{
  "bomFormat" : "CycloneDX",
  "specVersion" : "1.4",
  "serialNumber" : "urn:uuid:1abfaf6a-75bc-4133-a611-6ecd1283f666",
  "version" : 1,
  "metadata" : {
    "timestamp" : "2025-05-23T08:24:58Z",
    "tools" : [
      {
        "vendor" : "OWASP Foundation",
        "name" : "CycloneDX Maven plugin",
        "version" : "2.7.9",
        "hashes" : [
          {
            "alg" : "MD5",
            "content" : "8e595cdb67f17e4b41e046456970591d"
          },
          {
            "alg" : "SHA-1",
            "content" : "69e8ca804520d09ce4657e7235bae84d01cbffa6"
          },
          {
            "alg" : "SHA-256",
            "content" : "aa09074fe5aa403c008cd4fc7ef8ce41cd244489337f16b3e91a3914158a4db8"
          },
          {
            "alg" : "SHA-512",
            "content" : "1488a8112da8e675813d7585f57c5efb178aed32901118186ee12d0e4ae3d19c53774c7f860bf70d17d70f050119b69443a2637cf641675b4b5d9cdcdd69b89b"
          },
          {
            "alg" : "SHA-384",
            "content" : "b097295dfbf10887abc6eec58d4d0822cde5a73d1f5c1cf183a57bf569016ad5ced9d34efae3e574d82bb62837540c6c"
          }
        ]
      }
    ],
    "component" : {
      "publisher" : "Apache Software Foundation",
      "group" : "org.apache.spark",
      "name" : "spark-common-utils_2.12",
      "version" : "3.5.6",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.spark/spark-common-utils_2.12@3.5.6?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://spark.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/SPARK"
        },
        {
          "type" : "mailing-list",
          "url" : "dev-subscribe@spark.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "scm:git:git@github.com:apache/spark.git/common/spark-common-utils_2.12"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.spark/spark-common-utils_2.12@3.5.6?type=jar"
    },
    "properties" : [
      {
        "name" : "maven.goal",
        "value" : "makeBom"
      },
      {
        "name" : "maven.scopes",
        "value" : "compile,provided,runtime,system"
      }
    ]
  },
  "components" : [
    {
      "publisher" : "Apache Software Foundation",
      "group" : "org.apache.spark",
      "name" : "spark-tags_2.12",
      "version" : "3.5.6",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "c6f0f06ba1990aa828eb25e63e54ef44"
        },
        {
          "alg" : "SHA-1",
          "content" : "b97c73f0c21bc3a6e5570698226efe140158c248"
        },
        {
          "alg" : "SHA-256",
          "content" : "8cbd15332921e02f06f70a18bba0735ab8248f09b45cfe3b076fa6a2db518494"
        },
        {
          "alg" : "SHA-512",
          "content" : "d8f1fe5e7fd31cf56611be5c6c7b23377876a78987e736e1f5fe967111a53b166bbae18cf2967b9672d5a26b136307160ba56c023a9a50edfa4461bc2f43e4ab"
        },
        {
          "alg" : "SHA-384",
          "content" : "ba28a589161268f62ab2679b1c0d86de1bee7a75c6ad030d9a26ffdb0e219eac9effb03f0b01c970b2bfee1ac4d1c7e4"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.spark/spark-tags_2.12@3.5.6?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://spark.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/SPARK"
        },
        {
          "type" : "mailing-list",
          "url" : "dev-subscribe@spark.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "scm:git:git@github.com:apache/spark.git/common/spark-tags_2.12"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.spark/spark-tags_2.12@3.5.6?type=jar"
    },
    {
      "publisher" : "LAMP/EPFL",
      "group" : "org.scala-lang",
      "name" : "scala-library",
      "version" : "2.12.18",
      "description" : "Standard library for the Scala Programming Language",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "a7dc0cf9f73ab2dffb2f34b69e93c349"
        },
        {
          "alg" : "SHA-1",
          "content" : "fa825f984172f6801e3d8c476071b1823c0a925b"
        },
        {
          "alg" : "SHA-256",
          "content" : "e51e6636c003359e106bea4ad99def70e613c290190c8c84f10f9560dd5b00ae"
