<?xml version="1.0" encoding="UTF-8"?>
<bom serialNumber="urn:uuid:2500436c-034d-3a30-9c01-c8a579a03262" version="1" xmlns="http://cyclonedx.org/schema/bom/1.6">
  <metadata>
    <lifecycles>
      <lifecycle>
        <phase>build</phase>
      </lifecycle>
    </lifecycles>
    <tools>
      <components>
        <component type="library">
          <author>OWASP Foundation</author>
          <group>org.cyclonedx</group>
          <name>cyclonedx-maven-plugin</name>
          <version>2.9.0</version>
          <description>CycloneDX Maven plugin</description>
          <hashes>
            <hash alg="MD5">dfaeab7ec837ce07874e2ee66fdc57d3</hash>
            <hash alg="SHA-1">8bab47bafc8183d0a5f37790ff55ed05ead1ae2d</hash>
            <hash alg="SHA-256">67117e03eae4a03ca8bab3add044995f4899aa21798a2510b8265ef8101e90ac</hash>
            <hash alg="SHA-512">ae6b706516bb76da806b7854aef9e348fa593f5159ae9d693ad38942165c0ebc0846d977a477f6029612d43468fd2cd73a5aa253c228a94fb8d184e0acefc3d2</hash>
            <hash alg="SHA-384">ee872354d8b0dcd6f9835a913b3aaba70d9365a46043be78020183282a1e9fca812e969246cbe31d642541591b46648b</hash>
            <hash alg="SHA3-384">e5167f9e7ceba3b7b4d1900c404543907868745334bedc69cdf79c271727148413033a3b1426b733b7549e612e44adee</hash>
            <hash alg="SHA3-256">41fc0bc2275f354e2c7da01041ce73ce677364799cba53920a180aa5d4571c63</hash>
            <hash alg="SHA3-512">ed7f97900b09b818dbc0b8a23c00a2843e1bc34e2e8eb5b6df52533af0a15b721de6f7d5c2fd9352b8d4fde768e080053b40a16f0f9f04c336fe9b44abe83fc0</hash>
          </hashes>
        </component>
      </components>
    </tools>
    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-dbcp2@2.13.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.commons</group>
      <name>commons-dbcp2</name>
      <version>2.13.0</version>
      <description>Apache Commons DBCP software implements Database Connection Pooling</description>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.commons/commons-dbcp2@2.13.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://commons.apache.org/proper/commons-dbcp/</url>
        </reference>
        <reference type="build-system">
          <url>https://github.com/apache/commons-parent/actions</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/DBCP</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/commons-user/</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf?p=commons-dbcp.git</url>
        </reference>
      </externalReferences>
    </component>
    <properties>
      <property name="maven.goal">makeAggregateBom</property>
      <property name="maven.scopes">compile,provided,runtime,system</property>
      <property name="cdx:reproducible">enabled</property>
    </properties>
  </metadata>
  <components>
    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-pool2@2.12.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.commons</group>
      <name>commons-pool2</name>
      <version>2.12.0</version>
      <description>The Apache Commons Object Pooling Library.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">0516bf5ac1549e8ba78f6b7c49d09ed2</hash>
        <hash alg="SHA-1">458563f69fbdaebf7daadfe10dc3a22e42a7de50</hash>
        <hash alg="SHA-256">6d3bd18df8410f3e31b031aca582cc109342358a62a2759ebd0c4cdf30d06f8b</hash>
        <hash alg="SHA-512">08fb9fda3eddfb9c2ba85df3ae882225f9974fc43c18f4cb45de0483fde8a99b59683dbc8e4696eea1db671cb0686dcf0fce66f58aa45d63786f8362ec3c5ac2</hash>
        <hash alg="SHA-384">5319c1fa371d7a0cf8b433f17d2ed7c839d0144d0d56f6fc95cf30bfb27def98d2c5ad394e97a237e4c8bbcccc1d2d48</hash>
        <hash alg="SHA3-384">a0ed1cbad968837ca37f5ef821526aabd12a2ca5cb4c1296f5d1b7bca02157df17668d4610258581f9a9b8e588a329b6</hash>
        <hash alg="SHA3-256">36bdcea6a7dd8d6470944bfec9161eb486bffe6ace0e583246c1a75590897a2f</hash>
        <hash alg="SHA3-512">8bf326f7939801963655a61b13caa36f5983abfd0604d6dd6cfb5c9ea076f044335849de3e46687208c8a5c95387dc11ded5d597927456ae2da3c1ee607adbd4</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.commons/commons-pool2@2.12.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://commons.apache.org/proper/commons-pool/</url>
        </reference>
        <reference type="build-system">
          <url>https://github.com/apache/commons-pool/actions</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/POOL</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/commons-user/</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf?p=commons-pool.git</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-logging/commons-logging@1.3.4?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>commons-logging</group>
