<?xml version="1.0" encoding="UTF-8"?>
<bom serialNumber="urn:uuid:4cfeb233-a397-3d74-b1b0-b84df2261c06" version="1" xmlns="http://cyclonedx.org/schema/bom/1.6">
  <metadata>
    <lifecycles>
      <lifecycle>
        <phase>build</phase>
      </lifecycle>
    </lifecycles>
    <tools>
      <components>
        <component type="library">
          <author>OWASP Foundation</author>
          <group>org.cyclonedx</group>
          <name>cyclonedx-maven-plugin</name>
          <version>2.9.1</version>
          <description>CycloneDX Maven plugin</description>
          <hashes>
            <hash alg="MD5">9c7a565cf28cce58557d0c621c5ea4b1</hash>
            <hash alg="SHA-1">be882d5a22050bfa9d19090b1420c188617d0e1c</hash>
            <hash alg="SHA-256">698e0f37184a5b28c245c4065fd036dfce253b52f82fbb7113d81d36326cc249</hash>
            <hash alg="SHA-512">c0f0b11026858166f872a2eb54719492e5cecaa0bc9cd6b30b3ecb4a174eed220f4a1b5829d18d6734128e778d3cb3db7ffed177c92866133129cb29081814a0</hash>
            <hash alg="SHA-384">d80964707dfe5caca8c70521d5066f57589304c0a657e6fbc7c0614ea0fc7b3b3dbe7778361eee0f54ba111e9cb0ffcb</hash>
            <hash alg="SHA3-384">80bc3a275d9514bc457461ff52a72add8c7ecbbc01d8912efce57139016c544ee776981851be0a58fa977ab4221f703f</hash>
            <hash alg="SHA3-256">142317d6f245390f4fd2d0c100b16281b8dfc5c0c2cff86943bdcc97039cb699</hash>
            <hash alg="SHA3-512">af0fb9137c90b65d1a07f72e4d51ae509956cdb8800f35c961b037cdda1fe4a14ce3b496cef71ba85f1621affcfe29cd42704ae4191ff0b090a9602087c8997b</hash>
          </hashes>
        </component>
      </components>
    </tools>
    <component type="library" bom-ref="pkg:maven/com.github.hazendaz.git/github-desktop@3.5.3?type=pom">
      <publisher>hazendaz</publisher>
      <group>com.github.hazendaz.git</group>
      <name>github-desktop</name>
      <version>3.5.3</version>
      <description>Distribution for Github Desktop</description>
      <licenses>
        <license>
          <id>MIT</id>
          <url>https://opensource.org/license/mit/</url>
        </license>
      </licenses>
      <purl>pkg:maven/com.github.hazendaz.git/github-desktop@3.5.3?type=pom</purl>
      <externalReferences>
        <reference type="website">
          <url>https://hazendaz.github.io/github-desktop/</url>
        </reference>
        <reference type="build-system">
          <url>https://github.com/hazendaz/base-parent/actions</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/hazendaz/base-parent/issues</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/hazendaz/github-desktop</url>
        </reference>
      </externalReferences>
    </component>
    <properties>
      <property name="maven.goal">makeAggregateBom</property>
      <property name="maven.scopes">compile,provided,runtime,system</property>
      <property name="cdx:reproducible">enabled</property>
    </properties>
  </metadata>
  <components>
    <component type="library" bom-ref="pkg:maven/org.checkerframework/checker-qual@3.51.1?type=jar">
      <group>org.checkerframework</group>
      <name>checker-qual</name>
      <version>3.51.1</version>
      <description>checker-qual contains annotations (type qualifiers) that a programmerwrites to specify Java code for type-checking by the Checker Framework.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">1b247ba89d3b8776fa6223324b934f56</hash>
        <hash alg="SHA-1">d69c339a293b5ec04b26c9d994cbeffb7056d122</hash>
        <hash alg="SHA-256">153aeffe56ca24f3a9b8b6c6ff813eace9620ccf35adfab91d491682e56cd5ce</hash>
        <hash alg="SHA-512">633a0c396bc01883d6c69dbc53da980784d8837d71b09b859d1571ca5a3b608e6cf249bac04575a6f33498fc92d8d6eed7200e49ac768ab0d5b0d2b2bf2d8b86</hash>
        <hash alg="SHA-384">36d6b388b2f606cad4c553a8428683b4b5a660889e7abae80239e1c99d3a49276f6fcd653361442dc859edfd1be1ac96</hash>