        },
        {
          "alg" : "SHA-512",
          "content" : "d50e05a806168687b1526bc197ba626973121eb692e68f567a15a944eb44e3fec37d5147e000d3bd05d69dc9874695389041c6c16bdcc1e665c1ef04e01be67d"
        },
        {
          "alg" : "SHA-384",
          "content" : "7bec1053a4befc082a7ecbf13d8c17082e113fb5d4a1f389f2de8d23e11372b42941367a09878b236b830190ab32d80b"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.scala-lang/scala-library@2.12.18?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.scala-lang.org/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/scala/bug/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/scala/scala"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.scala-lang/scala-library@2.12.18?type=jar"
    },
    {
      "publisher" : "FasterXML",
      "group" : "com.fasterxml.jackson.core",
      "name" : "jackson-databind",
      "version" : "2.15.2",
      "description" : "General data-binding functionality for Jackson: works on core streaming API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "20ac0d0526a456274409fa852eb74087"
        },
        {
          "alg" : "SHA-1",
          "content" : "9353b021f10c307c00328f52090de2bdb4b6ff9c"
        },
        {
          "alg" : "SHA-256",
          "content" : "0eb2fdad6e40ab8832a78c9b22f58196dd970594e8d3d5a26ead87847c4f3a96"
        },
        {
          "alg" : "SHA-512",
          "content" : "edf622f3d2bb2cdf308875e467f28eafdd581c6ad47992a2b49a2c803b597c7fe4330c8f887687599c8a6a529d8b11054f8b354b7ddddd2bf904ef347d4f1cd2"
        },
        {
          "alg" : "SHA-384",
          "content" : "cced300ea06748cc30cdabf1a0a8e45749d3d2a52740975acd858bd13b83458d535a52fc4cc0eb8991ebd3638b9688ec"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.15.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/FasterXML/jackson"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/FasterXML/jackson-databind/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/FasterXML/jackson-databind"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.15.2?type=jar"
    },
    {
      "publisher" : "FasterXML",
      "group" : "com.fasterxml.jackson.core",
      "name" : "jackson-annotations",
      "version" : "2.15.2",
      "description" : "Core annotations used for value types, used by Jackson data binding package.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "71dabcaac955a8bd17b5bba6580aac5b"
        },
        {
          "alg" : "SHA-1",
          "content" : "4724a65ac8e8d156a24898d50fd5dbd3642870b8"
        },
        {
          "alg" : "SHA-256",
          "content" : "04e21f94dcfee4b078fa5a5f53047b785aaba69d19de392f616e7a7fe5d3882f"
        },
        {
          "alg" : "SHA-512",
          "content" : "c9ffb4cf3e409921bca1fa6126ca8746c611042ac3fcf0e4f991d23d12b20ef0946ef1421d991ae8ed86012059df4e08fb776d96db6d13147c2ec85e22254537"
        },
        {
          "alg" : "SHA-384",
          "content" : "78885119a700d5dd717fc83e58bf063e1fd07bc823846b6797af6a04a99e92e8fbcf28c3a1316079e6695c138c110deb"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.15.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/FasterXML/jackson"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/FasterXML/jackson-annotations/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/FasterXML/jackson-annotations"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.15.2?type=jar"
    },
    {
      "publisher" : "FasterXML",
      "group" : "com.fasterxml.jackson.core",
      "name" : "jackson-core",
      "version" : "2.15.2",
      "description" : "Core Jackson processing abstractions (aka Streaming API), implementation for JSON",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "e51fdee85b48e6637ad9e85ee76b58df"
        },
        {
          "alg" : "SHA-1",
          "content" : "a6fe1836469a69b3ff66037c324d75fc66ef137c"
        },
        {
          "alg" : "SHA-256",
          "content" : "303c99e82b1faa91a0bae5d8fbeb56f7e2adf9b526a900dd723bf140d62bd4b4"
        },
