{
  "bomFormat" : "CycloneDX",
  "specVersion" : "1.5",
  "serialNumber" : "urn:uuid:a71c6d1d-deb9-3e44-acca-d43d90014e8e",
  "version" : 1,
  "metadata" : {
    "lifecycles" : [
      {
        "phase" : "build"
      }
    ],
    "tools" : [
      {
        "vendor" : "OWASP Foundation",
        "name" : "CycloneDX Maven plugin",
        "version" : "2.8.0",
        "hashes" : [
          {
            "alg" : "MD5",
            "content" : "76ffec6a7ddd46b2b24517411874eb99"
          },
          {
            "alg" : "SHA-1",
            "content" : "5b0d5b41975b53be4799b9621b4af0cfc41d44b6"
          },
          {
            "alg" : "SHA-256",
            "content" : "6852aa0f4e42a2db745bab80e384951a6a65b9215d041081d675780999027e81"
          },
          {
            "alg" : "SHA-512",
            "content" : "417de20fcdcb11c9713bacbd57290d8e68037fdb4553fd31b8cb08bd760ad52dc65ea88ad4be15844ad3fd5a4d3e440d2f70326f2fe1e63ec78e059c9a883f8d"
          },
          {
            "alg" : "SHA-384",
            "content" : "5eb755c6492e7a7385fa9a1e1f4517875bcb834b2df437808a37a2d6f5285df428741762305980315a63fcef1406597d"
          },
          {
            "alg" : "SHA3-384",
            "content" : "0fe16a47cf7aab0b22251dafcc39939b68e8f1778093309d8d2060b51a08df445a8b8ed5a9561669faf2e55f907c76d8"
          },
          {
            "alg" : "SHA3-256",
            "content" : "3e5a1eb5ab7d0797498862794709ff8eaaa071fe4cc9ec77f52db7e2f97ef487"
          },
          {
            "alg" : "SHA3-512",
            "content" : "59281a3e29e76270d7f44b40b5b9f05e55f1ae3ec716d80add806f360940809e3813998ac7c5758043b8e248aed73b86e37dc506cdb4cde03c16bb617d8e5a3a"
          }
        ]
      }
    ],
    "component" : {
      "publisher" : "hazendaz",
      "group" : "com.github.hazendaz.git",
      "name" : "github-desktop",
      "version" : "3.4.3",
      "description" : "Distribution for Github Desktop",
      "licenses" : [
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl" : "pkg:maven/com.github.hazendaz.git/github-desktop@3.4.3?type=pom",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://hazendaz.github.io/github-desktop/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/hazendaz/base-parent/actions"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/hazendaz/base-parent/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/hazendaz/github-desktop"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.github.hazendaz.git/github-desktop@3.4.3?type=pom"
    },
    "properties" : [
      {
        "name" : "maven.goal",
        "value" : "makeAggregateBom"
      },
      {
        "name" : "maven.scopes",
        "value" : "compile,provided,runtime,system"
      },
      {
        "name" : "cdx:reproducible",
        "value" : "enabled"
      }
    ]
  },
  "components" : [
    {
      "group" : "org.checkerframework",
      "name" : "checker-qual",
      "version" : "3.45.0",
      "description" : "checker-qual contains annotations (type qualifiers) that a programmerwrites to specify Java code for type-checking by the Checker Framework.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "3f61080318768362d67635e5144c0473"
        },
        {
          "alg" : "SHA-1",
          "content" : "f59fc9e26caad509272d2e2ffbaf275cbc0dd9eb"
        },
        {
          "alg" : "SHA-256",
          "content" : "303ed3d53ec412c549c84f88ba7fb425de51c8876ca62ddf54b26eec43d5b443"
        },
        {
          "alg" : "SHA-512",
          "content" : "95529483b693f3a02c4f812d8febdbb44049d69b10d495d2683c04b6557fdfc02f7d8650ec6654fd286567f5a8b48a496e92771e3c2dc069cb3cb2b1fbb96550"
        },
        {
          "alg" : "SHA-384",
          "content" : "e35de7804133d6caa59d0d4518e4884cd1d1cd7461fbccaaedaca349d0b81b9b5444050df09ba0cc3d28657631c84356"
        },
        {
          "alg" : "SHA3-384",
          "content" : "8c279fcca2e4640b778b10b115bd375cce9616252ec467b9b72008e723f6f24b231065d31b83b854a444c1868079a456"
        },
        {
          "alg" : "SHA3-256",
          "content" : "8aacee4bf2b148049b5b4e3ea6feb01caefe7f036675bb63b04a2940f750bc17"
        },
        {
          "alg" : "SHA3-512",
