{
  "bomFormat" : "CycloneDX",
  "specVersion" : "1.6",
  "serialNumber" : "urn:uuid:2500436c-034d-3a30-9c01-c8a579a03262",
  "version" : 1,
  "metadata" : {
    "lifecycles" : [
      {
        "phase" : "build"
      }
    ],
    "tools" : {
      "components" : [
        {
          "type" : "library",
          "author" : "OWASP Foundation",
          "group" : "org.cyclonedx",
          "name" : "cyclonedx-maven-plugin",
          "version" : "2.9.0",
          "description" : "CycloneDX Maven plugin",
          "hashes" : [
            {
              "alg" : "MD5",
              "content" : "dfaeab7ec837ce07874e2ee66fdc57d3"
            },
            {
              "alg" : "SHA-1",
              "content" : "8bab47bafc8183d0a5f37790ff55ed05ead1ae2d"
            },
            {
              "alg" : "SHA-256",
              "content" : "67117e03eae4a03ca8bab3add044995f4899aa21798a2510b8265ef8101e90ac"
            },
            {
              "alg" : "SHA-512",
              "content" : "ae6b706516bb76da806b7854aef9e348fa593f5159ae9d693ad38942165c0ebc0846d977a477f6029612d43468fd2cd73a5aa253c228a94fb8d184e0acefc3d2"
            },
            {
              "alg" : "SHA-384",
              "content" : "ee872354d8b0dcd6f9835a913b3aaba70d9365a46043be78020183282a1e9fca812e969246cbe31d642541591b46648b"
            },
            {
              "alg" : "SHA3-384",
              "content" : "e5167f9e7ceba3b7b4d1900c404543907868745334bedc69cdf79c271727148413033a3b1426b733b7549e612e44adee"
            },
            {
              "alg" : "SHA3-256",
              "content" : "41fc0bc2275f354e2c7da01041ce73ce677364799cba53920a180aa5d4571c63"
            },
            {
              "alg" : "SHA3-512",
              "content" : "ed7f97900b09b818dbc0b8a23c00a2843e1bc34e2e8eb5b6df52533af0a15b721de6f7d5c2fd9352b8d4fde768e080053b40a16f0f9f04c336fe9b44abe83fc0"
            }
          ]
        }
      ]
    },
    "component" : {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-dbcp2@2.13.0?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-dbcp2",
      "version" : "2.13.0",
      "description" : "Apache Commons DBCP software implements Database Connection Pooling",
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-dbcp2@2.13.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-dbcp/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-parent/actions"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/DBCP"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-dbcp.git"
        }
      ]
    },
    "properties" : [
      {
        "name" : "maven.goal",
        "value" : "makeAggregateBom"
      },
      {
        "name" : "maven.scopes",
        "value" : "compile,provided,runtime,system"
      },
      {
        "name" : "cdx:reproducible",
        "value" : "enabled"
      }
    ]
  },
  "components" : [
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-pool2@2.12.0?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-pool2",
      "version" : "2.12.0",
      "description" : "The Apache Commons Object Pooling Library.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "0516bf5ac1549e8ba78f6b7c49d09ed2"
        },
        {
          "alg" : "SHA-1",
          "content" : "458563f69fbdaebf7daadfe10dc3a22e42a7de50"
        },
        {
          "alg" : "SHA-256",
          "content" : "6d3bd18df8410f3e31b031aca582cc109342358a62a2759ebd0c4cdf30d06f8b"
        },
        {
          "alg" : "SHA-512",
          "content" : "08fb9fda3eddfb9c2ba85df3ae882225f9974fc43c18f4cb45de0483fde8a99b59683dbc8e4696eea1db671cb0686dcf0fce66f58aa45d63786f8362ec3c5ac2"
        },
        {
          "alg" : "SHA-384",
          "content" : "5319c1fa371d7a0cf8b433f17d2ed7c839d0144d0d56f6fc95cf30bfb27def98d2c5ad394e97a237e4c8bbcccc1d2d48"
        },
        {
          "alg" : "SHA3-384",
          "content" : "a0ed1cbad968837ca37f5ef821526aabd12a2ca5cb4c1296f5d1b7bca02157df17668d4610258581f9a9b8e588a329b6"
        },
        {
          "alg" : "SHA3-256",
          "content" : "36bdcea6a7dd8d6470944bfec9161eb486bffe6ace0e583246c1a75590897a2f"
        },
        {
          "alg" : "SHA3-512",
          "content" : "8bf326f7939801963655a61b13caa36f5983abfd0604d6dd6cfb5c9ea076f044335849de3e46687208c8a5c95387dc11ded5d597927456ae2da3c1ee607adbd4"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-pool2@2.12.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-pool/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-pool/actions"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/POOL"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-pool.git"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-logging/commons-logging@1.3.4?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-logging",
