{
  "bomFormat" : "CycloneDX",
  "specVersion" : "1.5",
  "serialNumber" : "urn:uuid:78996fcf-bb49-3ef0-928e-a25b5bd7fee5",
  "version" : 1,
  "metadata" : {
    "lifecycles" : [
      {
        "phase" : "build"
      }
    ],
    "tools" : {
      "components" : [
        {
          "author" : "OWASP Foundation",
          "group" : "org.cyclonedx",
          "name" : "cyclonedx-maven-plugin",
          "version" : "2.8.2",
          "description" : "CycloneDX Maven plugin",
          "hashes" : [
            {
              "alg" : "MD5",
              "content" : "3bb2c0a57386c1551f09c3328474c1b6"
            },
            {
              "alg" : "SHA-1",
              "content" : "3b287e981e81263165b606ca210ed42a9f6bced1"
            },
            {
              "alg" : "SHA-256",
              "content" : "37fab69d06c0d402de9fe600381f63bb5b98f864ea8589c52d71bbd6dd60d293"
            },
            {
              "alg" : "SHA-512",
              "content" : "f65b4722540a930422d4a28cb54c982dbe01fdb41717c3b95e9836137856cabed2b836b1b9e0394798d99e9973ce6931c61675cbed859238cab1a99d3063786f"
            },
            {
              "alg" : "SHA-384",
              "content" : "55fc5a528d5fd426d306f26e6a73fd8cf9e779a101f31591ca084c8f615d8073d80cc24ee04ea1df209051842e481080"
            },
            {
              "alg" : "SHA3-384",
              "content" : "888b88d83887fe1e3c62f6ab3f11501ae4e97dfc0d954b6eec3b0133dfccb92e984a6ace18fb6965cf215e0cd01de9aa"
            },
            {
              "alg" : "SHA3-256",
              "content" : "26a3386e02289680b9e6d24900824d52a35238ce76cb0e67ba3090fc638f269b"
            },
            {
              "alg" : "SHA3-512",
              "content" : "a229e418d8af12002e51e39bf1201b7ea86a9a883386524386383454e970cc3cfb44cb1020022ff91e96349d8db8575768052e1bbaf415478e8e99d9e4e22d0f"
            }
          ],
          "type" : "library"
        }
      ]
    },
    "component" : {
      "group" : "io.dropwizard.metrics",
      "name" : "metrics-log4j2",
      "version" : "4.2.28",
      "description" : "An instrumented appender for Log4j 2.x.",
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.dropwizard.metrics/metrics-log4j2@4.2.28?type=bundle",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://metrics.dropwizard.io/metrics-log4j2"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://s01.oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/dropwizard/metrics/issues/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/dropwizard/metrics/metrics-log4j2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.dropwizard.metrics/metrics-log4j2@4.2.28?type=bundle"
    },
    "properties" : [
      {
        "name" : "maven.goal",
        "value" : "makeBom"
      },
      {
        "name" : "maven.scopes",
        "value" : "compile,provided,runtime,system"
      },
      {
        "name" : "cdx:reproducible",
        "value" : "enabled"
      }
    ]
  },
  "components" : [
    {
      "group" : "io.dropwizard.metrics",
      "name" : "metrics-core",
      "version" : "4.2.28",
      "description" : "Metrics is a Java library which gives you unparalleled insight into what your code does in production. Metrics provides a powerful toolkit of ways to measure the behavior of critical components in your production environment.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "00fe6283abcb8b82be608b9b034810ae"
        },
        {
          "alg" : "SHA-1",
          "content" : "4b66ce1c97c2ad0160e19235e2c899ba20b0f54a"
        },
        {
          "alg" : "SHA-256",
          "content" : "544e7c5828e9fe440e2e5b8b87974297352d8c0aac226a2614811600fd680463"
        },
        {
          "alg" : "SHA-512",
          "content" : "8eb934f981c564d66a46699fde6c39d7b36dd2d44c44349fc971f9dfc7840e5b81447417968d3896afc012641f77a4c6616009b2e575d55158c2a3d6b3b03e35"
        },
        {
          "alg" : "SHA-384",
          "content" : "fb0e6296287603af224d265e4f03d191609870a8c66cb5a387625c18210fc95f741111691c39420dd13672420abbb4d3"
        },
        {