        {
          "alg" : "SHA-512",
          "content" : "a8a3ddf5c8a732fc3810f9c113d88fd59bf613d15dbf9d3e24dd196b2b8c2195f4088375e3d03906f2629e62983fef3267b5478abd5ab1df733ec58cd00efae6"
        },
        {
          "alg" : "SHA-384",
          "content" : "22f4b71de5860b9c54dd85091d5b1312f7f5097a376f68f5a35b32a342858bf2e24ed394d76be0648545a6137d78b82e"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.15.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/FasterXML/jackson-core"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/FasterXML/jackson-core/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/FasterXML/jackson-core"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.15.2?type=jar"
    },
    {
      "publisher" : "com.fasterxml.jackson.module",
      "group" : "com.fasterxml.jackson.module",
      "name" : "jackson-module-scala_2.12",
      "version" : "2.15.2",
      "description" : "jackson-module-scala",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "ecc6a1f298669beee1a395538e412aab"
        },
        {
          "alg" : "SHA-1",
          "content" : "e3d122234da3e5e22c73bd42291616f5331b547d"
        },
        {
          "alg" : "SHA-256",
          "content" : "81259ec6730f6d4b85d5586c9eaa6e75a6885b34bfca572be03126a9179719fe"
        },
        {
          "alg" : "SHA-512",
          "content" : "39fb1e425a124a7e50faaa11a0e858603c7b789fd66f78d006f1fffe08a83c4811011de797c8943e42c9a46bf39219684080108f3b346014793f8860b63d96a2"
        },
        {
          "alg" : "SHA-384",
          "content" : "76d844db959b3f16f848386cb16c76f84065fcde92b706f1b5c6e2ec16c931a4e53cd4cc80f90fb0ae595aa71531f95e"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.fasterxml.jackson.module/jackson-module-scala_2.12@2.15.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/FasterXML/jackson-module-scala"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/FasterXML/jackson-module-scala"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.fasterxml.jackson.module/jackson-module-scala_2.12@2.15.2?type=jar"
    },
    {
      "group" : "com.thoughtworks.paranamer",
      "name" : "paranamer",
      "version" : "2.8",
      "description" : "Paranamer allows runtime access to constructor and method parameter names for Java classes",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f213c72b67d4850f17a4a3e9064904de"
        },
        {
          "alg" : "SHA-1",
          "content" : "619eba74c19ccf1da8ebec97a2d7f8ba05773dd6"
        },
        {
          "alg" : "SHA-256",
          "content" : "688cb118a6021d819138e855208c956031688be4b47a24bb615becc63acedf07"
        },
        {
          "alg" : "SHA-512",
          "content" : "d774b05135d34bc42d8a7bee6466715bc44837b95bbe618faa8680978c4348652292ea6dd8eeb88dc7fa859bfe685f4d8329032cbf4fce2ea7e555ba3243cc14"
        },
        {
          "alg" : "SHA-384",
          "content" : "699148a3f69ae205aa47c82e2cb78d3949afc71b090935579a0363fee8675eec3ba05e0d3127295213b39aad3485690b"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-4-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/com.thoughtworks.paranamer/paranamer@2.8?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/paul-hammant/paranamer/paranamer"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/paul-hammant/paranamer/paranamer"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.thoughtworks.paranamer/paranamer@2.8?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-text",
      "version" : "1.10.0",
      "description" : "Apache Commons Text is a library focused on algorithms working on strings.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "4afc9bfa2d31dbf7330c98fcc954b892"
        },
        {
          "alg" : "SHA-1",
          "content" : "3363381aef8cef2dbc1023b3e3a9433b08b64e01"
        },
        {
          "alg" : "SHA-256",
          "content" : "770cd903fa7b604d1f7ef7ba17f84108667294b2b478be8ed1af3bffb4ae0018"
        },
        {
          "alg" : "SHA-512",
