{
  "bomFormat" : "CycloneDX",
  "specVersion" : "1.4",
  "serialNumber" : "urn:uuid:836ca822-eab0-307e-b8d3-d995d8c700ba",
  "version" : 1,
  "metadata" : {
    "tools" : [
      {
        "vendor" : "OWASP Foundation",
        "name" : "CycloneDX Maven plugin",
        "version" : "2.7.11",
        "hashes" : [
          {
            "alg" : "MD5",
            "content" : "a70e8b649ab4a2bb7922d360173c8237"
          },
          {
            "alg" : "SHA-1",
            "content" : "4c3c0878c15561639076e5be7a48ffcd6111c5ee"
          },
          {
            "alg" : "SHA-256",
            "content" : "70997d52dbffd4e797c467b2062c6ba9b8b5a7380ff2884779f2743b6172ebb5"
          },
          {
            "alg" : "SHA-512",
            "content" : "bc1ce91190c642f68fd3571939d7668def3b879ec8e5a87a213a9710a106e0290f60f9e0414593d19cca958c4fcb5d4450bd2793bcd609948419c8a2a6a7f5c8"
          },
          {
            "alg" : "SHA-384",
            "content" : "3c8421bdafd1754fb424f16dccc83bfe0827648c1cadfffc98bdf1c7da65475dfe48d2f4b16d233bb8819e155ba6a4f3"
          },
          {
            "alg" : "SHA3-384",
            "content" : "ad88cf6a0e0a5d51df49a4dab5530a28de9df7eec8460c045dff3e1f9316b82a244a125d52b937fe9d4ee72e44f5d01a"
          },
          {
            "alg" : "SHA3-256",
            "content" : "b4d9c3ef07c34517fd9f33178ba95ffc9618eb84a3671e71b0c82991ec3717e5"
          },
          {
            "alg" : "SHA3-512",
            "content" : "935b43aba8999dc7d95d93288a251c97b6b32852841b7bef31516c27c8d65c8de7f8411f1829f765ee760f25930c766db6a49df68e5994e18721c0a71f606f1e"
          }
        ]
      }
    ],
    "component" : {
      "group" : "io.dropwizard.metrics",
      "name" : "metrics-log4j2",
      "version" : "4.2.24",
      "description" : "An instrumented appender for Log4j 2.x.",
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.dropwizard.metrics/metrics-log4j2@4.2.24?type=bundle",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://metrics.dropwizard.io/metrics-log4j2"
        },
        {
          "type" : "distribution",
          "url" : "https://s01.oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/dropwizard/metrics/issues/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/dropwizard/metrics/metrics-log4j2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.dropwizard.metrics/metrics-log4j2@4.2.24?type=bundle"
    },
    "properties" : [
      {
        "name" : "maven.goal",
        "value" : "makeBom"
      },
      {
        "name" : "maven.scopes",
        "value" : "compile,provided,runtime,system"
      },
      {
        "name" : "cdx:reproducible",
        "value" : "enabled"
      }
    ]
  },
  "components" : [
    {
      "group" : "io.dropwizard.metrics",
      "name" : "metrics-core",
      "version" : "4.2.24",
      "description" : "Metrics is a Java library which gives you unparalleled insight into what your code does in production. Metrics provides a powerful toolkit of ways to measure the behavior of critical components in your production environment.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "b8ffb13e5d163384e9d3ccee4c2540d9"
        },
        {
          "alg" : "SHA-1",
          "content" : "19bcbbc84eb36e94cb55958e3b09f7c5628b54ac"
        },
        {
          "alg" : "SHA-256",
          "content" : "59153d73b4fa0dcbcc6aa927a0ac943dba3e8706729007109ba26d8cc65c5677"
        },
        {
          "alg" : "SHA-512",
          "content" : "5882fa80aaa6bdb5d48436855299b32b06ec71499fbfb568abedf323fd0ec31e37c242a1a8911bd2afcf39ba83f35f2cd03411c7b21dde56077b97a6de6d2067"
        },
        {
          "alg" : "SHA-384",
          "content" : "40bad604c333c77a3c89ac3f166fd110633c92629220c89eb7fc963e48994a3ef589376526634cff10ac0c44becf428e"
