{
  "bomFormat" : "CycloneDX",
  "specVersion" : "1.4",
  "serialNumber" : "urn:uuid:44d0ddcf-2466-46d4-bf65-c0430894f31d",
  "version" : 1,
  "metadata" : {
    "timestamp" : "2023-01-27T22:17:46Z",
    "tools" : [
      {
        "vendor" : "OWASP Foundation",
        "name" : "CycloneDX Maven plugin",
        "version" : "2.7.4",
        "hashes" : [
          {
            "alg" : "MD5",
            "content" : "1c0045824ba8b7c3459faf37fadb5ca4"
          },
          {
            "alg" : "SHA-1",
            "content" : "c0259ad78634a65918e328d793d2ea0b8a9c2220"
          },
          {
            "alg" : "SHA-256",
            "content" : "47bd0e0176ba679b66739820bc52880a9e667c57c8b7301de698c0ce7e271bb1"
          },
          {
            "alg" : "SHA-512",
            "content" : "e8b72acd176d5d3e13646c2422d6fac1e47d369162cbde8796afa567d36bd182a5f8f4cbdc46185f3607a71e92c410ab0eacd87ab8c17b38e352eb3077a46ecb"
          },
          {
            "alg" : "SHA-384",
            "content" : "8759a5908a1dbd6797ce597bba7d67a073d63129e1affd9b827482581ee85815b118fb4e950991b9d6793a5d70e8b901"
          },
          {
            "alg" : "SHA3-384",
            "content" : "7721f8119070762eed34e1d7fbe0eb2f590130a62f9ebcf15dbb9d3321ef25ba2b0709eb6f3e922b59f7203554db555c"
          },
          {
            "alg" : "SHA3-256",
            "content" : "3fc2ede35393130c22e8ea1985092c498f51f88c67925701906c910829aaac1e"
          },
          {
            "alg" : "SHA3-512",
            "content" : "7f54ea340410b97d5ccf4b417928359ea30be0d71d4aaa859389f308407e9d94fa3617d395f7e81e00881da67143aa8910fdae2dd01a8fc9c9a07b8bc03fb3b1"
          }
        ]
      }
    ],
    "component" : {
      "group" : "io.dropwizard.metrics",
      "name" : "metrics-servlet",
      "version" : "4.1.36",
      "description" : "An instrumented filter for servlet environments.",
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.dropwizard.metrics/metrics-servlet@4.1.36?type=bundle",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://metrics.dropwizard.io/metrics-servlet"
        },
        {
          "type" : "distribution",
          "url" : "https://s01.oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/dropwizard/metrics/issues/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/dropwizard/metrics/metrics-servlet/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.dropwizard.metrics/metrics-servlet@4.1.36?type=bundle"
    }
  },
  "components" : [
    {
      "group" : "io.dropwizard.metrics",
      "name" : "metrics-core",
      "version" : "4.1.36",
      "description" : "Metrics is a Java library which gives you unparalleled insight into what your code does in production. Metrics provides a powerful toolkit of ways to measure the behavior of critical components in your production environment.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "d30e81a3d36b3e2651ee25653fe750ce"
        },
        {
          "alg" : "SHA-1",
          "content" : "fad243ff41feb95fa002632075876da6f277380f"
        },
        {
          "alg" : "SHA-256",
          "content" : "d3401c0c9e4d4cedf941d294f7f174ff46e0e4b8f8f77ebcb47d43d1f69dc077"
        },
        {
          "alg" : "SHA-512",
          "content" : "5e5d8f8b177c182141dfe7c893f8ea1900671a8ebcb9542a94fce640c5960c1e64a5556c18901b9c8ec72bdd885c96376600e6bb760d9ed12d35e67608592381"
        },
        {
          "alg" : "SHA-384",
          "content" : "843c563308f11e2493abc3118231e076c6eb937d3504c351a841837cc7ab7bd7f67b98d4bbc841c7c250e718e8c44142"
        },
        {
          "alg" : "SHA3-384",
          "content" : "1c7862dd146a06f559b3c0fa231a977d6030e90de00d5a80bf073b0e7322d60368cb82c01f02b65073db4cdf7ce63f28"
        },
        {
          "alg" : "SHA3-256",
          "content" : "c3e3905440898ece55a43941f632cd0d5fa6012a650291841bd7a354f3c890b0"
        },
        {
          "alg" : "SHA3-512",
          "content" : "5366dae267d10cda19880a2990ee59526cf30c850ed18c7643356c5bc79ef79f9ae651123a55d7cef33ffd1a3d9b87d5ed721c8149a78e16f790ded2ff85afd5"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.dropwizard.metrics/metrics-core@4.1.36?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://metrics.dropwizard.io/metrics-core"
        },
        {
          "type" : "distribution",
          "url" : "https://s01.oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/dropwizard/metrics/issues/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/dropwizard/metrics/metrics-core/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.dropwizard.metrics/metrics-core@4.1.36?type=jar"
