2025-05-23T08:24:58Z OWASP Foundation CycloneDX Maven plugin 2.7.9 8e595cdb67f17e4b41e046456970591d 69e8ca804520d09ce4657e7235bae84d01cbffa6 aa09074fe5aa403c008cd4fc7ef8ce41cd244489337f16b3e91a3914158a4db8 1488a8112da8e675813d7585f57c5efb178aed32901118186ee12d0e4ae3d19c53774c7f860bf70d17d70f050119b69443a2637cf641675b4b5d9cdcdd69b89b b097295dfbf10887abc6eec58d4d0822cde5a73d1f5c1cf183a57bf569016ad5ced9d34efae3e574d82bb62837540c6c Apache Software Foundation org.apache.spark spark-common-utils_2.12 3.5.6 The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users. Apache-2.0 https://www.apache.org/licenses/LICENSE-2.0 pkg:maven/org.apache.spark/spark-common-utils_2.12@3.5.6?type=jar https://spark.apache.org/https://repository.apache.org/service/local/staging/deploy/maven2https://issues.apache.org/jira/browse/SPARKdev-subscribe@spark.apache.orgscm:git:git@github.com:apache/spark.git/common/spark-common-utils_2.12 makeBom compile,provided,runtime,system Apache Software Foundation org.apache.spark spark-tags_2.12 3.5.6 The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users. required c6f0f06ba1990aa828eb25e63e54ef44 b97c73f0c21bc3a6e5570698226efe140158c248 8cbd15332921e02f06f70a18bba0735ab8248f09b45cfe3b076fa6a2db518494 d8f1fe5e7fd31cf56611be5c6c7b23377876a78987e736e1f5fe967111a53b166bbae18cf2967b9672d5a26b136307160ba56c023a9a50edfa4461bc2f43e4ab ba28a589161268f62ab2679b1c0d86de1bee7a75c6ad030d9a26ffdb0e219eac9effb03f0b01c970b2bfee1ac4d1c7e4 Apache-2.0 https://www.apache.org/licenses/LICENSE-2.0 pkg:maven/org.apache.spark/spark-tags_2.12@3.5.6?type=jar https://spark.apache.org/https://repository.apache.org/service/local/staging/deploy/maven2https://issues.apache.org/jira/browse/SPARKdev-subscribe@spark.apache.orgscm:git:git@github.com:apache/spark.git/common/spark-tags_2.12 LAMP/EPFL org.scala-lang scala-library 2.12.18 Standard library for the Scala Programming Language required a7dc0cf9f73ab2dffb2f34b69e93c349 fa825f984172f6801e3d8c476071b1823c0a925b e51e6636c003359e106bea4ad99def70e613c290190c8c84f10f9560dd5b00ae d50e05a806168687b1526bc197ba626973121eb692e68f567a15a944eb44e3fec37d5147e000d3bd05d69dc9874695389041c6c16bdcc1e665c1ef04e01be67d 7bec1053a4befc082a7ecbf13d8c17082e113fb5d4a1f389f2de8d23e11372b42941367a09878b236b830190ab32d80b Apache-2.0 https://www.apache.org/licenses/LICENSE-2.0 pkg:maven/org.scala-lang/scala-library@2.12.18?type=jar https://www.scala-lang.org/https://github.com/scala/bug/issueshttps://github.com/scala/scala FasterXML com.fasterxml.jackson.core jackson-databind 2.15.2 General data-binding functionality for Jackson: works on core streaming API required 20ac0d0526a456274409fa852eb74087 9353b021f10c307c00328f52090de2bdb4b6ff9c 0eb2fdad6e40ab8832a78c9b22f58196dd970594e8d3d5a26ead87847c4f3a96 edf622f3d2bb2cdf308875e467f28eafdd581c6ad47992a2b49a2c803b597c7fe4330c8f887687599c8a6a529d8b11054f8b354b7ddddd2bf904ef347d4f1cd2 