{
  "bomFormat" : "CycloneDX",
  "specVersion" : "1.4",
  "serialNumber" : "urn:uuid:eb853219-66b8-32a2-8bbc-4af435812d90",
  "version" : 1,
  "metadata" : {
    "tools" : [
      {
        "vendor" : "OWASP Foundation",
        "name" : "CycloneDX Maven plugin",
        "version" : "2.9.2",
        "hashes" : [
          {
            "alg" : "MD5",
            "content" : "843a7130400f75d33f563dc7e9f52dea"
          },
          {
            "alg" : "SHA-1",
            "content" : "2cac5a176b9f48801dfc4910d4f6a34bfbb13445"
          },
          {
            "alg" : "SHA-256",
            "content" : "d9e5a12bac3c1a91d85f3a1ad84307099f457ff24aa65b438ba7de9ca784a54e"
          },
          {
            "alg" : "SHA-512",
            "content" : "636f788518752c5a23d14bad41d68b0d549e4b3a3d720d66f2f6e2b8b956207942ee12abba968a1e9aac6cf1d78d9e738a4a75eeb8bc6fca2377030fbb482407"
          },
          {
            "alg" : "SHA-384",
            "content" : "72aad41633b92fadd4dbd1c6f5c1b956836b22d3b96afbdd7ca8b8eb0456eec00c2ed658e3c2d4e93d95048bcc23dac8"
          },
          {
            "alg" : "SHA3-384",
            "content" : "9837cee0f9b7d575f8d88df3ad6f58a075032ad2635e0987abbc102240327f1cec87dc062b3034009f028ab5baf988f9"
          },
          {
            "alg" : "SHA3-256",
            "content" : "4c654267cde6eb6d295dbc06b33e33528412bee57549dae89c85b8df8202dbcb"
          },
          {
            "alg" : "SHA3-512",
            "content" : "f7da73632ef2fd1c2d85f0cf5eebc2b6a3ff1ae2ed0945442e679da71490562a2ff6b67422dbd5285f4042eda6637e6f3544f62825a625b38efacfdebc8df137"
          }
        ]
      }
    ],
    "component" : {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.glassfish.hk2/hk2-api@4.0.3?type=jar",
      "publisher" : "Eclipse Foundation",
      "group" : "org.glassfish.hk2",
      "name" : "hk2-api",
      "version" : "4.0.3",
      "description" : "HK2 API module",
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        },
        {
          "license" : {
            "id" : "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl" : "pkg:maven/org.glassfish.hk2/hk2-api@4.0.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/eclipse-ee4j/glassfish-hk2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-ee4j/glassfish-hk2/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/glassfish-hk2-dev/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse-ee4j/glassfish-hk2"
        }
      ]
    },
    "properties" : [
      {
        "name" : "maven.goal",
        "value" : "makeBom"
      },
      {
        "name" : "maven.scopes",
        "value" : "compile,provided,runtime,system"
      },
      {
        "name" : "cdx:reproducible",
        "value" : "enabled"
      }
    ]
  },
  "components" : [
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.glassfish.hk2/osgi-resource-locator@3.0.0?type=jar",
      "publisher" : "Eclipse Foundation",
      "group" : "org.glassfish.hk2",
      "name" : "osgi-resource-locator",
      "version" : "3.0.0",
      "description" : "Eclipse Enterprise for Java (EE4J) is an open source initiative to create standard APIs, implementations of those APIs, and technology compatibility kits for Java runtimes that enable development, deployment, and management of server-side and cloud-native applications.",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "de9e96f2606a6f86def8659e9762c163"
        },
        {
          "alg" : "SHA-1",
          "content" : "5483c94aa9a7e16319abaec0a6c74c999678feac"
        },
        {
          "alg" : "SHA-256",
          "content" : "a1866ccfddaa29f18da5d39df662894ab2dd9902994a5000e7644f6cc1e37e55"
        },
        {
          "alg" : "SHA-512",
          "content" : "ff7e7fc1656bd6f938f69186aa6be1379aacdd4ba9724735c7613d76edf4496d5ff74589bbb83d42c98a22620c6eaa17319d77f878f206744be3e8677f3cba09"
        },
        {
          "alg" : "SHA-384",
          "content" : "65739334c0f2f3f877a4a14b4d8009711f05d37d9ab4ad3e89560c0a7635011e3dc24ab3ee31ad3f19396bc320d9962b"
        },
        {
          "alg" : "SHA3-384",
          "content" : "dc6237482f129cb62e8bc16233174d36d76c114b2a51de64505374105a7099454143d18e4e2700e34f6aa497740dcbc4"
        },
        {
          "alg" : "SHA3-256",
          "content" : "b02549e92eb21dc206488d6d7cade6f94867c537646c9ab3009fd4c119a73c2c"
        },
        {
          "alg" : "SHA3-512",
          "content" : "d0ed41c9b5d0fe75a12d8dbfa65df17e6d2380c25e52436929d9eaa8154f474e66447e518dbee445c4c94660882a20f509b6f69aff8081805802b7a34d518f1c"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        },
        {
          "license" : {
            "id" : "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl" : "pkg:maven/org.glassfish.hk2/osgi-resource-locator@3.0.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://projects.eclipse.org/projects/ee4j/hk2-extra-parent/osgi-resource-locator"
