{
  "$schema": "http://cyclonedx.org/schema/bom-1.7.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.7",
  "version": 1,
  "metadata": {
    "timestamp": "2026-10-13T21:05:20Z",
    "tools": {
      "components": [
        {
          "type": "application",
          "name": "SCALIBR",
          "externalReferences": [
            {
              "url": "https://github.com/google/osv-scalibr",
              "type": "website"
            }
          ]
        }
      ]
    },
    "authors": [
      {}
    ],
    "component": {
      "bom-ref": "e27e5e1d-2b9a-4ec3-a0fd-62f755d9dc40",
      "type": "",
      "name": ""
    }
  },
  "components": [
    {
      "bom-ref": "391236a8-5e8a-4a3a-a427-e19eb25b1681",
      "type": "library",
      "name": "org.apache.logging.log4j:log4j-core",
      "version": "2.14.1",
      "purl": "pkg:maven/org.apache.logging.log4j/log4j-core@2.14.1",
      "evidence": {
        "occurrences": [
          {
            "location": "app/log4j-core-2.14.1.jar"
          },
          {
            "location": "app/log4j-core-2.14.1.jar/META-INF/maven/org.apache.logging.log4j/log4j-core/pom.properties"
          }
        ]
      }
    }
  ]
}