cced300ea06748cc30cdabf1a0a8e45749d3d2a52740975acd858bd13b83458d535a52fc4cc0eb8991ebd3638b9688ec Apache-2.0 pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.15.2?type=jar https://github.com/FasterXML/jacksonhttps://oss.sonatype.org/service/local/staging/deploy/maven2/https://github.com/FasterXML/jackson-databind/issueshttps://github.com/FasterXML/jackson-databind FasterXML com.fasterxml.jackson.core jackson-annotations 2.15.2 Core annotations used for value types, used by Jackson data binding package. required 71dabcaac955a8bd17b5bba6580aac5b 4724a65ac8e8d156a24898d50fd5dbd3642870b8 04e21f94dcfee4b078fa5a5f53047b785aaba69d19de392f616e7a7fe5d3882f c9ffb4cf3e409921bca1fa6126ca8746c611042ac3fcf0e4f991d23d12b20ef0946ef1421d991ae8ed86012059df4e08fb776d96db6d13147c2ec85e22254537 78885119a700d5dd717fc83e58bf063e1fd07bc823846b6797af6a04a99e92e8fbcf28c3a1316079e6695c138c110deb Apache-2.0 pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.15.2?type=jar https://github.com/FasterXML/jacksonhttps://oss.sonatype.org/service/local/staging/deploy/maven2/https://github.com/FasterXML/jackson-annotations/issueshttps://github.com/FasterXML/jackson-annotations FasterXML com.fasterxml.jackson.core jackson-core 2.15.2 Core Jackson processing abstractions (aka Streaming API), implementation for JSON required e51fdee85b48e6637ad9e85ee76b58df a6fe1836469a69b3ff66037c324d75fc66ef137c 303c99e82b1faa91a0bae5d8fbeb56f7e2adf9b526a900dd723bf140d62bd4b4 a8a3ddf5c8a732fc3810f9c113d88fd59bf613d15dbf9d3e24dd196b2b8c2195f4088375e3d03906f2629e62983fef3267b5478abd5ab1df733ec58cd00efae6 22f4b71de5860b9c54dd85091d5b1312f7f5097a376f68f5a35b32a342858bf2e24ed394d76be0648545a6137d78b82e Apache-2.0 pkg:maven/com.fasterxml.jackson.core/jackson-core@2.15.2?type=jar https://github.com/FasterXML/jackson-corehttps://oss.sonatype.org/service/local/staging/deploy/maven2/https://github.com/FasterXML/jackson-core/issueshttps://github.com/FasterXML/jackson-core com.fasterxml.jackson.module com.fasterxml.jackson.module jackson-module-scala_2.12 2.15.2 jackson-module-scala required ecc6a1f298669beee1a395538e412aab e3d122234da3e5e22c73bd42291616f5331b547d 81259ec6730f6d4b85d5586c9eaa6e75a6885b34bfca572be03126a9179719fe 39fb1e425a124a7e50faaa11a0e858603c7b789fd66f78d006f1fffe08a83c4811011de797c8943e42c9a46bf39219684080108f3b346014793f8860b63d96a2 76d844db959b3f16f848386cb16c76f84065fcde92b706f1b5c6e2ec16c931a4e53cd4cc80f90fb0ae595aa71531f95e Apache-2.0 pkg:maven/com.fasterxml.jackson.module/jackson-module-scala_2.12@2.15.2?type=jar https://github.com/FasterXML/jackson-module-scalahttps://github.com/FasterXML/jackson-module-scala com.thoughtworks.paranamer paranamer 2.8 Paranamer allows runtime access to constructor and method parameter names for Java classes required f213c72b67d4850f17a4a3e9064904de 