{ "bomFormat" : "CycloneDX", "specVersion" : "1.6", "serialNumber" : "urn:uuid:32f7a7cc-32a4-36ff-a855-23721b8869c9", "version" : 1, "metadata" : { "lifecycles" : [ { "phase" : "build" } ], "tools" : { "components" : [ { "type" : "library", "author" : "OWASP Foundation", "group" : "org.cyclonedx", "name" : "cyclonedx-maven-plugin", "version" : "2.9.1", "description" : "CycloneDX Maven plugin", "hashes" : [ { "alg" : "MD5", "content" : "9c7a565cf28cce58557d0c621c5ea4b1" }, { "alg" : "SHA-1", "content" : "be882d5a22050bfa9d19090b1420c188617d0e1c" }, { "alg" : "SHA-256", "content" : "698e0f37184a5b28c245c4065fd036dfce253b52f82fbb7113d81d36326cc249" }, { "alg" : "SHA-512", "content" : "c0f0b11026858166f872a2eb54719492e5cecaa0bc9cd6b30b3ecb4a174eed220f4a1b5829d18d6734128e778d3cb3db7ffed177c92866133129cb29081814a0" }, { "alg" : "SHA-384", "content" : "d80964707dfe5caca8c70521d5066f57589304c0a657e6fbc7c0614ea0fc7b3b3dbe7778361eee0f54ba111e9cb0ffcb" }, { "alg" : "SHA3-384", "content" : "80bc3a275d9514bc457461ff52a72add8c7ecbbc01d8912efce57139016c544ee776981851be0a58fa977ab4221f703f" }, { "alg" : "SHA3-256", "content" : "142317d6f245390f4fd2d0c100b16281b8dfc5c0c2cff86943bdcc97039cb699" }, { "alg" : "SHA3-512", "content" : "af0fb9137c90b65d1a07f72e4d51ae509956cdb8800f35c961b037cdda1fe4a14ce3b496cef71ba85f1621affcfe29cd42704ae4191ff0b090a9602087c8997b" } ] } ] }, "component" : { "type" : "library", "bom-ref" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.http.apache@7.6.0.202603022253-r?type=jar", "publisher" : "Eclipse JGit Project", "group" : "org.eclipse.jgit", "name" : "org.eclipse.jgit.http.apache", "version" : "7.6.0.202603022253-r", "description" : "Apache httpclient based HTTP support", "licenses" : [ { "license" : { "id" : "BSD-3-Clause", "url" : "https://opensource.org/licenses/BSD-3-Clause" } } ], "purl" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.http.apache@7.6.0.202603022253-r?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://www.eclipse.org/jgit//org.eclipse.jgit.http.apache" }, { "type" : "build-system", "url" : "https://ci.eclipse.org/jgit" }, { "type" : "distribution-intake", "url" : "https://repo.eclipse.org/content/repositories/jgit-releases/" }, { "type" : "issue-tracker", "url" : "https://github.com/eclipse-jgit/jgit/issues" }, { "type" : "mailing-list", "url" : "http://dev.eclipse.org/mhonarc/lists/jgit-dev" }, { "type" : "vcs", "url" : "https://eclipse.gerrithub.io/admin/repos/eclipse-jgit/jgit/org.eclipse.jgit.http.apache" } ] }, "properties" : [ { "name" : "maven.goal", "value" : "makeBom" }, { "name" : "maven.scopes", "value" : "compile,provided,runtime,system" }, { "name" : "maven.optional.unused", "value" : "true" }, { "name" : "cdx:reproducible", "value" : "enabled" } ] }, "components" : [ { "type" : "library", "bom-ref" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit@7.6.0.202603022253-r?type=jar", "publisher" : "Eclipse JGit Project", "group" : "org.eclipse.jgit", "name" : "org.eclipse.jgit", "version" : "7.6.0.202603022253-r", "description" : "Repository access and