<?xml version="1.0" encoding="UTF-8"?>
<bom serialNumber="urn:uuid:e0c827fd-96dc-31b3-9621-cc59f9ada5d3" version="1" xmlns="http://cyclonedx.org/schema/bom/1.4">
  <metadata>
    <tools>
      <tool>
        <vendor>OWASP Foundation</vendor>
        <name>CycloneDX Maven plugin</name>
        <version>2.9.2</version>
        <hashes>
          <hash alg="MD5">843a7130400f75d33f563dc7e9f52dea</hash>
          <hash alg="SHA-1">2cac5a176b9f48801dfc4910d4f6a34bfbb13445</hash>
          <hash alg="SHA-256">d9e5a12bac3c1a91d85f3a1ad84307099f457ff24aa65b438ba7de9ca784a54e</hash>
          <hash alg="SHA-512">636f788518752c5a23d14bad41d68b0d549e4b3a3d720d66f2f6e2b8b956207942ee12abba968a1e9aac6cf1d78d9e738a4a75eeb8bc6fca2377030fbb482407</hash>
          <hash alg="SHA-384">72aad41633b92fadd4dbd1c6f5c1b956836b22d3b96afbdd7ca8b8eb0456eec00c2ed658e3c2d4e93d95048bcc23dac8</hash>
          <hash alg="SHA3-384">9837cee0f9b7d575f8d88df3ad6f58a075032ad2635e0987abbc102240327f1cec87dc062b3034009f028ab5baf988f9</hash>
          <hash alg="SHA3-256">4c654267cde6eb6d295dbc06b33e33528412bee57549dae89c85b8df8202dbcb</hash>
          <hash alg="SHA3-512">f7da73632ef2fd1c2d85f0cf5eebc2b6a3ff1ae2ed0945442e679da71490562a2ff6b67422dbd5285f4042eda6637e6f3544f62825a625b38efacfdebc8df137</hash>
        </hashes>
      </tool>
    </tools>
    <component type="library" bom-ref="pkg:maven/org.glassfish.hk2/hk2-core@4.0.3?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>org.glassfish.hk2</group>
      <name>hk2-core</name>
      <version>4.0.3</version>
      <description>Dependency Injection Kernel</description>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
        <license>
          <id>GPL-2.0-with-classpath-exception</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.glassfish.hk2/hk2-core@4.0.3?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/eclipse-ee4j/glassfish-hk2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/eclipse-ee4j/glassfish-hk2/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://dev.eclipse.org/mhonarc/lists/glassfish-hk2-dev/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/eclipse-ee4j/glassfish-hk2</url>
        </reference>
      </externalReferences>
    </component>
    <properties>
      <property name="maven.goal">makeBom</property>
      <property name="maven.scopes">compile,provided,runtime,system</property>
      <property name="cdx:reproducible">enabled</property>
    </properties>
  </metadata>
  <components>
    <component type="library" bom-ref="pkg:maven/org.glassfish.hk2/hk2-locator@4.0.3?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>org.glassfish.hk2</group>
      <name>hk2-locator</name>
      <version>4.0.3</version>
      <description>ServiceLocator Default Implementation</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">e59792f8de32596a026197ca4f3d45c0</hash>
        <hash alg="SHA-1">026fc0e62497343180f2f21866afdb4d9d30e17d</hash>
        <hash alg="SHA-256">738c5a5713240bc2b2d4adad1df0a0480a6111dc32ccc2ff1a0f5f3db8800f45</hash>
        <hash alg="SHA-512">842d1542a23003b4d7e0db605c8c8b9770a3b724966187b43bf2613918f3c8a6d782e41b4526e88440b1a3831c55c549c15d0d8da85d1e399637ad11c5f17710</hash>
        <hash alg="SHA-384">39aeda67a15b427cb570d361a72055a9e21ae75b3ff078773daa164d5039a647e31a54befa0fefaf25f4d171913db5f8</hash>
        <hash alg="SHA3-384">26010d7c6a2bb75c1e724f339b8642260b3cebf1cbb33c78c8c154660913f44981e14e4699985a177489f9c6076e21a6</hash>
