{
  "bomFormat" : "CycloneDX",
  "specVersion" : "1.4",
  "serialNumber" : "urn:uuid:71c87dc6-b788-4f8b-8515-4b7fd00f0801",
  "version" : 1,
  "metadata" : {
    "timestamp" : "2024-06-06T13:20:32Z",
    "tools" : [
      {
        "vendor" : "OWASP Foundation",
        "name" : "CycloneDX Maven plugin",
        "version" : "2.7.7",
        "hashes" : [
          {
            "alg" : "MD5",
            "content" : "436dfb24c63a322708e4a5143d8543af"
          },
          {
            "alg" : "SHA-1",
            "content" : "3ef2e8728dc9eff2f129c34057e46e9d2b10629a"
          },
          {
            "alg" : "SHA-256",
            "content" : "c185b79bf0f9264f43bc8c222c44db67bea275bb727e3327cf9aea6bf45292c9"
          },
          {
            "alg" : "SHA-512",
            "content" : "41488733e31e6c5315327dcc86187c2b9a6b96cd08f7e2157ce130688afde29c313fc6a73edb8a76333a930c78874aa2eac874448920030c0f7af0ac05e65ced"
          },
          {
            "alg" : "SHA-384",
            "content" : "f9462f86240fd9fc0942f34981e6d2371f252aa1a4e5e8c3c14e7f0f1a4e4de69ef972e51cf09a749afb6d97c13e67ed"
          }
        ]
      }
    ],
    "component" : {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.flink",
      "name" : "flink-queryable-state-client-java",
      "version" : "1.19.1",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.flink/flink-queryable-state-client-java@1.19.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://flink.apache.org/flink-queryable-state/flink-queryable-state-client-java"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink/flink-queryable-state/flink-queryable-state-client-java"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.flink/flink-queryable-state-client-java@1.19.1?type=jar"
    },
    "properties" : [
      {
        "name" : "maven.goal",
        "value" : "makeBom"
      },
      {
        "name" : "maven.scopes",
        "value" : "compile,provided,runtime,system"
      }
    ]
  },
  "components" : [
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.flink",
      "name" : "flink-core",
      "version" : "1.19.1",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "6508ee795440e6f9986067abe2fe1a0a"
        },
        {
          "alg" : "SHA-1",
          "content" : "8be9ced52222467c3def6e55d3ead721a871b5e7"
        },
        {
          "alg" : "SHA-256",
          "content" : "511f23b97bff1aac823fbf30a8a81ded6c25eb51d1787ac245f485ac82524c46"
        },
        {
          "alg" : "SHA-512",
          "content" : "5df9a6ac27b116d9cc613987902699731a05adc4d7405e9a5fc8c5b2f53299c5b0b361d761af192256d3bdcde3e8020426c5e74571bf5f7c5e53966bc021b1c1"
        },
        {
          "alg" : "SHA-384",
          "content" : "717c84636f5d91f0a0ab6174a6d794ef9205c487964784b6f802504d0502b70c13cf2a4b9638a6849707cbca1883df95"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.flink/flink-core@1.19.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://flink.apache.org/flink-core"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink/flink-core"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.flink/flink-core@1.19.1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.flink",
      "name" : "flink-annotations",
      "version" : "1.19.1",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "ce5937a2a17a1cacd2d9339650095a20"
        },
        {
          "alg" : "SHA-1",
          "content" : "c2dedfcd148388840dba5d253cb04b6c56b5ea0d"
        },
        {
          "alg" : "SHA-256",
          "content" : "ca2dcadc05a85451112599208f29536206ec697e7f63cb902c6cdfc787f169f6"
        },
        {
          "alg" : "SHA-512",
          "content" : "76ff5bd3aa7e3f09379215f669f8ea506d948d7dda500e6f11936076260c02672ce849bb5ebc56973d812f570bf7dfaafc2e6e730bae26a6ef3e8de8bcd9d9a9"
        },
        {
          "alg" : "SHA-384",
