{"bomFormat":"CycloneDX","specVersion":"1.6","serialNumber":"urn:uuid:6b2f318b-3935-4d23-8b1b-636f0916d937","version":1,"metadata":{"timestamp":"2026-10-15T01:13:08Z","tools":{"components":[{"group":"@cdxgen","name":"cdxgen","version":"13.4.0","purl":"pkg:npm/%40cdxgen/cdxgen@13.4.0","type":"application","bom-ref":"pkg:npm/@cdxgen/cdxgen@13.4.0","publisher":"OWASP Foundation","authors":[{"name":"OWASP Foundation"}]}]},"authors":[{"name":"OWASP Foundation"}],"lifecycles":[{"phase":"build"}],"component":{"group":"com.example","name":"java-maven","version":"1.0.0","properties":[{"name":"internal:SrcFile","value":".cdxgen-work/java-maven-1792026781013/src/pom.xml"}],"purl":"pkg:maven/com.example/java-maven@1.0.0?type=jar","bom-ref":"pkg:maven/com.example/java-maven@1.0.0?type=jar","type":"application"},"properties":[{"name":"cdx:bom:componentNamespaces","value":"com.fasterxml.jackson.core\\ncom.google.code.findbugs\\ncom.google.errorprone\\ncom.google.guava\\ncom.google.j2objc\\norg.apache.commons\\norg.apache.logging.log4j\\norg.apiguardian\\norg.checkerframework\\norg.junit.jupiter\\norg.junit.platform\\norg.opentest4j\\norg.projectlombok"},{"name":"cdx:bom:componentSrcFiles","value":".cdxgen-work/java-maven-1792026781013/src/pom.xml"},{"name":"cdx:bom:componentTypes","value":"maven"}]},"components":[{"publisher":"The Apache Software Foundation","group":"org.apache.logging.log4j","name":"log4j-core","version":"2.14.1","description":"The Apache Log4j Implementation","scope":"required","hashes":[{"alg":"MD5","content":"948dda787593340a7af1a18e328b7b7f"},{"alg":"SHA-1","content":"9141212b8507ab50a45525b545b39d224614528b"},{"alg":"SHA-256","content":"ade7402a70667a727635d5c4c29495f4ff96f061f12539763f6f123973b465b0"},{"alg":"SHA-512","content":"6e41ff42f12deedb8da06cbed73d0a9a5389660b7ee058436f8fcb6b14a6ab3105faf8e3f2c007d38ccc85af1e704505b84be5a80d8e68a434aae82b54b85f70"}],"licenses":[{"license":{"id":"Apache-2.0","url":"https://opensource.org/licenses/Apache-2.0","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:maven/org.apache.logging.log4j/log4j-core@2.14.1?type=jar","externalReferences":[{"type":"vcs","url":"https://gitbox.apache.org/repos/asf?p=logging-log4j2.git"}],"type":"framework","bom-ref":"pkg:maven/org.apache.logging.log4j/log4j-core@2.14.1?type=jar","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"internal:SrcFile","value":".cdxgen-work/java-maven-1792026781013/src/pom.xml"}],"evidence":{"identity":[{"field":"purl","confidence":0.5,"methods":[{"technique":"manifest-analysis","confidence":0.5,"value":".cdxgen-work/java-maven-1792026781013/src/pom.xml"}],"concludedValue":".cdxgen-work/java-maven-1792026781013/src/pom.xml"}]},"tags":["framework"]},{"publisher":"The Apache Software Foundation","group":"org.apache.logging.log4j","name":"log4j-api","version":"2.14.1","description":"The Apache Log4j API","scope":"required","hashes":[{"alg":"MD5","content":"6f31a3b90c3eb09fb0dc0aef155a001c"},{"alg":"SHA-1","content":"cd8858fbbde69f46bce8db1152c18a43328aae78"},{"alg":"SHA-256","content":"8caf58db006c609949a0068110395a33067a2bad707c3da35e959c0473f9a916"},{"alg":"SHA-512","content":"2ecbc8e5a03fad8f8133d2b9e83245d4f19bc36f165b20c19e9eac4a0c1bf0422a2e98f796c6bbf47c71bdf34054a1685a6fbb58cef23f2ea830c3946123b8b6"}],"licenses":[{"license":{"id":"Apache-2.0","url":"https://opensource.org/licenses/Apache-2.0","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:maven/org.apache.logging.log4j/log4j-api@2.14.1?type=jar","externalReferences":[{"type":"vcs","url":"https://gitbox.apache.org/repos/asf?p=logging-log4j2.git"}],"type":"framework","bom-ref":"pkg:maven/org.apache.logging.log4j/log4j-api@2.14.1?type=jar","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"internal:SrcFile","value":".cdxgen-work/java-maven-1792026781013/src/pom.xml"}],"evidence":{"identity":[{"field":"purl","confidence":0.5,"methods":[{"technique":"manifest-analysis","confidence":0.5,"value":".cdxgen-work/java-maven-1792026781013/src/pom.xml"}],"concludedValue":".cdxgen-work/java-maven-1792026781013/src/pom.xml"}]},"tags":["framework"]},{"group":"com.google.guava","name":"guava","version":"33.3.1-jre","description":"Guava is a suite of core and expanded libraries that include\nutility classes, Google's collections, I/O classes, and\nmuch