{
  "bomFormat" : "CycloneDX",
  "specVersion" : "1.4",
  "serialNumber" : "urn:uuid:cc50c6de-60aa-3911-ba5e-bd2fb222c626",
  "version" : 1,
  "metadata" : {
    "tools" : [
      {
        "vendor" : "OWASP Foundation",
        "name" : "CycloneDX Maven plugin",
        "version" : "2.7.11",
        "hashes" : [
          {
            "alg" : "MD5",
            "content" : "a70e8b649ab4a2bb7922d360173c8237"
          },
          {
            "alg" : "SHA-1",
            "content" : "4c3c0878c15561639076e5be7a48ffcd6111c5ee"
          },
          {
            "alg" : "SHA-256",
            "content" : "70997d52dbffd4e797c467b2062c6ba9b8b5a7380ff2884779f2743b6172ebb5"
          },
          {
            "alg" : "SHA-512",
            "content" : "bc1ce91190c642f68fd3571939d7668def3b879ec8e5a87a213a9710a106e0290f60f9e0414593d19cca958c4fcb5d4450bd2793bcd609948419c8a2a6a7f5c8"
          },
          {
            "alg" : "SHA-384",
            "content" : "3c8421bdafd1754fb424f16dccc83bfe0827648c1cadfffc98bdf1c7da65475dfe48d2f4b16d233bb8819e155ba6a4f3"
          },
          {
            "alg" : "SHA3-384",
            "content" : "ad88cf6a0e0a5d51df49a4dab5530a28de9df7eec8460c045dff3e1f9316b82a244a125d52b937fe9d4ee72e44f5d01a"
          },
          {
            "alg" : "SHA3-256",
            "content" : "b4d9c3ef07c34517fd9f33178ba95ffc9618eb84a3671e71b0c82991ec3717e5"
          },
          {
            "alg" : "SHA3-512",
            "content" : "935b43aba8999dc7d95d93288a251c97b6b32852841b7bef31516c27c8d65c8de7f8411f1829f765ee760f25930c766db6a49df68e5994e18721c0a71f606f1e"
          }
        ]
      }
    ],
    "component" : {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-dbcp2",
      "version" : "2.12.0",
      "description" : "Apache Commons DBCP software implements Database Connection Pooling",
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-dbcp2@2.12.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-dbcp/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-parent/actions"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/DBCP"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-dbcp.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-dbcp2@2.12.0?type=jar"
    },
    "properties" : [
      {
        "name" : "maven.goal",
        "value" : "makeAggregateBom"
      },
      {
        "name" : "maven.scopes",
        "value" : "compile,provided,runtime,system"
      },
      {
        "name" : "cdx:reproducible",
        "value" : "enabled"
      }
    ]
  },
  "components" : [
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-pool2",
      "version" : "2.12.0",
      "description" : "The Apache Commons Object Pooling Library.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "0516bf5ac1549e8ba78f6b7c49d09ed2"
        },
        {
          "alg" : "SHA-1",
          "content" : "458563f69fbdaebf7daadfe10dc3a22e42a7de50"
        },
        {
          "alg" : "SHA-256",
          "content" : "6d3bd18df8410f3e31b031aca582cc109342358a62a2759ebd0c4cdf30d06f8b"
        },
        {
          "alg" : "SHA-512",
          "content" : "08fb9fda3eddfb9c2ba85df3ae882225f9974fc43c18f4cb45de0483fde8a99b59683dbc8e4696eea1db671cb0686dcf0fce66f58aa45d63786f8362ec3c5ac2"
        },
        {
          "alg" : "SHA-384",
          "content" : "5319c1fa371d7a0cf8b433f17d2ed7c839d0144d0d56f6fc95cf30bfb27def98d2c5ad394e97a237e4c8bbcccc1d2d48"
        },
        {
          "alg" : "SHA3-384",
          "content" : "a0ed1cbad968837ca37f5ef821526aabd12a2ca5cb4c1296f5d1b7bca02157df17668d4610258581f9a9b8e588a329b6"
        },
        {
          "alg" : "SHA3-256",
          "content" : "36bdcea6a7dd8d6470944bfec9161eb486bffe6ace0e583246c1a75590897a2f"
        },
        {
          "alg" : "SHA3-512",
          "content" : "8bf326f7939801963655a61b13caa36f5983abfd0604d6dd6cfb5c9ea076f044335849de3e46687208c8a5c95387dc11ded5d597927456ae2da3c1ee607adbd4"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-pool2@2.12.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-pool/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-pool/actions"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/POOL"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-pool.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-pool2@2.12.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-logging",
      "name" : "commons-logging",
      "version" : "1.3.0",