          "content" : "afd836a1094449e0a791fee67363666c47b6d24acff353a5089b837b332c0f4af89565c354682521e37062d20e6b52d70c77bb4f24cca9b9532c274fc708a831"
        },
        {
          "alg" : "SHA-384",
          "content" : "06c56e6e513dd77cf10d0da46cdea08c34e220e81fa024735b668c6650df4234e564fe865ff5cafea963f56b1e8ffd4a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-text"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-parent/actions"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/TEXT"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-text.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-lang3",
      "version" : "3.12.0",
      "description" : "Apache Commons Lang, a package of Java utility classes for the classes that are in java.lang's hierarchy, or are considered to be so standard as to justify existence in java.lang.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "19fe50567358922bdad277959ea69545"
        },
        {
          "alg" : "SHA-1",
          "content" : "c6842c86792ff03b9f1d1fe2aab8dc23aa6c6f0e"
        },
        {
          "alg" : "SHA-256",
          "content" : "d919d904486c037f8d193412da0c92e22a9fa24230b9d67a57855c5c31c7e94e"
        },
        {
          "alg" : "SHA-512",
          "content" : "fbdbc0943cb3498b0148e86a39b773f97c8e6013740f72dbc727faeabea402073e2cc8c4d68198e5fc6b08a13b7700236292e99d4785f2c9989f2e5fac11fd81"
        },
        {
          "alg" : "SHA-384",
          "content" : "c34b8a0e0eba2168ad56fedeb7a1d710b6f1d3f1ce6aae99a4e0247bd120efbbadc8dcb2f731045b8a16e3efd30604dc"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-lang/"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/LANG"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-lang.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar"
    },
    {
      "publisher" : "QOS.ch",
      "group" : "org.slf4j",
      "name" : "slf4j-api",
      "version" : "2.0.7",
      "description" : "The slf4j API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "403dffa46cdd2e3c82da19df4f394a4c"
        },
        {
          "alg" : "SHA-1",
          "content" : "41eb7184ea9d556f23e18b5cb99cad1f8581fc00"
        },
        {
          "alg" : "SHA-256",
          "content" : "5d6298b93a1905c32cda6478808ac14c2d4a47e91535e53c41f7feeb85d946f4"
        },
        {
          "alg" : "SHA-512",
          "content" : "216d2cac27d501972c888f94dfa747d700b80d60813884b6ab4b12c6a3b17ed0c21a1d27e1aa4332c97c828f20039e3913d2763d7e1a3cef36ae4389a276e7a8"
        },
        {
          "alg" : "SHA-384",
          "content" : "c25b39f418aa726ba8405dfd9b356131f89984e2ef5a55a724a2abf3b7c78443f671105835161d2414d602cf03da9f2d"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl" : "pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.slf4j.org"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/qos-ch/slf4j/slf4j-api"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar"
    },
    {
      "publisher" : "QOS.ch",
      "group" : "org.slf4j",
      "name" : "jul-to-slf4j",
      "version" : "2.0.7",
      "description" : "JUL to SLF4J bridge",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "965fd8c7c67bd57eb63b321d0bedf498"
        },
        {
          "alg" : "SHA-1",
          "content" : "a48f44aeaa8a5ddc347007298a28173ac1fbbd8b"
        },
        {
          "alg" : "SHA-256",
          "content" : "eaba65483bb38c93e68d557a19e5738962322de1946545dbf40e5e32f6293008"
        },
        {
          "alg" : "SHA-512",
          "content" : "7df8d8db9bf6d1eb0f7728ad15fbd820533eca33e55a97ea2f177028f5c3e02ee8142768fff3e9f3204f40cfa9e4cc720a4ef8eb2aac6177e7b78e26702b30cf"
        },
        {
          "alg" : "SHA-384",
          "content" : "04f447db7af836df84dcecd74f8f6c57a7b63276e809bc9810a33815432a3626d1d0273481450b031d50e1c97fd88157"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl" : "pkg:maven/org.slf4j/jul-to-slf4j@2.0.7?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.slf4j.org"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/qos-ch/slf4j/jul-to-slf4j"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.slf4j/jul-to-slf4j@2.0.7?type=jar"