more.","scope":"required","hashes":[{"alg":"MD5","content":"7b7d80d99af4181db55b00dad50a91bb"},{"alg":"SHA-1","content":"852f8b363da0111e819460021ca693cacca3e8db"},{"alg":"SHA-256","content":"4bf0e2c5af8e4525c96e8fde17a4f7307f97f8478f11c4c8e35a0e3298ae4e90"},{"alg":"SHA-512","content":"5fdb406eeafbb7b409bae82924b7c26bdcdea06c7edbb673901814c3d35010bc91139e5139663af0b66f8fa47f54e0e96dd86fdff1797c9ae497c10a466b02e3"}],"licenses":[{"license":{"id":"Apache-2.0","url":"https://opensource.org/licenses/Apache-2.0","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:maven/com.google.guava/guava@33.3.1-jre?type=jar","externalReferences":[{"type":"vcs","url":"https://github.com/google/guava"}],"type":"library","bom-ref":"pkg:maven/com.google.guava/guava@33.3.1-jre?type=jar","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"internal:SrcFile","value":".cdxgen-work/java-maven-1792026781013/src/pom.xml"}],"evidence":{"identity":[{"field":"purl","confidence":0.5,"methods":[{"technique":"manifest-analysis","confidence":0.5,"value":".cdxgen-work/java-maven-1792026781013/src/pom.xml"}],"concludedValue":".cdxgen-work/java-maven-1792026781013/src/pom.xml"}]}},{"group":"com.google.guava","name":"failureaccess","version":"1.0.2","description":"Contains\ncom.google.common.util.concurrent.internal.InternalFutureFailureAccess and\nInternalFutures. Most users will never need to use this artifact. Its\nclasses are conceptually a part of Guava, but they're in this separate\nartifact so that Android libraries can use them without pulling in all of\nGuava (just as they can use ListenableFuture by depending on the\nlistenablefuture artifact).","scope":"required","hashes":[{"alg":"MD5","content":"3f75955b49b6758fd6d1e1bd9bf777b3"},{"alg":"SHA-1","content":"c4a06a64e650562f30b7bf9aaec1bfed43aca12b"},{"alg":"SHA-256","content":"8a8f81cf9b359e3f6dfa691a1e776985c061ef2f223c9b2c80753e1b458e8064"},{"alg":"SHA-512","content":"ff4ee76aa661708989d53d45576cff3beea9ebbd86481dbbf2ee8c81bb22f882097b430588312b711025f0e890f22c6799d722ccd422a6a7278de08660fe2f51"}],"licenses":[{"license":{"id":"Apache-2.0","url":"https://opensource.org/licenses/Apache-2.0","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:maven/com.google.guava/failureaccess@1.0.2?type=jar","externalReferences":[{"type":"vcs","url":"https://github.com/google/guava"}],"type":"library","bom-ref":"pkg:maven/com.google.guava/failureaccess@1.0.2?type=jar","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"internal:SrcFile","value":".cdxgen-work/java-maven-1792026781013/src/pom.xml"}],"evidence":{"identity":[{"field":"purl","confidence":0.5,"methods":[{"technique":"manifest-analysis","confidence":0.5,"value":".cdxgen-work/java-maven-1792026781013/src/pom.xml"}],"concludedValue":".cdxgen-work/java-maven-1792026781013/src/pom.xml"}]}},{"group":"com.google.guava","name":"listenablefuture","version":"9999.0-empty-to-avoid-conflict-with-guava","description":"An empty artifact that Guava depends on to signal that it is providing\nListenableFuture -- but is also available in a second \"version\" that\ncontains com.google.common.util.concurrent.ListenableFuture class, without\nany other Guava classes. The idea is:\n- If users want only ListenableFuture, they depend on listenablefuture-1.0.\n- If users want all of Guava, they depend on guava, which, as of Guava\n27.0, depends on\nlistenablefuture-9999.0-empty-to-avoid-conflict-with-guava. The 9999.0-...\nversion number is enough for some build systems (notably, Gradle) to select\nthat empty artifact over the \"real\" listenablefuture-1.0 -- avoiding a\nconflict with the copy of ListenableFuture in guava itself. If users are\nusing an older version of Guava or a build system other than Gradle, they\nmay see class conflicts. If so, they can solve them by manually excluding\nthe listenablefuture artifact or manually forcing their build systems to\nuse 9999.0-....","scope":"required","hashes":[{"alg":"MD5","content":"d094c22570d65e132c19cea5d352e381"},{"alg":"SHA-1","content":"b421526c5f297295adef1c886e5246c39d4ac629"},{"alg":"SHA-256","content":"b372a037d4230aa57fbeffdef30fd6123f9c0c2db85d0aced00c91b974f33f99"},{"alg":"SHA-512","content":"c5987a979174cbacae2e78b319f080420cc71bcdbcf7893745731eeb93c23ed13bff8d4599441f373f3a246023d33df03e882de3015ee932a74a774afdd0782f"}],"licenses":[{"license":{"id":"Apache-2.0","url":"https://opensource.org/licenses/Apache-2.0","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar","externalReferences":[{"type":"vcs","url":"https://github.com/google/guava"}],"type":"library","bom-ref":"pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"internal:SrcFile","value":".cdxgen-work/java-maven-1792026781013/src/pom.xml"}],"evidence":{"identity":[{"field":"purl","confidence":0.5,"methods":[{"technique":"manifest-analysis","confidence":0.5,"value":".cdxgen-work/java-maven-1792026781013/src/pom.xml"}],"concludedValue":".cdxgen-work/java-maven-1792026781013/src/pom.xml"}]}},{"group":"com.google.code.findbugs","name":"jsr305","version":"3.0.2","description":"JSR305 