{ "bomFormat" : "CycloneDX", "specVersion" : "1.6", "serialNumber" : "urn:uuid:334d771e-3d13-3d5b-9781-b9fdce6d7070", "version" : 1, "metadata" : { "lifecycles" : [ { "phase" : "build" } ], "tools" : { "components" : [ { "type" : "library", "author" : "OWASP Foundation", "group" : "org.cyclonedx", "name" : "cyclonedx-maven-plugin", "version" : "2.9.1", "description" : "CycloneDX Maven plugin", "hashes" : [ { "alg" : "MD5", "content" : "9c7a565cf28cce58557d0c621c5ea4b1" }, { "alg" : "SHA-1", "content" : "be882d5a22050bfa9d19090b1420c188617d0e1c" }, { "alg" : "SHA-256", "content" : "698e0f37184a5b28c245c4065fd036dfce253b52f82fbb7113d81d36326cc249" }, { "alg" : "SHA-512", "content" : "c0f0b11026858166f872a2eb54719492e5cecaa0bc9cd6b30b3ecb4a174eed220f4a1b5829d18d6734128e778d3cb3db7ffed177c92866133129cb29081814a0" }, { "alg" : "SHA-384", "content" : "d80964707dfe5caca8c70521d5066f57589304c0a657e6fbc7c0614ea0fc7b3b3dbe7778361eee0f54ba111e9cb0ffcb" }, { "alg" : "SHA3-384", "content" : "80bc3a275d9514bc457461ff52a72add8c7ecbbc01d8912efce57139016c544ee776981851be0a58fa977ab4221f703f" }, { "alg" : "SHA3-256", "content" : "142317d6f245390f4fd2d0c100b16281b8dfc5c0c2cff86943bdcc97039cb699" }, { "alg" : "SHA3-512", "content" : "af0fb9137c90b65d1a07f72e4d51ae509956cdb8800f35c961b037cdda1fe4a14ce3b496cef71ba85f1621affcfe29cd42704ae4191ff0b090a9602087c8997b" } ] } ] }, "component" : { "type" : "library", "bom-ref" : "pkg:maven/org.apache.santuario/xmlsec@3.0.6?type=bundle", "publisher" : "The Apache Software Foundation", "group" : "org.apache.santuario", "name" : "xmlsec", "version" : "3.0.6", "description" : "Apache XML Security for Java supports XML-Signature Syntax and Processing, W3C Recommendation 12 February 2002, and XML Encryption Syntax and Processing, W3C Recommendation 10 December 2002. As of version 1.4, the library supports the standard Java API JSR-105: XML Digital Signature APIs.", "licenses" : [ { "license" : { "id" : "Apache-2.0", "url" : "https://www.apache.org/licenses/LICENSE-2.0" } } ], "purl" : "pkg:maven/org.apache.santuario/xmlsec@3.0.6?type=bundle", "externalReferences" : [ { "type" : "website", "url" : "https://santuario.apache.org/" }, { "type" : "distribution-intake", "url" : "https://repository.apache.org/service/local/staging/deploy/maven2" }, { "type" : "issue-tracker", "url" : "https://issues.apache.org/jira/browse/SANTUARIO" }, { "type" : "mailing-list", "url" : "http://news.gmane.org/gmane.text.xml.security.devel" }, { "type" : "vcs", "url" : "https://gitbox.apache.org/repos/asf?p=santuario-xml-security-java.git;a=summary" } ] }, "properties" : [ { "name" : "maven.goal", "value" : "makeAggregateBom" }, { "name" : "maven.scopes", "value" : "compile,provided,runtime,system" }, { "name" : "cdx:reproducible", "value" : "enabled" } ] }, "components" : [ { "type" : "library", "bom-ref" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar", "publisher" : "QOS.ch", "group" : "org.slf4j", "name" : "slf4j-api", "version" : "1.7.36", "description" : "The slf4j API", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "872da51f5de7f3923da4de871d57fd85" }, { "alg" : "SHA-1", "content" : "6c62681a2f655b49963a5983b8b0950a6120ae14" }, { "alg" : "SHA-256", "content" : "d3ef575e3e4979678dc01bf1dcce51021493b4d11fb7f1be8ad982877c16a1c0" }, { "alg" : "SHA-512", "content" : "f9b033fc019a44f98b16048da7e2b59edd4a6a527ba60e358f65ab88e0afae03a9340f1b3e8a543d49fa542290f499c5594259affa1ff3e6e7bf3b428d4c610b" }, { "alg" : "SHA-384", "content" : "2b14ad035877087157e379d3277dcdcd79e58d6bdb147c47d29e377d75ce53ad42cafbf22f5fb7827c7e946ff4876b9a" }, { "alg" : "SHA3-384", "content" : "3bc3110dafb8d5be16a39f3b2671a466463cd99eb39610c0e4719a7bf2d928f2ea213c734887c6926a07c4cca7769e4b" }, { "alg" : "SHA3-256", "content" : "ba2608179fcf46e2291a90b9cbb4aa30d718e481f59c350cc21c73b88d826881" }, { "alg" : "SHA3-512", "content" : "14c4edcd19702ef607d78826839d8a6d3a39157df54b89a801d3d3cbbe1307131a77671b041c761122730fb1387888c5ec2e46bdd80e1cb07f8f144676441824" } ], "licenses" : [ { "license" : { "id" : "MIT", "url" : "https://opensource.org/license/mit/" } } ], "purl" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar", "externalReferences" : [ { "type" : "website", "url" : "http://www.slf4j.org" }, { "type" : "distribution-intake", "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type" : "vcs", "url" : "https://github.com/qos-ch/slf4j/slf4j-api" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@3.0.1?type=jar", "publisher" : "Eclipse Foundation", "group" : "jakarta.xml.bind", "name" : "jakarta.xml.bind-api", "version" : "3.0.1", "description" : "Jakarta XML Binding API", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "ce443876615a903fdff9e0d5d13cb8d4" }, { "alg" : "SHA-1", "content" : "5257932df36ff3e4e6de50429dde946490a6a800" }, { "alg" : "SHA-256", "content" : "b8fb4bee3ff5b5c1ef77144d8411316018d7bbd41fcf1ede0646f7978546b867" }, { "alg" : "SHA-512", "content" : "7c74cedf7c0baaa5166311a4c4300a72eb09ae280ec3376553dd8651e6e3d5f100794421ba647b328195dfcf98a6cf7623169a0b87de3f13984dd7436c284807" }, { "alg" : "SHA-384", "content" : "9e3e8b7b86884751280e71e3888d1ff3f4f0c9d6446ed8e32cd61f030532b455b7401d1495dc0da72cd3f6300c68f482" }, { "alg" : "SHA3-384", "content" : "47bfcb7a14b57aaa6c813a54702af321dd488cd1697a52476bb46fb9e6162cd46b62faa876a77752b4a7271241924b38" }, { "alg" : "SHA3-256", "content" : "91d3e457af90b684e246e02808fb8ededfef65f602717e3815417cb63f22c6b6" }, { "alg" : "SHA3-512", "content" : "3c72bb852c244bfb7da0f382fda743c0f8522f56fa77337b203f5027ba8b32d12cd6d0d6ffadfea65552b508be9b40601d876b398a8fca8f4ae9ecd979154a93" } ], "licenses" : [ { "license" : { "id" : "BSD-3-Clause" } } ], "purl" : "pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@3.0.1?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://github.com/eclipse-ee4j/jaxb-api/jakarta.xml.bind-api" }, { "type" : "distribution-intake", "url" : "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type" : "issue-tracker", "url" : "https://github.com/eclipse-ee4j/jaxb-api/issues" }, { "type" : "mailing-list", "url" : "https://dev.eclipse.org/mhonarc/lists/jaxb-dev" }, { "type" : "vcs", "url" : "https://github.com/eclipse-ee4j/jaxb-api.git/jakarta.xml.bind-api" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/commons-codec/commons-codec@1.18.0?type=jar", "publisher" : "The Apache Software