{
  "bomFormat" : "CycloneDX",
  "specVersion" : "1.5",
  "serialNumber" : "urn:uuid:46f0a841-334a-37d4-a9ed-e198aa836c32",
  "version" : 1,
  "metadata" : {
    "lifecycles" : [
      {
        "phase" : "build"
      }
    ],
    "tools" : [
      {
        "vendor" : "OWASP Foundation",
        "name" : "CycloneDX Maven plugin",
        "version" : "2.8.0",
        "hashes" : [
          {
            "alg" : "MD5",
            "content" : "76ffec6a7ddd46b2b24517411874eb99"
          },
          {
            "alg" : "SHA-1",
            "content" : "5b0d5b41975b53be4799b9621b4af0cfc41d44b6"
          },
          {
            "alg" : "SHA-256",
            "content" : "6852aa0f4e42a2db745bab80e384951a6a65b9215d041081d675780999027e81"
          },
          {
            "alg" : "SHA-512",
            "content" : "417de20fcdcb11c9713bacbd57290d8e68037fdb4553fd31b8cb08bd760ad52dc65ea88ad4be15844ad3fd5a4d3e440d2f70326f2fe1e63ec78e059c9a883f8d"
          },
          {
            "alg" : "SHA-384",
            "content" : "5eb755c6492e7a7385fa9a1e1f4517875bcb834b2df437808a37a2d6f5285df428741762305980315a63fcef1406597d"
          },
          {
            "alg" : "SHA3-384",
            "content" : "0fe16a47cf7aab0b22251dafcc39939b68e8f1778093309d8d2060b51a08df445a8b8ed5a9561669faf2e55f907c76d8"
          },
          {
            "alg" : "SHA3-256",
            "content" : "3e5a1eb5ab7d0797498862794709ff8eaaa071fe4cc9ec77f52db7e2f97ef487"
          },
          {
            "alg" : "SHA3-512",
            "content" : "59281a3e29e76270d7f44b40b5b9f05e55f1ae3ec716d80add806f360940809e3813998ac7c5758043b8e248aed73b86e37dc506cdb4cde03c16bb617d8e5a3a"
          }
        ]
      }
    ],
    "component" : {
      "publisher" : "hazendaz",
      "group" : "com.github.hazendaz.git",
      "name" : "github-desktop",
      "version" : "3.4.0",
      "description" : "Distribution for Github Desktop",
      "licenses" : [
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl" : "pkg:maven/com.github.hazendaz.git/github-desktop@3.4.0?type=pom",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://hazendaz.github.io/github-desktop/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/hazendaz/base-parent/actions"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/hazendaz/base-parent/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/hazendaz/github-desktop"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.github.hazendaz.git/github-desktop@3.4.0?type=pom"
    },
    "properties" : [
      {
        "name" : "maven.goal",
        "value" : "makeAggregateBom"
      },
      {
        "name" : "maven.scopes",
        "value" : "compile,provided,runtime,system"
      },
      {
        "name" : "cdx:reproducible",
        "value" : "enabled"
      }
    ]
  },
  "components" : [
    {
      "group" : "org.checkerframework",
      "name" : "checker-qual",
      "version" : "3.43.0",
      "description" : "checker-qual contains annotations (type qualifiers) that a programmer writes to specify Java code for type-checking by the Checker Framework.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "4f56e65c8f302ca8b4cb384c9b4a53b6"
        },
        {
          "alg" : "SHA-1",
          "content" : "9425eee39e56b116d2b998b7c2cebcbd11a3c98b"
        },
        {
          "alg" : "SHA-256",
          "content" : "3fbc2e98f05854c3df16df9abaa955b91b15b3ecac33623208ed6424640ef0f6"
        },
        {
          "alg" : "SHA-512",
          "content" : "823ea28e3c822ff48e4e985a421fa0b53ca3419e2c0635c3d4d0a9822399b6491780e26a9161d4733857c97987bff2d725ff4453b2c22ed412eef46ea27f5d84"
        },
        {
          "alg" : "SHA-384",
          "content" : "bb0de208c965955c3cd52415db69b9794f475df08ae46da0273c54689a143f0735a52dffaed491d80c137ef14afec1ca"
        },
        {
          "alg" : "SHA3-384",
          "content" : "90fe63d39de280812885d1f81d8099c211a2deef5d82ae521ec88aff1077c2bd44b0e9334c53ea9e386707ec68f811ce"
        },
        {
          "alg" : "SHA3-256",
          "content" : "5e6baf5bdda40b096ee17e784fcc4ca9d5251a07b04de59542b0480712dd7ed4"
        },
        {
          "alg" : "SHA3-512",