Annotations for Findbugs","scope":"required","hashes":[{"alg":"MD5","content":"dd83accb899363c32b07d7a1b2e4ce40"},{"alg":"SHA-1","content":"25ea2e8b0c338a877313bd4672d3fe056ea78f0d"},{"alg":"SHA-256","content":"766ad2a0783f2687962c8ad74ceecc38a28b9f72a2d085ee438b7813e928d0c7"},{"alg":"SHA-512","content":"bb09db62919a50fa5b55906013be6ca4fc7acb2e87455fac5eaf9ede2e41ce8bbafc0e5a385a561264ea4cd71bbbd3ef5a45e02d63277a201d06a0ae1636f804"}],"licenses":[{"license":{"id":"Apache-2.0","url":"https://opensource.org/licenses/Apache-2.0","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar","externalReferences":[{"type":"vcs","url":"https://code.google.com/p/jsr-305/"}],"type":"library","bom-ref":"pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"internal:SrcFile","value":".cdxgen-work/java-maven-1792026781013/src/pom.xml"}],"evidence":{"identity":[{"field":"purl","confidence":0.5,"methods":[{"technique":"manifest-analysis","confidence":0.5,"value":".cdxgen-work/java-maven-1792026781013/src/pom.xml"}],"concludedValue":".cdxgen-work/java-maven-1792026781013/src/pom.xml"}]}},{"group":"org.checkerframework","name":"checker-qual","version":"3.43.0","description":"checker-qual contains annotations (type qualifiers) that a programmer\nwrites to specify Java code for type-checking by the Checker Framework.","scope":"required","hashes":[{"alg":"MD5","content":"4f56e65c8f302ca8b4cb384c9b4a53b6"},{"alg":"SHA-1","content":"9425eee39e56b116d2b998b7c2cebcbd11a3c98b"},{"alg":"SHA-256","content":"3fbc2e98f05854c3df16df9abaa955b91b15b3ecac33623208ed6424640ef0f6"},{"alg":"SHA-512","content":"823ea28e3c822ff48e4e985a421fa0b53ca3419e2c0635c3d4d0a9822399b6491780e26a9161d4733857c97987bff2d725ff4453b2c22ed412eef46ea27f5d84"}],"licenses":[{"license":{"id":"MIT","url":"https://opensource.org/licenses/MIT","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:maven/org.checkerframework/checker-qual@3.43.0?type=jar","externalReferences":[{"type":"vcs","url":"https://github.com/typetools/checker-framework.git"}],"type":"framework","bom-ref":"pkg:maven/org.checkerframework/checker-qual@3.43.0?type=jar","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"internal:SrcFile","value":".cdxgen-work/java-maven-1792026781013/src/pom.xml"}],"evidence":{"identity":[{"field":"purl","confidence":0.5,"methods":[{"technique":"manifest-analysis","confidence":0.5,"value":".cdxgen-work/java-maven-1792026781013/src/pom.xml"}],"concludedValue":".cdxgen-work/java-maven-1792026781013/src/pom.xml"}]},"tags":["framework"]},{"publisher":"Google LLC","group":"com.google.errorprone","name":"error_prone_annotations","version":"2.28.0","description":"Error Prone is a static analysis tool for Java that catches common programming mistakes at compile-time.","scope":"required","hashes":[{"alg":"MD5","content":"9e5d2181ddb6acb58fe08e86198c4232"},{"alg":"SHA-1","content":"59fc00087ce372de42e394d2c789295dff2d19f0"},{"alg":"SHA-256","content":"f3fc8a3a0a4020706a373b00e7f57c2512dd26d1f83d28c7d38768f8682b231e"},{"alg":"SHA-512","content":"7af1de57fa662b27965c24894d2b2f23c43e60cc6ee48742c527784fa382372eb61bc97e8d578a8104874574ccda24ba1bda994273ea314672e9b225bc0fc2ca"}],"licenses":[{"license":{"id":"Apache-2.0","url":"https://opensource.org/licenses/Apache-2.0","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:maven/com.google.errorprone/error_prone_annotations@2.28.0?type=jar","externalReferences":[{"type":"vcs","url":"https://github.com/google/error-prone"}],"type":"library","bom-ref":"pkg:maven/com.google.errorprone/error_prone_annotations@2.28.0?type=jar","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"internal:SrcFile","value":".cdxgen-work/java-maven-1792026781013/src/pom.xml"}],"evidence":{"identity":[{"field":"purl","confidence":0.5,"methods":[{"technique":"manifest-analysis","confidence":0.5,"value":".cdxgen-work/java-maven-1792026781013/src/pom.xml"}],"concludedValue":".cdxgen-work/java-maven-1792026781013/src/pom.xml"}]}},{"group":"com.google.j2objc","name":"j2objc-annotations","version":"3.0.0","description":"A set of annotations that provide additional information to the J2ObjC\ntranslator to modify the result of