{
  "bomFormat" : "CycloneDX",
  "specVersion" : "1.4",
  "serialNumber" : "urn:uuid:90bac774-10cd-4abd-9865-99f1baba93aa",
  "version" : 1,
  "metadata" : {
    "timestamp" : "2025-05-23T08:32:27Z",
    "tools" : [
      {
        "vendor" : "OWASP Foundation",
        "name" : "CycloneDX Maven plugin",
        "version" : "2.7.9",
        "hashes" : [
          {
            "alg" : "MD5",
            "content" : "8e595cdb67f17e4b41e046456970591d"
          },
          {
            "alg" : "SHA-1",
            "content" : "69e8ca804520d09ce4657e7235bae84d01cbffa6"
          },
          {
            "alg" : "SHA-256",
            "content" : "aa09074fe5aa403c008cd4fc7ef8ce41cd244489337f16b3e91a3914158a4db8"
          },
          {
            "alg" : "SHA-512",
            "content" : "1488a8112da8e675813d7585f57c5efb178aed32901118186ee12d0e4ae3d19c53774c7f860bf70d17d70f050119b69443a2637cf641675b4b5d9cdcdd69b89b"
          },
          {
            "alg" : "SHA-384",
            "content" : "b097295dfbf10887abc6eec58d4d0822cde5a73d1f5c1cf183a57bf569016ad5ced9d34efae3e574d82bb62837540c6c"
          }
        ]
      }
    ],
    "component" : {
      "publisher" : "Apache Software Foundation",
      "group" : "org.apache.spark",
      "name" : "spark-sql-api_2.12",
      "version" : "3.5.6",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.spark/spark-sql-api_2.12@3.5.6?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://spark.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/SPARK"
        },
        {
          "type" : "mailing-list",
          "url" : "dev-subscribe@spark.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "scm:git:git@github.com:apache/spark.git/sql/spark-sql-api_2.12"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.spark/spark-sql-api_2.12@3.5.6?type=jar"
    },
    "properties" : [
      {
        "name" : "maven.goal",
        "value" : "makeBom"
      },
      {
        "name" : "maven.scopes",
        "value" : "compile,provided,runtime,system"
      }
    ]
  },
  "components" : [
    {
      "publisher" : "LAMP/EPFL",
      "group" : "org.scala-lang",
      "name" : "scala-reflect",
      "version" : "2.12.18",
      "description" : "Reflection Library for the Scala Programming Language",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "b642844f7dde3e3cc143275a85075242"
        },
        {
          "alg" : "SHA-1",
          "content" : "7e1a6985bfbe78bdc94f33613301ef385d4629b4"
        },
        {
          "alg" : "SHA-256",
          "content" : "d6a24e175246541ffcbc965a231aa1d3bb01d61def196f91495690fabf9783bc"
        },
        {
          "alg" : "SHA-512",
          "content" : "ef5661d7832123757eb3b30745860b56ca343b9268eab97519d7a0793a1035b8d452a46767ce65f2b5370c7be6f9dcf0ffdab4ac04e41fc0a85374987d4551ca"
        },
        {
          "alg" : "SHA-384",
          "content" : "0d372d4d3579397253939207b433de9092d460291beda2f39c6df4518e2b73cec69ae622be31115e4fec2efdd7f1cd6d"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.scala-lang/scala-reflect@2.12.18?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.scala-lang.org/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/scala/bug/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/scala/scala"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.scala-lang/scala-reflect@2.12.18?type=jar"
    },
    {
      "publisher" : "LAMP/EPFL",
      "group" : "org.scala-lang",
      "name" : "scala-library",
      "version" : "2.12.18",
      "description" : "Standard library for the Scala Programming Language",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "a7dc0cf9f73ab2dffb2f34b69e93c349"
        },
        {
          "alg" : "SHA-1",
          "content" : "fa825f984172f6801e3d8c476071b1823c0a925b"
        },
        {
          "alg" : "SHA-256",
          "content" : "e51e6636c003359e106bea4ad99def70e613c290190c8c84f10f9560dd5b00ae"
        },
        {
          "alg" : "SHA-512",
          "content" : "d50e05a806168687b1526bc197ba626973121eb692e68f567a15a944eb44e3fec37d5147e000d3bd05d69dc9874695389041c6c16bdcc1e665c1ef04e01be67d"
        },
        {
          "alg" : "SHA-384",
          "content" : "7bec1053a4befc082a7ecbf13d8c17082e113fb5d4a1f389f2de8d23e11372b42941367a09878b236b830190ab32d80b"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.scala-lang/scala-library@2.12.18?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.scala-lang.org/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/scala/bug/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/scala/scala"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.scala-lang/scala-library@2.12.18?type=jar"
    },
    {
      "publisher" : "org.scala-lang.modules",
      "group" : "org.scala-lang.modules",
      "name" : "scala-parser-combinators_2.12",
      "version" : "2.3.0",
      "description" : "scala-parser-combinators",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "c455c1ff68f81060de08df6acc60d5c4"
        },
        {
          "alg" : "SHA-1",
          "content" : "0d629e5386cd9fa205434fc644ccce0217fd3477"
        },
        {
          "alg" : "SHA-256",
          "content" : "15bf13f5ce0e9ff4224603c44281265d0509ac31ea823c46aa29a5a52e09a574"
        },
        {
          "alg" : "SHA-512",
          "content" : "f59a980004d298f7e1a199a2bbdffa71f01c4b278691c4c864f0b74419bc1d44ba41793e45d733b67ded4928021232a3705a172c0161c7b5bb62982c401ffa0f"
        },
        {
          "alg" : "SHA-384",
          "content" : "21b02c08c542596d0e0433652b94bbb1a61eee309d8caf5ec5fc4d1135e23fce082d0238bc011c6c6558a9ec73c46c80"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.scala-lang.modules/scala-parser-combinators_2.12@2.3.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.scala-lang.org/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/scala/scala-parser-combinators/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/scala/scala-parser-combinators"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.scala-lang.modules/scala-parser-combinators_2.12@2.3.0?type=jar"
    },
    {
      "publisher" : "Apache Software Foundation",
      "group" : "org.apache.spark",
      "name" : "spark-common-utils_2.12",
      "version" : "3.5.6",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "bbfea657efe2ed6b19a8386544c6223a"
        },
        {
          "alg" : "SHA-1",
          "content" : "79ea83e8d2b9ad3487fbef2726ad771cd00bf953"
        },
        {
          "alg" : "SHA-256",
          "content" : "a06325bba13c39c5b4835dbdaf73be9b1c1ffdf1e35411ec9a6d40ec66fa8ba9"
        },
        {
          "alg" : "SHA-512",
          "content" : "5d7c5f95213e4da784ba761ffb6a72fa528c17ea43f43cb7642b3c91c589cc4f92d6b23453d090afab48835433fdf56a31c6f7effb17e81a3d0285824eff1175"
        },
        {
          "alg" : "SHA-384",
          "content" : "6b710ee985275d13cc9ffc9151ffa49f2a2ff9572b56a7adfd4441f4895baba8e8aca9270ff87ded8a2ba2c3e6fdb7f9"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.spark/spark-common-utils_2.12@3.5.6?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://spark.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/SPARK"
        },
        {
          "type" : "mailing-list",
          "url" : "dev-subscribe@spark.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "scm:git:git@github.com:apache/spark.git/common/spark-common-utils_2.12"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.spark/spark-common-utils_2.12@3.5.6?type=jar"
    },
    {
      "publisher" : "Apache Software Foundation",
      "group" : "org.apache.spark",
      "name" : "spark-tags_2.12",
      "version" : "3.5.6",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "c6f0f06ba1990aa828eb25e63e54ef44"
        },
        {