          "content" : "58031c81517dd8a700b482a33c78f3bb5eeddb2f878bee1568aa54ea502b56187bc73ad4ba046163c3b95cb5572921e6d2b0dd1d1f0905bd7996eaa2bba25812"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT"
          }
        }
      ],
      "purl" : "pkg:maven/org.checkerframework/checker-qual@3.43.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://checkerframework.org/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/typetools/checker-framework.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.checkerframework/checker-qual@3.43.0?type=jar"
    },
    {
      "publisher" : "Google LLC",
      "group" : "com.google.errorprone",
      "name" : "error_prone_annotations",
      "version" : "2.27.1",
      "description" : "Error Prone is a static analysis tool for Java that catches common programming mistakes at compile-time.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "abe81ff506aaec1e2ead937983c7ac78"
        },
        {
          "alg" : "SHA-1",
          "content" : "a87dac4f79a6e5b1e55c629f16c754c53cbd50ec"
        },
        {
          "alg" : "SHA-256",
          "content" : "a4895b5db0243614d90ce2a2c6f830624909c01e31587d8ec3ecf51e5e7e7506"
        },
        {
          "alg" : "SHA-512",
          "content" : "8083c7c32409616a61491bcd3e910543a72ed967aeeb4de2d76b970804003b48a202cd6a92381f2e85a8aa8f0db41b23608625d8af5cdeda572114d2a47c4fb0"
        },
        {
          "alg" : "SHA-384",
          "content" : "aefeedaf60786bebda55e68ff62daf3ac056b36eee4272e462589a16657be1bc881e80f0f16c606785185be2c5802c10"
        },
        {
          "alg" : "SHA3-384",
          "content" : "48a19652dfe27f8e5f2b0b67da8b3888e50317dfcb4503cc40d47eb40c18f24061bf0f63e24301f6dd80b425281b74fe"
        },
        {
          "alg" : "SHA3-256",
          "content" : "a4c4f49efd6af14e04fb8552a3343af5802025e7a8bb91777f6a0ce1ef04e5a4"
        },
        {
          "alg" : "SHA3-512",
          "content" : "3ed0da54987992fac20c44aa2c82ba26ef517de6b99f25b59a192989425f472bf9ce704c1b2a91c13f9edc11e63801e9390b990f704cdb2abc28cd9c18f72271"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.27.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://errorprone.info/error_prone_annotations"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/google/error-prone/error_prone_annotations"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.27.1?type=jar"
    },
    {
      "group" : "com.google.j2objc",
      "name" : "j2objc-annotations",
      "version" : "3.0.0",
      "description" : "A set of annotations that provide additional information to the J2ObjC translator to modify the result of translation.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f59529b29202a5baf37f491ea5ec8627"
        },
        {
          "alg" : "SHA-1",
          "content" : "7399e65dd7e9ff3404f4535b2f017093bdb134c7"
        },
        {
          "alg" : "SHA-256",
          "content" : "88241573467ddca44ffd4d74aa04c2bbfd11bf7c17e0c342c94c9de7a70a7c64"
        },
        {
          "alg" : "SHA-512",
          "content" : "1406b1aa53b19f8269129d96ce8b64bf36f215eacf7d8f1e0adadee31614e53bb3f7acf4ff97418c5bfc75677a6f3cd637c3d9889d1e85117b6fa12467c91e9f"
        },
        {
          "alg" : "SHA-384",
          "content" : "24373643a4e2f8e1cf919d495e1e79b24dd9dbbbeecb06477be8764313f0b3b465fde74ea2cf5542fc8cba090132052f"
        },
        {
          "alg" : "SHA3-384",
          "content" : "afa264c8d8d946e43438ae728f0ae7a2c12797b56f9ad885d5b3e9a7396eb8481ca6840c2a990a7c5da45968794b36d8"
        },
        {
          "alg" : "SHA3-256",
          "content" : "4df89618b479d5fbede9363c6f914218a44007f48f29c6b6d58243558ced6152"
        },
        {
          "alg" : "SHA3-512",
          "content" : "b25b2ad8dddeed8757ffe22a96cfa7511617d86baa0ed4a25b1850162b54e1132d40dbc2dfca0a6ff0a350b16628a0d2b523418eeb8f986e0f505833da4f7181"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.j2objc/j2objc-annotations@3.0.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/google/j2objc/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "http://github.com/google/j2objc"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.j2objc/j2objc-annotations@3.0.0?type=jar"
    },
    {
      "group" : "org.projectlombok",
      "name" : "lombok",
      "version" : "1.18.32",
