{
  "bomFormat" : "CycloneDX",
  "specVersion" : "1.4",
  "version" : 1,
  "metadata" : {
    "tools" : [
      {
        "vendor" : "OWASP Foundation",
        "name" : "CycloneDX Maven plugin",
        "version" : "2.7.10",
        "hashes" : [
          {
            "alg" : "MD5",
            "content" : "1cc7f6a0382f8bb2f758d6a6ea401d1b"
          },
          {
            "alg" : "SHA-1",
            "content" : "a4297947a1f2d7d453105db542651614bbd37f38"
          },
          {
            "alg" : "SHA-256",
            "content" : "bd0fdd8f2f2116eee5e715aeac1580f19eb7a10ec2b6f805b53567067658e872"
          },
          {
            "alg" : "SHA-512",
            "content" : "9cde8352a427e10b96cae01348fc7cfe5d4aa9cd0a5e5dd93b414ce3bb7d112993c3b3004e53af52567fbfa16de0704ec59a5556a635ad70571fd124ae389f39"
          },
          {
            "alg" : "SHA-384",
            "content" : "93d7bf5b5c735347edfbfbd66810273ca840f9a322b816d22d44c3d8e8255c09e86570bb23712aeb0cade0f478be5aeb"
          },
          {
            "alg" : "SHA3-384",
            "content" : "4467f16e9ca32190a6e49c65339eb28ee5e8c78f4e918fcf95128a4b7648898de56ccb43eacfad0c9391ef8cdb7d629a"
          },
          {
            "alg" : "SHA3-256",
            "content" : "ed2996c99b483e969221d5e9a40f562ea2ab85442d361d72a90e85266a3ed781"
          },
          {
            "alg" : "SHA3-512",
            "content" : "c8e6ea9ddc38edc77e284b3bf541663e84752bdc59ed1935799847a48a14ea2fa531b61008fefcba37d732a56702a11ac112437b9b80d18f4ecc8ef0ecfb32cf"
          }
        ]
      }
    ],
    "component" : {
      "group" : "io.dropwizard.metrics",
      "name" : "metrics-logback",
      "version" : "4.2.23",
      "description" : "An instrumented appender for Logback.",
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.dropwizard.metrics/metrics-logback@4.2.23?type=bundle",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://metrics.dropwizard.io/metrics-logback"
        },
        {
          "type" : "distribution",
          "url" : "https://s01.oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/dropwizard/metrics/issues/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/dropwizard/metrics/metrics-logback/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.dropwizard.metrics/metrics-logback@4.2.23?type=bundle"
    },
    "properties" : [
      {
        "name" : "maven.goal",
        "value" : "makeBom"
      },
      {
        "name" : "maven.scopes",
        "value" : "compile,provided,runtime,system"
      },
      {
        "name" : "cdx:reproducible",
        "value" : "enabled"
      }
    ]
  },
  "components" : [
    {
      "group" : "io.dropwizard.metrics",
      "name" : "metrics-core",
      "version" : "4.2.23",
      "description" : "Metrics is a Java library which gives you unparalleled insight into what your code does in production. Metrics provides a powerful toolkit of ways to measure the behavior of critical components in your production environment.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "d39055007f183ffbfc629b285ad882fd"
        },
        {
          "alg" : "SHA-1",
          "content" : "c2845d6c982cca81d403b4d2433da8ac250abf83"
        },
        {
          "alg" : "SHA-256",
          "content" : "3d2344250909a2196a36d5172a2c67bd6392bc3b2ee49c04b14c7cc8f8fb1068"
        },
        {
          "alg" : "SHA-512",
          "content" : "a54399a540d7e06cf672bb131790f909b2744a93d7373821535d79df486607cc651c036cb906857445b68f5a8ee1e78e55e16057b8bcba2a7fa42f3b762ee327"
        },
        {
          "alg" : "SHA-384",
          "content" : "0ecc5f1dbc4f0a36955ab0050dfa63648c9eabbc1bbabf8c94b362ee460fb7bcbfaa6358e8d661eb29f096e21a2e00f5"
