<?xml version="1.0" encoding="UTF-8"?>
<bom version="1" xmlns="http://cyclonedx.org/schema/bom/1.4">
  <metadata>
    <tools>
      <tool>
        <vendor>OWASP Foundation</vendor>
        <name>CycloneDX Maven plugin</name>
        <version>2.7.10</version>
        <hashes>
          <hash alg="MD5">1cc7f6a0382f8bb2f758d6a6ea401d1b</hash>
          <hash alg="SHA-1">a4297947a1f2d7d453105db542651614bbd37f38</hash>
          <hash alg="SHA-256">bd0fdd8f2f2116eee5e715aeac1580f19eb7a10ec2b6f805b53567067658e872</hash>
          <hash alg="SHA-512">9cde8352a427e10b96cae01348fc7cfe5d4aa9cd0a5e5dd93b414ce3bb7d112993c3b3004e53af52567fbfa16de0704ec59a5556a635ad70571fd124ae389f39</hash>
          <hash alg="SHA-384">93d7bf5b5c735347edfbfbd66810273ca840f9a322b816d22d44c3d8e8255c09e86570bb23712aeb0cade0f478be5aeb</hash>
          <hash alg="SHA3-384">4467f16e9ca32190a6e49c65339eb28ee5e8c78f4e918fcf95128a4b7648898de56ccb43eacfad0c9391ef8cdb7d629a</hash>
          <hash alg="SHA3-256">ed2996c99b483e969221d5e9a40f562ea2ab85442d361d72a90e85266a3ed781</hash>
          <hash alg="SHA3-512">c8e6ea9ddc38edc77e284b3bf541663e84752bdc59ed1935799847a48a14ea2fa531b61008fefcba37d732a56702a11ac112437b9b80d18f4ecc8ef0ecfb32cf</hash>
        </hashes>
      </tool>
    </tools>
    <component type="library" bom-ref="pkg:maven/io.dropwizard.metrics/metrics-log4j2@4.2.23?type=bundle">
      <group>io.dropwizard.metrics</group>
      <name>metrics-log4j2</name>
      <version>4.2.23</version>
      <description>An instrumented appender for Log4j 2.x.</description>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/io.dropwizard.metrics/metrics-log4j2@4.2.23?type=bundle</purl>
      <externalReferences><reference type="website"><url>https://metrics.dropwizard.io/metrics-log4j2</url></reference><reference type="distribution"><url>https://s01.oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/dropwizard/metrics/issues/</url></reference><reference type="vcs"><url>https://github.com/dropwizard/metrics/metrics-log4j2/</url></reference></externalReferences>
    </component>
    <properties>
      <property name="maven.goal">makeBom</property>
      <property name="maven.scopes">compile,provided,runtime,system</property>
      <property name="cdx:reproducible">enabled</property>
    </properties>
  </metadata>
  <components>
    <component type="library" bom-ref="pkg:maven/io.dropwizard.metrics/metrics-core@4.2.23?type=jar">
      <group>io.dropwizard.metrics</group>
      <name>metrics-core</name>
      <version>4.2.23</version>
      <description>Metrics is a Java library which gives you unparalleled insight into what your code does in
        production. Metrics provides a powerful toolkit of ways to measure the behavior of critical
        components in your production environment.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">d39055007f183ffbfc629b285ad882fd</hash>
        <hash alg="SHA-1">c2845d6c982cca81d403b4d2433da8ac250abf83</hash>
        <hash alg="SHA-256">3d2344250909a2196a36d5172a2c67bd6392bc3b2ee49c04b14c7cc8f8fb1068</hash>
        <hash alg="SHA-512">a54399a540d7e06cf672bb131790f909b2744a93d7373821535d79df486607cc651c036cb906857445b68f5a8ee1e78e55e16057b8bcba2a7fa42f3b762ee327</hash>
        <hash alg="SHA-384">0ecc5f1dbc4f0a36955ab0050dfa63648c9eabbc1bbabf8c94b362ee460fb7bcbfaa6358e8d661eb29f096e21a2e00f5</hash>