          "alg" : "SHA-1",
          "content" : "b97c73f0c21bc3a6e5570698226efe140158c248"
        },
        {
          "alg" : "SHA-256",
          "content" : "8cbd15332921e02f06f70a18bba0735ab8248f09b45cfe3b076fa6a2db518494"
        },
        {
          "alg" : "SHA-512",
          "content" : "d8f1fe5e7fd31cf56611be5c6c7b23377876a78987e736e1f5fe967111a53b166bbae18cf2967b9672d5a26b136307160ba56c023a9a50edfa4461bc2f43e4ab"
        },
        {
          "alg" : "SHA-384",
          "content" : "ba28a589161268f62ab2679b1c0d86de1bee7a75c6ad030d9a26ffdb0e219eac9effb03f0b01c970b2bfee1ac4d1c7e4"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.spark/spark-tags_2.12@3.5.6?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://spark.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/SPARK"
        },
        {
          "type" : "mailing-list",
          "url" : "dev-subscribe@spark.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "scm:git:git@github.com:apache/spark.git/common/spark-tags_2.12"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.spark/spark-tags_2.12@3.5.6?type=jar"
    },
    {
      "publisher" : "FasterXML",
      "group" : "com.fasterxml.jackson.core",
      "name" : "jackson-databind",
      "version" : "2.15.2",
      "description" : "General data-binding functionality for Jackson: works on core streaming API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "20ac0d0526a456274409fa852eb74087"
        },
        {
          "alg" : "SHA-1",
          "content" : "9353b021f10c307c00328f52090de2bdb4b6ff9c"
        },
        {
          "alg" : "SHA-256",
          "content" : "0eb2fdad6e40ab8832a78c9b22f58196dd970594e8d3d5a26ead87847c4f3a96"
        },
        {
          "alg" : "SHA-512",
          "content" : "edf622f3d2bb2cdf308875e467f28eafdd581c6ad47992a2b49a2c803b597c7fe4330c8f887687599c8a6a529d8b11054f8b354b7ddddd2bf904ef347d4f1cd2"
        },
        {
          "alg" : "SHA-384",
          "content" : "cced300ea06748cc30cdabf1a0a8e45749d3d2a52740975acd858bd13b83458d535a52fc4cc0eb8991ebd3638b9688ec"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.15.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/FasterXML/jackson"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/FasterXML/jackson-databind/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/FasterXML/jackson-databind"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.15.2?type=jar"
    },
    {
      "publisher" : "FasterXML",
      "group" : "com.fasterxml.jackson.core",
      "name" : "jackson-annotations",
      "version" : "2.15.2",
      "description" : "Core annotations used for value types, used by Jackson data binding package.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "71dabcaac955a8bd17b5bba6580aac5b"
        },
        {
          "alg" : "SHA-1",
          "content" : "4724a65ac8e8d156a24898d50fd5dbd3642870b8"
        },
        {
          "alg" : "SHA-256",
          "content" : "04e21f94dcfee4b078fa5a5f53047b785aaba69d19de392f616e7a7fe5d3882f"
        },
        {
          "alg" : "SHA-512",
          "content" : "c9ffb4cf3e409921bca1fa6126ca8746c611042ac3fcf0e4f991d23d12b20ef0946ef1421d991ae8ed86012059df4e08fb776d96db6d13147c2ec85e22254537"
        },
        {
          "alg" : "SHA-384",
          "content" : "78885119a700d5dd717fc83e58bf063e1fd07bc823846b6797af6a04a99e92e8fbcf28c3a1316079e6695c138c110deb"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.15.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/FasterXML/jackson"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/FasterXML/jackson-annotations/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/FasterXML/jackson-annotations"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.15.2?type=jar"
    },
    {
      "publisher" : "FasterXML",
      "group" : "com.fasterxml.jackson.core",
      "name" : "jackson-core",
      "version" : "2.15.2",
      "description" : "Core Jackson processing abstractions (aka Streaming API), implementation for JSON",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "e51fdee85b48e6637ad9e85ee76b58df"
        },
        {
          "alg" : "SHA-1",
          "content" : "a6fe1836469a69b3ff66037c324d75fc66ef137c"
        },
        {
          "alg" : "SHA-256",
          "content" : "303c99e82b1faa91a0bae5d8fbeb56f7e2adf9b526a900dd723bf140d62bd4b4"
        },
        {
          "alg" : "SHA-512",
          "content" : "a8a3ddf5c8a732fc3810f9c113d88fd59bf613d15dbf9d3e24dd196b2b8c2195f4088375e3d03906f2629e62983fef3267b5478abd5ab1df733ec58cd00efae6"
        },
        {
          "alg" : "SHA-384",
          "content" : "22f4b71de5860b9c54dd85091d5b1312f7f5097a376f68f5a35b32a342858bf2e24ed394d76be0648545a6137d78b82e"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.15.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/FasterXML/jackson-core"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/FasterXML/jackson-core/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/FasterXML/jackson-core"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.15.2?type=jar"
    },
    {
      "publisher" : "com.fasterxml.jackson.module",
      "group" : "com.fasterxml.jackson.module",
      "name" : "jackson-module-scala_2.12",
      "version" : "2.15.2",
      "description" : "jackson-module-scala",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "ecc6a1f298669beee1a395538e412aab"
        },
        {
          "alg" : "SHA-1",
          "content" : "e3d122234da3e5e22c73bd42291616f5331b547d"
        },
        {
          "alg" : "SHA-256",
          "content" : "81259ec6730f6d4b85d5586c9eaa6e75a6885b34bfca572be03126a9179719fe"
        },
        {
          "alg" : "SHA-512",
          "content" : "39fb1e425a124a7e50faaa11a0e858603c7b789fd66f78d006f1fffe08a83c4811011de797c8943e42c9a46bf39219684080108f3b346014793f8860b63d96a2"
        },
        {
          "alg" : "SHA-384",
          "content" : "76d844db959b3f16f848386cb16c76f84065fcde92b706f1b5c6e2ec16c931a4e53cd4cc80f90fb0ae595aa71531f95e"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.fasterxml.jackson.module/jackson-module-scala_2.12@2.15.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/FasterXML/jackson-module-scala"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/FasterXML/jackson-module-scala"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.fasterxml.jackson.module/jackson-module-scala_2.12@2.15.2?type=jar"
    },
    {
      "group" : "com.thoughtworks.paranamer",
      "name" : "paranamer",
      "version" : "2.8",
      "description" : "Paranamer allows runtime access to constructor and method parameter names for Java classes",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f213c72b67d4850f17a4a3e9064904de"
        },
        {
          "alg" : "SHA-1",
          "content" : "619eba74c19ccf1da8ebec97a2d7f8ba05773dd6"
        },
        {
          "alg" : "SHA-256",
          "content" : "688cb118a6021d819138e855208c956031688be4b47a24bb615becc63acedf07"
        },
        {
          "alg" : "SHA-512",
          "content" : "d774b05135d34bc42d8a7bee6466715bc44837b95bbe618faa8680978c4348652292ea6dd8eeb88dc7fa859bfe685f4d8329032cbf4fce2ea7e555ba3243cc14"
        },
        {
          "alg" : "SHA-384",
          "content" : "699148a3f69ae205aa47c82e2cb78d3949afc71b090935579a0363fee8675eec3ba05e0d3127295213b39aad3485690b"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-4-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/com.thoughtworks.paranamer/paranamer@2.8?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/paul-hammant/paranamer/paranamer"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/paul-hammant/paranamer/paranamer"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.thoughtworks.paranamer/paranamer@2.8?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-text",