    },
    {
      "publisher" : "QOS.ch",
      "group" : "org.slf4j",
      "name" : "jcl-over-slf4j",
      "version" : "2.0.7",
      "description" : "JCL 1.2 implemented over SLF4J",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "4e8d6cd31f7e6277280c95157ac7845a"
        },
        {
          "alg" : "SHA-1",
          "content" : "f127fe5ee53404a8b3697cdd032dd1dd6a29dd77"
        },
        {
          "alg" : "SHA-256",
          "content" : "41806757e1d26dae5d6db2ca7d4a5176eed2d6e709cd86564d4a11dab0601742"
        },
        {
          "alg" : "SHA-512",
          "content" : "221b39b85145cf7c245acb7f2692a02b6c5816f8b1187a1a77942dd39de958c1b01ecd066682eb88244f87b2a47513d40b6c1e69ef49a43b2a07ba818f124e17"
        },
        {
          "alg" : "SHA-384",
          "content" : "fa8d53b46cd3ddab0bd265d384a90c35efef6a02a7822aa6f79065cee68d78f6ad7c4d248dea7497af449845dc962730"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.slf4j/jcl-over-slf4j@2.0.7?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.slf4j.org"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/qos-ch/slf4j/jcl-over-slf4j"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.slf4j/jcl-over-slf4j@2.0.7?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.logging.log4j",
      "name" : "log4j-slf4j2-impl",
      "version" : "2.20.0",
      "description" : "The Apache Log4j SLF4J 2.0 API binding to Log4j 2 Core",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "52355bf9fbb12407e08be175c12dfc7c"
        },
        {
          "alg" : "SHA-1",
          "content" : "155c8b9bbdac91d8461d9a403a646e6bd0d365d8"
        },
        {
          "alg" : "SHA-256",
          "content" : "b8dd3e4ea9cffa18db5f301cd8c539158662e691efd4701aa87b4d09961bd8b0"
        },
        {
          "alg" : "SHA-512",
          "content" : "3954329496870ec7acb0494e7c2e4d1d2585ff3695da3dd01cca4bdd4dbd5a8b5d9cbabc2a90cc2b5f257e57a96a458156382bfdb7c93512ca5579d646c98bb2"
        },
        {
          "alg" : "SHA-384",
          "content" : "2a456e835fb8f2d7f7d7bac38331e16fb66c888d48eb79b630504e719b2d703a7b131b47f96931425d37f22febc541df"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.logging.log4j/log4j-slf4j2-impl@2.20.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://logging.apache.org/log4j/2.x/log4j-slf4j2-impl/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/logging-log4j2/actions"
        },
        {
          "type" : "distribution",
          "url" : "https://logging.apache.org/log4j/2.x/download.html"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/apache/logging-log4j2/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?log4j-user@logging.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/logging-log4j2/log4j-slf4j2-impl"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.logging.log4j/log4j-slf4j2-impl@2.20.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.logging.log4j",
      "name" : "log4j-api",
      "version" : "2.20.0",
      "description" : "The Apache Log4j API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f9446464667f0139b839b5e9da37f5b9"
        },
        {
          "alg" : "SHA-1",
          "content" : "1fe6082e660daf07c689a89c94dc0f49c26b44bb"
        },
        {
          "alg" : "SHA-256",
          "content" : "2f43eea679ea66f14ca0f13fec2a8600ac124f5a5231dcb4df8393eddcb97550"
        },
        {
          "alg" : "SHA-512",
          "content" : "851016b38421d21864bb3073089c44000f941bfbaa9dc518db7bf7fb3c7f942bfb2c0c7b832e375e82b2f285379bd0935e42aa1833817daacb4fca2a6a9500bc"
        },
        {
          "alg" : "SHA-384",
          "content" : "12b05c61f49caab0b845e93967228a3bd3ab096c4ea1516cb7263f49963137a688a178ddebe790ccc3c0c73f2d4440fc"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.logging.log4j/log4j-api@2.20.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://logging.apache.org/log4j/2.x/log4j-api/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/logging-log4j2/actions"