        },
        {
          "alg" : "SHA3-384",
          "content" : "132ae9cf1a455237c892e3ba9cb43b2bc5230355eb270b62d718316a3140a75c9e6c83ef41d4ba494065ec341e29ade4"
        },
        {
          "alg" : "SHA3-256",
          "content" : "174650f6e72750a6be022df1e6d299cf0a87343deae475f1f77027f158def25d"
        },
        {
          "alg" : "SHA3-512",
          "content" : "57657a02477d6a7e17f16437bd010bb284d89cb2751077ee07e64a27d7be82eeb7c7804a2abf67371ad7876da39cb14eb0809eb96dbc6e3bc0bbc64c681b8109"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.dropwizard.metrics/metrics-core@4.2.23?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://metrics.dropwizard.io/metrics-core"
        },
        {
          "type" : "distribution",
          "url" : "https://s01.oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/dropwizard/metrics/issues/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/dropwizard/metrics/metrics-core/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.dropwizard.metrics/metrics-core@4.2.23?type=jar"
    },
    {
      "publisher" : "QOS.ch",
      "group" : "org.slf4j",
      "name" : "slf4j-api",
      "version" : "1.7.36",
      "description" : "The slf4j API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "872da51f5de7f3923da4de871d57fd85"
        },
        {
          "alg" : "SHA-1",
          "content" : "6c62681a2f655b49963a5983b8b0950a6120ae14"
        },
        {
          "alg" : "SHA-256",
          "content" : "d3ef575e3e4979678dc01bf1dcce51021493b4d11fb7f1be8ad982877c16a1c0"
        },
        {
          "alg" : "SHA-512",
          "content" : "f9b033fc019a44f98b16048da7e2b59edd4a6a527ba60e358f65ab88e0afae03a9340f1b3e8a543d49fa542290f499c5594259affa1ff3e6e7bf3b428d4c610b"
        },
        {
          "alg" : "SHA-384",
          "content" : "2b14ad035877087157e379d3277dcdcd79e58d6bdb147c47d29e377d75ce53ad42cafbf22f5fb7827c7e946ff4876b9a"
        },
        {
          "alg" : "SHA3-384",
          "content" : "3bc3110dafb8d5be16a39f3b2671a466463cd99eb39610c0e4719a7bf2d928f2ea213c734887c6926a07c4cca7769e4b"
        },
        {
          "alg" : "SHA3-256",
          "content" : "ba2608179fcf46e2291a90b9cbb4aa30d718e481f59c350cc21c73b88d826881"
        },
        {
          "alg" : "SHA3-512",
          "content" : "14c4edcd19702ef607d78826839d8a6d3a39157df54b89a801d3d3cbbe1307131a77671b041c761122730fb1387888c5ec2e46bdd80e1cb07f8f144676441824"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.slf4j.org"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/qos-ch/slf4j/slf4j-api"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
    },
    {
      "publisher" : "QOS.ch",
      "group" : "ch.qos.logback",
      "name" : "logback-core",
      "version" : "1.2.13",
      "description" : "logback-core module",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "25736944b46d10756764364afcb455fc"
        },
        {
          "alg" : "SHA-1",
          "content" : "8ae4a32ed4937b5ebff6891a93c5e957f4e81655"
        },
        {
          "alg" : "SHA-256",
          "content" : "07b1586faf220c05821d0f3ed8e2e417e214c83f40641f76e8a90b134c31ff6b"
        },
        {
          "alg" : "SHA-512",
          "content" : "2e2300d56e69ab736f8e3c1dfcf96417af4ee3916c976c13826bcdb7b1246242ace58de92431207a01620731a7d7e740867e3889d0c6738b015610de201559c4"
        },
        {
          "alg" : "SHA-384",
          "content" : "f77c2bb9a0ca63883acfc92e07605e0f6c01b03d31cab9c6e9420bbc09afef8ff79c4410a63d1e4960f8a66ed2f2def5"
        },
        {
          "alg" : "SHA3-384",
          "content" : "b1a394dc63f7ea18ee4fe0cad5dea4512ec8c7aeca535cbcaf66bb4268f654c285fed03a36ec594f9e3a12f76334c9ab"