          "content" : "615f4281884e70368bc24fb5b6a65ab8e64aa05ebb2b74dcfd97406f4519f33ce0c047f7596cfd1f3686e466dbd78022"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.flink/flink-annotations@1.19.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://flink.apache.org/flink-annotations"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink/flink-annotations"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.flink/flink-annotations@1.19.1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.flink",
      "name" : "flink-metrics-core",
      "version" : "1.19.1",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "5ee9658dc1e9101c6f20009360106e7c"
        },
        {
          "alg" : "SHA-1",
          "content" : "7a60b16fa7434a462f3e0903e4a52330de21c116"
        },
        {
          "alg" : "SHA-256",
          "content" : "ea337748b64375725a7edbd027a588fe79077c2bd2384643f6936f35d3ff1e18"
        },
        {
          "alg" : "SHA-512",
          "content" : "a9c16bbcb56c500a49b6dba0c55e4ad2b0e17715154fe8bd6412eed5feb15f4578eaa7d59a30f98b2b85df4fb5ff889d060804c9d20e2dbf27b17bfe5dab2814"
        },
        {
          "alg" : "SHA-384",
          "content" : "888a9d8d92c859cefd01d1823342e129fcd71b3ecf4a370449ccff538dbf827d51445437671e4c3f08195996933bce89"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.flink/flink-metrics-core@1.19.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://flink.apache.org/flink-metrics/flink-metrics-core"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink/flink-metrics/flink-metrics-core"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.flink/flink-metrics-core@1.19.1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.flink",
      "name" : "flink-shaded-asm-9",
      "version" : "9.5-17.0",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "443601ddd70625d741be1d3382dcf012"
        },
        {
          "alg" : "SHA-1",
          "content" : "d09e84a77ad8258d26f6be6bbb31fe81e3f98658"
        },
        {
          "alg" : "SHA-256",
          "content" : "a79273d4fbea1683b5fe81bce25d7fe552a542690481132f7ded034a8f00169e"
        },
        {
          "alg" : "SHA-512",
          "content" : "b1414e5cd4cd63e1e8a2f4a18198834910a360dac22392e298458049d7bf05e74cea2a4206751026ad7dc2348112aa7f223d0ca6178a859cf343cf306a6bd4c8"
        },
        {
          "alg" : "SHA-384",
          "content" : "ff6195b15060e725158aa6c8406e441576c38318fa5ea26e27ffd09f4ed4596b5198579d69ef0192dbb6edb3fda79d40"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.flink/flink-shaded-asm-9@9.5-17.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://flink.apache.org/flink-shaded-asm-9"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink-shaded/flink-shaded-asm-9"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.flink/flink-shaded-asm-9@9.5-17.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.flink",
      "name" : "flink-shaded-jackson",
      "version" : "2.14.2-17.0",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "492259ac7642687cc959257a5512542f"
        },
        {
          "alg" : "SHA-1",
          "content" : "689daca4a6fc14e361831e15abd96283166d0f62"
        },
        {
          "alg" : "SHA-256",
          "content" : "37e87311498ae8da80adb2aa09ab6e9739d8611e09868e7220822206c739231e"
        },
        {
          "alg" : "SHA-512",
          "content" : "3f4434cf93f2cd12b686aa84c4b1910d7e0191b2ddad7ba8de6d2c3805d3b49afcf5da06e1052faf01b6cb0dda554594f78e39db69d83208119c1f4f2cd5dc8f"
        },
        {
          "alg" : "SHA-384",
          "content" : "9e689ab8b7e7f7db269fd5b1b0fc1dc5f13fed06b283c9b8ceec5c500fc9f6a4200674eef2bb884a9e67133de32e9a77"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.flink/flink-shaded-jackson@2.14.2-17.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://flink.apache.org/flink-shaded-jackson-parent/flink-shaded-jackson"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink-shaded/flink-shaded-jackson-parent/flink-shaded-jackson"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.flink/flink-shaded-jackson@2.14.2-17.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-lang3",
      "version" : "3.12.0",
