{
  "bomFormat" : "CycloneDX",
  "specVersion" : "1.4",
  "version" : 1,
  "metadata" : {
    "tools" : [
      {
        "vendor" : "OWASP Foundation",
        "name" : "CycloneDX Maven plugin",
        "version" : "2.7.9",
        "hashes" : [
          {
            "alg" : "MD5",
            "content" : "8e595cdb67f17e4b41e046456970591d"
          },
          {
            "alg" : "SHA-1",
            "content" : "69e8ca804520d09ce4657e7235bae84d01cbffa6"
          },
          {
            "alg" : "SHA-256",
            "content" : "aa09074fe5aa403c008cd4fc7ef8ce41cd244489337f16b3e91a3914158a4db8"
          },
          {
            "alg" : "SHA-512",
            "content" : "1488a8112da8e675813d7585f57c5efb178aed32901118186ee12d0e4ae3d19c53774c7f860bf70d17d70f050119b69443a2637cf641675b4b5d9cdcdd69b89b"
          },
          {
            "alg" : "SHA-384",
            "content" : "b097295dfbf10887abc6eec58d4d0822cde5a73d1f5c1cf183a57bf569016ad5ced9d34efae3e574d82bb62837540c6c"
          },
          {
            "alg" : "SHA3-384",
            "content" : "289f9520bd73a2031276248a6ef8f0891c691062c2d1ea86a2bc9ea8db2c52377d92a53be9957179e71aee3deda26a8c"
          },
          {
            "alg" : "SHA3-256",
            "content" : "32b50a7efe5d491a4039c0017eca3cf49d98b55fc66d06b3dd06209487323474"
          },
          {
            "alg" : "SHA3-512",
            "content" : "1daf813da53e5d5cda4d0302ff3a5e388aa45d96ebe6dcbe240f35d33f14b1e6390f6bbe7f21f3ed8cf96ebd9f5516a08b18487b7339715109c81cebfc1563df"
          }
        ]
      }
    ],
    "component" : {
      "group" : "nl.basjes.codeowners",
      "name" : "codeowners-reader",
      "version" : "0.2.2",
      "description" : "A library to use and verify the CODEOWNERS and .gitignore files.",
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/nl.basjes.codeowners/codeowners-reader@0.2.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/nielsbasjes/codeowners"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/nielsbasjes/codeowners"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/nl.basjes.codeowners/codeowners-reader@0.2.2?type=jar"
    },
    "properties" : [
      {
        "name" : "maven.goal",
        "value" : "makeBom"
      },
      {
        "name" : "maven.scopes",
        "value" : "compile,provided,runtime,system"
      },
      {
        "name" : "maven.reproducible",
        "value" : "enabled"
      }
    ]
  },
  "components" : [
    {
      "publisher" : "ANTLR",
      "group" : "org.antlr",
      "name" : "antlr4-runtime",
      "version" : "4.12.0",
      "description" : "The ANTLR 4 Runtime",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "7fe001eac486c91a7f168cfe7adfb395"
        },
        {
          "alg" : "SHA-1",
          "content" : "dd105cf6ac9f7417b3782c178f6dbd06bf75df57"
        },
        {
          "alg" : "SHA-256",
          "content" : "db353b34927d6e10cd790905cea3c8e17283db464daf572e3eadbb9ee569da34"
        },
        {
          "alg" : "SHA-512",
          "content" : "4abb69a3c6895edeec64c11d61886fbeb68eda5ebb21094f596e4f7add8afa9ff049c05fa916264b9185ac9013b16d8eabf44fb65da0b6871997c8f1473a3771"
        },
        {
          "alg" : "SHA-384",
          "content" : "cd35940addb3277bf74ab06266371ccc43e7e7b1cfb6698e024304f2b32b3f3b9eb78fd9f119bc4cb04bfd9b5c15eae6"
        },
        {
          "alg" : "SHA3-384",
          "content" : "6e159bd89432e3f3028ca72967e9155c2ca02482a0196c4451da79185ba402ef6f63784f02356e3ae56c21af696180ad"
        },
        {
          "alg" : "SHA3-256",
          "content" : "405afb6ae207ccba4e8c557250cc9bd2fe095514659128d313dc70b5341e4963"
        },
        {
          "alg" : "SHA3-512",
          "content" : "78d32315ed8d294fa68b4af6dda0791af76ba61864ef5736520d5173c73963a014c1f977dcd0f236a07e728516fbf78cc75a49acd5c484783da1ef16c3ac4fcc"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause",
            "url" : "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.antlr/antlr4-runtime@4.12.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.antlr.org/antlr4-runtime/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/antlr/antlr4/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://groups.google.com/forum/?fromgroups#!forum/antlr-discussion"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/antlr/antlr4/tree/master/antlr4-runtime"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.antlr/antlr4-runtime@4.12.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-io",