          "alg" : "SHA3-384",
          "content" : "a4d47831fd925509ba489f3c97fa68543e80ba92658b90fb48c2d1abe3002a01d460f869f42fe3fbcc8f2ff7677cde6e"
        },
        {
          "alg" : "SHA3-256",
          "content" : "df2db45f97ec918a0832a100a940724b00b49be1094575b699f89f32cb19bd1b"
        },
        {
          "alg" : "SHA3-512",
          "content" : "a4f10a8bef336f5582c141c7c4cf8cb9ced77f99fefe02f7645e351e3a59d509d923979b5ccc33d56389d3109dd1f3d079f970cb6997890dc56c47480c00c53f"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.dropwizard.metrics/metrics-core@4.2.28?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://metrics.dropwizard.io/metrics-core"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://s01.oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/dropwizard/metrics/issues/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/dropwizard/metrics/metrics-core/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.dropwizard.metrics/metrics-core@4.2.28?type=jar"
    },
    {
      "publisher" : "QOS.ch",
      "group" : "org.slf4j",
      "name" : "slf4j-api",
      "version" : "1.7.36",
      "description" : "The slf4j API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "872da51f5de7f3923da4de871d57fd85"
        },
        {
          "alg" : "SHA-1",
          "content" : "6c62681a2f655b49963a5983b8b0950a6120ae14"
        },
        {
          "alg" : "SHA-256",
          "content" : "d3ef575e3e4979678dc01bf1dcce51021493b4d11fb7f1be8ad982877c16a1c0"
        },
        {
          "alg" : "SHA-512",
          "content" : "f9b033fc019a44f98b16048da7e2b59edd4a6a527ba60e358f65ab88e0afae03a9340f1b3e8a543d49fa542290f499c5594259affa1ff3e6e7bf3b428d4c610b"
        },
        {
          "alg" : "SHA-384",
          "content" : "2b14ad035877087157e379d3277dcdcd79e58d6bdb147c47d29e377d75ce53ad42cafbf22f5fb7827c7e946ff4876b9a"
        },
        {
          "alg" : "SHA3-384",
          "content" : "3bc3110dafb8d5be16a39f3b2671a466463cd99eb39610c0e4719a7bf2d928f2ea213c734887c6926a07c4cca7769e4b"
        },
        {
          "alg" : "SHA3-256",
          "content" : "ba2608179fcf46e2291a90b9cbb4aa30d718e481f59c350cc21c73b88d826881"
        },
        {
          "alg" : "SHA3-512",
          "content" : "14c4edcd19702ef607d78826839d8a6d3a39157df54b89a801d3d3cbbe1307131a77671b041c761122730fb1387888c5ec2e46bdd80e1cb07f8f144676441824"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.slf4j.org"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/qos-ch/slf4j/slf4j-api"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.logging.log4j",
      "name" : "log4j-api",
      "version" : "2.24.1",
      "description" : "The logging API of the Log4j project. Library and application code can log through this API. It contains a simple built-in implementation (`SimpleLogger`) for trivial use cases. Production applications are recommended to use Log4j API in combination with a fully-fledged implementation, such as Log4j Core.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "4dac8bc9a21f3503cd1a856503b6fea0"
        },
        {
          "alg" : "SHA-1",
          "content" : "7ebeb12c20606373005af4232cd0ecca72613dda"
        },
        {
          "alg" : "SHA-256",
          "content" : "6e77bb229fc8dcaf09038beeb5e9030b22e9e01b51b458b0183ce669ebcc92ef"
        },
        {
          "alg" : "SHA-512",
          "content" : "d579bd99e6187f4c67510908351955b263e7b894e7d13bc09a73bb4c3df62127e1bee6061be4cff94a657b99c2d379652525baa142ebe928e90c9a6e226d2638"
        },
        {
          "alg" : "SHA-384",
          "content" : "ad3f9c522d6eb0779f1181428fa01dacae2647077d0f89da4a8ea997aa6cf06679aa4ef9d1a7b317aed594998613513d"
        },
        {
          "alg" : "SHA3-384",
          "content" : "b775cc549822709d56a2b12fc45aa4f52c9de390ad380aeea3febaf1bc44a19c9d5f482ef5e5c47622826155c43b945d"
        },
        {
          "alg" : "SHA3-256",
          "content" : "e1204d31f5f3f49eca4a7827279ac94e8127936eec5b8563e93a7f06d227bd48"
        },
        {
          "alg" : "SHA3-512",
