{
  "bomFormat" : "CycloneDX",
  "specVersion" : "1.6",
  "serialNumber" : "urn:uuid:4976cd76-67a8-3212-a3c5-12f70779560b",
  "version" : 1,
  "metadata" : {
    "lifecycles" : [
      {
        "phase" : "build"
      }
    ],
    "tools" : {
      "components" : [
        {
          "type" : "library",
          "author" : "OWASP Foundation",
          "group" : "org.cyclonedx",
          "name" : "cyclonedx-maven-plugin",
          "version" : "2.9.1",
          "description" : "CycloneDX Maven plugin",
          "hashes" : [
            {
              "alg" : "MD5",
              "content" : "9c7a565cf28cce58557d0c621c5ea4b1"
            },
            {
              "alg" : "SHA-1",
              "content" : "be882d5a22050bfa9d19090b1420c188617d0e1c"
            },
            {
              "alg" : "SHA-256",
              "content" : "698e0f37184a5b28c245c4065fd036dfce253b52f82fbb7113d81d36326cc249"
            },
            {
              "alg" : "SHA-512",
              "content" : "c0f0b11026858166f872a2eb54719492e5cecaa0bc9cd6b30b3ecb4a174eed220f4a1b5829d18d6734128e778d3cb3db7ffed177c92866133129cb29081814a0"
            },
            {
              "alg" : "SHA-384",
              "content" : "d80964707dfe5caca8c70521d5066f57589304c0a657e6fbc7c0614ea0fc7b3b3dbe7778361eee0f54ba111e9cb0ffcb"
            },
            {
              "alg" : "SHA3-384",
              "content" : "80bc3a275d9514bc457461ff52a72add8c7ecbbc01d8912efce57139016c544ee776981851be0a58fa977ab4221f703f"
            },
            {
              "alg" : "SHA3-256",
              "content" : "142317d6f245390f4fd2d0c100b16281b8dfc5c0c2cff86943bdcc97039cb699"
            },
            {
              "alg" : "SHA3-512",
              "content" : "af0fb9137c90b65d1a07f72e4d51ae509956cdb8800f35c961b037cdda1fe4a14ce3b496cef71ba85f1621affcfe29cd42704ae4191ff0b090a9602087c8997b"
            }
          ]
        }
      ]
    },
    "component" : {
      "type" : "library",
      "bom-ref" : "pkg:maven/io.dropwizard.metrics/metrics-log4j2@4.2.33?type=bundle",
      "group" : "io.dropwizard.metrics",
      "name" : "metrics-log4j2",
      "version" : "4.2.33",
      "description" : "An instrumented appender for Log4j 2.x.",
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.dropwizard.metrics/metrics-log4j2@4.2.33?type=bundle",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://metrics.dropwizard.io/metrics-log4j2"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://s01.oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/dropwizard/metrics/issues/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/dropwizard/metrics/metrics-log4j2/"
        }
      ]
    },
    "properties" : [
      {
        "name" : "maven.goal",
        "value" : "makeBom"
      },
      {
        "name" : "maven.scopes",
        "value" : "compile,provided,runtime,system"
      },
      {
        "name" : "cdx:reproducible",
        "value" : "enabled"
      }
    ]
  },
  "components" : [
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/io.dropwizard.metrics/metrics-core@4.2.33?type=jar",
      "group" : "io.dropwizard.metrics",
      "name" : "metrics-core",
      "version" : "4.2.33",
      "description" : "Metrics is a Java library which gives you unparalleled insight into what your code does in production. Metrics provides a powerful toolkit of ways to measure the behavior of critical components in your production environment.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "07e03dc5ac57b62c6f0343c57764eecb"
        },
        {
          "alg" : "SHA-1",
          "content" : "703e6a1d55238024576a3e0d253511bd4d9c02bb"
        },
        {
          "alg" : "SHA-256",
          "content" : "7ee5624bc5e671f3cdf8d7e59350c1de2d5b0a0db7278a311b811af7e080269f"
        },
        {
          "alg" : "SHA-512",
          "content" : "77830111c706e267dccf0a76ad10cbe833e234452fbb223bc5c0c0a4433480897b3b537c1b3a314bb121bf0f8839b26c1ffa15e1fe1497717f03a1ca7c46ca5d"
        },
        {
          "alg" : "SHA-384",