        },
        {
          "type" : "distribution",
          "url" : "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-ee4j/ee4j/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse-ee4j/glassfish-hk2-extra/osgi-resource-locator"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/jakarta.inject/jakarta.inject-api@2.0.1?type=jar",
      "publisher" : "Eclipse Foundation",
      "group" : "jakarta.inject",
      "name" : "jakarta.inject-api",
      "version" : "2.0.1",
      "description" : "Jakarta Dependency Injection",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "72003bf6efcc8455d414bbd7da86c11c"
        },
        {
          "alg" : "SHA-1",
          "content" : "4c28afe1991a941d7702fe1362c365f0a8641d1e"
        },
        {
          "alg" : "SHA-256",
          "content" : "f7dc98062fccf14126abb751b64fab12c312566e8cbdc8483598bffcea93af7c"
        },
        {
          "alg" : "SHA-512",
          "content" : "f186b2ada470abba1cc3b4f8c4373d940fb7c71a051b2c26f7c204ad4dfb69235fbf3f9c33da36d744cb90f52d921c51d76c0ff263bacb35eafb66cab83dc47d"
        },
        {
          "alg" : "SHA-384",
          "content" : "405bd297a73901f013d48a0da028d04d400f3e61f4997c0e7297eb08120670a0e242e0002db8f130c33ab16cb02feb2d"
        },
        {
          "alg" : "SHA3-384",
          "content" : "4db7e54434d0a208c876868f5595b808f2728c0455feaa752ab7b569a2186fc37cb891c9aa0076de3d08f6da6ff06eba"
        },
        {
          "alg" : "SHA3-256",
          "content" : "3a5aba9f1ff1a130b76af886123eb375fa578498490df3dc60bb7ce7d59e9404"
        },
        {
          "alg" : "SHA3-512",
          "content" : "00bba8efc2d6e7f0a509b321868d75f1aaf0681a750d089d913bde8424ab7bb88aadf49de6e291e352523e4f8c117b1b48033ff31d4d665dcc43c4c6ea000ba9"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/jakarta.inject/jakarta.inject-api@2.0.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/eclipse-ee4j/injection-api"
        },
        {
          "type" : "distribution",
          "url" : "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-ee4j/ee4j/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse-ee4j/injection-api"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.glassfish.hk2/hk2-utils@4.0.3?type=jar",
      "publisher" : "Eclipse Foundation",
      "group" : "org.glassfish.hk2",
      "name" : "hk2-utils",
      "version" : "4.0.3",
      "description" : "HK2 Implementation Utilities",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "09f2fc391f3312cef099096244b7f2c4"
        },
        {
          "alg" : "SHA-1",
          "content" : "84947f303e64efabe28bc9f309427005032bf825"
        },
        {
          "alg" : "SHA-256",
          "content" : "db8a953634e5c23bcc8a4fd122ddeb5ac29283142a08357cceb4bdcbb028897d"
        },
        {
          "alg" : "SHA-512",
          "content" : "d42dd904d0034f7162c90e0e8c3f63197d8e883f945acd400d93a43227a49233fe45521d86dc070fb6ae8c6470f9e78b6fa8330e85dd76f51ea7e42389988c84"
        },
        {
          "alg" : "SHA-384",
          "content" : "2ce8348b148437b6524c584b8ed226c5143aa818d8fdc5a00b0c08ca6c7ed3130bcfdb558ca431dff47c73a72aa1d25c"
        },
        {
          "alg" : "SHA3-384",
          "content" : "98bc1130d6e52bc8567ded18d6c951d9a1d2756f20a9070f79f66329a6d64894704a201ad9071df48dd8688de70d95b1"
        },
        {
          "alg" : "SHA3-256",
          "content" : "0dbe0f205f044af22b8132192da6a863a649b9c8b153849f45185b595eec9f28"
        },
        {
          "alg" : "SHA3-512",
          "content" : "1d2f7095151d71afc37f89ed9c388caf0df192c548a8aabe5eacb2d9e8b7ab0d309e9e02f9990a66106eb3230b3b690344353f53c2d7afdc845df6fbb627a67b"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        },
        {
          "license" : {
            "id" : "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl" : "pkg:maven/org.glassfish.hk2/hk2-utils@4.0.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/eclipse-ee4j/glassfish-hk2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-ee4j/glassfish-hk2/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/glassfish-hk2-dev/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse-ee4j/glassfish-hk2"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/jakarta.annotation/jakarta.annotation-api@3.0.0?type=jar",
      "publisher" : "Eclipse Foundation",
      "group" : "jakarta.annotation",
      "name" : "jakarta.annotation-api",
      "version" : "3.0.0",
      "description" : "Jakarta Annotations API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "7faffaab962918da4cf5ddfd76609dd2"
        },
        {
          "alg" : "SHA-1",
          "content" : "54f928fadec906a99d558536756d171917b9d936"
        },
        {
          "alg" : "SHA-256",