      "description" : "Apache Commons Lang, a package of Java utility classes for the classes that are in java.lang's hierarchy, or are considered to be so standard as to justify existence in java.lang.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "19fe50567358922bdad277959ea69545"
        },
        {
          "alg" : "SHA-1",
          "content" : "c6842c86792ff03b9f1d1fe2aab8dc23aa6c6f0e"
        },
        {
          "alg" : "SHA-256",
          "content" : "d919d904486c037f8d193412da0c92e22a9fa24230b9d67a57855c5c31c7e94e"
        },
        {
          "alg" : "SHA-512",
          "content" : "fbdbc0943cb3498b0148e86a39b773f97c8e6013740f72dbc727faeabea402073e2cc8c4d68198e5fc6b08a13b7700236292e99d4785f2c9989f2e5fac11fd81"
        },
        {
          "alg" : "SHA-384",
          "content" : "c34b8a0e0eba2168ad56fedeb7a1d710b6f1d3f1ce6aae99a4e0247bd120efbbadc8dcb2f731045b8a16e3efd30604dc"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-lang/"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/LANG"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-lang.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar"
    },
    {
      "group" : "org.snakeyaml",
      "name" : "snakeyaml-engine",
      "version" : "2.6",
      "description" : "Core YAML 1.2 parser and emitter for Java",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "719bcfb9f917992d0a99a6f7106d8466"
        },
        {
          "alg" : "SHA-1",
          "content" : "235a7e571b33eda1a81e0f73a3173ef95dd020e5"
        },
        {
          "alg" : "SHA-256",
          "content" : "2652199af40c9aa2f1782400d2dfbbf4e5226208c4e05ddd4059c3d6d9cd1505"
        },
        {
          "alg" : "SHA-512",
          "content" : "c3b5e87ce323b37bcd9e65d060157ebb26d116b5dac30c6eaa185b30aa24c0be8dfd0ad604a9a12ce7010acadee54a9cea9f065cd2f434eeaed7bccce2e14a7d"
        },
        {
          "alg" : "SHA-384",
          "content" : "edfc3c9a95cc2fa524a322f20ec034ec16b3fad950a58bfd1ed774eaaab946304cddc5e9ea4e117a899ec568ba7fa620"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.snakeyaml/snakeyaml-engine@2.6?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://bitbucket.org/snakeyaml/snakeyaml-engine"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://bitbucket.org/snakeyaml/snakeyaml-engine/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://bitbucket.org/snakeyaml/snakeyaml-engine/src"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.snakeyaml/snakeyaml-engine@2.6?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-text",
      "version" : "1.10.0",
      "description" : "Apache Commons Text is a library focused on algorithms working on strings.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "4afc9bfa2d31dbf7330c98fcc954b892"
        },
        {
          "alg" : "SHA-1",
          "content" : "3363381aef8cef2dbc1023b3e3a9433b08b64e01"
        },
        {
          "alg" : "SHA-256",
          "content" : "770cd903fa7b604d1f7ef7ba17f84108667294b2b478be8ed1af3bffb4ae0018"
        },
        {
          "alg" : "SHA-512",
          "content" : "afd836a1094449e0a791fee67363666c47b6d24acff353a5089b837b332c0f4af89565c354682521e37062d20e6b52d70c77bb4f24cca9b9532c274fc708a831"
        },
        {
          "alg" : "SHA-384",
          "content" : "06c56e6e513dd77cf10d0da46cdea08c34e220e81fa024735b668c6650df4234e564fe865ff5cafea963f56b1e8ffd4a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-text"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-parent/actions"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/TEXT"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-text.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar"
    },
    {
      "group" : "com.esotericsoftware.kryo",
      "name" : "kryo",
      "version" : "2.24.0",
      "description" : "Fast, efficient Java serialization",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "6cf0fa5b5d4f6b8226fd4a4bfb7532b8"
        },
        {
          "alg" : "SHA-1",
          "content" : "0c6b206e80cfd97e66a1364003724491c757b92f"
        },
        {
          "alg" : "SHA-256",
          "content" : "7e56b32c635058f9aa2820f88919ab702d029cbcd15285da9992e36cc0ae52f2"
