<?xml version="1.0" encoding="UTF-8"?>
<bom serialNumber="urn:uuid:b7ec3ef4-ad0d-46fc-b9d2-95fc10a18910" version="1" xmlns="http://cyclonedx.org/schema/bom/1.4">
  <metadata>
    <timestamp>2023-06-07T15:41:52Z</timestamp>
    <tools>
      <tool>
        <vendor>OWASP Foundation</vendor>
        <name>CycloneDX Maven plugin makeBom compile+provided+runtime+system</name>
        <version>2.7.6</version>
        <hashes>
          <hash alg="MD5">639c35c7f79c5514f3abe11247999b70</hash>
          <hash alg="SHA-1">649239e622d8d454bb9ab6fafd6746c85cd11b7d</hash>
          <hash alg="SHA-256">1e3bc10146c370fe8b8f0a2edcb64329907d61dbc2f445db6ac1034cd3221ce3</hash>
          <hash alg="SHA-512">894a4b5762d32c88cc58ae1a35a3cc3d45a3c494accadb31b55b5832af65f60c0f8164623521a81de73e3ed6a4c994cca0f1951c8368b9d07fb41c82eaa84bbd</hash>
          <hash alg="SHA-384">3c385acc773a41056fb58ea27096c8ec86d46d8bd74a2eee9cf0913051981611afc68cf13a88d31af16590a489a97c0e</hash>
        </hashes>
      </tool>
    </tools>
    <component type="library" bom-ref="pkg:maven/org.apache.arrow/arrow-memory-netty@12.0.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.arrow</group>
      <name>arrow-memory-netty</name>
      <version>12.0.1</version>
      <description>Netty allocator and utils for allocating memory in Arrow</description>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.arrow/arrow-memory-netty@12.0.1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://arrow.apache.org/arrow-memory/arrow-memory-netty/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/arrow</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/arrow-dev/</url></reference><reference type="vcs"><url>https://github.com/apache/arrow/arrow-memory/arrow-memory-netty</url></reference></externalReferences>
    </component>
  </metadata>
  <components>
    <component type="library" bom-ref="pkg:maven/org.apache.arrow/arrow-memory-core@12.0.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.arrow</group>
      <name>arrow-memory-core</name>
      <version>12.0.1</version>
      <description>Core off-heap memory management libraries for Arrow ValueVectors.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">59bdf36bbacafe58ce7a139d1f4daae4</hash>
        <hash alg="SHA-1">cd7f41f4ebbb7cdab55b7a3b935ab5bcb2108b8d</hash>
        <hash alg="SHA-256">25e23b9762ddce71fb9876a1794056a7dfc64f453c608763160fcc1852c62c3f</hash>
        <hash alg="SHA-512">14e3b7abcd24fa21fb478f290ffb5460c042d5d23392ac0e0fcad917c15b5fa92b686cc68e6a8f3faf308058b8dd9e873aeaef3530e4fc6d36756f31a84435de</hash>
        <hash alg="SHA-384">173d748c8d147e002412f843f0868e2992fb9d17a4d6c91dc3e4c515352e4b9f661c696d1f159dbbc6d35df259e3b9b6</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.arrow/arrow-memory-core@12.0.1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://arrow.apache.org/arrow-memory/arrow-memory-core/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/arrow</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/arrow-dev/</url></reference><reference type="vcs"><url>https://github.com/apache/arrow/arrow-memory/arrow-memory-core</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar">
      <group>com.google.code.findbugs</group>
      <name>jsr305</name>
      <version>3.0.2</version>
      <description>JSR305 Annotations for Findbugs</description>
      <hashes>
        <hash alg="MD5">dd83accb899363c32b07d7a1b2e4ce40</hash>
        <hash alg="SHA-1">25ea2e8b0c338a877313bd4672d3fe056ea78f0d</hash>
        <hash alg="SHA-256">766ad2a0783f2687962c8ad74ceecc38a28b9f72a2d085ee438b7813e928d0c7</hash>
        <hash alg="SHA-512">bb09db62919a50fa5b55906013be6ca4fc7acb2e87455fac5eaf9ede2e41ce8bbafc0e5a385a561264ea4cd71bbbd3ef5a45e02d63277a201d06a0ae1636f804</hash>
        <hash alg="SHA-384">ca0b169d3eb2d0922dc031133a021f861a043bb3e405a88728215fd6ff00fa52fdc7347842dcc2031472e3726164bdc4</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar</purl>
      <externalReferences><reference type="website"><url>http://findbugs.sourceforge.net/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://code.google.com/p/jsr-305/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.netty/netty-buffer@4.1.82.Final?type=jar">
      <publisher>The Netty Project</publisher>
      <group>io.netty</group>
      <name>netty-buffer</name>
      <version>4.1.82.Final</version>
      <description>Netty is an asynchronous event-driven network application framework for
    rapid development of maintainable high performance protocol servers and
    clients.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">47b1a2d86a0b211d971fc4156560f793</hash>
        <hash alg="SHA-1">a544270cf1ae8b8077082f5036436a9a9971ea71</hash>
        <hash alg="SHA-256">a7ce7f6d8c1e82b044cd56765dab4338251596416de03b1f9a05d7402429c29d</hash>
        <hash alg="SHA-512">5e04ffbe47398028fff4c92974973a950283fb243a81d117b8b93705a31d18c62fd29937a7c95a9f77d5caa7ba73b3f8be0226a89e83c09dd0a2b11e3c8f3782</hash>
