<?xml version="1.0" encoding="UTF-8"?>
<bom version="1" xmlns="http://cyclonedx.org/schema/bom/1.4">
  <metadata>
    <tools>
      <tool>
        <vendor>OWASP Foundation</vendor>
        <name>CycloneDX Maven plugin</name>
        <version>2.7.10</version>
        <hashes>
          <hash alg="MD5">1cc7f6a0382f8bb2f758d6a6ea401d1b</hash>
          <hash alg="SHA-1">a4297947a1f2d7d453105db542651614bbd37f38</hash>
          <hash alg="SHA-256">bd0fdd8f2f2116eee5e715aeac1580f19eb7a10ec2b6f805b53567067658e872</hash>
          <hash alg="SHA-512">9cde8352a427e10b96cae01348fc7cfe5d4aa9cd0a5e5dd93b414ce3bb7d112993c3b3004e53af52567fbfa16de0704ec59a5556a635ad70571fd124ae389f39</hash>
          <hash alg="SHA-384">93d7bf5b5c735347edfbfbd66810273ca840f9a322b816d22d44c3d8e8255c09e86570bb23712aeb0cade0f478be5aeb</hash>
          <hash alg="SHA3-384">4467f16e9ca32190a6e49c65339eb28ee5e8c78f4e918fcf95128a4b7648898de56ccb43eacfad0c9391ef8cdb7d629a</hash>
          <hash alg="SHA3-256">ed2996c99b483e969221d5e9a40f562ea2ab85442d361d72a90e85266a3ed781</hash>
          <hash alg="SHA3-512">c8e6ea9ddc38edc77e284b3bf541663e84752bdc59ed1935799847a48a14ea2fa531b61008fefcba37d732a56702a11ac112437b9b80d18f4ecc8ef0ecfb32cf</hash>
        </hashes>
      </tool>
    </tools>
    <component type="library" bom-ref="pkg:maven/nl.basjes.codeowners/codeowners-reader@0.3.2?type=jar">
      <group>nl.basjes.codeowners</group>
      <name>codeowners-reader</name>
      <version>0.3.2</version>
      <description>A library to use and verify the CODEOWNERS and .gitignore files.</description>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/nl.basjes.codeowners/codeowners-reader@0.3.2?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/nielsbasjes/codeowners</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/nielsbasjes/codeowners</url></reference></externalReferences>
    </component>
    <properties>
      <property name="maven.goal">makeBom</property>
      <property name="maven.scopes">compile,provided,runtime,system</property>
      <property name="cdx:reproducible">enabled</property>
    </properties>
  </metadata>
  <components>
    <component type="library" bom-ref="pkg:maven/org.antlr/antlr4-runtime@4.13.1?type=jar">
      <publisher>ANTLR</publisher>
      <group>org.antlr</group>
      <name>antlr4-runtime</name>
      <version>4.13.1</version>
      <description>The ANTLR 4 Runtime</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">dd465ddb2a8dbf69eb6c94e69a0d5f0f</hash>
        <hash alg="SHA-1">17125bae1d965624e265ef49552f6465a2bfa307</hash>
        <hash alg="SHA-256">54665d2838cc66458343468efc539e454fc95b46a8a04b13c6ac43fc9be63505</hash>
        <hash alg="SHA-512">63eb51bfcee49c52848d8b7c3c46d8b4d367d85fb3c3db7175eaacba94e4d0c227b78e5955a0e86e575e1c6206fc2a43e5fa96fb04ad7c16e24ec94015cfc18b</hash>
        <hash alg="SHA-384">9e5e022d1eff5870f53e0e17d09d737eebb5b859c3403e78308af4616a86cde0830842b81a389ac4a0df871fb1032124</hash>
        <hash alg="SHA3-384">20f3a927369f6bfd94bd8b244e0e9330d4438736414c403b712098f6aad9a1140bc17333cacf194f1b9e99c0f62ffdfa</hash>
        <hash alg="SHA3-256">5696b3e757e6135c1aa56452b86ff0456425d13b97b33ace3f4d3dc6c752c4b6</hash>
        <hash alg="SHA3-512">33251a06eaeaa56f274548e47b405cce279a9e54e34d65bc382d2482887bd470e5080da4f75c221658c3e70aea79e748bd0a3f47e49e37805174e23f71747b92</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
          <url>https://opensource.org/licenses/BSD-3-Clause</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.antlr/antlr4-runtime@4.13.1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://www.antlr.org/antlr4-runtime/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/antlr/antlr4/issues</url></reference><reference type="mailing-list"><url>https://groups.google.com/forum/?fromgroups#!forum/antlr-discussion</url></reference><reference type="vcs"><url>https://github.com/antlr/antlr4/tree/master/antlr4-runtime</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-io/commons-io@2.15.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>commons-io</group>