algorithms", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "2076f5b0237ea11bb419b4bcf8348adb" }, { "alg" : "SHA-1", "content" : "1c6d9f63581d24c9a7d9c50a6dbe6ab6df13dc0f" }, { "alg" : "SHA-256", "content" : "a19bf441905167b3ae6a5dd58f1954abfb243add420e3820705dd5bde3e35603" }, { "alg" : "SHA-512", "content" : "59cd248c9c6703e4c8a841f332906a15f48ff8148d904ff2f919a36c740a13d4fd627d04e2ba355e3e83cd2f18d9e71b42e6e205ba8f6b6828613a58ccf65d3e" }, { "alg" : "SHA-384", "content" : "4b2ee668612852831a280c924aa5f979066a2e5bdb70fa67dd74a6613822eaf05f7693b96563746e8c25eb63ebe66804" }, { "alg" : "SHA3-384", "content" : "80e418bb1da99f8f427e8862b1f3639391437894300b657c6f9a7d5a62a91896e011376da16dd553211ba5f3b806f95d" }, { "alg" : "SHA3-256", "content" : "6f8c176b3596cd7838de14b7ce2e0b9e6ddd342142d19904b3e9e1fe432d438d" }, { "alg" : "SHA3-512", "content" : "370e9ca6d3e04ccfddfbedfa27e3a3eb9db8c5371a3bea6161fd3dc3536b7dbc153f909d30394cdb31ef4f91112ee1001a91157a3d77f4fb1eacfdad1b241415" } ], "licenses" : [ { "license" : { "id" : "BSD-3-Clause", "url" : "https://opensource.org/licenses/BSD-3-Clause" } } ], "purl" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit@7.6.0.202603022253-r?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://www.eclipse.org/jgit//org.eclipse.jgit" }, { "type" : "build-system", "url" : "https://ci.eclipse.org/jgit" }, { "type" : "distribution-intake", "url" : "https://repo.eclipse.org/content/repositories/jgit-releases/" }, { "type" : "issue-tracker", "url" : "https://github.com/eclipse-jgit/jgit/issues" }, { "type" : "mailing-list", "url" : "http://dev.eclipse.org/mhonarc/lists/jgit-dev" }, { "type" : "vcs", "url" : "https://eclipse.gerrithub.io/admin/repos/eclipse-jgit/jgit/org.eclipse.jgit" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/com.googlecode.javaewah/JavaEWAH@1.2.3?type=jar", "group" : "com.googlecode.javaewah", "name" : "JavaEWAH", "version" : "1.2.3", "description" : "The bit array data structure is implemented in Java as the BitSet class. Unfortunately, this fails to scale without compression. JavaEWAH is a word-aligned compressed variant of the Java bitset class. It uses a 64-bit run-length encoding (RLE) compression scheme. The goal of word-aligned compression is not to achieve the best compression, but rather to improve query processing time. Hence, we try to save CPU cycles, maybe at the expense of storage. However, the EWAH scheme we implemented is always more efficient storage-wise than an uncompressed bitmap (implemented in Java as the BitSet class). Unlike some alternatives, javaewah does not rely on a patented scheme.", "hashes" : [ { "alg" : "MD5", "content" : "8fdeda28c1fb10e67b3d79f86bef5e61" }, { "alg" : "SHA-1", "content" : "13a27c856e0c8808cee9a64032c58eee11c3adc9" }, { "alg" : "SHA-256", "content" : "d65226949713c4c61a784f41c51167e7b0316f93764398ebba9e4336b3d954c2" }, { "alg" : "SHA-512", "content" : "48cd9df9252c58e9ffe4583e68607944bcdf2ad7a3be7b4317467f503c4f56cdbde358ca7c4f34fa620d01615072a42f3a572fc4f1237e266310b7508e79bcac" }, { "alg" : "SHA-384", "content" : "d1fd074f21b8a54a07d3f4579376d7c3ab72f24814ebc9ba92344e9da4721e9bfa3cda3a599137e4ddf2395a3c5b88e4" }, { "alg" : "SHA3-384", "content" : "a553864f196f73c139a104170ab79e780046fb5f322072c5494a6590361021f875afd7168f858b0531b61918ab49b94e" }, { "alg" : "SHA3-256", "content" : "bab97f3f893af36c36218a151b0c3fece27d47f358cc19e1ca9c22d77942bb76" }, { "alg" : "SHA3-512", "content" : "be817b93c7093d44ec8dded565d7e5651772ce38e9c72283c05191b33d0ecb2798cd385395f553500446573ac49dccc21f4ba3067d71eb89e03daa384d0193be" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/com.googlecode.javaewah/JavaEWAH@1.2.3?