619eba74c19ccf1da8ebec97a2d7f8ba05773dd6 688cb118a6021d819138e855208c956031688be4b47a24bb615becc63acedf07 d774b05135d34bc42d8a7bee6466715bc44837b95bbe618faa8680978c4348652292ea6dd8eeb88dc7fa859bfe685f4d8329032cbf4fce2ea7e555ba3243cc14 699148a3f69ae205aa47c82e2cb78d3949afc71b090935579a0363fee8675eec3ba05e0d3127295213b39aad3485690b BSD-4-Clause pkg:maven/com.thoughtworks.paranamer/paranamer@2.8?type=jar https://github.com/paul-hammant/paranamer/paranamerhttps://oss.sonatype.org/service/local/staging/deploy/maven2/https://github.com/paul-hammant/paranamer/paranamer The Apache Software Foundation org.apache.commons commons-text 1.10.0 Apache Commons Text is a library focused on algorithms working on strings. required 4afc9bfa2d31dbf7330c98fcc954b892 3363381aef8cef2dbc1023b3e3a9433b08b64e01 770cd903fa7b604d1f7ef7ba17f84108667294b2b478be8ed1af3bffb4ae0018 afd836a1094449e0a791fee67363666c47b6d24acff353a5089b837b332c0f4af89565c354682521e37062d20e6b52d70c77bb4f24cca9b9532c274fc708a831 06c56e6e513dd77cf10d0da46cdea08c34e220e81fa024735b668c6650df4234e564fe865ff5cafea963f56b1e8ffd4a Apache-2.0 pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar https://commons.apache.org/proper/commons-texthttps://github.com/apache/commons-parent/actionshttps://repository.apache.org/service/local/staging/deploy/maven2https://issues.apache.org/jira/browse/TEXThttps://mail-archives.apache.org/mod_mbox/commons-user/https://gitbox.apache.org/repos/asf?p=commons-text.git The Apache Software Foundation org.apache.commons commons-lang3 3.12.0 Apache Commons Lang, a package of Java utility classes for the classes that are in java.lang's hierarchy, or are considered to be so standard as to justify existence in java.lang. required 19fe50567358922bdad277959ea69545 c6842c86792ff03b9f1d1fe2aab8dc23aa6c6f0e d919d904486c037f8d193412da0c92e22a9fa24230b9d67a57855c5c31c7e94e fbdbc0943cb3498b0148e86a39b773f97c8e6013740f72dbc727faeabea402073e2cc8c4d68198e5fc6b08a13b7700236292e99d4785f2c9989f2e5fac11fd81 c34b8a0e0eba2168ad56fedeb7a1d710b6f1d3f1ce6aae99a4e0247bd120efbbadc8dcb2f731045b8a16e3efd30604dc Apache-2.0 pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar https://commons.apache.org/proper/commons-lang/https://builds.apache.org/https://repository.apache.org/service/local/staging/deploy/maven2https://issues.apache.org/jira/browse/LANGhttps://mail-archives.apache.org/mod_mbox/commons-user/https://gitbox.apache.org/repos/asf?p=commons-lang.git QOS.ch org.slf4j slf4j-api 2.0.7 The slf4j API required 403dffa46cdd2e3c82da19df4f394a4c 41eb7184ea9d556f23e18b5cb99cad1f8581fc00 5d6298b93a1905c32cda6478808ac14c2d4a47e91535e53c41f7feeb85d946f4 216d2cac27d501972c888f94dfa747d700b80d60813884b6ab4b12c6a3b17ed0c21a1d27e1aa4332c97c828f20039e3913d2763d7e1a3cef36ae4389a276e7a8 c25b39f418aa726ba8405dfd9b356131f89984e2ef5a55a724a2abf3b7c78443f671105835161d2414d602cf03da9f2d