        <hash alg="SHA-384">0fdba4b8b39ecf9b306eb6eb8be0b917d608deb8312ce8f685d4b7303ffe552b1911a878083d83ff78542a0b461d6616</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.netty/netty-buffer@4.1.82.Final?type=jar</purl>
      <externalReferences><reference type="website"><url>https://netty.io/netty-buffer/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/netty/netty/netty-buffer</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.netty/netty-common@4.1.82.Final?type=jar">
      <publisher>The Netty Project</publisher>
      <group>io.netty</group>
      <name>netty-common</name>
      <version>4.1.82.Final</version>
      <description>Netty is an asynchronous event-driven network application framework for
    rapid development of maintainable high performance protocol servers and
    clients.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">7ae14b5005c3cac74a82977245e957c3</hash>
        <hash alg="SHA-1">022d148e85c3f5ebdacc0ce1f5aabb1d420f73f3</hash>
        <hash alg="SHA-256">d5923db1cc68b26baf5368f1f76ec2c6100d12db8406c6de00eb6dbc08052550</hash>
        <hash alg="SHA-512">dd3bf3d7481b9047cef0b11eb38be925623d2322ebfdd5bb74e5d69818301280d65848fd78d114f9f9f49bd9ea765f5ff840eab11ec9d6885699838f1017429d</hash>
        <hash alg="SHA-384">0c6b173a398edbd29a777e4a2dbaac46c67fae2af86a4261cee737adbf8dac9edcd8408b5568ccb9216ce742b1e1ad80</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.netty/netty-common@4.1.82.Final?type=jar</purl>
      <externalReferences><reference type="website"><url>https://netty.io/netty-common/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/netty/netty/netty-common</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.slf4j/slf4j-api@1.7.25?type=jar">
      <publisher>QOS.ch</publisher>
      <group>org.slf4j</group>
      <name>slf4j-api</name>
      <version>1.7.25</version>
      <description>The slf4j API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">caafe376afb7086dcbee79f780394ca3</hash>
        <hash alg="SHA-1">da76ca59f6a57ee3102f8f9bd9cee742973efa8a</hash>
        <hash alg="SHA-256">18c4a0095d5c1da6b817592e767bb23d29dd2f560ad74df75ff3961dbde25b79</hash>
        <hash alg="SHA-512">5dd6271fd5b34579d8e66271bab75c89baca8b2ebeaa9966de391284bd08f2d720083c6e0e1edda106ecf8a04e9a32116de6873f0f88c19c049c0fe27e5d820b</hash>
        <hash alg="SHA-384">f2791380e87fccb18519efd016c03be11206984f4765586d348e57e2f33756b21ed51a95fa09679e1473a5bf5d2d76e1</hash>
      </hashes>
      <licenses>
        <license>
          <id>MIT</id>
          <url>https://opensource.org/licenses/MIT</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.slf4j/slf4j-api@1.7.25?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.slf4j.org</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/qos-ch/slf4j/slf4j-api</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.immutables/value@2.8.2?type=jar">
      <publisher>The Immutables.org authors</publisher>
      <group>org.immutables</group>
      <name>value</name>
      <version>2.8.2</version>
      <description>Compile time annotations and compile time annotation processor to generate consistent value object using
    either abstract class, interface or annotation as a base.</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">66de88e965d260fdab9e45d65e8cd4ae</hash>
        <hash alg="SHA-1">45f2a38858f3d05f919a7bdb9221bd738fe1669b</hash>
        <hash alg="SHA-256">e0c405100540b5628ae85c6a2c2d7dfe217e232050445481c573517d93016fa9</hash>
        <hash alg="SHA-512">78eeb50d9d9d24dd3d82637acb737f4d6e9bd586fb06d0a105756988356563f9f8759190c772c7cb887c19238aac4fa06509a28c2263cbfdb12fbb301d2e078d</hash>
        <hash alg="SHA-384">824c4b3e8b09fb11c063a00514b4089b3f2bd7bb835eb63259106022eb565bb95e949b6d1d13c77ee7a64db5dc38ebfd</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.immutables/value@2.8.2?type=jar</purl>
      <externalReferences><reference type="website"><url>http://immutables.org/value</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/immutables/immutables.git/value</url></reference></externalReferences>
    </component>
  </components>
  <dependencies>
    <dependency ref="pkg:maven/org.apache.arrow/arrow-memory-netty@12.0.1?type=jar">
      <dependency ref="pkg:maven/org.apache.arrow/arrow-memory-core@12.0.1?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-buffer@4.1.82.Final?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-common@4.1.82.Final?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.25?type=jar"/>
      <dependency ref="pkg:maven/org.immutables/value@2.8.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.arrow/arrow-memory-core@12.0.1?type=jar">
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.25?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar"/>
    <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.25?type=jar"/>
    <dependency ref="pkg:maven/io.netty/netty-buffer@4.1.82.Final?type=jar">
      <dependency ref="pkg:maven/io.netty/netty-common@4.1.82.Final?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/io.netty/netty-common@4.1.82.Final?type=jar"/>
    <dependency ref="pkg:maven/org.immutables/value@2.8.2?type=jar"/>
  </dependencies>
</bom>
