{ "bomFormat" : "CycloneDX", "specVersion" : "1.4", "serialNumber" : "urn:uuid:f938b8d7-f61e-40cc-a8e5-1ce3f18755aa", "version" : 1, "metadata" : { "timestamp" : "2023-05-18T20:15:18Z", "tools" : [ { "vendor" : "OWASP Foundation", "name" : "CycloneDX Maven plugin", "version" : "2.7.9", "hashes" : [ { "alg" : "MD5", "content" : "8e595cdb67f17e4b41e046456970591d" }, { "alg" : "SHA-1", "content" : "69e8ca804520d09ce4657e7235bae84d01cbffa6" }, { "alg" : "SHA-256", "content" : "aa09074fe5aa403c008cd4fc7ef8ce41cd244489337f16b3e91a3914158a4db8" }, { "alg" : "SHA-512", "content" : "1488a8112da8e675813d7585f57c5efb178aed32901118186ee12d0e4ae3d19c53774c7f860bf70d17d70f050119b69443a2637cf641675b4b5d9cdcdd69b89b" }, { "alg" : "SHA-384", "content" : "b097295dfbf10887abc6eec58d4d0822cde5a73d1f5c1cf183a57bf569016ad5ced9d34efae3e574d82bb62837540c6c" }, { "alg" : "SHA3-384", "content" : "289f9520bd73a2031276248a6ef8f0891c691062c2d1ea86a2bc9ea8db2c52377d92a53be9957179e71aee3deda26a8c" }, { "alg" : "SHA3-256", "content" : "32b50a7efe5d491a4039c0017eca3cf49d98b55fc66d06b3dd06209487323474" }, { "alg" : "SHA3-512", "content" : "1daf813da53e5d5cda4d0302ff3a5e388aa45d96ebe6dcbe240f35d33f14b1e6390f6bbe7f21f3ed8cf96ebd9f5516a08b18487b7339715109c81cebfc1563df" } ] } ], "component" : { "group" : "org.eclipse.dash", "name" : "eclipse-api-for-java", "version" : "1.0.0", "description" : "The Eclipse API for Java provides a lightweight Java interface to the Eclipse API.", "licenses" : [ { "license" : { "id" : "EPL-2.0", "url" : "https://www.eclipse.org/legal/epl-2.0" } } ], "purl" : "pkg:maven/org.eclipse.dash/eclipse-api-for-java@1.0.0?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://gitlab.eclipse.org/eclipse/technology/dash/eclipse-api-for-java" }, { "type" : "distribution", "url" : "https://repo.eclipse.org/content/repositories/dash-licenses-releases/" }, { "type" : "issue-tracker", "url" : "https://gitlab.eclipse.org/eclipse/technology/dash/eclipse-api-for-java/-/issues" }, { "type" : "vcs", "url" : "https://gitlab.eclipse.org/eclipse/technology/dash/eclipse-api-for-java.git" } ], "type" : "library", "bom-ref" : "pkg:maven/org.eclipse.dash/eclipse-api-for-java@1.0.0?type=jar" }, "properties" : [ { "name" : "maven.goal", "value" : "makeAggregateBom" }, { "name" : "maven.scopes", "value" : "compile,provided,runtime,system" } ] }, "components" : [ { "publisher" : "Eclipse Foundation", "group" : "org.glassfish", "name" : "jakarta.json", "version" : "2.0.0", "description" : "Default provider for Jakarta JSON Processing", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "0efb04266b02592f102bd95d5dec96b6" }, { "alg" : "SHA-1", "content" : "4c4a7c5cdcc038c2da2901f35fd8b27c27ffea20" }, { "alg" : "SHA-256", "content" : "642135f9b9bbe419e7e5d90d8254667f1ae1fb55d46b8294aaf2b3c4e15f9ec6" }, { "alg" : "SHA-512", "content" : "133a8a01aa991228de2dad6c1609af3fdfffac77346efa187ec30a20e352df93a977f67b36bd2771a3d2d1c4617520747e846b7bff5f8dc594aedec1b21d8454" }, { "alg" : "SHA-384", "content" : "53077d855e1499158b9ff150d60d5d55c39c26c513b32d86efc5d10517807b277c5e926af9337f2164dfb06233dbac0b" }, { "alg" : "SHA3-384", "content" : "f21e2b81228f9259d0079aa40788d0a8abe8b21f2ba0f3a8e220914b3078a10a4360b2e202c71790cf0cfccac025e4c8" }, { "alg" : "SHA3-256", "content" : "6d4e7a853bc5b96f4cfa4d3f456a673b33570819038b5caa8ec4670782f3957e" }, { "alg" : "SHA3-512", "content" : "f2f00b203bf88a33d35a463794267f8f3cba4d1109f67f8be5f6187113c1c1f6d4c878af65f10634c60043227d8f68178ad1e3c827c659940638e32b9986a67b" } ], "licenses" : [ { "license" : { "id" : "EPL-2.0", "url" : "https://www.eclipse.org/legal/epl-2.0" } }, { "license" : { "name" : "GNU General Public License, version 2 with the GNU Classpath Exception", "url" : "https://projects.eclipse.org/license/secondary-gpl-2.0-cp" } } ], "purl" : "pkg:maven/org.glassfish/jakarta.json@2.0.0?