      "version" : "1.10.0",
      "description" : "Apache Commons Text is a library focused on algorithms working on strings.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "4afc9bfa2d31dbf7330c98fcc954b892"
        },
        {
          "alg" : "SHA-1",
          "content" : "3363381aef8cef2dbc1023b3e3a9433b08b64e01"
        },
        {
          "alg" : "SHA-256",
          "content" : "770cd903fa7b604d1f7ef7ba17f84108667294b2b478be8ed1af3bffb4ae0018"
        },
        {
          "alg" : "SHA-512",
          "content" : "afd836a1094449e0a791fee67363666c47b6d24acff353a5089b837b332c0f4af89565c354682521e37062d20e6b52d70c77bb4f24cca9b9532c274fc708a831"
        },
        {
          "alg" : "SHA-384",
          "content" : "06c56e6e513dd77cf10d0da46cdea08c34e220e81fa024735b668c6650df4234e564fe865ff5cafea963f56b1e8ffd4a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-text"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-parent/actions"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/TEXT"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-text.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-lang3",
      "version" : "3.12.0",
      "description" : "Apache Commons Lang, a package of Java utility classes for the classes that are in java.lang's hierarchy, or are considered to be so standard as to justify existence in java.lang.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "19fe50567358922bdad277959ea69545"
        },
        {
          "alg" : "SHA-1",
          "content" : "c6842c86792ff03b9f1d1fe2aab8dc23aa6c6f0e"
        },
        {
          "alg" : "SHA-256",
          "content" : "d919d904486c037f8d193412da0c92e22a9fa24230b9d67a57855c5c31c7e94e"
        },
        {
          "alg" : "SHA-512",
          "content" : "fbdbc0943cb3498b0148e86a39b773f97c8e6013740f72dbc727faeabea402073e2cc8c4d68198e5fc6b08a13b7700236292e99d4785f2c9989f2e5fac11fd81"
        },
        {
          "alg" : "SHA-384",
          "content" : "c34b8a0e0eba2168ad56fedeb7a1d710b6f1d3f1ce6aae99a4e0247bd120efbbadc8dcb2f731045b8a16e3efd30604dc"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-lang/"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/LANG"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-lang.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar"
    },
    {
      "publisher" : "QOS.ch",
      "group" : "org.slf4j",
      "name" : "slf4j-api",
      "version" : "2.0.7",
      "description" : "The slf4j API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "403dffa46cdd2e3c82da19df4f394a4c"
        },
        {
          "alg" : "SHA-1",
          "content" : "41eb7184ea9d556f23e18b5cb99cad1f8581fc00"
        },
        {
          "alg" : "SHA-256",
          "content" : "5d6298b93a1905c32cda6478808ac14c2d4a47e91535e53c41f7feeb85d946f4"
        },
        {
          "alg" : "SHA-512",
          "content" : "216d2cac27d501972c888f94dfa747d700b80d60813884b6ab4b12c6a3b17ed0c21a1d27e1aa4332c97c828f20039e3913d2763d7e1a3cef36ae4389a276e7a8"
        },
        {
          "alg" : "SHA-384",
          "content" : "c25b39f418aa726ba8405dfd9b356131f89984e2ef5a55a724a2abf3b7c78443f671105835161d2414d602cf03da9f2d"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl" : "pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.slf4j.org"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/qos-ch/slf4j/slf4j-api"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar"
    },
    {
      "publisher" : "QOS.ch",
      "group" : "org.slf4j",
      "name" : "jul-to-slf4j",
      "version" : "2.0.7",
      "description" : "JUL to SLF4J bridge",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "965fd8c7c67bd57eb63b321d0bedf498"
        },
        {
          "alg" : "SHA-1",
          "content" : "a48f44aeaa8a5ddc347007298a28173ac1fbbd8b"
        },
        {
          "alg" : "SHA-256",
          "content" : "eaba65483bb38c93e68d557a19e5738962322de1946545dbf40e5e32f6293008"
        },
        {
          "alg" : "SHA-512",
          "content" : "7df8d8db9bf6d1eb0f7728ad15fbd820533eca33e55a97ea2f177028f5c3e02ee8142768fff3e9f3204f40cfa9e4cc720a4ef8eb2aac6177e7b78e26702b30cf"
        },
        {
          "alg" : "SHA-384",
          "content" : "04f447db7af836df84dcecd74f8f6c57a7b63276e809bc9810a33815432a3626d1d0273481450b031d50e1c97fd88157"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl" : "pkg:maven/org.slf4j/jul-to-slf4j@2.0.7?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.slf4j.org"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/qos-ch/slf4j/jul-to-slf4j"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.slf4j/jul-to-slf4j@2.0.7?type=jar"
    },
    {
      "publisher" : "QOS.ch",
      "group" : "org.slf4j",
      "name" : "jcl-over-slf4j",
      "version" : "2.0.7",
      "description" : "JCL 1.2 implemented over SLF4J",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "4e8d6cd31f7e6277280c95157ac7845a"
        },
        {
          "alg" : "SHA-1",
          "content" : "f127fe5ee53404a8b3697cdd032dd1dd6a29dd77"
        },
        {
          "alg" : "SHA-256",
          "content" : "41806757e1d26dae5d6db2ca7d4a5176eed2d6e709cd86564d4a11dab0601742"
        },
        {
          "alg" : "SHA-512",
          "content" : "221b39b85145cf7c245acb7f2692a02b6c5816f8b1187a1a77942dd39de958c1b01ecd066682eb88244f87b2a47513d40b6c1e69ef49a43b2a07ba818f124e17"
        },
        {
          "alg" : "SHA-384",
          "content" : "fa8d53b46cd3ddab0bd265d384a90c35efef6a02a7822aa6f79065cee68d78f6ad7c4d248dea7497af449845dc962730"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.slf4j/jcl-over-slf4j@2.0.7?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.slf4j.org"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/qos-ch/slf4j/jcl-over-slf4j"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.slf4j/jcl-over-slf4j@2.0.7?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.logging.log4j",
      "name" : "log4j-slf4j2-impl",
      "version" : "2.20.0",
      "description" : "The Apache Log4j SLF4J 2.0 API binding to Log4j 2 Core",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "52355bf9fbb12407e08be175c12dfc7c"
        },
        {
          "alg" : "SHA-1",
          "content" : "155c8b9bbdac91d8461d9a403a646e6bd0d365d8"
        },
        {
          "alg" : "SHA-256",
          "content" : "b8dd3e4ea9cffa18db5f301cd8c539158662e691efd4701aa87b4d09961bd8b0"
        },
        {
          "alg" : "SHA-512",
          "content" : "3954329496870ec7acb0494e7c2e4d1d2585ff3695da3dd01cca4bdd4dbd5a8b5d9cbabc2a90cc2b5f257e57a96a458156382bfdb7c93512ca5579d646c98bb2"
        },
        {
          "alg" : "SHA-384",
          "content" : "2a456e835fb8f2d7f7d7bac38331e16fb66c888d48eb79b630504e719b2d703a7b131b47f96931425d37f22febc541df"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.logging.log4j/log4j-slf4j2-impl@2.20.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://logging.apache.org/log4j/2.x/log4j-slf4j2-impl/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/logging-log4j2/actions"
        },
        {
          "type" : "distribution",
          "url" : "https://logging.apache.org/log4j/2.x/download.html"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/apache/logging-log4j2/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?log4j-user@logging.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/logging-log4j2/log4j-slf4j2-impl"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.logging.log4j/log4j-slf4j2-impl@2.20.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.logging.log4j",
      "name" : "log4j-api",
      "version" : "2.20.0",
