<?xml version="1.0" encoding="UTF-8"?>
<bom serialNumber="urn:uuid:721e9438-58b4-436e-9fea-bfd23ab2cefa" version="1" xmlns="http://cyclonedx.org/schema/bom/1.4">
  <metadata>
    <timestamp>2023-02-13T09:41:56Z</timestamp>
    <tools>
      <tool>
        <vendor>OWASP Foundation</vendor>
        <name>CycloneDX Maven plugin</name>
        <version>2.7.4</version>
        <hashes>
          <hash alg="MD5">1c0045824ba8b7c3459faf37fadb5ca4</hash>
          <hash alg="SHA-1">c0259ad78634a65918e328d793d2ea0b8a9c2220</hash>
          <hash alg="SHA-256">47bd0e0176ba679b66739820bc52880a9e667c57c8b7301de698c0ce7e271bb1</hash>
          <hash alg="SHA-512">e8b72acd176d5d3e13646c2422d6fac1e47d369162cbde8796afa567d36bd182a5f8f4cbdc46185f3607a71e92c410ab0eacd87ab8c17b38e352eb3077a46ecb</hash>
          <hash alg="SHA-384">8759a5908a1dbd6797ce597bba7d67a073d63129e1affd9b827482581ee85815b118fb4e950991b9d6793a5d70e8b901</hash>
          <hash alg="SHA3-384">7721f8119070762eed34e1d7fbe0eb2f590130a62f9ebcf15dbb9d3321ef25ba2b0709eb6f3e922b59f7203554db555c</hash>
          <hash alg="SHA3-256">3fc2ede35393130c22e8ea1985092c498f51f88c67925701906c910829aaac1e</hash>
          <hash alg="SHA3-512">7f54ea340410b97d5ccf4b417928359ea30be0d71d4aaa859389f308407e9d94fa3617d395f7e81e00881da67143aa8910fdae2dd01a8fc9c9a07b8bc03fb3b1</hash>
        </hashes>
      </tool>
    </tools>
    <component type="library" bom-ref="pkg:maven/io.dropwizard.metrics/metrics-log4j2@4.2.16?type=bundle">
      <group>io.dropwizard.metrics</group>
      <name>metrics-log4j2</name>
      <version>4.2.16</version>
      <description>An instrumented appender for Log4j 2.x.</description>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/io.dropwizard.metrics/metrics-log4j2@4.2.16?type=bundle</purl>
      <externalReferences><reference type="website"><url>https://metrics.dropwizard.io/metrics-log4j2</url></reference><reference type="distribution"><url>https://s01.oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/dropwizard/metrics/issues/</url></reference><reference type="vcs"><url>https://github.com/dropwizard/metrics/metrics-log4j2/</url></reference></externalReferences>
    </component>
  </metadata>
  <components>
    <component type="library" bom-ref="pkg:maven/io.dropwizard.metrics/metrics-core@4.2.16?type=jar">
      <group>io.dropwizard.metrics</group>
      <name>metrics-core</name>
      <version>4.2.16</version>
      <description>Metrics is a Java library which gives you unparalleled insight into what your code does in
        production. Metrics provides a powerful toolkit of ways to measure the behavior of critical
        components in your production environment.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">65bded59d524162c796731f73acc21f7</hash>
        <hash alg="SHA-1">0c88d20f76900e31ea4516cd61a403f9fd6e66ed</hash>
        <hash alg="SHA-256">d69b9822659e6e3cb0454f698173d71ac8dde9bdd1cfeaff8358365565542df7</hash>
        <hash alg="SHA-512">08e4c0a21d5ef3c6343806e9bcdbf38e238904f7a88bb16e3282514e3d5cf5717889995812ad867612eda981fbfea4b898ca1fe3ec1d67f620da19c3094cfcfa</hash>
        <hash alg="SHA-384">72d149f5b6d1023639ae36ae4531c84073f97ca566beebd82d203614b743274b35ce5570303f0f5ff9467f7eff38d9a6</hash>
        <hash alg="SHA3-384">8c13852b0d324ac3830cc92a0747d4a536dd9441a5667ccd9acf273db238d25dc2728895d7fdf516f0d5dced0b395411</hash>
        <hash alg="SHA3-256">f5e7741a5a8c9e4b2f7da3cf6c2dd1014bc43aefcee6fde73a59d80c2e574474</hash>
        <hash alg="SHA3-512">81866568934db2011636ac88c3ce91c147bfbbb35fe3933f41d65b0e53aff82df8d8b6c063f8bb65b3e32fc5c0f30537b8b3d4177b47efd77570c3d3d2003ff2</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/io.dropwizard.metrics/metrics-core@4.2.16?type=jar</purl>
      <externalReferences><reference type="website"><url>https://metrics.dropwizard.io/metrics-core</url></reference><reference type="distribution"><url>https://s01.oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/dropwizard/metrics/issues/</url></reference><reference type="vcs"><url>https://github.com/dropwizard/metrics/metrics-core/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar">
      <publisher>QOS.ch</publisher>
      <group>org.slf4j</group>
      <name>slf4j-api</name>
      <version>1.7.36</version>
      <description>The slf4j API</description>
      <hashes>
        <hash alg="MD5">872da51f5de7f3923da4de871d57fd85</hash>
        <hash alg="SHA-1">6c62681a2f655b49963a5983b8b0950a6120ae14</hash>
        <hash alg="SHA-256">d3ef575e3e4979678dc01bf1dcce51021493b4d11fb7f1be8ad982877c16a1c0</hash>
        <hash alg="SHA-512">f9b033fc019a44f98b16048da7e2b59edd4a6a527ba60e358f65ab88e0afae03a9340f1b3e8a543d49fa542290f499c5594259affa1ff3e6e7bf3b428d4c610b</hash>
        <hash alg="SHA-384">2b14ad035877087157e379d3277dcdcd79e58d6bdb147c47d29e377d75ce53ad42cafbf22f5fb7827c7e946ff4876b9a</hash>
        <hash alg="SHA3-384">3bc3110dafb8d5be16a39f3b2671a466463cd99eb39610c0e4719a7bf2d928f2ea213c734887c6926a07c4cca7769e4b</hash>