        <hash alg="SHA3-384">132ae9cf1a455237c892e3ba9cb43b2bc5230355eb270b62d718316a3140a75c9e6c83ef41d4ba494065ec341e29ade4</hash>
        <hash alg="SHA3-256">174650f6e72750a6be022df1e6d299cf0a87343deae475f1f77027f158def25d</hash>
        <hash alg="SHA3-512">57657a02477d6a7e17f16437bd010bb284d89cb2751077ee07e64a27d7be82eeb7c7804a2abf67371ad7876da39cb14eb0809eb96dbc6e3bc0bbc64c681b8109</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/io.dropwizard.metrics/metrics-core@4.2.23?type=jar</purl>
      <externalReferences><reference type="website"><url>https://metrics.dropwizard.io/metrics-core</url></reference><reference type="distribution"><url>https://s01.oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/dropwizard/metrics/issues/</url></reference><reference type="vcs"><url>https://github.com/dropwizard/metrics/metrics-core/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar">
      <publisher>QOS.ch</publisher>
      <group>org.slf4j</group>
      <name>slf4j-api</name>
      <version>1.7.36</version>
      <description>The slf4j API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">872da51f5de7f3923da4de871d57fd85</hash>
        <hash alg="SHA-1">6c62681a2f655b49963a5983b8b0950a6120ae14</hash>
        <hash alg="SHA-256">d3ef575e3e4979678dc01bf1dcce51021493b4d11fb7f1be8ad982877c16a1c0</hash>
        <hash alg="SHA-512">f9b033fc019a44f98b16048da7e2b59edd4a6a527ba60e358f65ab88e0afae03a9340f1b3e8a543d49fa542290f499c5594259affa1ff3e6e7bf3b428d4c610b</hash>
        <hash alg="SHA-384">2b14ad035877087157e379d3277dcdcd79e58d6bdb147c47d29e377d75ce53ad42cafbf22f5fb7827c7e946ff4876b9a</hash>
        <hash alg="SHA3-384">3bc3110dafb8d5be16a39f3b2671a466463cd99eb39610c0e4719a7bf2d928f2ea213c734887c6926a07c4cca7769e4b</hash>
        <hash alg="SHA3-256">ba2608179fcf46e2291a90b9cbb4aa30d718e481f59c350cc21c73b88d826881</hash>
        <hash alg="SHA3-512">14c4edcd19702ef607d78826839d8a6d3a39157df54b89a801d3d3cbbe1307131a77671b041c761122730fb1387888c5ec2e46bdd80e1cb07f8f144676441824</hash>
      </hashes>
      <licenses>
        <license>
          <id>MIT</id>
          <url>https://opensource.org/licenses/MIT</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.slf4j.org</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/qos-ch/slf4j/slf4j-api</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.logging.log4j/log4j-api@2.22.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.logging.log4j</group>
      <name>log4j-api</name>
      <version>2.22.0</version>
      <description>The Apache Log4j API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">5d753db833495ddaedd74f3d45091bab</hash>
        <hash alg="SHA-1">2c7d82708efd430e722562be1993defd9fb2426b</hash>
        <hash alg="SHA-256">1342c86c2a0848fc2f3d16b8544849f29fa31bf7af79f6066c2677ba29e47cf3</hash>
        <hash alg="SHA-512">9c71daa0e64da97eae60372eb70fe90378199528105cad1b35f517b8ddcf2cd935eb0567b1d208b78805daa01cc084cce2adba25c24e2513795d2f5da0e706bc</hash>
        <hash alg="SHA-384">310399442f174f7873290d1945bc8458c0d1e6695de655e49e410c9c4e73e7b07d5d31e9a6b6fdf84ff43dc0e5793666</hash>
        <hash alg="SHA3-384">a40cee814b109e7a94e3843662caa054d922e52e56c388585fc8c02f562aa07e2d20135c202e139c23980cd51a37699a</hash>
        <hash alg="SHA3-256">34af2387279760e5bce30cc58aaf64b3ec9ef600cec1bcda8c205734f20d7e48</hash>