        },
        {
          "alg" : "SHA-512",
          "content" : "a4c6ce768528a03c219cc6a41b22293f78e433c849c90391b64dda3f2376fd79951a89c5f4e6701bcbcb6eee9abffe2390cfb12dba3b885e4a3d411a26b78f40"
        },
        {
          "alg" : "SHA-384",
          "content" : "678ad1b7f4d99910b8ff44a6c8f78ccae91f823161ce23de39077397352919b7257e1e6e0dea90900be973291ea19282"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/com.esotericsoftware.kryo/kryo@2.24.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/EsotericSoftware/kryo"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/EsotericSoftware/kryo"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.esotericsoftware.kryo/kryo@2.24.0?type=jar"
    },
    {
      "group" : "com.esotericsoftware.minlog",
      "name" : "minlog",
      "version" : "1.2",
      "description" : "Minimal overhead Java logging",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f7cfbdf63b67df0bbfa4c7cb260885bc"
        },
        {
          "alg" : "SHA-1",
          "content" : "59bfcd171d82f9981a5e242b9e840191f650e209"
        },
        {
          "alg" : "SHA-256",
          "content" : "a678cb1aa8f5d03d901c992c75741841d98a9bc3d55dad02e84d65315c4e60f2"
        },
        {
          "alg" : "SHA-512",
          "content" : "7b4082766ad740d86708783f3b08780ed72dd18062aa9ba422c4b9016b332d2334ae511f50ef7d89e4eedbdac5cebc51ab6ddaf4d1eea857a3250eb5962f0d08"
        },
        {
          "alg" : "SHA-384",
          "content" : "932a282a9c06864001f8212199e4be05543609adbd985c5f4517ee6eba734acd3fd8812213bc0c98af264637cbf9c78d"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/com.esotericsoftware.minlog/minlog@1.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://code.google.com/p/minlog/"
        },
        {
          "type" : "vcs",
          "url" : "http://minlog.googlecode.com/svn/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.esotericsoftware.minlog/minlog@1.2?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-collections",
      "name" : "commons-collections",
      "version" : "3.2.2",
      "description" : "Types that extend and augment the Java Collections Framework.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f54a8510f834a1a57166970bfc982e94"
        },
        {
          "alg" : "SHA-1",
          "content" : "8ad72fe39fa8c91eaaf12aadb21e0c3661fe26d5"
        },
        {
          "alg" : "SHA-256",
          "content" : "eeeae917917144a68a741d4c0dff66aa5c5c5fd85593ff217bced3fc8ca783b8"
        },
        {
          "alg" : "SHA-512",
          "content" : "51c72f9aca7726f3c387095e66be85a6df97c74b00a25434b89188c1b8eab6e2b55accf7b9bd412430d22bd09324dec076e300b3d1fa39fccad471f0f2a3da16"
        },
        {
          "alg" : "SHA-384",
          "content" : "dd4e99b3314bd3c1a1ee26296615d9e44dadf7a1f8a7bbba44fb95121803d331e36d4cca4260e7609af78a47ba3e4073"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-collections/commons-collections@3.2.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://commons.apache.org/collections/"
        },
        {
          "type" : "build-system",
          "url" : "https://continuum-ci.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/COLLECTIONS"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/viewvc/commons/proper/collections/trunk"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-collections/commons-collections@3.2.2?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-compress",
      "version" : "1.26.0",
      "description" : "Apache Commons Compress defines an API for working with compression and archive formats. These include bzip2, gzip, pack200, LZMA, XZ, Snappy, traditional Unix Compress, DEFLATE, DEFLATE64, LZ4, Brotli, Zstandard and ar, cpio, jar, tar, zip, dump, 7z, arj.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "cbc0bb8eca12b747ca21bf998d736e60"
        },
        {
          "alg" : "SHA-1",
          "content" : "659feffdd12280201c8aacb8f7be94f9a883c824"
        },
        {
          "alg" : "SHA-256",
          "content" : "051aceb8bbcc62d0f5b2b8ac72c53767f9c59bfbd050151e65bef6f51c8ed9c9"