      "description" : "Apache Commons Logging is a thin adapter allowing configurable bridging to other, well known logging systems.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "522cc4b1f42b7db1554474cb989adfb2"
        },
        {
          "alg" : "SHA-1",
          "content" : "f5e064b541f5c5fbc5e4fb49c4e8cd4eabb3afd6"
        },
        {
          "alg" : "SHA-256",
          "content" : "66d3c980470b99b0c511dad3dfc0ae7b265ec1fb144e96bc0253a8a175fd34d9"
        },
        {
          "alg" : "SHA-512",
          "content" : "481c3bf16acceb349d2da7db5b66ea367c4093f795247bf53f5206f77260a0ae6ad636996cac4d074aaaf9788ba39d1428ced7f4348d1d56439bdb257196ee23"
        },
        {
          "alg" : "SHA-384",
          "content" : "0ee61469e506f8557b76088c6445b6a36e1abe909488f4f116f7b2ba6d8148078b21917c62fbf404df569d4d39c567ee"
        },
        {
          "alg" : "SHA3-384",
          "content" : "be252f5fd75d9fa70c03c807fe8197c724587ebede2022e944ee32a7eea5a99d45a952b3602237e39ff27235efec34e5"
        },
        {
          "alg" : "SHA3-256",
          "content" : "fdd14cd684ef70bc13a0b6ddc021bcdf4be220c41d41de5c1198263de617213a"
        },
        {
          "alg" : "SHA3-512",
          "content" : "e2f077b481eed92b09c1f076f407d5ff4e3c0b863a9daa9faff1d3fd2ee6dbb1c5c4178101cd511c2977887396679f38b09d096e81c614185f2c05b626a3f7fa"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-logging/commons-logging@1.3.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-logging/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-parent/actions"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/LOGGING"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf/commons-logging"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-logging/commons-logging@1.3.0?type=jar"
    },
    {
      "publisher" : "EE4J Community",
      "group" : "jakarta.transaction",
      "name" : "jakarta.transaction-api",
      "version" : "1.3.3",
      "description" : "Jakarta Transactions",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "cc45726045cc9a0728f803f9db4c90c4"
        },
        {
          "alg" : "SHA-1",
          "content" : "c4179d48720a1e87202115fbed6089bdc4195405"
        },
        {
          "alg" : "SHA-256",
          "content" : "0b02a194dd04ee2e192dc9da9579e10955dd6e8ac707adfc91d92f119b0e67ab"
        },
        {
          "alg" : "SHA-512",
          "content" : "764ade8ba807682dcd1ec7382c35275f3d8ab09a03d5b45c48e732501190e2738269080aaf28aa8dd656c11ee84bfb7dae6953dd2768f2acecd3a8cf0ca4961e"
        },
        {
          "alg" : "SHA-384",
          "content" : "63adeb3c5eb24ad0147377436b6e3208d5e97c0e800e0e1e4cb3ba92699f1b06034c2ba00e3689aa8f909ee96c432db0"
        },
        {
          "alg" : "SHA3-384",
          "content" : "dd0a253f45dac003d40ebeed7f38b0850ff4b08941d55db5b3bbf4c936f94062d23799729ff718c54a565de2482bfd3d"
        },
        {
          "alg" : "SHA3-256",
          "content" : "d47afbaf1daba46c7aa107bf1b476857523738370309394958f96a2105686684"
        },
        {
          "alg" : "SHA3-512",
          "content" : "1b744b2d939a8d0a2bbd0be29c717af4a5e2374ca26fbb95a16df03aa55d2aa092e9314f20d5b080f02030ae1b70e4904ef0f8e1509680b9001153cdb7bc1934"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        },
        {
          "license" : {
            "id" : "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl" : "pkg:maven/jakarta.transaction/jakarta.transaction-api@1.3.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://projects.eclipse.org/projects/ee4j.jta"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-ee4j/jta-api/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/jta-dev/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse-ee4j/jta-api"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/jakarta.transaction/jakarta.transaction-api@1.3.3?type=jar"
    }
  ],
  "dependencies" : [
    {
      "ref" : "pkg:maven/org.apache.commons/commons-dbcp2@2.12.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.commons/commons-pool2@2.12.0?type=jar",
        "pkg:maven/commons-logging/commons-logging@1.3.0?type=jar",
        "pkg:maven/jakarta.transaction/jakarta.transaction-api@1.3.3?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-pool2@2.12.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/commons-logging/commons-logging@1.3.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/jakarta.transaction/jakarta.transaction-api@1.3.3?type=jar",
      "dependsOn" : [ ]
    }
  ]
}