        },
        {
          "alg" : "SHA3-256",
          "content" : "8d4c885f8a83301773d4cdbe344a338d8147706fe67cfb0e67391638ebf3c28b"
        },
        {
          "alg" : "SHA3-512",
          "content" : "7fd8e471bf5fba787d068c03decb7dd3918905f132da581fdc9db35ac630b0e6ee7ab42aa50850aae1b0007f13110f39eee7f183f333f22cf15d761b926202ef"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-1.0"
          }
        },
        {
          "license" : {
            "name" : "GNU Lesser General Public License",
            "url" : "http://www.gnu.org/licenses/old-licenses/lgpl-2.1.html"
          }
        }
      ],
      "purl" : "pkg:maven/ch.qos.logback/logback-core@1.2.13?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://logback.qos.ch/logback-core"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/qos-ch/logback/logback-core"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/ch.qos.logback/logback-core@1.2.13?type=jar"
    },
    {
      "publisher" : "QOS.ch",
      "group" : "ch.qos.logback",
      "name" : "logback-classic",
      "version" : "1.2.13",
      "description" : "logback-classic module",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "fc49f9a98304889b228adbbd7288ae43"
        },
        {
          "alg" : "SHA-1",
          "content" : "e9f3458e7354fe4917081237c01fa4999f4e1b86"
        },
        {
          "alg" : "SHA-256",
          "content" : "937afb220b91d8a394d78befdbf587c71aeed289d582e2a91e72a7d92172371d"
        },
        {
          "alg" : "SHA-512",
          "content" : "f82fef7616c900b3101c452817df961a2a0f17f553ee2796463271274a3d678abe01392ff4a8687b4625527ea7d2ed9686f8512ec0065f73b5821a50774fe755"
        },
        {
          "alg" : "SHA-384",
          "content" : "2ad26dc9243566544cfa75921e16865e19c79e73043b82d56dcfbadf3cbd75f50fcef6c47855f2578ca844dcee44565b"
        },
        {
          "alg" : "SHA3-384",
          "content" : "e120ebe93eae51e97c9f912a6f78c7d0fb7a0d92e10ad372ce41f5fc71859865d99837be839a52f5e043f9fe6c5f5260"
        },
        {
          "alg" : "SHA3-256",
          "content" : "5db19942aa9b8ad4f7b7b4940ebc67ccbe3042c3a840757ef3ea0ff8363e6acc"
        },
        {
          "alg" : "SHA3-512",
          "content" : "40a9b257f208da3bd4343944b31a8a7917653281cfbab2ec985b62fe2cd4172c2a0a5dcd2e9a0e348905d820f6080d8f62d0c99dc367f207cd4f2340d8951978"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-1.0"
          }
        },
        {
          "license" : {
            "name" : "GNU Lesser General Public License",
            "url" : "http://www.gnu.org/licenses/old-licenses/lgpl-2.1.html"
          }
        }
      ],
      "purl" : "pkg:maven/ch.qos.logback/logback-classic@1.2.13?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://logback.qos.ch/logback-classic"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/qos-ch/logback/logback-classic"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/ch.qos.logback/logback-classic@1.2.13?type=jar"
    }
  ],
  "dependencies" : [
    {
      "ref" : "pkg:maven/io.dropwizard.metrics/metrics-logback@4.2.23?type=bundle",
      "dependsOn" : [
        "pkg:maven/io.dropwizard.metrics/metrics-core@4.2.23?type=jar",
        "pkg:maven/ch.qos.logback/logback-core@1.2.13?type=jar",
        "pkg:maven/ch.qos.logback/logback-classic@1.2.13?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.dropwizard.metrics/metrics-core@4.2.23?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/ch.qos.logback/logback-core@1.2.13?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/ch.qos.logback/logback-classic@1.2.13?type=jar",
      "dependsOn" : [
        "pkg:maven/ch.qos.logback/logback-core@1.2.13?type=jar"
      ]
    }
  ]
}