{
  "bomFormat" : "CycloneDX",
  "specVersion" : "1.6",
  "serialNumber" : "urn:uuid:dd278169-cc51-3575-992f-7ab2ec315291",
  "version" : 1,
  "metadata" : {
    "lifecycles" : [
      {
        "phase" : "build"
      }
    ],
    "tools" : {
      "components" : [
        {
          "type" : "library",
          "author" : "OWASP Foundation",
          "group" : "org.cyclonedx",
          "name" : "cyclonedx-maven-plugin",
          "version" : "2.9.0",
          "description" : "CycloneDX Maven plugin",
          "hashes" : [
            {
              "alg" : "MD5",
              "content" : "dfaeab7ec837ce07874e2ee66fdc57d3"
            },
            {
              "alg" : "SHA-1",
              "content" : "8bab47bafc8183d0a5f37790ff55ed05ead1ae2d"
            },
            {
              "alg" : "SHA-256",
              "content" : "67117e03eae4a03ca8bab3add044995f4899aa21798a2510b8265ef8101e90ac"
            },
            {
              "alg" : "SHA-512",
              "content" : "ae6b706516bb76da806b7854aef9e348fa593f5159ae9d693ad38942165c0ebc0846d977a477f6029612d43468fd2cd73a5aa253c228a94fb8d184e0acefc3d2"
            },
            {
              "alg" : "SHA-384",
              "content" : "ee872354d8b0dcd6f9835a913b3aaba70d9365a46043be78020183282a1e9fca812e969246cbe31d642541591b46648b"
            },
            {
              "alg" : "SHA3-384",
              "content" : "e5167f9e7ceba3b7b4d1900c404543907868745334bedc69cdf79c271727148413033a3b1426b733b7549e612e44adee"
            },
            {
              "alg" : "SHA3-256",
              "content" : "41fc0bc2275f354e2c7da01041ce73ce677364799cba53920a180aa5d4571c63"
            },
            {
              "alg" : "SHA3-512",
              "content" : "ed7f97900b09b818dbc0b8a23c00a2843e1bc34e2e8eb5b6df52533af0a15b721de6f7d5c2fd9352b8d4fde768e080053b40a16f0f9f04c336fe9b44abe83fc0"
            }
          ]
        }
      ]
    },
    "component" : {
      "type" : "library",
      "bom-ref" : "pkg:maven/io.dropwizard.metrics/metrics-log4j2@4.2.29?type=bundle",
      "group" : "io.dropwizard.metrics",
      "name" : "metrics-log4j2",
      "version" : "4.2.29",
      "description" : "An instrumented appender for Log4j 2.x.",
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.dropwizard.metrics/metrics-log4j2@4.2.29?type=bundle",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://metrics.dropwizard.io/metrics-log4j2"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://s01.oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/dropwizard/metrics/issues/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/dropwizard/metrics/metrics-log4j2/"
        }
      ]
    },
    "properties" : [
      {
        "name" : "maven.goal",
        "value" : "makeBom"
      },
      {
        "name" : "maven.scopes",
        "value" : "compile,provided,runtime,system"
      },
      {
        "name" : "cdx:reproducible",
        "value" : "enabled"
      }
    ]
  },
  "components" : [
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/io.dropwizard.metrics/metrics-core@4.2.29?type=jar",
      "group" : "io.dropwizard.metrics",
      "name" : "metrics-core",
      "version" : "4.2.29",
      "description" : "Metrics is a Java library which gives you unparalleled insight into what your code does in production. Metrics provides a powerful toolkit of ways to measure the behavior of critical components in your production environment.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "291e828f83cafbfe69be56df0df794bc"
        },
        {
          "alg" : "SHA-1",
          "content" : "e40f9425312c877a1a5ee8e8944bbc977112f949"
        },
        {
          "alg" : "SHA-256",
          "content" : "fe1aa4cce8c77930cf364073eaec3be04d3bf5ac0f87ca6498046852c848f4e6"
        },
        {
          "alg" : "SHA-512",
          "content" : "21f94bb56bbecbcd2aa77ebfdcd1c064136cb6bb92cc6a71937b4bc0f3f83681fd78db05cde9eb5969f4d2f370f4caeb6bc8daa617e87d962f55bfe71fb6fd85"
        },
        {
          "alg" : "SHA-384",
          "content" : "72b22a9595cb2352cfe066ad3b5cfded4a2e8db64fadefd6e03c131ced92ec8616328e4f9ede25829af5fbe08ef073c5"