MIT https://opensource.org/licenses/MIT pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar http://www.slf4j.orghttps://oss.sonatype.org/service/local/staging/deploy/maven2/https://github.com/qos-ch/slf4j/slf4j-api QOS.ch org.slf4j jul-to-slf4j 2.0.7 JUL to SLF4J bridge required 965fd8c7c67bd57eb63b321d0bedf498 a48f44aeaa8a5ddc347007298a28173ac1fbbd8b eaba65483bb38c93e68d557a19e5738962322de1946545dbf40e5e32f6293008 7df8d8db9bf6d1eb0f7728ad15fbd820533eca33e55a97ea2f177028f5c3e02ee8142768fff3e9f3204f40cfa9e4cc720a4ef8eb2aac6177e7b78e26702b30cf 04f447db7af836df84dcecd74f8f6c57a7b63276e809bc9810a33815432a3626d1d0273481450b031d50e1c97fd88157 MIT https://opensource.org/licenses/MIT pkg:maven/org.slf4j/jul-to-slf4j@2.0.7?type=jar http://www.slf4j.orghttps://oss.sonatype.org/service/local/staging/deploy/maven2/https://github.com/qos-ch/slf4j/jul-to-slf4j QOS.ch org.slf4j jcl-over-slf4j 2.0.7 JCL 1.2 implemented over SLF4J required 4e8d6cd31f7e6277280c95157ac7845a f127fe5ee53404a8b3697cdd032dd1dd6a29dd77 41806757e1d26dae5d6db2ca7d4a5176eed2d6e709cd86564d4a11dab0601742 221b39b85145cf7c245acb7f2692a02b6c5816f8b1187a1a77942dd39de958c1b01ecd066682eb88244f87b2a47513d40b6c1e69ef49a43b2a07ba818f124e17 fa8d53b46cd3ddab0bd265d384a90c35efef6a02a7822aa6f79065cee68d78f6ad7c4d248dea7497af449845dc962730 Apache-2.0 pkg:maven/org.slf4j/jcl-over-slf4j@2.0.7?type=jar http://www.slf4j.orghttps://oss.sonatype.org/service/local/staging/deploy/maven2/https://github.com/qos-ch/slf4j/jcl-over-slf4j The Apache Software Foundation org.apache.logging.log4j log4j-slf4j2-impl 2.20.0 The Apache Log4j SLF4J 2.0 API binding to Log4j 2 Core required 52355bf9fbb12407e08be175c12dfc7c 155c8b9bbdac91d8461d9a403a646e6bd0d365d8 b8dd3e4ea9cffa18db5f301cd8c539158662e691efd4701aa87b4d09961bd8b0 3954329496870ec7acb0494e7c2e4d1d2585ff3695da3dd01cca4bdd4dbd5a8b5d9cbabc2a90cc2b5f257e57a96a458156382bfdb7c93512ca5579d646c98bb2 2a456e835fb8f2d7f7d7bac38331e16fb66c888d48eb79b630504e719b2d703a7b131b47f96931425d37f22febc541df Apache-2.0 pkg:maven/org.apache.logging.log4j/log4j-slf4j2-impl@2.20.0?type=jar https://logging.apache.org/log4j/2.x/log4j-slf4j2-impl/https://github.com/apache/logging-log4j2/actionshttps://logging.apache.org/log4j/2.x/download.htmlhttps://github.com/apache/logging-log4j2/issueshttps://lists.apache.org/list.html?log4j-user@logging.apache.orghttps://github.com/apache/logging-log4j2/log4j-slf4j2-impl The Apache Software Foundation org.apache.logging.log4j log4j-api 2.20.0 The Apache Log4j API required f9446464667f0139b839b5e9da37f5b9 1fe6082e660daf07c689a89c94dc0f49c26b44bb 2f43eea679ea66f14ca0f13fec2a8600ac124f5a5231dcb4df8393eddcb97550 851016b38421d21864bb3073089c44000f941bfbaa9dc518db7bf7fb3c7f942bfb2c0c7b832e375e82b2f285379bd0935e42aa1833817daacb4fca2a6a9500bc 12b05c61f49caab0b845e93967228a3bd3ab096c4ea1516cb7263f49963137a688a178ddebe790ccc3c0c73f2d4440fc