        <hash alg="SHA3-256">ba2608179fcf46e2291a90b9cbb4aa30d718e481f59c350cc21c73b88d826881</hash>
        <hash alg="SHA3-512">14c4edcd19702ef607d78826839d8a6d3a39157df54b89a801d3d3cbbe1307131a77671b041c761122730fb1387888c5ec2e46bdd80e1cb07f8f144676441824</hash>
      </hashes>
      <licenses>
        <license>
          <id>MIT</id>
          <url>https://opensource.org/licenses/MIT</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.slf4j.org</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/qos-ch/slf4j/slf4j-api</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.logging.log4j/log4j-api@2.19.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.logging.log4j</group>
      <name>log4j-api</name>
      <version>2.19.0</version>
      <description>The Apache Log4j API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">a7f8fc9751cdaa237a1e18059b4887da</hash>
        <hash alg="SHA-1">ea1b37f38c327596b216542bc636cfdc0b8036fa</hash>
        <hash alg="SHA-256">5ccb24ad9f92e768d0bc456d3061a737951262df803e004d2cad096b75a88d60</hash>
        <hash alg="SHA-512">f7cf3647ed90de7fdef377e4321aa9b9ea2512a46d99109b359f7fc5dcfe6d3ae9f879c212707ea4fd16d358d10d21c56d5178ec4803504745de6fe48c66c3f7</hash>
        <hash alg="SHA-384">d578e82caafbeab7b782599a9e115fbb9cfadcbd6ddb9a7ad2f87aec407dfcdf7fb58f41bf0cff2f7decc2afe89de46a</hash>
        <hash alg="SHA3-384">c335443decd058222047b35a998c0d6db6cabe83c9af8c7c7695af4c65490db453cb96b06825d09b6771a39bda8d7b4f</hash>
        <hash alg="SHA3-256">97b89d7dfdacd7d9cc3672dc6ed96d3463fc1e0827e1290a8a2ac7215bdd754e</hash>
        <hash alg="SHA3-512">b1863c45a9c07dd0c27f80f7441f9d7d63c9be0532feedc037ee827e4dfd926d801541327aa80b30db20fb796bec6be8e004c85503effb1285c9eff98b57dacc</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.logging.log4j/log4j-api@2.19.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://logging.apache.org/log4j/2.x/log4j-api/</url></reference><reference type="build-system"><url>https://github.com/apache/logging-log4j2/actions</url></reference><reference type="distribution"><url>https://logging.apache.org/log4j/2.x/download.html</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/LOG4J2</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?log4j-user@logging.apache.org</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=logging-log4j2.git/log4j-api</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.logging.log4j/log4j-core@2.19.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.logging.log4j</group>
      <name>log4j-core</name>
      <version>2.19.0</version>
      <description>The Apache Log4j Implementation</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">b7f521926226a16531f8e212b1da1ffd</hash>
        <hash alg="SHA-1">3b6eeb4de4c49c0fe38a4ee27188ff5fee44d0bb</hash>
        <hash alg="SHA-256">b4a1796fab7bfc36df015c1b4052459147997e8d215a7199d71d05f9e747e4f4</hash>
        <hash alg="SHA-512">1300ada6f86818ef4dcd17448a8965c1c6dd41ec414de2b2a5bafdf25d03c12100fa9e8f422d7b346f2984e5dfb3d599f8c1a971a6bcaca0cf938943d06364e7</hash>
        <hash alg="SHA-384">06c547cd1da0fb0f878e9d589eb5feae8b5a0691d16dec9cc98807fc3e4ee940c76af7c5e379cc44133c0f77fbc945b0</hash>
        <hash alg="SHA3-384">e1448233c506551993a5581daac78daf12422003f73a7fb048aeac9e0821d3dcfff3b5666767297d196fc50e690ce8c6</hash>
        <hash alg="SHA3-256">c989371ed0eea002d141ba04cd3589d744a1e735286854e25fc69daddf8864a7</hash>
        <hash alg="SHA3-512">b8034adfdcb303bd723a53dc66699dbab7d6424f29341f7c969e3610de3a9c5e72049827eea28f20d16710650811f1c8b2d01f7f4e2188622a4695a88b65e2ac</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.logging.log4j/log4j-core@2.19.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://logging.apache.org/log4j/2.x/log4j-core/</url></reference><reference type="build-system"><url>https://github.com/apache/logging-log4j2/actions</url></reference><reference type="distribution"><url>https://logging.apache.org/log4j/2.x/download.html</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/LOG4J2</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?log4j-user@logging.apache.org</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=logging-log4j2.git/log4j-core</url></reference></externalReferences>
    </component>
  </components>
  <dependencies>
    <dependency ref="pkg:maven/io.dropwizard.metrics/metrics-log4j2@4.2.16?type=bundle">
      <dependency ref="pkg:maven/io.dropwizard.metrics/metrics-core@4.2.16?type=jar"/>
      <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-api@2.19.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-core@2.19.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/io.dropwizard.metrics/metrics-core@4.2.16?type=jar">
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-api@2.19.0?type=jar"/>
    <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-core@2.19.0?type=jar">
      <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-api@2.19.0?type=jar"/>
    </dependency>
  </dependencies>
</bom>