translation.","scope":"required","hashes":[{"alg":"MD5","content":"f59529b29202a5baf37f491ea5ec8627"},{"alg":"SHA-1","content":"7399e65dd7e9ff3404f4535b2f017093bdb134c7"},{"alg":"SHA-256","content":"88241573467ddca44ffd4d74aa04c2bbfd11bf7c17e0c342c94c9de7a70a7c64"},{"alg":"SHA-512","content":"1406b1aa53b19f8269129d96ce8b64bf36f215eacf7d8f1e0adadee31614e53bb3f7acf4ff97418c5bfc75677a6f3cd637c3d9889d1e85117b6fa12467c91e9f"}],"licenses":[{"license":{"id":"Apache-2.0","url":"https://opensource.org/licenses/Apache-2.0","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:maven/com.google.j2objc/j2objc-annotations@3.0.0?type=jar","externalReferences":[{"type":"vcs","url":"http://github.com/google/j2objc"}],"type":"library","bom-ref":"pkg:maven/com.google.j2objc/j2objc-annotations@3.0.0?type=jar","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"internal:SrcFile","value":".cdxgen-work/java-maven-1792026781013/src/pom.xml"}],"evidence":{"identity":[{"field":"purl","confidence":0.5,"methods":[{"technique":"manifest-analysis","confidence":0.5,"value":".cdxgen-work/java-maven-1792026781013/src/pom.xml"}],"concludedValue":".cdxgen-work/java-maven-1792026781013/src/pom.xml"}]}},{"publisher":"FasterXML","group":"com.fasterxml.jackson.core","name":"jackson-databind","version":"2.18.2","description":"General data-binding functionality for Jackson: works on core streaming API","scope":"required","hashes":[{"alg":"MD5","content":"1b56887bcd3eaea1ff710eb673e610b0"},{"alg":"SHA-1","content":"deef8697b92141fb6caf7aa86966cff4eec9b04f"},{"alg":"SHA-256","content":"4b364e6850dc89172fcf1d4dd26b8ff5488eda44ff4657e22dd265203dd5ab3c"},{"alg":"SHA-512","content":"bbdfaaffaaab2a032a754cd9dade06552e9f79fd39ae396873315415219b37e0675fde0a02953efe0701e17be4c282b118a96fcb752f53ca37ab89624f0a52ac"}],"licenses":[{"license":{"id":"Apache-2.0","url":"https://opensource.org/licenses/Apache-2.0","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.18.2?type=jar","externalReferences":[{"type":"vcs","url":"https://github.com/FasterXML/jackson-databind"}],"type":"library","bom-ref":"pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.18.2?type=jar","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"internal:SrcFile","value":".cdxgen-work/java-maven-1792026781013/src/pom.xml"}],"evidence":{"identity":[{"field":"purl","confidence":0.5,"methods":[{"technique":"manifest-analysis","confidence":0.5,"value":".cdxgen-work/java-maven-1792026781013/src/pom.xml"}],"concludedValue":".cdxgen-work/java-maven-1792026781013/src/pom.xml"}]}},{"publisher":"FasterXML","group":"com.fasterxml.jackson.core","name":"jackson-annotations","version":"2.18.2","description":"Core annotations used for value types, used by Jackson data binding package.","scope":"required","hashes":[{"alg":"MD5","content":"79d38d3c51068a2bbc40268d02f80763"},{"alg":"SHA-1","content":"985d77751ebc7fce5db115a986bc9aa82f973f4a"},{"alg":"SHA-256","content":"581bd61000ef7648943f781ca05689e56d03f6052748365a8e2b3a9b5d3fa32f"},{"alg":"SHA-512","content":"d375e5761052e202e409400637cdc9ce0f45cf01a90628f36ca3c81757ac30695cc6e60146cbf14685c5c50912ad932564eb794ea76ab8461ce1786a02eab867"}],"licenses":[{"license":{"id":"Apache-2.0","url":"https://opensource.org/licenses/Apache-2.0","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.18.2?type=jar","externalReferences":[{"type":"vcs","url":"https://github.com/FasterXML/jackson-annotations"}],"type":"library","bom-ref":"pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.18.2?type=jar","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"internal:SrcFile","value":".cdxgen-work/java-maven-1792026781013/src/pom.xml"}],"evidence":{"identity":[{"field":"purl","confidence":0.5,"methods":[{"technique":"manifest-analysis","confidence":0.5,"value":".cdxgen-work/java-maven-1792026781013/src/pom.xml"}],"concludedValue":".cdxgen-work/java-maven-1792026781013/src/pom.xml"}]}},{"publisher":"FasterXML","group":"com.fasterxml.jackson.core","name":"jackson-core","version":"2.18.2","description":"Core Jackson processing abstractions (aka Streaming API), implementation for JSON","scope":"required","hashes":[{"alg":"MD5","content":"bf935e6eca3a57defa13918661905cb0"},{"alg":"SHA-1","content":"fb64ccac5c27dca8819418eb4e443a9f496d9ee7"},{"alg":"SHA-256","content":"d8054ae7c0d1c2d2f55d28e46026ebe5892881f3fab5f439233184381c3b4a1f"},{"alg":"SHA-512","content":"2223f6d8235c6831b488dd2723a4569e4dab6c2371f0e39f867b57a3a443e093d1fce05dc070a350fa306d7e952888cb09c7c816254147b01083d122964fc3a5"}],"licenses":[{"license":{"id":"Apache-2.0","url":"https://opensource.org/licenses/Apache-2.0","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:maven/com.fasterxml.jackson.core/jackson-core@2.18.2?type=jar","externalReferences":[{"type":"vcs","url":"https://github.com/FasterXML/jackson-core"}],"type":"library","bom-ref":"pkg:maven/com.fasterxml.jackson.core/jackson-core@2.18.2?type=jar","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"internal:SrcFile","value":".cdxgen-work/java-maven-1792026781013/src/pom.xml"}],"evidence":{"identity":[{"field":"purl","confidence":0.5,"methods":[{"technique":"manifest-analysis","confidence":0.5,"value":".cdxgen-work/java-maven-1792026781013/src/pom.xml"}],"concludedValue":".cdxgen-work/java-maven-1792026781013/src/pom.xml"}]}},{"publisher":"The Apache Software Foundation","group":"org.apache.commons","name":"commons-lang3","version":"3.17.0","description":"Apache Commons Lang, a package of Java utility classes for the\nclasses that are in java.lang's hierarchy, or are considered to be so\nstandard as to justify existence in java.lang.