<?xml version="1.0" encoding="UTF-8"?>
<bom serialNumber="urn:uuid:8c3b2ef4-614e-3b85-9fdc-ff0b1a9c3185" version="1" xmlns="http://cyclonedx.org/schema/bom/1.6">
  <metadata>
    <lifecycles>
      <lifecycle>
        <phase>build</phase>
      </lifecycle>
    </lifecycles>
    <tools>
      <components>
        <component type="library">
          <author>OWASP Foundation</author>
          <group>org.cyclonedx</group>
          <name>cyclonedx-maven-plugin</name>
          <version>2.9.0</version>
          <description>CycloneDX Maven plugin</description>
          <hashes>
            <hash alg="MD5">dfaeab7ec837ce07874e2ee66fdc57d3</hash>
            <hash alg="SHA-1">8bab47bafc8183d0a5f37790ff55ed05ead1ae2d</hash>
            <hash alg="SHA-256">67117e03eae4a03ca8bab3add044995f4899aa21798a2510b8265ef8101e90ac</hash>
            <hash alg="SHA-512">ae6b706516bb76da806b7854aef9e348fa593f5159ae9d693ad38942165c0ebc0846d977a477f6029612d43468fd2cd73a5aa253c228a94fb8d184e0acefc3d2</hash>
            <hash alg="SHA-384">ee872354d8b0dcd6f9835a913b3aaba70d9365a46043be78020183282a1e9fca812e969246cbe31d642541591b46648b</hash>
            <hash alg="SHA3-384">e5167f9e7ceba3b7b4d1900c404543907868745334bedc69cdf79c271727148413033a3b1426b733b7549e612e44adee</hash>
            <hash alg="SHA3-256">41fc0bc2275f354e2c7da01041ce73ce677364799cba53920a180aa5d4571c63</hash>
            <hash alg="SHA3-512">ed7f97900b09b818dbc0b8a23c00a2843e1bc34e2e8eb5b6df52533af0a15b721de6f7d5c2fd9352b8d4fde768e080053b40a16f0f9f04c336fe9b44abe83fc0</hash>
          </hashes>
        </component>
      </components>
    </tools>
    <component type="library" bom-ref="pkg:maven/io.dropwizard.metrics/metrics-ehcache@4.2.29?type=bundle">
      <group>io.dropwizard.metrics</group>
      <name>metrics-ehcache</name>
      <version>4.2.29</version>
      <description>An Ehcache wrapper providing Metrics instrumentation of caches.</description>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/io.dropwizard.metrics/metrics-ehcache@4.2.29?type=bundle</purl>
      <externalReferences>
        <reference type="website">
          <url>https://metrics.dropwizard.io/metrics-ehcache</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://s01.oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/dropwizard/metrics/issues/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/dropwizard/metrics/metrics-ehcache/</url>
        </reference>
      </externalReferences>
    </component>
    <properties>
      <property name="maven.goal">makeBom</property>
      <property name="maven.scopes">compile,provided,runtime,system</property>
      <property name="cdx:reproducible">enabled</property>
    </properties>
  </metadata>
  <components>
    <component type="library" bom-ref="pkg:maven/io.dropwizard.metrics/metrics-core@4.2.29?type=jar">
      <group>io.dropwizard.metrics</group>
      <name>metrics-core</name>
      <version>4.2.29</version>
      <description>Metrics is a Java library which gives you unparalleled insight into what your code does in
        production. Metrics provides a powerful toolkit of ways to measure the behavior of critical
        components in your production environment.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">291e828f83cafbfe69be56df0df794bc</hash>
        <hash alg="SHA-1">e40f9425312c877a1a5ee8e8944bbc977112f949</hash>
        <hash alg="SHA-256">fe1aa4cce8c77930cf364073eaec3be04d3bf5ac0f87ca6498046852c848f4e6</hash>
        <hash alg="SHA-512">21f94bb56bbecbcd2aa77ebfdcd1c064136cb6bb92cc6a71937b4bc0f3f83681fd78db05cde9eb5969f4d2f370f4caeb6bc8daa617e87d962f55bfe71fb6fd85</hash>
        <hash alg="SHA-384">72b22a9595cb2352cfe066ad3b5cfded4a2e8db64fadefd6e03c131ced92ec8616328e4f9ede25829af5fbe08ef073c5</hash>
        <hash alg="SHA3-384">f3bc2b3d0a07cb148026dfec1194ed46f6a1fa4ac7db162ddc568c27a43ccea15c90908ed4a0050eefd4d069c743c1ea</hash>
        <hash alg="SHA3-256">26bd3785294063db22025f7efab4eb062a7413543bbc1ebe30d2dbb84361895a</hash>
        <hash alg="SHA3-512">5241638f8f33cf1777d52e65ee40a6f0497efeb2b75387c1748e94ebbd76fedc5c8b585a98a117bf12297418e1c063e9efc011f3e17c9ac975fc825ad296c010</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/io.dropwizard.metrics/metrics-core@4.2.29?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://metrics.dropwizard.io/metrics-core</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://s01.oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/dropwizard/metrics/issues/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/dropwizard/metrics/metrics-core/</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar">