      "name" : "commons-logging",
      "version" : "1.3.4",
      "description" : "Apache Commons Logging is a thin adapter allowing configurable bridging to other, well-known logging systems.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "85497a1ab65d101400ba4073c7d0c839"
        },
        {
          "alg" : "SHA-1",
          "content" : "f384ad3659c6f2529dc5f3516d24e26092c74eca"
        },
        {
          "alg" : "SHA-256",
          "content" : "fada7f734209587cb717d7d0d1628d5a60a9f35d5e68e69aab576973cf271194"
        },
        {
          "alg" : "SHA-512",
          "content" : "c8b6f6de3d77c7daf4363cec3e52584a038ff77b5988af4c97cda4321bd36eb2284d1c3f45d5cb0b10d858e98ef8353e616006cb66da498b9cb8f76f39dc8e8c"
        },
        {
          "alg" : "SHA-384",
          "content" : "5ca3d4a1cbc1857a43bece446c0a2088f74c8da5f3d9be2ce51dd3475d84472dd9dbfd2a4ca533f39488892af2e49747"
        },
        {
          "alg" : "SHA3-384",
          "content" : "91e563cee852abc7b13444fdf4864268ff50395fabd2ef84d65c43ae30ff43ccdaef3cd1b6de21fc810510e2782bbec8"
        },
        {
          "alg" : "SHA3-256",
          "content" : "0f4037e816f3adb0c2c9a9886e4653ef75e85550a997d547a9a681dce4a18290"
        },
        {
          "alg" : "SHA3-512",
          "content" : "00d347bdbdd484fdf4291daa4d1971a663bb1fdb55f63c7912046272827cee3de68bf2213a9ba7cfa88779878dd584f4a4d9187effb26d5420d26393b92f8b5d"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-logging/commons-logging@1.3.4?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-logging/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-parent/actions"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/LOGGING"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf/commons-logging"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/jakarta.transaction/jakarta.transaction-api@1.3.3?type=jar",
      "publisher" : "EE4J Community",
      "group" : "jakarta.transaction",
      "name" : "jakarta.transaction-api",
      "version" : "1.3.3",
      "description" : "Jakarta Transactions",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "cc45726045cc9a0728f803f9db4c90c4"
        },
        {
          "alg" : "SHA-1",
          "content" : "c4179d48720a1e87202115fbed6089bdc4195405"
        },
        {
          "alg" : "SHA-256",
          "content" : "0b02a194dd04ee2e192dc9da9579e10955dd6e8ac707adfc91d92f119b0e67ab"
        },
        {
          "alg" : "SHA-512",
          "content" : "764ade8ba807682dcd1ec7382c35275f3d8ab09a03d5b45c48e732501190e2738269080aaf28aa8dd656c11ee84bfb7dae6953dd2768f2acecd3a8cf0ca4961e"
        },
        {
          "alg" : "SHA-384",
          "content" : "63adeb3c5eb24ad0147377436b6e3208d5e97c0e800e0e1e4cb3ba92699f1b06034c2ba00e3689aa8f909ee96c432db0"
        },
        {
          "alg" : "SHA3-384",
          "content" : "dd0a253f45dac003d40ebeed7f38b0850ff4b08941d55db5b3bbf4c936f94062d23799729ff718c54a565de2482bfd3d"
        },
        {
          "alg" : "SHA3-256",
          "content" : "d47afbaf1daba46c7aa107bf1b476857523738370309394958f96a2105686684"
        },
        {
          "alg" : "SHA3-512",
          "content" : "1b744b2d939a8d0a2bbd0be29c717af4a5e2374ca26fbb95a16df03aa55d2aa092e9314f20d5b080f02030ae1b70e4904ef0f8e1509680b9001153cdb7bc1934"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        },
        {
          "license" : {
            "id" : "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl" : "pkg:maven/jakarta.transaction/jakarta.transaction-api@1.3.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://projects.eclipse.org/projects/ee4j.jta"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-ee4j/jta-api/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/jta-dev/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse-ee4j/jta-api"
        }
      ]
    }
  ],
  "dependencies" : [
    {
      "ref" : "pkg:maven/org.apache.commons/commons-dbcp2@2.13.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.commons/commons-pool2@2.12.0?type=jar",
        "pkg:maven/commons-logging/commons-logging@1.3.4?type=jar",
        "pkg:maven/jakarta.transaction/jakarta.transaction-api@1.3.3?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-pool2@2.12.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/commons-logging/commons-logging@1.3.4?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/jakarta.transaction/jakarta.transaction-api@1.3.3?type=jar",
      "dependsOn" : [ ]
    }
  ]
}