      "description" : "The Apache Log4j API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f9446464667f0139b839b5e9da37f5b9"
        },
        {
          "alg" : "SHA-1",
          "content" : "1fe6082e660daf07c689a89c94dc0f49c26b44bb"
        },
        {
          "alg" : "SHA-256",
          "content" : "2f43eea679ea66f14ca0f13fec2a8600ac124f5a5231dcb4df8393eddcb97550"
        },
        {
          "alg" : "SHA-512",
          "content" : "851016b38421d21864bb3073089c44000f941bfbaa9dc518db7bf7fb3c7f942bfb2c0c7b832e375e82b2f285379bd0935e42aa1833817daacb4fca2a6a9500bc"
        },
        {
          "alg" : "SHA-384",
          "content" : "12b05c61f49caab0b845e93967228a3bd3ab096c4ea1516cb7263f49963137a688a178ddebe790ccc3c0c73f2d4440fc"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.logging.log4j/log4j-api@2.20.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://logging.apache.org/log4j/2.x/log4j-api/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/logging-log4j2/actions"
        },
        {
          "type" : "distribution",
          "url" : "https://logging.apache.org/log4j/2.x/download.html"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/apache/logging-log4j2/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?log4j-user@logging.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/logging-log4j2/log4j-api"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.logging.log4j/log4j-api@2.20.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.logging.log4j",
      "name" : "log4j-core",
      "version" : "2.20.0",
      "description" : "The Apache Log4j Implementation",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "20bd40d026d35a93fe710acb141e93da"
        },
        {
          "alg" : "SHA-1",
          "content" : "eb2a9a47b1396e00b5eee1264296729a70565cc0"
        },
        {
          "alg" : "SHA-256",
          "content" : "6137df848cdaed9f4d5076f75513c6c85da80b953f4e7acca38098b770763f55"
        },
        {
          "alg" : "SHA-512",
          "content" : "a7fe8fa2304c1b013513c1838013804cf601a7148dfef95642ea763c9550a6d844d9a1e528c9c21efc7ea830d13fbbb55e2db2c2eeb5542c4d9f00c127f211e4"
        },
        {
          "alg" : "SHA-384",
          "content" : "1d8b0349286118f102014706f02b7851f10ca0b1554bd7a2e1efdda76ccab6e0abd967490d06fca030f2a26289686275"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.logging.log4j/log4j-core@2.20.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://logging.apache.org/log4j/2.x/log4j-core/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/logging-log4j2/actions"
        },
        {
          "type" : "distribution",
          "url" : "https://logging.apache.org/log4j/2.x/download.html"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/apache/logging-log4j2/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?log4j-user@logging.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/logging-log4j2/log4j-core"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.logging.log4j/log4j-core@2.20.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.logging.log4j",
      "name" : "log4j-1.2-api",
      "version" : "2.20.0",
      "description" : "The Apache Log4j 1.x Compatibility API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "986cff74b065cdd1d6b860ac1e9a20fa"
        },
        {
          "alg" : "SHA-1",
          "content" : "689151374756cb809cb029f2501015bdc7733179"
        },
        {
          "alg" : "SHA-256",
          "content" : "89d761af83de7e08e3c1916bc757242cedbbc1f38fb76fd13f89ef36b2671a45"
        },
        {
          "alg" : "SHA-512",
          "content" : "64f208ca34f3ca9d7902024d781b629795ffaa41ac4f4dd4487e1e0ff97351d62d83f399d6f8b5a7044af5d9b117a7cdd74a7b0fd2030af5bc4ba05a3e344a24"
        },
        {
          "alg" : "SHA-384",
          "content" : "6c33bce8423e1ac38ac9f11fbec247bc2255dc2a9f1d9994e87c6db861de51df606d1a4163b1c1a3e57987f0f64e2694"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.logging.log4j/log4j-1.2-api@2.20.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://logging.apache.org/log4j/2.x/log4j-1.2-api/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/logging-log4j2/actions"
        },
        {
          "type" : "distribution",
          "url" : "https://logging.apache.org/log4j/2.x/download.html"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/apache/logging-log4j2/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?log4j-user@logging.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/logging-log4j2/log4j-1.2-api"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.logging.log4j/log4j-1.2-api@2.20.0?type=jar"
    },
    {
      "publisher" : "Apache Software Foundation",
      "group" : "org.apache.spark",
      "name" : "spark-unsafe_2.12",
      "version" : "3.5.6",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "16ec029dba5c3eda565d04cf62635ca1"
        },
        {
          "alg" : "SHA-1",
          "content" : "ab3ed60e88ed1c466571ee88d39370cf824c5b50"
        },
        {
          "alg" : "SHA-256",
          "content" : "98ceb69062b60a00c615b0ed79b8cc2d5f39fd5f3d60e7fdf446ceef43a24517"
        },
        {
          "alg" : "SHA-512",
          "content" : "606188e17f19d3ecfea9cf7da3b6375d2ab6eeb9cf434c1e7324c6f509064542547eb747406c1c3297ac696540c31337afc689babd884b59c1389384d005ed5d"
        },
        {
          "alg" : "SHA-384",
          "content" : "a299208e9050036aed7181cd660474dfe27ede72d331fddd12afd5c6f3dd871bc824080ed92bd671585d18930c73292d"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.spark/spark-unsafe_2.12@3.5.6?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://spark.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/SPARK"
        },
        {
          "type" : "mailing-list",
          "url" : "dev-subscribe@spark.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "scm:git:git@github.com:apache/spark.git/common/spark-unsafe_2.12"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.spark/spark-unsafe_2.12@3.5.6?type=jar"
    },
    {
      "publisher" : "com.twitter",
      "group" : "com.twitter",
      "name" : "chill_2.12",
      "version" : "0.10.0",
      "description" : "chill",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "a2cedd70ae6d7327696c24ff5464072d"
        },
        {
          "alg" : "SHA-1",
          "content" : "b208321208c0b3232a305fccd59df3d6a1f1eecd"
        },
        {
          "alg" : "SHA-256",
          "content" : "5cb5db46112699e6de681dedc0c1d0b300f5ccc2c0921b6bb3e4dba2e66c6fe6"
        },
        {
          "alg" : "SHA-512",
          "content" : "862d7d4c3de2d7cb94a6fa90dcec683e14c67944c6a542a30b7cf522b46c306fed6399dd300b5c4357fa7a9d6ce166081326c0800865af28dc5b7994d2577d66"
        },
        {
          "alg" : "SHA-384",
          "content" : "575c027e5be30fb1a43637ce7a4739b48c5c42418b6000f74477d2921d8d6db48420e510bbfa55d810b0207c1c017faf"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.twitter/chill_2.12@0.10.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/twitter/chill"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/twitter/chill"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.twitter/chill_2.12@0.10.0?type=jar"
    },
    {
      "publisher" : "com.twitter",
      "group" : "com.twitter",
      "name" : "chill-java",
      "version" : "0.10.0",
      "description" : "chill-java",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "3c0e9cbbb2016364333f2cea3922ae97"
        },
        {
          "alg" : "SHA-1",
          "content" : "0fd2eb52afd9ab4337c9e51823f41ad8916e6976"
        },
        {
          "alg" : "SHA-256",
          "content" : "52afd3c1256d6f89293ba616c0c9ebf11191bb9e8159cd0c1cfdc99e5e0c5ffe"
        },
        {
          "alg" : "SHA-512",
