<?xml version="1.0" encoding="UTF-8"?>
<bom serialNumber="urn:uuid:9d5b59fe-c40a-31af-bfe8-511d33054031" version="1" xmlns="http://cyclonedx.org/schema/bom/1.6">
  <metadata>
    <lifecycles>
      <lifecycle>
        <phase>build</phase>
      </lifecycle>
    </lifecycles>
    <tools>
      <components>
        <component type="library">
          <author>OWASP Foundation</author>
          <group>org.cyclonedx</group>
          <name>cyclonedx-maven-plugin</name>
          <version>2.9.1</version>
          <description>CycloneDX Maven plugin</description>
          <hashes>
            <hash alg="MD5">9c7a565cf28cce58557d0c621c5ea4b1</hash>
            <hash alg="SHA-1">be882d5a22050bfa9d19090b1420c188617d0e1c</hash>
            <hash alg="SHA-256">698e0f37184a5b28c245c4065fd036dfce253b52f82fbb7113d81d36326cc249</hash>
            <hash alg="SHA-512">c0f0b11026858166f872a2eb54719492e5cecaa0bc9cd6b30b3ecb4a174eed220f4a1b5829d18d6734128e778d3cb3db7ffed177c92866133129cb29081814a0</hash>
            <hash alg="SHA-384">d80964707dfe5caca8c70521d5066f57589304c0a657e6fbc7c0614ea0fc7b3b3dbe7778361eee0f54ba111e9cb0ffcb</hash>
            <hash alg="SHA3-384">80bc3a275d9514bc457461ff52a72add8c7ecbbc01d8912efce57139016c544ee776981851be0a58fa977ab4221f703f</hash>
            <hash alg="SHA3-256">142317d6f245390f4fd2d0c100b16281b8dfc5c0c2cff86943bdcc97039cb699</hash>
            <hash alg="SHA3-512">af0fb9137c90b65d1a07f72e4d51ae509956cdb8800f35c961b037cdda1fe4a14ce3b496cef71ba85f1621affcfe29cd42704ae4191ff0b090a9602087c8997b</hash>
          </hashes>
        </component>
      </components>
    </tools>
    <component type="library" bom-ref="pkg:maven/org.apache.maven/maven-plugin-api@3.9.16?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven</group>
      <name>maven-plugin-api</name>
      <version>3.9.16</version>
      <description>The API for plugins - Mojos - development.</description>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven/maven-plugin-api@3.9.16?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://maven.apache.org/ref/3.9.16/maven-plugin-api/</url>
        </reference>
        <reference type="build-system">
          <url>https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/</url>
        </reference>
        <reference type="distribution">
          <url>https://maven.apache.org/download.html</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/apache/maven/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://lists.apache.org/list.html?users@maven.apache.org</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/maven/tree/maven-3.9.16/maven-plugin-api</url>
        </reference>
      </externalReferences>
    </component>
    <properties>
      <property name="maven.goal">makeBom</property>
      <property name="maven.scopes">compile,provided,runtime,system</property>
      <property name="cdx:reproducible">enabled</property>
    </properties>
  </metadata>
  <components>
    <component type="library" bom-ref="pkg:maven/org.apache.maven/maven-model@3.9.16?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven</group>
      <name>maven-model</name>
      <version>3.9.16</version>
      <description>Model for Maven POM (Project Object Model)</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">15ea34610d5c8d1944fc4ba317c6b4cd</hash>
        <hash alg="SHA-1">6f93dbc874ef321b0c3734dee41a6d17e18ceebd</hash>
        <hash alg="SHA-256">f59d86a507c241bf17bbf050050d1b8b9c0d34d5010a7e2386c3cab7c83b93de</hash>
        <hash alg="SHA-512">de3b3aaa429489dadf6dde95f9053f3d37e3be5e9d3f575dd69929589037a1c378f24bc1977354b4a88f63fec77ca7367afd9950b043832c4db1f28714bfdc69</hash>
        <hash alg="SHA-384">e940a146ed410bdc660e8c45abf81aa1f9d4e2e9e0a462e9514a23c50485b3850547717c74d6f1ee7fb1ecc11e550809</hash>
        <hash alg="SHA3-384">a4fad3a9ba20152dda15bf27f0c282c0106e0596f8a7f1419d28f40c37ece69401c186b8c462ae48c3a1a41aad05ffe9</hash>
        <hash alg="SHA3-256">300b13726dc66a6e649e668702b201b78742d30d98a1924a16416752f14abf2d</hash>