          "content" : "378f91e0a5a12c38db0fe16cec9179d9dee8acab628677892f514c61d031435e3d6365766eae346cb5272e0502685be2dd3fec530df08d7f0a2873bdcf820f5d"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.logging.log4j/log4j-api@2.24.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://logging.apache.org/log4j/2.x/log4j/log4j-api/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/logging-log4j2/actions"
        },
        {
          "type" : "distribution",
          "url" : "https://logging.apache.org/download.html"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/apache/logging-log4j2/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?log4j-user@logging.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/logging-log4j2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.logging.log4j/log4j-api@2.24.1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.logging.log4j",
      "name" : "log4j-core",
      "version" : "2.24.1",
      "description" : "A versatile, industrial-grade, and reference implementation of the Log4j API. It bundles a rich set of components to assist various use cases: Appenders targeting files, network sockets, databases, SMTP servers; Layouts that can render CSV, HTML, JSON, Syslog, etc. formatted outputs; Filters that can be configured using log event rates, regular expressions, scripts, time, etc. It contains several extension points to introduce custom components, if needed.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "fd982d71f36250bc31528fc7e3d0807d"
        },
        {
          "alg" : "SHA-1",
          "content" : "c85285146f28d8c8962384f786e2dff04172fb43"
        },
        {
          "alg" : "SHA-256",
          "content" : "00bcf388472ca80a687014181763b66d777177f22cbbf179fd60e1b1ac9bc9b0"
        },
        {
          "alg" : "SHA-512",
          "content" : "aba76422f8cf2659298ce67d4b192260d7260bb1e45d66529feb066b5c260d1e8e30011a61e98ee45e84e42e0afd60a61352a16807dcf8cf2a22de38bb228c9c"
        },
        {
          "alg" : "SHA-384",
          "content" : "d8823699e765fbf0857ee39a2d9b46400751f868fd6256f74a8666462d12db810ee7a27799a37255e8c6afccc61c4653"
        },
        {
          "alg" : "SHA3-384",
          "content" : "c8834a3d64f25a7780bc9b022b83670facdc6eb0abaf5fb8a6c9b7b1519481e0dcc937e0881f2f4b92942ed6eef0fb8f"
        },
        {
          "alg" : "SHA3-256",
          "content" : "aa027afe2fb10d886fe14141893d92d15965eb02dd36164e3c5c14571d047282"
        },
        {
          "alg" : "SHA3-512",
          "content" : "c9a48395612271462b645600745a37e2653046076e5afb4ad8e23d1952bc1a96b3b83b9adc23849482805ee111d29c808e2aabf60ead65e8aa879d8d8a1e1db3"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.logging.log4j/log4j-core@2.24.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://logging.apache.org/log4j/2.x/log4j/log4j-core/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/logging-log4j2/actions"
        },
        {
          "type" : "distribution",
          "url" : "https://logging.apache.org/download.html"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/apache/logging-log4j2/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?log4j-user@logging.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/logging-log4j2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.logging.log4j/log4j-core@2.24.1?type=jar"
    }
  ],
  "dependencies" : [
    {
      "ref" : "pkg:maven/io.dropwizard.metrics/metrics-log4j2@4.2.28?type=bundle",
      "dependsOn" : [
        "pkg:maven/io.dropwizard.metrics/metrics-core@4.2.28?type=jar",
        "pkg:maven/org.apache.logging.log4j/log4j-api@2.24.1?type=jar",
        "pkg:maven/org.apache.logging.log4j/log4j-core@2.24.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.dropwizard.metrics/metrics-core@4.2.28?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.logging.log4j/log4j-api@2.24.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.logging.log4j/log4j-core@2.24.1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.logging.log4j/log4j-api@2.24.1?type=jar"
      ]
    }
  ]
}