        <hash alg="SHA3-512">0ed4bede6f64c9b708d8d77aebe542dd25a6a48c230b278489d9380f462fe08e6bc9133d5f1386b910012f65608e2297840b9ea710fc2611ccac96d517f69967</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.logging.log4j/log4j-api@2.22.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://logging.apache.org/log4j/2.x/log4j/log4j-api/</url></reference><reference type="build-system"><url>https://github.com/apache/logging-log4j2/actions</url></reference><reference type="distribution"><url>https://logging.apache.org/logging-parent/latest/#distribution</url></reference><reference type="issue-tracker"><url>https://github.com/apache/logging-log4j2/issues</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?log4j-user@logging.apache.org</url></reference><reference type="vcs"><url>https://github.com/apache/logging-log4j2</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.logging.log4j/log4j-core@2.22.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.logging.log4j</group>
      <name>log4j-core</name>
      <version>2.22.0</version>
      <description>The Apache Log4j Implementation</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">ef7091a2e9542aa950cb5b01ed4eaff0</hash>
        <hash alg="SHA-1">bf2fd48bc237e99fd4f1c2e82db3b10ffb8c1f47</hash>
        <hash alg="SHA-256">aacb1b935c0070f644060c1fbc9b555f344cbfe8d0ef1234b464eb58bd7b8ad2</hash>
        <hash alg="SHA-512">004d4812c73f5e8572868fdbb217dc0c0991562638822fd08f74f9d45512e6bda612589ed89bcb9208c486ed2c8ba954ebdc59f720dc51928415f1c65edf4d69</hash>
        <hash alg="SHA-384">d4fb491f8c8c1d49348ec7c5d6426f588eb5c11f6c744e29790f1f15aba7063d39493bfe912e7217388f39295f180ef4</hash>
        <hash alg="SHA3-384">29618aacfdebf35458009dbbcdead6f0467202e2148653f91babc43a74b1b36154dca4911576068149aa631b531d229c</hash>
        <hash alg="SHA3-256">df6b4ff481a46c6e12e0f7315e7c14f54969c2aa4f0563bb46166181975cee1f</hash>
        <hash alg="SHA3-512">23b1820b6ad09ae1cb9f9e1e4abd0a0bab2e4a30a33fcaa35828c720878fc529103f5aacfa584bc1fc61e036e36756afe19e7eb9aacc1843ed8e4c4e33c621a9</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.logging.log4j/log4j-core@2.22.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://logging.apache.org/log4j/2.x/log4j/log4j-core/</url></reference><reference type="build-system"><url>https://github.com/apache/logging-log4j2/actions</url></reference><reference type="distribution"><url>https://logging.apache.org/logging-parent/latest/#distribution</url></reference><reference type="issue-tracker"><url>https://github.com/apache/logging-log4j2/issues</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?log4j-user@logging.apache.org</url></reference><reference type="vcs"><url>https://github.com/apache/logging-log4j2</url></reference></externalReferences>
    </component>
  </components>
  <dependencies>
    <dependency ref="pkg:maven/io.dropwizard.metrics/metrics-log4j2@4.2.23?type=bundle">
      <dependency ref="pkg:maven/io.dropwizard.metrics/metrics-core@4.2.23?type=jar"/>
      <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-api@2.22.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-core@2.22.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/io.dropwizard.metrics/metrics-core@4.2.23?type=jar">
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-api@2.22.0?type=jar"/>
    <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-core@2.22.0?type=jar">
      <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-api@2.22.0?type=jar"/>
    </dependency>
  </dependencies>
</bom>