        <hash alg="SHA3-256">3f05cb03e256d256aef9588d7436ec425be74b22e49b2b2d3feefc0ed5fafabb</hash>
        <hash alg="SHA3-512">48444e151c1daa156becc55e3b42843cfb4ff641221afe2b7bfc45c0e00b12c391166dab1ea600f1e25e881a6c45524e2d2431cecb2fbad2d3e185f347d1cbff</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
        <license>
          <id>GPL-2.0-with-classpath-exception</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.glassfish.hk2/hk2-locator@4.0.3?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/eclipse-ee4j/glassfish-hk2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/eclipse-ee4j/glassfish-hk2/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://dev.eclipse.org/mhonarc/lists/glassfish-hk2-dev/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/eclipse-ee4j/glassfish-hk2</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/jakarta.inject/jakarta.inject-api@2.0.1?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>jakarta.inject</group>
      <name>jakarta.inject-api</name>
      <version>2.0.1</version>
      <description>Jakarta Dependency Injection</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">72003bf6efcc8455d414bbd7da86c11c</hash>
        <hash alg="SHA-1">4c28afe1991a941d7702fe1362c365f0a8641d1e</hash>
        <hash alg="SHA-256">f7dc98062fccf14126abb751b64fab12c312566e8cbdc8483598bffcea93af7c</hash>
        <hash alg="SHA-512">f186b2ada470abba1cc3b4f8c4373d940fb7c71a051b2c26f7c204ad4dfb69235fbf3f9c33da36d744cb90f52d921c51d76c0ff263bacb35eafb66cab83dc47d</hash>
        <hash alg="SHA-384">405bd297a73901f013d48a0da028d04d400f3e61f4997c0e7297eb08120670a0e242e0002db8f130c33ab16cb02feb2d</hash>
        <hash alg="SHA3-384">4db7e54434d0a208c876868f5595b808f2728c0455feaa752ab7b569a2186fc37cb891c9aa0076de3d08f6da6ff06eba</hash>
        <hash alg="SHA3-256">3a5aba9f1ff1a130b76af886123eb375fa578498490df3dc60bb7ce7d59e9404</hash>
        <hash alg="SHA3-512">00bba8efc2d6e7f0a509b321868d75f1aaf0681a750d089d913bde8424ab7bb88aadf49de6e291e352523e4f8c117b1b48033ff31d4d665dcc43c4c6ea000ba9</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/jakarta.inject/jakarta.inject-api@2.0.1?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/eclipse-ee4j/injection-api</url>
        </reference>
        <reference type="distribution">
          <url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/eclipse-ee4j/ee4j/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/eclipse-ee4j/injection-api</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.glassfish.hk2.external/aopalliance-repackaged@4.0.3?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>org.glassfish.hk2.external</group>
      <name>aopalliance-repackaged</name>
      <version>4.0.3</version>
      <description>Dependency Injection Kernel</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">899e3540610595a35d2a941bf413d520</hash>
        <hash alg="SHA-1">ae9a15978dddd6a2f13f1cb84dda81ab27e50876</hash>
        <hash alg="SHA-256">aeb7d67b20730a1533448083dd5d6d6c837e577b10ccf1e534cf0951bc573470</hash>
        <hash alg="SHA-512">8bc2f38a7791004e625ce5cc2b3c82a48717c41e9812fbe7a306fd68fa2cee858459d4a6ac97dedc35394446f7386bacd18eddd2688775e201b48aff5b22067c</hash>
        <hash alg="SHA-384">a28839c268eb452b12169c37b42fae2211ec1066eaf125e511167616809e3ff31f3222dca162f941a4715484e497c26e</hash>
        <hash alg="SHA3-384">d7d6a679ec5d1fcabc69c763e35a8514b641c1786a80a2aa8ddd3f944cebea57d72fdb91924ec93ba31fd3ee784157d9</hash>