Foundation", "group" : "commons-codec", "name" : "commons-codec", "version" : "1.18.0", "description" : "The Apache Commons Codec component contains encoders and decoders for formats such as Base16, Base32, Base64, digest, and Hexadecimal. In addition to these widely used encoders and decoders, the codec package also maintains a collection of phonetic encoding utilities.", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "2abf189633424b9292fd57a3192c0ed5" }, { "alg" : "SHA-1", "content" : "ee45d1cf6ec2cc2b809ff04b4dc7aec858e0df8f" }, { "alg" : "SHA-256", "content" : "ba005f304cef92a3dede24a38ad5ac9b8afccf0d8f75839d6c1338634cf7f6e4" }, { "alg" : "SHA-512", "content" : "4d974c2203dd6780da6e50ec1c7d8ff727f9ed55fba706fdc50b9484fc5da5e03b67bc6ad2f0d9ae74f823ecce04a40c513bbabd8bf9e91ac8fec04cd3519ffa" }, { "alg" : "SHA-384", "content" : "75d428b434c25041068005fd48f720ddfec8a9fc044b8df53a668828894e9ad542b92601a224d618200e3953ee3c8966" }, { "alg" : "SHA3-384", "content" : "b0d03e9b6b548ec3b7e3c0ddc644cf40d36203606fd69be3fccc72c86b0e048bb6c8e7bd74afb77e371e839bce7cc6aa" }, { "alg" : "SHA3-256", "content" : "c33f900364c7ba15976e262ac26dbe4ece516bed72278da0e6c636d2c7ffabe6" }, { "alg" : "SHA3-512", "content" : "fefe6c1c33f63b9a873a522f8b1f605e4197ed9fe849af650ad8791503cb58cf3d4facafe4f46e070ea11ccfbaec1084e11294154531a07d8ec18ea9c40d9769" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0", "url" : "https://www.apache.org/licenses/LICENSE-2.0" } } ], "purl" : "pkg:maven/commons-codec/commons-codec@1.18.0?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://commons.apache.org/proper/commons-codec/" }, { "type" : "build-system", "url" : "https://github.com/apache/commons-parent/actions" }, { "type" : "distribution-intake", "url" : "https://repository.apache.org/service/local/staging/deploy/maven2" }, { "type" : "issue-tracker", "url" : "https://issues.apache.org/jira/browse/CODEC" }, { "type" : "mailing-list", "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/" }, { "type" : "vcs", "url" : "https://github.com/apache/commons-codec" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/com.fasterxml.woodstox/woodstox-core@6.5.1?type=jar", "publisher" : "FasterXML", "group" : "com.fasterxml.woodstox", "name" : "woodstox-core", "version" : "6.5.1", "description" : "Woodstox is a high-performance XML processor that implements Stax (JSR-173), SAX2 and Stax2 APIs", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "961dd4b2afedf95293dfdd8adfc8f211" }, { "alg" : "SHA-1", "content" : "c6e52e84fe959e69a243c83ec7d24cd889444ddf" }, { "alg" : "SHA-256", "content" : "c928d60665c6415fb1c39775cf95cfc44f7f4580cf5ab01b1c380ebffd76887f" }, { "alg" : "SHA-512", "content" : "d9b3cf6aaac85d8c349e7a24ad30f7e23b7765f1b7ce2fdf301bf2240b9c7ee184bdd938e58be6df9ac90e97e3b8c7b34f8fa9da27d1ed8de78765a8345b18f2" }, { "alg" : "SHA-384", "content" : "d51e67aae26449a2cdffa90a08b09cc805b85da3e758011a0945fc8b0ee8c18e98c6f94f0c0cf46b7a49e7370073068c" }, { "alg" : "SHA3-384", "content" : "2e731b74e4814647b1a320cd2f1b9f9914db1cb07510e69fb4dda33c6b1586fb2ee9e3f5af027c98dd0d33e2ed4b19de" }, { "alg" : "SHA3-256", "content" : "f84ca4c9bb77abb6e61930c7debee48497b2febc30d48329c6b15546dd00371b" }, { "alg" : "SHA3-512", "content" : "257aea7a23c4631eaaa942763e639d239660f29cfb7190f0b112abf6301a214fcc8e84b118ba73d92861a5f441bee479908a4831352ce2278d3d40ef51067894" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/com.fasterxml.woodstox/woodstox-core@6.5.1?