          "content" : "48ae455095f0a9ff7ed9b84c9b9bf339c14f6599703b7a34a473ea9c457b0ae700f793d6bf00d1af5e0eb307c9a68d2a10309faea77aaf2245afded08420cb8d"
        },
        {
          "alg" : "SHA-384",
          "content" : "7641e1570bd40b064e17c98c656b8b80680b36d2678973c53ea0557fb212d9ce535eda748cb7234813d953ef90e2cb8d"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.twitter/chill-java@0.10.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/twitter/chill"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/twitter/chill"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.twitter/chill-java@0.10.0?type=jar"
    },
    {
      "group" : "com.esotericsoftware",
      "name" : "kryo-shaded",
      "version" : "4.0.2",
      "description" : "Fast, efficient Java serialization. This contains the shaded reflectasm jar to prevent conflicts with other versions of asm.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "27717b481916c44eed34ea7a68782ed5"
        },
        {
          "alg" : "SHA-1",
          "content" : "e8c89779f93091aa9cb895093402b5d15065bf88"
        },
        {
          "alg" : "SHA-256",
          "content" : "a4899f57fef456b9ec66f730e7b493ecb3dc494cc5758721ed9c18416fd2d3b6"
        },
        {
          "alg" : "SHA-512",
          "content" : "21d3500194117f5f34951c7374bdde658be18b842866ea68f16ef47453d4dd31b11d384af2dab3ac4340b015b414402f6b45d4e6a10354fbda5bd8a17e4ce3e3"
        },
        {
          "alg" : "SHA-384",
          "content" : "33c8d09ba00c14a077e82f2d7c1a54496a21d20896505d1d97cd30f22d9cb773e060061abc43fc14f15b6619ba4f0c86"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/com.esotericsoftware/kryo-shaded@4.0.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/EsotericSoftware/kryo/kryo-shaded"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/EsotericSoftware/kryo/kryo-shaded"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.esotericsoftware/kryo-shaded@4.0.2?type=jar"
    },
    {
      "group" : "com.esotericsoftware",
      "name" : "minlog",
      "version" : "1.3.0",
      "description" : "Minimal overhead Java logging",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "5ab0ee168b90e0ad7010b159e603d304"
        },
        {
          "alg" : "SHA-1",
          "content" : "ff07b5f1b01d2f92bb00a337f9a94873712f0827"
        },
        {
          "alg" : "SHA-256",
          "content" : "f7b399d3a5478a4f3e0d98bd1c9f47766119c66414bc33aa0f6cde0066f24cc2"
        },
        {
          "alg" : "SHA-512",
          "content" : "ca319c94b7fd8a275dcc3c5102fc01d73071ac77f5e14b4fc5b6547f96574a4fff0e8cb7b0b0d5006e71faa00575a91defdbfc92a94d9d38dd65520d4ab52000"
        },
        {
          "alg" : "SHA-384",
          "content" : "3f9b5b7fd91332ad64d235024d486e24b00760e714713153a61f10e6867bc3e5b617a7bf0bed889a01f0cdb435415d6a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/com.esotericsoftware/minlog@1.3.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/EsotericSoftware/minlog"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/EsotericSoftware/minlog"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.esotericsoftware/minlog@1.3.0?type=jar"
    },
    {
      "group" : "com.google.code.findbugs",
      "name" : "jsr305",
      "version" : "3.0.0",
      "description" : "JSR305 Annotations for Findbugs",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "195d5db8981fbec5fa18d5df9fad95ed"
        },
        {
          "alg" : "SHA-1",
          "content" : "5871fb60dc68d67da54a663c3fd636a10a532948"
        },
        {
          "alg" : "SHA-256",
          "content" : "bec0b24dcb23f9670172724826584802b80ae6cbdaba03bdebdef9327b962f6a"
        },
        {
          "alg" : "SHA-512",
          "content" : "399510f759fb48255c6298f3545c9b644372fbc9d7245e80e6b51f49da0ac9275d104092c537ac047d5a1312c7d191dee8d655ca8d760b59ce1452bf4370a6e0"
        },
        {
          "alg" : "SHA-384",
          "content" : "a7fa7a0b69f41518fdb70e847148e17d0909fb657cee127308fb6cd14f913c63c82608aeae3955f10b48d358a8addfee"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.code.findbugs/jsr305@3.0.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://findbugs.sourceforge.net/"
        },
        {
          "type" : "vcs",
          "url" : "https://code.google.com/p/findbugs/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.code.findbugs/jsr305@3.0.0?type=jar"
    },
    {
      "publisher" : "org.json4s",
      "group" : "org.json4s",
      "name" : "json4s-jackson_2.12",
      "version" : "3.7.0-M11",
      "description" : "json4s-jackson",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "53dc7ac002aa4de2843799cd239aae2d"
        },
        {
          "alg" : "SHA-1",
          "content" : "54089dd27d932de33c329199474ad429ee076510"
        },
        {
          "alg" : "SHA-256",
          "content" : "d03ed279c83870b9bd624b1817fe6290822d7e74207d1e250860fbdd935643dc"
        },
        {
          "alg" : "SHA-512",
          "content" : "ad9084168bf882e70a4827d3bc1a6905a9f931e25d376aa75a3bc421410c870b3d6e33f5271cdc42504f254f54ddb33f0f1df8b3df93b9056e422b149d6dd367"
        },
        {
          "alg" : "SHA-384",
          "content" : "904c7e915b15ae824616ce1a8aaf7d13d67bcf0fdac05381cb852dafbc27429829d518b2abafce6c9392b2e5f8c6a7d7"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.json4s/json4s-jackson_2.12@3.7.0-M11?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/json4s/json4s"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/json4s/json4s"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.json4s/json4s-jackson_2.12@3.7.0-M11?type=jar"
    },
    {
      "publisher" : "org.json4s",
      "group" : "org.json4s",
      "name" : "json4s-core_2.12",
      "version" : "3.7.0-M11",
      "description" : "json4s-core",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "1db3cb3db15c895307cfd20b81e2d8a6"
        },
        {
          "alg" : "SHA-1",
          "content" : "4126de102c272d727ea0e1875ee3db9f6ac7060f"
        },
        {
          "alg" : "SHA-256",
          "content" : "2fd8e66a3715565294c4edb5d2514e7ff59a14960c7f8dd84cf0991661a48a10"
        },
        {
          "alg" : "SHA-512",
          "content" : "7347a1bf54151a42dcf2aade3ca125da563c025644f935497a5c5e060198652c3ee7c52ee6de484a8f45aef1ab585dc831fbf5ae14395712236e752aec476861"
        },
        {
          "alg" : "SHA-384",
          "content" : "f6501957f7a579ee24997061ca3ea416d487906f386382c9d39e9cd8816efb180fd6489a8ff0551dc1e00e083810105e"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.json4s/json4s-core_2.12@3.7.0-M11?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/json4s/json4s"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/json4s/json4s"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.json4s/json4s-core_2.12@3.7.0-M11?type=jar"
    },
    {
      "publisher" : "org.json4s",
      "group" : "org.json4s",
      "name" : "json4s-ast_2.12",
      "version" : "3.7.0-M11",
      "description" : "json4s-ast",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f106ddf363ca77383877ccb0bdeaa425"
        },
        {
          "alg" : "SHA-1",
          "content" : "f8c92b6b7cb37f3e2fdf649ad1ba3d65248bb45d"
        },
        {
          "alg" : "SHA-256",
          "content" : "f9388c0ad4a969bf1a1867e85ce24ed87ca5a1095342b96b35c356fd971b544d"
        },
        {
          "alg" : "SHA-512",
          "content" : "806f72c85625f66a0de4c1629e354ba687b55e303899de0a6b8fbe256ed674da1aedf04471b7cbe969ee5a21ff48a2d97dab2145229f8e04f7d886087336de61"
        },
        {
          "alg" : "SHA-384",