        },
        {
          "alg" : "SHA3-384",
          "content" : "c3995ad77ddf4e171dfaf30f58fe2c33cad9f5c4350a01cb3b0331e770a0f9eefe8139828665bd5cff4c367bcadcb25d"
        },
        {
          "alg" : "SHA3-256",
          "content" : "bc00a14417358acba2b2637e2d07fb9930e29332fb1bee428c099d696c583e7b"
        },
        {
          "alg" : "SHA3-512",
          "content" : "69ae03de02c4d8f2d87ac5ff06318e14cae6dcd3cc36fb65336ab5cfddfac9a78a2972a5c097c24873612c8913bd60eadb277f450df48c63e37456cb1885600b"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.dropwizard.metrics/metrics-core@4.2.24?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://metrics.dropwizard.io/metrics-core"
        },
        {
          "type" : "distribution",
          "url" : "https://s01.oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/dropwizard/metrics/issues/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/dropwizard/metrics/metrics-core/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.dropwizard.metrics/metrics-core@4.2.24?type=jar"
    },
    {
      "publisher" : "QOS.ch",
      "group" : "org.slf4j",
      "name" : "slf4j-api",
      "version" : "1.7.36",
      "description" : "The slf4j API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "872da51f5de7f3923da4de871d57fd85"
        },
        {
          "alg" : "SHA-1",
          "content" : "6c62681a2f655b49963a5983b8b0950a6120ae14"
        },
        {
          "alg" : "SHA-256",
          "content" : "d3ef575e3e4979678dc01bf1dcce51021493b4d11fb7f1be8ad982877c16a1c0"
        },
        {
          "alg" : "SHA-512",
          "content" : "f9b033fc019a44f98b16048da7e2b59edd4a6a527ba60e358f65ab88e0afae03a9340f1b3e8a543d49fa542290f499c5594259affa1ff3e6e7bf3b428d4c610b"
        },
        {
          "alg" : "SHA-384",
          "content" : "2b14ad035877087157e379d3277dcdcd79e58d6bdb147c47d29e377d75ce53ad42cafbf22f5fb7827c7e946ff4876b9a"
        },
        {
          "alg" : "SHA3-384",
          "content" : "3bc3110dafb8d5be16a39f3b2671a466463cd99eb39610c0e4719a7bf2d928f2ea213c734887c6926a07c4cca7769e4b"
        },
        {
          "alg" : "SHA3-256",
          "content" : "ba2608179fcf46e2291a90b9cbb4aa30d718e481f59c350cc21c73b88d826881"
        },
        {
          "alg" : "SHA3-512",
          "content" : "14c4edcd19702ef607d78826839d8a6d3a39157df54b89a801d3d3cbbe1307131a77671b041c761122730fb1387888c5ec2e46bdd80e1cb07f8f144676441824"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.slf4j.org"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/qos-ch/slf4j/slf4j-api"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.logging.log4j",
      "name" : "log4j-api",
      "version" : "2.22.1",
      "description" : "The Apache Log4j API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "27db0eb89ae965179480df00d8d1cf03"
        },
        {
          "alg" : "SHA-1",
          "content" : "bea6fede6328fabafd7e68363161a7ea6605abd1"
        },
        {
          "alg" : "SHA-256",
          "content" : "5d7beae7ff15d8516d6517121d7f12a79a6ac180df64b5fcec55d5be21056e53"
        },
        {
          "alg" : "SHA-512",
          "content" : "02040ec0576541d3126244ee68c4d8a0a3e09abb8ad8619fcf57b515d4bf079973775eeb8ef449917bdfeedbc80479b011d3c308173bded963346109e9d415c2"
        },
        {
          "alg" : "SHA-384",
          "content" : "0421259676a1c4f25381cdd8653aef914d9f760a110aac072b4f34653b6b70c666bfa8e4bbef4956f7321c3968398672"
        },
        {
          "alg" : "SHA3-384",
          "content" : "e470d9a57ca20736740458a06445a2d2303eddf0e90f7115c24e37fdafb67ec5567f616be4be61c345f7564a8c5e0444"
        },
        {
          "alg" : "SHA3-256",
          "content" : "fa8a7451168b582a50566ddae67fad7af17500df7bfd24cc2f622e84ef9b3aa1"
