<?xml version="1.0" encoding="UTF-8"?>
<bom serialNumber="urn:uuid:cbe6a5fd-5af9-3897-9a1a-183f0b4b124b" version="1" xmlns="http://cyclonedx.org/schema/bom/1.4">
  <metadata>
    <tools>
      <tool>
        <vendor>OWASP Foundation</vendor>
        <name>CycloneDX Maven plugin</name>
        <version>2.7.11</version>
        <hashes>
          <hash alg="MD5">a70e8b649ab4a2bb7922d360173c8237</hash>
          <hash alg="SHA-1">4c3c0878c15561639076e5be7a48ffcd6111c5ee</hash>
          <hash alg="SHA-256">70997d52dbffd4e797c467b2062c6ba9b8b5a7380ff2884779f2743b6172ebb5</hash>
          <hash alg="SHA-512">bc1ce91190c642f68fd3571939d7668def3b879ec8e5a87a213a9710a106e0290f60f9e0414593d19cca958c4fcb5d4450bd2793bcd609948419c8a2a6a7f5c8</hash>
          <hash alg="SHA-384">3c8421bdafd1754fb424f16dccc83bfe0827648c1cadfffc98bdf1c7da65475dfe48d2f4b16d233bb8819e155ba6a4f3</hash>
          <hash alg="SHA3-384">ad88cf6a0e0a5d51df49a4dab5530a28de9df7eec8460c045dff3e1f9316b82a244a125d52b937fe9d4ee72e44f5d01a</hash>
          <hash alg="SHA3-256">b4d9c3ef07c34517fd9f33178ba95ffc9618eb84a3671e71b0c82991ec3717e5</hash>
          <hash alg="SHA3-512">935b43aba8999dc7d95d93288a251c97b6b32852841b7bef31516c27c8d65c8de7f8411f1829f765ee760f25930c766db6a49df68e5994e18721c0a71f606f1e</hash>
        </hashes>
      </tool>
    </tools>
    <component type="library" bom-ref="pkg:maven/io.dropwizard.metrics/metrics-logback@4.2.25?type=bundle">
      <group>io.dropwizard.metrics</group>
      <name>metrics-logback</name>
      <version>4.2.25</version>
      <description>An instrumented appender for Logback.</description>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/io.dropwizard.metrics/metrics-logback@4.2.25?type=bundle</purl>
      <externalReferences><reference type="website"><url>https://metrics.dropwizard.io/metrics-logback</url></reference><reference type="distribution"><url>https://s01.oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/dropwizard/metrics/issues/</url></reference><reference type="vcs"><url>https://github.com/dropwizard/metrics/metrics-logback/</url></reference></externalReferences>
    </component>
    <properties>
      <property name="maven.goal">makeBom</property>
      <property name="maven.scopes">compile,provided,runtime,system</property>
      <property name="cdx:reproducible">enabled</property>
    </properties>
  </metadata>
  <components>
    <component type="library" bom-ref="pkg:maven/io.dropwizard.metrics/metrics-core@4.2.25?type=jar">
      <group>io.dropwizard.metrics</group>
      <name>metrics-core</name>
      <version>4.2.25</version>
      <description>Metrics is a Java library which gives you unparalleled insight into what your code does in
        production. Metrics provides a powerful toolkit of ways to measure the behavior of critical
        components in your production environment.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">f9476a4f1a8287f7a4a2af759c33e44a</hash>
        <hash alg="SHA-1">76162cb1f7a6f902da4f80e5bcf472078e8cd7e1</hash>
        <hash alg="SHA-256">8bc7de609a2816b78a7a5009bddf11be560ba527d44db74a0a31a6f44fdb5b5f</hash>
        <hash alg="SHA-512">7373e8d22599d3cadff126308ac4279141fbcd04c27935b016b3bfb42caf5840db60fc05eba136dd1d19f72b5223ed30f0823e562b0267a3e2d8673a65ca3d9c</hash>
        <hash alg="SHA-384">b2ce6508895976d6f3a5846dbac246db0c1c6946dd4e7a17d3ebd55f6d094286f735f293997e6b140df8d6f629cabe47</hash>
