<?xml version="1.0" encoding="UTF-8"?>
<bom serialNumber="urn:uuid:1b4a466a-ffba-3056-acdc-e6f67f6d032d" version="1" xmlns="http://cyclonedx.org/schema/bom/1.4">
  <metadata>
    <tools>
      <tool>
        <vendor>OWASP Foundation</vendor>
        <name>CycloneDX Maven plugin</name>
        <version>2.7.11</version>
        <hashes>
          <hash alg="MD5">a70e8b649ab4a2bb7922d360173c8237</hash>
          <hash alg="SHA-1">4c3c0878c15561639076e5be7a48ffcd6111c5ee</hash>
          <hash alg="SHA-256">70997d52dbffd4e797c467b2062c6ba9b8b5a7380ff2884779f2743b6172ebb5</hash>
          <hash alg="SHA-512">bc1ce91190c642f68fd3571939d7668def3b879ec8e5a87a213a9710a106e0290f60f9e0414593d19cca958c4fcb5d4450bd2793bcd609948419c8a2a6a7f5c8</hash>
          <hash alg="SHA-384">3c8421bdafd1754fb424f16dccc83bfe0827648c1cadfffc98bdf1c7da65475dfe48d2f4b16d233bb8819e155ba6a4f3</hash>
          <hash alg="SHA3-384">ad88cf6a0e0a5d51df49a4dab5530a28de9df7eec8460c045dff3e1f9316b82a244a125d52b937fe9d4ee72e44f5d01a</hash>
          <hash alg="SHA3-256">b4d9c3ef07c34517fd9f33178ba95ffc9618eb84a3671e71b0c82991ec3717e5</hash>
          <hash alg="SHA3-512">935b43aba8999dc7d95d93288a251c97b6b32852841b7bef31516c27c8d65c8de7f8411f1829f765ee760f25930c766db6a49df68e5994e18721c0a71f606f1e</hash>
        </hashes>
      </tool>
    </tools>
    <component type="library" bom-ref="pkg:maven/io.dropwizard.metrics/metrics-servlet@4.2.24?type=bundle">
      <group>io.dropwizard.metrics</group>
      <name>metrics-servlet</name>
      <version>4.2.24</version>
      <description>An instrumented filter for servlet environments.</description>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/io.dropwizard.metrics/metrics-servlet@4.2.24?type=bundle</purl>
      <externalReferences><reference type="website"><url>https://metrics.dropwizard.io/metrics-servlet</url></reference><reference type="distribution"><url>https://s01.oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/dropwizard/metrics/issues/</url></reference><reference type="vcs"><url>https://github.com/dropwizard/metrics/metrics-servlet/</url></reference></externalReferences>
    </component>
    <properties>
      <property name="maven.goal">makeBom</property>
      <property name="maven.scopes">compile,provided,runtime,system</property>
      <property name="cdx:reproducible">enabled</property>
    </properties>
  </metadata>
  <components>
    <component type="library" bom-ref="pkg:maven/io.dropwizard.metrics/metrics-core@4.2.24?type=jar">
      <group>io.dropwizard.metrics</group>
      <name>metrics-core</name>
      <version>4.2.24</version>
      <description>Metrics is a Java library which gives you unparalleled insight into what your code does in
        production. Metrics provides a powerful toolkit of ways to measure the behavior of critical
        components in your production environment.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">b8ffb13e5d163384e9d3ccee4c2540d9</hash>
        <hash alg="SHA-1">19bcbbc84eb36e94cb55958e3b09f7c5628b54ac</hash>
        <hash alg="SHA-256">59153d73b4fa0dcbcc6aa927a0ac943dba3e8706729007109ba26d8cc65c5677</hash>
        <hash alg="SHA-512">5882fa80aaa6bdb5d48436855299b32b06ec71499fbfb568abedf323fd0ec31e37c242a1a8911bd2afcf39ba83f35f2cd03411c7b21dde56077b97a6de6d2067</hash>
        <hash alg="SHA-384">40bad604c333c77a3c89ac3f166fd110633c92629220c89eb7fc963e48994a3ef589376526634cff10ac0c44becf428e</hash>
        <hash alg="SHA3-384">c3995ad77ddf4e171dfaf30f58fe2c33cad9f5c4350a01cb3b0331e770a0f9eefe8139828665bd5cff4c367bcadcb25d</hash>
        <hash alg="SHA3-256">bc00a14417358acba2b2637e2d07fb9930e29332fb1bee428c099d696c583e7b</hash>
        <hash alg="SHA3-512">69ae03de02c4d8f2d87ac5ff06318e14cae6dcd3cc36fb65336ab5cfddfac9a78a2972a5c097c24873612c8913bd60eadb277f450df48c63e37456cb1885600b</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/io.dropwizard.metrics/metrics-core@4.2.24?type=jar</purl>