          "content" : "99795db385defb8e98d94b6d52041ec35b9c914f0b1d0267aa737641bcd677cf07468885f09e8ef383e0052b45fca30f"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.json4s/json4s-ast_2.12@3.7.0-M11?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/json4s/json4s"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/json4s/json4s"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.json4s/json4s-ast_2.12@3.7.0-M11?type=jar"
    },
    {
      "publisher" : "org.json4s",
      "group" : "org.json4s",
      "name" : "json4s-scalap_2.12",
      "version" : "3.7.0-M11",
      "description" : "json4s-scalap",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "2a5d1806ab0330c4e355c34a13afaf9e"
        },
        {
          "alg" : "SHA-1",
          "content" : "5a5aafd028f7ac4a8565e1cebe1307c146c87f70"
        },
        {
          "alg" : "SHA-256",
          "content" : "d2a1f84b618e1cba12c4e8ce2babc23d78a12de5f568abf8fbaeca39c52e0eb8"
        },
        {
          "alg" : "SHA-512",
          "content" : "ff1771820f477f755982690dc5d32c8f24a075263d0e8ab83a4f3cac4824a8cd522860661f7689b28c65550a80775e269461f3bd7c827a80bd70967444a13368"
        },
        {
          "alg" : "SHA-384",
          "content" : "924e5e9aaa2f7823b1d275c866c3713a33be2458bf7aa60a73f4b6989babf07f2d4ee723a7175469eb4c77f7fb4478ed"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.json4s/json4s-scalap_2.12@3.7.0-M11?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/json4s/json4s"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/json4s/json4s"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.json4s/json4s-scalap_2.12@3.7.0-M11?type=jar"
    },
    {
      "publisher" : "ANTLR",
      "group" : "org.antlr",
      "name" : "antlr4-runtime",
      "version" : "4.9.3",
      "description" : "The ANTLR 4 Runtime",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "718f199bafa6574ffa1111fa3e10276a"
        },
        {
          "alg" : "SHA-1",
          "content" : "81befc16ebedb8b8aea3e4c0835dd5ca7e8523a8"
        },
        {
          "alg" : "SHA-256",
          "content" : "131a6594969bc4f321d652ea2a33bc0e378ca312685ef87791b2c60b29d01ea5"
        },
        {
          "alg" : "SHA-512",
          "content" : "2c3763a8fbc7af110df5d6bb57692759b23e8bf961a53694c69bde4cd9d8c3a8eaa55cf376ce34c6c4e2035a99d7abf08c6ffa3b75d18a6d93a9c1ca95927ea8"
        },
        {
          "alg" : "SHA-384",
          "content" : "62a62dab4a27733a810b97fe5544eb1b5b25d2df83ea8d93802cb0e6fd1b4b3ca5a130c51aa9198deefc30cd0f062841"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-4-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.antlr/antlr4-runtime@4.9.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.antlr.org/antlr4-runtime"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/antlr/antlr4/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://groups.google.com/forum/?fromgroups#!forum/antlr-discussion"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/antlr/antlr4/tree/master/antlr4-runtime"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.antlr/antlr4-runtime@4.9.3?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.arrow",
      "name" : "arrow-vector",
      "version" : "12.0.1",
      "description" : "An off-heap reference implementation for Arrow columnar data format.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "73bd1ca4d69182476d391e14260135c3"
        },
        {
          "alg" : "SHA-1",
          "content" : "809a112926070f912f12c151d5ab1fa810612ca5"
        },
        {
          "alg" : "SHA-256",
          "content" : "0ca927fb749772077d488a901ec977ff9428a6836a053b12b470adf822b1fd72"
        },
        {
          "alg" : "SHA-512",
          "content" : "51c4c13e1f642b6e07e6a0b93bf6fd953efd37dc235b9ce371fbd94c374cb3a42671e0fd1858c1cb3a7e8af4cb7acf22cac8ad1e051037fc3aa707ed7239bc1d"
        },
        {
          "alg" : "SHA-384",
          "content" : "d3478c448f20c6b2fc8985981a636dfc08bd92ca52b763875a71840b80ecb0c4088072f537b3b91dc14a8783a05c6744"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.arrow/arrow-vector@12.0.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://arrow.apache.org/arrow-vector/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/arrow"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/arrow-dev/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/arrow/arrow-vector"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.arrow/arrow-vector@12.0.1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.arrow",
      "name" : "arrow-format",
      "version" : "12.0.1",
      "description" : "Generated Java files from the IPC Flatbuffer definitions.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "d5f60e3a86c42f002c7b87baa8f26068"
        },
        {
          "alg" : "SHA-1",
          "content" : "b2dbacdcafb42e4fd7432468010d5d4d82380778"
        },
        {
          "alg" : "SHA-256",
          "content" : "ff08f69204e0a26b409a1c501197ba956f2fe044e53f1f4889025ec7622d7787"
        },
        {
          "alg" : "SHA-512",
          "content" : "e6b5d1318672142a2969c9921009ddb18ceec47c409bd206a0d3bff2dbb8ae06d763ce6244422b1b5dc0b658f5cdcd440d72197de1b9f1071da1485a59e560b9"
        },
        {
          "alg" : "SHA-384",
          "content" : "5a7ea6a9cb966e359d5d9319eff5be2c3b52b4871ae6466319f8eecb70e80697ba5396ebc0d3b15a96d2aa3ec3701d6e"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.arrow/arrow-format@12.0.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://arrow.apache.org/arrow-format/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/arrow"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/arrow-dev/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/arrow/arrow-format"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.arrow/arrow-format@12.0.1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.arrow",
      "name" : "arrow-memory-core",
      "version" : "12.0.1",
      "description" : "Core off-heap memory management libraries for Arrow ValueVectors.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "59bdf36bbacafe58ce7a139d1f4daae4"
        },
        {
          "alg" : "SHA-1",
          "content" : "cd7f41f4ebbb7cdab55b7a3b935ab5bcb2108b8d"
        },
        {
          "alg" : "SHA-256",
          "content" : "25e23b9762ddce71fb9876a1794056a7dfc64f453c608763160fcc1852c62c3f"
        },
        {
          "alg" : "SHA-512",
          "content" : "14e3b7abcd24fa21fb478f290ffb5460c042d5d23392ac0e0fcad917c15b5fa92b686cc68e6a8f3faf308058b8dd9e873aeaef3530e4fc6d36756f31a84435de"
        },
        {
          "alg" : "SHA-384",
          "content" : "173d748c8d147e002412f843f0868e2992fb9d17a4d6c91dc3e4c515352e4b9f661c696d1f159dbbc6d35df259e3b9b6"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.arrow/arrow-memory-core@12.0.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://arrow.apache.org/arrow-memory/arrow-memory-core/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/arrow"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/arrow-dev/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/arrow/arrow-memory/arrow-memory-core"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.arrow/arrow-memory-core@12.0.1?type=jar"
    },
    {
      "publisher" : "FasterXML",
      "group" : "com.fasterxml.jackson.datatype",
      "name" : "jackson-datatype-jsr310",
      "version" : "2.15.2",
      "description" : "Add-on module to support JSR-310 (Java 8 Date & Time API) data types.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "94d6cec0fe6ad8b81752beb500bd4bbc"
        },
        {
          "alg" : "SHA-1",
          "content" : "30d16ec2aef6d8094c5e2dce1d95034ca8b6cb42"
        },
        {
          "alg" : "SHA-256",
          "content" : "7574c81ad570476ef6aad26f419288fd466733f3315bee3012f2f29c9dc008c8"
        },
        {
          "alg" : "SHA-512",