          "content" : "5f3cea5897854225ba3c7a51bd8f6accf6960927d61b696d3466d28d2e64e2f30682ed8da0cb39f50d0a7994663f5a4f"
        },
        {
          "alg" : "SHA3-384",
          "content" : "e2d1f6c61e04c501775aa15ed643eaa615df68cc9e5ab08c9ab790ee3d782c2c72423e863b6d27582004e5210c69659b"
        },
        {
          "alg" : "SHA3-256",
          "content" : "069331e590719cd76bc1047f206adb2d151cfb18ca98f91c694b18f34f047bb5"
        },
        {
          "alg" : "SHA3-512",
          "content" : "ce4314d7a4a8e3ad5dd3541ca02ee164651162c875e19579271377452caa7ce66e7f284b964a759093bd5545a80f0b80a2ed31474b57a1117f1d86bdfa02307c"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.dropwizard.metrics/metrics-core@4.2.33?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://metrics.dropwizard.io/metrics-core"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://s01.oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/dropwizard/metrics/issues/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/dropwizard/metrics/metrics-core/"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
      "publisher" : "QOS.ch",
      "group" : "org.slf4j",
      "name" : "slf4j-api",
      "version" : "1.7.36",
      "description" : "The slf4j API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "872da51f5de7f3923da4de871d57fd85"
        },
        {
          "alg" : "SHA-1",
          "content" : "6c62681a2f655b49963a5983b8b0950a6120ae14"
        },
        {
          "alg" : "SHA-256",
          "content" : "d3ef575e3e4979678dc01bf1dcce51021493b4d11fb7f1be8ad982877c16a1c0"
        },
        {
          "alg" : "SHA-512",
          "content" : "f9b033fc019a44f98b16048da7e2b59edd4a6a527ba60e358f65ab88e0afae03a9340f1b3e8a543d49fa542290f499c5594259affa1ff3e6e7bf3b428d4c610b"
        },
        {
          "alg" : "SHA-384",
          "content" : "2b14ad035877087157e379d3277dcdcd79e58d6bdb147c47d29e377d75ce53ad42cafbf22f5fb7827c7e946ff4876b9a"
        },
        {
          "alg" : "SHA3-384",
          "content" : "3bc3110dafb8d5be16a39f3b2671a466463cd99eb39610c0e4719a7bf2d928f2ea213c734887c6926a07c4cca7769e4b"
        },
        {
          "alg" : "SHA3-256",
          "content" : "ba2608179fcf46e2291a90b9cbb4aa30d718e481f59c350cc21c73b88d826881"
        },
        {
          "alg" : "SHA3-512",
          "content" : "14c4edcd19702ef607d78826839d8a6d3a39157df54b89a801d3d3cbbe1307131a77671b041c761122730fb1387888c5ec2e46bdd80e1cb07f8f144676441824"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/license/mit/"
          }
        }
      ],
      "purl" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.slf4j.org"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/qos-ch/slf4j/slf4j-api"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.logging.log4j/log4j-api@2.25.0?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.logging.log4j",
      "name" : "log4j-api",
      "version" : "2.25.0",
      "description" : "The logging API of the Log4j project. Library and application code can log through this API. It contains a simple built-in implementation (`SimpleLogger`) for trivial use cases. Production applications are recommended to use Log4j API in combination with a fully-fledged implementation, such as Log4j Core.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "e41902fc49a685989853ccd12e47a88e"
        },
        {
          "alg" : "SHA-1",
          "content" : "da64d32ee42b8d7760fc6ca8ba72042096ffbc28"
        },
        {
          "alg" : "SHA-256",
          "content" : "0393e32167240eb56597a2016446928755729f1a181046cab5d42a81d0e3d909"
        },
        {
          "alg" : "SHA-512",
          "content" : "9e0c7bfd1d5e2de4d42635ab1ef1778117b65ae657ca8dbbbe0812f8be0c8829016624df1d3b03b977c381c2f48368a879a55b7ab8e6249b3215db94a4492f1d"
        },
        {
          "alg" : "SHA-384",
          "content" : "82bf5caca1d7f64f6b97241409f800eac13a5065bcf5bda35ccfa2782e3bd8ba7ba1e51a453d7be565cfb4116bbed0b3"
        },
        {
          "alg" : "SHA3-384",