      "description" : "Spice up your java: Automatic Resource Management, automatic generation of getters, setters, equals, hashCode and toString, and more!",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "56e9be7b9a26802ac0c784ad824f3a29"
        },
        {
          "alg" : "SHA-1",
          "content" : "17d46b3e205515e1e8efd3ee4d57ce8018914163"
        },
        {
          "alg" : "SHA-256",
          "content" : "97574674e2a25f567a313736ace00df8787d443de316407d57fc877d9f19a65d"
        },
        {
          "alg" : "SHA-512",
          "content" : "549bbfa836e595adeb7c81911556e1438f6f52882ed35f6d037d0f0c46ca90e753249413c573006e4b127b30e10d3adcd2f84a6e368f9f55be9df018ec5d8756"
        },
        {
          "alg" : "SHA-384",
          "content" : "22f813e1412ef3b52953c263e6e13baa579aa2239522df94205bd17fb902d9a8a7e5f546637b6f53cc4b2fd07686cfe4"
        },
        {
          "alg" : "SHA3-384",
          "content" : "954453f59876d916d109f9ba42d2077e4d0072d25b62afa658af1e50a19701598387d9021b3a158c962844be466b3f04"
        },
        {
          "alg" : "SHA3-256",
          "content" : "10f8683b59165f60f2fc09f4e09c05bf032441b566d9a6f76dbf9684b0cdaa26"
        },
        {
          "alg" : "SHA3-512",
          "content" : "245b097d40d6d01715eb0aca0bedb7dc5fbfee3e008f45df0a2872806ae9192a2b6cefc23f5e4393343dabb8322c3de21e9014912e3474a594ce392c3abdb66a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT"
          }
        }
      ],
      "purl" : "pkg:maven/org.projectlombok/lombok@1.18.32?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://projectlombok.org"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/projectlombok/lombok/issues"
        },
        {
          "type" : "vcs",
          "url" : "http://github.com/projectlombok/lombok"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.projectlombok/lombok@1.18.32?type=jar"
    },
    {
      "publisher" : "Gaul",
      "group" : "org.gaul",
      "name" : "modernizer-maven-annotations",
      "version" : "2.9.0",
      "description" : "Sonatype helps open source projects to set up Maven repositories on https://oss.sonatype.org/",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "638a555dc0ff4c996e8a920215fc8ea4"
        },
        {
          "alg" : "SHA-1",
          "content" : "4de00c50ce237cf7a721ffe907e11f0688538b04"
        },
        {
          "alg" : "SHA-256",
          "content" : "baeca9a46aae8dbe8075058726389112382bc60be811e70886fbaba57c68502f"
        },
        {
          "alg" : "SHA-512",
          "content" : "8077ee42b5bc87710f970dd8c530194effeb9ffbb57a06040a20ac6e5dcb4d9537186c5c0d6c6fed33f7abd5f62c35bb6deb45f22a4f0df2325d3780ff7ed485"
        },
        {
          "alg" : "SHA-384",
          "content" : "6cb32d23c0e0c831956d37f25a8b0db0d383956d821f7576d9d25f93c46b886d9bbc90ba0257e6252944fc58758507eb"
        },
        {
          "alg" : "SHA3-384",
          "content" : "22e1cf04abcb318e9637fc83c8b837c169e9b15ee3df614116fdfa92ee78942d0c55490f883492223b5c6bd6519848ea"
        },
        {
          "alg" : "SHA3-256",
          "content" : "47314fbc8fc947921438af574cfe5bc815f4cbe8c30eb8253ca4b3984e767c36"
        },
        {
          "alg" : "SHA3-512",
          "content" : "c4013e2f94688009aed46b0efe4bc91b23c8a621076371f2affc68cdb63110c25d126865ebbdc2af747cac103d5ae4954e412a3fca08581280de69c98c4c4a87"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.gaul/modernizer-maven-annotations@2.9.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://nexus.sonatype.org/oss-repository-hosting.html/modernizer-maven-parent/modernizer-maven-annotations"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/gaul/modernizer-maven-plugin/issues"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.gaul/modernizer-maven-annotations@2.9.0?type=jar"
    },
    {
      "group" : "com.github.spotbugs",
      "name" : "spotbugs-annotations",
      "version" : "4.8.5",
      "description" : "Annotations the SpotBugs tool supports",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "e952af1f90eadb3502cff551518fcbc9"
        },
        {
          "alg" : "SHA-1",
          "content" : "17ab39acf7cf6f7a330ee3be08a4bb2740082b4c"
        },
        {
          "alg" : "SHA-256",