    },
    {
      "publisher" : "QOS.ch",
      "group" : "org.slf4j",
      "name" : "slf4j-api",
      "version" : "1.7.36",
      "description" : "The slf4j API",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "872da51f5de7f3923da4de871d57fd85"
        },
        {
          "alg" : "SHA-1",
          "content" : "6c62681a2f655b49963a5983b8b0950a6120ae14"
        },
        {
          "alg" : "SHA-256",
          "content" : "d3ef575e3e4979678dc01bf1dcce51021493b4d11fb7f1be8ad982877c16a1c0"
        },
        {
          "alg" : "SHA-512",
          "content" : "f9b033fc019a44f98b16048da7e2b59edd4a6a527ba60e358f65ab88e0afae03a9340f1b3e8a543d49fa542290f499c5594259affa1ff3e6e7bf3b428d4c610b"
        },
        {
          "alg" : "SHA-384",
          "content" : "2b14ad035877087157e379d3277dcdcd79e58d6bdb147c47d29e377d75ce53ad42cafbf22f5fb7827c7e946ff4876b9a"
        },
        {
          "alg" : "SHA3-384",
          "content" : "3bc3110dafb8d5be16a39f3b2671a466463cd99eb39610c0e4719a7bf2d928f2ea213c734887c6926a07c4cca7769e4b"
        },
        {
          "alg" : "SHA3-256",
          "content" : "ba2608179fcf46e2291a90b9cbb4aa30d718e481f59c350cc21c73b88d826881"
        },
        {
          "alg" : "SHA3-512",
          "content" : "14c4edcd19702ef607d78826839d8a6d3a39157df54b89a801d3d3cbbe1307131a77671b041c761122730fb1387888c5ec2e46bdd80e1cb07f8f144676441824"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.slf4j.org"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/qos-ch/slf4j/slf4j-api"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
    },
    {
      "publisher" : "GlassFish Community",
      "group" : "javax.servlet",
      "name" : "javax.servlet-api",
      "version" : "3.1.0",
      "description" : "Java.net - The Source for Java Technology Collaboration",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "79de69e9f5ed8c7fcb8342585732bbf7"
        },
        {
          "alg" : "SHA-1",
          "content" : "3cd63d075497751784b2fa84be59432f4905bf7c"
        },
        {
          "alg" : "SHA-256",
          "content" : "af456b2dd41c4e82cf54f3e743bc678973d9fe35bd4d3071fa05c7e5333b8482"
        },
        {
          "alg" : "SHA-512",
          "content" : "32f7e3565c6cdf3d9a562f8fd597fe5059af0cf6b05b772a144a74bbc95927ac275eb38374538ec1c72adcce4c8e1e2c9f774a7b545db56b8085af0065e4a1e5"
        },
        {
          "alg" : "SHA-384",
          "content" : "8bf960fd053ef6ad1c3535824311f676b9ad537678b85f855dd5d6d726e391f8a7be9c9c76a8ae3ce8bfe671c1e2c942"
        },
        {
          "alg" : "SHA3-384",
          "content" : "e8f3282c08ceeed02947a13e886a3d75a6ea63e4f869a0e0bcbcf622e7cbffc81ed7bc045e82820443b6572c897cc4cc"
        },
        {
          "alg" : "SHA3-256",
          "content" : "8acc3481503989e1a78ad619bcbdc005b616c13736522b52e5ae5d782e8a0216"
        },
        {
          "alg" : "SHA3-512",
          "content" : "ab5f85d424640ddcf6fc13a41d12ffdee0be9508cd4cdc581168b31cf7917323f6e0d984a0631068e0e01c098098fe0037d1c4176352fd89ba3a4da5d641ca3d"
        }
      ],
      "licenses" : [
        {
          "expression" : "(CDDL-1.0 OR GPL-2.0-with-classpath-exception)"
        }
      ],
      "purl" : "pkg:maven/javax.servlet/javax.servlet-api@3.1.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://servlet-spec.java.net"
        },
        {
          "type" : "distribution",
          "url" : "https://maven.java.net/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://java.net/jira/browse/SERVLET_SPEC"
        },
        {
          "type" : "mailing-list",
          "url" : "users@servlet-spec.java.net"
        },
        {
          "type" : "vcs",
          "url" : "http://java.net/projects/glassfish/sources/svn/show/tags/javax.servlet-api-3.1.0"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/javax.servlet/javax.servlet-api@3.1.0?type=jar"
    }
  ],
  "dependencies" : [
    {
      "ref" : "pkg:maven/io.dropwizard.metrics/metrics-servlet@4.1.36?type=bundle",
      "dependsOn" : [
        "pkg:maven/io.dropwizard.metrics/metrics-core@4.1.36?type=jar",
        "pkg:maven/javax.servlet/javax.servlet-api@3.1.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.dropwizard.metrics/metrics-core@4.1.36?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/javax.servlet/javax.servlet-api@3.1.0?type=jar",
      "dependsOn" : [ ]
    }
  ]
}