          "content" : "3036ff042d09342d36e90960103ec57c77549b85e2c370dfdd57673195141fea6edbac29fa598cc1d1edf56e4d457b7b838dcdc3f50acae1cc70b5905e075301"
        },
        {
          "alg" : "SHA-384",
          "content" : "38a75ac595705f1f518c461009280318fbe85b3aab04a68b15e736b3365e20ea17c5db28e46da0d89673b223307b800f"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310@2.15.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/FasterXML/jackson-modules-java8/jackson-datatype-jsr310"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/FasterXML/jackson-modules-java8/issues"
        },
        {
          "type" : "vcs",
          "url" : "http://github.com/FasterXML/jackson-modules-java8/jackson-datatype-jsr310"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310@2.15.2?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-codec",
      "name" : "commons-codec",
      "version" : "1.16.1",
      "description" : "The Apache Commons Codec component contains encoder and decoders for various formats such as Base16, Base32, Base64, digest, and Hexadecimal. In addition to these widely used encoders and decoders, the codec package also maintains a collection of phonetic encoding utilities.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "6c5be822d8d3fa61c3b54c4c8978dfdc"
        },
        {
          "alg" : "SHA-1",
          "content" : "47bd4d333fba53406f6c6c51884ddbca435c8862"
        },
        {
          "alg" : "SHA-256",
          "content" : "ec87bfb55f22cbd1b21e2190eeda28b2b312ed2a431ee49fbdcc01812d04a5e4"
        },
        {
          "alg" : "SHA-512",
          "content" : "bd33fd5340757ea0616a8c2a48760cfc9932f93b8e067701f4a122fd59735083468a016d8c0fd65973dd3fa4fc3537855e71a1fae7d14e1777e31ff1c47708ce"
        },
        {
          "alg" : "SHA-384",
          "content" : "ee7f4c3e5c01cf77f4d82b09c358087738e6e79507ced9f2c82fdce3b32825bb62b2d66b30ef897e2972d3253478c525"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-codec/commons-codec@1.16.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-codec/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-parent/actions"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/CODEC"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/commons-codec"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-codec/commons-codec@1.16.1?type=jar"
    },
    {
      "group" : "com.google.flatbuffers",
      "name" : "flatbuffers-java",
      "version" : "1.12.0",
      "description" : "Memory Efficient Serialization Library",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "26ecc1a330e441f909226a338d4bef65"
        },
        {
          "alg" : "SHA-1",
          "content" : "8201cc7b511177a37071249e891f2f2fea4b32e9"
        },
        {
          "alg" : "SHA-256",
          "content" : "3f8c088b4dd04a9858721f2e162508c94db0dd86f961e306ee63ef2eda871bf7"
        },
        {
          "alg" : "SHA-512",
          "content" : "20750e91441c074ca28f72b0b6494e8f0bfbc94caff04eb49727efc6b28e453c84732f24acc52cf36b36ba66b57a145d003e87f749c5c4518ddc6f9247b8ab47"
        },
        {
          "alg" : "SHA-384",
          "content" : "7af7d2e03ae71bea1ebac6cc9c2926b9f952c48a124db160ee2327f2f7e6b2e3ba153e5924971788392fc278b0e04ee9"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.flatbuffers/flatbuffers-java@1.12.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/google/flatbuffers"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/google/flatbuffers"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.flatbuffers/flatbuffers-java@1.12.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.arrow",
      "name" : "arrow-memory-netty",
      "version" : "12.0.1",
      "description" : "Netty allocator and utils for allocating memory in Arrow",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "bbeaa3dfe98fbed40b47f005e21a75fc"
        },
        {
          "alg" : "SHA-1",
          "content" : "f0e6801aa116b75775272dcac6ad49584382bf8c"
        },
        {
          "alg" : "SHA-256",
          "content" : "f3d45c3ca7ef7f9b3bbf6d8b68126d630fe3f538614fda00f95ec66f7d3aa051"
        },
        {
          "alg" : "SHA-512",
          "content" : "e023c562eab62a885c940530ccdd7495dce5a7f015b6cab963220981eca30d0daceccc297c0085b88007ad3bdcd0e81a2de9ab3c78b7c6aa6dce13bcfb1c3909"
        },
        {
          "alg" : "SHA-384",
          "content" : "f22815f86b1c4be39ab95db5059caf95ba62326f4ed5710520ccad6a90d827491178655d5f5a45211a712d0cbe32d573"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.arrow/arrow-memory-netty@12.0.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://arrow.apache.org/arrow-memory/arrow-memory-netty/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/arrow"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/arrow-dev/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/arrow/arrow-memory/arrow-memory-netty"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.arrow/arrow-memory-netty@12.0.1?type=jar"
    },
    {
      "group" : "org.spark-project.spark",
      "name" : "unused",
      "version" : "1.0.0",
      "description" : "Sonatype helps open source projects to set up Maven repositories on https://oss.sonatype.org/",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "763373ce9fe48581d4f2b8ffca35bb82"
        },
        {
          "alg" : "SHA-1",
          "content" : "205fe37a2fade6ce6dfcf8eff57ed21a4a1c22af"
        },
        {
          "alg" : "SHA-256",
          "content" : "00fd27fc9bde701581e7dcf5b95981d9e749a1c176bb8bfcd49f675768ff6bf0"
        },
        {
          "alg" : "SHA-512",
          "content" : "08a6ac8d2dc9d89ff557c7e96096c76e687efe3ce166aa6dbb76865bbef64dc8b6ecb5561ef03c2451a688ccdb3876b8f16b9137d02c290a698e917a5656b6fa"
        },
        {
          "alg" : "SHA-384",
          "content" : "c8c51d0d851835107db273d7ce522f026587d922c9d1d34739c3dedf9b7737c1c491e961dc7931f46c476d28acbc91f6"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.spark-project.spark/unused@1.0.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://nexus.sonatype.org/oss-repository-hosting.html/unused"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.spark-project.spark/unused@1.0.0?type=jar"
    },
    {
      "publisher" : "Joe Walnes, Henri Tremblay, Leonardo Mesquita",
      "group" : "org.objenesis",
      "name" : "objenesis",
      "version" : "3.3",
      "description" : "A library for instantiating Java objects",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "ab0e0b2ab81affdd7f38bcc60fd85571"
        },
        {
          "alg" : "SHA-1",
          "content" : "1049c09f1de4331e8193e579448d0916d75b7631"
        },
        {
          "alg" : "SHA-256",
          "content" : "02dfd0b0439a5591e35b708ed2f5474eb0948f53abf74637e959b8e4ef69bfeb"
        },
        {
          "alg" : "SHA-512",
          "content" : "1fa990d15bd179f07ffbc460d580a6fd0562e45dee8bd4a9405917536b78f45c0d6f644b67f85d781c758aa56eff90aef23eedcc9bd7f5ff887a67b716083e61"
        },
        {
          "alg" : "SHA-384",
          "content" : "2f6878f91a12db32c244afcee619d57c3ad6ff0297f4e41c2247e737c1ccc5fcc1ce03256b479b0f9b87900410bc4502"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.objenesis/objenesis@3.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://objenesis.org/objenesis"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/easymock/objenesis/objenesis"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.objenesis/objenesis@3.3?type=jar"
    }
  ],
  "dependencies" : [
    {
      "ref" : "pkg:maven/org.apache.spark/spark-sql-api_2.12@3.5.6?type=jar",
      "dependsOn" : [
        "pkg:maven/org.scala-lang/scala-reflect@2.12.18?type=jar",
        "pkg:maven/org.scala-lang.modules/scala-parser-combinators_2.12@2.3.0?type=jar",