          "content" : "b550aa24d87a7079ac0ca78c1d53abde6781e85e0f43a1255f5460bcc66d95c276b20e119be1d09c450d2fee6827f8aff370c569e3c20e4fed82289806b3b5fa"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT"
          }
        }
      ],
      "purl" : "pkg:maven/org.checkerframework/checker-qual@3.45.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://checkerframework.org/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/typetools/checker-framework.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.checkerframework/checker-qual@3.45.0?type=jar"
    },
    {
      "publisher" : "Google LLC",
      "group" : "com.google.errorprone",
      "name" : "error_prone_annotations",
      "version" : "2.28.0",
      "description" : "Error Prone is a static analysis tool for Java that catches common programming mistakes at compile-time.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "9e5d2181ddb6acb58fe08e86198c4232"
        },
        {
          "alg" : "SHA-1",
          "content" : "59fc00087ce372de42e394d2c789295dff2d19f0"
        },
        {
          "alg" : "SHA-256",
          "content" : "f3fc8a3a0a4020706a373b00e7f57c2512dd26d1f83d28c7d38768f8682b231e"
        },
        {
          "alg" : "SHA-512",
          "content" : "7af1de57fa662b27965c24894d2b2f23c43e60cc6ee48742c527784fa382372eb61bc97e8d578a8104874574ccda24ba1bda994273ea314672e9b225bc0fc2ca"
        },
        {
          "alg" : "SHA-384",
          "content" : "51e7daa2432317c1e48ac4794ef195cefba1f8d33de340167502657b90d48552aadd503bc62b4a4fcc0414d54c9963f7"
        },
        {
          "alg" : "SHA3-384",
          "content" : "2d6fba006e3896cad00b7b0a3ad73a54f52919661a6a146f7eb9bc320e6fb0b5c1bf7b73b5bef3d555af893d8bd7564a"
        },
        {
          "alg" : "SHA3-256",
          "content" : "7f29eb222b186a835143a9db49402d7bd6f487ecd02e9e6296ef43bb82759cba"
        },
        {
          "alg" : "SHA3-512",
          "content" : "aa67a9ebfc44ea2483c40f395dec38cda1684ceba2a6703279d11ef33effa43cd667b738a7d915d402efb4538d8933d5782287b87bf67a3cf06215f99bbb25ae"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.28.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://errorprone.info/error_prone_annotations"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/google/error-prone/error_prone_annotations"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.28.0?type=jar"
    },
    {
      "group" : "com.google.j2objc",
      "name" : "j2objc-annotations",
      "version" : "3.0.0",
      "description" : "A set of annotations that provide additional information to the J2ObjC translator to modify the result of translation.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f59529b29202a5baf37f491ea5ec8627"
        },
        {
          "alg" : "SHA-1",
          "content" : "7399e65dd7e9ff3404f4535b2f017093bdb134c7"
        },
        {
          "alg" : "SHA-256",
          "content" : "88241573467ddca44ffd4d74aa04c2bbfd11bf7c17e0c342c94c9de7a70a7c64"
        },
        {
          "alg" : "SHA-512",
          "content" : "1406b1aa53b19f8269129d96ce8b64bf36f215eacf7d8f1e0adadee31614e53bb3f7acf4ff97418c5bfc75677a6f3cd637c3d9889d1e85117b6fa12467c91e9f"
        },
        {
          "alg" : "SHA-384",
          "content" : "24373643a4e2f8e1cf919d495e1e79b24dd9dbbbeecb06477be8764313f0b3b465fde74ea2cf5542fc8cba090132052f"
        },
        {
          "alg" : "SHA3-384",
          "content" : "afa264c8d8d946e43438ae728f0ae7a2c12797b56f9ad885d5b3e9a7396eb8481ca6840c2a990a7c5da45968794b36d8"
        },
        {
          "alg" : "SHA3-256",
          "content" : "4df89618b479d5fbede9363c6f914218a44007f48f29c6b6d58243558ced6152"
        },
        {
          "alg" : "SHA3-512",
          "content" : "b25b2ad8dddeed8757ffe22a96cfa7511617d86baa0ed4a25b1850162b54e1132d40dbc2dfca0a6ff0a350b16628a0d2b523418eeb8f986e0f505833da4f7181"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.j2objc/j2objc-annotations@3.0.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/google/j2objc/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "http://github.com/google/j2objc"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.j2objc/j2objc-annotations@3.0.0?type=jar"
    },
    {
      "group" : "org.projectlombok",
      "name" : "lombok",
      "version" : "1.18.34",