\nThe code is tested using the latest revision of the JDK for supported\nLTS releases: 8, 11, 17 and 21 currently.\nSee https://github.com/apache/commons-lang/blob/master/.github/workflows/maven.yml\nPlease ensure your build environment is up-to-date and kindly report any build issues.","scope":"required","hashes":[{"alg":"MD5","content":"7730df72b7fdff4a3a32d89a314f826a"},{"alg":"SHA-1","content":"b17d2136f0460dcc0d2016ceefca8723bdf4ee70"},{"alg":"SHA-256","content":"6ee731df5c8e5a2976a1ca023b6bb320ea8d3539fbe64c8a1d5cb765127c33b4"},{"alg":"SHA-512","content":"dfd5ff7fe7f852b9caabc81e5a00e20616f98405085f059b64dc2121feb5fa6cb327e11a3d2f954c079811c31f6fd484e90f932d45078796fbfa7dbf1f1eb5aa"}],"licenses":[{"license":{"id":"Apache-2.0","url":"https://opensource.org/licenses/Apache-2.0","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:maven/org.apache.commons/commons-lang3@3.17.0?type=jar","externalReferences":[{"type":"vcs","url":"https://gitbox.apache.org/repos/asf?p=commons-lang.git"}],"type":"framework","bom-ref":"pkg:maven/org.apache.commons/commons-lang3@3.17.0?type=jar","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"internal:SrcFile","value":".cdxgen-work/java-maven-1792026781013/src/pom.xml"}],"evidence":{"identity":[{"field":"purl","confidence":0.5,"methods":[{"technique":"manifest-analysis","confidence":0.5,"value":".cdxgen-work/java-maven-1792026781013/src/pom.xml"}],"concludedValue":".cdxgen-work/java-maven-1792026781013/src/pom.xml"}]},"tags":["framework"]},{"group":"org.junit.jupiter","name":"junit-jupiter","version":"5.11.3","description":"Module \"junit-jupiter\" of JUnit 5.","scope":"optional","hashes":[{"alg":"MD5","content":"53360506b07fb4376a0cb047afae1fc6"},{"alg":"SHA-1","content":"992ed024f7cef51ef8dfb3f6828c2f8917cc9640"},{"alg":"SHA-256","content":"ac7578efed162367c3ddc006338e07d4571510fd9866642ea93d5b9e4ed2f665"},{"alg":"SHA-512","content":"0e81b4c2ac93804b2238783240ee5e578fb6fea720b111c57e3af07d53fe9a6fc5844c13dcb423bc71f08664fff0373c1d27972b8d71b2a1ffee75c06c224da2"}],"licenses":[{"license":{"id":"EPL-2.0","url":"https://opensource.org/licenses/EPL-2.0","properties":[{"name":"cdx:license:category","value":"Copyleft Limited"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:maven/org.junit.jupiter/junit-jupiter@5.11.3?type=jar","externalReferences":[{"type":"vcs","url":"https://github.com/junit-team/junit5"}],"type":"library","bom-ref":"pkg:maven/org.junit.jupiter/junit-jupiter@5.11.3?type=jar","properties":[{"name":"cdx:license:category","value":"Copyleft Limited"},{"name":"internal:SrcFile","value":".cdxgen-work/java-maven-1792026781013/src/pom.xml"}],"evidence":{"identity":[{"field":"purl","confidence":0.5,"methods":[{"technique":"manifest-analysis","confidence":0.5,"value":".cdxgen-work/java-maven-1792026781013/src/pom.xml"}],"concludedValue":".cdxgen-work/java-maven-1792026781013/src/pom.xml"}]},"tags":["test"]},{"group":"org.junit.jupiter","name":"junit-jupiter-api","version":"5.11.3","description":"Module \"junit-jupiter-api\" of JUnit 5.","scope":"optional","hashes":[{"alg":"MD5","content":"d7913a30a91e6b1e7112ee89ee189733"},{"alg":"SHA-1","content":"89b1b4f707e19ed1c594c2d782987a6954226aec"},{"alg":"SHA-256","content":"5d8147a60f49453973e250ed68701b7ff055964fe2462fc2cb1ec1d6d44889ba"},{"alg":"SHA-512","content":"9beec8b09e6ef8c0b0ca507bd755d40c42d9f8a9d1266e8fec71cd8b9072adc8c88b14d71976b50c6e03000573b9e5991c2fea41e192537e855fc076ff768261"}],"licenses":[{"license":{"id":"EPL-2.0","url":"https://opensource.org/licenses/EPL-2.0","properties":[{"name":"cdx:license:category","value":"Copyleft Limited"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:maven/org.junit.jupiter/junit-jupiter-api@5.11.3?type=jar","externalReferences":[{"type":"vcs","url":"https://github.com/junit-team/junit5"}],"type":"library","bom-ref":"pkg:maven/org.junit.jupiter/junit-jupiter-api@5.11.3?type=jar","properties":[{"name":"cdx:license:category","value":"Copyleft Limited"},{"name":"internal:SrcFile","value":".cdxgen-work/java-maven-1792026781013/src/pom.xml"}],"evidence":{"identity":[{"field":"purl","confidence":0.5,"methods":[{"technique":"manifest-analysis","confidence":0.5,"value":".cdxgen-work/java-maven-1792026781013/src/pom.xml"}],"concludedValue":".cdxgen-work/java-maven-1792026781013/src/pom.xml"}]},"tags":["test"]},{"group":"org.opentest4j","name":"opentest4j","version":"1.3.0","description":"Open