        <hash alg="SHA3-384">38ee940b1b11347927805d9967ab52e3c546f2a9c7813a08521e1585c6fd44638b3fcf1617a3f719db858deec7919658</hash>
        <hash alg="SHA3-256">2c140484ce425e139eed1fb891aad5e305a30538fd438df9a15258539c4a546f</hash>
        <hash alg="SHA3-512">831bf77b4aaf7be7489f7bcdc2f577408e43fb6790ede4a78bce14832cb785a53029c1b0f7175d4ade96da4c9650b0f1599425df931ebf3359185bd7ee897f41</hash>
      </hashes>
      <licenses>
        <license>
          <id>MIT</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.checkerframework/checker-qual@3.51.1?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://checkerframework.org/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/typetools/checker-framework.git</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.errorprone/error_prone_annotations@2.42.0?type=jar">
      <publisher>Google LLC</publisher>
      <group>com.google.errorprone</group>
      <name>error_prone_annotations</name>
      <version>2.42.0</version>
      <description>Error Prone is a static analysis tool for Java that catches common programming mistakes at compile-time.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">27a54b790cf5121be1982b585870154d</hash>
        <hash alg="SHA-1">57a3eddaddd4f2d412e13d3bcefba29b5ebda1b6</hash>
        <hash alg="SHA-256">f282a6488838986b8033bd51888928cff6a59c1050426476553ed2622b89e510</hash>
        <hash alg="SHA-512">9d6a341d87452501cf13c6e68bed77f58fe1736d566dd1b58f6cf57ed578501babc83a80fb178f3ea1e72708519c2d22863a7d6381a98ab3eba4a9c01d100054</hash>
        <hash alg="SHA-384">8c3ee1746eea7ea7ea422920a8bce00ad4cd7fa1dce316d098af1aea7fc6408251cb2c572cf1f54ba68442eeb5dcec6f</hash>
        <hash alg="SHA3-384">376699ff9211b5ff09ee8516915fe167dd6b4b6c6c904060a065e0c661fc4c4a356c6efbb2230e7c23d50227450a59d2</hash>
        <hash alg="SHA3-256">0dfc90c294687aa2b05c33bb60da6b1adf3f0516f4c9c46408a7b2ae2094ab23</hash>
        <hash alg="SHA3-512">27ea33ba2cd9ad098cd2c1299b62b1c2b9d41dd6aad8dfdcde34f92df27c6b0c68525036b27bcf57d2831a78faaa2c71427c63985dedcf1275f82115cbb33be0</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.errorprone/error_prone_annotations@2.42.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://errorprone.info/error_prone_annotations</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/google/error-prone/error_prone_annotations</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.j2objc/j2objc-annotations@3.1?type=jar">
      <group>com.google.j2objc</group>
      <name>j2objc-annotations</name>
      <version>3.1</version>
      <description>A set of annotations that provide additional information to the J2ObjC
    translator to modify the result of translation.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">abe8bd3abff622b9a8b15c3a737aa741</hash>
        <hash alg="SHA-1">a892ca9507839bbdb900d64310ac98256cab992f</hash>
        <hash alg="SHA-256">84d3a150518485f8140ea99b8a985656749629f6433c92b80c75b36aba3b099b</hash>
        <hash alg="SHA-512">34ee5aad57b0b507e89c897306f73043f80fa0eb02b453e54d9052feb0808a0d2ed835d888946211921d2bf733780b19ff636479ce19b9f48814ba6008733ce1</hash>
        <hash alg="SHA-384">7b760a346a586d6a3fa4477807e2f02f091e61898fc9a6ff449e43c55b6465fbbc17720663183c84c41d4d8814085e51</hash>
        <hash alg="SHA3-384">a2166c1c08f947c0e60aa7c9167602942e7bac37ba45863d34c0132a1f352e7807a382588d350b93bdbbbbe315a3573f</hash>
        <hash alg="SHA3-256">3d4d3b8bfd2ad13351a53610aa4bf1c5a69d2bde4272c281003120ed9bcddb8c</hash>
        <hash alg="SHA3-512">0a574b379a3f8022f0b88252c87d0e6b6cfa434fdb981efd1b24387025a962d7ac4e90161e8bd048df142bf52f4fc41e4a0c1d45e4eeb872c5954aad552988e9</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.j2objc/j2objc-annotations@3.1?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/google/j2objc/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="vcs">