Apache-2.0 pkg:maven/org.apache.logging.log4j/log4j-api@2.20.0?type=jar https://logging.apache.org/log4j/2.x/log4j-api/https://github.com/apache/logging-log4j2/actionshttps://logging.apache.org/log4j/2.x/download.htmlhttps://github.com/apache/logging-log4j2/issueshttps://lists.apache.org/list.html?log4j-user@logging.apache.orghttps://github.com/apache/logging-log4j2/log4j-api The Apache Software Foundation org.apache.logging.log4j log4j-core 2.20.0 The Apache Log4j Implementation required 20bd40d026d35a93fe710acb141e93da eb2a9a47b1396e00b5eee1264296729a70565cc0 6137df848cdaed9f4d5076f75513c6c85da80b953f4e7acca38098b770763f55 a7fe8fa2304c1b013513c1838013804cf601a7148dfef95642ea763c9550a6d844d9a1e528c9c21efc7ea830d13fbbb55e2db2c2eeb5542c4d9f00c127f211e4 1d8b0349286118f102014706f02b7851f10ca0b1554bd7a2e1efdda76ccab6e0abd967490d06fca030f2a26289686275 Apache-2.0 pkg:maven/org.apache.logging.log4j/log4j-core@2.20.0?type=jar https://logging.apache.org/log4j/2.x/log4j-core/https://github.com/apache/logging-log4j2/actionshttps://logging.apache.org/log4j/2.x/download.htmlhttps://github.com/apache/logging-log4j2/issueshttps://lists.apache.org/list.html?log4j-user@logging.apache.orghttps://github.com/apache/logging-log4j2/log4j-core The Apache Software Foundation org.apache.logging.log4j log4j-1.2-api 2.20.0 The Apache Log4j 1.x Compatibility API required 986cff74b065cdd1d6b860ac1e9a20fa 689151374756cb809cb029f2501015bdc7733179 89d761af83de7e08e3c1916bc757242cedbbc1f38fb76fd13f89ef36b2671a45 64f208ca34f3ca9d7902024d781b629795ffaa41ac4f4dd4487e1e0ff97351d62d83f399d6f8b5a7044af5d9b117a7cdd74a7b0fd2030af5bc4ba05a3e344a24 6c33bce8423e1ac38ac9f11fbec247bc2255dc2a9f1d9994e87c6db861de51df606d1a4163b1c1a3e57987f0f64e2694 Apache-2.0 pkg:maven/org.apache.logging.log4j/log4j-1.2-api@2.20.0?type=jar https://logging.apache.org/log4j/2.x/log4j-1.2-api/https://github.com/apache/logging-log4j2/actionshttps://logging.apache.org/log4j/2.x/download.htmlhttps://github.com/apache/logging-log4j2/issueshttps://lists.apache.org/list.html?log4j-user@logging.apache.orghttps://github.com/apache/logging-log4j2/log4j-1.2-api org.spark-project.spark unused 1.0.0 Sonatype helps open source projects to set up Maven repositories on https://oss.sonatype.org/ required 763373ce9fe48581d4f2b8ffca35bb82 205fe37a2fade6ce6dfcf8eff57ed21a4a1c22af 00fd27fc9bde701581e7dcf5b95981d9e749a1c176bb8bfcd49f675768ff6bf0 08a6ac8d2dc9d89ff557c7e96096c76e687efe3ce166aa6dbb76865bbef64dc8b6ecb5561ef03c2451a688ccdb3876b8f16b9137d02c290a698e917a5656b6fa c8c51d0d851835107db273d7ce522f026587d922c9d1d34739c3dedf9b7737c1c491e961dc7931f46c476d28acbc91f6 Apache-2.0 pkg:maven/org.spark-project.spark/unused@1.0.0?type=jar http://nexus.sonatype.org/oss-repository-hosting.html/unusedhttps://oss.sonatype.org/service/local/staging/deploy/maven2/