        },
        {
          "alg" : "SHA3-384",
          "content" : "f3bc2b3d0a07cb148026dfec1194ed46f6a1fa4ac7db162ddc568c27a43ccea15c90908ed4a0050eefd4d069c743c1ea"
        },
        {
          "alg" : "SHA3-256",
          "content" : "26bd3785294063db22025f7efab4eb062a7413543bbc1ebe30d2dbb84361895a"
        },
        {
          "alg" : "SHA3-512",
          "content" : "5241638f8f33cf1777d52e65ee40a6f0497efeb2b75387c1748e94ebbd76fedc5c8b585a98a117bf12297418e1c063e9efc011f3e17c9ac975fc825ad296c010"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.dropwizard.metrics/metrics-core@4.2.29?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://metrics.dropwizard.io/metrics-core"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://s01.oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/dropwizard/metrics/issues/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/dropwizard/metrics/metrics-core/"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
      "publisher" : "QOS.ch",
      "group" : "org.slf4j",
      "name" : "slf4j-api",
      "version" : "1.7.36",
      "description" : "The slf4j API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "872da51f5de7f3923da4de871d57fd85"
        },
        {
          "alg" : "SHA-1",
          "content" : "6c62681a2f655b49963a5983b8b0950a6120ae14"
        },
        {
          "alg" : "SHA-256",
          "content" : "d3ef575e3e4979678dc01bf1dcce51021493b4d11fb7f1be8ad982877c16a1c0"
        },
        {
          "alg" : "SHA-512",
          "content" : "f9b033fc019a44f98b16048da7e2b59edd4a6a527ba60e358f65ab88e0afae03a9340f1b3e8a543d49fa542290f499c5594259affa1ff3e6e7bf3b428d4c610b"
        },
        {
          "alg" : "SHA-384",
          "content" : "2b14ad035877087157e379d3277dcdcd79e58d6bdb147c47d29e377d75ce53ad42cafbf22f5fb7827c7e946ff4876b9a"
        },
        {
          "alg" : "SHA3-384",
          "content" : "3bc3110dafb8d5be16a39f3b2671a466463cd99eb39610c0e4719a7bf2d928f2ea213c734887c6926a07c4cca7769e4b"
        },
        {
          "alg" : "SHA3-256",
          "content" : "ba2608179fcf46e2291a90b9cbb4aa30d718e481f59c350cc21c73b88d826881"
        },
        {
          "alg" : "SHA3-512",
          "content" : "14c4edcd19702ef607d78826839d8a6d3a39157df54b89a801d3d3cbbe1307131a77671b041c761122730fb1387888c5ec2e46bdd80e1cb07f8f144676441824"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/license/mit/"
          }
        }
      ],
      "purl" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.slf4j.org"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/qos-ch/slf4j/slf4j-api"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.logging.log4j/log4j-api@2.24.2?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.logging.log4j",
      "name" : "log4j-api",
      "version" : "2.24.2",
      "description" : "The logging API of the Log4j project. Library and application code can log through this API. It contains a simple built-in implementation (`SimpleLogger`) for trivial use cases. Production applications are recommended to use Log4j API in combination with a fully-fledged implementation, such as Log4j Core.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "ecd4838d07058de31f7fefa59af9c3e3"
        },
        {
          "alg" : "SHA-1",
          "content" : "daf49ee71f2664c3ff57412e4b43061e61a28596"
        },
        {
          "alg" : "SHA-256",
          "content" : "0ca3ecbd4c315bdd5f2ef6af127712df718c78334cce5bf6fb7b4aa17fdab126"
        },
        {
          "alg" : "SHA-512",
          "content" : "9665821c14c582dddd0ed181f8d49da3e25857eec11328e0d8978757f1cd2360ae60cf103a4b26b1ad5be47cf0857863a7a3c432a0f71f9eef14f64e8754f35c"
        },
        {
          "alg" : "SHA-384",
          "content" : "aa73593e06f481b07836d578cd2de1c7b665e8c2e851451613aed2c636b5665a46485f145959a87eabc4e587ecc7bdfe"
        },
        {
          "alg" : "SHA3-384",
          "content" : "76119179d0133a747beac4b873fba65a2b9f25ba79573329ee78ea992336c68b3a9f8f3d541acaaad11c9b1316dc9f99"
        },
        {
          "alg" : "SHA3-256",