        "pkg:maven/org.apache.spark/spark-common-utils_2.12@3.5.6?type=jar",
        "pkg:maven/org.apache.spark/spark-unsafe_2.12@3.5.6?type=jar",
        "pkg:maven/org.json4s/json4s-jackson_2.12@3.7.0-M11?type=jar",
        "pkg:maven/org.antlr/antlr4-runtime@4.9.3?type=jar",
        "pkg:maven/org.apache.arrow/arrow-vector@12.0.1?type=jar",
        "pkg:maven/org.apache.arrow/arrow-memory-netty@12.0.1?type=jar",
        "pkg:maven/org.spark-project.spark/unused@1.0.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.scala-lang/scala-reflect@2.12.18?type=jar",
      "dependsOn" : [
        "pkg:maven/org.scala-lang/scala-library@2.12.18?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.scala-lang/scala-library@2.12.18?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.scala-lang.modules/scala-parser-combinators_2.12@2.3.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.scala-lang/scala-library@2.12.18?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.spark/spark-common-utils_2.12@3.5.6?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.spark/spark-tags_2.12@3.5.6?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.15.2?type=jar",
        "pkg:maven/com.fasterxml.jackson.module/jackson-module-scala_2.12@2.15.2?type=jar",
        "pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar",
        "pkg:maven/org.slf4j/jul-to-slf4j@2.0.7?type=jar",
        "pkg:maven/org.slf4j/jcl-over-slf4j@2.0.7?type=jar",
        "pkg:maven/org.apache.logging.log4j/log4j-slf4j2-impl@2.20.0?type=jar",
        "pkg:maven/org.apache.logging.log4j/log4j-api@2.20.0?type=jar",
        "pkg:maven/org.apache.logging.log4j/log4j-core@2.20.0?type=jar",
        "pkg:maven/org.apache.logging.log4j/log4j-1.2-api@2.20.0?type=jar",
        "pkg:maven/org.spark-project.spark/unused@1.0.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.spark/spark-tags_2.12@3.5.6?type=jar",
      "dependsOn" : [
        "pkg:maven/org.scala-lang/scala-library@2.12.18?type=jar",
        "pkg:maven/org.spark-project.spark/unused@1.0.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.spark-project.spark/unused@1.0.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.15.2?type=jar",
      "dependsOn" : [
        "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.15.2?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.15.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.15.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.15.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.fasterxml.jackson.module/jackson-module-scala_2.12@2.15.2?type=jar",
      "dependsOn" : [
        "pkg:maven/org.scala-lang/scala-library@2.12.18?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.15.2?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.15.2?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.15.2?type=jar",
        "pkg:maven/com.thoughtworks.paranamer/paranamer@2.8?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.thoughtworks.paranamer/paranamer@2.8?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.slf4j/jul-to-slf4j@2.0.7?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.slf4j/jcl-over-slf4j@2.0.7?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.logging.log4j/log4j-slf4j2-impl@2.20.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.logging.log4j/log4j-api@2.20.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar",
        "pkg:maven/org.apache.logging.log4j/log4j-core@2.20.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.logging.log4j/log4j-api@2.20.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.logging.log4j/log4j-core@2.20.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.logging.log4j/log4j-api@2.20.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.logging.log4j/log4j-1.2-api@2.20.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.logging.log4j/log4j-api@2.20.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.spark/spark-unsafe_2.12@3.5.6?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.spark/spark-tags_2.12@3.5.6?type=jar",
        "pkg:maven/org.apache.spark/spark-common-utils_2.12@3.5.6?type=jar",
        "pkg:maven/com.twitter/chill_2.12@0.10.0?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@3.0.0?type=jar",
        "pkg:maven/org.spark-project.spark/unused@1.0.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.twitter/chill_2.12@0.10.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.scala-lang/scala-library@2.12.18?type=jar",
        "pkg:maven/com.twitter/chill-java@0.10.0?type=jar",
        "pkg:maven/com.esotericsoftware/kryo-shaded@4.0.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.twitter/chill-java@0.10.0?type=jar",
      "dependsOn" : [
        "pkg:maven/com.esotericsoftware/kryo-shaded@4.0.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.esotericsoftware/kryo-shaded@4.0.2?type=jar",
      "dependsOn" : [
        "pkg:maven/com.esotericsoftware/minlog@1.3.0?type=jar",
        "pkg:maven/org.objenesis/objenesis@3.3?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.esotericsoftware/minlog@1.3.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.objenesis/objenesis@3.3?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.google.code.findbugs/jsr305@3.0.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.json4s/json4s-jackson_2.12@3.7.0-M11?type=jar",
      "dependsOn" : [
        "pkg:maven/org.scala-lang/scala-library@2.12.18?type=jar",
        "pkg:maven/org.json4s/json4s-core_2.12@3.7.0-M11?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.json4s/json4s-core_2.12@3.7.0-M11?type=jar",
      "dependsOn" : [
        "pkg:maven/org.scala-lang/scala-library@2.12.18?type=jar",
        "pkg:maven/org.json4s/json4s-ast_2.12@3.7.0-M11?type=jar",
        "pkg:maven/org.json4s/json4s-scalap_2.12@3.7.0-M11?type=jar",
        "pkg:maven/com.thoughtworks.paranamer/paranamer@2.8?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.json4s/json4s-ast_2.12@3.7.0-M11?type=jar",
      "dependsOn" : [
        "pkg:maven/org.scala-lang/scala-library@2.12.18?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.json4s/json4s-scalap_2.12@3.7.0-M11?type=jar",
      "dependsOn" : [
        "pkg:maven/org.scala-lang/scala-library@2.12.18?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.antlr/antlr4-runtime@4.9.3?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.arrow/arrow-vector@12.0.1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.arrow/arrow-format@12.0.1?type=jar",
        "pkg:maven/org.apache.arrow/arrow-memory-core@12.0.1?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.15.2?type=jar",
        "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310@2.15.2?type=jar",
        "pkg:maven/commons-codec/commons-codec@1.16.1?type=jar",
        "pkg:maven/com.google.flatbuffers/flatbuffers-java@1.12.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.arrow/arrow-format@12.0.1?type=jar",
      "dependsOn" : [
        "pkg:maven/com.google.flatbuffers/flatbuffers-java@1.12.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.google.flatbuffers/flatbuffers-java@1.12.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.arrow/arrow-memory-core@12.0.1?type=jar",
      "dependsOn" : [
        "pkg:maven/com.google.code.findbugs/jsr305@3.0.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310@2.15.2?type=jar",
      "dependsOn" : [
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.15.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/commons-codec/commons-codec@1.16.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.arrow/arrow-memory-netty@12.0.1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.arrow/arrow-memory-core@12.0.1?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar"
      ]
    }
  ]
}