<?xml version="1.0" encoding="UTF-8"?>
<bom serialNumber="urn:uuid:eb853219-66b8-32a2-8bbc-4af435812d90" version="1" xmlns="http://cyclonedx.org/schema/bom/1.4">
  <metadata>
    <tools>
      <tool>
        <vendor>OWASP Foundation</vendor>
        <name>CycloneDX Maven plugin</name>
        <version>2.9.2</version>
        <hashes>
          <hash alg="MD5">843a7130400f75d33f563dc7e9f52dea</hash>
          <hash alg="SHA-1">2cac5a176b9f48801dfc4910d4f6a34bfbb13445</hash>
          <hash alg="SHA-256">d9e5a12bac3c1a91d85f3a1ad84307099f457ff24aa65b438ba7de9ca784a54e</hash>
          <hash alg="SHA-512">636f788518752c5a23d14bad41d68b0d549e4b3a3d720d66f2f6e2b8b956207942ee12abba968a1e9aac6cf1d78d9e738a4a75eeb8bc6fca2377030fbb482407</hash>
          <hash alg="SHA-384">72aad41633b92fadd4dbd1c6f5c1b956836b22d3b96afbdd7ca8b8eb0456eec00c2ed658e3c2d4e93d95048bcc23dac8</hash>
          <hash alg="SHA3-384">9837cee0f9b7d575f8d88df3ad6f58a075032ad2635e0987abbc102240327f1cec87dc062b3034009f028ab5baf988f9</hash>
          <hash alg="SHA3-256">4c654267cde6eb6d295dbc06b33e33528412bee57549dae89c85b8df8202dbcb</hash>
          <hash alg="SHA3-512">f7da73632ef2fd1c2d85f0cf5eebc2b6a3ff1ae2ed0945442e679da71490562a2ff6b67422dbd5285f4042eda6637e6f3544f62825a625b38efacfdebc8df137</hash>
        </hashes>
      </tool>
    </tools>
    <component type="library" bom-ref="pkg:maven/org.glassfish.hk2/hk2-api@4.0.3?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>org.glassfish.hk2</group>
      <name>hk2-api</name>
      <version>4.0.3</version>
      <description>HK2 API module</description>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
        <license>
          <id>GPL-2.0-with-classpath-exception</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.glassfish.hk2/hk2-api@4.0.3?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/eclipse-ee4j/glassfish-hk2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/eclipse-ee4j/glassfish-hk2/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://dev.eclipse.org/mhonarc/lists/glassfish-hk2-dev/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/eclipse-ee4j/glassfish-hk2</url>
        </reference>
      </externalReferences>
    </component>
    <properties>
      <property name="maven.goal">makeBom</property>
      <property name="maven.scopes">compile,provided,runtime,system</property>
      <property name="cdx:reproducible">enabled</property>
    </properties>
  </metadata>
  <components>
    <component type="library" bom-ref="pkg:maven/org.glassfish.hk2/osgi-resource-locator@3.0.0?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>org.glassfish.hk2</group>
      <name>osgi-resource-locator</name>
      <version>3.0.0</version>
      <description>Eclipse Enterprise for Java (EE4J) is an open source initiative to create standard APIs,
        implementations of those APIs, and technology compatibility kits for Java runtimes
        that enable development, deployment, and management of server-side and cloud-native applications.</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">de9e96f2606a6f86def8659e9762c163</hash>
        <hash alg="SHA-1">5483c94aa9a7e16319abaec0a6c74c999678feac</hash>
        <hash alg="SHA-256">a1866ccfddaa29f18da5d39df662894ab2dd9902994a5000e7644f6cc1e37e55</hash>
        <hash alg="SHA-512">ff7e7fc1656bd6f938f69186aa6be1379aacdd4ba9724735c7613d76edf4496d5ff74589bbb83d42c98a22620c6eaa17319d77f878f206744be3e8677f3cba09</hash>
        <hash alg="SHA-384">65739334c0f2f3f877a4a14b4d8009711f05d37d9ab4ad3e89560c0a7635011e3dc24ab3ee31ad3f19396bc320d9962b</hash>
        <hash alg="SHA3-384">dc6237482f129cb62e8bc16233174d36d76c114b2a51de64505374105a7099454143d18e4e2700e34f6aa497740dcbc4</hash>
        <hash alg="SHA3-256">b02549e92eb21dc206488d6d7cade6f94867c537646c9ab3009fd4c119a73c2c</hash>
        <hash alg="SHA3-512">d0ed41c9b5d0fe75a12d8dbfa65df17e6d2380c25e52436929d9eaa8154f474e66447e518dbee445c4c94660882a20f509b6f69aff8081805802b7a34d518f1c</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
        <license>
          <id>GPL-2.0-with-classpath-exception</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.glassfish.hk2/osgi-resource-locator@3.0.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://projects.eclipse.org/projects/ee4j/hk2-extra-parent/osgi-resource-locator</url>