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://github.com/eclipse-ee4j/jsonp" }, { "type" : "distribution", "url" : "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type" : "issue-tracker", "url" : "https://github.com/eclipse-ee4j/ee4j/issues" }, { "type" : "mailing-list", "url" : "https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/" }, { "type" : "vcs", "url" : "https://github.com/eclipse-ee4j/jsonp/jakarta.json" } ], "type" : "library", "bom-ref" : "pkg:maven/org.glassfish/jakarta.json@2.0.0?type=jar" }, { "publisher" : "QOS.ch", "group" : "org.slf4j", "name" : "slf4j-api", "version" : "1.7.36", "description" : "The slf4j API", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "872da51f5de7f3923da4de871d57fd85" }, { "alg" : "SHA-1", "content" : "6c62681a2f655b49963a5983b8b0950a6120ae14" }, { "alg" : "SHA-256", "content" : "d3ef575e3e4979678dc01bf1dcce51021493b4d11fb7f1be8ad982877c16a1c0" }, { "alg" : "SHA-512", "content" : "f9b033fc019a44f98b16048da7e2b59edd4a6a527ba60e358f65ab88e0afae03a9340f1b3e8a543d49fa542290f499c5594259affa1ff3e6e7bf3b428d4c610b" }, { "alg" : "SHA-384", "content" : "2b14ad035877087157e379d3277dcdcd79e58d6bdb147c47d29e377d75ce53ad42cafbf22f5fb7827c7e946ff4876b9a" }, { "alg" : "SHA3-384", "content" : "3bc3110dafb8d5be16a39f3b2671a466463cd99eb39610c0e4719a7bf2d928f2ea213c734887c6926a07c4cca7769e4b" }, { "alg" : "SHA3-256", "content" : "ba2608179fcf46e2291a90b9cbb4aa30d718e481f59c350cc21c73b88d826881" }, { "alg" : "SHA3-512", "content" : "14c4edcd19702ef607d78826839d8a6d3a39157df54b89a801d3d3cbbe1307131a77671b041c761122730fb1387888c5ec2e46bdd80e1cb07f8f144676441824" } ], "licenses" : [ { "license" : { "id" : "MIT", "url" : "https://opensource.org/licenses/MIT" } } ], "purl" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar", "externalReferences" : [ { "type" : "website", "url" : "http://www.slf4j.org" }, { "type" : "distribution", "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type" : "vcs", "url" : "https://github.com/qos-ch/slf4j/slf4j-api" } ], "type" : "library", "bom-ref" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar" }, { "publisher" : "QOS.ch", "group" : "org.slf4j", "name" : "slf4j-simple", "version" : "1.7.36", "description" : "SLF4J Simple binding", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "fd4a5fa54910b5ee561f639c903cf34a" }, { "alg" : "SHA-1", "content" : "a41f9cfe6faafb2eb83a1c7dd2d0dfd844e2a936" }, { "alg" : "SHA-256", "content" : "2f39bed943d624dfa8f4102d0571283a10870b6aa36f197a8a506f147010c10f" }, { "alg" : "SHA-512", "content" : "cdcebe8fa58527a1bc7da0c18e90a9547ce8ac99cccfe5657860c2a25478c030ea758251da3e32a71eab9cbb91360692b5c6c5887a1f1597d1fda07151b27e5f" }, { "alg" : "SHA-384", "content" : "57eb6d0c778ad9637a819fe64ab6a7b5e291c1c2e5e9a8f536c553e54837fe0e26b9ef5a83ce25c7e3e7e8c5d455ab24" }, { "alg" : "SHA3-384", "content" : "15809f42dc66ec21d8d931c2e10cbb1c2c7c580678c1946a0e4fc8b5c7cec5ff001a5551979693a59fbfa1420ba0c038" }, { "alg" : "SHA3-256", "content" : "a313022d52742de983fa574ebaaf3c6fbb173b0d823a6c31b2a22f429e03a428" }, { "alg" : "SHA3-512", "content" : "335556e92ec298e2db4e2aa6d4cff0f61fdee178f8889c84db35b9236f08c4c371cc7ff27a77b16699d531111d0eb3ead3696738ed2bd726f75add07f2c51017" } ], "licenses" : [ { "license" : { "id" : "MIT", "url" : "https://opensource.org/licenses/MIT" } } ], "purl" : "pkg:maven/org.slf4j/slf4j-simple@1.7.36?type=jar", "externalReferences" : [ { "type" : "website", "url" : "http://www.slf4j.org" }, { "type" : "distribution", "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type" : "vcs", "url" : "https://github.com/qos-ch/slf4j/slf4j-simple" } ], "type" : "library", "bom-ref" : "pkg:maven/org.slf4j/slf4j-simple@1.7.36?type=jar" } ], "dependencies" : [ { "ref" : "pkg:maven/org.eclipse.dash/eclipse-api-for-java@1.0.0?type=jar", "dependsOn" : [ "pkg:maven/org.glassfish/jakarta.json@2.0.0?type=jar", "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar", "pkg:maven/org.slf4j/slf4j-simple@1.7.36?type=jar" ] }, { "ref" : "pkg:maven/org.glassfish/jakarta.json@2.0.0?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/org.slf4j/slf4j-simple@1.7.36?type=jar", "dependsOn" : [ "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar" ] } ] }