        <hash alg="SHA3-512">f730eec0f9772bbfa52b8ba1eea99d4ed6e0f503c4d40c9c8d9285f718e1e7af5a9f1b39387ba6022728b1c76f214fceff6d704d37b4d4de2429c0193a75afaf</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven/maven-model@3.9.16?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://maven.apache.org/ref/3.9.16/maven-model/</url>
        </reference>
        <reference type="build-system">
          <url>https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/</url>
        </reference>
        <reference type="distribution">
          <url>https://maven.apache.org/download.html</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/apache/maven/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://lists.apache.org/list.html?users@maven.apache.org</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/maven/tree/maven-3.9.16/maven-model</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.maven/maven-artifact@3.9.16?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven</group>
      <name>maven-artifact</name>
      <version>3.9.16</version>
      <description>Maven is a software build management and
    comprehension tool. Based on the concept of a project object model:
    builds, dependency management, documentation creation, site
    publication, and distribution publication are all controlled from
    the declarative file. Maven can be extended by plugins to utilise a
    number of other development tools for reporting or the build
    process.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">6005ab2198a19a41cd3cf59618f9abc1</hash>
        <hash alg="SHA-1">1176c6579a8a68508c3479ef72d514e71c98ddca</hash>
        <hash alg="SHA-256">54cc1c1ef932e3d4a903352111b42b4d3c3ed8e7a1d0de73b625309d9c3ad3e8</hash>
        <hash alg="SHA-512">9688ea1f519c113dd4f78b63e6ff2256b65c2fc13446e5c5c776ef4e330a1087311a89fd4212c3a75a8a327d44a855aa98e9e6215c22416cc91cf6e0db48942f</hash>
        <hash alg="SHA-384">d0c7c604f82f74eae1b820d88d621fd87ebc567bd7159ce00364a60cb065da1208341ed05f0f8277afcdfbc85544da8f</hash>
        <hash alg="SHA3-384">55c50e32471d19532c40489cd76ed77015965ce4a9137fb8daba5c40702ffd9acca4bf54d9d449a2ff6b1d67364122e9</hash>
        <hash alg="SHA3-256">69ad66e3d9391c3ed5b6e7bbeb6731568b13d93ad3e795a85b67f7cea15b7008</hash>
        <hash alg="SHA3-512">48b82cdfecaee78545011e0c5ada2fa0bc1ea8bf21493da92b39e7742f6cdefb32c5f4e75efe8991d1946c1bbeb345667a632031c2844d3cf440241d92887a70</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven/maven-artifact@3.9.16?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://maven.apache.org/ref/3.9.16/maven-artifact/</url>
        </reference>
        <reference type="build-system">
          <url>https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/</url>
        </reference>
        <reference type="distribution">
          <url>https://maven.apache.org/download.html</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/apache/maven/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://lists.apache.org/list.html?users@maven.apache.org</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/maven/tree/maven-3.9.16/maven-artifact</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@1.0.0?type=jar">
      <publisher>The Eclipse Foundation</publisher>
      <group>org.eclipse.sisu</group>
      <name>org.eclipse.sisu.plexus</name>
      <version>1.0.0</version>
      <description>Plexus-JSR330 adapter; adds Plexus support to the Sisu-Inject container</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">fb07aece41f034fea46b022e2756cd7c</hash>
        <hash alg="SHA-1">873767e95597c9e31749123a408bd4949c29a46c</hash>
        <hash alg="SHA-256">865b5300034fc08c790215d7d97f141914c932191bef9338a7dcef589f7536e9</hash>
        <hash alg="SHA-512">d7236718e1ede4f34d6f2ebaaa0b772370bf3c857a477cf80a7f6a08aa69312c3c53d2e4e3625d3d71906ae995921854b3687267cb52028f5528a3491bf1ceb2</hash>
        <hash alg="SHA-384">92cba3eb0d3b86940d7e0aa07667e57344e4121219464cb8edbeecf79e7fd74567c071e24001ed847a125b5e6741335e</hash>
        <hash alg="SHA3-384">15d0d03f5679fba496d3d72bd0f72fe8d0fcfdc789291b19447e3aa032d6587e248ca0eb0a3bfd997b25bc5b3ca77c72</hash>