        <hash alg="SHA3-384">f54c90300d7623b9c33d854b183c9999ea965d4ef7d12b5462c1fc8dfcb6012e16e6f9e722b4b51fba1bf8f24612b269</hash>
        <hash alg="SHA3-256">1a59b1d0141a08291b1d274dde6b94362ac3b382263fda9167f1bb8234fd6102</hash>
        <hash alg="SHA3-512">8bb024e801a95cf8393dbff92636526abb955ae17b4a541d65f85268a19e4828aedc6ca3999f083885646f50625c0ecca3e766933da3ed2a6e425f41ce4ac882</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/io.dropwizard.metrics/metrics-core@4.2.25?type=jar</purl>
      <externalReferences><reference type="website"><url>https://metrics.dropwizard.io/metrics-core</url></reference><reference type="distribution"><url>https://s01.oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/dropwizard/metrics/issues/</url></reference><reference type="vcs"><url>https://github.com/dropwizard/metrics/metrics-core/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar">
      <publisher>QOS.ch</publisher>
      <group>org.slf4j</group>
      <name>slf4j-api</name>
      <version>1.7.36</version>
      <description>The slf4j API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">872da51f5de7f3923da4de871d57fd85</hash>
        <hash alg="SHA-1">6c62681a2f655b49963a5983b8b0950a6120ae14</hash>
        <hash alg="SHA-256">d3ef575e3e4979678dc01bf1dcce51021493b4d11fb7f1be8ad982877c16a1c0</hash>
        <hash alg="SHA-512">f9b033fc019a44f98b16048da7e2b59edd4a6a527ba60e358f65ab88e0afae03a9340f1b3e8a543d49fa542290f499c5594259affa1ff3e6e7bf3b428d4c610b</hash>
        <hash alg="SHA-384">2b14ad035877087157e379d3277dcdcd79e58d6bdb147c47d29e377d75ce53ad42cafbf22f5fb7827c7e946ff4876b9a</hash>
        <hash alg="SHA3-384">3bc3110dafb8d5be16a39f3b2671a466463cd99eb39610c0e4719a7bf2d928f2ea213c734887c6926a07c4cca7769e4b</hash>
        <hash alg="SHA3-256">ba2608179fcf46e2291a90b9cbb4aa30d718e481f59c350cc21c73b88d826881</hash>
        <hash alg="SHA3-512">14c4edcd19702ef607d78826839d8a6d3a39157df54b89a801d3d3cbbe1307131a77671b041c761122730fb1387888c5ec2e46bdd80e1cb07f8f144676441824</hash>
      </hashes>
      <licenses>
        <license>
          <id>MIT</id>
          <url>https://opensource.org/licenses/MIT</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.slf4j.org</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/qos-ch/slf4j/slf4j-api</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/ch.qos.logback/logback-core@1.2.13?type=jar">
      <publisher>QOS.ch</publisher>
      <group>ch.qos.logback</group>
      <name>logback-core</name>
      <version>1.2.13</version>
      <description>logback-core module</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">25736944b46d10756764364afcb455fc</hash>
        <hash alg="SHA-1">8ae4a32ed4937b5ebff6891a93c5e957f4e81655</hash>
        <hash alg="SHA-256">07b1586faf220c05821d0f3ed8e2e417e214c83f40641f76e8a90b134c31ff6b</hash>
        <hash alg="SHA-512">2e2300d56e69ab736f8e3c1dfcf96417af4ee3916c976c13826bcdb7b1246242ace58de92431207a01620731a7d7e740867e3889d0c6738b015610de201559c4</hash>
        <hash alg="SHA-384">f77c2bb9a0ca63883acfc92e07605e0f6c01b03d31cab9c6e9420bbc09afef8ff79c4410a63d1e4960f8a66ed2f2def5</hash>
        <hash alg="SHA3-384">b1a394dc63f7ea18ee4fe0cad5dea4512ec8c7aeca535cbcaf66bb4268f654c285fed03a36ec594f9e3a12f76334c9ab</hash>