Test Alliance for the JVM","scope":"optional","hashes":[{"alg":"MD5","content":"03c404f727531f3fd3b4c73997899327"},{"alg":"SHA-1","content":"152ea56b3a72f655d4fd677fc0ef2596c3dd5e6e"},{"alg":"SHA-256","content":"48e2df636cab6563ced64dcdff8abb2355627cb236ef0bf37598682ddf742f1b"},{"alg":"SHA-512","content":"78fc698a7871bb50305e3657893c10500595f043348d875f57bc39ca4a6a51eda3967b7c8c8a7ec3e8f85f2171bca4aa98823e912e416e87e81c6ba5b70a37c3"}],"licenses":[{"license":{"id":"Apache-2.0","url":"https://opensource.org/licenses/Apache-2.0","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:maven/org.opentest4j/opentest4j@1.3.0?type=jar","externalReferences":[{"type":"vcs","url":"https://github.com/ota4j-team/opentest4j"}],"type":"library","bom-ref":"pkg:maven/org.opentest4j/opentest4j@1.3.0?type=jar","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"internal:SrcFile","value":".cdxgen-work/java-maven-1792026781013/src/pom.xml"}],"evidence":{"identity":[{"field":"purl","confidence":0.5,"methods":[{"technique":"manifest-analysis","confidence":0.5,"value":".cdxgen-work/java-maven-1792026781013/src/pom.xml"}],"concludedValue":".cdxgen-work/java-maven-1792026781013/src/pom.xml"}]},"tags":["test"]},{"group":"org.junit.platform","name":"junit-platform-commons","version":"1.11.3","description":"Module \"junit-platform-commons\" of JUnit 5.","scope":"optional","hashes":[{"alg":"MD5","content":"bfacdbe7db8e069898452aae865dabac"},{"alg":"SHA-1","content":"71eaa12ce1322069c712d1d557a5e95324a8a84c"},{"alg":"SHA-256","content":"be262964b0b6b48de977c61d4f931df8cf61e80e750cc3f3a0a39cdd21c1008c"},{"alg":"SHA-512","content":"fa68fd38d25bc7d1806e9ba3306d651071b33837611a4cad601a32d9711215fc82ac2889728468b42bf40cb1cc34d2421a56eb919dfde114fe78fdf844e78bb7"}],"licenses":[{"license":{"id":"EPL-2.0","url":"https://opensource.org/licenses/EPL-2.0","properties":[{"name":"cdx:license:category","value":"Copyleft Limited"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:maven/org.junit.platform/junit-platform-commons@1.11.3?type=jar","externalReferences":[{"type":"vcs","url":"https://github.com/junit-team/junit5"}],"type":"library","bom-ref":"pkg:maven/org.junit.platform/junit-platform-commons@1.11.3?type=jar","properties":[{"name":"cdx:license:category","value":"Copyleft Limited"},{"name":"internal:SrcFile","value":".cdxgen-work/java-maven-1792026781013/src/pom.xml"}],"evidence":{"identity":[{"field":"purl","confidence":0.5,"methods":[{"technique":"manifest-analysis","confidence":0.5,"value":".cdxgen-work/java-maven-1792026781013/src/pom.xml"}],"concludedValue":".cdxgen-work/java-maven-1792026781013/src/pom.xml"}]},"tags":["test"]},{"group":"org.apiguardian","name":"apiguardian-api","version":"1.1.2","description":"@API Guardian","scope":"optional","hashes":[{"alg":"MD5","content":"8c7de3f82037fa4a2e8be2a2f13092af"},{"alg":"SHA-1","content":"a231e0d844d2721b0fa1b238006d15c6ded6842a"},{"alg":"SHA-256","content":"b509448ac506d607319f182537f0b35d71007582ec741832a1f111e5b5b70b38"},{"alg":"SHA-512","content":"d7ccd0e7019f1a997de39d66dc0ad4efe150428fdd7f4c743c93884f1602a3e90135ad34baea96d5b6d925ad6c0c8487c8e78304f0a089a12383d4a62e2c9a61"}],"licenses":[{"license":{"id":"Apache-2.0","url":"https://opensource.org/licenses/Apache-2.0","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:maven/org.apiguardian/apiguardian-api@1.1.2?type=jar","externalReferences":[{"type":"vcs","url":"https://github.com/apiguardian-team/apiguardian"}],"type":"library","bom-ref":"pkg:maven/org.apiguardian/apiguardian-api@1.1.2?type=jar","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"internal:SrcFile","value":".cdxgen-work/java-maven-1792026781013/src/pom.xml"}],"evidence":{"identity":[{"field":"purl","confidence":0.5,"methods":[{"technique":"manifest-analysis","confidence":0.5,"value":".cdxgen-work/java-maven-1792026781013/src/pom.xml"}],"concludedValue":".cdxgen-work/java-maven-1792026781013/src/pom.xml"}]}},{"group":"org.junit.jupiter","name":"junit-jupiter-params","version":"5.11.3","description":"Module \"junit-jupiter-params\" of JUnit 5.","scope":"optional","hashes":[{"alg":"MD5","content":"8ddbf9c03312dcdde492e253c59f8223"},{"alg":"SHA-1","content":"a54ff747e4ad98b1d49ee1e73f502def701516b5"},{"alg":"SHA-256","content":"0f798ebec744c4e6605fd4f2072f41a8e989e2d469e21db5aa67cf799c0b51ec"},{"alg":"SHA-512","content":"f3272fe421376e26dbea54d1500f20731abd9760aa001285b26fc00aad048bff1b94ccf5cd28e4738bf3b103d4921d300874481572b52c533b3e3f6e6ebe71e0"}],"licenses":[{"license":{"id":"EPL-2.0","url":"https://opensource.org/licenses/EPL-2.0","properties":[{"name":"cdx:license:category","value":"Copyleft