        },
        {
          "alg" : "SHA-512",
          "content" : "acbeaa2909b809cd561e7156df18340d96abacb179325622d73bdd6b82cb9b387d6fcb1a44d8195aad4e786da299289e17598a1d337b7c7d1c0bc610cc128714"
        },
        {
          "alg" : "SHA-384",
          "content" : "052d4d0cd1929c4299dd9d37dd36eaea6ed2be6b04d6d83a94f8608a6d1138aa81f7a34f25113ac267e7ba25ce948c9a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-compress@1.26.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-compress/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-parent/actions"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/COMPRESS"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-compress.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-compress@1.26.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-io",
      "name" : "commons-io",
      "version" : "2.15.1",
      "description" : "The Apache Commons IO library contains utility classes, stream implementations, file filters, file comparators, endian transformation classes, and much more.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "84351f7991a0e6722f00e96a4ccc376f"
        },
        {
          "alg" : "SHA-1",
          "content" : "f11560da189ab563a5c8e351941415430e9304ea"
        },
        {
          "alg" : "SHA-256",
          "content" : "a58af12ee1b68cfd2ebb0c27caef164f084381a00ec81a48cc275fd7ea54e154"
        },
        {
          "alg" : "SHA-512",
          "content" : "e9adaeed2d715ac0ae44de056ba165a743a92acbeb9871b535f7e58e0b3bc4fba276495b50429be195098a559f3adb7294048479754a0ee4d397da2efda5f81c"
        },
        {
          "alg" : "SHA-384",
          "content" : "028c72b59373d3894da22f9eb2c731aabd00f670993973f71a354d722670c12ca659686b83bbf8db32d060ca180f50b2"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-io/commons-io@2.15.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-io/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-parent/actions"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/IO"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-io.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-io/commons-io@2.15.1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.flink",
      "name" : "flink-shaded-netty",
      "version" : "4.1.91.Final-17.0",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f3e6fd4f43c7a8647604df2a9b712dab"
        },
        {
          "alg" : "SHA-1",
          "content" : "81b6e0b28e0309946cb6d03792199fabfc0d9f09"
        },
        {
          "alg" : "SHA-256",
          "content" : "c4d370f1b2bda0b55686fdec840c8a047950b9448f26cd01f1594a3bf0fde75b"
        },
        {
          "alg" : "SHA-512",
          "content" : "7f2010cda152f6baecc2a0c9d79f8bb2b7eee8a88f80dd8ed5bf2f723885cf3f9f60e373db77bd591225f3037f33f4a7c08d05e807356899a6af818225b6aa4c"
        },
        {
          "alg" : "SHA-384",
          "content" : "d1d99aee334155d4c2dfddcc63dfd1b8ce9d7e4a67bba29be0b6b5a54a717ea95decb0fa300ef9e05b589d273952e22e"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.flink/flink-shaded-netty@4.1.91.Final-17.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://flink.apache.org/flink-shaded-netty"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink-shaded/flink-shaded-netty"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.flink/flink-shaded-netty@4.1.91.Final-17.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.flink",
      "name" : "flink-shaded-guava",
      "version" : "31.1-jre-17.0",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "b8c5129f4164f8ee2086854bdb289690"
        },
        {
          "alg" : "SHA-1",
          "content" : "00fa393c1db1308f4fb920f010f79c4c774e2f39"
        },
        {
          "alg" : "SHA-256",
          "content" : "03442ae97c4ca34388568cbce0e67e9911b0137b2b3849dff7a550008d5a4336"
        },
        {
          "alg" : "SHA-512",
          "content" : "15bb65f24054768915fbc29a95dfa93307b0babc39a02a204ae65eff44f259357b471fef9967b864b7a78e07d266933ce8e3eda8a866fcc73643cc38bcc5653f"