      <name>commons-io</name>
      <version>2.15.0</version>
      <description>The Apache Commons IO library contains utility classes, stream implementations, file filters,
file comparators, endian transformation classes, and much more.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">125a9d3dc2477b10cc6fa6e89c699e81</hash>
        <hash alg="SHA-1">5c3c2db10f6f797430a7f9c696b4d1273768c924</hash>
        <hash alg="SHA-256">a328dad730921d197b6a9b195dffa00e41c974c2dac8fe37e84d31706bca7792</hash>
        <hash alg="SHA-512">49cf3897bf456f9639900aa9ebb396666718c5828b93bc6a95195e8cdafc15db5b436567b15752d9f3cd1cc0d9eebe4447320fccaac6733d883aac451e93fcc7</hash>
        <hash alg="SHA-384">906eafa0f5b574cf3bad0b0377547766acc8a8bd7bbaf2cedf9756c98f5a7e2fe7ec7138ff7de00ac883efaab6f8126c</hash>
        <hash alg="SHA3-384">ae57f0d70a03c04dc6189c5a5348cb6aecf9a31caa236b199dd62d57248e0933d2503562c2c853554710aa07442563d7</hash>
        <hash alg="SHA3-256">d58450d9668ff4ca97d90eb9540e5211b8652adbf53f9e9576ca0bdfefde439d</hash>
        <hash alg="SHA3-512">8522188568ba3f28c5c821f5392c1e40e08e7bd7086bd2e27fac983a488743fb12754532c8b6818298a6368a5de6916837e39a05a92779b516abdcfaefeb2477</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/commons-io/commons-io@2.15.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://commons.apache.org/proper/commons-io/</url></reference><reference type="build-system"><url>https://github.com/apache/commons-parent/actions</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/IO</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=commons-io.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar">
      <publisher>QOS.ch</publisher>
      <group>org.slf4j</group>
      <name>slf4j-api</name>
      <version>1.7.36</version>
      <description>The slf4j API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">872da51f5de7f3923da4de871d57fd85</hash>
        <hash alg="SHA-1">6c62681a2f655b49963a5983b8b0950a6120ae14</hash>
        <hash alg="SHA-256">d3ef575e3e4979678dc01bf1dcce51021493b4d11fb7f1be8ad982877c16a1c0</hash>
        <hash alg="SHA-512">f9b033fc019a44f98b16048da7e2b59edd4a6a527ba60e358f65ab88e0afae03a9340f1b3e8a543d49fa542290f499c5594259affa1ff3e6e7bf3b428d4c610b</hash>
        <hash alg="SHA-384">2b14ad035877087157e379d3277dcdcd79e58d6bdb147c47d29e377d75ce53ad42cafbf22f5fb7827c7e946ff4876b9a</hash>
        <hash alg="SHA3-384">3bc3110dafb8d5be16a39f3b2671a466463cd99eb39610c0e4719a7bf2d928f2ea213c734887c6926a07c4cca7769e4b</hash>
        <hash alg="SHA3-256">ba2608179fcf46e2291a90b9cbb4aa30d718e481f59c350cc21c73b88d826881</hash>
        <hash alg="SHA3-512">14c4edcd19702ef607d78826839d8a6d3a39157df54b89a801d3d3cbbe1307131a77671b041c761122730fb1387888c5ec2e46bdd80e1cb07f8f144676441824</hash>
      </hashes>
      <licenses>
        <license>
          <id>MIT</id>
          <url>https://opensource.org/licenses/MIT</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.slf4j.org</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/qos-ch/slf4j/slf4j-api</url></reference></externalReferences>
    </component>
  </components>
  <dependencies>
    <dependency ref="pkg:maven/nl.basjes.codeowners/codeowners-reader@0.3.2?type=jar">
      <dependency ref="pkg:maven/org.antlr/antlr4-runtime@4.13.1?type=jar"/>
      <dependency ref="pkg:maven/commons-io/commons-io@2.15.0?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.antlr/antlr4-runtime@4.13.1?type=jar"/>
    <dependency ref="pkg:maven/commons-io/commons-io@2.15.0?type=jar"/>
    <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
  </dependencies>
</bom>