          "content" : "b01f55552284cfb149411e64eabca75e942d26d2e1786b32914250e4330afaa2"
        },
        {
          "alg" : "SHA-512",
          "content" : "2bd5a16684c4e8144897ba6dc467628d1b8a85326235240e4c20101b6df3681d23aeebc30ca99e395ec848f33cb5244085031b2a0fbce746c8ede7148a5e7c1d"
        },
        {
          "alg" : "SHA-384",
          "content" : "1a12cb78019d310eb08314f863c2a0e48aa2845bde844f8204e653ec50713bf135cc58cce882e14ef631327952b5ad99"
        },
        {
          "alg" : "SHA3-384",
          "content" : "a0dd7dd32e8dc5ed679589f6066f16593b52334b9947a71381aeab44b3cbe295ec24dfef4fbfa5514ba24ea60fe042a9"
        },
        {
          "alg" : "SHA3-256",
          "content" : "6ae915a05b483f75c51f3a109cf368842d186b2996758b8a106377a7a9485c12"
        },
        {
          "alg" : "SHA3-512",
          "content" : "52f611aa0a98812e525be2b9d5a5712aef660598cff64282dbd9afc237560f442ab745fc95c919216f9cb4197c224ba6c7317282962c638fee956925bfa031c0"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        },
        {
          "license" : {
            "id" : "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl" : "pkg:maven/jakarta.annotation/jakarta.annotation-api@3.0.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://projects.eclipse.org/projects/ee4j.ca"
        },
        {
          "type" : "distribution",
          "url" : "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/jakartaee/common-annotations-api/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/ca-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/jakartaee/common-annotations-api"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.glassfish.hk2.external/aopalliance-repackaged@4.0.3?type=jar",
      "publisher" : "Eclipse Foundation",
      "group" : "org.glassfish.hk2.external",
      "name" : "aopalliance-repackaged",
      "version" : "4.0.3",
      "description" : "Dependency Injection Kernel",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "899e3540610595a35d2a941bf413d520"
        },
        {
          "alg" : "SHA-1",
          "content" : "ae9a15978dddd6a2f13f1cb84dda81ab27e50876"
        },
        {
          "alg" : "SHA-256",
          "content" : "aeb7d67b20730a1533448083dd5d6d6c837e577b10ccf1e534cf0951bc573470"
        },
        {
          "alg" : "SHA-512",
          "content" : "8bc2f38a7791004e625ce5cc2b3c82a48717c41e9812fbe7a306fd68fa2cee858459d4a6ac97dedc35394446f7386bacd18eddd2688775e201b48aff5b22067c"
        },
        {
          "alg" : "SHA-384",
          "content" : "a28839c268eb452b12169c37b42fae2211ec1066eaf125e511167616809e3ff31f3222dca162f941a4715484e497c26e"
        },
        {
          "alg" : "SHA3-384",
          "content" : "d7d6a679ec5d1fcabc69c763e35a8514b641c1786a80a2aa8ddd3f944cebea57d72fdb91924ec93ba31fd3ee784157d9"
        },
        {
          "alg" : "SHA3-256",
          "content" : "b62035ca9f191615588931a99183580ba71bbc48a02c41d2c5545908454dc83d"
        },
        {
          "alg" : "SHA3-512",
          "content" : "187983797c304cf590033d2d6c8ca3a0ba887887ad8f6f1cb45e81859b01ff7db0fe784dc43c4d7fe788bab9dd03a273bfcf44ded67d3c2d5b61676f8ef57b8e"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        },
        {
          "license" : {
            "id" : "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl" : "pkg:maven/org.glassfish.hk2.external/aopalliance-repackaged@4.0.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/eclipse-ee4j/glassfish-hk2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-ee4j/glassfish-hk2/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/glassfish-hk2-dev/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse-ee4j/glassfish-hk2"
        }
      ]
    }
  ],
  "dependencies" : [
    {
      "ref" : "pkg:maven/org.glassfish.hk2/hk2-api@4.0.3?type=jar",
      "dependsOn" : [
        "pkg:maven/org.glassfish.hk2/osgi-resource-locator@3.0.0?type=jar",
        "pkg:maven/jakarta.inject/jakarta.inject-api@2.0.1?type=jar",
        "pkg:maven/org.glassfish.hk2/hk2-utils@4.0.3?type=jar",
        "pkg:maven/org.glassfish.hk2.external/aopalliance-repackaged@4.0.3?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.glassfish.hk2/osgi-resource-locator@3.0.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/jakarta.inject/jakarta.inject-api@2.0.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.glassfish.hk2/hk2-utils@4.0.3?type=jar",
      "dependsOn" : [
        "pkg:maven/jakarta.annotation/jakarta.annotation-api@3.0.0?type=jar",
        "pkg:maven/jakarta.inject/jakarta.inject-api@2.0.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/jakarta.annotation/jakarta.annotation-api@3.0.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.glassfish.hk2.external/aopalliance-repackaged@4.0.3?type=jar",
      "dependsOn" : [ ]
    }
  ]
}