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://github.com/lemire/javaewah" }, { "type" : "distribution-intake", "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type" : "issue-tracker", "url" : "https://github.com/lemire/javaewah/issues" }, { "type" : "vcs", "url" : "scm:git:git@github.com:lemire/javaewah.git" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar", "publisher" : "QOS.ch", "group" : "org.slf4j", "name" : "slf4j-api", "version" : "2.0.17", "description" : "The slf4j API", "hashes" : [ { "alg" : "MD5", "content" : "b6480d114a23683498ac3f746f959d2f" }, { "alg" : "SHA-1", "content" : "d9e58ac9c7779ba3bf8142aff6c830617a7fe60f" }, { "alg" : "SHA-256", "content" : "7b751d952061954d5abfed7181c1f645d336091b679891591d63329c622eb832" }, { "alg" : "SHA-512", "content" : "9a3e79db6666a6096a3021bb2e1d918f30f589d8de51d6b600f8ebd92515a510ae2d8f87919cc2dfa8365d64f10194cac8dfa0fb950160eef0e9da06f6caaeb9" }, { "alg" : "SHA-384", "content" : "6ea24f814a9b6ece428cfd0535e2f3b8927005745ef61006b50fdb5a90126ee5ea05650155382b3b755c5bce38ef3944" }, { "alg" : "SHA3-384", "content" : "9b1015052f0ec43f9be09764e131834157599611cb52f6fe591c4ac6a8ab4817518f2a4b8871e5e738c8678e93af5557" }, { "alg" : "SHA3-256", "content" : "00559b4f4066b4917ba4fe2a6f23111eaeada321112d030910d218ced9084b5e" }, { "alg" : "SHA3-512", "content" : "9579c2f7e7516e177c2d493ccc9eb8150978cf19f6f09b28d116f6935239fd56dc6af2b62b3336f79b0b462445550cd1fb5377a07001a6f44aaab6a32fa2fa47" } ], "licenses" : [ { "license" : { "id" : "MIT", "url" : "https://opensource.org/license/mit/" } } ], "purl" : "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar", "externalReferences" : [ { "type" : "website", "url" : "http://www.slf4j.org" }, { "type" : "distribution-intake", "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type" : "vcs", "url" : "https://github.com/qos-ch/slf4j/slf4j-parent/slf4j-api" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/commons-codec/commons-codec@1.21.0?type=jar", "publisher" : "The Apache Software Foundation", "group" : "commons-codec", "name" : "commons-codec", "version" : "1.21.0", "description" : "The Apache Commons Codec component contains encoders and decoders for formats such as Base16, Base32, Base64, digest, and Hexadecimal. In addition to these widely used encoders and decoders, the codec package also maintains a collection of phonetic encoding utilities.", "hashes" : [ { "alg" : "MD5", "content" : "c49977029838babaf8a71485aa9aaef8" }, { "alg" : "SHA-1", "content" : "d95f998db5f89900fe895daf6cd2cddcb2f1d64b" }, { "alg" : "SHA-256", "content" : "4da851cb6abfb98bfe9eb77c5e5fc47f5414fa28b94e21b7fd9a646705dc167f" }, { "alg" : "SHA-512", "content" : "3ceb4aa588d0b918e46b1ddda9ff41b5a765985bf66542d2728458fc3f83b9dedfd972ff5d919cf6f456fbaa9f8c4e5f0c0913848ec3a471c316374e683b1f2a" }, { "alg" : "SHA-384", "content" : "05786582b0a85264688ad5b49ad6da09db1cdfe6301cf31ddea48f97f45b13ff25d9e3def1702890457fd5bbbd00f793" }, { "alg" : "SHA3-384", "content" : "805bda170837bbedbecc5c63a5defc6a348777952906d8e6f33544866e86aa25c9d28f3b351e981d0fa49bb16e07884c" }, { "alg" : "SHA3-256", "content" : "cbc2eafcba305c08e852133d0881d209799c4dc83d587869eed5f281d6bed4f3" }, { "alg" : "SHA3-512", "content" : "244e6a342d4b5a6e7d077426427979f26320be305f1cb33d933672c926ea3a96fe4f284c9f592970f604928209fe0e149613b64990202d595bce01a669de418b" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0", "url" : "https://www.apache.org/licenses/LICENSE-2.0" } } ], "purl" : "pkg:maven/commons-codec/commons-codec@1.21.0?