        },
        {
          "type" : "distribution",
          "url" : "https://logging.apache.org/log4j/2.x/download.html"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/apache/logging-log4j2/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?log4j-user@logging.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/logging-log4j2/log4j-api"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.logging.log4j/log4j-api@2.20.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.logging.log4j",
      "name" : "log4j-core",
      "version" : "2.20.0",
      "description" : "The Apache Log4j Implementation",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "20bd40d026d35a93fe710acb141e93da"
        },
        {
          "alg" : "SHA-1",
          "content" : "eb2a9a47b1396e00b5eee1264296729a70565cc0"
        },
        {
          "alg" : "SHA-256",
          "content" : "6137df848cdaed9f4d5076f75513c6c85da80b953f4e7acca38098b770763f55"
        },
        {
          "alg" : "SHA-512",
          "content" : "a7fe8fa2304c1b013513c1838013804cf601a7148dfef95642ea763c9550a6d844d9a1e528c9c21efc7ea830d13fbbb55e2db2c2eeb5542c4d9f00c127f211e4"
        },
        {
          "alg" : "SHA-384",
          "content" : "1d8b0349286118f102014706f02b7851f10ca0b1554bd7a2e1efdda76ccab6e0abd967490d06fca030f2a26289686275"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.logging.log4j/log4j-core@2.20.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://logging.apache.org/log4j/2.x/log4j-core/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/logging-log4j2/actions"
        },
        {
          "type" : "distribution",
          "url" : "https://logging.apache.org/log4j/2.x/download.html"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/apache/logging-log4j2/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?log4j-user@logging.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/logging-log4j2/log4j-core"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.logging.log4j/log4j-core@2.20.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.logging.log4j",
      "name" : "log4j-1.2-api",
      "version" : "2.20.0",
      "description" : "The Apache Log4j 1.x Compatibility API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "986cff74b065cdd1d6b860ac1e9a20fa"
        },
        {
          "alg" : "SHA-1",
          "content" : "689151374756cb809cb029f2501015bdc7733179"
        },
        {
          "alg" : "SHA-256",
          "content" : "89d761af83de7e08e3c1916bc757242cedbbc1f38fb76fd13f89ef36b2671a45"
        },
        {
          "alg" : "SHA-512",
          "content" : "64f208ca34f3ca9d7902024d781b629795ffaa41ac4f4dd4487e1e0ff97351d62d83f399d6f8b5a7044af5d9b117a7cdd74a7b0fd2030af5bc4ba05a3e344a24"
        },
        {
          "alg" : "SHA-384",
          "content" : "6c33bce8423e1ac38ac9f11fbec247bc2255dc2a9f1d9994e87c6db861de51df606d1a4163b1c1a3e57987f0f64e2694"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.logging.log4j/log4j-1.2-api@2.20.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://logging.apache.org/log4j/2.x/log4j-1.2-api/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/logging-log4j2/actions"
        },
        {
          "type" : "distribution",
          "url" : "https://logging.apache.org/log4j/2.x/download.html"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/apache/logging-log4j2/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?log4j-user@logging.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/logging-log4j2/log4j-1.2-api"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.logging.log4j/log4j-1.2-api@2.20.0?type=jar"
    },
    {
      "group" : "org.spark-project.spark",
      "name" : "unused",
      "version" : "1.0.0",
      "description" : "Sonatype helps open source projects to set up Maven repositories on https://oss.sonatype.org/",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "763373ce9fe48581d4f2b8ffca35bb82"