        <hash alg="SHA3-256">c5f376d190b14539e533f43dda8b0c9798dfee296575e25407a3b070d1d1ee7a</hash>
        <hash alg="SHA3-512">1c54f25d582039f5c7887562ac233766d10c9a9f2dc1b0fcc5978d831a26a368709005a37585c8215bbdaddbc4c6319101b6fc61f9f5b6982988937750f0209d</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@1.0.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://eclipse.dev/sisu/org.eclipse.sisu.plexus/</url>
        </reference>
        <reference type="build-system">
          <url>https://github.com/eclipse-sisu/sisu-project/actions/workflows/build.yml?query=branch%3Amain</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repo.maven.apache.org/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/eclipse-sisu/sisu-project/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://www.eclipse.org/lists/sisu-dev</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/eclipse-sisu/sisu-project/tree/main/org.eclipse.sisu.plexus</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.codehaus.plexus/plexus-component-annotations@2.2.0?type=jar">
      <publisher>Codehaus Plexus</publisher>
      <group>org.codehaus.plexus</group>
      <name>plexus-component-annotations</name>
      <version>2.2.0</version>
      <description>Plexus Component Java Annotations, to describe plexus components properties in java sources with
    standard annotations instead of javadoc annotations.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">a2397189a5ce25e7d2d44effa9f5176c</hash>
        <hash alg="SHA-1">a506f84636ea7ae370d04167dd155c103e616f68</hash>
        <hash alg="SHA-256">50edb93c73786e62822b4fe1336e22880fdf147191373cf5c911370e16748fcf</hash>
        <hash alg="SHA-512">33595f37df5b5f11a863082e2ef90d871f52bc6c83fb593b0747a4c7eb91c3b5ab9bfe804a54b7d82ee6f289e2d47c443c8dafe4159d07b6c80394a5666db2f6</hash>
        <hash alg="SHA-384">4850c234dfc3c37bc7f50b8ad5f86abc42927e0135582461a0d2d8cd0649ed304352cd0e91ccd006c55c6d06f7940104</hash>
        <hash alg="SHA3-384">2aabf9ba2fedcfd79345316c2b8f7b9abfe5519f3f5e1d2bc45187febf5bcab84ad8c505f7e99857dcee2c2cd7d2b0de</hash>
        <hash alg="SHA3-256">2a20286e40c517a66525f26a6ef13becfb6eec3ba792d9708e14896d288ae9df</hash>
        <hash alg="SHA3-512">bd372902e65123fcc0ac13721868e604bb54fdb52a7e0de412c46aca9aa5ca7f1a9c59cdc9f2bb7016a5cdaa0e8f43a8cf0ef2250ccd0b291bcc4468e5f4a4b5</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.codehaus.plexus/plexus-component-annotations@2.2.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://codehaus-plexus.github.io/plexus-containers/plexus-component-annotations/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/codehaus-plexus/plexus-containers/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://groups.google.com/forum/#!forum/mojohaus-dev</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/codehaus-plexus/plexus-containers/tree/plexus-containers-2.2.0/plexus-component-annotations/</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.codehaus.plexus/plexus-utils@3.6.1?type=jar">
      <publisher>Codehaus Plexus</publisher>
      <group>org.codehaus.plexus</group>
      <name>plexus-utils</name>
      <version>3.6.1</version>
      <description>A collection of various utility classes to ease working with strings, files, command lines, XML and
    more.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">bf77c7ef462342bd42ce245be9648540</hash>
        <hash alg="SHA-1">9dce1b9c69b197f453223e45a2cb9fa0cd48b424</hash>
        <hash alg="SHA-256">05a63effd67e2d6b9d610cc82e2bd7473289d34802e57a529b28110f28af5679</hash>
        <hash alg="SHA-512">cdf52ae14e19fbc040a8ce9eb56f25fb6f3c1c2703b8cb7815329f06f675a284934e4fb19acedb49a24abc8ba28493fd5aedf15f0ac8033d123c71620de0ac98</hash>
        <hash alg="SHA-384">a02b453e4590c5028dcd94a72b818eb63ff7831cda8337daef63f774c1972b920b9eaae979867be34d9d4843e8296d42</hash>
        <hash alg="SHA3-384">28541c0fccf50c5eafa4b420c1453a77a8db9466b4da35f94ca745100f5b8b5a3f9ac2b3ab7f1008edb5ce33204a3ae2</hash>