      "description" : "Spice up your java: Automatic Resource Management, automatic generation of getters, setters, equals, hashCode and toString, and more!",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "91ce91dbfa7694bff4ddc1e51643f8b2"
        },
        {
          "alg" : "SHA-1",
          "content" : "ec547ef414ab1d2c040118fb9c1c265ada63af14"
        },
        {
          "alg" : "SHA-256",
          "content" : "c27d6b2aff56241d1b07fcbcc6b183709e6b432c80f7374eeb1d823e86d4b81a"
        },
        {
          "alg" : "SHA-512",
          "content" : "2276a0750ce67ae797648cadcdb43a221405cbb07012a3097a03d0965f45e7865b3a247f089060f1e83dff080594fd79a4f31f2ec69841c99b07b2371a76f3f8"
        },
        {
          "alg" : "SHA-384",
          "content" : "81fa058958eb965a2ac93914a77ebf0b8424cdc8c71d4f949e4ca8029041c3f30943bcf310660870e0cc9858982a63ce"
        },
        {
          "alg" : "SHA3-384",
          "content" : "7b13957cbef4197ce52d4a78439c615b5cee4081fb9a38591727146c0d7cfc905747a8e6505d7fc5acdad9cde08f1641"
        },
        {
          "alg" : "SHA3-256",
          "content" : "05aa1a70c86a1cf62ce5cecf594b4c7d46052c2e7205a71de2b4fc33ad8e038e"
        },
        {
          "alg" : "SHA3-512",
          "content" : "a43c333cdab0581e2035d6031498743314dd8e6edf9be9fb3b843b99fc2ec40048f946da6a2c68f64b83b9e40cf64176706507eeb16b9b36782e45dccefe6efa"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT"
          }
        }
      ],
      "purl" : "pkg:maven/org.projectlombok/lombok@1.18.34?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://projectlombok.org"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/projectlombok/lombok/issues"
        },
        {
          "type" : "vcs",
          "url" : "http://github.com/projectlombok/lombok"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.projectlombok/lombok@1.18.34?type=jar"
    },
    {
      "publisher" : "Gaul",
      "group" : "org.gaul",
      "name" : "modernizer-maven-annotations",
      "version" : "2.9.0",
      "description" : "Sonatype helps open source projects to set up Maven repositories on https://oss.sonatype.org/",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "638a555dc0ff4c996e8a920215fc8ea4"
        },
        {
          "alg" : "SHA-1",
          "content" : "4de00c50ce237cf7a721ffe907e11f0688538b04"
        },
        {
          "alg" : "SHA-256",
          "content" : "baeca9a46aae8dbe8075058726389112382bc60be811e70886fbaba57c68502f"
        },
        {
          "alg" : "SHA-512",
          "content" : "8077ee42b5bc87710f970dd8c530194effeb9ffbb57a06040a20ac6e5dcb4d9537186c5c0d6c6fed33f7abd5f62c35bb6deb45f22a4f0df2325d3780ff7ed485"
        },
        {
          "alg" : "SHA-384",
          "content" : "6cb32d23c0e0c831956d37f25a8b0db0d383956d821f7576d9d25f93c46b886d9bbc90ba0257e6252944fc58758507eb"
        },
        {
          "alg" : "SHA3-384",
          "content" : "22e1cf04abcb318e9637fc83c8b837c169e9b15ee3df614116fdfa92ee78942d0c55490f883492223b5c6bd6519848ea"
        },
        {
          "alg" : "SHA3-256",
          "content" : "47314fbc8fc947921438af574cfe5bc815f4cbe8c30eb8253ca4b3984e767c36"
        },
        {
          "alg" : "SHA3-512",
          "content" : "c4013e2f94688009aed46b0efe4bc91b23c8a621076371f2affc68cdb63110c25d126865ebbdc2af747cac103d5ae4954e412a3fca08581280de69c98c4c4a87"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.gaul/modernizer-maven-annotations@2.9.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://nexus.sonatype.org/oss-repository-hosting.html/modernizer-maven-parent/modernizer-maven-annotations"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/gaul/modernizer-maven-plugin/issues"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.gaul/modernizer-maven-annotations@2.9.0?type=jar"
    },
    {
      "group" : "com.github.spotbugs",
      "name" : "spotbugs-annotations",
      "version" : "4.8.6",
      "description" : "Annotations the SpotBugs tool supports",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "0806b237c67c69869506ce3ced9a722f"
        },
        {
          "alg" : "SHA-1",
          "content" : "1dcffed3e561ed32134a0dff4717f19bc2fdf4d8"
        },
        {
          "alg" : "SHA-256",