        <hash alg="SHA3-256">8d4c885f8a83301773d4cdbe344a338d8147706fe67cfb0e67391638ebf3c28b</hash>
        <hash alg="SHA3-512">7fd8e471bf5fba787d068c03decb7dd3918905f132da581fdc9db35ac630b0e6ee7ab42aa50850aae1b0007f13110f39eee7f183f333f22cf15d761b926202ef</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-1.0</id>
        </license>
        <license>
          <name>GNU Lesser General Public License</name>
          <url>http://www.gnu.org/licenses/old-licenses/lgpl-2.1.html</url>
        </license>
      </licenses>
      <purl>pkg:maven/ch.qos.logback/logback-core@1.2.13?type=jar</purl>
      <externalReferences><reference type="website"><url>http://logback.qos.ch/logback-core</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/qos-ch/logback/logback-core</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/ch.qos.logback/logback-classic@1.2.13?type=jar">
      <publisher>QOS.ch</publisher>
      <group>ch.qos.logback</group>
      <name>logback-classic</name>
      <version>1.2.13</version>
      <description>logback-classic module</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">fc49f9a98304889b228adbbd7288ae43</hash>
        <hash alg="SHA-1">e9f3458e7354fe4917081237c01fa4999f4e1b86</hash>
        <hash alg="SHA-256">937afb220b91d8a394d78befdbf587c71aeed289d582e2a91e72a7d92172371d</hash>
        <hash alg="SHA-512">f82fef7616c900b3101c452817df961a2a0f17f553ee2796463271274a3d678abe01392ff4a8687b4625527ea7d2ed9686f8512ec0065f73b5821a50774fe755</hash>
        <hash alg="SHA-384">2ad26dc9243566544cfa75921e16865e19c79e73043b82d56dcfbadf3cbd75f50fcef6c47855f2578ca844dcee44565b</hash>
        <hash alg="SHA3-384">e120ebe93eae51e97c9f912a6f78c7d0fb7a0d92e10ad372ce41f5fc71859865d99837be839a52f5e043f9fe6c5f5260</hash>
        <hash alg="SHA3-256">5db19942aa9b8ad4f7b7b4940ebc67ccbe3042c3a840757ef3ea0ff8363e6acc</hash>
        <hash alg="SHA3-512">40a9b257f208da3bd4343944b31a8a7917653281cfbab2ec985b62fe2cd4172c2a0a5dcd2e9a0e348905d820f6080d8f62d0c99dc367f207cd4f2340d8951978</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-1.0</id>
        </license>
        <license>
          <name>GNU Lesser General Public License</name>
          <url>http://www.gnu.org/licenses/old-licenses/lgpl-2.1.html</url>
        </license>
      </licenses>
      <purl>pkg:maven/ch.qos.logback/logback-classic@1.2.13?type=jar</purl>
      <externalReferences><reference type="website"><url>http://logback.qos.ch/logback-classic</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/qos-ch/logback/logback-classic</url></reference></externalReferences>
    </component>
  </components>
  <dependencies>
    <dependency ref="pkg:maven/io.dropwizard.metrics/metrics-logback@4.2.25?type=bundle">
      <dependency ref="pkg:maven/io.dropwizard.metrics/metrics-core@4.2.25?type=jar"/>
      <dependency ref="pkg:maven/ch.qos.logback/logback-core@1.2.13?type=jar"/>
      <dependency ref="pkg:maven/ch.qos.logback/logback-classic@1.2.13?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/io.dropwizard.metrics/metrics-core@4.2.25?type=jar">
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    <dependency ref="pkg:maven/ch.qos.logback/logback-core@1.2.13?type=jar"/>
    <dependency ref="pkg:maven/ch.qos.logback/logback-classic@1.2.13?type=jar">
      <dependency ref="pkg:maven/ch.qos.logback/logback-core@1.2.13?type=jar"/>
    </dependency>
  </dependencies>
</bom>