        <hash alg="SHA3-256">b62035ca9f191615588931a99183580ba71bbc48a02c41d2c5545908454dc83d</hash>
        <hash alg="SHA3-512">187983797c304cf590033d2d6c8ca3a0ba887887ad8f6f1cb45e81859b01ff7db0fe784dc43c4d7fe788bab9dd03a273bfcf44ded67d3c2d5b61676f8ef57b8e</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
        <license>
          <id>GPL-2.0-with-classpath-exception</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.glassfish.hk2.external/aopalliance-repackaged@4.0.3?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/eclipse-ee4j/glassfish-hk2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/eclipse-ee4j/glassfish-hk2/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://dev.eclipse.org/mhonarc/lists/glassfish-hk2-dev/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/eclipse-ee4j/glassfish-hk2</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.glassfish.hk2/hk2-api@4.0.3?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>org.glassfish.hk2</group>
      <name>hk2-api</name>
      <version>4.0.3</version>
      <description>HK2 API module</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">c3845c8071df93a4492284082351f47e</hash>
        <hash alg="SHA-1">90ccaa5ac1d10c6e89a8f92ab44d1e85cad6bde5</hash>
        <hash alg="SHA-256">c93e95e1c4851ce7ae24e39b5aa4fc7828457b7a01f427aae4a6721b288cee4a</hash>
        <hash alg="SHA-512">a3c66cc04115aacbb54cc211f902036880c3c5290fbde8de630163f6ac59df390f514b9f371d08750c4c8cf72c50d24a4c5275af3934d6eb4b03203f2b3838cf</hash>
        <hash alg="SHA-384">3ee30426b28e52fe01ad21c1b48075156ae3bb5ce9a13d55e1d5f2e21bbb0ae5adf4d7fc957f51b5342ab360ba077c4a</hash>
        <hash alg="SHA3-384">5b69a1853017fa2846ef9faf441b4dbeedb7d34c71bb3207f23337191669988f3cf0a1a1c8bf6e9d74ea52c1d383b1ed</hash>
        <hash alg="SHA3-256">d2cd0d5424779a9730bc42c1c61a74f3627223ff0a47da1ee089ed3f51740ca6</hash>
        <hash alg="SHA3-512">47975b10178c56a2c30a792a7de83b40d3fa17c0045f29325824144d0ddea9d2fa24e0c6978a4e9bcec6b715cb3ba689730637c322c068b9ac82adf9bb591ff9</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
        <license>
          <id>GPL-2.0-with-classpath-exception</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.glassfish.hk2/hk2-api@4.0.3?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/eclipse-ee4j/glassfish-hk2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/eclipse-ee4j/glassfish-hk2/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://dev.eclipse.org/mhonarc/lists/glassfish-hk2-dev/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/eclipse-ee4j/glassfish-hk2</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/jakarta.annotation/jakarta.annotation-api@3.0.0?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>jakarta.annotation</group>
      <name>jakarta.annotation-api</name>
      <version>3.0.0</version>
      <description>Jakarta Annotations API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">7faffaab962918da4cf5ddfd76609dd2</hash>
        <hash alg="SHA-1">54f928fadec906a99d558536756d171917b9d936</hash>
        <hash alg="SHA-256">b01f55552284cfb149411e64eabca75e942d26d2e1786b32914250e4330afaa2</hash>
        <hash alg="SHA-512">2bd5a16684c4e8144897ba6dc467628d1b8a85326235240e4c20101b6df3681d23aeebc30ca99e395ec848f33cb5244085031b2a0fbce746c8ede7148a5e7c1d</hash>