        },
        {
          "alg" : "SHA3-512",
          "content" : "fb7fd839559875f76614c9e261f0ce6c8d745b6c66661cce93d3b033767ea1f773b1bf07a9800f0b2f4225ac60699c650e25bbc257ac428429efc247f7a650c8"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.logging.log4j/log4j-api@2.22.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://logging.apache.org/log4j/2.x/log4j/log4j-api/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/logging-log4j2/actions"
        },
        {
          "type" : "distribution",
          "url" : "https://logging.apache.org/logging-parent/latest/#distribution"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/apache/logging-log4j2/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?log4j-user@logging.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/logging-log4j2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.logging.log4j/log4j-api@2.22.1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.logging.log4j",
      "name" : "log4j-core",
      "version" : "2.22.1",
      "description" : "The Apache Log4j Implementation",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "b5987ee449d4be4244e2e214683c45af"
        },
        {
          "alg" : "SHA-1",
          "content" : "7183a25510a02ad00cc6a95d3b3d2a7d3c5a8dc4"
        },
        {
          "alg" : "SHA-256",
          "content" : "46dccecac556623d8e2ce8648496824a82951d139062a4e61148aff1a25ed18d"
        },
        {
          "alg" : "SHA-512",
          "content" : "2c77d67241100afe282d07048767556afa698bee46700dfc2a1397360fcde7cb5dad13bc24255c8de91abbfd6daf0a8600f3cc28b93c214b91b7e6eab40d1dd5"
        },
        {
          "alg" : "SHA-384",
          "content" : "ce343c58c555e963a3fa20a13c7f80684916fd31b97bf0500a86d7e090cc600fd39caf9686c6e0d870255e750bac74a4"
        },
        {
          "alg" : "SHA3-384",
          "content" : "76c943d6d20d1f1d219cab206aef6cff98204efa4cdd142e8b20bc6a8fb5b9a5792199781b22faf43127233c91af66fd"
        },
        {
          "alg" : "SHA3-256",
          "content" : "b83808c491910455644ec968e4baca6e68f8d259cf270c348ea5705e47a979aa"
        },
        {
          "alg" : "SHA3-512",
          "content" : "f2d357e86f9c57e51f808e821563fff4aec9eedfcaf2c400a69c69376a70bea37eab29484424307e5f3a34e40a60f855949309c095536753c7193a9147b6ea8a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.logging.log4j/log4j-core@2.22.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://logging.apache.org/log4j/2.x/log4j/log4j-core/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/logging-log4j2/actions"
        },
        {
          "type" : "distribution",
          "url" : "https://logging.apache.org/logging-parent/latest/#distribution"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/apache/logging-log4j2/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?log4j-user@logging.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/logging-log4j2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.logging.log4j/log4j-core@2.22.1?type=jar"
    }
  ],
  "dependencies" : [
    {
      "ref" : "pkg:maven/io.dropwizard.metrics/metrics-log4j2@4.2.24?type=bundle",
      "dependsOn" : [
        "pkg:maven/io.dropwizard.metrics/metrics-core@4.2.24?type=jar",
        "pkg:maven/org.apache.logging.log4j/log4j-api@2.22.1?type=jar",
        "pkg:maven/org.apache.logging.log4j/log4j-core@2.22.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.dropwizard.metrics/metrics-core@4.2.24?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.logging.log4j/log4j-api@2.22.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.logging.log4j/log4j-core@2.22.1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.logging.log4j/log4j-api@2.22.1?type=jar"
      ]
    }
  ]
}