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://commons.apache.org/proper/commons-codec/" }, { "type" : "build-system", "url" : "https://github.com/apache/commons-codec/actions" }, { "type" : "distribution-intake", "url" : "https://repository.apache.org/service/local/staging/deploy/maven2" }, { "type" : "issue-tracker", "url" : "https://issues.apache.org/jira/browse/CODEC" }, { "type" : "mailing-list", "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/" }, { "type" : "vcs", "url" : "https://github.com/apache/commons-codec" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/org.apache.httpcomponents/httpclient@4.5.14?type=jar", "publisher" : "The Apache Software Foundation", "group" : "org.apache.httpcomponents", "name" : "httpclient", "version" : "4.5.14", "description" : "Apache HttpComponents Client", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "2cb357c4b763f47e58af6cad47df6ba3" }, { "alg" : "SHA-1", "content" : "1194890e6f56ec29177673f2f12d0b8e627dec98" }, { "alg" : "SHA-256", "content" : "c8bc7e1c51a6d4ce72f40d2ebbabf1c4b68bfe76e732104b04381b493478e9d6" }, { "alg" : "SHA-512", "content" : "a084ef30fb0a2a25397d8fab439fe68f67e294bf53153e2e1355b8df92886d40fe6abe35dc84f014245f7158e92641bcbd98019b4fbbd9e5a0db495b160b4ced" }, { "alg" : "SHA-384", "content" : "c8ccaa1fa8ba7c421413e3c30375bd9c31284e837c476fd831e18043ad4187e92166f49554123108891241bed674b95d" }, { "alg" : "SHA3-384", "content" : "9a17dfcf12b2af3a9b006ec369f9bc78ba322348bf1a01146e0d4f3fec2bed6cbe8b2193fac5b4d5a0c3036c06477510" }, { "alg" : "SHA3-256", "content" : "48f0a61b691e22dec9d6db8e0b58be4ca17a42a2846c82f0875de21f72bb0faa" }, { "alg" : "SHA3-512", "content" : "4ad2c9adc761b7e813330f0dcad3f9978702896c7d0cbf81f60a472d550e320b1527be425ba597c8c9352d587e32e1d46ceb4c73e99c70a6190df4c699a7c2a9" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/org.apache.httpcomponents/httpclient@4.5.14?type=jar", "externalReferences" : [ { "type" : "website", "url" : "http://hc.apache.org/httpcomponents-client-ga" }, { "type" : "distribution-intake", "url" : "https://repository.apache.org/service/local/staging/deploy/maven2" }, { "type" : "issue-tracker", "url" : "http://issues.apache.org/jira/browse/HTTPCLIENT" }, { "type" : "mailing-list", "url" : "http://mail-archives.apache.org/mod_mbox/hc-httpclient-users/" }, { "type" : "vcs", "url" : "https://github.com/apache/httpcomponents-client/tree/4.5.14/httpclient" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/commons-logging/commons-logging@1.3.5?type=jar", "publisher" : "The Apache Software Foundation", "group" : "commons-logging", "name" : "commons-logging", "version" : "1.3.5", "description" : "Apache Commons Logging is a thin adapter allowing configurable bridging to other, well-known logging systems.", "hashes" : [ { "alg" : "MD5", "content" : "9ca067b073153c86c2da350c0f2cdf70" }, { "alg" : "SHA-1", "content" : "a3fcc5d3c29b2b03433aa2d2f2d2c1b1638924a1" }, { "alg" : "SHA-256", "content" : "6d7a744e4027649fbb50895df9497d109f98c766a637062fe8d2eabbb3140ba4" }, { "alg" : "SHA-512", "content" : "b6d66333cec2746cc410ca3b27099c4647618a1855783bac064c75eec95c643dab184010e5c875aca3c7fa827aed144488a1820604a043bbff93116de509f915" }, { "alg" : "SHA-384", "content" : "bbfc26f81852dfe8df41b9cd1da6e755b223c51e824898490f96e2aaefb42e5484408f8a245b244bfe4e08170295ee72" }, { "alg" : "SHA3-384", "content" : "5e17863103757beb582b316f90a02f57f0ea7702b2146d6b318ab0f1105a3e0190dd1dc7b031550a68c047cadd23c114" }, { "alg" : "SHA3-256", "content" : "c01a09df81fae75d398ef61b168c8f7d70291b480961d392c59bdd1498c254cb" }, { "alg" : "SHA3-512", "content" : "1ce4f4219542c8f1f0b52f9d2d916d8b11136f7a800bbb24ca93a28a800121e7c48af410076213d05dd715b37b110aa59a7a9609415e0cc5daed89bb13fc4668" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0", "url" : "https://www.apache.org/licenses/LICENSE-2.0" } } ], "purl" : "pkg:maven/commons-logging/commons-logging@1.3.5?