          "content" : "61a3e1e34626e3a7cd058aa72fbc5acc4de2aa0921fe7484e7ca0037961df2b9"
        },
        {
          "alg" : "SHA3-512",
          "content" : "f4fdfb72a9bace22c3011c0865dc66997585b66609a1d71ec9e2baf4d6c9b945c7fa1a560d041dc7b7f7f56500dd622e975a53d05b6a83983c90ef1c49acbae9"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.logging.log4j/log4j-api@2.24.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://logging.apache.org/log4j/2.x/log4j/log4j-api/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/logging-log4j2/actions"
        },
        {
          "type" : "distribution",
          "url" : "https://logging.apache.org/download.html"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/apache/logging-log4j2/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?log4j-user@logging.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/logging-log4j2"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.logging.log4j/log4j-core@2.24.2?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.logging.log4j",
      "name" : "log4j-core",
      "version" : "2.24.2",
      "description" : "A versatile, industrial-grade, and reference implementation of the Log4j API. It bundles a rich set of components to assist various use cases: Appenders targeting files, network sockets, databases, SMTP servers; Layouts that can render CSV, HTML, JSON, Syslog, etc. formatted outputs; Filters that can be configured using log event rates, regular expressions, scripts, time, etc. It contains several extension points to introduce custom components, if needed.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "474401d444c3dffaca31a0262689f706"
        },
        {
          "alg" : "SHA-1",
          "content" : "9ba3a51ed9d80254b382dea521467de51797ac04"
        },
        {
          "alg" : "SHA-256",
          "content" : "7a7b90db866c86a1093b3fde758ca28398ebb2a533da0d79a30cc0a78506b9df"
        },
        {
          "alg" : "SHA-512",
          "content" : "9a8ab3921a8285d500c3e6ce78254803cd785a18fb196951b2161a2a773043317e7c7a30fcf171948e861c952ff1d14a3baf66e1eba7f3393eb956f1069ac677"
        },
        {
          "alg" : "SHA-384",
          "content" : "fff931f620e58d3707621b6df30eebf784e33daee44b80bb028f3ad4f17dd19d82c150165029ac856de229bf47c0e1a0"
        },
        {
          "alg" : "SHA3-384",
          "content" : "a3a0335dcd7d7d576c31e5005995329cf410e8beaa254fb5f8c7a00714eeac789e704567537866ea188893e29948e907"
        },
        {
          "alg" : "SHA3-256",
          "content" : "42c01097742b066d495c80ff7af1f9654078e3dc7b48a419bec286528dc37b8b"
        },
        {
          "alg" : "SHA3-512",
          "content" : "57c944182656c433445a18cb0efbb1dc1da67d608db5f3249917d0843ebb6ddd00d174f7da8bee384f9eea5506093dca10e5971c55f6d798c2e133734338ffca"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.logging.log4j/log4j-core@2.24.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://logging.apache.org/log4j/2.x/log4j/log4j-core/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/logging-log4j2/actions"
        },
        {
          "type" : "distribution",
          "url" : "https://logging.apache.org/download.html"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/apache/logging-log4j2/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?log4j-user@logging.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/logging-log4j2"
        }
      ]
    }
  ],
  "dependencies" : [
    {
      "ref" : "pkg:maven/io.dropwizard.metrics/metrics-log4j2@4.2.29?type=bundle",
      "dependsOn" : [
        "pkg:maven/io.dropwizard.metrics/metrics-core@4.2.29?type=jar",
        "pkg:maven/org.apache.logging.log4j/log4j-api@2.24.2?type=jar",
        "pkg:maven/org.apache.logging.log4j/log4j-core@2.24.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.dropwizard.metrics/metrics-core@4.2.29?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.logging.log4j/log4j-api@2.24.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.logging.log4j/log4j-core@2.24.2?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.logging.log4j/log4j-api@2.24.2?type=jar"
      ]
    }
  ]
}