        <hash alg="SHA-384">1a12cb78019d310eb08314f863c2a0e48aa2845bde844f8204e653ec50713bf135cc58cce882e14ef631327952b5ad99</hash>
        <hash alg="SHA3-384">a0dd7dd32e8dc5ed679589f6066f16593b52334b9947a71381aeab44b3cbe295ec24dfef4fbfa5514ba24ea60fe042a9</hash>
        <hash alg="SHA3-256">6ae915a05b483f75c51f3a109cf368842d186b2996758b8a106377a7a9485c12</hash>
        <hash alg="SHA3-512">52f611aa0a98812e525be2b9d5a5712aef660598cff64282dbd9afc237560f442ab745fc95c919216f9cb4197c224ba6c7317282962c638fee956925bfa031c0</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
        <license>
          <id>GPL-2.0-with-classpath-exception</id>
        </license>
      </licenses>
      <purl>pkg:maven/jakarta.annotation/jakarta.annotation-api@3.0.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://projects.eclipse.org/projects/ee4j.ca</url>
        </reference>
        <reference type="distribution">
          <url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/jakartaee/common-annotations-api/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://dev.eclipse.org/mhonarc/lists/ca-dev</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/jakartaee/common-annotations-api</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.javassist/javassist@3.33.0-GA?type=jar">
      <publisher>Shigeru Chiba, www.javassist.org</publisher>
      <group>org.javassist</group>
      <name>javassist</name>
      <version>3.33.0-GA</version>
      <description>Javassist (JAVA programming ASSISTant) makes Java bytecode manipulation
    simple. It is a class library for editing bytecodes in Java.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">6751a24bfc86d2c00ad571d316723b3e</hash>
        <hash alg="SHA-1">20680ccee671059525390c9050f134cc857baed3</hash>
        <hash alg="SHA-256">1620478adc5f4d2eccd356e59513c270f1508bed53ce75deffb3107b7b43db2c</hash>
        <hash alg="SHA-512">ca22ee9eccb10cc61c2f83fe336f814ca9473081dc75622db20541be0d701e1f1c3d933ca43469cea953ff66e3731b4923f3542a3ba2e3a237d06ec47684546f</hash>
        <hash alg="SHA-384">c35ddd469d6c1496173932fd3e00654333be93229ca45cbf4b90f482d56acb4a518e26a1a47f0e46be289b3fa60cb7f5</hash>
        <hash alg="SHA3-384">0242412d096edb98e9f2b419c6835b75e0015dcc2bfa934efabc1eca00d970a7502ed91d233d5b08f10d87e141fc2bbb</hash>
        <hash alg="SHA3-256">d6758cbb73cf9dc9cd125a751d950d2e9764329dc8c55476c1bddb2f95ad2738</hash>
        <hash alg="SHA3-512">29d39d186bd0ea031979c071b4439bf14e6c6e1779c4825f97e366c7f448aa832c66d434baea0eb1c2a02461cdee9abeaa077a66c0c9237fc2279200f17cbb89</hash>
      </hashes>
      <licenses>
        <license>
          <id>MPL-1.1</id>
        </license>
        <license>
          <id>LGPL-2.1-only</id>
        </license>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.javassist/javassist@3.33.0-GA?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://www.javassist.org/</url>
        </reference>
        <reference type="distribution">
          <url>https://repository.jboss.org/nexus/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://jira.jboss.org/jira/browse/JASSIST/</url>
        </reference>
        <reference type="vcs">
          <url>scm:git:git@github.com:jboss-javassist/javassist.git</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.glassfish.hk2/hk2-utils@4.0.3?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>org.glassfish.hk2</group>
      <name>hk2-utils</name>
      <version>4.0.3</version>