          "content" : "4548b74a815ed44f5480ca4f06204a8b00809dc7e5f6a825a9edf18f40377b65"
        },
        {
          "alg" : "SHA-512",
          "content" : "ebe5bca26efc72b82c168b65f8f4b1b55768e0464edb9e732e48bcb05b3de7e761e50f0da46e96f02258b4bc4443f4e4a5e7d53956b17161674238b564f6018d"
        },
        {
          "alg" : "SHA-384",
          "content" : "ed8acfde5a975f6aa24930caf2889cddeee21226497ca7ca403a25afdc2a6a32d7a6d53cc117143401e3698c87b33159"
        },
        {
          "alg" : "SHA3-384",
          "content" : "eca5720d9a38a2dfe8667dd73003e4fd6d3a0503219d4aea539570374bdbe9157dfe945502de2d40b4f20a4caebd2100"
        },
        {
          "alg" : "SHA3-256",
          "content" : "59bcae1d85e982281500f515c27f49c292f5b0f57a69204859f9c5243a64917f"
        },
        {
          "alg" : "SHA3-512",
          "content" : "0b77811020ea0052e4b799add234754e2f3437b28f0f4f51f49df9de7bad5d97b4262aed175cc16f2d110a7c49adf88d99dc8f12bb2751ca6bff845ba09c473a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "LGPL-2.1-only"
          }
        }
      ],
      "purl" : "pkg:maven/com.github.spotbugs/spotbugs-annotations@4.8.6?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://spotbugs.github.io/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/spotbugs/spotbugs/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.github.spotbugs/spotbugs-annotations@4.8.6?type=jar"
    },
    {
      "group" : "com.google.code.findbugs",
      "name" : "jsr305",
      "version" : "3.0.2",
      "description" : "JSR305 Annotations for Findbugs",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "dd83accb899363c32b07d7a1b2e4ce40"
        },
        {
          "alg" : "SHA-1",
          "content" : "25ea2e8b0c338a877313bd4672d3fe056ea78f0d"
        },
        {
          "alg" : "SHA-256",
          "content" : "766ad2a0783f2687962c8ad74ceecc38a28b9f72a2d085ee438b7813e928d0c7"
        },
        {
          "alg" : "SHA-512",
          "content" : "bb09db62919a50fa5b55906013be6ca4fc7acb2e87455fac5eaf9ede2e41ce8bbafc0e5a385a561264ea4cd71bbbd3ef5a45e02d63277a201d06a0ae1636f804"
        },
        {
          "alg" : "SHA-384",
          "content" : "ca0b169d3eb2d0922dc031133a021f861a043bb3e405a88728215fd6ff00fa52fdc7347842dcc2031472e3726164bdc4"
        },
        {
          "alg" : "SHA3-384",
          "content" : "9903fd7505218999f8262efedb3d935d64bcef84aae781064ab5e1b24755466b269517cada562fa140cd1d417ede57a1"
        },
        {
          "alg" : "SHA3-256",
          "content" : "223fda9a89a461afaae73b177a2dc20ed4a90f2f8757f5c65f3241b0510f00ff"
        },
        {
          "alg" : "SHA3-512",
          "content" : "3996b5af57a5d5c6a0cd62b11773360fb051dd86a2ba968476806a2a5d32049b82d69a24a3c694e8fe4d735be6a28e41000cc500cc2a9fb577e058045855d2d6"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://findbugs.sourceforge.net/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://code.google.com/p/jsr-305/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar"
    }
  ],
  "dependencies" : [
    {
      "ref" : "pkg:maven/com.github.hazendaz.git/github-desktop@3.4.3?type=pom",
      "dependsOn" : [
        "pkg:maven/org.checkerframework/checker-qual@3.45.0?type=jar",
        "pkg:maven/com.google.errorprone/error_prone_annotations@2.28.0?type=jar",
        "pkg:maven/com.google.j2objc/j2objc-annotations@3.0.0?type=jar",
        "pkg:maven/org.projectlombok/lombok@1.18.34?type=jar",
        "pkg:maven/org.gaul/modernizer-maven-annotations@2.9.0?type=jar",
        "pkg:maven/com.github.spotbugs/spotbugs-annotations@4.8.6?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.checkerframework/checker-qual@3.45.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.28.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.google.j2objc/j2objc-annotations@3.0.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.projectlombok/lombok@1.18.34?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.gaul/modernizer-maven-annotations@2.9.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.github.spotbugs/spotbugs-annotations@4.8.6?type=jar",
      "dependsOn" : [
        "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar",
      "dependsOn" : [ ]
    }
  ]
}