        </reference>
        <reference type="distribution">
          <url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/eclipse-ee4j/ee4j/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/eclipse-ee4j/glassfish-hk2-extra/osgi-resource-locator</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/jakarta.inject/jakarta.inject-api@2.0.1?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>jakarta.inject</group>
      <name>jakarta.inject-api</name>
      <version>2.0.1</version>
      <description>Jakarta Dependency Injection</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">72003bf6efcc8455d414bbd7da86c11c</hash>
        <hash alg="SHA-1">4c28afe1991a941d7702fe1362c365f0a8641d1e</hash>
        <hash alg="SHA-256">f7dc98062fccf14126abb751b64fab12c312566e8cbdc8483598bffcea93af7c</hash>
        <hash alg="SHA-512">f186b2ada470abba1cc3b4f8c4373d940fb7c71a051b2c26f7c204ad4dfb69235fbf3f9c33da36d744cb90f52d921c51d76c0ff263bacb35eafb66cab83dc47d</hash>
        <hash alg="SHA-384">405bd297a73901f013d48a0da028d04d400f3e61f4997c0e7297eb08120670a0e242e0002db8f130c33ab16cb02feb2d</hash>
        <hash alg="SHA3-384">4db7e54434d0a208c876868f5595b808f2728c0455feaa752ab7b569a2186fc37cb891c9aa0076de3d08f6da6ff06eba</hash>
        <hash alg="SHA3-256">3a5aba9f1ff1a130b76af886123eb375fa578498490df3dc60bb7ce7d59e9404</hash>
        <hash alg="SHA3-512">00bba8efc2d6e7f0a509b321868d75f1aaf0681a750d089d913bde8424ab7bb88aadf49de6e291e352523e4f8c117b1b48033ff31d4d665dcc43c4c6ea000ba9</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/jakarta.inject/jakarta.inject-api@2.0.1?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/eclipse-ee4j/injection-api</url>
        </reference>
        <reference type="distribution">
          <url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/eclipse-ee4j/ee4j/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/eclipse-ee4j/injection-api</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.glassfish.hk2/hk2-utils@4.0.3?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>org.glassfish.hk2</group>
      <name>hk2-utils</name>
      <version>4.0.3</version>
      <description>HK2 Implementation Utilities</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">09f2fc391f3312cef099096244b7f2c4</hash>
        <hash alg="SHA-1">84947f303e64efabe28bc9f309427005032bf825</hash>
        <hash alg="SHA-256">db8a953634e5c23bcc8a4fd122ddeb5ac29283142a08357cceb4bdcbb028897d</hash>
        <hash alg="SHA-512">d42dd904d0034f7162c90e0e8c3f63197d8e883f945acd400d93a43227a49233fe45521d86dc070fb6ae8c6470f9e78b6fa8330e85dd76f51ea7e42389988c84</hash>
        <hash alg="SHA-384">2ce8348b148437b6524c584b8ed226c5143aa818d8fdc5a00b0c08ca6c7ed3130bcfdb558ca431dff47c73a72aa1d25c</hash>
        <hash alg="SHA3-384">98bc1130d6e52bc8567ded18d6c951d9a1d2756f20a9070f79f66329a6d64894704a201ad9071df48dd8688de70d95b1</hash>
        <hash alg="SHA3-256">0dbe0f205f044af22b8132192da6a863a649b9c8b153849f45185b595eec9f28</hash>
        <hash alg="SHA3-512">1d2f7095151d71afc37f89ed9c388caf0df192c548a8aabe5eacb2d9e8b7ab0d309e9e02f9990a66106eb3230b3b690344353f53c2d7afdc845df6fbb627a67b</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
        <license>
          <id>GPL-2.0-with-classpath-exception</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.glassfish.hk2/hk2-utils@4.0.3?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/eclipse-ee4j/glassfish-hk2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/eclipse-ee4j/glassfish-hk2/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://dev.eclipse.org/mhonarc/lists/glassfish-hk2-dev/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/eclipse-ee4j/glassfish-hk2</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/jakarta.annotation/jakarta.annotation-api@3.0.0?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>jakarta.annotation</group>
      <name>jakarta.annotation-api</name>
      <version>3.0.0</version>
      <description>Jakarta Annotations API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">7faffaab962918da4cf5ddfd76609dd2</hash>
        <hash alg="SHA-1">54f928fadec906a99d558536756d171917b9d936</hash>
        <hash alg="SHA-256">b01f55552284cfb149411e64eabca75e942d26d2e1786b32914250e4330afaa2</hash>
