dc8dd3f14c543cb14510765d841d71a64fa454dc</hash>
        <hash alg="SHA3-512">00646c78d65ec854e157638f40735f1888aa585ede59915d58386c599c2fe54ec8c1da73284aeff00ce3142165e33c4c995ad39d08843c31e9e4d7e32c746836</hash>
      </hashes>
      <licenses>
        <license>
          <id>MIT</id>
          <url>https://opensource.org/licenses/MIT</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.slf4j/slf4j-api@2.0.13?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.slf4j.org</url></reference><reference type="distribution-intake"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/qos-ch/slf4j/slf4j-parent/slf4j-api</url></reference></externalReferences>
    </component>
  </components>
  <dependencies>
    <dependency ref="pkg:maven/org.apache.arrow/arrow-memory-netty-buffer-patch@17.0.0?type=jar">
      <dependency ref="pkg:maven/org.apache.arrow/arrow-memory-core@17.0.0?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-buffer@4.1.110.Final?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-common@4.1.110.Final?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@2.0.13?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.arrow/arrow-memory-core@17.0.0?type=jar">
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@2.0.13?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar"/>
    <dependency ref="pkg:maven/org.slf4j/slf4j-api@2.0.13?type=jar"/>
    <dependency ref="pkg:maven/io.netty/netty-buffer@4.1.110.Final?type=jar">
      <dependency ref="pkg:maven/io.netty/netty-common@4.1.110.Final?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/io.netty/netty-common@4.1.110.Final?type=jar"/>
  </dependencies>
</bom>