      <publisher>QOS.ch</publisher>
      <group>org.slf4j</group>
      <name>slf4j-api</name>
      <version>1.7.36</version>
      <description>The slf4j API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">872da51f5de7f3923da4de871d57fd85</hash>
        <hash alg="SHA-1">6c62681a2f655b49963a5983b8b0950a6120ae14</hash>
        <hash alg="SHA-256">d3ef575e3e4979678dc01bf1dcce51021493b4d11fb7f1be8ad982877c16a1c0</hash>
        <hash alg="SHA-512">f9b033fc019a44f98b16048da7e2b59edd4a6a527ba60e358f65ab88e0afae03a9340f1b3e8a543d49fa542290f499c5594259affa1ff3e6e7bf3b428d4c610b</hash>
        <hash alg="SHA-384">2b14ad035877087157e379d3277dcdcd79e58d6bdb147c47d29e377d75ce53ad42cafbf22f5fb7827c7e946ff4876b9a</hash>
        <hash alg="SHA3-384">3bc3110dafb8d5be16a39f3b2671a466463cd99eb39610c0e4719a7bf2d928f2ea213c734887c6926a07c4cca7769e4b</hash>
        <hash alg="SHA3-256">ba2608179fcf46e2291a90b9cbb4aa30d718e481f59c350cc21c73b88d826881</hash>
        <hash alg="SHA3-512">14c4edcd19702ef607d78826839d8a6d3a39157df54b89a801d3d3cbbe1307131a77671b041c761122730fb1387888c5ec2e46bdd80e1cb07f8f144676441824</hash>
      </hashes>
      <licenses>
        <license>
          <id>MIT</id>
          <url>https://opensource.org/license/mit/</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://www.slf4j.org</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/qos-ch/slf4j/slf4j-api</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/net.sf.ehcache/ehcache@2.10.9.2?type=jar">
      <publisher>Terracotta, Inc.</publisher>
      <group>net.sf.ehcache</group>
      <name>ehcache</name>
      <version>2.10.9.2</version>
      <description>Ehcache is an open source, standards-based cache used to boost performance,
  offload the database and simplify scalability. Ehcache is robust, proven and full-featured and
  this has made it the most widely-used Java-based cache.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">863e690aaec2467d27d391b154d3151d</hash>
        <hash alg="SHA-1">642832b8def8968295e9eedb41cd8fd625786561</hash>
        <hash alg="SHA-256">43cdfeecb986364c55a840eff0a9242e5b3e6f69d89bd0d1db2d89ad2db33509</hash>
        <hash alg="SHA-512">8d2fe9a755241cd576ad94e2c1b873dc813163d5bb993e3f677d01926b3d725596e78ac4d3108136ff5f845be276068bda04abebd447bf381e0b16fc10c9890f</hash>
        <hash alg="SHA-384">19bf43b2619ba9fcdfbe914d00182c8498355e86e4fbfa5a29ead4c7f3dd3282a3e2c5c8afab9eafb8fa60121e223361</hash>
        <hash alg="SHA3-384">efd367cfec2445686c3bd24e37701abff4276dbb845439bbc74044f063158e998151b9d40c68682b9504dc90c52344c9</hash>
        <hash alg="SHA3-256">6e72d773a57762a50d2aa44e01903c75d72f856d3b910b25be4d34fac414b4ee</hash>
        <hash alg="SHA3-512">1204e5483e3538ecad7ba36d5ee38e2338e9d77043d0ce3f2bbc39546fe87fd30e876bfd85dfddfb520eb9afe591d34b90549bf9722b4896d22189c8d1ce7593</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/net.sf.ehcache/ehcache@2.10.9.2?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://ehcache.org</url>
        </reference>
        <reference type="distribution-intake">
          <url>http://nexus.terracotta.eur.ad.sag/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://jira.terracotta.org/jira/browse/EHC</url>
        </reference>
        <reference type="mailing-list">
          <url>https://groups.google.com/forum/#!forum/ehcache-users</url>
        </reference>
        <reference type="vcs">
          <url>http://svn.terracotta.org/svn/ehcache/tags/ehcache-parent-2.25/ehcache-root/ehcache</url>
        </reference>
      </externalReferences>
    </component>
  </components>
  <dependencies>
    <dependency ref="pkg:maven/io.dropwizard.metrics/metrics-ehcache@4.2.29?type=bundle">
      <dependency ref="pkg:maven/io.dropwizard.metrics/metrics-core@4.2.29?type=jar"/>
      <dependency ref="pkg:maven/net.sf.ehcache/ehcache@2.10.9.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/io.dropwizard.metrics/metrics-core@4.2.29?type=jar">
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    <dependency ref="pkg:maven/net.sf.ehcache/ehcache@2.10.9.2?type=jar"/>
  </dependencies>
</bom>