        <hash alg="SHA-512">2bd5a16684c4e8144897ba6dc467628d1b8a85326235240e4c20101b6df3681d23aeebc30ca99e395ec848f33cb5244085031b2a0fbce746c8ede7148a5e7c1d</hash>
        <hash alg="SHA-384">1a12cb78019d310eb08314f863c2a0e48aa2845bde844f8204e653ec50713bf135cc58cce882e14ef631327952b5ad99</hash>
        <hash alg="SHA3-384">a0dd7dd32e8dc5ed679589f6066f16593b52334b9947a71381aeab44b3cbe295ec24dfef4fbfa5514ba24ea60fe042a9</hash>
        <hash alg="SHA3-256">6ae915a05b483f75c51f3a109cf368842d186b2996758b8a106377a7a9485c12</hash>
        <hash alg="SHA3-512">52f611aa0a98812e525be2b9d5a5712aef660598cff64282dbd9afc237560f442ab745fc95c919216f9cb4197c224ba6c7317282962c638fee956925bfa031c0</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
        <license>
          <id>GPL-2.0-with-classpath-exception</id>
        </license>
      </licenses>
      <purl>pkg:maven/jakarta.annotation/jakarta.annotation-api@3.0.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://projects.eclipse.org/projects/ee4j.ca</url>
        </reference>
        <reference type="distribution">
          <url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/jakartaee/common-annotations-api/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://dev.eclipse.org/mhonarc/lists/ca-dev</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/jakartaee/common-annotations-api</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.glassfish.hk2.external/aopalliance-repackaged@4.0.3?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>org.glassfish.hk2.external</group>
      <name>aopalliance-repackaged</name>
      <version>4.0.3</version>
      <description>Dependency Injection Kernel</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">899e3540610595a35d2a941bf413d520</hash>
        <hash alg="SHA-1">ae9a15978dddd6a2f13f1cb84dda81ab27e50876</hash>
        <hash alg="SHA-256">aeb7d67b20730a1533448083dd5d6d6c837e577b10ccf1e534cf0951bc573470</hash>
        <hash alg="SHA-512">8bc2f38a7791004e625ce5cc2b3c82a48717c41e9812fbe7a306fd68fa2cee858459d4a6ac97dedc35394446f7386bacd18eddd2688775e201b48aff5b22067c</hash>
        <hash alg="SHA-384">a28839c268eb452b12169c37b42fae2211ec1066eaf125e511167616809e3ff31f3222dca162f941a4715484e497c26e</hash>
        <hash alg="SHA3-384">d7d6a679ec5d1fcabc69c763e35a8514b641c1786a80a2aa8ddd3f944cebea57d72fdb91924ec93ba31fd3ee784157d9</hash>
        <hash alg="SHA3-256">b62035ca9f191615588931a99183580ba71bbc48a02c41d2c5545908454dc83d</hash>
        <hash alg="SHA3-512">187983797c304cf590033d2d6c8ca3a0ba887887ad8f6f1cb45e81859b01ff7db0fe784dc43c4d7fe788bab9dd03a273bfcf44ded67d3c2d5b61676f8ef57b8e</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
        <license>
          <id>GPL-2.0-with-classpath-exception</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.glassfish.hk2.external/aopalliance-repackaged@4.0.3?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/eclipse-ee4j/glassfish-hk2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/eclipse-ee4j/glassfish-hk2/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://dev.eclipse.org/mhonarc/lists/glassfish-hk2-dev/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/eclipse-ee4j/glassfish-hk2</url>
        </reference>
      </externalReferences>
    </component>
  </components>
  <dependencies>
    <dependency ref="pkg:maven/org.glassfish.hk2/hk2-api@4.0.3?type=jar">
      <dependency ref="pkg:maven/org.glassfish.hk2/osgi-resource-locator@3.0.0?type=jar"/>
      <dependency ref="pkg:maven/jakarta.inject/jakarta.inject-api@2.0.1?type=jar"/>
      <dependency ref="pkg:maven/org.glassfish.hk2/hk2-utils@4.0.3?type=jar"/>
      <dependency ref="pkg:maven/org.glassfish.hk2.external/aopalliance-repackaged@4.0.3?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.glassfish.hk2/osgi-resource-locator@3.0.0?type=jar"/>
    <dependency ref="pkg:maven/jakarta.inject/jakarta.inject-api@2.0.1?type=jar"/>
    <dependency ref="pkg:maven/org.glassfish.hk2/hk2-utils@4.0.3?type=jar">
      <dependency ref="pkg:maven/jakarta.annotation/jakarta.annotation-api@3.0.0?type=jar"/>
      <dependency ref="pkg:maven/jakarta.inject/jakarta.inject-api@2.0.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/jakarta.annotation/jakarta.annotation-api@3.0.0?type=jar"/>
    <dependency ref="pkg:maven/org.glassfish.hk2.external/aopalliance-repackaged@4.0.3?type=jar"/>
  </dependencies>
</bom>