      <description>HK2 Implementation Utilities</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">09f2fc391f3312cef099096244b7f2c4</hash>
        <hash alg="SHA-1">84947f303e64efabe28bc9f309427005032bf825</hash>
        <hash alg="SHA-256">db8a953634e5c23bcc8a4fd122ddeb5ac29283142a08357cceb4bdcbb028897d</hash>
        <hash alg="SHA-512">d42dd904d0034f7162c90e0e8c3f63197d8e883f945acd400d93a43227a49233fe45521d86dc070fb6ae8c6470f9e78b6fa8330e85dd76f51ea7e42389988c84</hash>
        <hash alg="SHA-384">2ce8348b148437b6524c584b8ed226c5143aa818d8fdc5a00b0c08ca6c7ed3130bcfdb558ca431dff47c73a72aa1d25c</hash>
        <hash alg="SHA3-384">98bc1130d6e52bc8567ded18d6c951d9a1d2756f20a9070f79f66329a6d64894704a201ad9071df48dd8688de70d95b1</hash>
        <hash alg="SHA3-256">0dbe0f205f044af22b8132192da6a863a649b9c8b153849f45185b595eec9f28</hash>
        <hash alg="SHA3-512">1d2f7095151d71afc37f89ed9c388caf0df192c548a8aabe5eacb2d9e8b7ab0d309e9e02f9990a66106eb3230b3b690344353f53c2d7afdc845df6fbb627a67b</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
        <license>
          <id>GPL-2.0-with-classpath-exception</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.glassfish.hk2/hk2-utils@4.0.3?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/eclipse-ee4j/glassfish-hk2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/eclipse-ee4j/glassfish-hk2/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://dev.eclipse.org/mhonarc/lists/glassfish-hk2-dev/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/eclipse-ee4j/glassfish-hk2</url>
        </reference>
      </externalReferences>
    </component>
  </components>
  <dependencies>
    <dependency ref="pkg:maven/org.glassfish.hk2/hk2-core@4.0.3?type=jar">
      <dependency ref="pkg:maven/org.glassfish.hk2/hk2-locator@4.0.3?type=jar"/>
      <dependency ref="pkg:maven/org.glassfish.hk2/hk2-utils@4.0.3?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.glassfish.hk2/hk2-locator@4.0.3?type=jar">
      <dependency ref="pkg:maven/jakarta.inject/jakarta.inject-api@2.0.1?type=jar"/>
      <dependency ref="pkg:maven/org.glassfish.hk2.external/aopalliance-repackaged@4.0.3?type=jar"/>
      <dependency ref="pkg:maven/org.glassfish.hk2/hk2-api@4.0.3?type=jar"/>
      <dependency ref="pkg:maven/org.glassfish.hk2/hk2-utils@4.0.3?type=jar"/>
      <dependency ref="pkg:maven/jakarta.annotation/jakarta.annotation-api@3.0.0?type=jar"/>
      <dependency ref="pkg:maven/org.javassist/javassist@3.33.0-GA?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/jakarta.inject/jakarta.inject-api@2.0.1?type=jar"/>
    <dependency ref="pkg:maven/org.glassfish.hk2.external/aopalliance-repackaged@4.0.3?type=jar"/>
    <dependency ref="pkg:maven/org.glassfish.hk2/hk2-api@4.0.3?type=jar">
      <dependency ref="pkg:maven/jakarta.inject/jakarta.inject-api@2.0.1?type=jar"/>
      <dependency ref="pkg:maven/org.glassfish.hk2/hk2-utils@4.0.3?type=jar"/>
      <dependency ref="pkg:maven/org.glassfish.hk2.external/aopalliance-repackaged@4.0.3?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.glassfish.hk2/hk2-utils@4.0.3?type=jar">
      <dependency ref="pkg:maven/jakarta.annotation/jakarta.annotation-api@3.0.0?type=jar"/>
      <dependency ref="pkg:maven/jakarta.inject/jakarta.inject-api@2.0.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/jakarta.annotation/jakarta.annotation-api@3.0.0?type=jar"/>
    <dependency ref="pkg:maven/org.javassist/javassist@3.33.0-GA?type=jar"/>
  </dependencies>
</bom>