      <name>commons-logging</name>
      <version>1.3.4</version>
      <description>Apache Commons Logging is a thin adapter allowing configurable bridging to other,
    well-known logging systems.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">85497a1ab65d101400ba4073c7d0c839</hash>
        <hash alg="SHA-1">f384ad3659c6f2529dc5f3516d24e26092c74eca</hash>
        <hash alg="SHA-256">fada7f734209587cb717d7d0d1628d5a60a9f35d5e68e69aab576973cf271194</hash>
        <hash alg="SHA-512">c8b6f6de3d77c7daf4363cec3e52584a038ff77b5988af4c97cda4321bd36eb2284d1c3f45d5cb0b10d858e98ef8353e616006cb66da498b9cb8f76f39dc8e8c</hash>
        <hash alg="SHA-384">5ca3d4a1cbc1857a43bece446c0a2088f74c8da5f3d9be2ce51dd3475d84472dd9dbfd2a4ca533f39488892af2e49747</hash>
        <hash alg="SHA3-384">91e563cee852abc7b13444fdf4864268ff50395fabd2ef84d65c43ae30ff43ccdaef3cd1b6de21fc810510e2782bbec8</hash>
        <hash alg="SHA3-256">0f4037e816f3adb0c2c9a9886e4653ef75e85550a997d547a9a681dce4a18290</hash>
        <hash alg="SHA3-512">00d347bdbdd484fdf4291daa4d1971a663bb1fdb55f63c7912046272827cee3de68bf2213a9ba7cfa88779878dd584f4a4d9187effb26d5420d26393b92f8b5d</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/commons-logging/commons-logging@1.3.4?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://commons.apache.org/proper/commons-logging/</url>
        </reference>
        <reference type="build-system">
          <url>https://github.com/apache/commons-parent/actions</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/LOGGING</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/commons-user/</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf/commons-logging</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/jakarta.transaction/jakarta.transaction-api@1.3.3?type=jar">
      <publisher>EE4J Community</publisher>
      <group>jakarta.transaction</group>
      <name>jakarta.transaction-api</name>
      <version>1.3.3</version>
      <description>Jakarta Transactions</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">cc45726045cc9a0728f803f9db4c90c4</hash>
        <hash alg="SHA-1">c4179d48720a1e87202115fbed6089bdc4195405</hash>
        <hash alg="SHA-256">0b02a194dd04ee2e192dc9da9579e10955dd6e8ac707adfc91d92f119b0e67ab</hash>
        <hash alg="SHA-512">764ade8ba807682dcd1ec7382c35275f3d8ab09a03d5b45c48e732501190e2738269080aaf28aa8dd656c11ee84bfb7dae6953dd2768f2acecd3a8cf0ca4961e</hash>
        <hash alg="SHA-384">63adeb3c5eb24ad0147377436b6e3208d5e97c0e800e0e1e4cb3ba92699f1b06034c2ba00e3689aa8f909ee96c432db0</hash>
        <hash alg="SHA3-384">dd0a253f45dac003d40ebeed7f38b0850ff4b08941d55db5b3bbf4c936f94062d23799729ff718c54a565de2482bfd3d</hash>
        <hash alg="SHA3-256">d47afbaf1daba46c7aa107bf1b476857523738370309394958f96a2105686684</hash>
        <hash alg="SHA3-512">1b744b2d939a8d0a2bbd0be29c717af4a5e2374ca26fbb95a16df03aa55d2aa092e9314f20d5b080f02030ae1b70e4904ef0f8e1509680b9001153cdb7bc1934</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
        <license>
          <id>GPL-2.0-with-classpath-exception</id>
        </license>
      </licenses>
      <purl>pkg:maven/jakarta.transaction/jakarta.transaction-api@1.3.3?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://projects.eclipse.org/projects/ee4j.jta</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/eclipse-ee4j/jta-api/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://dev.eclipse.org/mhonarc/lists/jta-dev/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/eclipse-ee4j/jta-api</url>
        </reference>
      </externalReferences>
    </component>
  </components>
  <dependencies>
    <dependency ref="pkg:maven/org.apache.commons/commons-dbcp2@2.13.0?type=jar">
      <dependency ref="pkg:maven/org.apache.commons/commons-pool2@2.12.0?type=jar"/>
      <dependency ref="pkg:maven/commons-logging/commons-logging@1.3.4?type=jar"/>
      <dependency ref="pkg:maven/jakarta.transaction/jakarta.transaction-api@1.3.3?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.commons/commons-pool2@2.12.0?type=jar"/>
    <dependency ref="pkg:maven/commons-logging/commons-logging@1.3.4?type=jar"/>
    <dependency ref="pkg:maven/jakarta.transaction/jakarta.transaction-api@1.3.3?type=jar"/>
  </dependencies>
</bom>