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://github.com/FasterXML/woodstox" }, { "type" : "distribution-intake", "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type" : "issue-tracker", "url" : "https://github.com/FasterXML/woodstox/issues" }, { "type" : "vcs", "url" : "https://github.com/FasterXML/woodstox" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/org.codehaus.woodstox/stax2-api@4.2.1?type=jar", "publisher" : "fasterxml.com", "group" : "org.codehaus.woodstox", "name" : "stax2-api", "version" : "4.2.1", "description" : "tax2 API is an extension to basic Stax 1.0 API that adds significant new functionality, such as full-featured bi-direction validation interface and high-performance Typed Access API.", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "af8377bc7882332e22456616a9f164f6" }, { "alg" : "SHA-1", "content" : "a3f7325c52240418c2ba257b103c3c550e140c83" }, { "alg" : "SHA-256", "content" : "678567e48b51a42c65c699f266539ad3d676d4b1a5b0ad7d89ece8b9d5772579" }, { "alg" : "SHA-512", "content" : "00efc5d4d17540fb180c5b20d456630a8b3262dff46676689ae916ba16f0fbd9b1a71c7badfb254faad6597f94fed1edb96f77c15f40178eaf4d8cd35cea5e8d" }, { "alg" : "SHA-384", "content" : "97a6a9f0cc666776e4a4f08729c303d2a602ce5c25ee633cd6c54c72f12d11e9d43634ca6ca4ef7da5973a52030384da" }, { "alg" : "SHA3-384", "content" : "683a1f110ab84333e7517dabe175b91d7ea2fbead2f9d02acf798c588a7508bc67580642afa8d57441bc56ce610d5b0f" }, { "alg" : "SHA3-256", "content" : "5e8e54209fb6b580e928e703ef11645aff1a21dfd47cca2dc0e53d0befaef09c" }, { "alg" : "SHA3-512", "content" : "d79338a481605c94e144c967cb7adbc6cfd06ee6a1182b5ebc8cd8ad3deedd707931e404aa197bc94d3b5a5d82a2e6dd6a2f6cc9dafc42ce3ad5061076b05199" } ], "licenses" : [ { "license" : { "id" : "BSD-4-Clause" } } ], "purl" : "pkg:maven/org.codehaus.woodstox/stax2-api@4.2.1?type=jar", "externalReferences" : [ { "type" : "website", "url" : "http://github.com/FasterXML/stax2-api" }, { "type" : "distribution-intake", "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type" : "issue-tracker", "url" : "https://github.com/FasterXML/stax2-api/issues" }, { "type" : "vcs", "url" : "http://github.com/FasterXML/stax2-api" } ] } ], "dependencies" : [ { "ref" : "pkg:maven/org.apache.santuario/xmlsec@3.0.6?type=bundle", "dependsOn" : [ "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar", "pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@3.0.1?type=jar", "pkg:maven/commons-codec/commons-codec@1.18.0?type=jar", "pkg:maven/com.fasterxml.woodstox/woodstox-core@6.5.1?type=jar" ] }, { "ref" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@3.0.1?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/commons-codec/commons-codec@1.18.0?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/com.fasterxml.woodstox/woodstox-core@6.5.1?type=jar", "dependsOn" : [ "pkg:maven/org.codehaus.woodstox/stax2-api@4.2.1?type=jar" ] }, { "ref" : "pkg:maven/org.codehaus.woodstox/stax2-api@4.2.1?type=jar", "dependsOn" : [ ] } ] }