        <hash alg="SHA3-256">f7353bfe893ab5932fe443ef26d2a9d9541f1f62105f35f923bd9b6b94808683</hash>
        <hash alg="SHA3-512">a7d95eaf9c02a688bcfaa1702c555eac1975190abda0ca626f3e41cec2492125e712c561a3cc67ed0d76a1b174ff03a8cd05afc0d377af1ff4c74a846546675f</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.codehaus.plexus/plexus-utils@3.6.1?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://codehaus-plexus.github.io/plexus-utils/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repo.maven.apache.org/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/codehaus-plexus/plexus-utils/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://groups.google.com/forum/#!forum/mojohaus-dev</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/codehaus-plexus/plexus-utils/tree/plexus-utils-3.6.1/</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.codehaus.plexus/plexus-classworlds@2.11.0?type=jar">
      <publisher>Codehaus Plexus</publisher>
      <group>org.codehaus.plexus</group>
      <name>plexus-classworlds</name>
      <version>2.11.0</version>
      <description>A class loader framework</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">54d5f4e0835c5e53f08a494f08d2a75d</hash>
        <hash alg="SHA-1">6586ba9f3137d7ac7b9789f1fcf7c4e192482905</hash>
        <hash alg="SHA-256">8971f135490070bc5fde7413fcc8db7c997fda4bebfb5c31185900d66edcbbb2</hash>
        <hash alg="SHA-512">5dc1a779a8975935042059577e7ef3b1626108ede77a144a55a0ec8ae2c53ddb5ceef1a70291f3755ea9ee4113a50ac2b0efc6622d751e8fb45244a960f586ab</hash>
        <hash alg="SHA-384">826da7060dfe31c97c5946f2a1dc3a3540e71e5ccf6d6ddd15d065ee63d034fac1488ae1c4517e42415844a348c1c2e8</hash>
        <hash alg="SHA3-384">aeff11c6d0845165b3a80ad842aa2fe098763f77464b8217b3320b2300251896c54bf12e1b88cc350011eb3a6f00b9f7</hash>
        <hash alg="SHA3-256">ec4c1f8b85fbccdd730e67b93e92669c0dc09de89b82c8d735c6172f7658fad7</hash>
        <hash alg="SHA3-512">fe81d0b95df3ba10bd5692821a8e54d87f422efe9a07c5391c269933647ed69d413667dbd950333c1556afc625d5ee32d2f34bff024bc9bf92f94eab9097b3fa</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.codehaus.plexus/plexus-classworlds@2.11.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://codehaus-plexus.github.io/plexus-classworlds/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repo.maven.apache.org/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/codehaus-plexus/plexus-classworlds/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://groups.google.com/forum/#!forum/mojohaus-dev</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/codehaus-plexus/plexus-classworlds/tree/plexus-classworlds-2.11.0/</url>
        </reference>
      </externalReferences>
    </component>
  </components>
  <dependencies>
    <dependency ref="pkg:maven/org.apache.maven/maven-plugin-api@3.9.16?type=jar">
      <dependency ref="pkg:maven/org.apache.maven/maven-model@3.9.16?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven/maven-artifact@3.9.16?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@1.0.0?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-utils@3.6.1?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-classworlds@2.11.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.maven/maven-model@3.9.16?type=jar">
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-utils@3.6.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.codehaus.plexus/plexus-utils@3.6.1?type=jar"/>
    <dependency ref="pkg:maven/org.apache.maven/maven-artifact@3.9.16?type=jar">
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-utils@3.6.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@1.0.0?type=jar">
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-component-annotations@2.2.0?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-classworlds@2.11.0?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-utils@3.6.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.codehaus.plexus/plexus-component-annotations@2.2.0?type=jar"/>
    <dependency ref="pkg:maven/org.codehaus.plexus/plexus-classworlds@2.11.0?type=jar"/>
  </dependencies>
</bom>