          <url>http://github.com/google/j2objc</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.projectlombok/lombok@1.18.42?type=jar">
      <group>org.projectlombok</group>
      <name>lombok</name>
      <version>1.18.42</version>
      <description>Spice up your java: Automatic Resource Management, automatic generation of getters, setters, equals, hashCode and toString, and more!</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">f29149836e0187fb9fd95d82dc718d36</hash>
        <hash alg="SHA-1">8365263844ebb62398e0dc33057ba10ba472d3b8</hash>
        <hash alg="SHA-256">3488a4e9994c26596baaceebee58cad36a50e3bdaec5be72b5834d3c3b560306</hash>
        <hash alg="SHA-512">7ddad4f59705bde29a1fe818fbd28fac0fcf9e83eee08b2fd16af24ff2cd3afe93643b0b9ddbfdf0fe9fa999b5a23348a5fe45e41f4a9c543909beadf48be794</hash>
        <hash alg="SHA-384">c93fee1dd47988ff6d9bc0a84dec31650abdfb6ec9d9cf076434b62b118a0b06544ebb3d3bf3796962cb890f66e876ea</hash>
        <hash alg="SHA3-384">967d7555c30f8d40d2de38c64c96f6a865a6465953db712e55818cb1f0f47eb002561159ed21f2d5e31db4c76430433d</hash>
        <hash alg="SHA3-256">291e591c341b4b370365c63e616210831fcfed09239d28ce1b459e15d851c3fc</hash>
        <hash alg="SHA3-512">daaa58823eda466fdd12ab325ace764d0166011965e42520e3145fd28a55547a5b9f4ea0ea487ee80bce33121546e33b8bde103004e033f5996758589e8cde43</hash>
      </hashes>
      <licenses>
        <license>
          <id>MIT</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.projectlombok/lombok@1.18.42?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://projectlombok.org</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/projectlombok/lombok/issues</url>
        </reference>
        <reference type="vcs">
          <url>http://github.com/projectlombok/lombok</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.gaul/modernizer-maven-annotations@3.2.0?type=jar">
      <publisher>Gaul</publisher>
      <group>org.gaul</group>
      <name>modernizer-maven-annotations</name>
      <version>3.2.0</version>
      <description>Detect use of legacy APIs which modern Java versions supersede.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">127396b14eb51fd93eb587308f079768</hash>
        <hash alg="SHA-1">23a99089ff682152e86ab1691a8232db325def09</hash>
        <hash alg="SHA-256">9f9396f361f0d45d435355c1f2b57980307abd81f3131083ec18f54fbbaa5ecb</hash>
        <hash alg="SHA-512">db08ed6259910d293de42a801c9c675fe842a7cfbef9af79102ff088666f27e743d7b048902a9a8d710e40b86bb122d8f9fa04de5d105d775cd1115595843a99</hash>
        <hash alg="SHA-384">d0d01d5fa7958008a8c31c5ae38d5acfebfcf1ae15fe7836825cc600b809c1a6f73693716ce8bf6649e4dfd6c8aef7db</hash>
        <hash alg="SHA3-384">36fac13001bd3a2341784fb86027db32499918a43a39e0e55273a21c06ae39368c1d730e5b5c7acbadac1e5e461fb964</hash>
        <hash alg="SHA3-256">bc1e537f7b467b793333cb4a1fefe2896e6dc335293ab441c51ec9764c8aa34e</hash>
        <hash alg="SHA3-512">5c6918a90c8ea4dbcd73bee8708011323e8b342f87d43f3c284fe532f5063e4c430ee60577a946017a134873e1b3791694fde2d9d008abb450bb3812e255bdca</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.gaul/modernizer-maven-annotations@3.2.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/gaul/modernizer-maven-plugin/modernizer-maven-annotations</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repo.maven.apache.org/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/gaul/modernizer-maven-plugin/issues</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.github.spotbugs/spotbugs-annotations@4.9.6?type=jar">
      <group>com.github.spotbugs</group>
      <name>spotbugs-annotations</name>
      <version>4.9.6</version>
      <description>Annotations the SpotBugs tool supports</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">afeb53284357009299bf2ac13cf021b2</hash>