          "content" : "388c98c6c44ab154c7deb3d986ccf706eebf332e23a6619df0aa783fbf939d3d9682c03ee8810a8a98353b200cfe32ff"
        },
        {
          "alg" : "SHA3-256",
          "content" : "db40803fec0c598caae3772ee520718e7d44dfedf34b204c72b883e368214862"
        },
        {
          "alg" : "SHA3-512",
          "content" : "3b2db30422c2ce0510962ca00c1361ebc7c6158caae68aa93c2fae2a89af554975dff64a7f2763cf80f0d32caf27a388e8e1b2bcc24b798cb63f79d3d36ce426"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.logging.log4j/log4j-api@2.25.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://logging.apache.org/log4j/2.x/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/logging-log4j2/actions"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/apache/logging-log4j2/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?log4j-user@logging.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/logging-log4j2"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.logging.log4j/log4j-core@2.25.0?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.logging.log4j",
      "name" : "log4j-core",
      "version" : "2.25.0",
      "description" : "A versatile, industrial-grade, and reference implementation of the Log4j API. It bundles a rich set of components to assist various use cases: Appenders targeting files, network sockets, databases, SMTP servers; Layouts that can render CSV, HTML, JSON, Syslog, etc. formatted outputs; Filters that can be configured using log event rates, regular expressions, scripts, time, etc. It contains several extension points to introduce custom components, if needed.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "91208e5de00a69d02a3bac39470707b1"
        },
        {
          "alg" : "SHA-1",
          "content" : "2fe857a3f68108eb7f1d9e88b91eca0a952a75d6"
        },
        {
          "alg" : "SHA-256",
          "content" : "05d3eecb9e509fd47117c0fb43c7b4b2989b28ecd5543ad5feff2e4903d3c921"
        },
        {
          "alg" : "SHA-512",
          "content" : "57eca2f75e18cd8b55cb17be81a9adc4eb6ebbcb116fa1f6587033262b4c6af4d8e6ec27d98b6b7cc7c9130c569404f04b51f0afa0ec25a5b71e2731c4941dd2"
        },
        {
          "alg" : "SHA-384",
          "content" : "b8cb1451fb5741779ea9b0dc0fdeb7f4f17b31edb777060de9bdd9bfcd406ce6317ae21ca781a9fef2f6cd77a3cd97be"
        },
        {
          "alg" : "SHA3-384",
          "content" : "c72b386bc09eb8d53d8c1fe1cceaa2a6536e7b95369aaf733589a677d28392426a652cc25418b9340c4426b9ddedf825"
        },
        {
          "alg" : "SHA3-256",
          "content" : "71c6863f8d4fae211108236d712b26c7e98f5ecd13a0d41ecdbae3adcc706dcf"
        },
        {
          "alg" : "SHA3-512",
          "content" : "2551a998349859291fe8f6057db38f3d7b61ad2c1250e438579667dca8d6a1754e2b734f3cf7056624e89d94d6ddbd37e01db29590e054c67ca2d6f785da5694"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.logging.log4j/log4j-core@2.25.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://logging.apache.org/log4j/2.x/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/logging-log4j2/actions"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/apache/logging-log4j2/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?log4j-user@logging.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/logging-log4j2"
        }
      ]
    }
  ],
  "dependencies" : [
    {
      "ref" : "pkg:maven/io.dropwizard.metrics/metrics-log4j2@4.2.33?type=bundle",
      "dependsOn" : [
        "pkg:maven/io.dropwizard.metrics/metrics-core@4.2.33?type=jar",
        "pkg:maven/org.apache.logging.log4j/log4j-api@2.25.0?type=jar",
        "pkg:maven/org.apache.logging.log4j/log4j-core@2.25.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.dropwizard.metrics/metrics-core@4.2.33?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.logging.log4j/log4j-api@2.25.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.logging.log4j/log4j-core@2.25.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.logging.log4j/log4j-api@2.25.0?type=jar"
      ]
    }
  ]
}