      <externalReferences><reference type="website"><url>https://metrics.dropwizard.io/metrics-core</url></reference><reference type="distribution"><url>https://s01.oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/dropwizard/metrics/issues/</url></reference><reference type="vcs"><url>https://github.com/dropwizard/metrics/metrics-core/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar">
      <publisher>QOS.ch</publisher>
      <group>org.slf4j</group>
      <name>slf4j-api</name>
      <version>1.7.36</version>
      <description>The slf4j API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">872da51f5de7f3923da4de871d57fd85</hash>
        <hash alg="SHA-1">6c62681a2f655b49963a5983b8b0950a6120ae14</hash>
        <hash alg="SHA-256">d3ef575e3e4979678dc01bf1dcce51021493b4d11fb7f1be8ad982877c16a1c0</hash>
        <hash alg="SHA-512">f9b033fc019a44f98b16048da7e2b59edd4a6a527ba60e358f65ab88e0afae03a9340f1b3e8a543d49fa542290f499c5594259affa1ff3e6e7bf3b428d4c610b</hash>
        <hash alg="SHA-384">2b14ad035877087157e379d3277dcdcd79e58d6bdb147c47d29e377d75ce53ad42cafbf22f5fb7827c7e946ff4876b9a</hash>
        <hash alg="SHA3-384">3bc3110dafb8d5be16a39f3b2671a466463cd99eb39610c0e4719a7bf2d928f2ea213c734887c6926a07c4cca7769e4b</hash>
        <hash alg="SHA3-256">ba2608179fcf46e2291a90b9cbb4aa30d718e481f59c350cc21c73b88d826881</hash>
        <hash alg="SHA3-512">14c4edcd19702ef607d78826839d8a6d3a39157df54b89a801d3d3cbbe1307131a77671b041c761122730fb1387888c5ec2e46bdd80e1cb07f8f144676441824</hash>
      </hashes>
      <licenses>
        <license>
          <id>MIT</id>
          <url>https://opensource.org/licenses/MIT</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.slf4j.org</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/qos-ch/slf4j/slf4j-api</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/javax.servlet/javax.servlet-api@4.0.1?type=jar">
      <publisher>GlassFish Community</publisher>
      <group>javax.servlet</group>
      <name>javax.servlet-api</name>
      <version>4.0.1</version>
      <description>Java.net - The Source for Java Technology Collaboration</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">b80414033bf3397de334b95e892a2f44</hash>
        <hash alg="SHA-1">a27082684a2ff0bf397666c3943496c44541d1ca</hash>
        <hash alg="SHA-256">83a03dd877d3674576f0da7b90755c8524af099ccf0607fc61aa971535ad7c60</hash>
        <hash alg="SHA-512">763dec9801f647b1a45e492eb2a67f6a60fc608bef4738eb7b1a92d93f1f6db02b32f4c6553d4557c320dfc25c0ea0b9854c59e793262b6ca453c71caf05ef38</hash>
        <hash alg="SHA-384">9f4522458bdb1c7cbc0e88271d1e4326193c8e4d422ef8b75c3dcadf0bf86a91389890ab2d25a8cc6cf276f625475cd3</hash>
        <hash alg="SHA3-384">be8a209d1912492e86e611fc42e59512a89c464aa78cea3c5badd3290a6564d8bde55933a7c5d8113d9acc848a382751</hash>
        <hash alg="SHA3-256">f94dd8bf0908ca77e5213d166035a427e658ff4a59d35daa7e281c5fb2fc390a</hash>
        <hash alg="SHA3-512">3abbd3cad570557be24b69f700c217c7c8e1736d4db74f3ac28dd96b80822ac1c7631b3a9a15b9738754a3d68e4e7f13b732820eb8b8e8e329690ec2a23c621c</hash>
      </hashes>
      <licenses>
        <expression>(CDDL-1.0 OR GPL-2.0-with-classpath-exception)</expression>
      </licenses>
      <purl>pkg:maven/javax.servlet/javax.servlet-api@4.0.1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://javaee.github.io/servlet-spec/</url></reference><reference type="distribution"><url>https://maven.java.net/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/javaee/servlet-spec/issues</url></reference><reference type="mailing-list"><url>servlet-spec@javaee.groups.io</url></reference><reference type="vcs"><url>https://github.com/javaee/servlet-spec</url></reference></externalReferences>
    </component>
  </components>
  <dependencies>
    <dependency ref="pkg:maven/io.dropwizard.metrics/metrics-servlet@4.2.24?type=bundle">
      <dependency ref="pkg:maven/io.dropwizard.metrics/metrics-core@4.2.24?type=jar"/>
      <dependency ref="pkg:maven/javax.servlet/javax.servlet-api@4.0.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/io.dropwizard.metrics/metrics-core@4.2.24?type=jar">
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    <dependency ref="pkg:maven/javax.servlet/javax.servlet-api@4.0.1?type=jar"/>
  </dependencies>
</bom>