        <hash alg="SHA-1">fa9760f5a45bd158dab85aa7e2d954de5d389bbf</hash>
        <hash alg="SHA-256">523d394a6b36174ad0a22f0c1c75b105ccff42869a8b7ce86e7fd339ca6f86ce</hash>
        <hash alg="SHA-512">df639d7af3d8c764d6baac81015ef94ce567dd629f7e7db5b5569d7f380ea5bdd3983d9f09d136bbb9aa7f25467aeb8227a9c628d1a8178cddd0172a743161a1</hash>
        <hash alg="SHA-384">6da0f0f1d90314f38be58cf604def71cb90cf0bc9c14b0ec7d2ae487925e11c988664c73ccb5967e2d87c413dd3ae6c6</hash>
        <hash alg="SHA3-384">3c75b2eb449eb5e6d234d00def276864d1b55937406ddd854278ce8562a6aa7f1a1ccdb55387c483014f2d89ffa482f4</hash>
        <hash alg="SHA3-256">9036584641cecba8a2aeb3dac9c02adfcb9e375c966e29eb974fd8661b719957</hash>
        <hash alg="SHA3-512">0ef218a01bcf328909377ba0bd9cddbb52b393e60c5b670663610a1943dcd138a5622bf4dd1b96e4e38ed68951d7b74e15ecd087465f6cc0b4c339cb917cb6e2</hash>
      </hashes>
      <licenses>
        <license>
          <id>LGPL-2.1-only</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.github.spotbugs/spotbugs-annotations@4.9.6?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://spotbugs.github.io/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/spotbugs/spotbugs/</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar">
      <group>com.google.code.findbugs</group>
      <name>jsr305</name>
      <version>3.0.2</version>
      <description>JSR305 Annotations for Findbugs</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">dd83accb899363c32b07d7a1b2e4ce40</hash>
        <hash alg="SHA-1">25ea2e8b0c338a877313bd4672d3fe056ea78f0d</hash>
        <hash alg="SHA-256">766ad2a0783f2687962c8ad74ceecc38a28b9f72a2d085ee438b7813e928d0c7</hash>
        <hash alg="SHA-512">bb09db62919a50fa5b55906013be6ca4fc7acb2e87455fac5eaf9ede2e41ce8bbafc0e5a385a561264ea4cd71bbbd3ef5a45e02d63277a201d06a0ae1636f804</hash>
        <hash alg="SHA-384">ca0b169d3eb2d0922dc031133a021f861a043bb3e405a88728215fd6ff00fa52fdc7347842dcc2031472e3726164bdc4</hash>
        <hash alg="SHA3-384">9903fd7505218999f8262efedb3d935d64bcef84aae781064ab5e1b24755466b269517cada562fa140cd1d417ede57a1</hash>
        <hash alg="SHA3-256">223fda9a89a461afaae73b177a2dc20ed4a90f2f8757f5c65f3241b0510f00ff</hash>
        <hash alg="SHA3-512">3996b5af57a5d5c6a0cd62b11773360fb051dd86a2ba968476806a2a5d32049b82d69a24a3c694e8fe4d735be6a28e41000cc500cc2a9fb577e058045855d2d6</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://findbugs.sourceforge.net/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="vcs">
          <url>https://code.google.com/p/jsr-305/</url>
        </reference>
      </externalReferences>
    </component>
  </components>
  <dependencies>
    <dependency ref="pkg:maven/com.github.hazendaz.git/github-desktop@3.5.3?type=pom">
      <dependency ref="pkg:maven/org.checkerframework/checker-qual@3.51.1?type=jar"/>
      <dependency ref="pkg:maven/com.google.errorprone/error_prone_annotations@2.42.0?type=jar"/>
      <dependency ref="pkg:maven/com.google.j2objc/j2objc-annotations@3.1?type=jar"/>
      <dependency ref="pkg:maven/org.projectlombok/lombok@1.18.42?type=jar"/>
      <dependency ref="pkg:maven/org.gaul/modernizer-maven-annotations@3.2.0?type=jar"/>
      <dependency ref="pkg:maven/com.github.spotbugs/spotbugs-annotations@4.9.6?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.checkerframework/checker-qual@3.51.1?type=jar"/>
    <dependency ref="pkg:maven/com.google.errorprone/error_prone_annotations@2.42.0?type=jar"/>
    <dependency ref="pkg:maven/com.google.j2objc/j2objc-annotations@3.1?type=jar"/>
    <dependency ref="pkg:maven/org.projectlombok/lombok@1.18.42?type=jar"/>
    <dependency ref="pkg:maven/org.gaul/modernizer-maven-annotations@3.2.0?type=jar"/>
    <dependency ref="pkg:maven/com.github.spotbugs/spotbugs-annotations@4.9.6?type=jar">
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar"/>
  </dependencies>
</bom>