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://commons.apache.org/proper/commons-logging/" }, { "type" : "build-system", "url" : "https://github.com/apache/commons-parent/actions" }, { "type" : "distribution-intake", "url" : "https://repository.apache.org/service/local/staging/deploy/maven2" }, { "type" : "issue-tracker", "url" : "https://issues.apache.org/jira/browse/LOGGING" }, { "type" : "mailing-list", "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/" }, { "type" : "vcs", "url" : "https://gitbox.apache.org/repos/asf/commons-logging" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar", "publisher" : "The Apache Software Foundation", "group" : "org.apache.httpcomponents", "name" : "httpcore", "version" : "4.4.16", "description" : "Apache HttpComponents Core (blocking I/O)", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "28d2cd9bf8789fd2ec774fb88436ebd1" }, { "alg" : "SHA-1", "content" : "51cf043c87253c9f58b539c9f7e44c8894223850" }, { "alg" : "SHA-256", "content" : "6c9b3dd142a09dc468e23ad39aad6f75a0f2b85125104469f026e52a474e464f" }, { "alg" : "SHA-512", "content" : "168026436a6bcf5e96c0c59606638abbdc30de4b405ae55afde70fdf2895e267a3d48bba6bdadc5a89f38e31da3d9a9dc91e1cab7ea76f5e04322cf1ec63b838" }, { "alg" : "SHA-384", "content" : "ba9ceaee1a37ca3201d6a1315ecb0327b495489efd0baa155c219c475df8d3eb69fe77ab0026563db406497626da6562" }, { "alg" : "SHA3-384", "content" : "b9dc44dcc7cc86d5036f26d54c4003a2d72808ae7b07a0808bb53505c6d4281b5ad213eb1f3d0fef1113dec57cb0dfe1" }, { "alg" : "SHA3-256", "content" : "fd8ab51846476c6c18822151c9ec07b39a9633010b5d20ea937fc6910407bc64" }, { "alg" : "SHA3-512", "content" : "b42fa528242981a9d70e4f68ab75a24292df5112c44c21b6f18cb9201ce747885ba1d4dc69bc3d14d0da46a6c2638f937c11bc45749abeb55dc89ddada90cdda" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar", "externalReferences" : [ { "type" : "website", "url" : "http://hc.apache.org/httpcomponents-core-ga" }, { "type" : "distribution-intake", "url" : "https://repository.apache.org/service/local/staging/deploy/maven2" }, { "type" : "issue-tracker", "url" : "http://issues.apache.org/jira/browse/HTTPCORE" }, { "type" : "mailing-list", "url" : "http://mail-archives.apache.org/mod_mbox/hc-httpclient-users/" }, { "type" : "vcs", "url" : "https://github.com/apache/httpcomponents-core/tree/4.4.16/httpcore" } ] } ], "dependencies" : [ { "ref" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.http.apache@7.6.0.202603022253-r?type=jar", "dependsOn" : [ "pkg:maven/org.eclipse.jgit/org.eclipse.jgit@7.6.0.202603022253-r?type=jar", "pkg:maven/org.apache.httpcomponents/httpclient@4.5.14?type=jar", "pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar" ] }, { "ref" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit@7.6.0.202603022253-r?type=jar", "dependsOn" : [ "pkg:maven/com.googlecode.javaewah/JavaEWAH@1.2.3?type=jar", "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar", "pkg:maven/commons-codec/commons-codec@1.21.0?type=jar" ] }, { "ref" : "pkg:maven/com.googlecode.javaewah/JavaEWAH@1.2.3?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/commons-codec/commons-codec@1.21.0?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/org.apache.httpcomponents/httpclient@4.5.14?type=jar", "dependsOn" : [ "pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar", "pkg:maven/commons-logging/commons-logging@1.3.5?type=jar", "pkg:maven/commons-codec/commons-codec@1.21.0?type=jar" ] }, { "ref" : "pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/commons-logging/commons-logging@1.3.5?type=jar", "dependsOn" : [ ] } ] }