        },
        {
          "alg" : "SHA-384",
          "content" : "c8e6f2630c0824bbd1902a25884f09c076efbbbe0265f5d3fb49370affcff81ee5dd8b7887ba4bf063915446b937117a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.flink/flink-shaded-guava@31.1-jre-17.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://flink.apache.org/flink-shaded-guava"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink-shaded/flink-shaded-guava"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.flink/flink-shaded-guava@31.1-jre-17.0?type=jar"
    },
    {
      "publisher" : "QOS.ch",
      "group" : "org.slf4j",
      "name" : "slf4j-api",
      "version" : "1.7.36",
      "description" : "The slf4j API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "872da51f5de7f3923da4de871d57fd85"
        },
        {
          "alg" : "SHA-1",
          "content" : "6c62681a2f655b49963a5983b8b0950a6120ae14"
        },
        {
          "alg" : "SHA-256",
          "content" : "d3ef575e3e4979678dc01bf1dcce51021493b4d11fb7f1be8ad982877c16a1c0"
        },
        {
          "alg" : "SHA-512",
          "content" : "f9b033fc019a44f98b16048da7e2b59edd4a6a527ba60e358f65ab88e0afae03a9340f1b3e8a543d49fa542290f499c5594259affa1ff3e6e7bf3b428d4c610b"
        },
        {
          "alg" : "SHA-384",
          "content" : "2b14ad035877087157e379d3277dcdcd79e58d6bdb147c47d29e377d75ce53ad42cafbf22f5fb7827c7e946ff4876b9a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.slf4j.org"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/qos-ch/slf4j/slf4j-api"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
    },
    {
      "group" : "com.google.code.findbugs",
      "name" : "jsr305",
      "version" : "1.3.9",
      "description" : "JSR305 Annotations for Findbugs",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "1d5a772e400b04bb67a7ef4a0e0996d8"
        },
        {
          "alg" : "SHA-1",
          "content" : "40719ea6961c0cb6afaeb6a921eaa1f6afd4cfdf"
        },
        {
          "alg" : "SHA-256",
          "content" : "905721a0eea90a81534abb7ee6ef4ea2e5e645fa1def0a5cd88402df1b46c9ed"
        },
        {
          "alg" : "SHA-512",
          "content" : "06da282cfd8e30d9f8cf17702b8709172b00e22b75a627a1d85f8989615b8a1a401bc25d9aee7b14aed1d9b5df73bf2ea8d66f9c8468d9577c29f0ccfa2cc70a"
        },
        {
          "alg" : "SHA-384",
          "content" : "56e6b41ef62eb5edfed0203802cefae9c2df86388148e420bb0c687abb2b80e14d5c2a82d5b35dce4badaf148f94eada"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://findbugs.sourceforge.net/"
        },
        {
          "type" : "vcs",
          "url" : "http://findbugs.googlecode.com/svn/trunk/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.flink",
      "name" : "flink-shaded-force-shading",
      "version" : "17.0",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "6890ff555c82f3bb156cf9c73bf09cf9"
        },
        {
          "alg" : "SHA-1",
          "content" : "345c153973a17fb8a98d368352e14893edcbd610"
        },
        {
          "alg" : "SHA-256",
          "content" : "dcc7dff160a40b74fa5db2805b2004153ffd0517968f3c7843a8ee43be82e710"
        },
        {
          "alg" : "SHA-512",
          "content" : "9de23513832248618b78e279c0e3900f5cafb7193254ef6818b4f0b6f3b70045dd9cc4fdd13caeeca8b70a44f38201ce055f07248cdf08930a20e1b7a73997ff"
        },
        {
          "alg" : "SHA-384",
          "content" : "063611872b4b1a1718e0472e32198bded0d74fa656e5c47a7b20038cd5ff70106e3109b60fe882880feea486e1ef83bf"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.flink/flink-shaded-force-shading@17.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://flink.apache.org/flink-shaded-force-shading"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/flink-shaded/flink-shaded-force-shading"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.flink/flink-shaded-force-shading@17.0?type=jar"
    },
    {
      "publisher" : "Joe Walnes, Henri Tremblay, Leonardo Mesquita",
      "group" : "org.objenesis",
      "name" : "objenesis",
      "version" : "2.1",