        },
        {
          "alg" : "SHA-1",
          "content" : "205fe37a2fade6ce6dfcf8eff57ed21a4a1c22af"
        },
        {
          "alg" : "SHA-256",
          "content" : "00fd27fc9bde701581e7dcf5b95981d9e749a1c176bb8bfcd49f675768ff6bf0"
        },
        {
          "alg" : "SHA-512",
          "content" : "08a6ac8d2dc9d89ff557c7e96096c76e687efe3ce166aa6dbb76865bbef64dc8b6ecb5561ef03c2451a688ccdb3876b8f16b9137d02c290a698e917a5656b6fa"
        },
        {
          "alg" : "SHA-384",
          "content" : "c8c51d0d851835107db273d7ce522f026587d922c9d1d34739c3dedf9b7737c1c491e961dc7931f46c476d28acbc91f6"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.spark-project.spark/unused@1.0.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://nexus.sonatype.org/oss-repository-hosting.html/unused"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.spark-project.spark/unused@1.0.0?type=jar"
    }
  ],
  "dependencies" : [
    {
      "ref" : "pkg:maven/org.apache.spark/spark-common-utils_2.12@3.5.6?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.spark/spark-tags_2.12@3.5.6?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.15.2?type=jar",
        "pkg:maven/com.fasterxml.jackson.module/jackson-module-scala_2.12@2.15.2?type=jar",
        "pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar",
        "pkg:maven/org.slf4j/jul-to-slf4j@2.0.7?type=jar",
        "pkg:maven/org.slf4j/jcl-over-slf4j@2.0.7?type=jar",
        "pkg:maven/org.apache.logging.log4j/log4j-slf4j2-impl@2.20.0?type=jar",
        "pkg:maven/org.apache.logging.log4j/log4j-api@2.20.0?type=jar",
        "pkg:maven/org.apache.logging.log4j/log4j-core@2.20.0?type=jar",
        "pkg:maven/org.apache.logging.log4j/log4j-1.2-api@2.20.0?type=jar",
        "pkg:maven/org.spark-project.spark/unused@1.0.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.spark/spark-tags_2.12@3.5.6?type=jar",
      "dependsOn" : [
        "pkg:maven/org.scala-lang/scala-library@2.12.18?type=jar",
        "pkg:maven/org.spark-project.spark/unused@1.0.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.scala-lang/scala-library@2.12.18?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.spark-project.spark/unused@1.0.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.15.2?type=jar",
      "dependsOn" : [
        "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.15.2?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.15.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.15.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.15.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.fasterxml.jackson.module/jackson-module-scala_2.12@2.15.2?type=jar",
      "dependsOn" : [
        "pkg:maven/org.scala-lang/scala-library@2.12.18?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.15.2?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.15.2?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.15.2?type=jar",
        "pkg:maven/com.thoughtworks.paranamer/paranamer@2.8?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.thoughtworks.paranamer/paranamer@2.8?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.slf4j/jul-to-slf4j@2.0.7?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.slf4j/jcl-over-slf4j@2.0.7?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.logging.log4j/log4j-slf4j2-impl@2.20.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.logging.log4j/log4j-api@2.20.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar",
        "pkg:maven/org.apache.logging.log4j/log4j-core@2.20.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.logging.log4j/log4j-api@2.20.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.logging.log4j/log4j-core@2.20.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.logging.log4j/log4j-api@2.20.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.logging.log4j/log4j-1.2-api@2.20.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.logging.log4j/log4j-api@2.20.0?type=jar"
      ]
    }
  ]
}