Limited"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:maven/org.junit.jupiter/junit-jupiter-params@5.11.3?type=jar","externalReferences":[{"type":"vcs","url":"https://github.com/junit-team/junit5"}],"type":"library","bom-ref":"pkg:maven/org.junit.jupiter/junit-jupiter-params@5.11.3?type=jar","properties":[{"name":"cdx:license:category","value":"Copyleft Limited"},{"name":"internal:SrcFile","value":".cdxgen-work/java-maven-1792026781013/src/pom.xml"}],"evidence":{"identity":[{"field":"purl","confidence":0.5,"methods":[{"technique":"manifest-analysis","confidence":0.5,"value":".cdxgen-work/java-maven-1792026781013/src/pom.xml"}],"concludedValue":".cdxgen-work/java-maven-1792026781013/src/pom.xml"}]},"tags":["test"]},{"group":"org.junit.jupiter","name":"junit-jupiter-engine","version":"5.11.3","description":"Module \"junit-jupiter-engine\" of JUnit 5.","scope":"optional","hashes":[{"alg":"MD5","content":"86b3d12c4222b0b306bb79138efb7171"},{"alg":"SHA-1","content":"78392fae7f493f92618b837610c2915d0528b4fa"},{"alg":"SHA-256","content":"e62420c99f7c0d59a2159a2ef63e61877e9c80bd722c03ca8bf3bdcea050a589"},{"alg":"SHA-512","content":"5816bc74bc2ea181ecd386af121eb5ceac1eca0527e6f466e69281c92cbca0f2878535114a979f9f30d9ad109677763554433c7a751c898becbb2c533d67a734"}],"licenses":[{"license":{"id":"EPL-2.0","url":"https://opensource.org/licenses/EPL-2.0","properties":[{"name":"cdx:license:category","value":"Copyleft Limited"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:maven/org.junit.jupiter/junit-jupiter-engine@5.11.3?type=jar","externalReferences":[{"type":"vcs","url":"https://github.com/junit-team/junit5"}],"type":"library","bom-ref":"pkg:maven/org.junit.jupiter/junit-jupiter-engine@5.11.3?type=jar","properties":[{"name":"cdx:license:category","value":"Copyleft Limited"},{"name":"internal:SrcFile","value":".cdxgen-work/java-maven-1792026781013/src/pom.xml"}],"evidence":{"identity":[{"field":"purl","confidence":0.5,"methods":[{"technique":"manifest-analysis","confidence":0.5,"value":".cdxgen-work/java-maven-1792026781013/src/pom.xml"}],"concludedValue":".cdxgen-work/java-maven-1792026781013/src/pom.xml"}]},"tags":["test"]},{"group":"org.junit.platform","name":"junit-platform-engine","version":"1.11.3","description":"Module \"junit-platform-engine\" of JUnit 5.","scope":"optional","hashes":[{"alg":"MD5","content":"bf706e1d0755071a0d13240a3bc48a4c"},{"alg":"SHA-1","content":"b2b5f1af958609110c1f4ce055b9050fec77fbda"},{"alg":"SHA-256","content":"0043f72f611664735da8dc9a308bf12ecd2236b05339351c4741edb4d8fab0da"},{"alg":"SHA-512","content":"7c76492db1592a3ad4c9cfe82e97a9867e43acc7832a5bdb8bcc23bb00ce0df2c6687b6e89f3407c297f0bad9e0c58e768b70ca88e46c12864d1e62672b4d0f8"}],"licenses":[{"license":{"id":"EPL-2.0","url":"https://opensource.org/licenses/EPL-2.0","properties":[{"name":"cdx:license:category","value":"Copyleft Limited"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:maven/org.junit.platform/junit-platform-engine@1.11.3?type=jar","externalReferences":[{"type":"vcs","url":"https://github.com/junit-team/junit5"}],"type":"library","bom-ref":"pkg:maven/org.junit.platform/junit-platform-engine@1.11.3?type=jar","properties":[{"name":"cdx:license:category","value":"Copyleft Limited"},{"name":"internal:SrcFile","value":".cdxgen-work/java-maven-1792026781013/src/pom.xml"}],"evidence":{"identity":[{"field":"purl","confidence":0.5,"methods":[{"technique":"manifest-analysis","confidence":0.5,"value":".cdxgen-work/java-maven-1792026781013/src/pom.xml"}],"concludedValue":".cdxgen-work/java-maven-1792026781013/src/pom.xml"}]},"tags":["test"]},{"group":"org.projectlombok","name":"lombok","version":"1.18.34","description":"Spice up your java: Automatic Resource Management, automatic generation of getters, setters, equals, hashCode and toString, and more!","scope":"excluded","hashes":[{"alg":"MD5","content":"91ce91dbfa7694bff4ddc1e51643f8b2"},{"alg":"SHA-1","content":"ec547ef414ab1d2c040118fb9c1c265ada63af14"},{"alg":"SHA-256","content":"c27d6b2aff56241d1b07fcbcc6b183709e6b432c80f7374eeb1d823e86d4b81a"},{"alg":"SHA-512","content":"2276a0750ce67ae797648cadcdb43a221405cbb07012a3097a03d0965f45e7865b3a247f089060f1e83dff080594fd79a4f31f2ec69841c99b07b2371a76f3f8"}],"licenses":[{"license":{"id":"MIT","url":"https://opensource.org/licenses/MIT","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:maven/org.projectlombok/lombok@1.18.34?type=jar","externalReferences":[{"type":"vcs","url":"http://github.com/projectlombok/lombok"}],"type":"library","bom-ref":"pkg:maven/org.projectlombok