      "description" : "A library for instantiating Java objects",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "32ccb1d20a42b5aaaceb90c9082a2efa"
        },
        {
          "alg" : "SHA-1",
          "content" : "87c0ea803b69252868d09308b4618f766f135a96"
        },
        {
          "alg" : "SHA-256",
          "content" : "c74330cc6b806c804fd37e74487b4fe5d7c2750c5e15fbc6efa13bdee1bdef80"
        },
        {
          "alg" : "SHA-512",
          "content" : "1dec9ee30812b8006e536a2749c5781ccdc4b446539efb6fa534f22e70562033876bf2eb22c6946d617695729bd65f0f65b984f15f05ac63db5bed215e74427c"
        },
        {
          "alg" : "SHA-384",
          "content" : "657b8a3b80a5475f198425396f7264301f9e0f3ad5dc336ef0c7b46874f5544861a8a2fd48cdb5f672e199a6935c19d1"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.objenesis/objenesis@2.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://objenesis.org"
        },
        {
          "type" : "distribution",
          "url" : "http://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/easymock/easymock/objenesis"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.objenesis/objenesis@2.1?type=jar"
    }
  ],
  "dependencies" : [
    {
      "ref" : "pkg:maven/org.apache.flink/flink-queryable-state-client-java@1.19.1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.flink/flink-core@1.19.1?type=jar",
        "pkg:maven/org.apache.flink/flink-shaded-netty@4.1.91.Final-17.0?type=jar",
        "pkg:maven/org.apache.flink/flink-shaded-guava@31.1-jre-17.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar",
        "pkg:maven/org.apache.flink/flink-shaded-force-shading@17.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.flink/flink-core@1.19.1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.flink/flink-annotations@1.19.1?type=jar",
        "pkg:maven/org.apache.flink/flink-metrics-core@1.19.1?type=jar",
        "pkg:maven/org.apache.flink/flink-shaded-asm-9@9.5-17.0?type=jar",
        "pkg:maven/org.apache.flink/flink-shaded-jackson@2.14.2-17.0?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar",
        "pkg:maven/org.snakeyaml/snakeyaml-engine@2.6?type=jar",
        "pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar",
        "pkg:maven/com.esotericsoftware.kryo/kryo@2.24.0?type=jar",
        "pkg:maven/commons-collections/commons-collections@3.2.2?type=jar",
        "pkg:maven/org.apache.commons/commons-compress@1.26.0?type=jar",
        "pkg:maven/org.apache.flink/flink-shaded-guava@31.1-jre-17.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.flink/flink-annotations@1.19.1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.flink/flink-metrics-core@1.19.1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.flink/flink-annotations@1.19.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.flink/flink-shaded-asm-9@9.5-17.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.flink/flink-shaded-jackson@2.14.2-17.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.snakeyaml/snakeyaml-engine@2.6?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.esotericsoftware.kryo/kryo@2.24.0?type=jar",
      "dependsOn" : [
        "pkg:maven/com.esotericsoftware.minlog/minlog@1.2?type=jar",
        "pkg:maven/org.objenesis/objenesis@2.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.esotericsoftware.minlog/minlog@1.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.objenesis/objenesis@2.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/commons-collections/commons-collections@3.2.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-compress@1.26.0?type=jar",
      "dependsOn" : [
        "pkg:maven/commons-io/commons-io@2.15.1?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/commons-io/commons-io@2.15.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.flink/flink-shaded-guava@31.1-jre-17.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.flink/flink-shaded-netty@4.1.91.Final-17.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.flink/flink-shaded-force-shading@17.0?type=jar",
      "dependsOn" : [ ]
    }
  ]
}