{
  "bomFormat" : "CycloneDX",
  "specVersion" : "1.4",
  "serialNumber" : "urn:uuid:61cd033e-4d42-4e2f-96bf-2aa3e7af9000",
  "version" : 1,
  "metadata" : {
    "timestamp" : "2023-12-12T10:46:17Z",
    "tools" : [
      {
        "vendor" : "OWASP Foundation",
        "name" : "CycloneDX Maven plugin makeBom compile+provided+runtime+system",
        "version" : "2.7.6",
        "hashes" : [
          {
            "alg" : "MD5",
            "content" : "639c35c7f79c5514f3abe11247999b70"
          },
          {
            "alg" : "SHA-1",
            "content" : "649239e622d8d454bb9ab6fafd6746c85cd11b7d"
          },
          {
            "alg" : "SHA-256",
            "content" : "1e3bc10146c370fe8b8f0a2edcb64329907d61dbc2f445db6ac1034cd3221ce3"
          },
          {
            "alg" : "SHA-512",
            "content" : "894a4b5762d32c88cc58ae1a35a3cc3d45a3c494accadb31b55b5832af65f60c0f8164623521a81de73e3ed6a4c994cca0f1951c8368b9d07fb41c82eaa84bbd"
          },
          {
            "alg" : "SHA-384",
            "content" : "3c385acc773a41056fb58ea27096c8ec86d46d8bd74a2eee9cf0913051981611afc68cf13a88d31af16590a489a97c0e"
          }
        ]
      }
    ],
    "component" : {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.arrow",
      "name" : "arrow-java-root",
      "version" : "14.0.2",
      "description" : "Apache Arrow is open source, in-memory columnar data structures and low-overhead messaging",
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.arrow/arrow-java-root@14.0.2?type=pom",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://arrow.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/arrow"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/arrow-dev/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/arrow"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.arrow/arrow-java-root@14.0.2?type=pom"
    }
  },
  "dependencies" : [
    {
      "ref" : "pkg:maven/org.apache.arrow/arrow-java-root@14.0.2?type=pom",
      "dependsOn" : [ ]
    }
  ]
}