          "content" : "6e63acb693f156e4fb79151b88f9eebe731b4da65fe12843503613e0d6e6f68d"
        },
        {
          "alg" : "SHA-512",
          "content" : "eca6f33606ed912e74c2770c43e8bbc07b695d72a7144deaf26fa526cf821f840a119034e12c2967cfe0b7e37ced64c0b59a7f668bb24ae78cad8dd0051593fe"
        },
        {
          "alg" : "SHA-384",
          "content" : "2d8b479b41ac69301c73fddcae166b84257d94421a8a3352f76a80b6b113d89db9ac0f84482b005572965edeb72aecb6"
        },
        {
          "alg" : "SHA3-384",
          "content" : "2cc8b41fa984828dd531958064d453121c95088825a03d701ec6a8314a3b3493f74ea1afbc699b570a9c01cd581c3824"
        },
        {
          "alg" : "SHA3-256",
          "content" : "069b8825f72c8c8c051212e374776501db6cd9250acc8ab95a1ec8193c10bfdc"
        },
        {
          "alg" : "SHA3-512",
          "content" : "b9e6d0a9df7fd99fe5e25f595f52d385a32b6e0757627bcd45e1b92129c0ee41d5c5da641f13b7c5d379cab5951bdf04b5bd5e85ffa0ac2a8ce2deb399c95654"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "LGPL-2.1-only"
          }
        }
      ],
      "purl" : "pkg:maven/com.github.spotbugs/spotbugs-annotations@4.8.5?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://spotbugs.github.io/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/spotbugs/spotbugs/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.github.spotbugs/spotbugs-annotations@4.8.5?type=jar"
    },
    {
      "group" : "com.google.code.findbugs",
      "name" : "jsr305",
      "version" : "3.0.2",
      "description" : "JSR305 Annotations for Findbugs",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "dd83accb899363c32b07d7a1b2e4ce40"
        },
        {
          "alg" : "SHA-1",
          "content" : "25ea2e8b0c338a877313bd4672d3fe056ea78f0d"
        },
        {
          "alg" : "SHA-256",
          "content" : "766ad2a0783f2687962c8ad74ceecc38a28b9f72a2d085ee438b7813e928d0c7"
        },
        {
          "alg" : "SHA-512",
          "content" : "bb09db62919a50fa5b55906013be6ca4fc7acb2e87455fac5eaf9ede2e41ce8bbafc0e5a385a561264ea4cd71bbbd3ef5a45e02d63277a201d06a0ae1636f804"
        },
        {
          "alg" : "SHA-384",
          "content" : "ca0b169d3eb2d0922dc031133a021f861a043bb3e405a88728215fd6ff00fa52fdc7347842dcc2031472e3726164bdc4"
        },
        {
          "alg" : "SHA3-384",
          "content" : "9903fd7505218999f8262efedb3d935d64bcef84aae781064ab5e1b24755466b269517cada562fa140cd1d417ede57a1"
        },
        {
          "alg" : "SHA3-256",
          "content" : "223fda9a89a461afaae73b177a2dc20ed4a90f2f8757f5c65f3241b0510f00ff"
        },
        {
          "alg" : "SHA3-512",
          "content" : "3996b5af57a5d5c6a0cd62b11773360fb051dd86a2ba968476806a2a5d32049b82d69a24a3c694e8fe4d735be6a28e41000cc500cc2a9fb577e058045855d2d6"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://findbugs.sourceforge.net/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://code.google.com/p/jsr-305/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar"
    }
  ],
  "dependencies" : [
    {
      "ref" : "pkg:maven/com.github.hazendaz.git/github-desktop@3.4.0?type=pom",
      "dependsOn" : [
        "pkg:maven/org.checkerframework/checker-qual@3.43.0?type=jar",
        "pkg:maven/com.google.errorprone/error_prone_annotations@2.27.1?type=jar",
        "pkg:maven/com.google.j2objc/j2objc-annotations@3.0.0?type=jar",
        "pkg:maven/org.projectlombok/lombok@1.18.32?type=jar",
        "pkg:maven/org.gaul/modernizer-maven-annotations@2.9.0?type=jar",
        "pkg:maven/com.github.spotbugs/spotbugs-annotations@4.8.5?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.checkerframework/checker-qual@3.43.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.27.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.google.j2objc/j2objc-annotations@3.0.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.projectlombok/lombok@1.18.32?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.gaul/modernizer-maven-annotations@2.9.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.github.spotbugs/spotbugs-annotations@4.8.5?type=jar",
      "dependsOn" : [
        "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar",
      "dependsOn" : [ ]
    }
  ]
}