/lombok@1.18.34?type=jar","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"internal:SrcFile","value":".cdxgen-work/java-maven-1792026781013/src/pom.xml"}],"evidence":{"identity":[{"field":"purl","confidence":0.5,"methods":[{"technique":"manifest-analysis","confidence":0.5,"value":".cdxgen-work/java-maven-1792026781013/src/pom.xml"}],"concludedValue":".cdxgen-work/java-maven-1792026781013/src/pom.xml"}]},"tags":["resource"]}],"services":[],"dependencies":[{"ref":"pkg:maven/com.example/java-maven@1.0.0?type=jar","dependsOn":["pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.18.2?type=jar","pkg:maven/com.google.guava/guava@33.3.1-jre?type=jar","pkg:maven/org.apache.commons/commons-lang3@3.17.0?type=jar","pkg:maven/org.apache.logging.log4j/log4j-core@2.14.1?type=jar","pkg:maven/org.junit.jupiter/junit-jupiter@5.11.3?type=jar","pkg:maven/org.projectlombok/lombok@1.18.34?type=jar"]},{"ref":"pkg:maven/org.apache.logging.log4j/log4j-core@2.14.1?type=jar","dependsOn":["pkg:maven/org.apache.logging.log4j/log4j-api@2.14.1?type=jar"]},{"ref":"pkg:maven/org.apache.logging.log4j/log4j-api@2.14.1?type=jar","dependsOn":[]},{"ref":"pkg:maven/com.google.guava/guava@33.3.1-jre?type=jar","dependsOn":["pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar","pkg:maven/com.google.errorprone/error_prone_annotations@2.28.0?type=jar","pkg:maven/com.google.guava/failureaccess@1.0.2?type=jar","pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar","pkg:maven/com.google.j2objc/j2objc-annotations@3.0.0?type=jar","pkg:maven/org.checkerframework/checker-qual@3.43.0?type=jar"]},{"ref":"pkg:maven/com.google.guava/failureaccess@1.0.2?type=jar","dependsOn":[]},{"ref":"pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar","dependsOn":[]},{"ref":"pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar","dependsOn":[]},{"ref":"pkg:maven/org.checkerframework/checker-qual@3.43.0?type=jar","dependsOn":[]},{"ref":"pkg:maven/com.google.errorprone/error_prone_annotations@2.28.0?type=jar","dependsOn":[]},{"ref":"pkg:maven/com.google.j2objc/j2objc-annotations@3.0.0?type=jar","dependsOn":[]},{"ref":"pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.18.2?type=jar","dependsOn":["pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.18.2?type=jar","pkg:maven/com.fasterxml.jackson.core/jackson-core@2.18.2?type=jar"]},{"ref":"pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.18.2?type=jar","dependsOn":[]},{"ref":"pkg:maven/com.fasterxml.jackson.core/jackson-core@2.18.2?type=jar","dependsOn":[]},{"ref":"pkg:maven/org.apache.commons/commons-lang3@3.17.0?type=jar","dependsOn":[]},{"ref":"pkg:maven/org.junit.jupiter/junit-jupiter@5.11.3?type=jar","dependsOn":["pkg:maven/org.junit.jupiter/junit-jupiter-api@5.11.3?type=jar","pkg:maven/org.junit.jupiter/junit-jupiter-engine@5.11.3?type=jar","pkg:maven/org.junit.jupiter/junit-jupiter-params@5.11.3?type=jar"]},{"ref":"pkg:maven/org.junit.jupiter/junit-jupiter-api@5.11.3?type=jar","dependsOn":["pkg:maven/org.apiguardian/apiguardian-api@1.1.2?type=jar","pkg:maven/org.junit.platform/junit-platform-commons@1.11.3?type=jar","pkg:maven/org.opentest4j/opentest4j@1.3.0?type=jar"]},{"ref":"pkg:maven/org.opentest4j/opentest4j@1.3.0?type=jar","dependsOn":[]},{"ref":"pkg:maven/org.junit.platform/junit-platform-commons@1.11.3?type=jar","dependsOn":[]},{"ref":"pkg:maven/org.apiguardian/apiguardian-api@1.1.2?type=jar","dependsOn":[]},{"ref":"pkg:maven/org.junit.jupiter/junit-jupiter-params@5.11.3?type=jar","dependsOn":[]},{"ref":"pkg:maven/org.junit.jupiter/junit-jupiter-engine@5.11.3?type=jar","dependsOn":["pkg:maven/org.junit.platform/junit-platform-engine@1.11.3?type=jar"]},{"ref":"pkg:maven/org.junit.platform/junit-platform-engine@1.11.3?type=jar","dependsOn":[]},{"ref":"pkg:maven/org.projectlombok/lombok@1.18.34?type=jar","dependsOn":[]}],"annotations":[{"bom-ref":"metadata-annotations","subjects":["pkg:maven/com.example/java-maven@1.0.0?type=jar"],"annotator":{"component":{"group":"@cdxgen","name":"cdxgen","version":"13.4.0","purl":"pkg:npm/%40cdxgen/cdxgen@13.4.0","type":"application","bom-ref":"pkg:npm/@cdxgen/cdxgen@13.4.0","publisher":"OWASP Foundation","authors":[{"name":"OWASP Foundation"}]}},"timestamp":"2026-10-15T01:13:08Z","text":"This Software Bill-of-Materials (SBOM) document was created on Thursday, October 15, 2026 with cdxgen. The data was captured during the build lifecycle phase. The document describes an application named 'java-maven' with version '1.0.0'. The package type in this SBOM is maven with 13 purl namespaces described under components. The components were identified from the source files: .cdxgen-work/java-maven-1792026781013/src/pom.xml."}]}