      "name" : "commons-io",
      "version" : "2.12.0",
      "description" : "The Apache Commons IO library contains utility classes, stream implementations, file filters, file comparators, endian transformation classes, and much more.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "7abdf3e1c7bb44ae120be4b7dc1995f0"
        },
        {
          "alg" : "SHA-1",
          "content" : "e5e3eb2ff05b494287f51476bc715161412c525f"
        },
        {
          "alg" : "SHA-256",
          "content" : "74bd60c8eebd3d43f77a66c69c86540c257a3a098172f8b1d7fcdc9ed3e139ea"
        },
        {
          "alg" : "SHA-512",
          "content" : "12fa3ea9f841f1ff847d89c31dff5edc2e05939efa7b2395fa8b82949b209fe9cbda613ca9290c19d0ddfa6017a4391156efaf548aeb12fd0918928e285f0623"
        },
        {
          "alg" : "SHA-384",
          "content" : "de2993427516b5fd96d44d5269d4b853dfeae5fab2949606873218633a4d0e8492ac985a0590fbd74a1274ff89c7073f"
        },
        {
          "alg" : "SHA3-384",
          "content" : "bc73c7de65ff28740182bc0b226b42a861137be17761f4abffdf8228b8af0289f34dfb6e6e07fd1cfb9ea6936a78b40e"
        },
        {
          "alg" : "SHA3-256",
          "content" : "694e837f8152a70fff1e0c0aa90da00c29f2a501fde74b1cc0d50182107589fa"
        },
        {
          "alg" : "SHA3-512",
          "content" : "387337bf3605b6714a3006c47c069accddf8ac3c34b8f2681aa1dbdbebc319a3bd60107437edc389eff17fa649347c6650ee8317a39e3ca150fdaceb86f3818b"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-io/commons-io@2.12.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-io/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-parent/actions"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/IO"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-io.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-io/commons-io@2.12.0?type=jar"
    },
    {
      "publisher" : "QOS.ch",
      "group" : "org.slf4j",
      "name" : "slf4j-api",
      "version" : "1.7.36",
      "description" : "The slf4j API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "872da51f5de7f3923da4de871d57fd85"
        },
        {
          "alg" : "SHA-1",
          "content" : "6c62681a2f655b49963a5983b8b0950a6120ae14"
        },
        {
          "alg" : "SHA-256",
          "content" : "d3ef575e3e4979678dc01bf1dcce51021493b4d11fb7f1be8ad982877c16a1c0"
        },
        {
          "alg" : "SHA-512",
          "content" : "f9b033fc019a44f98b16048da7e2b59edd4a6a527ba60e358f65ab88e0afae03a9340f1b3e8a543d49fa542290f499c5594259affa1ff3e6e7bf3b428d4c610b"
        },
        {
          "alg" : "SHA-384",
          "content" : "2b14ad035877087157e379d3277dcdcd79e58d6bdb147c47d29e377d75ce53ad42cafbf22f5fb7827c7e946ff4876b9a"
        },
        {
          "alg" : "SHA3-384",
          "content" : "3bc3110dafb8d5be16a39f3b2671a466463cd99eb39610c0e4719a7bf2d928f2ea213c734887c6926a07c4cca7769e4b"
        },
        {
          "alg" : "SHA3-256",
          "content" : "ba2608179fcf46e2291a90b9cbb4aa30d718e481f59c350cc21c73b88d826881"
        },
        {
          "alg" : "SHA3-512",
          "content" : "14c4edcd19702ef607d78826839d8a6d3a39157df54b89a801d3d3cbbe1307131a77671b041c761122730fb1387888c5ec2e46bdd80e1cb07f8f144676441824"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.slf4j.org"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/qos-ch/slf4j/slf4j-api"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
    }
  ],
  "dependencies" : [
    {
      "ref" : "pkg:maven/nl.basjes.codeowners/codeowners-reader@0.2.2?type=jar",
      "dependsOn" : [
        "pkg:maven/org.antlr/antlr4-runtime@4.12.0?type=jar",
        "pkg:maven/commons-io/commons-io@2.12.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.antlr/antlr4-runtime@4.12.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/commons-io/commons-io@2.12.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
      "dependsOn" : [ ]
    }
  ]
}